| Claw6 | do i need a DNS running if i want to connect to a vhost? vhost ist X.X.X.1 and client is X.X.X.2 | 00:01 |
|---|---|---|
| Claw6 | i need some information how that vhost thing works | 00:01 |
| Chriz2 | how do i get make? | 00:06 |
| Chriz2 | can someone give me their sources.list? | 00:12 |
| howie | Is there a good chat server in the ubuntu apt database? | 00:54 |
| howie | web based | 00:54 |
| howie | user .. | 00:54 |
| Chriz2 | howie, unrealircd :D | 01:05 |
| Chriz2 | and setup something like pjirc... | 01:05 |
| howie | cool ill check it out ty | 01:06 |
| howie | Chriz2: ya im not finding it in the repository | 01:41 |
| jmarsden | howie: Do something like apt-cache search "irc server" and pick one of those that meets your needs. | 02:23 |
| howie | will an irc server work as a website chat program? | 02:23 |
| jmarsden | Not without a lot of work | 02:25 |
| jmarsden | I didn't realize you were looking for web chat. For web chat, try any CMS platform and look for its chat module... Django maybe? | 02:28 |
| lamont | ScottK: have I mentioned how much pain it is when he revs 4 stable versions? | 02:28 |
| jmarsden | lamont: Wrong channel? | 02:28 |
| ScottK | lamont: I thought the wonder of Git made it all easy. | 02:28 |
| ScottK | jmarsden: Not at all. | 02:28 |
| lamont | jmarsden: nah - just context free | 02:29 |
| jmarsden | Ah, OK... | 02:29 |
| lamont | ScottK: it's more the iterations | 02:29 |
| ScottK | Not free, just well detached. | 02:29 |
| ScottK | jmarsden: Context is in the scrollback it you care. | 02:29 |
| ScottK | it/if | 02:29 |
| Chriz2 | anyone around that can lend a hand with apache?, it keeps saying permission denied =\ | 02:30 |
| Chriz2 | Forbidden | 02:30 |
| Chriz2 | You don't have permission to access / on this server. | 02:30 |
| jmarsden | Chriz2: How did you install it, and what did you do after installing it to configure it? | 02:31 |
| Chriz2 | jmarsden, i changed the root dir to my local home dir (i just prefer it i suppose...), and added suphp, i disabled suphp and i still get this problem | 02:31 |
| jmarsden | Chriz2: Undo your change and learn how to configure virtual hosts so you can set one up for your home dir (if you really must). | 02:32 |
| Chriz2 | jmarsden, well the domain (only one...) is in my home dir :D | 02:33 |
| Chriz2 | i changed 000-default | 02:33 |
| Chriz2 | ive done this before just this time its being a **** lol | 02:34 |
| jmarsden | Well, what are the perms on your home dir? 0755 ? | 02:35 |
| Chriz2 | i tried 777, 755, 700, etc | 02:35 |
| Chriz2 | like wise with public_html | 02:35 |
| jmarsden | If you had left things alone, public_html is for http://example.com/~username/ | 02:36 |
| Chriz2 | jmarsden, i know and i was getting the same problem i am now even doing ip/~chr1831 | 02:37 |
| jmarsden | Might be best to apt-get purge apache2 and then reinstall, then see if it works unmodified... then go forward (more carefully) from there. | 02:38 |
| lamont | ScottK: context is what, 2 days ago? | 02:59 |
| ScottK | lamont: Roughly. | 02:59 |
| lamont | wow. I never did 2.6.4, eh? | 03:00 |
| ScottK | We just handle disjointness better than most. | 03:00 |
| ScottK | IIRC from the release announcement it was never announced. | 03:00 |
| ScottK | ... 2.6.5 ... | 03:00 |
| lamont | yah - scraping the bts for trivials now | 03:01 |
| lamont | ScottK: any thoughts on 504027? | 03:01 |
| lamont | and 528839 | 03:02 |
| lamont | 307186 is just funny | 03:03 |
| ScottK | 504027 conceptually makes sense except for the part about updating the chroot seems a bit of a corner case. | 03:04 |
| * ScottK has to run. | 03:05 | |
| ScottK | Will look in again later. | 03:05 |
| lamont | ta | 03:06 |
| CrawfordComeaux | is there any reason why I shouldn't install enterprise cloud on desktop instead of server? | 03:11 |
| CrawfordComeaux | it's purely for testing right now, not production | 03:11 |
| jmarsden | Well... the cloud virtual machines won't have screens on them. Desktop installs X and expects a GUI; server does not. So you could try it, but why would you prefer a desktop installation in the cloud anyway? | 03:30 |
| jmarsden | See https://help.ubuntu.com/community/ServerFaq#What%27s%20the%20difference%20between%20desktop%20and%20server? | 03:31 |
| lamont | ScottK: E: postfix: python-script-but-no-python-dep ./usr/sbin/postfix-add-filter | 03:34 |
| lamont | pls to be providing a patch. kthx | 03:34 |
| lamont | ScottK: 2.6.5-1 uploaded to debian.. you wanna request the sync? if not, I'll do it tomorrow or wednesday | 03:34 |
| CrawfordComeaux | I'm just testing cloud implementations on my laptop to explore the differences before putting anything into production | 03:38 |
| jmarsden | Ah, sorry I read that backwards... you can install the server or cloud editions onto a desktop PC, sure. | 03:39 |
| uvirtbot | New bug: #414507 in dhcp3 (main) "broken AppArmor profile " [Undecided,New] https://launchpad.net/bugs/414507 | 04:56 |
| wfiuewfew | Hi---I am wondering if Ubuntu server automounts usb hard drives | 05:46 |
| jmarsden | wfiuewfew: It should automount them, just as Ubuntu Desktop does, yes. | 06:05 |
| jmarsden | It's not something most servers have high on their list of requirements, but it should work fine :) | 06:05 |
| wfiuewfew | jmarsden: Thanks, what about internal hard drives? | 06:06 |
| jmarsden | Ubuntu Server is just Ubuntu Desktop with no GUI and a server-optimized kernel... it works fine with internal hard drives, as you'd expect. | 06:06 |
| jmarsden | See https://help.ubuntu.com/community/ServerFaq#What%27s%20the%20difference%20between%20desktop%20and%20server? | 06:07 |
| jmarsden | If you need to know exactly what it does, check /lib/udev/rules.d/60-persistent-storage.rules for the gory details. | 06:10 |
| jmarsden | You can alter that behaviour by copying the file to /etc/udev/rules.d/ or creating your own config file in there. | 06:12 |
| qman__ | ubuntu server does not automount drives, but it does autodetect and assign a device name | 06:18 |
| qman__ | which you can then use to mount the drive | 06:18 |
| jmarsden | If that's the case, I suspect autofs could easily be configured to mount them on demand, or udev rules written to do it. One way or another the capability is there, even if it isn't enabled by default. | 06:34 |
| qman__ | you might be able to, but that functionality is provided by gnome/KDE in the desktop versions of ubuntu | 06:35 |
| qman__ | it's high level and is actually undesirable in many server situations | 06:35 |
| qman__ | however, configuring your fstab or creating a script yourself is a fine way to handle it | 06:36 |
| jmarsden | OK... that would explain it... though why an automounter is seen as being part of a GUI is an interesting question. fstab and scripts are fine, but not fully automatic. And yes, people running around plugging USB hard drives into machines in our server room would generally be considered "undesirable", too :) | 06:40 |
| qman__ | well, besides the security concerns | 06:42 |
| qman__ | automounting a failing device could cause a crash | 06:42 |
| qman__ | and an automounter is fairly unnecessary and a waste of resources in most server environments | 06:43 |
| qman__ | it's also undesirable for RAID devices, since you need to mount them in a particular way | 06:43 |
| CppIsWeird | does fdisk -l list raid5 volumes? | 07:35 |
| jmarsden | It lists partitions. Partitions with type 0xFD are (I think) ones use to create software RAID volumes in Linux. | 07:41 |
| CppIsWeird | hmm, lets try something shorter, (yes/no)? | 07:42 |
| CppIsWeird | :P | 07:42 |
| jmarsden | Define what you mean by "RAID5 volume" if you need that sort of brevity of response. | 07:43 |
| jmarsden | It knows nothing about RAID, so of course it can't know that the 3 or 4 or 5 partitions underlying a given RAID volume are somehow related and show you one RAID5 volume. | 07:44 |
| jmarsden | It can and will display the partitions, as being of type 0xFD | 07:44 |
| jmarsden | If in doubt, try it out :) | 07:44 |
| CppIsWeird | basically i have a raid 5 set up on a computer and i'm trying to find its volume so that i can mount it. how do i find this? it does not appear using fdisk -l or df. | 07:46 |
| jmarsden | "Find its volume"? What do you mean? Is this Software RAID5, or is a hardware RAID controller involved? | 07:47 |
| CppIsWeird | im looking for the device representation that is assigned to the raid 5. software raid 5 using mdadm. | 07:48 |
| jmarsden | OK, what does cat /proc/mdstat output? | 07:49 |
| CppIsWeird | thats it, thanks. :D | 07:49 |
| Barre | i'm trying to use bonnie++, but a lot of the ouput i just a bunch of +++++, what parameters do I need to feed to bonnie++ to do all tests? | 08:08 |
| spiekey | Hello! | 08:13 |
| spiekey | how can i turn off the blank console screensaver? | 08:13 |
| spiekey | i have a ILO and when the server crashed i only see a black screen. | 08:14 |
| Barre | spiekey: i think its: setterm -blank 0 | 08:20 |
| spiekey | Barre: thanks | 08:21 |
| spiekey | can i check it somehow, too? If it was set correctly? | 08:22 |
| macrocosm | is it normal to have the mysql packages not authenticate when doing apt-get update/upgrade? im on ubuntu-server 8.10 ... getting this warning | 08:31 |
| macrocosm | WARNING: The following packages cannot be authenticated! | 08:31 |
| macrocosm | mysql-common mysql-server libmysqlclient16 mysql-client-5.1 mysql-server-5.1 | 08:31 |
| jmarsden | Barre: How long did you let bonnie++ run for? The default should be to run all the tests, but they do take a while. | 08:33 |
| macrocosm | only thing I added to my sources list from the start is deb http://packages.dotdeb.org stable all & deb-src http://packages.dotdeb.org stable all which I added for some gd stuff .. do you think that could be mucking up my mysql? Or should I disregard the warning? | 08:37 |
| jmarsden | macrocosm: I'd guess you picked up mysql 5.1 stuff from there and not from real official Ubuntu repositories. | 08:38 |
| macrocosm | no .. that was installed already .. or do you mean its trying to go there now? | 08:38 |
| jmarsden | It seems to be trying to update the packages it lists... I'm guessing they are from there. | 08:39 |
| Barre | jmarsden: I just did a "RTFM", and learned that the ++++ indecates that the tests completed to fast. I should use the -n paramter to specify more files for the metadata tests.. thanks for the input though :) | 08:39 |
| macrocosm | hmm .. strange .. guess I could just comment those sources out, but that seems a bit antithetical and I need the gd stuff... is dotdeb.org considered pretty safe? | 08:40 |
| jmarsden | OK. Nice when things happen "too fast", usually it's the other way around and hardware is "too slow" :) | 08:40 |
| Barre | true | 08:41 |
| macrocosm | Yeah ... that was it .. updates went clean .. guess I need a better source for the gd extras .. lol it tried to take over! | 09:00 |
| macrocosm | ugh .. apparently the last time I updated a while back ... it changed my php to the dotdeb version which screwed up my pecl and other things cause it didnt update or remove my /usr/bin/php-config to its php-config5 ... ive looked around but cant find a way to go back to the ubuntu version of php without loosing my stuff. Anyone have any ideas on what I should do? | 09:36 |
| macrocosm | nevermind all that .. just going to revert to before the update ... lol | 10:02 |
| acalvo | hi | 10:40 |
| acalvo | I'm trying to configure a samba server which allows anonymous access to a share | 10:41 |
| acalvo | seems so easy | 10:41 |
| acalvo | but I cannot see the share | 10:41 |
| acalvo | nor access directly | 10:41 |
| acalvo | ok, done, was a DNS realted problem | 10:45 |
| smulcahy | hi, i'm having problems getting the forcedeth module to use options at boot-time (using 8.10). I've put them in /etc/modprobe.d/options but they seem to get ignored. | 12:12 |
| smulcahy | has this changed in ubuntu 8.10 server edition or am I missing something? | 12:13 |
| smulcahy | The docs seem to suggest this is the right place to put them | 12:13 |
| stefan___ | y | 13:41 |
| ScottK | lamont: The solution to the homework problem you gave me is just to add python to the postfix depends. Any objection if I just upload it to Ubuntu? | 14:23 |
| twb | postfix depends on python now? | 14:24 |
| ScottK | There's some helper scripts I wrote that are in Python. | 14:25 |
| ScottK | Every Ubuntu install has Python in it anyway, so it doesn't actually add anything. | 14:25 |
| lamont | ScottK: I'll go ahead and roll it, I expect | 14:27 |
| lamont | it's not like it hasn't been broken that way for months | 14:27 |
| lamont | but thanks | 14:27 |
| ScottK | lamont: I can just hit dput and save the trouble of the sync bug. | 14:28 |
| lamont | and meh. I'll look at where it gets used, and maybe just make it a recommends. | 14:28 |
| lamont | heh. whatevah | 14:28 |
| lamont | does recommends fix it? | 14:28 |
| lamont | as in shut lintian up> | 14:28 |
| * ScottK will check | 14:28 | |
| ScottK | lamont: Recommends is sufficient to make lintian happy. | 14:40 |
| * ScottK will upload it that way since my scripts are the only use of Python in the package. | 14:40 | |
| Psi-Jack_ | Just out of curiosity, will ubuntu actually make use of onboard fakeraid, allowing it to use the raid stripes, instead of the actual hdd's directly? | 14:43 |
| * ScottK considers lamont's "whateveh" and uploads. | 14:44 | |
| lamont | ta | 14:45 |
| ScottK | Done. | 14:46 |
| ScottK | If I'm offline when slangasek comes looking for me, "It was a bug fix only update." is my answer. | 14:46 |
| fnky | hi, can anybody give me the name of the virtual package (or list of packages) I'd need in order to get sound (alsa/pulseaudio) working on ubuntu server? | 14:55 |
| Psi-Jack_ | On a server? | 14:55 |
| fnky | yes | 14:55 |
| Psi-Jack_ | First of all, you don't want pulseaudio. That's not good for a server, as it's alpha/beta quality at best. | 14:56 |
| fnky | yeah, I've noticed on my desktop :/ | 14:56 |
| Psi-Jack_ | Second, all you'd need is alsa at the /most/ which is /the/ kernel sound system. | 14:56 |
| Psi-Jack_ | apt-cache search alsa | 14:56 |
| fnky | it seems that's what jaunty uses from what I can tell though | 14:56 |
| fnky | ah | 14:56 |
| Psi-Jack_ | Yeah, most distributions come with pulseaudio these days. It's always the first piece of crap I remove. | 14:57 |
| twb | Psi-Jack_: I remove NM before that | 14:57 |
| fnky | it's been flaky as hell on my notebook | 14:57 |
| fnky | I read the new nokia phone is going to use it | 14:57 |
| Psi-Jack_ | I never use NM, so, it's never setup to be used in the first place | 14:57 |
| Psi-Jack_ | Oh Lovely! | 14:57 |
| fnky | kind of wondering how that's going to work out since that's pretty much its primary function | 14:57 |
| Psi-Jack_ | A phone with a really bad sound mixing engine! Great! | 14:57 |
| Sam-I-Am | meh @ #ubuntu | 15:02 |
| Sam-I-Am | too busy... | 15:02 |
| Sam-I-Am | still cant solve my su/sudo blockage problem | 15:02 |
| giovani | blockage? | 15:03 |
| Sam-I-Am | yeah | 15:04 |
| Sam-I-Am | sudo: setreuid(ROOT_UID, user_uid): Operation not permitted | 15:04 |
| Sam-I-Am | before it even gets a chance to look at the sudoers file | 15:04 |
| Sam-I-Am | as root it works, but thats kinda useless | 15:04 |
| Sam-I-Am | its supposed to read the sudoers from ldap | 15:04 |
| twb | Sam-I-Am: ask #openldap? | 15:06 |
| Sam-I-Am | this is not an ldap problem | 15:06 |
| Sam-I-Am | this is something in ubuntu blocking system calls | 15:07 |
| twb | Sam-I-Am: apparmor? | 15:07 |
| Sam-I-Am | like polkit | 15:07 |
| Sam-I-Am | removed apparmor completely | 15:07 |
| Sam-I-Am | first thing i do | 15:07 |
| Sam-I-Am | this isnt -server, its the desktop ver... | 15:07 |
| ahasenack | Sam-I-Am: can you paste a complete session? | 15:07 |
| Sam-I-Am | figure i hang out enough in here maybe someone'd know | 15:07 |
| jdstrand | Sam-I-Am: please file a bug | 15:07 |
| ahasenack | Sam-I-Am: you can also try to enable debug in sudo's ldap support, it's just a config line | 15:08 |
| Sam-I-Am | yeah i did | 15:08 |
| jdstrand | Sam-I-Am: you'll get more dev involvement | 15:08 |
| jdstrand | ok cool | 15:08 |
| Sam-I-Am | the kernel wont even let sudo get to where it reads from ldap | 15:08 |
| Sam-I-Am | its completely blocked | 15:08 |
| ahasenack | Sam-I-Am: is sudo still suid root? | 15:08 |
| Sam-I-Am | if i'm root i can see it contacting ldap... | 15:08 |
| Sam-I-Am | ues | 15:08 |
| === dendrobates_ is now known as dendrobates | ||
| Sam-I-Am | this is a standard install of karmic... replaced sudo with sudo-ldap | 15:08 |
| jdstrand | Sam-I-Am: this doesn't sound like a default protection mechanism in Ubuntu, but rather a bug | 15:08 |
| Sam-I-Am | even running 'su' it blocked | 15:09 |
| twb | Sam-I-Am: I'm assuming you've read the logs | 15:09 |
| Sam-I-Am | yeah | 15:09 |
| Sam-I-Am | su says this... setgid: Operation not permitted | 15:09 |
| Sam-I-Am | after i enter my password | 15:09 |
| Sam-I-Am | i've been deploying all -server until now, so thats why this hasnt come up... i dont think its ever been an issue on -server | 15:09 |
| twb | Sam-I-Am: shoud just use windows on the desktop ;-) | 15:10 |
| ahasenack | Sam-I-Am: is it still suid root? Is the filesystem mounted in such a way that the suid bit is honored, i.e., not disabled with "nosuid" mount option? | 15:10 |
| Sam-I-Am | twb: ha | 15:10 |
| Sam-I-Am | the root fs is not nosuid | 15:10 |
| Sam-I-Am | some of the others are, but they're temp places and whatnot | 15:11 |
| Sam-I-Am | su is suid root | 15:11 |
| Sam-I-Am | does anyone know if polkit could do stuff like this? | 15:11 |
| Sam-I-Am | its not in -server .. | 15:11 |
| ahasenack | perhaps capabilities | 15:12 |
| ahasenack | you could try ps fauxwZ | 15:12 |
| ahasenack | see if anything is restricted | 15:12 |
| ahasenack | do you see a "+" symbol next to the sudo binary permissions listing in ls -la? | 15:12 |
| Sam-I-Am | nope | 15:13 |
| ahasenack | well, karmic, I'm just guessing now, I don't know what they are doing | 15:13 |
| Sam-I-Am | -rwsr-xr-x 2 root root 140440 2009-06-22 10:14 /usr/bin/sudo | 15:13 |
| Psi-Jack_ | Just out of curiosity, will ubuntu actually make use of onboard fakeraid, allowing it to use the raid stripes, instead of the actual hdd's directly? | 15:13 |
| Psi-Jack_ | I'm curious cause I'm thinking the onboard raid would be a little bit faster than using mdadm softraid directly. | 15:13 |
| Sam-I-Am | i'm going to re-install regular sudo... not sudo-ldap... see if it works that way | 15:13 |
| ahasenack | Sam-I-Am: yeah, I was going to ask if regular sudo worked | 15:14 |
| PhotoJim | Psi-Jack_: it depends on the fakeraid chipset, but I see little advantage to using hardware fakeraid when Linux softraid works so well and performs just as well. and if the controller dies, you still have options to rescue the data. | 15:15 |
| * ahasenack would also prefer softraid | 15:16 | |
| Sam-I-Am | ahasenack: hmm, nope | 15:16 |
| Psi-Jack_ | Hmmm. I see. Well, that's partly why I'd layer on top of it, LVM, so I could do lvm snapshots. | 15:16 |
| Sam-I-Am | lemmie try as a local user vs. ssh | 15:16 |
| ahasenack | Sam-I-Am: did you change stuff in your pam config? | 15:17 |
| Sam-I-Am | yes, to get ldap working | 15:17 |
| ahasenack | Sam-I-Am: sudo-ldap doesn't need pam changes iirc, just nss_ldap | 15:17 |
| ahasenack | hmm, maybe for account | 15:17 |
| Sam-I-Am | yup | 15:17 |
| Sam-I-Am | it shouldnt... | 15:17 |
| Sam-I-Am | just nss stuff | 15:17 |
| ahasenack | Sam-I-Am: so regular sudo is not working either? | 15:18 |
| Sam-I-Am | i have this working fine on ubuntu server boxes... they're ldap auth, sudo, autofs, and kerberos clients with no issues. | 15:18 |
| Sam-I-Am | even karmic. | 15:18 |
| Sam-I-Am | ahasenack: nope... su doesnt work either... and i did enable the root account by adding a password to it | 15:18 |
| ahasenack | Sam-I-Am: so something is wrong with your pam setup it seems | 15:18 |
| ahasenack | Sam-I-Am: can regular users read /etc/ldap.conf? | 15:19 |
| ahasenack | Sam-I-Am: er, make that whatever ubuntu decided to call nss_ldap's ldap.conf | 15:19 |
| Sam-I-Am | yeah, /etc/ldap.conf ... readable | 15:19 |
| ahasenack | Sam-I-Am: no specific user needed to bind to the ldap server? | 15:19 |
| Sam-I-Am | nope | 15:19 |
| ahasenack | Sam-I-Am: does getent passwd list the ldap users? | 15:20 |
| Sam-I-Am | yup | 15:20 |
| Sam-I-Am | i can log in as an ldap user just fine | 15:20 |
| Sam-I-Am | my home dir mounts with autofs/nfs | 15:20 |
| Sam-I-Am | i just cant su or sudo... unless i'm root | 15:20 |
| VirtualDisaster | Sam-I-Am, edited /etc/suders ? | 15:21 |
| Sam-I-Am | kerberos was acting stupid too... host/service keys didnt seem to work... but i havent looked at that yet | 15:21 |
| Sam-I-Am | VirtualDisaster: yeah, it ignores my entries | 15:21 |
| VirtualDisaster | hmm odd | 15:21 |
| Sam-I-Am | the output from running sudo almost seems like it can't even get far enough to read /etc/sudoers | 15:21 |
| VirtualDisaster | Sam-I-Am, ironic part is that it works w/ likewise ... | 15:21 |
| ahasenack | Sam-I-Am: is /etc/passwd 0644? | 15:22 |
| ahasenack | Sam-I-Am: and, about the getent, does it work for a regular user? | 15:22 |
| ahasenack | Sam-I-Am: try making a copy of ls and make it suid root, see if a regular user can run it | 15:22 |
| Sam-I-Am | yeah getent works for all users | 15:23 |
| Sam-I-Am | one sec.. | 15:23 |
| Sam-I-Am | ls seems to work both ways | 15:27 |
| Sam-I-Am | just for fun, i'll change the pam config back to defaults | 15:30 |
| ScottK | mathiaz or whoever is doing the Alpha 5 release notes: You can put updated Postfix to 2.6.5 on the list of new stuff. | 15:30 |
| Sam-I-Am | ahasenack: so... su definitely knows when i enter the root password wrong... it dies with the correct error. when i enter it correctly, thats when i get the setgid error | 15:34 |
| Sam-I-Am | well, its an nsswitch thing | 15:37 |
| Sam-I-Am | putting that file back made sudo/su work again | 15:37 |
| Sam-I-Am | as soon as i put 'ldap' for passwd it breaks | 15:38 |
| Sam-I-Am | returning it to 'files' or 'compat' works fine | 15:39 |
| Sam-I-Am | lets see if sudo-ldap works | 15:39 |
| Psi-Jack_ | compat is actually usually better anyway. | 15:39 |
| Sam-I-Am | well, yeah, but that doesnt do ldap | 15:40 |
| Sam-I-Am | i usually do 'ldap compat' | 15:40 |
| Psi-Jack_ | Hmm | 15:40 |
| Sam-I-Am | sudo-ldap works fine | 15:40 |
| Psi-Jack_ | I dunno. I just simply use NIS these days. | 15:40 |
| Sam-I-Am | well, at least it tries looking at ldap | 15:40 |
| Psi-Jack_ | heh | 15:40 |
| Sam-I-Am | nis is evil | 15:40 |
| Psi-Jack_ | It works, and works well, though. | 15:41 |
| twb | But at least it's an easy evil | 15:41 |
| uvirtbot | New bug: #420729 in squid (main) "squid stable permissions problems with log files" [Low,Incomplete] https://launchpad.net/bugs/420729 | 15:41 |
| Sam-I-Am | i guess... its also insecure and unsupported. | 15:41 |
| Psi-Jack_ | I just hate how netgroups work in nis. | 15:41 |
| Psi-Jack_ | Sam-I-Am, How is it insecure? :p | 15:41 |
| Sam-I-Am | this isnt an ldap problem though | 15:41 |
| twb | Psi-Jack_: are you serious? | 15:41 |
| Psi-Jack_ | Yes, I'm serious. | 15:41 |
| Sam-I-Am | this is something broken in ubuntu | 15:41 |
| twb | Psi-Jack_: NIS allows any user on any machine to get passwords protected by only crypt (or at best, md5) | 15:42 |
| twb | Psi-Jack_: it also allows root on ANY machine on the network to get the privileges of any user, even with root_squash in place | 15:42 |
| Psi-Jack_ | Really? All my passwords are encrypted by blowfish algorithm, in NIS. | 15:42 |
| Psi-Jack_ | twb, As for root, that's normal, anyway. root can pretty much do as he pleases. | 15:43 |
| twb | Psi-Jack_: but root on a contractor's laptop should not be able to read files belonging to the CEO on the fileserver | 15:43 |
| Psi-Jack_ | Hmmm. | 15:43 |
| Psi-Jack_ | So, basically, NIS on laptops, is bad? | 15:43 |
| Psi-Jack_ | Root's not in my NIS database, just uid's > 1000 | 15:44 |
| Psi-Jack_ | >= | 15:44 |
| twb | root doesn't need to be. | 15:44 |
| Psi-Jack_ | And besides. | 15:44 |
| Psi-Jack_ | With a proper firewall setup, it's secured. My NIS server is open to my network, but not to my guest subnet, which is where laptops live. | 15:45 |
| twb | Fair enough | 15:45 |
| twb | If you ultimately trust root on every NIS client, then that problem goes away | 15:45 |
| * Psi-Jack_ nods. | 15:45 | |
| Psi-Jack_ | Presisely. ;) | 15:45 |
| Psi-Jack_ | Though admittedly. | 15:45 |
| Psi-Jack_ | I would prefer an ldap method overall, but it's such a bitch to setup /and/ maintain. Especially when even the ubuntu ldap docs are incomplete. | 15:46 |
| twb | Psi-Jack_: exactly | 15:46 |
| Sam-I-Am | its really not bad to set up | 15:46 |
| twb | Sam-I-Am: yeah, it is | 15:46 |
| twb | Sam-I-Am: compared to NIS, which is turnkey for both server and client side | 15:47 |
| garymc | Hi if i make changes in php.ini do i need to restart httpd or something? | 15:47 |
| Psi-Jack_ | Sam-I-Am, Yes, it is, especially since between openldap 2.0, what I last used, and 2.4, are so different. | 15:47 |
| twb | ldap-auth-config is pretty good for the client side of LDAP, but the server side is a ridiculous pain in the arse. | 15:47 |
| Sam-I-Am | well, yeah | 15:47 |
| Sam-I-Am | things progress over time | 15:47 |
| Psi-Jack_ | Sam-I-Am, And the ubuntu ldap docs, are incomplete, majorly. | 15:47 |
| Psi-Jack_ | It gets down to the ldaputils stuff, and they don't even work because the packages themselves are broken. | 15:48 |
| twb | For example, if you want password aging to work, you apparently have to turn on the ppolicy stuff, or give root binddn to root on every client. | 15:48 |
| Psi-Jack_ | They keep trying to use SASL even though SASL isn't even used. | 15:48 |
| twb | And of course ppolicy + exop is COMPLETELY DIFFERENT to the documented RFC 2307 password aging attributes. | 15:48 |
| Sam-I-Am | ppolicy is fine... it works | 15:49 |
| twb | (Oh, and if you're doing it the raw RFC 2307 way, and forget to give the rootbindpw to the LDAP client, it will silently allow expired passwords.) | 15:49 |
| twb | Sam-I-Am: yes, it's fine, but it's not turnkey. | 15:49 |
| Sam-I-Am | theres a reason sun deprecated NIS years ago | 15:49 |
| twb | Sam-I-Am: I noticed that the post-LTS releases actually documented some of it. | 15:49 |
| Sam-I-Am | even nis+ | 15:49 |
| twb | Sam-I-Am: I don't dispute that | 15:50 |
| Sam-I-Am | its old, insecure, and broken | 15:50 |
| twb | My only point is that compared to NIS, setting up LDAP is a chore. | 15:50 |
| Sam-I-Am | maybe i've just done it too often... | 15:50 |
| twb | I wouldn't even have known ppolicy existed if I hadn't been talking to upstream on #openldap; IIRC it isn't mentioned at all in the LTS Ubuntu server guide. | 15:51 |
| Sam-I-Am | ldap isnt easy at first, but it gets much better | 15:51 |
| Psi-Jack_ | heh | 15:52 |
| Psi-Jack_ | Sam-I-Am, So, can you look at the 9.04 ldap docs, and correct it? ;) | 15:52 |
| Sam-I-Am | i think the ubuntu guides need a bit of work... i have a ton of docs here at work i wrote for building redundant ldap servers from the ground up with ppolicy, sudo, autofs, etc... trying to get them integrated | 15:52 |
| Psi-Jack_ | Or send me your docs? ;) | 15:52 |
| Sam-I-Am | however, one thing about ldap and all the ancillary stuff... no one way satisfies everyones needs :/ | 15:53 |
| Sam-I-Am | Psi-Jack_: yeah... i can | 15:53 |
| Psi-Jack_ | Cool! Email me them to erenfro@gmail.com I'd be greatly appreciative. ;) | 15:53 |
| Sam-I-Am | they just need to be sanitized to remove employer-specific stuff | 15:53 |
| Psi-Jack_ | Sometime soon, I'm going to try to convince my employers to let me setup ldap, so we can add one user, once, instead of on EACH server. | 15:53 |
| twb | Psi-Jack_: except if you need, say, squid to talk to LDAP securely :-( | 15:54 |
| Psi-Jack_ | No, I don't. | 15:54 |
| Psi-Jack_ | I just need it for system authentication primarily. | 15:54 |
| Psi-Jack_ | I'll be SURE to use it at my home network of ~20 systems, but at work, it'll be for about ~14 dedicated servers. | 15:55 |
| twb | We have a *really* exciting way to update squid's digest password database, instead of setting up samba as a PDC purely to be a LDAP<-->squid bridge... | 15:55 |
| Psi-Jack_ | Samba inegration would be useful too. ;) | 15:55 |
| Psi-Jack_ | Both at home, and work, since we annoyingly have a few Windows servers coming in from a company we now own. ;) | 15:56 |
| Sam-I-Am | my docs have samba too | 15:56 |
| Sam-I-Am | and heimdal kerberos | 15:56 |
| Sam-I-Am | its all there :) | 15:56 |
| Psi-Jack_ | Perfect. | 15:56 |
| Psi-Jack_ | That's the exact setup I wanted. | 15:56 |
| Sam-I-Am | you'll need to tweak stuff for your needs... | 15:56 |
| Psi-Jack_ | Of course. | 15:56 |
| Sam-I-Am | and i cant provide the exact ldifs | 15:56 |
| Psi-Jack_ | I know the ldap-migration tools stuff enough to generate the initial base structure. | 15:57 |
| Sam-I-Am | i just start from scratch with a base ldif | 15:57 |
| Sam-I-Am | keeps the junk out | 15:57 |
| Sam-I-Am | bbiab.. | 15:57 |
| Psi-Jack_ | Yeah. | 15:58 |
| Psi-Jack_ | I trim the fat, easily and quickly | 15:58 |
| mathiaz | kirkland: https://wiki.ubuntu.com/ServerTeam/Membership | 17:04 |
| uvirtbot | New bug: #422177 in nut (universe) "nut init isn't functional at all " [Undecided,New] https://launchpad.net/bugs/422177 | 17:41 |
| quantum | can anyone help me with a reverse DNS issue. client machines "nslookup" can't find server name address | 17:53 |
| quantum | posted reverse DNS on http://pastebin.ca/1550498 | 17:53 |
| soren | quantum: What exactly are you trying? Can you post nslookup output? | 18:26 |
| === xikteny_ is now known as xikteny | ||
| Sam-I-Am | hmm, i think sudo-ldap's binding to gnutls in karmic is bad. | 18:36 |
| * mneptok arrives unclad like a radiant dawn | 19:15 | |
| Belloto | anyone knows howto change the bluetooth device name of my server from command line? (i.e. the name my telephone sees when searching for bluetooth devices) ... is there a way to change it NOT changing the computer host name? | 19:40 |
| giovani | Belloto: you'll probably get better support in #ubuntu -- as bluetooth isn't a typical server service (and arguably shouldn't be) | 19:41 |
| giovani | but a 2 second google returned the answer | 19:41 |
| giovani | device { name "Your Name Here"; } in hcid.conf | 19:42 |
| giovani | it seems you can also use %h and %d in there for hostname and deviceid, respectively | 19:42 |
| Belloto | currently I see "ubuntu-0" as my server bluetooth name ... you mean I should change %h and %d by "Belloto", for example? | 19:45 |
| giovani | Belloto: no, I mean you should do exactly what I wrote | 19:45 |
| giovani | and %h and %d can be used inside of that string to expand -- this is all documented | 19:46 |
| giovani | how is this #ubuntu-server related? | 19:46 |
| Belloto | thanks giovani, can you pass me that url? | 19:46 |
| giovani | there's no url | 19:46 |
| giovani | please READ what I wrote here | 19:47 |
| Belloto | "server related"? well, this is an image http server which is gonna send some photos by bluetooth to people passing nearby computer center | 19:47 |
| giovani | bluetooth just isn't a server service ... but, fine -- I've done the research and provided the answer | 19:47 |
| Belloto | images come from people that send them to server by bluetooth | 19:47 |
| giovani | it's documented in the config | 19:47 |
| giovani | so I'd recommend you read it | 19:48 |
| guntbert | Belloto: it seems that the comment #local device name means just what you want, but it does'nt hurt to try anyway :-) | 19:49 |
| Belloto | I was just asking what did your google search look like ... thats what I meant asking you for the url ... but dont wanna bother you, thanks man | 19:49 |
| Belloto | of course I googled before entering her | 19:50 |
| giovani | Belloto: my first (and only google search) was "bluetooth linux name" | 19:50 |
| giovani | the very first result | 19:50 |
| giovani | is a commented config file on gentoo's wiki | 19:50 |
| giovani | explaining exactly how to do it | 19:50 |
| giovani | the 2nd result is the manpage for the config | 19:51 |
| giovani | and the 3rd is a blog post explaining how to do it again | 19:51 |
| giovani | or rather, the 3rd is how to manually change your deviceid | 19:51 |
| giovani | not the name | 19:51 |
| firecrotch | !google | giovani | 19:54 |
| ubottu | giovani: While Google is useful for helpers, many newer users don't have the google-fu yet. Please don't tell people to "google it" when they ask a question. | 19:54 |
| giovani | firecrotch: I didn't, please don't forward incorrect information to me like that | 19:55 |
| giovani | I provided him with the answer, and pointed him to the config | 19:55 |
| giovani | he didn't seem happy with being handed the answer | 19:56 |
| firecrotch | giovani: You're coming across as an elitist jackass though while doing it | 19:56 |
| erewnoh | sorry to bother, but will ubuntu server be good to use as a proxy/file server for a home network? | 19:56 |
| firecrotch | if that wasn't your intent, then I apologize | 19:56 |
| giovani | firecrotch: I don't see how your opinion relates to sending me some notice about "telling users to google" | 19:57 |
| erewnoh | I plan on streaming video to my PS3, about to return home from Iraq, angry to find out Hulu has blocked PS3 | 19:57 |
| giovani | when that clearly wasn't my first response -- I only went into detail about google after he explicitly asked about it | 19:57 |
| giovani | erewnoh: an ubuntu server can definitely do all of that | 19:57 |
| firecrotch | "I found it in 2 seconds with google" | 19:57 |
| giovani | firecrotch: that's relevant, imo | 19:57 |
| giovani | if it's a 10-minute google hunt, I'm not likely to mention it | 19:58 |
| giovani | but it's insanely well documented | 19:58 |
| erewnoh | sweet. I know this probably isn't the room, but could you go over hardware I'd need? plan on purchasing it all and having it sent home, want to make sure I buy the right things | 19:58 |
| erewnoh | my internet is very slow otherwise I'd plug away on google. as it is, I'd rather rip my fingernails out | 19:58 |
| giovani | erewnoh: hardware for what exactly? I'm not sure what you're asking | 19:58 |
| firecrotch | giovani: let's just drop it, this isn't really the place for this conversation, regardless | 19:58 |
| erewnoh | for a home network / server setup | 19:59 |
| giovani | erewnoh: I don't know what kind of answer you want ... I definitely can't build a server for you over irc | 19:59 |
| giovani | nearly any hardware will do -- if you're looking to buy a computer to run linux, it's best to google around and make sure everything you'll be using is supported, but beyond that, there isn't a simple answer I (or anybody else) can provide on what to buy | 20:00 |
| giovani | most people I know would use an old desktop you have laying around, or a friend's machine, etc | 20:00 |
| erewnoh | no no, don't need the server built. the way I have it set up now is all my game consoles are behind a hub connected to my router. All computers connect directly to the router. can I just plug the server into the router and set all other systems to proxy through it or do I need more? | 20:01 |
| giovani | erewnoh: you specifically want to proxy hulu traffic? I don't know what protocol hulu uses | 20:01 |
| giovani | there shouldn't be any special hardware needed for the project -- but, the software side could be complex | 20:02 |
| erewnoh | from what I read I just need to rip out the ps3 specific header? I want to proxy it all though, use as a firewall | 20:02 |
| giovani | ok, a firewall and an application proxy aren't at all the same thing | 20:02 |
| giovani | if it's an HTTP header, then you need an HTTP proxy | 20:02 |
| giovani | if it's some weird video streaming protocol header, then you may or may not be able to find software to proxy it, and strip out that header | 20:03 |
| giovani | you'd need to do some research on how exactly other people have done this (it sounds like you've already found some) | 20:03 |
| erewnoh | ah, I must have read it wrong then, sorry to bother. Looked at squid and thought it could do all | 20:04 |
| giovani | squid may very well be able to do it all | 20:04 |
| giovani | I'm saying that I don't know what protocol hulu is using for their streaming -- so you should look into it | 20:04 |
| erewnoh | i'll keep plugging away. appreciate the help, also nice to know don't need to spend a lot of money to get it set up | 20:04 |
| erewnoh | will do, thanks giovani | 20:05 |
| firecrotch | erewnoh: I believe that hulu uses the RTMP protocol | 20:05 |
| erewnoh | googling | 20:06 |
| erewnoh | I apologize, I'm very stupid about all this | 20:06 |
| giovani | well the first question is -what- needs to be proxied/modified | 20:06 |
| firecrotch | erewnoh: No need to apologize :) | 20:06 |
| giovani | if only the HTTP requests need to be, then you don't need another proxy for a media protocol | 20:06 |
| erewnoh | the website I read said the header just needs to be replaced | 20:07 |
| erewnoh | so the ps3 looks like it is a desktop | 20:07 |
| giovani | ok -- you need to find out what header they're talking about | 20:07 |
| erewnoh | moment, pulling the site up | 20:07 |
| erewnoh | the user agent string | 20:07 |
| giovani | ok, again :) | 20:07 |
| giovani | many protocols have user agent strings | 20:07 |
| giovani | I know many media streaming protocols do, as does HTTP | 20:08 |
| erewnoh | waiting for my bookmark to load, it had the specifics there | 20:08 |
| erewnoh | http://tinyurl.com/l3s2hn | 20:09 |
| giovani | ok, so, it's the HTTP header you're editing | 20:10 |
| giovani | and they provide you will full instructions :) | 20:10 |
| giovani | sounds like a good resource if you just want to do this | 20:10 |
| erewnoh | yes, I was just more concerned about the server itself | 20:10 |
| giovani | concerned about what, specifically? | 20:11 |
| firecrotch | erewnoh: you won't need a very powerful machine to do that at all | 20:11 |
| erewnoh | I can just plug it into my router, set it up, and won't need to buy a better switch or anything? | 20:11 |
| giovani | nope | 20:11 |
| giovani | nope to the better switch, that is | 20:11 |
| erewnoh | main concern is someone from tigerdirect tried selling me on a thousand dollar server, a 75 dollar switch, so on | 20:12 |
| giovani | especially if hulu doesn't use http for the media streaming | 20:12 |
| giovani | erewnoh: no need for that at all | 20:12 |
| erewnoh | alright, appreciate it. military doesn't pay all that way, look to save money where I can | 20:12 |
| giovani | yeah, I'd definitely try this with an incredibly low-end box | 20:12 |
| giovani | and see if it performs well enough | 20:12 |
| giovani | i.e. grab some old desktop you almost ditched | 20:13 |
| erewnoh | perfect. have an old hp desktop wasting space | 20:13 |
| firecrotch | erewnoh: I would say that a pentium 3 or better would work | 20:13 |
| erewnoh | i'm sure when I get home and think of other stuff to do I'll have more questions. really appreciate the help | 20:14 |
| firecrotch | erewnoh: I'll most likely be around, if not here, in #ubuntu-offtopic, feel free to come find me later | 20:15 |
| erewnoh | will do, thanks | 20:15 |
| firecrotch | erewnoh: no problem :) | 20:16 |
| mortuis99 | i have used ubuntu desktop for a while and am wanting to try server. what do i need to know? | 20:20 |
| giovani | mortuis99: ... that it's for servers (or stripped-down desktops) | 20:20 |
| giovani | it's the same operating system, with a different default set of packages from the ubuntu desktop install | 20:21 |
| giovani | so, almost nothing is different, other than its target user base | 20:21 |
| mortuis99 | is it commandline or gui? | 20:22 |
| mortuis99 | i have a PIII machine and it can use 2 CPUs but has just one installed which version do i ise the 32 or 64 bbbbbbit? | 20:22 |
| giovani | it doesn't provide a gui | 20:23 |
| giovani | mortuis99: pentium 3s are 32-bit | 20:23 |
| mortuis99 | is it possible to run with a gui or is it commandline only? | 20:24 |
| thowland | you can add a gui later, but if you're doing that you might as well install desktop | 20:24 |
| giovani | mortuis99: if you install a gui, you're not going to be supported by #ubuntu-server -- it's definitely not recommended | 20:27 |
| mortuis99 | is their a guide to running it commandline? | 20:27 |
| giovani | a guide to what, specifically? | 20:27 |
| firecrotch | mortuis99: what purpose is this computer going to have that you're interested in installing Ubuntu Server Edition? | 20:28 |
| mortuis99 | alll i really wanna do is store data like movies and vids for in house use.. can i just use the desktop version? | 20:28 |
| giovani | mortuis99: you can do that from a desktop, yes | 20:28 |
| firecrotch | mortuis99: You can certainly use the desktop version for that | 20:28 |
| firecrotch | mortuis99: for someone who is relatively new to the whole thing, which I assume you are, it may be more efficient for you to use the desktop version | 20:29 |
| === Belloto is now known as Bellot | ||
| === Bellot is now known as Belloto | ||
| mortuis99 | kewl thanks again to the UBUNTU community for the great help :-) | 20:49 |
| Psi-Jack_ | Wow. | 20:50 |
| Psi-Jack_ | Google's having issues. | 20:50 |
| giovani | noticed that too? | 20:50 |
| firecrotch | Psi-Jack_: What kind of issues? | 20:50 |
| Psi-Jack_ | Heh. | 20:50 |
| Psi-Jack_ | gmail's completely down. | 20:50 |
| giovani | yep | 20:50 |
| Psi-Jack_ | Someone typed google in google! | 20:50 |
| mathiaz | ahasenack: hey - if the bzr package branches for smartpm exists, I'd recommend to use them | 20:51 |
| Psi-Jack_ | Their IMAP works fine, but not their web interface. | 20:51 |
| mathiaz | ahasenack: otherwise just add a debdiff | 20:51 |
| ahasenack | mathiaz: I have no idea if they exist. I didn't find them in free's code.launchpad.net listing | 20:51 |
| ahasenack | mathiaz: and I don't know how to generate a debdiff, is a "diff -uNr old/ new/" enough? | 20:52 |
| mathiaz | ahasenack: https://code.launchpad.net/ubuntu/+source/smart | 20:53 |
| mathiaz | ahasenack: ^^ doesn't show any packaging branches | 20:53 |
| mathiaz | ahasenack: https://wiki.ubuntu.com/PackagingGuide/Recipes/Debdiff | 20:54 |
| mathiaz | ahasenack: ^^ will walk you through preparing a debdiff | 20:54 |
| ahasenack | mathiaz: thanks | 20:54 |
| mortuis99 | the motheboard in the server can support up to 8 ultra ATA HDs with 9.04 have any problems with that? | 20:56 |
| giovani | mortuis99: nope ... but that's very rare -- 8 UATA driveS? | 20:57 |
| mortuis99 | yeah has 4 connector slots | 20:58 |
| giovani | ok | 20:59 |
| giovani | presuming the controller is supported by linux, sure | 20:59 |
| mortuis99 | THAT is the question | 20:59 |
| guntbert | mortuis99: not a "server answer" but you can of course try it out with the live CD | 21:00 |
| mortuis99 | ok | 21:01 |
| giovani | mortuis99: no, the question you asked was if ubuntu would support 8 UATA HDs | 21:03 |
| giovani | mortuis99: we can't help figure out if your server's controller is supported without more information | 21:03 |
| mortuis99 | lemme gee MOBO manual | 21:04 |
| mortuis99 | the mobo is the ABIT VP6 | 21:16 |
| === mdz_ is now known as mdz | ||
| mortuis99 | im not sure the controller that is on the mobo | 21:20 |
| giovani | neither am I | 21:23 |
| giovani | I suggest you research a bit on it | 21:23 |
| giovani | should be relatively easy to find | 21:23 |
| mortuis99 | i thin it is the Ultra DMA 100/RAID | 21:26 |
| mortuis99 | High Point HPT370 IDE Controller | 21:26 |
| Psi-Jack_ | Well now. gmail is /still/ down. | 21:29 |
| Psi-Jack_ | That's very long for anything google to be down! | 21:29 |
| giovani | Psi-Jack_: their emergency outage page shows that they won't have an ETA for an hour | 21:34 |
| giovani | imap is up though | 21:34 |
| giovani | everyone smart uses imap | 21:34 |
| Psi-Jack_ | Yep. I know, IMAP's working. | 21:34 |
| Psi-Jack_ | But, all our CSR team is supposed to be using the web interface, at most. LOL | 21:36 |
| Psi-Jack_ | IMAP usage, since we're not QoSing right now, was choking the office bandwidth. ;) | 21:37 |
| giovani | you're using gmail for corporate stuff? | 21:38 |
| giovani | ouch | 21:38 |
| Psi-Jack_ | Yes. Yes. I /know/ and I've warned them repeatedly, it's NOT a good idea. EVER. ;) | 21:38 |
| giovani | what industry is the company in? | 21:38 |
| Psi-Jack_ | They think it's too much work to administer their own mail servers, and I'm like, Dude.. You got me. I can do it in seconds. | 21:38 |
| Psi-Jack_ | giovani, SaaS. :) | 21:39 |
| giovani | what kind of software then? | 21:39 |
| Psi-Jack_ | We deal with hotelier channel management, yielding rates to expedia, travelocity, orbitz, etc. | 21:39 |
| giovani | ah | 21:39 |
| giovani | well if you're in SaaS, I guess you use SaaS eh? :) | 21:40 |
| Psi-Jack_ | Heh, apparently so! | 21:40 |
| giovani | drank a little too much of the koolaid | 21:40 |
| Psi-Jack_ | LOL | 21:40 |
| ahasenack | mathiaz: my case is a bit more complicated than that wiki page about debdiff unfortunately | 22:19 |
| ahasenack | it goes nuts apparently | 22:20 |
| Sam-I-Am | ahasenack: remember my problem from this morning? | 22:20 |
| ahasenack | debdiff intrepid/smart_1.2-0ubuntu1.8.10.1.dsc landscape/smart_1.2-0ubuntu1.9.04.1.dsc | 22:20 |
| ahasenack | I get even the wrong order in the diff lines | 22:20 |
| ahasenack | Sam-I-Am: yeah, what was it? | 22:20 |
| Sam-I-Am | well, i configured a jaunty box same way... works fine | 22:20 |
| Sam-I-Am | so its definitely a karmic problem | 22:20 |
| ahasenack | and it invents a "smart.orig" directory that I don't have | 22:20 |
| ahasenack | Sam-I-Am: ok, would be cool if you could pinpoint it | 22:21 |
| Sam-I-Am | also found out another problem... sudo w/ ldap won't connect with TLS | 22:21 |
| Sam-I-Am | which smells like another gnutls problem | 22:21 |
| ahasenack | Sam-I-Am: yeah, I was just about to say that | 22:21 |
| ahasenack | gnutls-- | 22:21 |
| Sam-I-Am | so thats another issue i need to look into | 22:21 |
| ahasenack | what's the point of having a better license if it doesn't work | 22:21 |
| Sam-I-Am | however, thats not the problem with su/sudo getting those weird messages | 22:21 |
| Sam-I-Am | so now that i've eliminated some stuff i'm going to drill down... also curious if it affects karmic server | 22:22 |
| ahasenack | the openldap maintainer already said gnutls was just bad to work and develop with | 22:22 |
| Sam-I-Am | ita awful | 22:22 |
| Sam-I-Am | its | 22:22 |
| Sam-I-Am | i came across a critical functionality bug about a month ago that was only recently fixed... with a patch provided in the report. | 22:23 |
| Sam-I-Am | howard chu from openldap is who got the ball rolling and it didn't seem to speed things up | 22:23 |
| ahasenack | if you get too many problems with tls, you might be better off rebuilding it yourself with openssl | 22:25 |
| ahasenack | but that can bring library hell down upon you | 22:25 |
| mathiaz | Sam-I-Am: at least try to report the bug to upstream (openldap or gnutls) | 22:25 |
| mathiaz | Sam-I-Am: we can't go back to openssl - so better debug/improve the gnutls support | 22:26 |
| Sam-I-Am | mathiaz: yeah, licensing sucks :/ | 22:27 |
| Sam-I-Am | openssl is clearly a better product | 22:27 |
| mathiaz | ahasenack: seems like you managed to fix your debdiff problem? | 22:27 |
| ahasenack | mathiaz: not really | 22:28 |
| Sam-I-Am | i'm going to install karmic server now... try to find the same bug w/ gnutls... then try a version compiled against openssl. | 22:28 |
| ahasenack | mathiaz: I have two source packages, I downloaded them and fed the .dsc files to debdiff | 22:28 |
| ahasenack | mathiaz: the output is insane | 22:28 |
| mathiaz | Sam-I-Am: may be. But we respect everyone licensing choice. | 22:28 |
| ahasenack | mathiaz: the one I attached was easier, as the difference between jaunty and landscape-branch is small | 22:28 |
| ahasenack | but the rest... | 22:28 |
| ahasenack | intrepid, I mean | 22:28 |
| Sam-I-Am | the other issue is those weird errors... what i CAN say is that as soon as i put 'ldap' for passwd in /etc/nsswitch.conf, it breaks. soon as i change it back to 'files' or 'compat' its fine. | 22:28 |
| ahasenack | I have no idea how to give you a diff | 22:28 |
| ahasenack | Sam-I-Am: I wouldn't use "compat" | 22:29 |
| Sam-I-Am | well, even files works | 22:29 |
| mathiaz | ahasenack: is this because there is a new upstream version? | 22:29 |
| ahasenack | Sam-I-Am: brings back some vague recollections about issues | 22:29 |
| Sam-I-Am | putting 'ldap' anywhere gives those issues | 22:29 |
| Sam-I-Am | nsswitch.conf is part of base-files iirc... | 22:29 |
| mathiaz | ahasenack: have you build the source package correctly? | 22:29 |
| ahasenack | Sam-I-Am: initgroups() is something that springs to mind as not bothering with the order in there | 22:29 |
| mathiaz | ahasenack: what about the size of the diff.gz? | 22:29 |
| Sam-I-Am | thats kinda like the error i was getting... | 22:30 |
| ahasenack | mathiaz: I downloaded both sources with dget | 22:30 |
| ahasenack | mathiaz: no need to build, right? It's already built | 22:30 |
| mathiaz | ahasenack: agreed. | 22:30 |
| ahasenack | mathiaz: ran this: ebdiff intrepid/smart_1.2-0ubuntu1.8.10.1.dsc landscape/smart_1.2-0ubuntu1.9.04.1.dsc | 22:30 |
| mathiaz | ahasenack: I'm onto something else right now | 22:31 |
| ahasenack | mathiaz: the simpler diff -uNr intrepid/smart-1.2 landscape/smart-1.2 generates a much more comprehensible output | 22:31 |
| mathiaz | ahasenack: I'll get back to you later if I can | 22:31 |
| ahasenack | mathiaz: np, I'm off for the day | 22:31 |
| mathiaz | ahasenack: try to ask in #ubuntu-motu or #ubuntu-devel | 22:31 |
| Sam-I-Am | hopefully i'll have this narrowed down by tomorrow... | 22:31 |
| ahasenack | Sam-I-Am: did you try the suid root ls trick? | 22:32 |
| Sam-I-Am | ls worked fine | 22:32 |
| Sam-I-Am | its just su/sudo best i can tell | 22:32 |
| ahasenack | well, good luck | 22:33 |
| ahasenack | seems to be well inside the system | 22:33 |
| Sam-I-Am | yeah :/ | 22:33 |
| ahasenack | cya | 22:33 |
| Sam-I-Am | thx | 22:33 |
| === bc_ is now known as bc | ||
| smoser | soren, http://www.zlib.net/pigz/ and http://compression.ca/pbzip2/ | 23:15 |
| lamont | ScottK: HTH did it get to be a 1.3MB package, I wonder? (amd64) | 23:19 |
| soren | smoser: $ apt-cache search pigz | 23:20 |
| soren | pigz - Parallel Implementation of GZip | 23:20 |
| soren | [2009-09-01 17:20:44] soren@ralph:~/src/eucalyptus$ | 23:20 |
| soren | \o/ | 23:20 |
| soren | Go for it :) | 23:20 |
| soren | smoser: Oh. Do you think it'll be able to extract to stdout? | 23:21 |
| soren | smoser: Oh, the description also suggests that it's only for compression. | 23:21 |
| smoser | yeah.. .i sweare there was one for uncompression though.. | 23:21 |
| smoser | and htis does (as you thought) write extra metadata | 23:22 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!