[00:00] <blizzkid> now I need to refine it so that it can only run those two scripts without password
[00:02] <blizzkid> qman__: would that be dhcpd ALL=(martijn)NOPASSWD: /etc/dhcp3/script1, /etc/dhcp3/script2 ?
[00:04] <blizzkid> yup, that did the trick
[00:05] <blizzkid> well, qman__ and mdeslaur thanks for the help and patience, I'm going to bed now that it works
[00:08] <qman__> glad you got it sorted
[00:09] <blizzkid> qman__: I'll write a blogpost on it, maybe it should get documented somewhere :)
[00:09] <blizzkid> well, ttyl
[00:15] <Orfeous> hi again :)
[00:16] <Orfeous> it worked to bootup on livecd and make a bootable usb disk for my usb stick :)
[00:16] <Orfeous> must be something wrong on those guides that i was talking about
[01:08] <Orfeous_> damn..
[02:06] <twb> FYI (re discussion yesterday), Ubuntu's packaging of the server component of Zimbra (ZCS) has been shelved because the guy who was interested in it has left Canonical.
[02:15] <pmatulis> twb: what was the guy's name?
[02:15] <twb> It was a little confusing.
[02:15] <twb> I wrote to Brian Thomason, and I got a reply back from that address.
[02:16] <twb> So either someone else wrote the reply and Brian left, or Brian wrote the reply and someone else (unnamed) left.
[02:19] <pmatulis> brian didn't leave
[02:19] <twb> Righto.
[03:20] <artillerytx_> hey im in the rescue mode and im trying to make a copy of a HD how do i go about mounting it and copying it
[03:25] <twb> artillerytx_: first of all, do you want to copy only the files, or do you want to preserve the entire filesystem in a bit-for-bit copy?
[04:31] <artillerytx_> twb: bit for bit sorry i was away for a min
[04:32] <artillerytx_> what is the easiest way to get data off of a HD if its not showing up on the system or maybe some tricks or something
[04:33] <artillerytx_> it keeps randomly showing up in the bios
[04:39] <JanC> artillerytx_: your HDD is randomly showing up in the BIOS?
[04:40] <JanC> first of all check if all hardware connectors are properly attached (unplug & replug the hardware, if you can)
[04:40] <JanC> and if supported & still possible, see what SMART says about the disk
[04:40] <artillerytx_> k
[04:41] <JanC> (to me it sounds like hardware failure, if it's only a bad connector you're lucky, otherwise
[04:41] <JanC> ...)
[04:41] <artillerytx_> yeah i know
[04:41] <artillerytx_> sucks
[04:42] <JanC> you can try to boot using a rescue disk
[04:42] <artillerytx_> yeah
[04:42] <artillerytx_> but it doesn't see the HD
[04:43] <artillerytx_> i was getting a read only file format warning and then I/O errors
[04:43] <artillerytx_> i think the drive is going out
[04:44] <artillerytx_> but i was hoping i could copy some files before it finally died
[04:44] <JanC> maybe try until it works a bit ;-)
[04:45] <JanC> I had that once with a 1 month old drive, fortunately it was part of a RAID 1  ;)
[04:45] <artillerytx_> yeah i should of done a raid setup and im stupid for not doing it
[04:45] <JanC> backups are even better of course
[04:54] <artillerytx_> so there is nothing i can do about this
[04:54] <artillerytx_> sucks
[05:00] <artillerytx_> i guess i will let it sit and try tomorrow
[06:26] <artillerytx> if my hard drive shows up in the bios for a little bit then disappears its dead ?
[07:40] <milestone> hi all
[07:40] <milestone> i am looking for mod-proxy-ajp inside of the jaunty repository
[07:40] <milestone> but there seems to be none
[07:47] <jmarsden> milestone: It's in apache2.2-common , isn't it?? :)
[07:47] <milestone> let me chick
[07:47] <milestone> check
[07:47] <milestone> sorry
[07:48] <milestone> did an apt-file search mod_proxy_ajp but could not find it
[07:48] <jmarsden> /usr/lib/apache2/modules/mod_proxy_ajp.so is in apache2.2-common on my system...
[07:48] <milestone> jmarsden: you are right
[07:48] <twb> What's the ajp part?
[07:48] <milestone> sorry for the confusion
[07:49] <milestone> yes the module
[07:49] <milestone> is in the common package
[07:50] <jmarsden> twb: apache JServ Protocol.  http://httpd.apache.org/docs/2.2/mod/mod_proxy_ajp.html
[10:00] <Orfeous> hey!
[10:16] <Orfeous> what is the big difference between B
[10:17] <Orfeous> VPN bridging and VPN routing
[10:17] <ssm> Orfeous: briding is layer 2, and routing is layer 3 traffic?
[10:17] <_ruben> brige: subnet_a - vpn - subnet_a ... route: subnet_a - vpn - subnet_b .. which indeed, is a matter of layer2 versus layer3
[10:19] <Orfeous> ah, thanks for the answer!
[10:20] <Orfeous> i'm thinking of setting up a VPN tunnel between my server at home and my girls place.. but i dont know if its possible and how to do it. i have seen that some people have a VPN key generator internet bank-kind of thing :) for their clients to connect to their vpn servers
[10:24] <_ruben> openvpn is a nice app to start playing with vpns
[10:37] <Orfeous> _ruben, ok.. any guides howto? :)
[10:37] <atomic_1> +1 for OpenVPN, you can easily setup a openvpn infrastructure with a pre-shared key
[10:38] <atomic_1> it's the fastest
[10:38] <atomic_1> and the easyrsa scripts are also very easy to work with
[10:39] <atomic_1> http://www.techimo.com/forum/linux-unix/176687-howto-openvpn-ubuntu-dapper.html
[10:39] <atomic_1> that's one of the better guides
[10:42] <Orfeous> ok, thank you..
[10:42] <Orfeous> but in my wireless router there are many VPN stuff.. whats that?
[10:44] <_ruben> could be ipsec based vpn stuff, dont know your router
[10:47] <Orfeous> hmm..
[10:47] <Orfeous> SysCp verkar ju treevligt :)
[10:49] <Orfeous> ops
[11:17] <atomic_1> Orfeous: i just read what you wrote, that's probably a VPN Passthrough feature that many routers have, its for IPSEC and L2TP
[11:27] <Orfeous> atomic_1, ok.. is that something i must setup on my router at home?
[11:27] <Orfeous> my server is behind that router
[11:27] <Orfeous> and now i am behind my gf's router
[11:28] <Orfeous> and i want to connect to my server or/and another computer on the same subnet
[11:28] <atomic_1> if you use default settings with OpenVPN, all you need to do on both routers is port forward tcp 1194 to the machines that use OpenVPN
[11:29] <atomic_1> so, setup OpenVPN as a server at your site
[11:29] <atomic_1> and just make your gf's site a client
[11:29] <atomic_1> that link i provided has all the info you need
[11:32] <qwe_> hi. I want a computer on my network also to have the internet. I've setup the IP masquerading with ufw as stated here https://help.ubuntu.com/9.04/serverguide/C/firewall.html , but it doesn't work. Any guidence please?
[11:35] <Orfeous> atomic_1, i think it feels more secure to let me generate a password everytime i want to connect to the VPN
[11:35] <Orfeous> like the hardware keygenerator blabla.. :)
[11:35] <Orfeous> looks like a small calculator
[11:37] <Orfeous> atomic_1, i have the Dlink DIR-615 router at my GF and in the webadmin interface there are under Advanced-tab a portforwarding and application rules tabs.. and under application rules there are ipsec and PPTP as selectable rules :)
[11:38] <Orfeous> and they uses port 1723 for PPFT
[11:38] <Orfeous> ipsec uses port 500
[11:45] <atomic_1> as i said, you dont need those if you are using OpenVPN
[11:45] <atomic_1> as far as passwords go, you cannot possibly say that they are more secure than a digital certificate ;)
[11:45] <atomic_1> besides, you can assign a password to the cert
[11:45] <atomic_1> when you generate it
[11:54] <Orfeous> ah, ok :)
[11:58]  * soren lucnhes
[12:15] <rags> I have a problem with sudo..It used to take a long time to execute commands with sudo..so after some deugging I found tht it was taking time at logging the events to syslog....
[12:16] <rags> Then I added  "loghost" to the hosts file, and the problem vanished!.
[12:16] <rags> so is the loghost entry needed, or wht is the original problem? any ideas...
[12:17] <_ruben> rags: seems syslog is trying to log to a remote host called loghost
[12:19] <rags> oh...I did enable remote logging...with the -r option but that is to receive syslogs messages from port 514 right....?
[12:19] <_ruben> -r is to enable inbound connections, yes
[12:21] <rags> also, other systems are logging with no problem....
[12:21] <_ruben> does 'grep loghost /etc/syslog.conf' yield anything?
[12:21] <_ruben> or 'sudo grep loghost /etc/sudoers'
[12:23] <rags> nothing...doesnt' return anything..I'm positive it's logging to files..and not to log host...
[12:24] <_ruben> if neither sudo and syslog dont refer to loghost, i wouldnt know what would be looking for that name
[12:25] <rags> also, I think it's some how related to the dns server as well...cause when the problem occurs, bind hangs as well...
[12:32] <rags> It works after some time...it's workig now....strange...
[12:33] <rpinto> hi everybody
[12:34] <rpinto> i have a problem after installing smokeping on my ubuntu server 8.04
[12:34] <pmatulis> !info smokeping hardy
[12:34] <rpinto> the smokeping.cgi for local host is not displayed
[12:34] <rpinto> ??
[12:35] <rpinto> i didnt get u guys
[12:38] <rpinto> it was workin fine for one day
[12:39] <rpinto> but it stopped working nw
[12:39] <pmatulis> rpinto: check web server logs
[12:39] <rpinto> how do i do tat?
[12:41] <pmatulis> rpinto: you need to google some of this basic stuff yourself
[12:41] <rpinto> ok
[12:41] <rpinto> thanks pmatulis
[12:53] <rpinto> smokeping debug doesnt show any errors
[13:02] <rpinto> Oct  6 17:27:51 server smokeping[12411]: Not entering multiprocess mode for just a single probe.
[13:02] <rpinto> Oct  6 17:27:51 server smokeping12412]: FPing: probing 1 targets with step 300 s and offset 182 s.
[13:02] <rpinto> tat appears in the smokeping.log file when i start the service
[13:03] <rpinto> is the step interval too large?
[13:03] <rpinto> must i lower it?
[13:03] <Pici> No, 300s is normal.
[13:04] <rpinto> ok
[13:04] <Pici> Or, rather, the default.
[13:04] <rpinto> so any idea why my network latency graphs arnt displayed on the browser?
[13:05] <Pici> I remember having to do something, let me check my configs.
[13:05] <rpinto> ok please.. thanks
[13:08] <Pici> rpinto: I had to add the following to one of my apache site configs to get the graphs to display: http://paste.ubuntu.com/286931/
[13:11] <rpinto> Pici, where do i do that?
[13:11] <Pici> rpinto: /etc/apache2/sites-enabled/
[13:13] <rpinto> i must create a file there with the content rite?
[13:13] <rpinto> can i paste tat section in the 000-default file?
[13:14] <BenignoC> Hello there
[13:15] <Pici> rpinto: You'll probably need to paste it inside the host section that you might have in there.
[13:15] <rpinto> i just have on file 000-default in there
[13:16] <Pici> rpinto: Okay, but do you have anything defined within that file/
[13:17] <rpinto> yes Pici, there is some stuff defined
[13:17] <rpinto> dont know wat it is though
[13:17] <rpinto> some virtualHost stuff
[13:17] <rpinto> localhost
[13:17] <Pici> rpinto: Put it inside the virtalhost section
[13:18] <rpinto> ok
[13:19] <BenignoC> Hello, I hope I am not off topic: I am running alestic image ami-7a86ae0e, however, it doesn't seem to find any of the ec2 commands, do I need to install them as described at https://help.ubuntu.com/community/EC2APITools#fndef-f90bdfb72295593c373fd151aa512b6a870e2761-0 ? (they are suppossedly there from what I read in the docs...
[13:23] <erichammond> BenignoC: The EC2 AMI command line tools are installed on all AMIs published on http://alestic.com
[13:23] <rpinto> Pici, i added it, still not working for me
[13:23] <erichammond> What command are you trying to run?
[13:23] <Pici> rpinto: You'll need to restart apache before the changes will go into effect.
[13:24] <rpinto> ohk
[13:24] <BenignoC> ec2-create-snapshot
[13:25] <erichammond> BenignoC: The ec2-create-snapshot command is part of the EC2 API command line tools (not the AMI command line tools).
[13:25] <erichammond> Those are not installed by default.
[13:25] <rpinto> Pici, still not working
[13:26] <BenignoC> erichammond: ah, sorry, Its my first day with EC2.
[13:27] <erichammond> BenignoC: Welcome to EC2.  I think everybody runs into that confusing trap.  You have a few more ahead of you :)
[13:28] <rpinto> Pici, when i tried reloading smokeping, an error occurs
[13:28] <rpinto>  * Reloading latency logger daemon configuration...                             ERROR: Can not read pid from /var/run/smokeping/smokeping.pid: No such file or directory
[13:30] <BenignoC> erichammond: I am not particularly knowledgeable about any particular distro (actually quite the contrary, more into programing than systems administration) so, any particular ami that you would advise for a newbie? I was trying 8.04 Hardy for Europe by alestic but dont know if there are better options for me.
[13:31] <erichammond> BenignoC: I'm slightly biased since I built and use that particular image in production (in the US).  I think it's a good one :)
[13:34] <erichammond> BenignoC: If you're willing to test out some Beta software (not for production use), I would also recommend trying the Karmic Beta AMI published by Canonical.  I list it a bit lower down on http://alestic.com
[13:37] <BenignoC> erichammond: Heh, I should have guessed by the name, I was asking more based on "newbieness" of the user rather than on the quality of the Ami. Anyways, any good guide you would recommend for setting up a LAMP server starting from your Hardy ami?. I was going down your Article on setting up My_SQL with EBS and XFS when I bumped into those ec2 commands...
[13:38] <erichammond> BenignoC: Ah, for that tutorial ( http://ec2ebs-mysql.notlong.com ) you are expected to run the ec2-create-snapshot command on your local system which should have the EC2 API tools installed.
[13:39] <erichammond> Once you've figured out how to use EBS volumes, the rest of the LAMP setup would be like any normal Ubuntu system.
[13:40] <erichammond> You would make sure that all of your database, logs, and other important files are stored on the EBS volume.
[13:41] <erichammond> It is also a good goal to be able to start up a new replacement instance quickly, so document the exact steps you take to configure the system and/or create a script which can automate the steps.
[13:41] <BenignoC> Other than the sql databases, is it a good idea to also put in there all the actual code of the web application into the EBS ?
[13:41] <erichammond> Sure, whatever you don't want to lose when the system dies unexpectedly.
[13:42] <erichammond> You can use the same "mount bind" approach as described in the tutorial for the MySQL database.
[13:45] <BenignoC> yes, its quite nice and clear. Thanks a lot for all your help and tutorials. I'd better continue working on reading doc to see if I can manage on my own now.
[13:54] <AzizLight> hi everybody
[13:56] <AzizLight> if I want to add a ServerName to my server, where and how do I need to do it? I think it might be in http.conf but I don't know the syntax
[14:16] <Tohuw2> !backup | Tohuw
[14:19] <Tohuw2> !sbackup > Tohuw
[14:49] <Tohuw> !sbackup > Tohuw
[14:50] <Tohuw> !sbackup > Tohuw
[15:08] <_ruben> hmm .. too bad dovecot's still at 1.1.x for karmic, might roll my own 1.2.x packages
[15:10] <jcastro> Daviey: ping
[15:12] <soren> _ruben: What's new and shiny in 1.2.x?
[15:15] <_ruben> its sieve part
[15:17] <_ruben> but then again, sieve would be new thing for us anyways .. wondering what'd be more troublesome: rolling 1.2 packages, or the upgrade from 1.1 to 1.2 at a later time
[15:18] <_ruben> upgrade notes seem fairly painless
[15:18] <rrittenhouse> The new "Install to iSCSI" feature in Karmic - is that only available on the Server cd?
[15:25] <BenignoC> Installed tasksel install lamp-server, and phpmyadmin. My security groups include now HTTP: tcp from 80 to 80 source IP or group: 0.0.0.0/0.  And I keep getting timeouts on accessing the public dns. is the security group correct? else where should I look for the error?.
[15:26] <AzizLight> if I want to add a ServerName to my server, where and how do I need to do it? I think it might be in http.conf but I don't know the syntax, can someone help me please?
[15:28] <zoopster> AzizLight: single server? using the default site?
[15:29] <AzizLight> zoopster: it's a developement server, I want to assign a dyndns to it
[15:30] <zoopster> AzizLight: to add a servername directive to apache...the syntax is simply ServerName www.server.com
[15:30] <AzizLight> zoopster: and I just have to add that to httpd.conf?
[15:33] <zoopster> AzizLight: by default ubuntu sets up virtualhosts...so I'd put it in the default site /etc/apache2/sites-available/default
[15:36] <AzizLight> zoopster: I see...where in the file should I add the ServerName line? :S
[15:37] <zoopster> AzizLight: inside the VirtualHost directive anywhere...I usually put it at the top, but it doesn't matter
[15:38] <AzizLight> zoopster: great, it worked, thanks a lot :)
[15:39] <zoopster> AzizLight: sure
[15:52] <BenignoC> I have an apache2 server running, where should I look at if I am getting time outs on the public DNS?. I have set an http tcp 80 to 80 for all ips 0.0.0.0/0 on its security groups.. any test or checks I can do to pinpoint where I am getting the problem ?
[16:12] <smoser> erichammond, so you think /etc/hosts shouldn't have any 127.0.1.1 (bug 407861)
[16:21] <smoser> erichammond, so you think /etc/hosts shouldn't have any 127.0.1.1 (bug 407861)
[16:22] <smoser> and please re-read https://wiki.ubuntu.com/UEC/Images/NamingConvention . i think that both images and kernel/ramdisk are reasonably finished
[16:22] <jcastro> Daviey: please post some results on the EC2 wiki page.
[16:23] <jcastro> Daviey: or I will hunt you down with crumpets
[16:24] <Daviey> jcastro: on it!
[16:24] <jcastro> <3
[16:39] <smoser> soren, what things are you aware of that use ec2-version-query right now?
[16:39] <soren> smoser: The bundling script.
[16:39] <smoser> i'd like to make sure that i updated anything correctly
[16:40] <soren> smoser: That's about it.
[16:40] <smoser> is that it?
[16:40] <smoser> ok.
[16:41] <soren> smoser: a) The specific format was never blessed and b) it was never moved to an official location, so it was never really announced. If someone saw the spec and started using it, I doubt they'll be surprised if it stops working. I'm reasonably sure the spec even says that the location is temporary.
[16:42] <smoser> yeah, i doubt anyone would expect ~soren to be official
[16:42] <soren> smoser: Well, "soren" does have a bit of a ring to it :), but I'm sure we'll be fine.
[16:56] <smoser> can someone please accept my nominations for karmic of bug 440757, bug 444605, bug 444598
[16:56] <smoser> zul, soren, kirkland, ttx ^^
[16:56] <ttx> smoser: I'm on it
[16:57] <ttx> smoser: done
[16:57] <ttx> (if Lp doesn't timeout)
[17:26] <ruben23> hi
[17:42] <BenignoC> I have uploaded a bundle, and now want to register it. I run ec2-register $bucket/$prefix.manifest.xml and get the following error: [Deprecated] Xalan: org.apache.xml.res.XMLErrorResources_en_US
[17:42] <BenignoC> Client.InvalidManifest: HTTP 301 (Moved Permanently) response for URL http://s3.amazonaws.com:80/ad-amis/ubuntu.manifest.xml: check your manifest path is correct and in the correct region.
[17:42] <BenignoC> Can anyone help me?
[17:43] <smoser> BenignoC, is was going to suggest the region
[17:43] <BenignoC> how do I set it up on the command or config ?
[17:44] <smoser> with s3cmd i've looked at the 'info' (s3cmd info) for the bucket and make sure the LOCATION is correct
[17:44] <smoser> but it looks like maybe you didn't give bucket correctly ? that url in the redirect seems strange
[17:45] <smoser> or at least short
[17:45] <smoser> oh, you're bucket is "ad-amis" ?
[17:45] <smoser> kirkland, or other, how much space does an archive mirror take ?
[17:46] <smoser> other thing, (guessing based on 'deprecated') what is your ec2-api-tools version
[17:46] <BenignoC> smoser: I have just started using SC2 and S3 today, I am not sure to what info you refer
[17:46] <_ruben> hardy+intrepid+jaunty i386+amd64 using debmirror: 164GB
[17:47] <smoser> in the uri above, it contains the string 'ad-amis'
[17:47] <smoser> _ruben, thanks. very helpful.
[17:48] <_ruben> smoser: tho im (also) kinda interested what a "full" mirror would take, now i lack the debian-installer stuff for instance
[17:48] <smoser> BenignoC, it also includes "ubuntu.manifest.xml" which i'm guessing is your $prefix.
[17:48] <_ruben> shouldnt take all that much more i'd say
[17:49] <BenignoC> hmmm I dont recall the version but I downloaded just today from amazon, trying to find it now.
[17:49] <smoser> shoot. _ruben : http://www.ubuntu.com/getubuntu/mirror/1
[17:49] <BenignoC> prefix was just ubuntu for me.
[17:49] <BenignoC> smoser: 1.3-42584
[17:51] <_ruben> smoser: nice :)
[17:51] <smoser> _ruben, 'A "full archives" mirror is around 210GB'
[17:51] <ivoks> :(
[17:51] <ivoks> i missed it again
[17:51] <_ruben> 210 + 40 .. that's doable
[17:52] <smoser> BenignoC, then i suggest that you must be missing 'bucket' ? verify you have that.
[17:52] <_ruben> wonder if i can use my debmirror-created local mirror as a base for a full rsync .. ought not to be a problem i'd say
[17:52] <BenignoC> I am checking my bucket using the firefox utility, and I see all the contents within ad-amis
[17:52] <smoser> but your syntax is correct. i've just registered earlier today with: ec2-register smoser-test-us/foof.manifest.xml
[17:52] <smoser> BenignoC, you bundled and uploaded (ec2-bundle-image and ec2-upload-image) ?
[17:53] <BenignoC> smoser: I followed instructions as in http://alestic.com/mt/mt-search.cgi?search=bundle&IncludeBlogs=1&limit=20
[17:53] <RoyK> virtualbox isn't listed under 'optimised for' with JeOS - should it work well anyway+
[17:55] <smoser> BenignoC, i'm sorry, i'm out of ideas. ec2 api tools are not very friendly when they dont work.
[17:56] <BenignoC> smoser: I have the bundle uploaded on S3, now, If I dont have it registered as an AMI, can I safelly terminate my current machine ? I mean can I recover the work without it registered?.
[17:56] <smoser> well, yeah, assuming its uploaded correctly.
[17:58] <BenignoC> heh, feels kind of risky
[18:01] <BenignoC> smoser: ec2-register ad-amis/ubuntu.manifest.xml -U https://eu-west-1.ec2.amazonaws.com  has worked
[18:05] <BenignoC> thanks to all. ciao.
[18:06] <bventura> .
[18:09] <erichammond> smoser: /etc/hosts works for me without any 127.0.1.1 and I'm not aware of any negative impact when DHCP is setting the host name.  I don't know the correct Ubuntu way to manage this, but I'm pretty sure that having the incorrect hostname in /etc/hosts is bad.
[19:11] <kirkland> smoser: i use a 400GB hard drive for my mirror
[19:13] <pmatulis> kirkland: what is the status of kvm updates (-84) these days?
[19:24] <kirkland> pmatulis: what do you mean?
[19:25] <kirkland> pmatulis: kvm-84 has been backported to hardy/intrepid and is in jaunty
[19:25] <kirkland> pmatulis: i don't plan on ever updating kvm-62 in hardy or kvm-72 in intrepid
[19:25] <kirkland> pmatulis: it has to be a kitten-killer to change kvm-84 at this point
[19:25] <kirkland> pmatulis: i know of one potential kitten killer right now
[19:25] <kirkland> pmatulis: involving qcow2 corruption
[19:26] <kirkland> pmatulis: i'll probably take a look at that after karmic goes RC
[19:26] <pmatulis> kirkland: k, thought i looked in hardy backports the other day and couldn't find -84
[19:26] <kirkland> pmatulis: https://edge.launchpad.net/ubuntu/+source/kvm
[19:26] <kirkland> The Hardy Heron  (supported)
[19:26] <kirkland> Set upstream link
[19:26] <kirkland> Show details 1:84+dfsg-0ubuntu12.3~hardy1 	backports (main) 	five weeks ago
[19:28] <pmatulis> kirkland: i was looking here: http://archive.ubuntu.com/ubuntu/dists/hardy-backports
[19:33] <kirkland> pmatulis: hmm, okay
[19:33] <pmatulis> kirkland: still can't find it there but, yeah, not sure how i missed the LP page
[19:35] <mathiaz> zul: when triaging bugs, could you make sure that the importance is set?
[19:35] <zul> mathiaz: sure
[20:41] <zul> dont worry libvirt is done now
[20:52] <Mc-kay> just one quick question, and I have been stuck on this for months, getting a mail server to respond to incoming mail from the net, ubuntu's own default server only seems to keep things local?
[20:54] <CodeDrunk> Mc-kay, What mail server are you using? Postfix, Exim, or something else?
[20:55] <Mc-kay> I tried postfix, had issues, tried exim, this didnt wanna install, there are others
[20:56] <bventura> Mc-Kay did you port forward on your router or firewall to allow incoming connections to your mail server?
[20:56] <Mc-kay> getting one of the Linux format Mags, that read a page on installing a mainserver on ubuntu, I soon replied that, this page was out of date and didnt working on 8.10 or 9.04
[20:57] <Crypia> Mc-kay: dpkg-reconfigure postfix, to setup postfix
[20:57] <CodeDrunk> Usually postfix is very quick to get working in default form, are you sure mail is getting to the server as bventura mentioned?
[20:57] <Mc-kay> bventura, yep, i run alot of servers on here, including forums, where ive had to remove email registeration
[20:57] <Mc-kay> lets try that
[20:58] <bventura> Mc-Kay i'm not sure if you've seen this but this guide here is rock solid, works for me every time:
[20:58] <bventura> https://help.ubuntu.com/9.04/serverguide/C/email-services.html
[20:58] <bventura> just one typo on this page:https://help.ubuntu.com/9.04/serverguide/C/postfix.html#postfix-installation
[20:58] <Crypia> Mc-kay: but like bventura said, make sure your firewall is set AND most ISP's dont' allow unauthenticated outgoing email so you might need to use their smtp server, or a service like DYNDNS mail hop
[20:58] <dasunsrule321> I got a question about active directory and 9.04 integration
[20:58] <bventura> 192.168.0/24 should be 192.168.0.0/24
[20:58] <bventura> very good point from Crypia, might be your ISP blocking you do you have static IP?
[20:59] <Mc-kay> my ip is static, and ive dmz to this box for now
[20:59] <Mc-kay> i think the problem all alone has been me, setting things up poorly
[20:59] <bventura> can you telnet to the outside address?
[20:59] <bventura> hehee
[20:59] <bventura> try that guide above
[20:59] <Mc-kay> yeah i can
[21:00] <Crypia> when I first got U-Verse, it was blocked, but after one call requesting it to be unblocked it was opened for me
[21:00] <bventura> same here i'm also on ATT, you must ask to unblock
[21:00] <CodeDrunk> I never think of that being on Charter, nothing is blocked.
[21:01] <bventura> are the DNS records all squared aaway?  I did this once and everything worked fine local, but if I tried to send to or from hotmail it didn't work because I had dns problem
[21:01] <dasunsrule321> I have a workstation running Jaunty, I have it integrated into AD correctly, using Likewise open, I have added a AD goup (ad.user.admin.group) and have added it to the sudoers file. I can successfully use all the sudo functionality with the group and users listed within the group. I am having an issue with Gnome working correctly however, I cannot access several functions, as it thinks that I am not an admin on the local box. How
[21:02] <Mc-kay> dns records all point here.. and this local address from the router.
[21:02] <Mc-kay> looking at the ubuntu web page you sent me
[21:02] <Crypia> bventura: might have been a dns issue with your domain not resolving a dns lookup on the receiving end, are you sending from a registered domain name that resolves back to that IP in DNS?
[21:02] <CodeDrunk> dasunsrule321, Are you logging into X with your netbios domain? eg. DOMAIN\username or DOMAIN\\username?
[21:03] <dasunsrule321> Yes
[21:03] <bventura> Crypia I wasn't but once I fixed it it all just worked
[21:03] <bventura> mc-kay, yes that guide is really good i've run thru it 10 times or so and it works really well
[21:03] <bventura> just that one typo I mentioned watch out for it
[21:04] <dasunsrule321> CodeDrunk: Again, I have full root privileges, just not within Gnome
[21:04] <Mc-kay> bventura, thankyou mate, im only doing this now because I have spammers on the forums I run..
[21:05] <bventura> oh man I hate those forum spam
[21:05] <dasunsrule321> If I try to access things such as users and groups, etc, it tells me I do not have enough privileges
[21:05] <bventura> i get a lot of those too
[21:05] <Mc-kay> i get about 5-9 bots a day sign up, and post crap
[21:05] <dasunsrule321> Mc-kay, what forum do you use?
[21:05] <Mc-kay> no email reg set, because of the mail server issue.
[21:05] <Mc-kay> SMF
[21:05] <dasunsrule321> Ok
[21:06] <bventura> i'm not sure I understand how will haveing a your own mail server fight the bots
[21:06] <dasunsrule321> I run Punbb
[21:06] <CodeDrunk> When you said you have added the AD group, is this just for the sudoers file or in /etc/group for adm and admin groups?
[21:06] <dasunsrule321> In sudoerss
[21:06] <dasunsrule321> What is the syntax to add the domain user to the group file?
[21:06] <Mc-kay> bventura, it would force them to wait for an email, before they allowed on the board, not just sign up and free riot
[21:06] <dasunsrule321> This doesn't seem to be well documented
[21:07] <bventura> i see
[21:07] <CodeDrunk> No it's not, I had a similar issue that this fixed. Let me see if I can SSH to that server and see what I did.
[21:07] <dasunsrule321> Ok
[21:07] <Mc-kay> i have about 10 domains, this is only a nightmare with ubuntu
[21:07] <dasunsrule321> That would be awesome!
[21:07] <dasunsrule321> thank you
[21:07] <Mc-kay> you cant give them there own group
[21:08] <CodeDrunk> dasunsrule321, Problem is it will not accept an AD group in the group file, only users. You can add yourself to admin:x:0: using DOMAIN\username and see if that fixes it.
[21:09] <dasunsrule321> I tried that
[21:09] <bventura> well good luck mc-kay i'm off to lunch BB in 20
[21:09] <dasunsrule321> nada
[21:09] <Mc-kay> bventura, you have been more then helpful. :)
[21:09] <dasunsrule321> I tried " " ' ' too
[21:09] <dasunsrule321> nothing
[21:09] <dasunsrule321> let me ask you this
[21:10] <CodeDrunk> dasunsrule321, I'm sorry, my mistake. It's AD alias not domain. eg. Domain Admins\username
[21:10] <dasunsrule321> do you need to add the user to adm and admin
[21:10] <dasunsrule321> ok, so group\user
[21:10] <dasunsrule321> i was doing domain\user
[21:11] <CodeDrunk> It's complicated, depending on how AD is setup it could be group\user or just the AD username alone.
[21:11] <dasunsrule321> hmmm
[21:11] <Crypia> I have to do a "sudo xhost +" every time I connect with ssh and want to run an X app, is there a global setting where I can disable access control?
[21:11] <CodeDrunk> If there isn't an alias it would be DOMAIN\\username
[21:12] <dasunsrule321> Right
[21:13] <dasunsrule321> BRB, let me restart X and see what happens
[21:13] <dasunsrule321> Do I need to be in the adm and admin group?
[21:13] <soren> mathiaz: I've never really had a chance to play much with Kerberos. Does it authenticate using pam and then grants the user a ticket, or does it have its own internal authentication mechanism?
[21:13] <CodeDrunk> Yes, and be sure to restart/reload likewise too
[21:13] <dasunsrule321> Ok
[21:13] <dasunsrule321> brb
[21:13] <mathiaz> soren: there is a pam_krb5 module
[21:14] <soren> I thought that was the other way around.
[21:14] <mathiaz> soren: which will get a TGT for the user
[21:14] <soren> ..i.e. have stuff that uses PAM authenticate against krb.
[21:14] <soren> Ah, I see.
[21:14] <dasunsrule321> what is the likewise service?
[21:15] <dasunsrule321> dcerpcd right?
[21:15] <soren> mathiaz: so if that module is reached in the pam stack, it assumes authentication was succesful and grants the ticket?
[21:15] <dasunsrule321> yep
[21:16] <mathiaz> soren: oh no. It still uses the supplied password to authenticate the user
[21:16] <mathiaz> soren: basically the Ticket issued by the KDC is encrypted with a passphrase derived from the user password
[21:16] <mathiaz> soren: so the user's password is still needed to get the TGT functional
[21:17] <soren> mathiaz: So if I had a hardware token one-time-password based authentication setup, I can't use that with kerberos?
[21:17] <dasunsrule32> CodeDrunk: no dice
[21:17] <tarvid_> 100BaseT to Ciena 3920 - large packets are getting blocked.
[21:17] <mathiaz> soren: you could - I think you'd have use the PKINIT extension
[21:17] <tarvid_> Largest successful transter about 1450
[21:17] <dasunsrule32> I can access Add/Remove... now
[21:17] <mathiaz> soren: which is a pre-auth mechanism
[21:17] <CodeDrunk> dasunsrule32, Hmm strange
[21:18] <dasunsrule32> Still cannot access users and groups
[21:18] <tarvid_> is there a chance the 3920 is sending jumbo packets my ethernet interface can't handle?
[21:18] <dasunsrule32> tho it seems I can access the other areas
[21:18] <soren> mathiaz: Hm.. Ok.
[21:18] <soren> mathiaz: I get the feeling this is very much not straight forward.
[21:18] <mathiaz> soren: yop - it's not an OOTB setup
[21:19] <mathiaz> soren: I'm not sure that krb5 1.7 completly supports it.
[21:19] <CodeDrunk> dasunsrule32: I belive thats the right track but User & Groups must require some other form of credentials instead of the basic group layout.
[21:20] <dasunsrule32> I assume so
[21:20] <dasunsrule32> I suppose it doesn't matter that much
[21:20] <dasunsrule32> Since all users are going to be added via the domain
[21:21] <CodeDrunk> Can you access the Network Config/Administration?
[21:22] <dasunsrule32> Yes
[21:22] <dasunsrule32> Everything
[21:22] <dasunsrule32> Printers
[21:22] <dasunsrule32> etc
[21:22] <dasunsrule32> Just not users and groups
[21:23] <tarvid_> any trick to supporting jumbo frames?
[21:24] <dasunsrule32> CodeDrunk: Must I be part of the lpadmin group to print?
[21:24] <CodeDrunk> dasunsrule32, Yes, and plugdev to use USB devices.
[21:24] <dasunsrule32> Ok
[21:24] <kirkland> zul: yo
[21:25] <kirkland> zul: thanks for triaging libvirt
[21:25] <kirkland> zul: i added some priorities to the ones that were still undecided
[21:26] <dasunsrule32> CodeDrunk: BRB
[21:28] <dasunsrule32> CodeDrunk: Looks like I can add just the domain group to the group file
[21:28] <dasunsrule32> I will see in a sec
[21:28] <dasunsrule32> I just added my goup
[21:28] <dasunsrule32> group
[21:29] <CodeDrunk> dasunsrule32, It would be excellent if you can get that to work, I never could for some reason. I could only use domain user accounts, no groups.
[21:29] <dasunsrule32> maybe not
[21:29] <dasunsrule32> hmm
[21:29] <dasunsrule32> I can access the print queue this time
[21:29] <dasunsrule32> but it is haning
[21:29] <dasunsrule32> hanging in the processing mode
[21:45] <zul> mathiaz: why isnt virt-manager subscribe to ubuntu-server and libvirt is?
[21:45] <mathiaz> zul: omission?
[21:45] <zul> could be
[21:46] <mathiaz> zul: may be ubuntu-virt is a bug contact
[21:46] <zul> ubuntu-virt is
[21:47] <zul> mathiaz: im going to go through the seeds tomorrow to check if we are missing anything
[21:50] <Mc-kay> ummm  bugger
[21:50] <Mc-kay> the boxname needs to be changed.
[21:50] <Mc-kay> LOL
[21:51] <Mc-kay> root@kv-laptop:/home#
[21:51] <Mc-kay> i need to find out how to change that
[21:52] <jpds> !hostname | Mc-kay
[21:52] <Mc-kay> thankyou
[21:54] <genii> Hm. "root@wherever"
[21:55] <Mc-kay> sorted
[21:56] <Mc-kay> i did something sopid mind you, I did chmod -R 777 *
[21:56] <dasunsrule32> CodeDrunk: I cannot even print
[21:56] <Mc-kay> but its where i did it, i forget i was in the root system
[21:56] <dasunsrule32> Were you able to get this to work?
[21:56] <Mc-kay> so etc/ and so on got changed
[21:57] <Mc-kay> im pondering how to set the permissions back, LMAO
[21:57] <Mc-kay> not happy the whole filesystem is writable
[21:58] <bventura> ouch mc-kay you chmodded your whole /etc ?
[21:59] <Mc-kay> and more, i was doing something in my /home/ folder. but i forget I was just in /
[21:59] <bventura> i dont think you can undo that you may have to reinstall
[21:59] <Mc-kay> that would be very painful
[21:59] <Mc-kay> ive had the box running for 6 months without shutdown
[22:00] <bventura> do you have backup?
[22:00] <Mc-kay> yeah i do, all i need to do is backup the sql stuff and reinstall, i have a custom copy done with remastersys
[22:01] <bventura> cool
[22:04] <Mc-kay> thinking of running a best linux desktop competition
[22:04] <Mc-kay> http://img97.imageshack.us/i/screenshoth.png/
[22:05] <Mc-kay> however, i better reinstall my other box now ive buggered it up
 but its where i did it, i forget i was in the root system - thats why we advocate against doing ordinary work as root :-)
[22:07] <Mc-kay> LOL, i know
[22:08] <Mc-kay> i dont make stupid mistakes normally, what i was installing needed to be in root, i walked off the do something else, come back and carried on..
[22:09] <guntbert> Mc-kay: I didn't want to laugh about you - I know the feeling too well - but a little reminder serves us all :-)
[22:10] <bventura> so hows that mail server coming along mc-kay any progress?
[22:10] <Mc-kay> yeah, i think so
[22:10] <bventura> nice
[22:11] <Mc-kay> how to do it again, mind you after the little chmod disaster
[22:11] <bventura> hehee
[22:11] <Mc-kay> ill do it tomorrow
[22:11] <Mc-kay> too tired
[22:11] <bventura> its always good to practice
[22:12] <Mc-kay> not when you run a server with 33 sites on, you tend to not want to reboot or redo
[22:12] <Mc-kay> but its cool, its need to be the 9.04, not 8.04
[22:13] <bventura> yeah
[22:13] <Mc-kay> trying to get one of my forums to send reg via email
[22:15] <kirkland> smoser: ping
[22:15] <kirkland> smoser: we're testing the karmic uec images
[22:15] <kirkland> smoser: we can get the eucalyptus-provided images running
[22:15] <kirkland> smoser: but not our uec images yet
[22:24] <kirkland> smoser: can i get some help?
[22:40] <dasunsrule32> When I run kinit user, it does not return any value
[22:41] <dasunsrule32> am I having an authentication issue with kerb5?
[22:42] <dasunsrule32> I am sorry, I ran klist
[22:42] <dasunsrule32> and I do have the ticket cached
[22:49] <pietrubens> hello
[22:49] <pietrubens> problem: finished a dual-boot vista/ubuntu8.10, in vista wireless ok, in ubuntu nothing, somebody recomended in terminal lspci, a bunch of info appeared,i have no clue, and still not working. hardware: laptop, HP pavilion
[22:50] <pietrubens> here's the catch: i am an absolute ubuntu newby, could use some step-by step info, not some reference to some how-to guides (where i have been looking a lot, but still do not understand)
[22:51] <jpds> pietrubens: This channel is for server support, you might want to try #ubuntu for laptops.
[22:52] <pietrubens> i tried, but got only some "look-at that site" help
[22:52] <pietrubens> so, i am looking for a good soul the give me an absolutely noob hands on explaination
[22:53] <pietrubens> that is, if someone has the patience, since i do know that i am asking a hell of a lot
[22:53] <soren> I'm terribly sorry, but just because #ubuntu was not helpful enough does not make this on topic for this channel.
[22:53] <soren> Perhaps the users mailing list or the forums will be useful.
[22:54] <soren> This channel... not so much :)
[22:54] <pietrubens> i do realize, did not want to break rules, just looking for help
[22:55] <soren> pietrubens: It's not just about willingness to help. It's just as much about people speciialising in server related things in here and not so much about wireless networks on laptops.
[22:55] <soren> pietrubens: The fact is simply that this is not the best place to get qualified help for your problem.
[22:56] <pietrubens> deep down i knew :s
[22:56] <soren> #ubuntu /should/ be, but I understand that its helfulness varies with the people in it. I hear www.ubuntuforums.org tends to be helpful to many people.
[22:57] <pietrubens> i'm heading there right now ;)
[22:57] <soren> Good luck :)
[22:58] <pietrubens> i need it, want to install it to listen to some radio tnite already ;)
[22:58] <pietrubens> sorry yet again
[23:06] <Nwallins> Hi, I found a bug in ruby1.8 that ships with 9.04 -- that has been fixed by upstream
[23:07] <Nwallins> is this something worth reporting, or any chance of getting an update to 9.04?
[23:08] <Nwallins> http://pastie.org/644587
[23:08] <kirkland> Nwallins: changes of getting into 9.04 are slim
[23:08] <Nwallins> there is a patchlevel 174, at least, where this is fixed
[23:09] <kirkland> Nwallins: https://wiki.ubuntu.com/StableReleaseUpdates
[23:09] <kirkland> Nwallins: must meet those criteria
[23:09] <Nwallins> kirkland: makes sense
[23:09] <kirkland> Nwallins: do you have access to 9.10?
[23:10] <kirkland> Nwallins: it would be worth verifying that the bug is fixed there
[23:10] <kirkland> Nwallins: we can fix bugs in 9.10 for about another 9 days
[23:10] <kirkland> Nwallins: then 9.10 gets locked down
[23:10] <Nwallins> gotcha
[23:10] <kirkland> Nwallins: and we'll start focusing on 10.04
[23:10] <Nwallins> i don't have easy access to it, but my pastie should suffice
[23:10] <Nwallins> for someone who does and has the inclination
[23:11] <Nwallins> takes 60 seconds to actually verify
[23:11] <Nwallins> should not result in segfault or deadlock
[23:12] <Nwallins> i am running jeos on the platform where i noticed the bug
[23:12] <Nwallins> i am not going to be testing 9.10 on it
[23:12] <kirkland> Nwallins: your script/test works for me on 9.10
[23:12] <Nwallins> but i do have a 9.04 at home, but it is AMD64
[23:12] <Nwallins> no segfault?
[23:12] <kirkland> Nwallins: no segfault
[23:12] <kirkland> Nwallins: exits 0
[23:13] <Nwallins> ok, great
[23:13] <Nwallins> i assume you see a 'hi mom'
[23:13] <Nwallins> or hello world or whatever
[23:13] <kirkland> kirkland@x200:/tmp$ ruby -v
[23:13] <kirkland> ruby 1.8.7 (2009-06-12 patchlevel 174) [x86_64-linux]
[23:13] <Nwallins> y, i confirmed in #ruby-lang that patchlevel 174 has it fixed
[23:13] <Nwallins> great!
[23:13] <kirkland> Nwallins: cheers
[23:17] <Nwallins> kirkland: can you tell me, or show me how to find, which version of ruby1.9 is in 9.10?
[23:18] <kirkland> Nwallins: https://edge.launchpad.net/ubuntu/+source/ruby1.9
[23:19] <aubre> are we still needing people to test this http://www.youtube.com/watch?v=gcx8HZWSYB8 and this http://www.youtube.com/watch?v=-0wc4LCSqHI&feature=related ?
[23:20] <aubre> Re: eucalyptus on Karmic  that is