[02:23] <Keke> hello all
[02:23] <Keke> i have on problem
[02:23] <Keke> this ubuntu server 9.0.4
[02:24] <Keke> apparmor
[02:24] <Keke> server problem
[02:31] <Keke> hi
[02:31] <Keke> ?
[02:31] <Keke> bna uu?
[03:28] <evon> would windows computers be able to access an ubuntu-based server?
[03:29] <twb> evon: define `access'.
[03:30] <twb> Ubuntu services typically use standard protocols like SSH, SMTP, HTTP, etc.  If Windows or a Windows application implements the same protocol, it'll be able to access the Ubuntu server's associated service.
[03:30] <evon> Well here's what i want to do: I want to set up a server where windows computers can access the server remotely to use programs like word, outlook etc. and save their files
[03:30] <twb> OK, so you want a file server.
[03:30] <evon> twb: that's one of the things i want to do
[03:30] <twb> Windows' preferred network filesystem is CIFS.  The Ubuntu service that provides CIFS is Samba.
[03:31] <evon> twb: i would also like users to be able to run a desktop remotely that has all the programs they need
[03:31] <twb> Note that CIFS isn't encrypted, so this is appropriate for a LAN but not exposure to the internet.
[03:31] <twb> For a remote desktop, your only real option is VNC.
[03:31] <evon> twb: please forgive me i am a serious server newb so you gotta speak for simply to me about this stuff
[03:32] <evon> twb: for = very
[03:32] <twb> Unix systems have a better protocol called X11, but the Windows clients for it aren't widespread.  Windows systems have a better protocol called RDP, but there's no RDP server available for Ubuntu.
[03:33] <evon> i have no idea what those acronyms mean but I am assuming that you mean that I want be able to do what I want with an ubuntu-based server
[03:34] <twb> evon: OK, I'm assuming you have Windows workstations and you're considering an Ubuntu server.  The server MUST provide file sharing and SHOULD provide a "remote desktop" to the Windows workstations.  Is that right?
[03:35] <evon> twb: yes
[03:35] <twb> evon: do you have political control of the Windows workstations?  That is, can you dictate what is installed on them?
[03:36] <evon> twb: yes
[03:37] <twb> evon: OK.  For file sharing, the only sensible option is to use Samba (a service) to provide CIFS (a protocol).
[03:38] <twb> For remote desktops, you can use either VNC or X11.  Both require a client to be installed on the Windows workstations.
[03:38] <evon> twb: to further clarify,  at my workplace I am able to use my office computer to access a remote desktop at the head office.  I can also access this desktop from any computer i choose. I would like to set up a similar system at my church but i am exploring the possibility of doing this with a linux-based server
[03:45] <evon> ?
[03:46] <foxbuntu> evon, I suggest looking into the Linux Terminal Server Project
[03:46] <evon> foxubuntu: is that something that is experimental?
[03:47] <foxbuntu> evon, not really, been around for sometime
[03:48] <foxbuntu> evon, it really just depends what exactly you are trying to accomplish on what will be the best way to do it
[03:48] <evon> foxubuntu: is there an irc channel for that project?
[03:49] <foxbuntu> evon, #ltsp
[03:55] <evon> foxubuntu: thanks
[04:01] <twb> evon: LTSP will allow you to simply boot Linux on the workstations.
[04:01] <twb> evon: it's a great idea if the workstations just need to do office documents and email
[04:02] <twb> It's also a little more effort to set up, but once it's working there's less maintenance work.  And you don't need to buy Windows licenses.
[04:03] <evon> twb: ok i c. so you're saying that if someone using a windows computers can boot a remote linux desktop?
[04:03] <twb> evon: yes, most machines can just boot Linux off the network.
[04:04] <twb> If you ask wikipedia about "thin clients", this is the technology that LTSP implements.
[04:06] <evon> ok. would these workstations have issues printing over the network? i ask because of the typical compatibility issues linux distros have with printers
[04:06] <twb> They might have problems until you configure the network.
[04:07] <twb> If any linux system can print to your printer, then LTSP can be made to DTRT (do the right thing) wrt (with respect to) printing.
[04:07] <evon> twb: but it would have to be a linux-compatible printer though right/
[04:07] <evon> ?
[04:07] <twb> Yeah, basically.
[04:08] <twb> There are HCLs (hardware compatibility lists) that cover printing.
[04:08] <twb> linuxprinting.org?
[04:09] <evon> twb: yes i am aware of that site. It looks like i may have to go with a windows server
[04:10] <twb> Is it an MFC printing?
[04:10] <twb> If it's just talking PostScript and/or PCL, you'll probably be OK.
[04:12] <evon> I don't even know what those things are ;-)
[04:13] <twb> printing languages
[04:19] <evon> ok. just goes to show how much of a newb i am
[04:22] <twb> evon: don't worry about it
[04:22] <evon> twb: ;-)
[04:22] <twb> evon: but it ought to be cheap to boot a live CD and try to get printing working under Linux, which ought to tell you if it's gonna work.
[04:26] <evon> twb: is it possible for someone using a windows workstation to boot linux remotely and then share files between the 2?
[04:27] <twb> If you boot Linux over the network, depending on what you boot, it will be able to access files on the workstation's local disk.
[04:27] <twb> Normally a thin client will just ignore any disks that are installed in a workstation.
[04:32] <evon> twb: so couldn't i just use wine to install MS office in linux for people to use over the network? i have ms office 2007 installed on my linux system at home and it works fine
[04:32] <twb> In principle you could.  Why would you want to?
[04:32] <twb> Openoffice.org can read and write Microsoft Office documents.
[04:33] <evon> because some of the staff in my church use macros that openoffice cannot run.  also i've found that openoffice has trouble opening .docx files
[04:33] <twb> Fair enough.
[04:33] <twb> I do not know how well Microsoft Office will work in wine.
[04:33] <twb> (I don't actually use an office suite myself.)
[04:35] <darkpixel> evon: I just joined, so I may have missed info on your network setup.  I have a client that runs a handful of linux desktops with OpenOffice.  When they run into something that requires Office 2007, I have a shortcut on the linux desktop that runs rdesktop in seamless mode and it connects out to a spare XP workstation and runs office apps.  Works well if you have a spare workstation or a windows server.
[04:39] <evon> darkpixel: well what i'm trying to do is have people boot linux over a network from windows workstations
[04:39] <evon> darkpixel: so i was thinking of just installing word2007 with wine
[04:40] <evon> darkpixel: i don't think i'd want them to boot into a whole other desktop just to use office 2007
[04:43] <ninnypants> I've created an user on my server and can ftp to the server but the users does not have permission to upload files into the folder what do I need to do to grant those permissions?
[04:43] <evon> chmod
[04:44] <evon> you need not chmod the folder to the correct permissions.
[04:45] <ninnypants> ok that's what I thought would it just be chmod /home/user/ 755?  is that the correct syntax for the shell command?
[04:46] <evon> i honestly don't know. I haven't been successful it setting my own up yet but I used this tuturial http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch15_:_Linux_FTP_Server_Setup
[04:47] <evon> assuming you're using vftpd
[04:49] <evon> ninnypants: i hope i was able to help. have a good night.
[04:53] <darkpixel> evon: They don't have to boot in to a different OS, all you need is one windows server or a free windows desktop for a linux user to 'rdesktop' into.  The office app would actually be running on that remote windows workstation, but displaying it's output on the linux desktop.
[04:53] <darkpixel> Oops.  Just a few minutes too late.
[07:17] <nemik> hello. i just did an apt-get update then apt-get dist-upgrade on a hardy install. now SSH won't come up. this is a remote box
[07:17] <nemik> aside from going out there, is there anything elsei should try? didn't think this kind of stuff would happen with an LTS release...
[07:23] <twb> nemik: today you learn to be more careful with dist-upgrade?
[07:24] <twb> If SSH isn't accepting your connection, and there's no other connection method (e.g. KVM over IP), then you can't get in.  You can call the monkey on site and have them type stuff, but other than that, you're gonna have to go out there.
[07:25] <twb> (I don't know why a dist-upgrade would break ssh, FWIW.)
[07:38] <nemik> twb: should i have just done regular upgrade instead?
[07:38] <soren> nemik: Yeah, I haven't heard of this problem either.
[07:38] <soren> nemik: Wouldn't have made a difference.
[07:39] <twb> "aptitude safe-upgrade" and then (carefully) "aptitude full-upgrade".
[07:39] <soren> dist-upgrade and upgrade are really not all that different.
[07:39] <twb> full-upgrade corresponds to the old apt-get dist-upgrade.
[07:39] <nemik> soren: i think it might have to do with my having a static IP and it reseting it to DHCP
[07:39] <twb> By "carefully" I mean making sure that it e.g. doesn't resolve conflicts by purging ubuntu-desktop and gdm
[07:39] <nemik> not just ssh not working, sorry. it doesn't respond at all
[07:39] <soren> nemik: No Ubuntu package that I know of will change your network configuration.
[07:39] <twb> soren: NetworkManager will, the little blighter
[07:40] <nemik> soren: yea i thought so too...it's a server install though. no X or desktop or GDM
[07:40] <twb> nemik: did you do the initial install using the server CD?
[07:40] <soren> twb: I suppose it /might/, but not on upgrades.
[07:40] <nemik> twb: yea. this has been working perfectly, with occasional upgrades, for almost 3 years
[07:40] <twb> nemik: good, good
[07:41] <nemik> first time it broke, damn update. whatever did it
[07:41] <nemik> i'll see if just having someone reset solves it.
[07:42] <nemik> thanks for the help guys.
[07:48] <soren> Sure.
[07:58] <xperia2> hello to all. i have registered a domain and want now to run different subdomains on my ubuntu server
[07:58] <xperia2> as i know i need to install the bind9 server for resolving the domain name
[07:59] <fahadsadah> Yes.
[07:59] <xperia2> is here somebody why can give me some helpfull tips with setting up a bind 9 server on a ubuntu server
[07:59] <xperia2> it looks like that the configuration of bind 9 is a litle difficult
[08:01] <xperia2> what are the needed steps. does a good howto and step by step guide exist for this ?
[08:01] <xperia2> some people here with experience how to setup such a thing ?
[08:02] <fahadsadah> xperia2: bind9 is large.
[08:02] <fahadsadah> Please consider using something that's less of a headache, like dnsmasq
[08:03] <xperia2> well i have this running on my router
[08:03] <xperia2> should i better use dnsmasq
[08:03] <xperia2> for the domain in this case
[08:04] <fahadsadah> If this is a router, definitely dnsmasq.
[08:04] <fahadsadah> All Netgear and Linksys routers run that by default, anyway.
[08:04] <fahadsadah> It just resolves upstream, or, from /etc/hosts
[08:04] <xperia2> hmmm hear first this
[08:05] <xperia2> are you sure this works also for people in the internet that call up my domain and the router will resolve this ?
[08:14] <fahadsadah> xperia2: Yes.
[08:14] <xperia2> great man !
[08:14] <fahadsadah> That's not how it's designed, but it will work
[08:14] <xperia2> thinked it would be much harder
[08:15] <xperia2> but with your help now and some good howtos
[08:15] <xperia2> it should be very easy i hope
[08:17] <twb> fahadsadah: dnsmasq is useful for providing DNS to your local network, but I didn't think it was useful for telling the internet about your domain (i.e. for publishing A records).
[08:17] <twb> I guess I have misread what xperia2 is trying to achieve.
[08:18] <fahadsadah> twb: It's not designed to tell the internet about your domain.
[08:18] <fahadsadah> But it can.
[08:18] <twb> fahadsadah: have you any notes on this?
[08:18] <twb> I'm interested, at least, because I use dnsmasq extensively for my thin client networks.
[08:19] <fahadsadah> On a boxed router (Netgear, Linksys, DLink are the best for this), forward UDP 53 to the router itself.
[08:19] <fahadsadah> Telnet in, and edit /etc/hosts
[08:19] <fahadsadah> (it's usually volatile, though - resets on reboot)
[08:21] <twb> Uh, "forward UDP 53 to itself" means what, in iptables terms?
[08:22] <twb> I am not dealing with a crappy vendor OS -- my routers run Debian or Ubuntu
[08:22] <twb> Do you mean an -i <internet iface> -d 53 -j DNAT --to 127.0.0.1 or something?
[08:24] <twb> It sounds rather like you're advocating just making dnsmasq bind to the internet iface in addition to lo and the LAN iface.  But I think the information you want to publish to the internet is quite different from what you would publish to the local network.
[08:27] <xperia2> twb: if i understand right fahadsadah he tell as first to open the port 53 on the router
[08:27] <xperia2> as this port normaly is closed by the nat
[08:28] <fahadsadah> xperia2: Yes, but twb is right. You want it forwarded to the router itself.
[08:28] <twb> fahadsadah: why?
[08:28] <xperia2> on my tomato firmware i can easy open ports and forward them to the server
[08:28] <fahadsadah> twb: Demonstration purposes.
[08:28] <twb> fahadsadah: instead of dnatting onto the lo interface, why wouldn't you just tell dnsmasq to bind to eth+ ?
[08:29] <fahadsadah> I'm assuming you want to do this from the web if.
[08:29] <fahadsadah> Obviously, your way is better.
[08:32] <twb> OK, as long as the wacky workaround you're using is understood to be a workaround and not, you know, sensible :-)
[08:32] <xperia2> so the first step is open port 53 and forward them to 127.0.0.1 ?
[08:33] <fahadsadah> xperia2: No, this is just for demo purposes.
[08:33] <fahadsadah> What twb said is better.
[08:33] <fahadsadah> Much better.
[08:34] <fahadsadah> Anyway, I wouldn't recommend having a router as a DNS server.
[08:34] <xperia2> why that. whats wrong with this solution
[08:34] <xperia2> think its best beside the slow speed maybe
[08:36] <xperia2> okay i willnow ssh in to my tomato router and execute "iptables -i <internet iface> -d 53 -j DNAT --to 127.0.0.1"
[08:36] <xperia2> whats next ? do i need to change some config files that handle my domain ?
[08:36] <twb> I'm out.
[08:36] <xperia2> bye twb !
[08:37] <xperia2> twb: whats <internet iface>
[08:37] <xperia2> is this the wan ?
[09:02] <TeTeT> soren: hi there, are there euca2ools that are known good to operate with UEC 1.6 available on Hardy?
[09:03] <soren> TeTeT: You're asking if Euca2ools have been backported to Hardy? Not that I know of.
[09:03] <TeTeT> soren: yes, that was the question. That's too bad, so we have to go with ec2 tools
[09:04] <soren> TeTeT: They're not packaged for Hardy either.
[09:04] <soren> TeTeT: ...as far as I know.
[09:04] <TeTeT> soren: ok, thanks for the quick response!
[09:04] <soren> TeTeT: Sure.
[09:04] <soren> TeTeT: When do you need this?
[09:05] <soren> TeTeT: We may be able to conjure up a backport.
[09:06] <TeTeT> soren: for the deploying UEC course in the virtual environment
[09:06] <TeTeT> soren: the virtual environment uses hardy virtual machines for students access
[09:12] <soren> When?
[09:26] <TeTeT> soren: the class is in December. I'm preparing the images right now - it is not urgent
[09:26] <soren> We can easily build a euca2ools package before then.
[09:26] <soren> ...for hardy.
[09:29] <TeTeT> soren: excellent, when might it be ready? Mid of November before UDS?
[09:30] <soren> TeTeT: I can't make any promises.
[09:30] <soren> TeTeT: Talk to either ttx or mdz about it.
[09:33] <TeTeT> soren: ok, thanks
[09:33] <TeTeT> soren: I'll postpone that after release, when things are less tight
[09:34] <mdz> TeTeT, appreciated
[10:18]  * ttx runs the UEC/i386 tests
[10:25]  * soren takes a break
[11:42]  * soren lunches
[11:43] <elyezer> I'm using postfix, how can I create a user (for the system too) to receive email but can't login via ssh?
[11:44] <lamont`> elyezer: adduser --disabled-login, prolly some other flags too
[11:44] <lamont`> or make the shell /bin/false, if you want to give him a password to authenticate for IMAP access
[11:45] <elyezer> lamont`: I think that I'll create a group to permit in ssh access
[11:46] <elyezer> lamont`: the bin/false could be good too, I need the password to login in the pop access
[11:50] <\sh> elyezer, take a look at http://workaround.org/ispmail so you don't need system accounts for imap/pop mail users
[11:55] <elyezer> \sh: thanks
[12:03] <alex88> hi all..i want to set dhcp only for a specified interface, how can do it?
[12:04] <\sh> sudo vi /etc/default/dhcp3-server -> INTERFACES="<your interface name>"
[12:04] <\sh> restart dhcp
[12:05] <\sh> or do you mean dhcp client?
[12:06] <alex88> \sh: no i mean server..i'll try thanks..
[12:09] <alex88> \sh: if i start openvpn server, with no dhcp settings in the openvps config, can i just run dhcp server on tap0 right?
[12:12] <\sh> alex88, sry...no clue about such a setup
[12:13] <alex88> ok thanks anyway
[12:13] <\sh> alex88, but the doc on openvpn.org has something
[12:13] <\sh> http://openvpn.net/index.php/open-source/documentation/install.html?start=1 -> search for "Notes -- Setting TAP-Win32 address/subnet automatically via DHCP"
[12:18] <alex88> watching it
[12:23] <zul> morning
[12:23] <elyezer> when sending email using SMTP, to require that the user authenticate I need to use SASL configuration in postfix?
[12:33] <alex88> elyezer: i've  use sasl and it's working..look at ubuntu server documentation..it's all explained
[12:34] <ttx> kirkland: on the test tracker you reported bug 452556 against the Node installer test. I think you rather encountered it during the UEC Instance Run test... could you please move the bug over there ?
[12:34] <elyezer> alex88: thank you
[13:02] <zul> ttx: im going to dup the broken encoding bug
[13:02] <ttx> zul: if you do, keep the one with the biggest impact ?
[13:02] <zul> ttx: yep
[13:02] <ttx> and update title to reflect both symptoms
[13:06] <zul> ttx: one more thing for samba I think we might want to include this fix: https://bugzilla.samba.org/show_bug.cgi?id=6680 otherwise the users will have to use a registry hack
[13:06] <ttx> yes
[13:07] <zul> k
[13:07] <zul> i added that last night to the one I was testing ;)
[13:21] <zul> ttx: ill open a bug in launchpad for that as well
[13:23] <aubre> when's the earliest I can download the Karmic server iso?
[13:27] <zul> you can download the dalies now
[13:27] <aubre> is the one here the final version?
[13:27] <aubre> http://cdimage.ubuntu.com/ubuntu-server/daily/current/
[13:27] <zul> aubre: almost
[13:27] <aubre> zul: ty
[13:31] <aubre> aubre: I want to do a reinstall but I think I will wait for the official cds
[13:32] <ScottK> aubre: Odds are you can download that now and once the official ones are announced, you'll already have it.
[13:38] <aubre> ScottK: ty
[13:42] <alvin> What package needs to be installed on a virtual guest (kvm) if you want to shutdown the guest from virtual-manager or virsh?
[13:43] <alvin> aubre: You can download today and rsync tomorrow: https://help.ubuntu.com/community/RsyncCdImage
[13:47] <zul> ttx: can you do me a favor can you set the priority and set to it to triaged for me https://bugs.edge.launchpad.net/ubuntu/+source/samba/+bug/462626
[13:50] <ttx> zul: sure
[13:52] <atomic_1> this is a bit off but, anyone know of a email2fax app/service ?
[13:53] <atomic_1> apt-cache came up with courier-faxmail with those keywords
[13:53] <atomic_1> but i dont think that's what im looking for
[14:03] <atomic_1> allright, hylafax
[14:24] <aubre> alvin: tyvm!
[14:55]  * nijaba hugs soren for what seems to be a great vm-builder day
[14:56] <soren> nijaba: I realised how much it was bringing me down that every time I look at that list, it's full of "stuff", so I'm cleaning house :)
[14:56] <soren> nijaba: Sorry about all the bugmail :)
[14:57] <nijaba> soren: no, I actually appreciate it, really.
[15:06] <soren> nijaba: :)
[15:14] <alvin> After the Debian Import freeze, a package was added to Debian (libsys-virt-perl, to manage libvirt from perl). Do I have to wait for Lucid, or can an import be requested?
[15:17] <ScottK> alvin: The archive is frozen for release, you have to wait.  Once it's in Lucid, you can request a backport.
[15:17] <ScottK> !backports | alvin
[15:18] <alvin> ScottK: aha, good. Worth a try.
[15:33] <smoser> can someone verify... i've downloaded some daily build isos
[15:33] <smoser> tomorrow will i be able to rsync those with official releases ?
[15:33] <smoser> (if there were changes)
[16:07] <soren> Is mod_rewrite working ok for anyone in Karmic?
[16:09] <soren> And by "ok" I mean "at all".
[16:13]  * soren thinks he knows what's going on.
[16:24]  * soren pauses for dinner
[16:29] <alex88> i've installed vsftpd following ubuntu guide, and after succesfully connected it timeout after LIST command..any help?
[16:30] <KillMeNow> did you uncomment the vsftp_chroot.list line?
[16:31] <alex88> let me check
[16:32] <alex88> chroot_list_enable? no
[16:32] <alex88> it's commented
[16:32] <alex88> but chroot_local_user=YES so every user logged is chrooted
[16:32] <KillMeNow> ok
[16:33] <alex88> right?
[16:33] <KillMeNow> IIRC they run hand in hand
[16:33] <KillMeNow> i have my users chrooted and i have the chroot list enabled
[16:33] <KillMeNow> what it means is that those IN the list are NOT chrooted
[16:33] <KillMeNow> but the list needs to exist
[16:34] <alex88> ok, so just enable all and touch the list file?
[16:34] <KillMeNow> yep
[16:34] <KillMeNow> also when logged in try the ls command
[16:34] <alex88> i'll try
[16:35] <KillMeNow> the list file should be in /etc/
[16:35] <KillMeNow> but you could drop it anywhere IIRC
[16:36] <alex88> same thing..not working
[16:36] <alex88> this is irc client log
[16:36] <alex88> http://pastebin.com/m5eb5e178
[16:37] <alex88> and disabling chroot it gives me on PWD->257 "/home/alex88/" and that's my home folder
[16:38] <alex88> mmhhh..with active ftp mode it's working
[16:39] <KillMeNow> yep
[16:39] <alex88> are there no problems to use active connection right?
[16:39] <KillMeNow> i wouldn't think so
[16:39] <KillMeNow> i'm looking at my configuration right now
[16:40] <alex88> but all clients uses for default passive. damn
[16:41] <KillMeNow> are you going through a firewall?
[16:41] <alex88> yes
[16:41] <KillMeNow> are you behind the firewall?
[16:41] <KillMeNow> so your testing is going through the firewall or no?
[16:41] <alex88> i'm behind nat..so no public ip..
[16:41] <alex88> and the remote machine has ufw
[16:42] <KillMeNow> yea, so you're not on the same network segment as the FTP box
[16:42] <KillMeNow> try to FTP from command line on the FTP server to localhost
[16:42] <KillMeNow> it's either the firewall that is borking things up or your NAT that is
[16:43] <KillMeNow> gotta run to a meeting
[16:43] <KillMeNow> back later
[16:44] <alex88> ok it's working from localhost
[16:44] <alex88> btw, thanks for your help
[16:44] <alex88> i'll use active connection, no problem for me
[16:44] <alex88> have a nice day
[17:25] <jpiche> for services like apache2, what is the correct method of disabling them from starting on boot, since update-rc.d isn't for upstart?
[17:47] <nijaba> mathiaz: updated the last sentence of the release note text as follow on bug #458904: "More detailed steps can be found in the Node installation part of the UEC Package Install tutorial, https://help.ubuntu.com/community/UEC/NodeInstallation." as kirkland has very thoughtfully split PackageInstall in multiple modular documents.
[17:47] <mathiaz> nijaba: hm - though about that as well.
[17:47] <lenios> jpiche, from what i know, you should search for a SXXapache2 in /etc/rc*.d/ and delete it
[17:48] <mathiaz> nijaba: when I pointed mdz to the specific NodeInstallation wiki page, he replied that the instructions were not complete
[17:48] <nijaba> mathiaz: ah? sorry, will revert in that case.
[17:48] <mathiaz> nijaba: since you still had to register the node afterwards
[17:49] <mathiaz> nijaba: which I think makes sense from a workflow perspective
[17:49] <mathiaz> nijaba: that being said the NodeInstallation wiki page could actually be updated to point to the next step in the process
[17:49] <nijaba> mathiaz: hmm. It appears that LP did not take my changes anyway...  so, nm
[17:50] <mathiaz> nijaba: that's why I refered to step 3 in the tutorial rather than the specific wiki page - just to keep things in context
[17:50] <nijaba> mathiaz: yes, makes sense.  Let's leave it like that then.
[17:53] <mathiaz> zul: does bug 449735 only apply to smbclient?
[17:53] <zul> mathiaz: I believe so
[17:54] <mathiaz> zul: or does it also apply to nautilus (via gvfs)?
[17:54] <zul> mathiaz: I havent tested with nautlius
[17:55] <zul> mathiaz: lemme test it out and ill get back to you
[17:56] <mathiaz> zul: the patch attached to the bug lists changes in libsmb
[17:56] <mathiaz> zul: so it may affect other things than just smbclient
[17:58] <jpiche> lenios: okay, i'll try that
[17:59] <lenios> jpiche, "update-rc.d -f apache2 remove" should do it though
[17:59] <jpiche> lenios, i actually just noticed that
[18:01] <jpiche> lenios, yup, that worked, thx
[18:07] <zul> mathiaz: it should affect gvfs but I cant say for certain
[18:16] <mathiaz> smoser: what's the state of bug 461156?
[18:16] <mathiaz> smoser: do you have idea of what needs to be added to the release notes?
[18:17] <smoser> i was just writing it
[18:17] <smoser> what do you tihnk about:
[18:17] <smoser> When an instance accesses its user-data in the Eucalyptus meta data service, it will be base64 encoded.  In order to use this data, the consumer will have to decode the data.  This can be done with 'base64 -d'.
[18:17] <smoser> Because of this bug, ec2-init is unable make use of user-data.
[18:19] <smoser> mathiaz, ^^
[18:20] <mathiaz> smoser: here are some guidelines I'm using for writing release notes:
[18:20] <mathiaz> smoser: 13:51 <mathiaz> you need to provide a title, and then an exaplanation of the symptoms the end user will see, a workaround/how to fix things, and bug number for reference
[18:21] <mathiaz> smoser: so I'd start first by stating what the end user will see as bug
[18:21] <bdmurray> mathiaz: is that supposed to be a bug number in the description of bug 449735?
[18:22] <mathiaz> bdmurray: yes - apparently I got it wrong
[18:22] <mathiaz> bdmurray: I'll update the bug description
[18:22] <bdmurray> mathiaz: cool, thanks
[18:23] <smoser> mathiaz, where did that '13:51' message come from?
[18:23] <mathiaz> bdmurray: right - it seemed wired to me that we already had passed the 500 000 reported bugs in LP
[18:23] <mathiaz> smoser: it's from my irssi
[18:24] <bdmurray> mathiaz: quite
[18:24] <smoser> what channel
[18:24] <mathiaz> smoser: I was talking with kirkland about this and I've just cut-pasted the log
[18:24] <mathiaz> smoser: it was a PM
[18:24] <smoser> ok. was just wondering so i could see the rest of it. but thats fine.
[18:25] <smoser> as you said "guidelines" i wasnted to see the others
[18:25] <mathiaz> smoser: see https://bugs.launchpad.net/ubuntu-release-notes/+bug/458904 for an example
[18:25] <mathiaz> smoser: 13:52 <mathiaz> I've put the release note directly in the bug description so that we don't have to scroll down in the comments to  find the actual release note
[18:26] <mathiaz> smoser: 13:52 <mathiaz> once it's ready for inclusion in the release note wiki page, mark the bug as fix committed for the ubuntu-release-note project
[18:34] <pmatulis> i would like to immunize a process from the oom-killer.  how do i set the value of /proc/PID/oom_adj ?
[18:48] <erichammond> smoser: Do you have code which updates the Amazon AMI pages from source data files like http://bazaar.launchpad.net/~smoser/ubuntu-on-ec2/ami-pages/files ?
[18:48] <smoser> no. but you're more than welcome to write such a thing. wouldn't that be nice?
[18:48] <smoser> thats the last manual thing
[18:48] <erichammond> I've been dreaming about it for a couple years.
[18:49] <erichammond> Mine would be in Perl and you probably want one in Python.
[18:52] <smoser> i have nothing against perl. programs that work are nice.
[18:54] <erichammond> I've also talked off and on with the folks at http://thecloudmarket.com/ that there should be some API or common data format which lets AMI publishers list some of the complexities of the relationships of images, especially identifying the most recent in a series.
[18:55] <erichammond> And proposed similar things to AWS.
[18:58] <erichammond> Are people still stuck on XML these days for structured data or is there any room for YAML?
[18:58] <erichammond> We've been using YAML quite a bit and happily, but don't know if it's just our corner of the world.
[18:59] <ScottK> Debian uses it a lot
[18:59] <ScottK> Python yaml bindings are by far the highest popcon stuff I've packaged for Debian.
[18:59] <erichammond> I assume popular programming languages would support it.
[18:59] <ScottK> I know there are python/perl/java bindings.
[19:00] <ScottK> Probably others too.
[19:00] <erichammond> cool, thanks.
[19:12] <smoser> erichammond, could you take a quick look at https://wiki.ubuntu.com/UEC/Images/NamingConvention in regard to 'removal policy' ?
[19:12] <smoser> i've got to get to writing that, we're flooding amazon with -testing- at the moment.
[19:13] <erichammond> smoser: looking
[19:17] <erichammond> - marker files in S3 => Could also use SimpleDB for easier searching.  SimpleDB is often used to store meta data about S3 objects
[19:18] <erichammond> - rolling removal of "testing" is fine.  you might also reserve the right to delete any testing image which is seriously broken just to save people headaches.
[19:18] <smoser> erichammond, i've not used it.
[19:19] <smoser> not used simpledb.  i think i'll just use the s3 marker files.  i'm just thinking about putting a file named .manifest.xml.unpublished
[19:19] <erichammond> - might want to explicitly state that non-testing images are *never* removed except in emergencies (completely broken, huge security hole discovered right after release, etc.)
[19:19] <smoser> then i can just do a list of that bucket for *.unpublished
[19:22] <erichammond> Yep, simple architectures which store related data close to each other are nice.  I was thinking that you would end up with hundreds of thousands of S3 keys, but this would only relate to the testing bucket which is going to be small.
[19:22] <erichammond> I wrote a simple CLI to SimpleDB which is handy for setting and getting simple values: http://amazon-simpledb-cli.googlecode.com/svn/trunk/bin/simpledb
[19:22] <erichammond> or: http://code.google.com/p/amazon-simpledb-cli/
[19:25] <soren> erichammond: A lot of stuff is moving to json rather than yaml.
[19:25] <erichammond> smoser: The docs seem to be missing a removal policy for "alpha", "beta", and "rc" images
[19:26] <smoser> erichammond, i'll explicity put that there, but the plan is for anything in  milestone to stay indefinitely
[19:26] <erichammond> soren: Yep, I've seen more JSON for communicating data between systems.
[19:26] <smoser> both json and yaml have issues with unicode and such (i could be wrong)
[19:27] <erichammond> soren: For the purpose of defining and documenting AMIs I thought it would also be nice to be human readable which YAML is.
[19:27] <smoser> the reason that xml is big and unwieldy is that it is full featured. those things often go together.
[19:27] <soren> smoser: Sadly, yes.
[19:27] <poningru> indeed
[19:28] <smoser> you really can't suggest something that isn't unicode friendly to be used for descriptions of things.
[19:28] <erichammond> smoser: agreed
[19:28] <smoser> it would be nice if ascii were all you needed, though. :)
[19:28] <soren> "# YAML streams are encoded using the set of printable Unicode characters, either in UTF-8 or UTF-16"
[19:28] <soren> From wikipedia.
[19:28] <erichammond> soren: yay
[19:29] <soren> JSON's basic types are:
[19:29] <smoser> i'm happy to be wrong there.
[19:29] <soren> # String (double-quoted Unicode with backslash escaping)
[19:29] <soren> Likewise from Wikipeida.
[19:29] <soren> Wikipedia, even.
[19:29] <erichammond> So how does the HTML blob for Amazon's AMI fit in to YAML?
[19:29] <erichammond> er, Amazon's AMI pages
[19:30] <erichammond> URI pointing to a file or web location?
[19:30] <smoser> i dont follow
[19:30] <erichammond> I'm just not a YAML expert.
[19:31] <erichammond> Perhaps YAML has some sort of CDATA type thing which lets you specify large blobs of arbitrary stuff.
[19:32] <erichammond> soren: I'm basically hoping that "we" or "they" can come up with a good way to define stuff like http://bazaar.launchpad.net/~smoser/ubuntu-on-ec2/ami-pages/files
[19:32] <erichammond> so that it can be imported and exported to various platforms for letting people find the right AMIs for their purposes.
[19:32] <soren> erichammond: There's a long Debian history of doing stuff in rfc822 format.
[19:51] <moonpup> can anyone tell me the corroect owner/group on dns zone files? should it be named/named
[20:05] <Metapeter4> Hi all. I need to make a folder-structure for a webserver, what characters are ok to use for naming files and folders?
[20:07] <slicslak> hey everyone, which should i use, nbsmtp or ssmtp?
[20:13] <_0verlord> With ksplice installed should I be using dist-updgrade to install new kernels?
[20:14] <_0verlord> Metapeter4: I don't know if there are any characters that you can't use the % substitution for
[20:15] <soren> Metapeter4: Depends on how much hassle you're willing to accept.
[20:15] <soren> Metapeter4: If "none" go with plain ASCII.
[20:15] <_0verlord> Metapeter4: sticking with just alphanumeric plus - and _ usually works well
[20:15] <soren> Metapeter4: Or perhaps only the letter "a". :)
[20:17] <Metapeter4> i see. I only know that underscore and dash plus alphanumeric characters are save for webserver-use... thought someone is aware if the numbersign is safe to use.
[20:18] <soren> "the numbersign"?
[20:18] <soren> #?
[20:18] <Metapeter4> http://www.fileformat.info/info/unicode/char/0023/index.htm
[20:18] <Metapeter4> yes
[20:19] <soren> It depends.
[20:19] <soren> # in a url refers to an anchor on the given page, so it needs to be escaped. If you ever expect a human to enter a URL with a # in it, you're probably going to wind up with confused users.
[20:20] <_0verlord> Metapeter4: why do you feel the need to use extra stuff, particularly characters that have special url uses already?
[20:21] <Metapeter4> i would feel comfortable to make a folder structure with certain prefixes for better structure
[20:22] <_0verlord> Just make an extra directory level for organization
[20:22] <Metapeter4> thanks, ok, nevermind.
[20:22] <_0verlord> :P
[20:51] <_0verlord> So yeah, ksplice - should I still grab the kernel updates with dist-upgrade or not?
[20:54] <jevangelo> hey, how do i just install ubuntu security updates
[20:55] <_0verlord> jevangelo: I think by commenting out everything but the security repos in your apt sources list
[20:57] <jevangelo> ok, just didn't know if it was some kind of apt-get switch
[20:57] <jevangelo> thanks
[20:57] <_0verlord> There very well might be, but that was the first idea that came to my head
[20:57] <_0verlord> Or did you mean that you want to have access to all repo stuff, you just want to do sec updates now?
[20:58] <jevangelo> yea, i want just to the security updates now
[21:00] <_0verlord> jevangelo: after skimming the apt-get man page I don't see an upgrade-this-repo-only flag or anythign to that effect
[21:01] <ScottK> Changing sources.list will do it for sure.
[21:01] <jevangelo> awesome, just did that and apt-get update and then apt-get upgrade is doing just security
[21:11] <bdmurray> kirkland: isn't bug 462693 documented somewhere?
[21:18] <storrgie> My samba config allows for users from windows to access and read/write files without issue... however users in linux cannot connect....
[21:20] <soren> smoser: I forget... Do you have a UEC setup?
[21:23] <silverhead> Hi
[21:24] <silverhead> Is anyone using linux-image-virtual-2.6.31-14 with i386?
[21:24] <silverhead> It's missing all "fs" modules, it seems
[21:25] <silverhead> (it's already reported: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/453073)
[21:26] <silverhead> Good bot
[21:26]  * silverhead gives a cookie to uvirtbot
[21:29] <soren> $DEITY, I hope he's wrong..
[21:33] <soren> Oh, right, all the important ones are compiled in.
[21:34] <soren> phew.
[21:56] <fbc-mx> Hi where can I find an explanation or description for the linux system load indicator? Like what does 0.83 really mean?
[22:07] <JanC> fbc-mx: http://blog.scoutapp.com/articles/2009/07/31/understanding-load-averages is useful maybe
[22:10] <JanC> except that the way that the averages are calculated is not the same as mathematical average because that would take too long  ;)
[22:12] <kirkland> bdmurray: various places, yes
[22:12] <kirkland> bdmurray: bug reports, documentation, etc.
[22:12] <kirkland> bdmurray: which would you like?
[22:13] <bdmurray> kirkland: how about a bug to dupe it to?
[22:13] <kirkland> bdmurray: sure, let me pick one ....
[22:31] <KurtKraut> I've just stared a project for server monitoring that I'd like to share with you. It is called Poor's Man Monitor: http://code.google.com/p/pomamonitor/
[22:39]  * soren calls it a day
[23:50] <smoser> soren, i do. but you're probably sleeping now.
[23:52] <Agent-X> Has anyone worked with OpenERP on Ubuntu Server?