| === erichammond1 is now known as erichammond | ||
| somebody | Hi All, | 00:29 |
|---|---|---|
| somebody | Can someone help me. I can't print. | 00:29 |
| somebody | I want to print from my server | 00:30 |
| somebody | My server has no driver. | 00:30 |
| somebody | It has a parallel interface | 00:30 |
| somebody | I normally CAT to it in Mac OS X | 00:31 |
| somebody | Can anyone help me set it up under CUP Addon Server? Please. | 00:32 |
| somebody | I can't print. | 00:33 |
| somebody | No matter what I try | 00:33 |
| qman__ | anybody know if an ATi Rage XL is supported with the ubuntu server framebuffer? | 00:51 |
| qman__ | my S3 card died | 00:51 |
| mathiaz | bdmurray: oh - I know where I got the wrong bug number while writing a release note. | 01:02 |
| mathiaz | bdmurray: https://bugs.launchpad.net/ubuntu-release-notes/+bug/429781/+edit | 01:03 |
| uvirtbot | Launchpad bug 429781 in eucalyptus "snapshots created in 1.5 do not get imported to 1.6" [Wishlist,Won't fix] | 01:03 |
| mathiaz | bdmurray: ^^ the title is wrong in the edit page | 01:03 |
| mathiaz | bdmurray: it says 'Edit details for bug #512078' | 01:03 |
| === erichammond1 is now known as erichammond | ||
| someones | Hello All, | 01:12 |
| someones | I can't cat to my printer under Ubuntu Server 8.04 LTS like I can in Mac OS X | 01:13 |
| someones | Any idea why? | 01:13 |
| someones | Please. | 01:13 |
| someones | I try cat file | 01:15 |
| someones | > /dev/lp | 01:15 |
| someones | I try cat file > /dev/parport0 | 01:15 |
| someones | Sorry about the first two commands. Typos | 01:16 |
| JanC | someones: is your printer at your parallel port? | 01:17 |
| JanC | and does it understand raw files? | 01:17 |
| someones | It is parallel | 01:20 |
| someones | It is paralel | 01:20 |
| someones | Prallel, Sorry | 01:20 |
| someones | Yes. It understands raw files | 01:20 |
| someones | At least via Serial | 01:20 |
| someones | Hmm | 01:21 |
| jcastro | kirkland: I have a book on raptors, looking it up | 01:26 |
| aubre | good evening - congrats on Karmic everyone - it has been a lot of fun for me to be involved in this project | 01:31 |
| someones | My printer accepts raw files. | 01:52 |
| someones | I can't cat to it. Can anyone help? Please. | 01:52 |
| kirkland | jcastro: heh, thanks | 02:07 |
| kirkland | jcastro: got a couple of comments back; looks like mystery solved | 02:07 |
| jcastro | kirkland: oh? | 02:07 |
| kirkland | http://en.wikipedia.org/wiki/File:Redtailedhawkschertztex.JPG | 02:08 |
| kirkland | jcastro: red tailed hawk | 02:08 |
| jcastro | kirkland: I was leaning towards a broad winged hawk | 02:09 |
| jcastro | kirkland: clearly we need more pics | 02:09 |
| jcastro | they look awesome | 02:09 |
| kirkland | jcastro: i'll post the scorpion i caught last week next :-) | 02:11 |
| jcastro | insects suck compared to birds of prey | 02:12 |
| kirkland | jcastro: dude, it's a scorpion | 02:12 |
| jcastro | heh | 02:12 |
| jcastro | but seriously get some better shots if you see them again | 02:12 |
| kirkland | jcastro: will do | 02:12 |
| jcastro | you gave me something to do while waiting to test a fix, heh | 02:13 |
| kirkland | jcastro: http://people.canonical.com/~kirkland/CIMG0097.jpg | 02:13 |
| kirkland | camera phone picture, not very good | 02:14 |
| jcastro | man that gives me the creeps | 02:14 |
| kirkland | :-) | 02:14 |
| poningru | gaah | 02:25 |
| poningru | need help with getting iconv on php | 02:25 |
| poningru | do I have to recompile php to get it? | 02:25 |
| poningru | or... | 02:25 |
| === freeflyi1g is now known as freeflying | ||
| StrangeCharm | is it possible to change a dm-crypt volume that currently uses a passphrase to be mounted at boot time, so that it can be automaticcaly mounted using a keyfile? | 02:39 |
| qman__ | poningru, most likely, you just need to install additional packages | 02:43 |
| poningru | qman__, it seems to be an issue with getid3.php | 02:44 |
| ajmitch | iconv support should be compiled into php5 | 02:46 |
| twb | In the past when I've had to deal with dribbling php devs, I found that when they said "php needs to be recompiled with foo" that translated in Ubuntu into "install the php5-foo package" | 02:54 |
| ScottK | twb: ajmitch isn't a dribbling php dev. | 02:59 |
| ajmitch | ScottK: I don't know, some days I really feel like it | 03:00 |
| ScottK | "See full publishing history" for clamav gives a long list ... | 03:04 |
| twb | No worries, then. | 03:05 |
| edulacomadreja | i'm looking for a good tutorial on samba + drbd + heartbeat... | 03:06 |
| lbsjack_ | hi,who have install the Eucalyptus in ubuntu 9.10rc? | 03:13 |
| twb | !anyone | 03:13 |
| ubottu | A large amount of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? | 03:13 |
| edulacomadreja | ubottu: well... i need some help with samba + drbd + heartbeat | 03:22 |
| ubottu | Error: I am only a bot, please don't think I'm intelligent :) | 03:22 |
| edulacomadreja | lol | 03:22 |
| lbsjack_ | hi,I can attach the volume to the instance.but in the VM I cannot find it. | 03:22 |
| bogeyd6 | LOLOLOLOL | 03:24 |
| bogeyd6 | omfg i have waited my whole life for that | 03:24 |
| bogeyd6 | ty edulacomadreja | 03:24 |
| twb | lbsjack_: that's beyond me, sorry. | 03:28 |
| twb | edulacomadreja: you still haven't described the problem. | 03:28 |
| twb | edulacomadreja: presumably the first step is to install and configure samba. Have you done that? | 03:29 |
| edulacomadreja | twb: hi!, there is no problem yet... is just that i don't know anything about samba | 03:30 |
| twb | Actually I'm a little puzzled as to where samba fits into your cluster | 03:30 |
| twb | Are you intending to put together a cluster purely to act as a fileserver? That would be weird. | 03:31 |
| edulacomadreja | nope, i have a lamp drbd heartbeat cluster working without problems | 03:32 |
| edulacomadreja | and now my boss wants to install samba on it | 03:32 |
| ScottK | Then tell him to go ahead and do it | 03:32 |
| ScottK | ;-) | 03:32 |
| twb | I don't think Samba needs to do anything special to work with drbd and heatbeat. | 03:32 |
| twb | Samba just serves files from the directory tree, and doesn't care where they live on disk. | 03:33 |
| zzz20091 | Hi, i am running into a problem with DNS (bind9) using the setup supplied with 9.10. I want to setup up a split DNS however all zones must be in a view and named.conf.default-zones breaks this. How much of a problem (current or future) will I give myself if I completely replace the current setup. | 03:37 |
| edulacomadreja | yes, that's what i thought but maybe there are some issues to take care about | 03:37 |
| twb | Do the zone files live in /etc or /var? | 03:38 |
| zzz20091 | the setup is out of the box, so they are in /etc/bind. I would prefer to split them up /etc/bind/local, /etc/bind/external, /etc/bind/slaves | 03:40 |
| zzz20091 | There also seems to be an inconsistency in that /var/run/named rather than /var/run/bind | 03:43 |
| twb | I don't know about bind specifically, but Ubuntu will remember if you modify files in /etc, and avoid deleting your changes. | 03:52 |
| ninnypants | what do I need to send mail from my server? I have followed the directsions here https://help.ubuntu.com/community/Dovecot to install dovecot but I still can't send mail. what else do I need? | 04:18 |
| twb | Is dovecot an MTA? | 04:19 |
| twb | I thought it was an IMAP server. | 04:19 |
| ScottK | It is | 04:22 |
| ScottK | ninnypants: Which Ubuntu release are you using? | 04:22 |
| twb | ScottK: you mean "dovecot is an MTA"? | 04:24 |
| ninnypants | 8.4 | 04:24 |
| ScottK | twb: No, it's an imap server | 04:25 |
| ScottK | I see how my response was ambiguous at best. | 04:25 |
| ScottK | ninnypants: Start with https://help.ubuntu.com/8.04/serverguide/C/postfix.html | 04:26 |
| twb | +1 for installing Postfix. | 04:27 |
| ninnypants | ok thank you | 04:32 |
| ninnypants | can post fix also recieve mail? | 04:33 |
| twb | Postfix talks SMTP. | 04:41 |
| twb | That means it can receive mail from other MTAs, and from SMTP clients. | 04:41 |
| twb | It can't e.g. download mail from imap.gmail.com using IMAP or POP3. | 04:41 |
| ninnypants | does ubuntu-server support shorewall at all? | 04:44 |
| poningru | ninnypants, what are you trying to do? | 04:44 |
| ninnypants | I need to make sure my firewall doesn't block mail | 04:44 |
| poningru | ninnypants, assuming you dont have email servers running inside your firewall... is that correct? | 04:48 |
| twb | ninnypants: the default iptables wrapper junk on Ubuntu is "ufw". | 04:49 |
| poningru | hehe 'junk' | 04:49 |
| twb | ninnypants: shorewall is probably supported in universe, i.e. it gets second-class support. | 04:49 |
| twb | poningru: I am of the "write the iptables-restore script yourself, wrappers just make it worse" school. | 04:49 |
| poningru | true that | 04:50 |
| poningru | twb++ | 04:50 |
| twb | Yes, someone can probably use a wrapper without understanding iptables -- but do you really want your firewall configured by someone who doesn't understand it? | 04:50 |
| poningru | I cant wait till the next gen of linux firewall | 04:51 |
| poningru | it is based on bit shifting essentially | 04:51 |
| twb | The other problem with wrappers is that every customer uses a different one, so I not only have to understand iptables, but ALSO half a dozen completely different wrappers | 04:52 |
| poningru | if {16 bits from the start is 0} then DROP | 04:52 |
| poningru | twb, heh | 04:52 |
| pwnguin | so stateful inspection | 04:52 |
| poningru | pwnguin, yes | 04:52 |
| pwnguin | or just packet inspection? | 04:52 |
| poningru | pwnguin, it does what iptables does already | 04:52 |
| pwnguin | ive no clue what iptables does | 04:52 |
| twb | iptables just configures netfilter. | 04:53 |
| pwnguin | i can barely understand netfilter | 04:53 |
| poningru | but instead of doing it i.e TCP or UDP it bases it on different pieces of the packet itself | 04:53 |
| poningru | so it allows you to mess around with broken packets | 04:53 |
| poningru | look for next gen firewall in lwn.net | 04:53 |
| poningru | they explained it pretty well | 04:53 |
| pwnguin | i should write something to visualize iptables rules in graphviz | 04:54 |
| pwnguin | or | 04:54 |
| pwnguin | i can use google | 04:54 |
| pwnguin | http://jekor.com/gressgraph/ | 04:54 |
| twb | Ooh, thanks! | 04:56 |
| ninnypants | how do I determin my mailservers class range? | 04:57 |
| twb | What is a class range? | 04:58 |
| twb | pwnguin: ew, it parses -L instead of -save output | 04:58 |
| pwnguin | twb: i agree, the diagram's ugly | 04:59 |
| twb | There's a limit to what you can achieve with graphviz, because it's not pic. | 04:59 |
| twb | But OTOH it works at all because it's not pic :-) | 04:59 |
| pwnguin | pic? | 05:00 |
| twb | Let's see if gressgraph uses HTML tables within the nodes... | 05:00 |
| twb | pic is a tool used to create box-and-arrow diagrams in manpages. | 05:00 |
| pwnguin | heh | 05:01 |
| twb | i.e. it predates TeX's metapost and such | 05:01 |
| twb | Which I have been too lazy to learn so far | 05:01 |
| pwnguin | i saw someone who wrote a box & arrow diagram to graphviz converter | 05:01 |
| twb | Haha, gressgraph is a Haskell program | 05:01 |
| ninnypants | not sure under base configuration here https://help.ubuntu.com/8.04/serverguide/C/postfix.html it says to change their example ip and class range to the class range of my mail server | 05:02 |
| pwnguin | you could probably write a layout engine that emulates pic | 05:02 |
| ninnypants | the example is 192.168.0/24 | 05:02 |
| === erichammond1 is now known as erichammond | ||
| twb | ninnypants: that is CIDR "class C" IP range. | 05:05 |
| twb | ninnypants: what it's asking for is the IP range of your local network. | 05:05 |
| ninnypants | do I just leave it off if I have a static IP? | 05:06 |
| twb | No. | 05:07 |
| twb | Do you *have* a local network? | 05:07 |
| ninnypants | I don't know the setup the server is hosted elsewhere | 05:10 |
| twb | I can't really help you with that one, since I don't have a network diagram in front of me, and I don't know what you're actually trying to set up. | 05:11 |
| ninnypants | I was just able to send mail so I assume that I got it correctly, but can you explain it to me I would like to understand instead of guess | 05:14 |
| twb | You just want a VM to be able to send emails (e.g. from smartd)? | 05:15 |
| twb | You don't need it to relay mails from workstations? | 05:15 |
| ninnypants | nope | 05:15 |
| ninnypants | just a vm able to send emails | 05:16 |
| twb | Then I would normally use msmtp rather than postfix. | 05:16 |
| twb | What you have is a "satellite" configuration. | 05:16 |
| twb | All it needs to do is send its own email to a "smarthost" mail server, which knows how to forward mail on to the actual destination. | 05:17 |
| poningru | ninnypants, now when you say send emails... | 05:18 |
| poningru | do you mean like from thunderbird? or other email clients? | 05:18 |
| poningru | what is it exactly you are trying to accomplish? | 05:18 |
| poningru | do you want an email server that handles sending your mail? | 05:19 |
| twb | Mail is such a sea of ambiguity. | 05:19 |
| poningru | seriously | 05:19 |
| twb | I have a hell of time explaining to people that Darcs' --sendmail-command doesn't need the sendmail project. | 05:19 |
| === erichammond1 is now known as erichammond | ||
| ninnypants | from thunderbird but I also need to recieve | 05:20 |
| poningru | ... | 05:22 |
| poningru | ninnypants, who do you have email setup with | 05:22 |
| poningru | your university? your internet provider? a gmail account? a hotmail account? | 05:23 |
| twb | Hang on, I thought we were setting up a server. | 05:23 |
| poningru | twb, clearly not | 05:23 |
| twb | If you're setting up a workstation, you can just do everything directly in thunderbird | 05:24 |
| twb | (I'm old-fashioned and don't particularly like that, but it's quite common.) | 05:24 |
| qman__ | you could send your emails in telnet | 05:25 |
| ninnypants | I'm setting up a server. I need to be able to send and recive mail accross multiple sites. guess it probably would have helped if I said it was a web server | 05:26 |
| poningru | ninnypants, in that case I would recommend setting up something like a zimbra or obm | 05:27 |
| twb | haha | 05:27 |
| poningru | to make it really simple | 05:28 |
| twb | I would recommend Zimbra to my worst enemies | 05:28 |
| poningru | twb, hehe | 05:28 |
| twb | "Yes, please run a completely separate second LDAP instance out of /opt" | 05:28 |
| twb | What could possibly go wrong? | 05:28 |
| ninnypants | so omb then? | 05:28 |
| poningru | heh | 05:29 |
| twb | I'm not familiar with omb | 05:30 |
| poningru | twb, you would cringe at it too | 05:30 |
| poningru | though its not that bad | 05:30 |
| twb | I don't know why you'd recommend a huge unwieldy mail/calendar/auth system if ninnypants only needs to send mail | 05:30 |
| twb | ninnypants: but it's still not clear what you actually want | 05:31 |
| poningru | twb, here is what I think about zimbra/other huge unwieldy system | 05:31 |
| qman__ | ninnypants, what specifically needs to send mail, from where, to where, what type of mail, to what end | 05:31 |
| qman__ | in the big picture, what task is the mail accomplishing | 05:32 |
| poningru | if I were to walk into smb manager and tell him give me a server that costs 2000USD and a fat enough pipe I can set up an email server that can send email, do calendering, tasks the works | 05:33 |
| poningru | he would say... "what would happen to it if you were to quit tomorrow", "bring in a competent *nix guy" | 05:33 |
| poningru | "bollocks" | 05:34 |
| poningru | "setup exchange" | 05:34 |
| poningru | ":(" | 05:34 |
| qman__ | exchange is no different | 05:34 |
| poningru | qman__, exactly | 05:34 |
| ninnypants | I need the web server to beable to send mail from email addresses under the hosted domains to email addresses on remote domains but I also need to be able to recieve mail and either forward it or have access to it through thunderbird | 05:34 |
| qman__ | despite what microsoft would like you to think | 05:34 |
| qman__ | exchange is a beast, and requires someone who knows the ins and outs | 05:34 |
| poningru | atleast zimbra/obm/citadel etc. are open | 05:34 |
| poningru | qman__, right but the mid level management doesnt know that | 05:35 |
| qman__ | ninnypants, you want an internet site configuration in postfix | 05:35 |
| poningru | qman__, he also thinks that he can grab a mcse or whatever they call them these days off of the street and have him administer exchange | 05:35 |
| qman__ | poningru, all you ahve to do is tell them | 05:35 |
| poningru | HAH | 05:36 |
| qman__ | if they don't get it, either you're not explaining it right, or they're incompetent | 05:36 |
| poningru | qman__, welcome to the business world | 05:36 |
| poningru | it is most likely the latter | 05:36 |
| qman__ | I don't work for people like that | 05:36 |
| poningru | qman__, you my friend are a lucky man | 05:36 |
| poningru | from what I have dealt with ... it is a nightmare | 05:36 |
| poningru | dont get me wrong it could be that I am an unlucky sob | 05:37 |
| poningru | just saying what I have experienced | 05:37 |
| qman__ | there are plenty of people like that out there | 05:37 |
| qman__ | but I don't work for them | 05:37 |
| poningru | I could be the exception | 05:37 |
| qman__ | if they don't listen to reason, I don't want the job | 05:37 |
| qman__ | I suppose I'm lucky enough to be able to choose my work | 05:37 |
| poningru | qman__, fair enough | 05:37 |
| ninnypants | ok I've got that setup but without forwarders/inboxes, and I'm not sure how to set up email addresses | 05:37 |
| qman__ | ninnypants, create users | 05:37 |
| poningru | ninnypants, like I said you need dovecot or cyrus to check email through an email client | 05:38 |
| poningru | like thunderbird | 05:38 |
| qman__ | not sure about forwarders, but to create email accounts, you just create user accounts on the system | 05:38 |
| qman__ | make sure to change their shell so they can't SSH in | 05:38 |
| qman__ | and yeah | 05:39 |
| poningru | but again my recommendation is using something like obm or zimbra so that it handles all of this for you | 05:39 |
| qman__ | you use dovecot to provide pop3 or imap access | 05:39 |
| qman__ | I strongly recommend against using something like zimbra | 05:39 |
| qman__ | basic email accounts aren't that difficult | 05:39 |
| poningru | qman__, not for us | 05:39 |
| qman__ | unless you need an all in one corporate solution, just stick to postfix and dovecot | 05:39 |
| poningru | qman__, I dont think a begginer can pick up and administer postfix+dovecot just like that | 05:40 |
| poningru | good lord it took me forever to figure out postfix's conf | 05:40 |
| qman__ | ubuntu does all the work for you | 05:40 |
| poningru | it does? | 05:40 |
| qman__ | you just pick "internet site" | 05:40 |
| qman__ | tweak a couple settings to your liking | 05:40 |
| qman__ | and it works | 05:40 |
| * poningru fires up a vm to test this theory | 05:40 | |
| ninnypants | ok what types of configuration should I use with dovecot? I've got it installed and mailboxes set up in /home/user/ but I'm not sure what to do after that | 05:41 |
| qman__ | it's not the most secure mail server in the world | 05:41 |
| qman__ | but it's no worse than anything else automagic | 05:41 |
| qman__ | dovecot, I'd disable pop3 and imap, and only allow connections over SSL | 05:42 |
| qman__ | but you don't have to | 05:42 |
| poningru | qman__, you know what the sad thing is? cablevision ( a major isp ) is using a horrible old smtp/pop server from sun iirc | 05:42 |
| poningru | looked into it and found only about a million and one security issues | 05:43 |
| qman__ | yeah, sun is rough | 05:43 |
| qman__ | pain in the ass to use, too | 05:43 |
| poningru | srsly | 05:43 |
| poningru | I think linux gave them a proper competition that they are learning though | 05:44 |
| poningru | and I think under oracle they are gonna take off | 05:44 |
| qman__ | the only other thing you really need to do from the default configuration | 05:45 |
| qman__ | is get an SSL certificate, and overwrite or use links to replace the snakeoil keys | 05:46 |
| qman__ | #ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem | 05:46 |
| qman__ | #ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key | 05:46 |
| poningru | qman__++ | 05:46 |
| poningru | yes yes definately yes | 05:46 |
| qman__ | I just generated a self-signed cert and overwrote it | 05:46 |
| poningru | and get the pub key and add it to tbird or whichever email client you will be using | 05:46 |
| poningru | do not fall victim to mim | 05:47 |
| qman__ | once you do that, you have a reasonably secure mail server | 05:47 |
| ninnypants | how do I choose the "internet site" to use? | 05:47 |
| qman__ | ninnypants, you do that when you install postfix and dovecot, in the menus | 05:48 |
| qman__ | it asks you | 05:48 |
| qman__ | I think you can redo it with a dpkg-reconfigure of some sort | 05:48 |
| ScottK | sudo dpkg-reconfigure postfix | 05:48 |
| poningru | ScottK, you dont have to do -plow or soemthing like that? | 05:48 |
| ninnypants | yeah you can do it for postfix but what if I'm wanting to send from more than one site | 05:48 |
| ninnypants | poningru: nope I've done the postfix reconfig a few times now | 05:49 |
| ScottK | The internet site should be the mail server you normally send mail out through (unless you have a static IP, reverse DNS, and know what you are doing, you don't want to send it out direct.y) | 05:49 |
| ScottK | That mail server will send mail on to wherever it is supposed to go | 05:49 |
| qman__ | you could configure the others to send mail to it, or you could configure multiple internet sites | 05:50 |
| qman__ | which is the right choice depends on your overall setup | 05:50 |
| ninnypants | how would I configure multiple internet sites I have reverse DNS, and a static IP | 05:53 |
| qman__ | well, basically | 05:53 |
| qman__ | if you have more than one site, with different domains or subdomains, you create separate internet sites for each domain on the respective servers at those sites | 05:54 |
| qman__ | if you only have one domain you want mail sent from, you create one internet site and configure the other servers to send mail to it | 05:54 |
| ninnypants | what if they're all on the same server? | 05:54 |
| qman__ | uh | 05:54 |
| qman__ | if it's all on the same server, how are there multiple sites | 05:55 |
| ninnypants | using vhost | 05:55 |
| qman__ | oh, you mean websites | 05:55 |
| qman__ | I thought you meant actual sites | 05:55 |
| ninnypants | yes | 05:55 |
| qman__ | then you just need one internet site configuration | 05:55 |
| ninnypants | nope sorry for the confusion | 05:55 |
| qman__ | and you set up DNS to make it the mail server for all of them | 05:55 |
| ninnypants | ok then do I just set up an MX record in the DNS? | 05:55 |
| qman__ | yes | 05:56 |
| qman__ | now, if you need mail from multiple domains | 05:56 |
| qman__ | I'm not sure how to set that up, but I know it can be done | 05:56 |
| qman__ | you'd have to find a guide | 05:56 |
| ninnypants | do you mean recieve mail or send mail? | 05:57 |
| qman__ | send mail from different domain names, receive mail to different domain names, all of those domains hosted on your one server | 05:57 |
| ninnypants | so being able to do that will take a different configuration than what I have now? | 05:59 |
| qman__ | well, the configuration right now only uses the domain you tell it to use when you configured it | 05:59 |
| qman__ | you have to add the other domain names | 05:59 |
| ninnypants | any idea how to do that? | 05:59 |
| qman__ | this should help http://workaround.org/articles/ispmail-etch/ | 06:01 |
| qman__ | it's for debian but should work fine on ubuntu | 06:01 |
| qman__ | the parts you need to be concerned with are "virtual domains in a database" and virtual users | 06:04 |
| qman__ | that's really the only way to set up multiple domains on one server | 06:04 |
| ninnypants | does this look like it will be worthwile too http://www.postfix.org/VIRTUAL_README.html | 06:04 |
| qman__ | providing you want separate user accounts for each domain | 06:04 |
| qman__ | if you just want one set of users, accepting mail from different domain names | 06:05 |
| qman__ | like, joe@domain1.com and joe@domain2.com being the same account | 06:05 |
| qman__ | then it's a simple, one-line adjustment | 06:05 |
| qman__ | otherwise it gets complicated | 06:05 |
| qman__ | yes, that tutorial is the right thing | 06:06 |
| ninnypants | if I set it up as joe@domain1.com and joe@domain2.com and they go to the same account will I be able to tell if mail was sent to domain1 or domain2 | 06:07 |
| qman__ | the messages should retain the metadata for that | 06:08 |
| qman__ | but they will be the same account, not separate accounts | 06:08 |
| qman__ | as in, one login gets all the mails for 'joe' at any of the domain names | 06:08 |
| StrangeCharm | how can i convert a dm-crypt volume from using passphrase authentication to mount at boot, to using key-files instead? | 06:09 |
| ninnypants | qman__, thank you for all your help | 06:10 |
| qman__ | no problem | 06:10 |
| ESEDU | Where can I find bind9 error log? | 06:36 |
| ESEDU | it fails to start | 06:36 |
| twb | Hopefully, in /var/log somewhere | 06:36 |
| ESEDU | where there? | 06:36 |
| twb | I don't know. | 06:36 |
| ESEDU | Does any one know? | 06:39 |
| twb | The bind authors probably do. | 06:45 |
| _0verlord | osnap | 06:48 |
| _0verlord | so with ksplice, should I still do dist-upgrades when new kernels are out? | 06:49 |
| twb | !ksplice | 06:49 |
| ubottu | Sorry, I don't know anything about ksplice | 06:49 |
| pwnguin | is ksplice ubuntu supported? | 06:50 |
| twb | Never heard of it | 06:50 |
| pwnguin | its insane | 06:50 |
| pwnguin | in place kernel upgrades, no reboot | 06:50 |
| _0verlord | pwnguin: yes it is, even for servers now | 06:50 |
| pwnguin | hot plug kernels! | 06:50 |
| _0verlord | servers->ubuntu server | 06:50 |
| pwnguin | _0verlord: i mean by ubuntu | 06:50 |
| _0verlord | pwnguin: hmmm, not sure | 06:50 |
| _0verlord | I figured someone in here had played with it | 06:51 |
| pwnguin | i guess what im saying is, maybe you should ask the people you're paying the big bucks for help? | 06:51 |
| _0verlord | It's freely available | 06:51 |
| ESEDU | where am i meant to find bind authors?! | 06:51 |
| _0verlord | ESEDU: I'm sure they have a central project homepage | 06:51 |
| twb | pwnguin: oh, THAT shit | 06:52 |
| pwnguin | ah, its only free for jaunty and karmic | 06:53 |
| pwnguin | LTS requires $$ | 06:53 |
| twb | I meant ksplice | 06:53 |
| _0verlord | ESEDU: https://www.isc.org/software/bind | 06:53 |
| _0verlord | 2s worth of googling | 06:53 |
| pwnguin | me too | 06:53 |
| * twb boggles | 06:54 | |
| pwnguin | http://www.ksplice.com/uptrack/ | 06:54 |
| twb | Someone would allow proprietary blobs into their kernel? | 06:54 |
| twb | Oh wait, now I remember -- the ksplice guys have some kind of ridiculous business model | 06:54 |
| qman__ | ESEDU, bind logs to /var/log/messages | 06:54 |
| ESEDU | how can i check the version of my bind? | 06:54 |
| twb | I was thinking it was some punk just hacking code in between classes | 06:55 |
| pwnguin | heh | 06:55 |
| pwnguin | they're after the billion nines availablity crowd | 06:55 |
| qman__ | ksplice only came out with jaunty | 06:55 |
| qman__ | they may backport it to hardy for money, but it's only free for jaunty and karmic | 06:56 |
| pwnguin | still, you know what else is free? | 06:56 |
| pwnguin | scheduled reboots | 06:56 |
| qman__ | I rather like ksplice | 06:56 |
| pwnguin | i rather like my wallet | 06:56 |
| qman__ | rebooting my internet gateway is not usually an option | 06:57 |
| Boohbah | it will probably cause noobs who don't update their init scripts to break when they finally do reboot. or not | 06:57 |
| qman__ | it only goes down when the power goes out for extended periods | 06:57 |
| pwnguin | if your internet gateway runs ubuntu, it's just a hobby anyways | 06:57 |
| twb | pwnguin: FSVO free = gratis, or libre? | 06:57 |
| pwnguin | FSVO? | 06:58 |
| twb | For some value of | 06:58 |
| pwnguin | gratis | 06:58 |
| twb | Pfft | 06:58 |
| pwnguin | and libre | 06:58 |
| _0verlord | This is just for my home server, I really don't mind playing with it | 06:58 |
| pwnguin | reboots are open source | 06:58 |
| twb | pwnguin: I meant, is ksplice merely free-of-charge in Jaunty and Karmic, or is it GPL'd in jaunty and karmic? | 06:59 |
| twb | Because just calling it "free" can be misleading. | 06:59 |
| pwnguin | twb: i think the code itself is gpl'd | 06:59 |
| pwnguin | but they offer a diff update service | 06:59 |
| twb | Crazy buggers | 07:00 |
| pwnguin | you'd have to be | 07:00 |
| pwnguin | they dont even list a price | 07:00 |
| pwnguin | so you know its damn expensive | 07:00 |
| twb | Hehe | 07:00 |
| pwnguin | http://www.ksplice.com/software | 07:01 |
| pwnguin | http://www.ksplice.com/git/ksplice.git | 07:01 |
| pwnguin | _0verlord: so what happens when lucid is released? | 07:02 |
| _0verlord | pwnguin: I'll upgrade? | 07:02 |
| pwnguin | its an LTS though | 07:02 |
| * _0verlord shrugs | 07:02 | |
| Maelos | What's an LTS? | 07:03 |
| pwnguin | heh | 07:03 |
| Maelos | Is there a new one announced behind 8.04? | 07:03 |
| pwnguin | http://fridge.ubuntu.com/node/1916 | 07:04 |
| pwnguin | "Announcing Ubuntu 10.04 LTS: The Lucid Lynx" | 07:04 |
| pwnguin | http://packages.ubuntu.com/karmic/ksplice | 07:06 |
| twb | I keep laughing at "lucid", because that's what The Kid's fork of Emacs was called. | 07:08 |
| pwnguin | is that your pet name for jwz? | 07:09 |
| twb | Didn't everybody at SAIL call him that? | 07:09 |
| pwnguin | hell if i knwo | 07:10 |
| pwnguin | you know how old i was when SAIL was around? | 07:10 |
| twb | http://www.dreamsongs.com/WorseIsBetter.html | 07:10 |
| twb | We called him "The Kid." | 07:10 |
| twb | That was at Lucid, not at SAIL | 07:11 |
| pwnguin | SAIL? more like FAIL | 07:14 |
| twb | They're still around: http://en.wikipedia.org/wiki/CSAIL | 07:15 |
| qman__ | ksplice is GPL'd, it's just that they provide updates as a service, and happen to do it for free for jaunty and karmic | 07:17 |
| qman__ | you could implement your own update infrastructure based on the totally open and free software | 07:17 |
| syncrondi | anyone here willing to help me figure out some ssh key authentication issues? I've only ever used it, never set it up before... I generated my public/privates and then copied them to my windows host and generated the keys to load into pageant. Now that I have it loaded, putty doesn't try using the key-- tries keybd auth | 07:40 |
| twb | PuTTY uses non-standard keys, IIRC | 07:41 |
| === SyL is now known as Guest94031 | ||
| alex88[sleep] | PuTTy sucks..XD | 07:47 |
| === alex88[sleep] is now known as alex88 | ||
| syncrondi | I have putty working alright with another server I access, but the guys admining that box are better than me :P | 07:52 |
| syncrondi | I need to use it to authenticate with plink for bzr | 07:52 |
| alex88 | dunno man.. | 08:18 |
| syncrondi | I don't use putty for ssh (although I am right now, ironically) alex88.. it's just that I know that if it works in putty, I'm that much closer to having it working in bzr | 08:20 |
| alex88 | i use putty on windows..and i get bored with wrong chars, wrong colours etc.. | 08:25 |
| syncrondi | I'd recommmend SSH Secure Shell 3.2.9 or SecureCRT | 08:26 |
| syncrondi | alex88: do you have the character set on utf-8 ? | 08:28 |
| alex88 | dunno, i've just tried it sometimes when i'm not on linux..so only in rare cases.. | 08:35 |
| alex88 | the linux bash is perfect for ssh.. | 08:35 |
| alex88 | syncrondi: you ever used openvpn server? | 08:37 |
| syncrondi | no, but I want to figure out how to | 08:38 |
| syncrondi | I've heard it's difficult to configure | 08:38 |
| alex88 | nope, i've done it in about 2 hours.. from scratch | 08:38 |
| syncrondi | ah, nice | 08:38 |
| alex88 | i can give you some help if you need | 08:38 |
| syncrondi | That'd be great. I'll probably look to do that next week | 08:39 |
| syncrondi | Are there good tutorials on it, or did you follow a book? | 08:39 |
| alex88 | i've found some tutorials | 08:39 |
| alex88 | books are too long for me...let me give you some links | 08:40 |
| alex88 | linux right? | 08:40 |
| syncrondi | uh. yeah ubuntu | 08:40 |
| alex88 | oh nice | 08:40 |
| syncrondi | I have that Packt publishing book on OpenVPN, but haven't much more than glanced at it | 08:41 |
| syncrondi | oh if you mean the network... I'd want to have Windows, linux, and Mac | 08:42 |
| twb | I have a device with a serial-over-USB thingy. | 08:42 |
| twb | When I plug it into a Debian box, I get "[20126.325698] usb 2-2: FTDI USB Serial Device converter now attached to ttyUSB0" in dmesg. | 08:42 |
| alex88 | syncrondi: ok no problem | 08:42 |
| twb | When I plug it into an 8.04 server, I get "usb 3-2: new full speed USB device using ohci_hcd and address 3", but no mention ot ttyUSBN | 08:42 |
| alex88 | twb: which device is it? | 08:43 |
| twb | It's a "Sheevaplug", basically an embedded ARM server. | 08:43 |
| twb | Like the NSLU2 with a lot more grunt | 08:44 |
| syncrondi | alex88: I'm going to head to bed it's extremely late here. If you want to leave me some links, feel free to /msg me | 08:44 |
| alex88 | syncrondi: this is the most updated for me http://www.ventanazul.com/webzine/articles/openvpn-ubuntu-and-hulu | 08:44 |
| alex88 | twb: 8.04 hardy right? | 08:45 |
| twb | Yep | 08:45 |
| alex88 | https://bugs.launchpad.net/ubuntu/+source/linux/+bug/251952 | 08:46 |
| uvirtbot | Launchpad bug 251952 in linux "[Hardy] FTDI based USB to Serial Converter not recognized" [Undecided,Fix released] | 08:46 |
| twb | Got it | 08:46 |
| alex88 | twb: maybe updating kenel solves the problem | 08:48 |
| twb | http://dev.forums.reprap.org/read.php?12,4546 told me to manually modprobe usbserial and tell it the device's name | 08:48 |
| twb | Hmm, but when I connect I get a lot of ````'s filling the screen :-) | 08:49 |
| alex88 | where?dmesg? | 08:49 |
| twb | No, when I connect to ttyUSB0 with screen | 08:50 |
| twb | I might just have to carry this laptop over there... | 08:50 |
| alex88 | just try another kernel..why not? | 08:52 |
| twb | Because I'm already abusing this system mightily | 08:52 |
| twb | Installing and booting a nonstandard kernel would actually get me in trouble | 08:52 |
| alex88 | ohh...=) i was thinking it's yours.. | 08:53 |
| alex88 | what does modprobe outputs? pastebin in | 08:56 |
| alex88 | *it | 08:56 |
| alex88 | http://sourceforge.net/projects/ftdi-usb-sio/files/ftdi_driver/1.3.3/ftdi_sio-1.3.3.tar.gz/download | 09:02 |
| alex88 | try to recompile and insmod it... | 09:03 |
| dru | im having a slight problem with my shell | 09:18 |
| dru | i :su nagios | 09:18 |
| twb | ITYM sudo -u nagios -i | 09:18 |
| dru | and enter the first letter of a command...and the shell just exits | 09:18 |
| dru | like so | 09:18 |
| dru | imgsrv244:~# su nagios | 09:19 |
| dru | imgsrv244:/root$ aexit | 09:19 |
| _ruben | the user nagios probably doesnt have a valid shell, or an "odd" login script | 09:19 |
| dru | nagios has /bin/bash in /etc/passwd | 09:19 |
| dru | oh | 09:20 |
| dru | thanks twb | 09:20 |
| dru | that did it | 09:20 |
| dru | but im interested to know why the shell does taht | 09:21 |
| dru | *that | 09:21 |
| soren | ttx: I think, at this point, it's better to put off the updated appliance until after the release. | 09:21 |
| ttx | soren: why ? We could use one to test (before imagestore publication) | 09:22 |
| ttx | soren: the new one would "replace" the old one in the store ? | 09:23 |
| soren | ttx: Yes, it would. | 09:28 |
| soren | ttx: I'm building it now, and can push somewhere, but I was just feeling hesitant to rush things into the release. | 09:28 |
| ttx | oh definitely | 09:28 |
| ttx | but we still should have it available for tseting | 09:29 |
| ttx | so, to paraphrase you, it's better to put off publication of the updated appliance until after the release, to give sufficient time for testing it. | 09:29 |
| ttx | soren: ^ | 09:30 |
| soren | ttx: Right. Sorry, had not had a chance to make coffee yet. :) | 09:32 |
| * soren realises he hasn't had breakfast yet. | 09:43 | |
| * soren applies a patch for that | 09:44 | |
| === tonelu_ is now known as tonelu | ||
| soren | ttx: http://uec-images.ubuntu.com/appliances/uec-mediawiki-karmic-appliance.img.tar.gz | 10:09 |
| ttx | soren: I'll test that -- adding to todolist | 10:10 |
| ttx | downloading before the flood | 10:11 |
| dru | Im trying to figur out why ssh-copy-id isnt working | 11:06 |
| dru | if user has a .ssh folder where "its" keys are stored...why arnt the keys written when coping the ssh pub key from "host" to authorized_keys on client | 11:07 |
| dru | lets say user1@host needs access to log onto user1@client to be able to run scripts. so we "ssh-copy-id /.ssh/id_rsa.pub user1@client:/.ssh/authorized_keys" | 11:10 |
| dru | ssh-copy-id returns as if the command has been sucessfully executed...however when loging on to user1@client i still have the old key | 11:11 |
| dru | restarting ssh dosnt help | 11:11 |
| dru | anyone know what im doing wrong ? | 11:11 |
| dru | the key is being copied | 11:18 |
| dru | do i maybe have to do the process for both client and host? | 11:18 |
| dru | strangly it works client to host | 11:21 |
| dru | but not host to client | 11:21 |
| pmatulis | dru: what are you talking about? | 11:22 |
| dru | hey pmatulis | 11:22 |
| dru | im setting up check_ssh for nagios | 11:22 |
| pmatulis | dru: ok, can't help | 11:22 |
| dru | well check_ssh isnt the problem | 11:23 |
| dru | ssh-copy-id is | 11:23 |
| pmatulis | dru: ssh-copy-id is pretty basic, what's the problem? | 11:23 |
| dru | its working from a@A to b@B | 11:24 |
| dru | however i need b to a | 11:24 |
| dru | i can copy the key without any issues...but ssh seems not to be using the key i give | 11:25 |
| pmatulis | dru: did you specify the key to use? | 11:29 |
| dru | in the ssh conf? | 11:30 |
| dru | nope | 11:30 |
| pmatulis | dru: either in your ~/.ssh/config or on the command line (-i) | 11:30 |
| dru | yeah i used the -i option | 11:31 |
| pmatulis | dru: you used -i when trying to connect with the ssh command? | 11:31 |
| dru | like so :ssh-copy-id -i pubkey b@b..... | 11:32 |
| pmatulis | dru: couple of things, i said the ssh command not the ssh-copy-id command | 11:33 |
| pmatulis | dru: secondly, with ssh-copy-id you specify the private key, not the public key | 11:33 |
| pmatulis | dru: -i is always private for either command | 11:33 |
| Boohbah | dru: man ssh-copy-id | 11:39 |
| Boohbah | dru: check your syntax | 11:39 |
| pn | morning all | 11:43 |
| pn | I'm trying to setup a nice PXE server for setting up an ubuntu cluster | 11:43 |
| pn | and I need to support several versions of ubuntu | 11:44 |
| dru | Boohbah: ...im pretty sure my syntax is okay...however dont i need to flush the lkeys or something ? | 11:44 |
| pn | what's the latest and greatest? pxelinux? syslinux? | 11:44 |
| dru | pn http://www.debian-administration.org/articles/478 | 11:46 |
| dru | im afk | 11:47 |
| Boohbah | ssh-copy-id [-i [identity_file]] [user@]machine | 11:48 |
| jdstrand | twb, poningru: fwi, shorewall is in main and hence not a second class citizen | 11:48 |
| Boohbah | pmatulis: the identity file (defaults to ~/.ssh/id_rsa.pub) | 11:48 |
| pn | cheers for that dru - it looks much like what I've been trying - although the latest ubuntu (9.10 and 9.04) seem to be moving the kernel image around in the install ISO and I'm now confused a bit as to which to use | 11:48 |
| jdstrand | s/fwi/fyi/ | 11:48 |
| Boohbah | pmatulis: why would you copy your private key to a remote host? | 11:48 |
| jdstrand | twb, poningru: also, imo iptables wrappers are not 'junk'. whether it is ufw, shorewall or system-config-firewall, these tools help real users and admins. users who need extra protection and admins who want something that is easy to setup and auditable | 11:50 |
| pmatulis | Boohbah: it doesn't copy the private key, it copies the public key associated with the private key, however, i do see the man page defaults to a public key. i guess both work (specifying private or public) | 11:50 |
| Boohbah | pmatulis: ok :) | 11:51 |
| jdstrand | twb, poningru: they aren't for everyone, which is why ufw (at least) can be easily disabled or removed | 11:51 |
| zul | morning | 12:01 |
| dru | pn: basicly you just need to host the image on an apache host | 12:28 |
| dru | you can do that from any system really | 12:29 |
| Sorell | hey guys, | 12:32 |
| Sorell | is 9.10 released yet? | 12:32 |
| pn | dru - i think it's the initial pxelinux.0 image i'm using (this is ubuntu 8.04 LTS server) - it seems a bit braindead about working dhcp or http or something... | 12:34 |
| sommer | morning :) | 12:38 |
| === ogra_ is now known as ogra | ||
| soren | somDude! | 13:00 |
| soren | sommer: Dude! | 13:01 |
| === Jeeves_ is now known as the_real_slim_sh | ||
| === the_real_slim_sh is now known as Jeeves_ | ||
| ttx | smoser: about https://bugs.launchpad.net/ubuntu/+source/eucalyptus/+bug/461156/comments/13 | 13:12 |
| uvirtbot | Launchpad bug 461156 in euca2ools "User data is not parsed correctly by Eucalyptus in some cases" [High,In progress] | 13:12 |
| ttx | smoser: you say that boto encodes user_data using urlsafe_b64encode | 13:12 |
| smoser | correct. | 13:13 |
| ttx | smoser: looking at the code, it seems to use b64encode | 13:13 |
| ttx | smoser: see https://bugs.launchpad.net/eucalyptus/+bug/461156/comments/21 | 13:13 |
| uvirtbot | Launchpad bug 461156 in euca2ools "User data is not parsed correctly by Eucalyptus in some cases" [High,In progress] | 13:13 |
| smoser | hm... yoou are correct. | 13:14 |
| ttx | smoser: ok (just confirming that your analysis doesn't make sense :P) | 13:15 |
| ttx | that said, looking at HmacV2Handler.java, I'm not surprised it fails | 13:15 |
| smoser | i swear i looked at boto... let me check boto upstream | 13:15 |
| smoser | because i *know* i looked at this | 13:15 |
| ttx | smoser: I checked, and it seems to be that way for a long time | 13:15 |
| smoser | yeah, looking at that code, it is no surprise it fails there. | 13:16 |
| ttx | computedSig = HmacUtils.getSignature( secretKey, canonicalString.replaceAll("\\+","%20"), Hashes.Mac.HmacSHA256 ).replaceAll("\\+"," "); | 13:16 |
| smoser | ok, then ttx, maybe i had changed mine somewhere | 13:16 |
| ttx | smoser: for some reason the ec2-api-tools don't hit that code | 13:16 |
| ttx | I kinda like the "compare sigs, if it doesn't match, compare harder" approach they have in there. | 13:17 |
| smoser | must have been user error to make that statment. boto has never used urlsafe as far as i can see (and doesn't now): http://code.google.com/p/boto/source/browse/trunk/boto/ec2/connection.py | 13:17 |
| smoser | ttx, maybe i'm wrong, but i thought that ec2-api-tools use a soap interface and ueca use rest | 13:18 |
| smoser | or vice versa | 13:18 |
| soren | smoser: That's right. | 13:18 |
| smoser | and i just assumed it was a different backend handling | 13:18 |
| ttx | smoser: that would explain it :) | 13:18 |
| smoser | i even quoted boto in comment 6 without the urlencode | 13:23 |
| smoser | dummy me | 13:23 |
| smoser | stupid humans are so error prone | 13:23 |
| ttx | smoser: yes, the fake quote almost got me | 13:25 |
| ttx | smoser: that might make the bug a boto bug, btw | 13:26 |
| smoser | i dont think so. | 13:27 |
| smoser | since patched version of euca2ools functions against ec2 correctly | 13:27 |
| smoser | it is possible that ec2 is in the backend doing some "if this looks to be urlsafe, then urlsafe_decode, otherwise decode" | 13:28 |
| Baversjo | Hello! Im trying to block and log SSH brute force attacks. The block part is working. However, I would not like to log EVERY brute force attempt to syslog. I would like to log let's say one every minute or something. Is this possible? I've tried with the following rule: | 13:30 |
| Baversjo | -A SSH_LOG -m limit --limit 5/min -j LOG --log-prefix "iptables ssh bruteforce: " --log-level 4 | 13:30 |
| smoser | but python seems to think thats ok, tierry: | 13:30 |
| smoser | >>> base64.urlsafe_b64decode(base64.b64encode(" << FOO >")) | 13:30 |
| smoser | ' << FOO >' | 13:30 |
| ttx | smoser: yes, that's not really the issue | 13:30 |
| ttx | smoser: the problem is the "+" that appears in the querystring breaks sig validation | 13:31 |
| ttx | since it plays games with URLDecode and some specialchar replacements | 13:31 |
| smoser | yeah. | 13:31 |
| ttx | smoser: I'll let them sort it out. Or at least try to. | 13:32 |
| smoser | yeah | 13:32 |
| ttx | smoser: unless you want to have a look into it | 13:32 |
| smoser | computedSig = HmacUtils.getSignature( secretKey, canonicalString.replaceAll("\\+","%20"), Hashes.Mac.HmacSHA256 ).replaceAll("\\+"," "); | 13:32 |
| smoser | computedSigWithPort = HmacUtils.getSignature( secretKey, canonicalStringWithPort.replaceAll("\\+","%20"), Hashes.Mac.HmacSHA256 ).replaceAll("\\+"," "); | 13:32 |
| smoser | well thats the issue. | 13:32 |
| uvirtbot | New bug: #439566 in ubuntu-meta (main) "add python-software-properties to ubuntu-standard" [Wishlist,Triaged] https://launchpad.net/bugs/439566 | 13:33 |
| ttx | smoser: that must be there for a reason. (I hope) | 13:33 |
| ttx | smoser: so they might need to do it in a slightly more selective way | 13:33 |
| smoser | yeah. | 13:34 |
| ttx | smoser: i confirmed that = or / don't pose any problem. Only + will | 13:34 |
| smoser | we want this fixed asap though | 13:34 |
| smoser | as right now the only way to get valid data to a instance is to use ec2-api-tools with uec | 13:35 |
| smoser | which is a explicit violation of ec2-api license (that part is just heresay, i've not verified, but doesn't seem unreasonable) | 13:35 |
| soren | smoser: ACK | 13:37 |
| smoser | good. then i was justified in not suggesting that work around in the release note | 13:38 |
| soren | smoser: http://aws.amazon.com/asl/ section 3.2 | 13:40 |
| soren | Sorry, 3.3, I mean. | 13:40 |
| smoser | ttx, have you tested that if you use urlsafe_b64encode in boto that would fix the problem ? | 13:40 |
| smoser | soren is all about reading legal info today | 13:40 |
| ttx | smoser: no. And I think you'd need to adjust decoding in euca to switch to UrlBase64Decode | 13:40 |
| smoser | ttx, you're probably right. | 13:41 |
| smoser | and maybe i'm nmissing something, but it looks to me that if you're putting that into a url (which i think is happening) then you should use urlsafe_b64encode | 13:42 |
| ttx | smoser: that's what I meant by boto bug... but maybe its not boto that makes a URL out of it | 13:43 |
| ttx | smoser: but I agree that those "+" replacements seem slightly out of place | 13:44 |
| ttx | proper use of [url]base64 should prevent the need for those | 13:45 |
| smoser | ttx, yeah, so it'd take some more digging, but that may well be a boto bug. that said, ec2 deals with it | 13:46 |
| smoser | so, euca *can*, and to be 100% api compatible, has to | 13:46 |
| phreestyle-work | having a problem with samba ads authentication. I keep getting an error in my log file that says ads_secrets_verify_ticket: failed to fetch machine password. Then I get another one saying: Failed to verify incoming ticket with error NT_STATUS_LOGON FAILURE! | 13:49 |
| ttx | the way they play with this "+" is giving me headaches. | 14:02 |
| * ttx switches to productive testing time | 14:02 | |
| zul | ttx: ? | 14:04 |
| ttx | zul: testing the new mediawiki appliance from Soren. | 14:05 |
| zul | ttx: ah | 14:05 |
| phreestyle-work | can someone help me with my samba server problem? | 14:10 |
| ttx | soren: works for me. Logo is still ugly, redirection works. Anything else I should be testing ? | 14:15 |
| soren | ttx: Not really, I think. | 14:15 |
| ttx | Note that http://x/anything redirects to 404 http://x/mediawiki/anything, but tha's a feature, I guess | 14:16 |
| soren | I like to think so :) | 14:16 |
| ttx | well, "anything-but-/" | 14:16 |
| soren | ttx: And /mediawiki/* | 14:17 |
| ttx | works alright | 14:17 |
| soren | ttx: Fantastic. Thank you. | 14:17 |
| ttx | soren: do you still plan to change the logo ? | 14:19 |
| phreestyle-work | does anyone know anything about samba active directory integration? | 14:30 |
| sommer | phreestyle-work: you might double check your "add machine account" setting in smb.conf | 14:31 |
| phreestyle-work | sommer: I don't have that line in smb.conf | 14:32 |
| sommer | phreestyle-work: woops meant "add machine script" | 14:33 |
| phreestyle-work | sommer: I don't have an add machine script...unless samba made one | 14:33 |
| sommer | phreestyle-work: you have samba installed? you're looking in /etc/samba/smb.conf? | 14:34 |
| phreestyle-work | sommer: yes, and I have it configured to authenticate against winbind | 14:34 |
| sommer | phreestyle-work: did you use your own smb.conf or modify the one from the package? either way you can add a "add machine script" option. man smb.conf will give you the details | 14:35 |
| phreestyle-work | sommer: winbind also works: wbinfo -t, wbinfo -u, wbinfo -g all work fine | 14:35 |
| phreestyle-work | sommer: do I really need that to have XP clients access shares in Samba? | 14:36 |
| sommer | isn't that what you were asking about? or am I confused | 14:36 |
| ivoks | congratulations everybody | 14:36 |
| zul | ivoks: it aint done yet | 14:37 |
| ivoks | zul: well, ubuntu.com says it is :D | 14:37 |
| phreestyle-work | I'm trying to get Samba to work with an existing Windows 2003 domain. The XP cleints are getting asked for their username and passwords when they shouldn't be | 14:37 |
| zul | ivoks: well I guess I was wrong ;) | 14:37 |
| zul | ivoks: well congrats to you too then | 14:37 |
| kblin | phreestyle-work: what version of samba? | 14:37 |
| ivoks | hehe | 14:37 |
| phreestyle-work | 3.3 something.... | 14:37 |
| ivoks | i got flu | 14:37 |
| ivoks | fsck | 14:38 |
| phreestyle-work | working in Ubuntu 9.04 | 14:38 |
| kblin | phreestyle-work: and the samba server is joined to the domain, winbindd running and all that stuff? | 14:38 |
| ttx | ivoks: yo | 14:38 |
| phreestyle-work | kblin: yes, I can run wbinfo -t and everything and it works fine | 14:38 |
| ivoks | ttx: hi | 14:39 |
| ttx | ivoks: don't believe what you see on the Internet | 14:39 |
| kblin | phreestyle-work: can you wbinfo -a a domain user as root? | 14:39 |
| ivoks | ttx: hahaha | 14:40 |
| ivoks | ttx: i don't - i'm mirror admin :D | 14:40 |
| phreestyle-work | kblin: yes | 14:40 |
| kblin | so, what's the deal with that cloud thing? | 14:40 |
| kblin | phreestyle-work: hm, interesting. any hints what's going wrong in the smbd logs? | 14:40 |
| phreestyle-work | kblin: log says Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE! | 14:41 |
| kblin | uh | 14:41 |
| ttx | watching #u-r-p is fascinating | 14:41 |
| kblin | try wbinfo -k then | 14:41 |
| zul | ivoks: swine flu? | 14:41 |
| ivoks | zul: could be | 14:41 |
| sommer | phreestyle-work: the XP client is accessing your ubuntu machine correct? and the XP machine is also part of the domain? | 14:41 |
| zul | ivoks: ick....hope you get better in the next two weeks | 14:41 |
| ivoks | :) | 14:42 |
| phreestyle-work | sommer: yes | 14:42 |
| zul | ivoks: otherwise stay home | 14:42 |
| ivoks | it's just a flu | 14:42 |
| sommer | ivoks: just wash your hands a lot... it'll get better :) | 14:42 |
| phreestyle-work | kblin: wbinfo -K works too | 14:42 |
| ivoks | sommer: wanna be my roomate? :D | 14:42 |
| kblin | phreestyle-work: ok, so you clearly can get kerberos tickets across :) | 14:42 |
| phreestyle-work | kblin: yea, but samba keeps popping the error whenver a client connects to it | 14:43 |
| kblin | can you smbclient to the local machine as a domain user? | 14:43 |
| sommer | ivoks: sure, I'm pretty sure I put you down, heh | 14:44 |
| === deimos_ is now known as Garandil | ||
| phreestyle-work | kblin: here's my smb.conf file: http://pastebin.com/m594cab3 | 14:44 |
| ProfMerlin | hey guys | 14:45 |
| sommer | phreestyle-work: did you say you're using likewise? | 14:45 |
| phreestyle-work | kblin: using smbclient -L localhost -U administrator returns a list of the shares | 14:45 |
| ProfMerlin | quick question | 14:45 |
| ProfMerlin | going to reinstall ubuntu server. but need LVM support | 14:45 |
| phreestyle-work | sommer: I was, but I left the domain with it because I coulnd't get samba to wortk | 14:45 |
| ProfMerlin | do i download the Alternate install cd? | 14:45 |
| ProfMerlin | or will the normal install cd also have it? | 14:46 |
| kblin | phreestyle-work: hah, I don't think ADS will work over port 139 | 14:46 |
| kblin | phreestyle-work: any reason why you don't allow 445 | 14:46 |
| phreestyle-work | kblin: I added that because I kept getting erros about writing 4 bytes to client | 14:47 |
| phreestyle-work | kblin: there was a page that said to add the smb ports = 139 line to stop that from happening | 14:48 |
| kblin | aha... | 14:48 |
| ProfMerlin | oi. guys? | 14:48 |
| kblin | personally I'd be highly suspicious about advice not from an samba.org site :) | 14:48 |
| phreestyle-work | kblin: I'm slowing learning that :) | 14:49 |
| nijaba | ProfMerlin: Default server CD support LVM fine. It is even the default in it | 14:49 |
| Baversjo | Quick question: Are there any way to upgrade from ubuntu server 9.10 RC to 9.10? | 14:49 |
| ProfMerlin | thanks | 14:49 |
| ttx | Barre: apt-get upgrade ? | 14:49 |
| ttx | Baversjo: : apt-get upgrade ? | 14:49 |
| nijaba | Baversjo: sudo apt-get upate/upgrade ? | 14:49 |
| Baversjo | 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. | 14:50 |
| phreestyle-work | kblin: I think that might have done it, but when didn't it work when I installed likewise-open5 the first time? | 14:50 |
| kblin | no idea. I've never used the likewise stuff | 14:50 |
| Baversjo | Is there any way to see if it's the RC or the real deal? | 14:50 |
| phreestyle-work | kblin: I read on the ubuntu docs that you had to move a secrets.tdb file to make it work, but as usual, the ubuntu doccs are always wrong | 14:51 |
| phreestyle-work | kblin: thanks for the help | 14:51 |
| kblin | phreestyle-work: no problem | 14:52 |
| ivoks | bye all | 14:52 |
| sommer | phreestyle-work: the current server guide is for likewise 4, and needs updated for likewise-open5... should be updated for lucid | 14:55 |
| kblin | sommer: the fun part is that while likewise 4 was samba based, likewise 5 is a completely new beast | 14:55 |
| ttx | kblin: especially 5.4 | 14:56 |
| sommer | kblin: ya, I need to play around with 5 some more | 14:56 |
| * kblin shrugs | 14:56 | |
| kblin | I can do everything I need to do with samba | 14:56 |
| phreestyle-work | sommer: I ended up joining the domain with likewise-open5, and then doing it again with net ads join | 14:58 |
| phreestyle-work | sommer: that was the only way to get samba to work, I guess | 14:58 |
| kblin | anyway, I just saw the ubuntu website was tooting "open source cloud support", and I was wondering what they mean about that | 14:58 |
| kblin | all the whitepapers seem to try selling me the amazon cloud thing | 14:59 |
| phreestyle-work | sommer: I'm not sure what the ramifications are of having two authentication systems running, but it seems to be the only way for it to work | 14:59 |
| kblin | er | 14:59 |
| kblin | I | 14:59 |
| kblin | I'd use either one or the other | 14:59 |
| phreestyle-work | yea, i think i left the domain with likewise-open, then used net ads join | 14:59 |
| kblin | samba should be able to use either, assuming you only have the correct libwbclient intalled | 14:59 |
| sommer | kblin: ubuntu enterprise cloud lets you run your own private cloud if you want | 14:59 |
| sommer | phreestyle-work: not sure what you mean by two auth systems? | 15:00 |
| phreestyle-work | sommer: well, likewise-open and samba's winbind running on the same machine | 15:01 |
| kblin | sommer: ah, ok, I'll poke at this some more then | 15:01 |
| kblin | phreestyle-work: that's bound to blow up in your face | 15:01 |
| kblin | I'm amazed ubuntu even lets you install both at the same time | 15:02 |
| phreestyle-work | kblin: I'm not....they will let you hang yourself if you're not careful | 15:02 |
| zul | congrats everyone but ummmm now what? | 15:02 |
| kblin | phreestyle-work: you sure you didn't use apt-get install --shoot-me-in-the-foot-please ? | 15:03 |
| kblin | ;) | 15:03 |
| phreestyle-work | kblin: lol | 15:03 |
| aubre | did they change the default web interface username/password in the final release for UEC? admin isn't working | 15:04 |
| phreestyle-work | kblin: that package was broken :) | 15:04 |
| kblin | anyway, I've got no clue whatsoever about the likewise stuff | 15:04 |
| phreestyle-work | kblin: but the real trick is to get my other ubuntu server authenticating against the domain as well | 15:04 |
| phreestyle-work | kblin: from my limited experience, it doesn't work | 15:04 |
| kblin | phreestyle-work: depends | 15:04 |
| aubre | Error: Username 'admin' not found | 15:05 |
| kblin | what idmap backend do you use? | 15:05 |
| phreestyle-work | kblin: you're better off following a howto for editing the config file manually | 15:05 |
| phreestyle-work | kblin: well, right now, ad, but I tried lwopen as well | 15:05 |
| phreestyle-work | kblin: doh! samba broke again | 15:06 |
| phreestyle-work | kblin: i just rebooted the server and it's asking for username/password again | 15:06 |
| kblin | you still running winbind and lwopen? | 15:07 |
| kblin | for the ad backend, you need that SFU schema installed on your AD dc | 15:07 |
| aubre | hmm, now I can't even download my uec creds | 15:08 |
| kblin | are you running multipl domains? | 15:08 |
| aubre | using euca-conf | 15:08 |
| aubre | euca_conf | 15:08 |
| phreestyle-work | kblin: ok, I'll remove that line then. wasn't in the howto on the samba site anyways | 15:08 |
| StrangeCharm | how can i convert a dm-crypt volume from using passphrase authentication to mount at boot, to using key-files instead? | 15:09 |
| phreestyle-work | kblin: ok, now I'm getting a different error in my smb log: my username is invalid on this system | 15:10 |
| phreestyle-work | kblin: nevermind, I fixed it by removing that "idmap = ad" line and restarting samba | 15:12 |
| === dendrobates is now known as dendro-afk | ||
| kblin | phreestyle-work: I'd suggest you start with a minimal smb.conf file and add only lines you understand :) | 15:15 |
| aubre | ok, now all of a sudden I can log in - strange | 15:15 |
| phreestyle-work | kblin: yea, I just need one share writable by everyone on this server, so on the server I'm going to use as an actual fileserver, I'm gonna do it the old fashioned way (edit config files) | 15:16 |
| kblin | phreestyle-work: if you only need one domain, you might want to use the "rid" backend for idmap | 15:17 |
| phreestyle-work | kblin: yea, I only have one domain | 15:17 |
| kblin | that is if there's no local users on that box | 15:17 |
| kaushal | hi | 15:17 |
| kaushal | I am following https://help.ubuntu.com/8.10/serverguide/C/samba-ldap.html | 15:18 |
| phreestyle-work | kblin: well, we log into the box as a local user, but I think I followed this guide the last time I set up a server on a Win2003 domain: http://wiki.samba.org/index.php/Samba_&_Active_Directory | 15:18 |
| kblin | ah, careful, the idmap settings changed a bit since 3.0.x | 15:20 |
| kblin | we really should update that wiki page :/ | 15:20 |
| kblin | sorry about that | 15:20 |
| kaushal | ldapsearch -x -H ldaps://localhost -D cn=admin,dc=example,dc=com -w xxxxxxxx | 15:21 |
| kaushal | works perfectly fine | 15:21 |
| kaushal | while running smbldap-populate -u 30000 -g 30000 i get http://pastebin.com/d2a098ec4 | 15:21 |
| kaushal | I am following https://help.ubuntu.com/8.10/serverguide/C/samba-ldap.html | 15:21 |
| foolano | kaushal: double check smbldap-tools configuration | 15:26 |
| kaushal | foolano, shall i paste bin the configs ? | 15:27 |
| ScottK | kaushal: Are you running Ubuntu 8.10? | 15:27 |
| kaushal | Ubuntu 8.04 | 15:27 |
| ScottK | Then don't use the 8.10 docs | 15:28 |
| kaushal | ScottK, is there a doc for 8.04 ? | 15:28 |
| ScottK | Looking | 15:28 |
| kaushal | foolano, i was waiting for your answer | 15:33 |
| foolano | kaushal: check that the configuration you are using with ldapsearch matches the conf for smbldap-tools | 15:33 |
| kaushal | foolano, ldapsearch -x -H ldaps://localhost -D cn=admin,dc=example,dc=com -w xxxxx works perfectly fine | 15:34 |
| kaushal | when i run smbldap-populate command i get http://pastebin.com/d2a098ec4 | 15:35 |
| kaushal | http://pastebin.com/d1397587d --> smbldap.conf | 15:35 |
| kaushal | http://pastebin.com/d63dbbaf6 ---> smbldap_bind.conf | 15:35 |
| ScottK | kaushal: The 8.04 server guide doesn't have a specific samba/ldap section, but you might check https://help.ubuntu.com/8.04/serverguide/C/openldap-server.html and see if there's anything that is obviously changed. | 15:39 |
| kaushal | ScottK, it does not mention about samba ldap ? | 15:42 |
| kaushal | ScottK, i read your line | 15:43 |
| ScottK | kaushal: Yes, it's LDAP only. I thought it might provide some clues. | 15:43 |
| ScottK | The samba-ldap docs appear to have first been added in 8.10 | 15:43 |
| kaushal | I have posted my query to ubuntu-server mailing list too | 15:44 |
| kaushal | ScottK, where can i seek help for my issue ? | 15:44 |
| kaushal | This issue is taking lot of time | 15:44 |
| kaushal | :/ | 15:45 |
| ScottK | I'd say you've asked in the right places. We just released Karmic today so a lot of us who are involved in development are pretty tired. I would counsel patience. | 15:45 |
| kaushal | ScottK, sure :) | 15:45 |
| kaushal | ScottK, so i need to ask here in this channel today ? | 15:46 |
| kaushal | I mean not today | 15:46 |
| ScottK | I'd just wait and see if anyone volunteers to help and then ask again later if no one does. | 15:47 |
| uvirtbot | New bug: #461464 in eucalyptus "ec2 api tools (ec2-api-tools-1.3-42584) not working against 1.6" [Undecided,New] https://launchpad.net/bugs/461464 | 15:47 |
| Von_Dracul | some one speak spanish? | 15:58 |
| mathiaz | ttx: re bug 458904 | 16:00 |
| uvirtbot | Launchpad bug 458904 in ubuntu-release-notes "When installing a node, euca_find_cluster fails to locate the cluster controller if instances are running" [Medium,Fix released] https://launchpad.net/bugs/458904 | 16:00 |
| Von_Dracul | any one knows the minimun requirements of memory for run 9.10 server? | 16:00 |
| mathiaz | ttx: so you were able to run two publication jobs? | 16:00 |
| mathiaz | ttx: I've tried to do that, but then euca_find_cluster would not resolve the ip address correctly | 16:00 |
| mathiaz | ttx: both avahi-publish jobs were running correctly though | 16:01 |
| ttx | mathiaz: I added your upstart job and changed avahi config to disable autopublish | 16:01 |
| ttx | rebooted | 16:01 |
| ttx | then run euca_find_cluster -> PASS | 16:01 |
| ttx | addan IP adress manually | 16:02 |
| ttx | run euca_find_cluster -> PASS | 16:02 |
| mathiaz | ttx: hm... | 16:02 |
| ttx | want me to doublecheck ? | 16:02 |
| mathiaz | ttx: I can try to reproduce it on the test cluster here | 16:02 |
| mathiaz | ttx: well - that means I'd have to go to the office | 16:02 |
| mathiaz | ttx: if it's faster for you | 16:03 |
| ttx | mathiaz: it will need validation on the real scenario, I think. I cheat by adding IP addresses manually | 16:03 |
| mathiaz | ttx: right. | 16:03 |
| ttx | though my cheat should be pretty close to what euca does | 16:03 |
| ttx | since the output of ip addr show is the same | 16:04 |
| mathiaz | ttx: hm - I think I've never tested the publish-address no option with the extra publication job actually | 16:04 |
| mathiaz | ttx: I tested the ignore-interface=eth0 option | 16:04 |
| ttx | mathiaz: that one won't help :) | 16:04 |
| mathiaz | ttx: that lead to non resolvable IPs | 16:04 |
| aubre | ttx: mathiaz: fyi I reinstalled this morning and everything is working for me , including storage controller | 16:05 |
| mathiaz | ttx: ok - I'll test your workaround on the test cluster tomorrow | 16:05 |
| aubre | ttx: mathiaz: I even used the Store to install the images I'm using to test with | 16:06 |
| mathiaz | aubre: glad to hear everything is working! | 16:06 |
| aubre | mathiaz: thanks! if there is something again that you'd like me to check let me know, this system is after all a proof of concept. | 16:07 |
| aubre | I do want to play around with overcommenting memory at some point :P | 16:07 |
| mathiaz | aubre: cool - thanks for offering! | 16:07 |
| aubre | overcommitting I mean | 16:07 |
| aubre | mathiaz: sure! | 16:07 |
| * soren calls it a day | 16:22 | |
| ttx | kirkland: let me know if you think bug 458001 is a good candidate for euca SRUs | 16:25 |
| uvirtbot | Launchpad bug 458001 in eucalyptus "LOGLEVEL in eucalyptus.conf doesn't affect cloud-*.log verbosity" [Low,Triaged] https://launchpad.net/bugs/458001 | 16:26 |
| kirkland | ttx: yeah | 16:26 |
| kirkland | ttx: i think it is | 16:26 |
| ttx | that's a farily simple fix | 16:26 |
| kirkland | ttx: assuming the fix is small | 16:26 |
| kirkland | ttx: then, yes, absolutely SRU worthy | 16:26 |
| ttx | Adding "-l $LOGLEVEL" to eucalyptus-cloud opts (in /etc/init/eucalyptus.conf ) fixes verbosity for cloud-output.log | 16:27 |
| ttx | However the debug and error ones are non-configurable | 16:27 |
| ttx | so I'll split the bug | 16:27 |
| CodeWar | rather basic question, what does ubuntu cloud buy me I have 3 machines at home. will it tie them up such that <a> tasks can move back n forth betweeen machines based on load balancing (static assignment or dynamic?) <b> unify memory on all of them and make thema ppear as a single NUMA system <c> combine their hard drives togehter to present one ginormous backend storage? | 16:32 |
| ttx | kirkland: wanna keep bug 461156 on your plate ? I can take it | 16:36 |
| uvirtbot | Launchpad bug 461156 in euca2ools "User data is not parsed correctly by Eucalyptus in some cases" [High,In progress] https://launchpad.net/bugs/461156 | 16:36 |
| uvirtbot | New bug: #298964 in autofs (main) "autofs.cifs broken when sharing CD drive without CD-ROM" [Low,Incomplete] https://launchpad.net/bugs/298964 | 16:38 |
| uvirtbot | New bug: #332677 in autofs (main) "autofs fails to look up master map from ldap in Intrepid" [Low,Incomplete] https://launchpad.net/bugs/332677 | 16:38 |
| ttx | kirkland: I mean, the eucalyptus part of it | 16:39 |
| === dendro-afk is now known as dendrobates | ||
| uvirtbot | New bug: #463449 in eucalyptus (main) "No possibility to decrease cloud-debug / cloud-error log verbosity (or disable them)" [Wishlist,Confirmed] https://launchpad.net/bugs/463449 | 16:41 |
| uvirtbot | New bug: #355762 in bind9 (main) "package bind9 1:9.5.1.dfsg.P2-1 failed to install/upgrade: el subproceso post-installation script devolvió el código de salida de error 1" [Undecided,Invalid] https://launchpad.net/bugs/355762 | 16:57 |
| Googa | can i make a domain called "something.localhost." | 17:08 |
| Googa | does that sound rational | 17:09 |
| bogeyd6 | Googa yes you can | 17:11 |
| bogeyd6 | and that domain will work for anyone who has their DNS server setting set to that server | 17:11 |
| Googa | thanks | 17:12 |
| qman__ | Googa, the normal thing to do in that type of situation is to use "something.mydomain.local" | 17:17 |
| qman__ | since localhost and localdomain normally always refer to the local host | 17:17 |
| qman__ | but, that will work | 17:17 |
| crohakon | Is there an automated way to setup a dyndns client via console in ubuntu-server? | 17:26 |
| crohakon | anyone? | 17:27 |
| crohakon | never mind, figured it out. | 17:29 |
| Baversjo | Could someone help me with a shell script that doesn't work? It's ony 10 lines.. | 17:32 |
| kirkland | mathiaz: hey, did we put our bug triage days up in the public wiki yet? | 17:32 |
| mathiaz | kirkland: yes - https://wiki.ubuntu.com/ServerTeam/KnowledgeBase | 17:33 |
| Baversjo | This script is placed directly in the bottom of /etc/profile. When I login i get the following error message: " [: 9: mygroup: unexpected operator " | 17:35 |
| Baversjo | http://paste.ubuntu.com/304436/ | 17:35 |
| kirkland | mathiaz: can we get http://qa.ubuntu.com/reports/ubuntu-server-team/dailynewbugs.ubuntu-server.thu.html to refresh more frequently? | 17:35 |
| kirkland | mathiaz: the data there is stale | 17:35 |
| Baversjo | My question is: What is wrong in this script? | 17:35 |
| kirkland | mathiaz: it's as of 10/22 | 17:35 |
| mathiaz | kirkland: right - that's last week | 17:36 |
| mathiaz | kirkland: it's true that the list is not up-to-date. | 17:36 |
| mathiaz | kirkland: it was a screen shot taken last week. | 17:36 |
| kirkland | mathiaz: can we just use a LP search? | 17:36 |
| kirkland | mathiaz: so that it's not so out of date? | 17:36 |
| kirkland | ie, non-cached | 17:37 |
| mathiaz | kirkland: nope :/ - there isn't a by_date criteria | 17:37 |
| qman__ | Baversjo, put quotes around $PGROUP | 17:37 |
| mathiaz | kirkland: ie you can't filter on creation date | 17:37 |
| mathiaz | kirkland: like - I wanna bugs created *before* a specific date | 17:37 |
| kirkland | mathiaz: oh, well, we should get our backlog down to 0 untriaged | 17:37 |
| kirkland | mathiaz: and then we don't need to worry about the data | 17:37 |
| kirkland | mathiaz: date | 17:37 |
| kirkland | mathiaz: the view is just "what's in the sever realm and untriaged?" | 17:38 |
| mathiaz | kirkland: I agree that having a realtime bug search would be better | 17:38 |
| mathiaz | kirkland: right - our backlog is pretty empty now | 17:38 |
| mathiaz | kirkland: so we just need a daily review of what's new | 17:38 |
| mathiaz | kirkland: and get these triagged | 17:38 |
| mathiaz | kirkland: that's the goal of the process | 17:38 |
| kirkland | mathiaz: \o/ | 17:38 |
| Baversjo | qman__: What kind of quotes? I tried this: [ "$PGROUP" == "mygroup" ]; Still same error :( | 17:39 |
| qman__ | those are the right quotes | 17:39 |
| mathiaz | kirkland: even though the list is getting stale a few days later, the review is supposed to happen the day following the generation | 17:40 |
| mathiaz | kirkland: so the accuracy of the list is not that bad. | 17:40 |
| zul | hey mathiaz I was thinking of using bzr more for the packaging in lucid how do you think we should go about doing it? | 17:42 |
| Baversjo | qman__: The script works when I login as admin, but when I log in as a newly created user (useradd -g mygroup hello) it prints an error message | 17:42 |
| mathiaz | zul: hm - use it? | 17:42 |
| qman__ | Baversjo, I just tested that section of the script on my machine, it works | 17:42 |
| zul | mathiaz: like as a workflow | 17:43 |
| mathiaz | zul: well - instead of doing an apt-get source, do a bzr co lp:ubuntu/src-package-name | 17:43 |
| mathiaz | zul: or bzr branch | 17:43 |
| zul | and if there is no bzr tree for it? | 17:43 |
| Baversjo | qman__: Cool thx for me also but not for these newly created users :( | 17:43 |
| mathiaz | zul: ask james_w to do an import | 17:43 |
| zul | mathiaz: sounds reasonable | 17:43 |
| mathiaz | zul: most of the archive should be imported now though | 17:43 |
| zul | i just noticed samba and apache isnt | 17:44 |
| mathiaz | zul: and whenever you prepare a new package upload, I'd suggest to ask for review via LP | 17:44 |
| qman__ | Baversjo, what is the output of groups|awk '{print $1}' for that user? | 17:44 |
| mathiaz | zul: if the package isn't imported, ask james_w | 17:44 |
| mathiaz | zul: merges could also be done via package branches | 17:45 |
| Baversjo | qman__: The output is "mygroup" | 17:45 |
| mathiaz | zul: since there is an import of the debian archive as well | 17:45 |
| Baversjo | qman__: It's really wierd. | 17:45 |
| zul | mathiaz: I think the review stuff would slow us down | 17:45 |
| qman__ | Baversjo, without quotes, right | 17:45 |
| mathiaz | zul: depending on the size of the changes not necessarly | 17:46 |
| Baversjo | qman__: Yes, without quotes | 17:46 |
| mathiaz | zul: quality is improved by reviews | 17:46 |
| mathiaz | zul: as well as knwoledge sharing | 17:46 |
| zul | mathiaz: true we should have like a designated person per day for reviewing | 17:46 |
| qman__ | Baversjo, I think I have the answer | 17:47 |
| qman__ | Baversjo, the user's shell must be bash in order for that to work | 17:47 |
| mathiaz | zul: right - this is what the LP is doing and other teams as well | 17:47 |
| qman__ | Baversjo, users without home directories get dash, not bash | 17:47 |
| mathiaz | zul: we'll have to see how things work out for our own team | 17:47 |
| mathiaz | zul: we'll never know if we don't try | 17:47 |
| zul | mathiaz: agreed | 17:47 |
| Baversjo | qman__: Okey let me try that thank you! This user's got $ | 17:48 |
| Baversjo | at his prompt and my regular user's got johan@baversjo-server | 17:48 |
| qman__ | right | 17:49 |
| qman__ | I did the same thing, same problem | 17:49 |
| qman__ | ah, figured it out | 17:50 |
| qman__ | to make it work in dash, change == to = | 17:50 |
| uvirtbot | New bug: #236831 in lm-sensors (main) "fancontrol parse error" [Low,Confirmed] https://launchpad.net/bugs/236831 | 17:50 |
| qman__ | it still works in bash with a single = | 17:51 |
| qman__ | so that will solve the problem all around | 17:51 |
| Baversjo | qman__: Thank you very much works like a charm! | 17:52 |
| RoyK | hi all. where can I read more about this cloud stuff in 9.10_ | 17:58 |
| RoyK | ? | 17:58 |
| uvirtbot | New bug: #232413 in minicom (main) "Crash when receiving garbage from serial line." [Low,Incomplete] https://launchpad.net/bugs/232413 | 18:03 |
| uvirtbot | New bug: #326608 in minicom (main) "on minicon console whem zmodem is selected "failure executing protocol" appears and cant transmit data from host to target" [Low,Incomplete] https://launchpad.net/bugs/326608 | 18:03 |
| bventura | samba ? .. I've set a force directory mask = 0755 on my share, but when I connect from another computer and put a folder in the share it gets created with 0777 permssions every time.. what am I missing here? same result for file + create mask it just does not seem to work | 18:11 |
| RoyK | bventura: unix client_ | 18:12 |
| RoyK | ? | 18:12 |
| bventura | the client is mac | 18:12 |
| RoyK | bingo | 18:13 |
| bventura | whats up? this is driving me crazy | 18:13 |
| RoyK | look up unix extensions in the smb.conf manual | 18:13 |
| bventura | ok | 18:13 |
| RoyK | or in short, add "unix extensions = no" to the global section | 18:13 |
| bventura | ok | 18:13 |
| RoyK | unix extensions allow the client to define umask and so on | 18:14 |
| bventura | aha | 18:14 |
| bventura | \OH YEAH | 18:16 |
| bventura | that worked thanks for the help i' | 18:17 |
| bventura | ve been trying to figure that out forever | 18:17 |
| RoyK | :) | 18:18 |
| uvirtbot | New bug: #437600 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 5.1.30really5.0.75-0ubuntu10.2 failed to install/upgrade: my.cnf was missing" [Undecided,Incomplete] https://launchpad.net/bugs/437600 | 18:28 |
| uvirtbot | New bug: #440931 in mysql-dfsg-5.0 (main) "package mysql-server-5.0 5.1.30really5.0.75-0ubuntu10.2 failed to install/upgrade: ?????????? post-installation script ????????? ??? ?????? 1" [Undecided,Incomplete] https://launchpad.net/bugs/440931 | 18:28 |
| jfb_h2o | anyone know how to define specialhosts so this: http://paste-it.net/public/bacc0f1/ works | 18:31 |
| LyonJT | Hey | 18:58 |
| LyonJT | What can i use for a SSL VPN Server | 18:58 |
| LyonJT | ? | 18:58 |
| _ruben | openvpn is a commonly used ssl vpn server | 19:02 |
| _ruben | and sslexplorer's kinda nice too | 19:02 |
| RoyK | openvpn should be a good solution | 19:02 |
| nick125 | So, who's planning on upgrading their server(s) to Karmic? | 19:03 |
| maswan | nick125: Already running it in production since last week. :) | 19:04 |
| nick125 | maswan: haha | 19:04 |
| nick125 | I'm tempted to upgrade my server...but I'm a bit worried about how it'd affect Xen. | 19:04 |
| nick125 | UEC looks neat, but I'm betting that its KVM based. | 19:05 |
| qman__ | I've been running karmic on my desktop for a week, but all my servers (except one) are still running hardy | 19:11 |
| qman__ | and that one that | 19:11 |
| qman__ | 's running jaunty will get upgraded in a few weeks, once the mirrors recover | 19:11 |
| nick125 | I really wish that Xen was better supported in Ubuntu. I mean, at least a kernel or something... | 19:14 |
| qman__ | KVM took over | 19:15 |
| nick125 | Yeah :( | 19:16 |
| qman__ | I haven't played with it at all | 19:16 |
| nick125 | It's not that I like Xen that much, it's just that without VT/SVM, I don't have many options. | 19:16 |
| qman__ | the only machine I have with hardware virtualization support is my laptop | 19:17 |
| qman__ | realistically, though | 19:17 |
| qman__ | any serious VM implementation would be on new hardware anyway | 19:18 |
| qman__ | so for the vast majority it's a non-issue | 19:18 |
| qman__ | I'm still running on 939s though | 19:18 |
| nick125 | My server is a little Celery box and I don't have money to upgrade it (and not really the need to, either) | 19:19 |
| qman__ | no argument from me, my shell server is a K6 | 19:21 |
| qman__ | just saying, there's not much demand for serious non-VT virtualization | 19:21 |
| uvirtbot | New bug: #247283 in nis (main) "bind_wait uses ypwatch without a full path" [Low,Incomplete] https://launchpad.net/bugs/247283 | 19:27 |
| uvirtbot | New bug: #353698 in nis (main) "Ypserv segfault on Ubuntu 8.10 Intrepid" [Low,Incomplete] https://launchpad.net/bugs/353698 | 19:27 |
| uvirtbot | New bug: #372426 in nis (main) "NIS not working" [Low,Confirmed] https://launchpad.net/bugs/372426 | 19:27 |
| ruben23 | hi, i have a hardware server i would like to install an ubuntu-server it belong to a LAN, what my options to install ubuntu server on it..since it dont have DVD drive..? | 19:28 |
| zul | ruben: you can get a cdrom with a usb enclosure and boot it that way or you can probably try a netboot | 19:35 |
| zul | hey ttx | 19:35 |
| mathiaz | ttx: hey! | 19:36 |
| mathiaz | ttx: party on? | 19:36 |
| * ttx sips his porto | 19:36 | |
| * ttx highfives the team | 19:37 | |
| uvirtbot | New bug: #374717 in ntp (main) "ntp in kubuntu jaunty does not configure" [Undecided,Incomplete] https://launchpad.net/bugs/374717 | 19:37 |
| smoser | ruben23, also you can boot from usb, using usb-creator | 19:37 |
| mathiaz | ttx: a 20-year old porto for karmic - what's the plan for lucid then? | 19:37 |
| ttx | smoser: congrats on your first release ! | 19:38 |
| * smoser wipes a tear off his cheek | 19:38 | |
| ttx | mathiaz: I'll have to think about it | 19:38 |
| ttx | mathiaz: maybe a 30-year-old Chateau-Chalon | 19:38 |
| mathiaz | ttx: well if you add 10 years for every 6-month release, you'll be in trouble soon | 19:38 |
| smoser | ruben23, even rack mount servers of modern hardware support usb boot. | 19:38 |
| smoser | i think i'll celebrate with one of each at http://www.libertystreetbrewingcompany.com/2.html | 19:39 |
| ruben23 | smoser: you mean i the usb will do the installation.>? | 19:40 |
| ttx | zul: hey, we did it, dude | 19:40 |
| smoser | ruben23, yes. download the iso and run 'usb-creator-gtk' adn point it at the iso. | 19:41 |
| smoser | it makes a bootable usb device | 19:41 |
| VirtualDisaster | smoser, oh nice | 19:41 |
| smoser | that does the installation | 19:41 |
| zul | ttx: you da man | 19:41 |
| smoser | it is really nice. works well for netbook install also. | 19:41 |
| zul | smoser: i think ill have a vodka and oj tonight after liam goes to bed | 19:41 |
| uvirtbot | New bug: #288905 in ntp (main) "/etc/init.d/ntp doesnt use ntpdate to ensure clocks are aligned before starting server." [Wishlist,Confirmed] https://launchpad.net/bugs/288905 | 19:42 |
| VirtualDisaster | smoser, in texas we have a limited selection of good beers | 19:42 |
| VirtualDisaster | aside from shiner bock i dont drink much else | 19:43 |
| VirtualDisaster | zul, lol | 19:43 |
| hggdh | well, there's also Sam Adams (but yes, not Texan) | 19:43 |
| mathiaz | zul: have finished filling up my Inbox with bug mail? | 19:43 |
| zul | mathiaz: almost | 19:43 |
| smoser | VirtualDisaster, yeah, after you ran celis out of austin | 19:43 |
| smoser | luckily, while the man went back to belgium, his beer came to michigan (where i'm from) | 19:44 |
| VirtualDisaster | lol | 19:44 |
| smoser | celis is outstanding, btw | 19:44 |
| ruben23 | smoser: any link guide for it..? | 19:44 |
| VirtualDisaster | hggdh, im poor atm, i wish i could have a taste right about now | 19:44 |
| zul | mathiaz: no rest for the wicked ;) | 19:44 |
| hggdh | heh. I hear you | 19:44 |
| mathiaz | zul: I can tell - as long as you promise to fix everything in lucid :) | 19:45 |
| RoAk | congrats guys for this amazing server release | 19:45 |
| zul | mathiaz: heh i think i might need some help :) | 19:45 |
| * VirtualDisaster downloads latest server iso | 19:46 | |
| mathiaz | zul: oh come on - you know the rule: triage => fix | 19:46 |
| zul | mathiaz: meh :P | 19:46 |
| zul | i think ill go start drinking | 19:46 |
| smoser | ruben23, .... i dont know. sorry. you're asking about usb-creator, right ? | 19:47 |
| smoser | its similar to unetbootin, but i think its the officially supported ubuntu method of doing this. | 19:47 |
| smoser | it really is quite simple. you run the thing, select an iso and say "go". | 19:48 |
| smoser | it copies a bunch of files and then you can boot off the usb stick. | 19:48 |
| zul | mathiaz: I stopped at openldap back at it again on monday | 20:00 |
| LyonJT | What command can you put in to see what os your running? | 20:00 |
| LyonJT | os version* | 20:00 |
| mathiaz | zul: thank you! | 20:01 |
| hggdh | uname -a will give you the kernel version, type, etc | 20:01 |
| zul | mathiaz: for stopping or for triaging ;) | 20:02 |
| mathiaz | zul: hm stoppi^Wtriagging! | 20:03 |
| zul | hehe | 20:03 |
| zul | later | 20:03 |
| LyonJT | wiked cheers hggdh | 20:03 |
| LyonJT | How can i upgrade my server to 9.10? | 20:11 |
| ttx | LyonJT: http://www.ubuntu.com/getubuntu/upgrading#Network%20Upgrade%20for%20Ubuntu%20Servers%20%28Recommended%29 | 20:13 |
| LyonJT | Cheers pal | 20:15 |
| === Tohuw is now known as Tohuw|Away | ||
| weirddood55 | I'm having a weird problem on tty1 when editing config files. | 20:19 |
| weirddood55 | I'm using vim and when I'm editing on tty1, as I move around in the file, console text gets displayed on the screen and vim stops responding | 20:20 |
| qman__ | weirddood55, it has to do with kernel messages being sent to TTY1 | 20:20 |
| qman__ | either disable that, or don't use TTY1 | 20:21 |
| weirddood55 | Okay | 20:21 |
| qman__ | I prefer to just not use TTY1, so I still get the messages | 20:21 |
| weirddood55 | Thanks...I just wasn't sure and thought I'd just ask in here about it | 20:21 |
| weirddood55 | thank you qman__ | 20:22 |
| qman__ | I'm pretty sure it's configured in syslog | 20:22 |
| qman__ | no problem | 20:22 |
| qman__ | oh, also | 20:22 |
| qman__ | if you're using an older version of ubuntu (hardy or older) the default vim doesn't support arrow keys | 20:23 |
| qman__ | you need to install vim-full to use the arrow keys | 20:23 |
| weirddood55 | No I'm using karmic | 20:23 |
| qman__ | ok | 20:23 |
| grendal_prime | ok I need to set up some place to send backups. A cloud computed nfs share would be nice? | 21:11 |
| grendal_prime | anyone done something similar to that? | 21:12 |
| VirtualDisaster | if its a clouded NFS and your just sending files to it then whats the difference? | 21:17 |
| VirtualDisaster | its just "clouded" or clustered? | 21:17 |
| VirtualDisaster | same thing different name, imo | 21:17 |
| grendal_prime | ok | 21:19 |
| grendal_prime | let me backfill some info.. | 21:19 |
| grendal_prime | got a datacenter we need to have the configs from all the linux boxes backed up. I have a great server for doing this...backuppc all configed, works great. But i need it to actually store the backups somewhere else (somewhere outside the datacernter as this is a disaster recovery job.) | 21:21 |
| qman__ | cloud computing is only really useful for computations, NFS is storage | 21:21 |
| qman__ | you could buy some space on one of those online backup services, or you could just back up to external hard disks and ship them offsite | 21:22 |
| VirtualDisaster | greenfly, yeah like qman__ said | 21:22 |
| grendal_prime | so my thinking was if i could just get a cloud account somewhere..with a couple of gigs of space.??? what is all of the ec2 amazon talk about then? | 21:22 |
| VirtualDisaster | just put up a freenas box offsite and youre done | 21:22 |
| qman__ | ec2 isn't for storage | 21:22 |
| qman__ | it's for running programs | 21:22 |
| VirtualDisaster | for serious storage i wouldnt go cheap | 21:22 |
| grendal_prime | there are all these backup solutions that use ec2 | 21:23 |
| VirtualDisaster | i mean this is backup data right? | 21:23 |
| qman__ | yeah, even just building a couple more file servers and putting them geographically far away | 21:23 |
| grendal_prime | no just configs | 21:23 |
| qman__ | just configs? | 21:23 |
| VirtualDisaster | freenas and youre done | 21:23 |
| VirtualDisaster | virtual freenas and youre done lol | 21:23 |
| VirtualDisaster | you could run it on your desktop | 21:23 |
| qman__ | that's even overkill for that | 21:23 |
| qman__ | burn to CD-R | 21:23 |
| VirtualDisaster | lol | 21:23 |
| grendal_prime | that was my plan, but we were going to run it back to our office (very frar from data center) | 21:24 |
| qman__ | get a desktop machine at a separate location, with internet access | 21:24 |
| qman__ | and set up a cron job to shell in and download the backup | 21:24 |
| grendal_prime | it staff is like all....hmmm...naa..use offsite storage..look into amazon or jungledrive..or some shit like that. | 21:24 |
| qman__ | ec2 is not the right tool for this job | 21:25 |
| qman__ | I mean, you COULD use it | 21:25 |
| qman__ | but there are better ways | 21:25 |
| grendal_prime | ok thats all i wanted to know. | 21:25 |
| qman__ | hell, you could even just email it to yourself | 21:26 |
| === Tohuw|Away is now known as Tohuw | ||
| grendal_prime | getting things in and out of this...is such a security hell, every port i use i have to run it through sec check and grrrr. | 21:26 |
| grendal_prime | well qman_if it works well we will use it for larger jobs | 21:27 |
| qman__ | if you want it totally automated, the best way is to either hire a service like ubuntu one (there are a bunch of them), or to set up your own server at a separate location | 21:27 |
| qman__ | and use a scheduled job | 21:27 |
| grendal_prime | the backup pc works really well..if i could just nfs mount the storage...wham im done...need to grow it i just give it more space on the netapps nfs share. | 21:28 |
| qman__ | I'd use scp over the net | 21:28 |
| qman__ | easy to get through firewalls, secured | 21:28 |
| qman__ | easy to automate | 21:28 |
| grendal_prime | scp? wtf? backup pc uses rsync as a transport. | 21:29 |
| qman__ | oh, doing full replication | 21:29 |
| grendal_prime | I can even tar it on the fly is i want to...and only trasmit the changes. | 21:29 |
| qman__ | in that case, a tunnel would work | 21:29 |
| qman__ | sshfs is pretty cool too | 21:30 |
| grendal_prime | ya, then i get back to the same problem...do i send it to my personal datacenter...that will not fly, here...nope they like to keep things seperate, soooooo some cloud location that they have access to and own...that seems the better solution | 21:30 |
| qman__ | well they have to trust someone with their data | 21:31 |
| qman__ | do they trust you, or amazon | 21:31 |
| qman__ | or whoever | 21:31 |
| qman__ | if they're that concerned, they should set up their own machine at a different office or something | 21:32 |
| grendal_prime | my datacernter is in my garage, i dont have a retnal scanner and a pretty chick at the desk with a tazer ...they like that... | 21:32 |
| qman__ | your garage is more secure than amazon's cloud | 21:32 |
| grendal_prime | i guess i could get the wife a short skirt and a tazer... | 21:32 |
| jcastro | rsync.net is cheap and reliable IME for things like this | 21:33 |
| grendal_prime | jcastro: cool...i think thats what im looking for. | 21:33 |
| qman__ | clouds are, bu their very nature, a security risk | 21:33 |
| qman__ | all it takes is one hole in the virtualization software | 21:33 |
| qman__ | and bam, everyone on the service is done for | 21:33 |
| qman__ | at least if you run your own system, you have the advantage of monitoring | 21:34 |
| grendal_prime | jcastro: that was EXACTLY what i was looking for | 21:58 |
| grendal_prime | shfs mount..and whammo done. | 21:58 |
| grendal_prime | I decide i want to put it somewhere else i just mount the same dir to some other location and whammo!! done again...THAT SO TOTALLY WROX DUDE!! | 21:59 |
| grendal_prime | sorry | 21:59 |
| grendal_prime | 2 exc1t3d | 21:59 |
| Garandil | Hmm.. I did a apt-get with a package that I didnt mean too.. and now it's stuck at wanting to install the dep's.. how do I get it out of that loop? | 22:56 |
| kblin | ctrl-c? | 22:57 |
| Garandil | I have aborted it.. but when I try to install a new package it starts to wine about the one that I aborted | 22:58 |
| kblin | try purging the packages you've tried to install | 22:59 |
| kblin | the one you didn't want I mean | 22:59 |
| === Tohuw is now known as Tohuw|Away | ||
| === Tohuw|Away is now known as Tohuw | ||
| Jad_ | hi, does anybody knows what apps use the cloud computing feature of ubuntu server? | 23:15 |
| Jad_ | also is there an rdp application that comes with ubuntu server? the place where they will host my ubuntu is remote and perhaps ubuntu has an rdp app | 23:17 |
| === Tohuw is now known as Tohuw|Away | ||
| Ergo^ | hello | 23:38 |
| Ergo^ | i just did a dist-update to my server | 23:38 |
| Ergo^ | and while everything appeared to be fine during the process ( i did that once already without problems) | 23:38 |
| Ergo^ | right now it seems the server didnt start correctly after reboot | 23:39 |
| Ergo^ | anything i could to troubleshoot the situation ? | 23:39 |
| === dendrobates is now known as dendro-afk | ||
| === Tohuw|Away is now known as Tohuw | ||
| Ergo^ | i cant ssh to my machine nor ping it, after dist upgrade, what can be the cause ? disk check ? | 23:44 |
| Ergo^ | anyone here ? | 23:55 |
| tmske | Hi, I want to upgrade my ubuntu desktop to ubuntu-server, is installing linux-server enough? what packages can I remove? | 23:59 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!
