[00:01] * RoAkSoAx slaps mjeanson :) [00:52] !iscsi [00:52] Sorry, I don't know anything about iscsi === dendro-afk is now known as dendrobates === david is now known as Guest77949 [01:25] i followed the mail filtering guide, however the only headers in mail i get are X-IronPort-Anti-Spam-Filtered: true and X-IronPort-Anti-Spam-Result: ApwEAIYsBEuWZcx//2dsb2JhbACBTZAutimHVIhyhDsE [01:25] what have i missed here ? [01:26] its going through amavis but amavis doesn't seem to be doing spamassassin [02:49] Has anyone else tried using virtual machine manager to remotely create a new VM on a server? [02:49] I can't choose the installation media [02:50] There's a bug filed on Debian from May (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=512253) with a dirty workaround that lowers the usefulness of ths application [02:50] Debian bug 512253 in virt-manager "virt-manager: Can't choose ISO-image (remote connection, ssh)" [Wishlist,Open] [02:50] That it is filed as wishlist upsets me. [02:59] If upstream doesn't support the functionality, Wishlist is probably appropriate for Debian. Is there an upstream bug? [03:01] hello to all ! i am trying to configure postfix for recieving emails on my ubuntu server that has a full web and dns server allready running for my local hosted webdomain. [03:02] now the strange thing is after looking in the log of postfix i belevie i can allready receive mails from some strange peoples at gmail! [03:04] http://paste-bin.com/view/94980615 [03:04] is this allready really possible or is this just spam ? i never told anybody till yet any mail or domain adress for the server ! [03:05] xperia2: That's someone trying to see if they can deliver to you (for spamming purposes). [03:06] There's no evidence in that log snippet that you actually accepted the mail. [03:06] It is normal for this to start within 15 minutes of a new server going online. [03:07] SkottK: hmmm i see also some strange relay output in the logs. i am using allready in postfix the relay possibilty from my isp to send mails [03:07] from my web server. give me just a second to paste this [03:10] http://paste-bin.com/view/e1333509 [03:10] hey guys, if ufw just a front end for managing iptables? [03:10] *is [03:10] my mail relay is "mail.bluewin.ch". strange to see this in the logs still ! [03:11] could it be that my mail server is used as a spam machine. it forward something or not ? [03:11] Nov 18 15:28:28 stromer postfix/smtpd[12360]: > 118-167-128-32.dynamic.hinet.net[118.167.128.32]: 250 2.1.0 Ok [03:11] Nov 18 15:28:29 stromer postfix/smtpd[12360]: < 118-167-128-32.dynamic.hinet.net[118.167.128.32]: RCPT TO: [03:13] ScottK: it looks like other people have the same problem with the same mail adresses ! [03:13] http://ubuntuforums.org/showthread.php?t=952517 [03:15] xperia2: Not suprising. === MarwolTuk_ is now known as MarwolTuk [03:16] ScottK: should i worry about this or is this just normal as other have it too ? [03:17] xperia2: You also have your logs at a non-standard (higher) level of logging detail. This isn't needed and actually makes the logs harder to read. [03:17] xperia2: Assuming that's all there is, it's not a problem. [03:18] aah okay nice to know that ! [03:20] ScottK: have found a ruleset for blocking this. it looks like this is very comonn especially the mail adress "s2288@mail2000.com.tw" [03:20] about 40% of the messages are directed to this mail adress. [03:20] http://www.hobgoblinconsulting.com/remote/smreport.200812.html#grunty.schelin.orgrule [03:22] looking now at the ubuntu wiki help page for finding a good config example for my postfix server. [03:23] The only 'harm' it's doing in using some of your bandwidth and CPU. If that's not an immediate concern, I'd concentrate on other things. [03:25] yeah at the moment i will concentrate on configuring postfix for receiving mails for my domains and subdomains that run on my ubuntu server but for later i will block this for sure as i dont have only a home server with a normal home conection ! thanks for he clarification still [03:26] as i have only a home server with a normal home conection ! thanks for he clarification still === erichammond1 is now known as erichammond [03:34] Is xperia2 operating an open relay? ;-) [03:35] twb: No [03:36] a open relay ? never heared. i have configured postfix to be able to send from my webpages sms messages to my cell phone. i needed for this to use the relay function in postfix as direct sending was blacklisted. [03:37] That's a relay probe, no sign it was accepted. [03:37] OK, I obviously wasn't paying enough attention. [03:37] i am using this for controll porposes when somebody register on the page as a exmaple to know directly over my cell phone that something has happened. [03:38] xperia2: Open relay means you will send mail from anyone to anywhere without checking [03:39] There's no sign in the logs you've shown that is happening. [03:39] ahh something full open in this case. btw. have found a very good wiki tutorial for my purpose ! exactly that was i searched ! [03:39] big compliments to the person that has writen this [03:39] https://help.ubuntu.com/community/PostfixCompleteVirtualMailSystemHowto [03:39] xperia2: Also look in the Ubuntu Server guide for your release. [03:40] xperia2: Which Ubuntu version are you running? [03:43] dont slap me now but it is a old version ubuntu-interpid! nee to upgrade it but i fear however that the upgrade proccess will brake all my settings. [03:43] will buy however in the next two months a new ubuntu dell laptop [03:45] and will install then the newest version of ubuntu on the hardware that was replaced [03:45] had someone already used ipp2p on ubuntu ? [03:47] xperia2: You can run whatever version you want, but generally server upgrades are very safe. [03:47] The reason I asked was to point you at the correct documentation for the release you are running. [03:49] what is the command for installing LAMP server from a desktop install [03:49] had some bad experince allready with upgarding ubuntu-desktop on my laptop so before i upgrade the server now i want to have a backup machine fr the server if it breaks i can swith the machine and the server still will work as expected. [03:49] xperia2: Have a look through this: https://help.ubuntu.com/8.10/serverguide/C/email-services.html - There are many Postfix how to's on the wiki part of help.ubuntu.com, but many of them are obsolete [03:50] xperia2: I can understand the caution. [03:50] great thanks ! [03:51] I would suggest use the server guide I just linked you as far as can [03:57] ScottK: one thing what can be say is that the upgrade process urges some people to buy ubuntu machines from dell with server support too :-)) [04:09] xperia2: I've upgraded servers starting from Dapper to Karmic and have only ever had one go really badly and in that case I was trying something and I knew it was risky. [04:12] when doing tasksel it has option for basic ubuntu server <-- what is this exactly, I know what LAMP is but do I want this other thing or not? [04:14] hi [04:14] SkottK: i give you right that upgrading of ubuntu-server should be absolutly no problem . the thing is that i have changed to mucht ubuntu specific things as a noob and at the upgrade proccess this will cause exactly problems. as you have said for people with knoweledge and know what they do no problem but for me i prefer to have a backup machine solution :-) [04:16] I'm looking for a reference on migrating sys v init scripts to upstart, but not coming up with anything particularly useful [04:17] has anyone done this? Can you recommend any doco? [04:17] does anyone know what exacly is basic ubuntu server under the tasksel cmd [04:18] cleary_: checked http://upstart.ubuntu.com/ ? [04:19] cleary_: as i know you have also the possibility to install mail server and dns server and such on [04:19] Nafallo: yeah, just plugged through the faq and wiki without coming up with anything concrete [04:19] the basci server is just apache, mysql, php and such on without mail or dns stuff [04:20] Nafallo: it seems to be more a focus on development of upstart as opposed to the use of upstart [04:20] xperia2: I'm not sure that you've understood my question (or you meant to address someone else?) [04:21] i would say basic server == lampp [04:21] xperia2: you meant to highlight spirits-sight then I think [04:21] Dang. I've accidently removed the access to sudo from my user on this ubuntu server test VM [04:22] oh yes sorry cleary ! [04:22] if I can't sudo and root is disabled, how can I gain my groups back [04:22] djveer, boot in recovery mode, drop to root prompt, and re-add your user [04:22] to sudoers [04:23] dumb question qman__, recovery mode is accessed off the boot cd? [04:23] djveer, no, press escape while grub is loading [04:23] arrow down to your latest kernel with (recovery mode) at the end [04:23] the system will boot, then give you a menu [04:23] choose root shell [04:23] qman__, thanks! you the man [04:24] (or woman) no offense [04:24] lol [04:25] bah... gotta restart the machine manually.. can't rebot because i'm not in the sudoers file [04:25] lol [04:25] >,< [04:26] Nafallo: never mind, I'm just going through the README.debian.gz in the upstart package now, seems I may have been too hasty [04:26] djveer, if you're local, press ctrl alt del [04:26] it'll go into reboot [04:27] OK, I don't see apache showing up in netstat after doing the tasksel for LAMP [04:27] hehe it's just a testing VM... I just hit the 'ol power button on it [04:27] I did a reboot just make sure every thing was started right [04:31] spirits-sight: are you able to restart apache "sudo /etc/inti.d/apache2 restart" [04:32] or to start it also ? [04:32] it works based on it goes to the website when doing the domain or ip address it gives it works page :-) any how now I need get name vitualhosting working [04:33] xperia2 you able ot help with this, I redid the system as when doing it yesterday would NOT work doing the way the guide told me to do it [04:33] great. virtual hosting isnt hard. what is the problem [04:36] yes virtual hosting isnt very good described in the wiki. i am using a non standard way for this. [04:36] have edited the file "/etc/apache2/sites-available/default" directly and restarted apache2 and it works with no problems for me ! [04:46] xperia2: sorry mind was wondering. OK I am trying to setup all the DNS stuff first make sure its all setup correctly [04:47] I am using linode as the provider of my VPS [04:48] for my A / AAAA record I am not sure hwat I should be puting any ideas I have two domain setup as master in the DNS manager I click on one and setting it up [04:50] dont understand now. did you installed the basic server or did you installed a full server with dns mail and so on ? [04:51] i assume you have installed a full server and need now to configure bund on your ubuntu server [04:51] sorry bind not bund [04:51] I am sure I need to do alot I am learning :-) [04:52] Yes I installed the full LAMP and basic ubuntu server from tasksel [04:53] ahh okay. i have registered a domain and then used for the domain dns entry this line here "ns.mydomain.com" [04:54] this dns entry point then to your server with the static ip which you have also to provide ! i assume you have this allready done [04:55] yes godaddy is pointing to the nsX.linode.com nameservers [04:55] ahh okay then you need just this here [04:56] File: named.conf.local [04:57] zone "mydomain.com" { [04:57] type master; [04:57] file "/etc/bind/db.mydomain.com"; [04:57] }; [05:00] and the file here that you need to create it [05:00] File: db.mydomain.com [05:00] $TTL 3600 [05:00] @ IN SOA ns.wificom.ch. root.wificom.ch. ( [05:00] 2009111332 ; Serial [05:00] 604800 ; Refresh [05:00] 86400 ; Retry [05:00] 2419200 ; Expire [05:00] 604800 ) ; Negative Cache TTL [05:00] @ IN NS ns.mydomain.com. [05:00] @ IN A x.x.x.x [05:00] ns IN A x.x.x.x [05:00] box IN A x.x.x.x [05:00] www IN CNAME mydomain.com. [05:00] subdomain IN A x.x.x.x [05:00] www.subdomain IN CNAME @ [05:01] thanks goes to the irc ubuntu-server user mostly called lamont as he helped me a lot with this. [05:02] ahh sorry replace wificom.ch with mydomain.com [05:04] after this restart bind "sudo /etc/init.d/bind9 restart" (make sure you change allways the serial number at every change) and you should be able to resolve your domain names [05:04] like dig mydomain.com @x.x.x.x [05:06] wow [05:06] that was alot [05:06] one moment or few :-) [05:06] its okay :-) [05:10] what does this "hostname -F /etc/hostname" do? [05:11] does it say to the system to look for the hostname in the /etc/hostname file [05:13] cant say ! not that dns expert :-) [05:14] can you resolve the domain on your server ? [05:15] 127.0.0.1 localhost.localdomain localhost [05:15] 12.34.56.78 hostname.domain.org hostname [05:15] is the above correct or is it need fixing? [05:15] making sure all the rest of the stuff is setup correct before doing any other changes :-) [05:16] spirits-sight: Looks reasonable to me. BTW, hostname -F /etc/hostname means "set the hostname to be whatever is in the file /etc/hostname" [05:17] ok that what I throught and said above :-) yeah I understand a little more then yesterday :-) [05:19] jmarsden: so I don't change localdomain to my abc.org domain correct? [05:19] Correct. In the 127.0.0.1 line, leave it as it is. [05:24] thanks, ok just created the dir for the two domains also created the two available files /domain1.org and /domain2.org /etc/apache2/sites-available/ [05:24] correct? [05:26] does resolving of the domain works now ? [05:27] know in a minnut I believe it should :-) [05:27] test it with "dig mydomain.com @x.x.x.x" on your server [05:28] x.x.x.x is your static ip number to the server [05:30] well I just entered the domain into the brower and it point me to the server unlike yesterday, and its pointing to the correct directy as if it was still pointing to default it would show It Works! again but its not , instead its show the index dir for the domain [05:31] well in this case you need now just to make vhosting working and all is done. [05:31] can you post the two files for whosting [05:32] vhosting working its working, I just put in the direcory for the domain and then refresh brower and it shows what I did :-) [05:33] so everything is then okay :-) [05:34] yes yes, using the guide, yesterday I think what happen is that ubuntu did not install the basic ubuntu server stuff, then the guide had me do each item apache2 mysql php but today I used the tasksel do it for me and it seem to be working the way it should be [05:35] this is the guide I used >>> http://library.linode.com/lamp-guides/ubuntu-9.10-karmic/ [05:36] so can anyone help me with amavisd-new and spamassassin. i'm trying to verify that the spam scan is occuring [05:36] i see no headers [05:42] flaccid: easiest way to check is to see if your CPU and memory are fully utilized :-/ [05:42] hehe they are not, then again its a low vol server [05:46] Actually I think I'm grumbling about clamav [05:54] twb: What's to grumble about clamav? [05:54] ScottK: I was grumbling about its resource consumption [05:55] Ah, right, well scanning stuff is resource intensive. No real way around that. [05:55] I don't actually deal with clamav, I just notice that half the servers I ssh into spend most of their CPU time running clamav [05:55] ScottK: yeah, I know [05:55] Probably the other half running SpamAssassin. [05:55] So strictly I'm grumbling because those customers have Windows machines and thus want AV scanning [05:55] Well clamav is not just for Windows anymore. [05:56] It also has anti-phishing stuff too and that's a cross-platform threat. [05:57] Shrug [06:07] OK, this is strange, why would a number of CNAMES point to the right place and one not? it seems to be pointing to the default for apache [06:08] see it at mail.snecdeaf.org but docs.snecdeaf.org works fine setup the same [06:09] they both should be pointing to ghs.google.com but the mail.snecdeaf.org which is pointed to google seems to be still point to the default apache screen [06:13] never mind it works now [07:25] how can i pipe stdin and stderr to TEE ? [07:28] clusty: in bash4, it's &| tee ... [07:28] If you're still using bash 3 (or sh), it's 2>&1 | tee ... [07:28] Note that this will unify the streams [07:28] using actually mac :D [07:28] no clue bash version [07:29] thanks [07:29] that was it [07:29] Ubuntu behaves identically on mac and whitebox hardware. [07:30] thought so [07:49] clusty: echo $BASH_VERSION # will tell you what version of bash you are running [07:49] 3.2.48 [07:49] jmarsden: what is the latest? [07:50] Let's ask uscan [07:50] more like: what version does ubuntu use? [07:50] packages.ubuntu.com/bash, then [07:50] Can't say "dpkg: -l bash" in here [07:51] http://sv.gnu.org/projects/bash, too [07:51] karmic switched to 4.05 [07:51] jaunty: 3.2.5 [07:52] there is one thing that annoys the hell out of me un Unixes: params are more rigid [07:52] rm -rf assumes -rf is another file name [07:52] only rm -rf works [07:53] That's a GNUism, just so's you know [07:53] twb: meaning? [07:54] I dunno what you mean by "un" unixes [07:54] i mean solaris and mac [07:54] AFAIK SUS 2004 doesn't require "rm foo -rf" to act like "rm -rf foo". [07:54] what i used so far currently [07:54] what is SUS? [07:54] http://www.opengroup.org/onlinepubs/9699919799/ [07:55] Sorry, the latest release was 2008, not 2004 [07:55] so linux is not compliant to this standard? [07:55] clusty: it's not certified. [07:55] anyways. i do not care much about standards myself [07:55] But the problem you're having is that GNU coreutils implements MORE features than it is required to. [07:56] So when you use a non-GNU userland, the extensions you are used to aren't there. [07:56] These are thus called "gnuisms" [07:56] just need to pay attention to test my scripts properly [07:56] Writing truly portable scripts is impossible. [07:56] what about the bash smart completion thing? [07:56] That is a bashism [07:57] that is also missing under my unixes [07:57] clusty: So compile and install bash on the other unixes :) [07:57] Perhaps because your default shell is tcsh? [07:57] twb: it is bash [07:57] In OS X 10.3 or 10.4, Apple switches to bash as the default shell. [07:57] *switched [07:57] under solaris some ppl are using zsh [07:57] rather than bash [07:58] That's because they're so used to posix non-conformity, that yet another non-posix sh doesn't faze them [07:58] lool [07:58] yeah [07:58] :D [08:02] having a small messed up char problem: [08:02] svn: Can't convert string from 'UTF-8' to native encoding: [08:02] svn: Bruker_full/QSW.net/Basics/BQImages/Drivers/bou?\195?\169e.ico [08:02] they are french accented names [08:03] any clue what is the solution? [08:05] clusty: the problem is that the other guy is using ISO 8859-1 or something. [08:05] twb: how do i fix it? [08:05] mac also seems to accept it just fine [08:06] is there any way to manipulate the size of a LVM if it is mounted under /? [08:06] Force everyone to adopt UTF-8? [08:06] acalvo: sure [08:06] do I need to unmount previously the partition? [08:06] acalvo: you can grow filesystems while they're online [08:06] acalvo: you can't online shrink [08:06] and reduce? [08:06] oh... [08:06] acalvo: at least, for ext3. Other filesystems are different. [08:07] twb: i could in theory fix the file myself. how do I change the name encoding from ISO to UTF? [08:08] clusty: you go back in time and fix the other guy's OS or /etc/profile [08:08] Before he makes the file [08:08] clusty: pastebin the output of "locale" [08:09] twb: http://pastie.org/705606 [08:10] clusty: OK, it's your fault [08:10] LANG should be something like en_US.utf8 [08:10] it always is :D [08:10] how do i fix it? [08:11] aptitude install language-pack-en-us or something [08:11] I don't remember the exact Ubuntu way [08:11] any nasty side effects from this? [08:11] LANG="en_US.UTF-8" [08:12] sudo apt-get install language-pack-en [08:14] The ubuntu desktop installer will automatically install language packs based on where you tell it you are [08:15] The server one doesn't do this, I think, which I found a bit strange [08:17] twb: my locale has not changed from C [08:17] clusty: you need to log out and log in again [08:18] If you are logging in remotely, that will also affect things [08:18] did [08:18] ssh-ed again [08:18] clusty: are you running screen or similar? [08:18] twb: i have a bunch of VNC's running [08:19] do i have to kill those also? [08:19] I mean, when you close ssh and ssh in again, are you reconnecting to an existing screen session? [08:19] Or are you getting a completely new shell? [08:19] twb: no [08:19] completely new shell [08:19] new putthy [08:19] putty [08:19] You're sshing from putty? [08:19] yes [08:19] OK, I don't know if that's supposed to work. [08:20] Confirm that "locale -a" lists the en_* locales [08:20] twb: does [08:20] On Debian the place to look would be /etc/profile, but on Ubuntu I think it is /etc/environment [08:20] http://pastie.org/705617 [08:21] Or maybe I'm confused? [08:21] PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" [08:21] LANG="en_US.UTF-8" [08:21] clusty: that's in /etc/environment? [08:21] contents of /etc/environment [08:22] i suck [08:22] i had LANG=C in bashrc [08:23] now locale is fine [08:23] And this is why you don't put things in .bashrc and similar without knowing what they do [08:23] twb: i had a reason to put it there [08:24] i never put random stuff [08:24] solved my issue, thanks [08:27] hi can i build an ubuntuserver in a vertual machine? [08:32] switchgrl: sure you can [08:33] by build you mean install ? [08:33] yes [08:33] i just want to get used to the system and how it works [08:33] what virtual machine system do you use? [08:33] virtualBox? [08:33] or vmware ? [08:33] oh i am on a duelcore intel [08:33] virtualbox [08:34] i found a tutorial [08:34] perfect :D [08:34] http://www.sitepoint.com/blogs/2009/10/27/build-your-own-dev-server-with-virtualbox/ [08:34] thanks [08:34] i was searching at the same time as asking - do that sometimes [08:34] switchgrl: this is very complicated [08:34] for no reason.... [08:34] switchgrl: what OS do you run? [08:35] windows? [08:35] * switchgrl looks insulted [08:35] mac? [08:35] no [08:35] no [08:35] ubuntu [08:35] i run every version of ubuntu there has ever been [08:35] not server though [08:36] want to run a mail server [08:36] switchgrl: anyways... [08:36] Mail servers are not fun to set up [08:36] install virtual box from the ubuntu repository [08:37] and use the GUI for it [08:37] trivial and straight forward [08:37] anyways the differences between desktop and server are not that great: [08:37] different kernelk [08:37] and different choice of base packages [08:37] clusty, i was joking about being insulted [08:37] can convert one into anothjer in a jiffy [08:38] figured a much [08:38] clusty: You're forgetting the one difference that may be most important to someone who's never run ubuntu-server before [08:38] no X? :D [08:38] :D [08:38] just command line ? [08:38] which is only real way to run server [08:39] well i cannot image sime1 installing a mail server from GUI only [08:39] whixh isnt X server :) [08:39] clusty: Some day. [08:40] if using alot gedit is considered GUI then its doable [08:40] Some day it will be doable in the ubuntu world, just like the Windows world [08:41] Long story short, it's a project that I want to set up, basically [08:41] are there any 36bit servers? [08:41] wtf [08:42] flaccid: what are we "wtf"ing at? [08:42] well if you want a gui frontend for configuration thats pretty easy stuff [08:42] it was a wtf in general from above [08:42] lol, this qualifies for bash.org [08:43] lol [08:43] i find that shell scripts can do everything in this area. a gui frontend can just pass variable values to the shell script [08:43] yay i made it to bash.org [08:43] Not necessarily something to be proud of [08:44] who me or switchgrl ? [08:44] switchgrl [08:44] hehe [08:45] flaccid: what I envision is a ubuntu system that provides the ease of administration of Windows SBS [08:45] good luck, ubuntu doesn't care [08:45] they have other objectives. there is no reason to tie down your project or vision to a single immature distro.. [08:46] flaccid: I've talked to a few others who were interested in working on the project [08:46] what problems are you trying to solve specifically ? [08:46] thing is you could work on the project. good luck ubuntu wanting it. [08:47] Specifically, my goal is to help to close bug #1 [08:47] oh [08:47] FireCrotch: Error: Could not parse data returned by Launchpad: The read operation timed out [08:47] i hope that was sarcasm [08:48] flaccid: No sarcasm. [08:48] please understand that the mainstream doesn't buy goodness, it buys marketing [08:48] but still my question remains [08:48] flaccid: You have to have something to market first. [08:48] you have not cited a specific problem to solve [08:49] linux has been trying marketing for years with a big fail [08:50] flaccid: because Linux doesn't have anything marketable. Ease of use/administration is marketable. [08:50] i tend to disagree [08:50] Are you guys actually trying to solve a problem, or are you just trolling one another? [08:50] it feels like the latter [08:51] Because if it's the latter you might want to move to /msg or -overflow [08:51] I have no trolling intentions [08:51] is there something i can help you with, FireCrotch ? [08:51] you nick is familiar, like i've talked to you much before [08:52] didn't manage to extend the LVM partition [08:52] just because it's the root [08:52] flaccid: I usually stick to -offtopic [08:52] acalvo: lvextend --size +4G /dev/example/root && resize2fs /dev/example/root [08:52] and to extend it I've to move all the partitions [08:53] it says it does not have enough extents [08:53] acalvo: please pastebin the output of "pvs" [08:54] FireCrotch: ah i remember you from #kubuntu [08:54] can't pastebin, that machine does not have internet [08:54] but it prints [08:55] acalvo: just transcribe the PFree and PSize values [08:55] /dev/sda1 test lvm2 a- 4,75G 8,00M [08:55] OK. [08:55] flaccid: Ah yes, I used to hang out there too :) [08:56] and i used to help you there [08:56] if you recall [08:56] does the ubuntu cloud thing give me the ability to add my netbook to connect autmatically to the server and use my connection from the cafe down the road without having to set up a VCN? [08:57] switchgrl: define 'to the server' please [08:57] what kind of connection etc. [08:57] flaccid: I do recall that, yes :) I guess you thought you got rid of me, huh? [08:58] umm brows the net from the cafe or train securely [08:58] or safly [08:58] safely* [08:59] FireCrotch: negative. i got rid of kubuntu. [08:59] what is a VCN ? [08:59] anyway connection is not cloud specific. ssh is encrypted [08:59] I think switchgrl means a VPN :) [09:00] flaccid: I'm sad to hear that. Kubuntu is awesome :) [09:00] yeah, switchgrl ssh is encrypted, you don't need a VPN [09:01] FireCrotch: what a pity the people that run it arnet [09:01] ssh = code [09:02] ssh != code [09:02] i hate code i cant understand it easy cus to understand it you have to read- i cant read much [09:02] switchgrl: what is your objective ? [09:02] flaccid: I avoid anything kubuntu-specific, really. [09:02] except of course, I use it [09:03] FireCrotch: i went to mac for desktop [09:03] to ensure my email and other files are secure, to enusure i am able to flawlessly accsess my files no matter where they are (with my wb book) [09:04] flaccid: To each their own. I've found kde4.2 to work quite nicely for my day to day needs [09:05] and yeah i mean vertual private network [09:05] switchgrl: 1. use SMTPS and IMAPS, 2. use fuse ssh [09:05] FireCrotch: kde is a DE not a linux distro. don't compare. === MarwolTuk_ is now known as MarwolTuk [09:07] flaccid: I'm well aware of the difference between the two. What I mean is that I've found the latest release of Kubuntu (with kde 4.2) to be quite nice [09:07] acalvo: your LVM is fully utilized -- you cannot extend it without creating another PV. [09:07] twb: that's what I've tought [09:07] FireCrotch: sure, but thats KDE and I run that with freebsd [09:09] I never did care much for FreeBSD back when I tried it out. That was forever ago though. [09:10] its as old as linux [09:10] i tried to get freebsd to runx-org that was erm "fun" [09:12] i was looking for somthing more dynamic - not as restrictive as ssh or fuse flaccid [09:12] switchgrl: what does that even MEAN? [09:14] well if i go to the cafe down the road there ip changes - its dynamic [09:14] something what works like magic, i assume [09:14] switchgrl: yeah. on reconenct sshfs and you have file [09:15] it means also i have to go to the cafe i use in london i want it to connect to the internet and just work [09:15] switchgrl: for remote access to files? [09:15] or use vpn + nfs / samba , which can be configured to survive conenction reset [09:15] 1. freebsd runs xorg fine if thats what you are meaning 2. anything secure is um restrictive. im not sure what dynamic is mean to mean here but a secure tunnel is required of some sort [09:15] i want TOTAL flexability [09:15] simplexio: you either need a VPN, or AFS. [09:15] switchgrl: as long as the address of the machine where you actually store your files doesn't change, there would be no problem [09:15] offcourse you need to have public ip addrs [09:15] you do realise that an ip address doesn't really have anything to do with encryption [09:15] NFS and CIFS aren't safe to run over the public internet. [09:16] switchgrl: total flexibility = a vpn. [09:16] yes but so that it syncs with my server so my files are synced etc and that way i can avoid data loss if it were to get stolen [09:16] twb: have you experince from afs ? if y, is it "better" than nfs for small office use [09:16] switchgrl: 1. openvpn 2. rsync. 3. done. [09:16] simplexio: afs isn't worth the effort for a small office [09:16] switchgrl: in that case read about rsync . if you want to have teo copies allways [09:17] simplexio: I looked at it for a secure network, but I ran out of budget and went with NFSv3 :-( [09:17] simplexio: hcoop runs it, and they seem to like it [09:17] twb: nfs is very good if it works, i had some strange problems with it, but i tried to get it to max speed [09:17] so dynamic dns on the client with a low TTL switchgrl and then connect between the two points however you want. [09:18] twb: afs seemed that it need alot work to get right [09:19] simplexio: yep [10:22] Servers still up, nice, I guess what ever happen, didnt feel like hacking me today [10:22] or fail2ban worked :D [10:23] fail2ban blows [10:24] -m recent [10:26] <_ruben> how is -m recent gonna see traffic is legit or not? [10:27] Of course, the REAL solution is to disable password auth, and to restrict connections to a whitelist of user@host tuples. [10:29] From the ubuntu-server documentation on LDAP: 'The installation process will prompt you for the LDAP directory admin password and confirmation'. [10:29] Problem is: it didn't and $ sudo dpkg-reconfigure slapd doesn't either. [10:29] _ruben: it doesn't distinguish between attackers and legitimate users, if the legitimate users need more than N attempts to connect. [10:32] Ah, this is apparently bug #447099. Well, how do I report wrong documentation in the Ubuntu Server Guide? [10:32] Launchpad bug 447099 in openldap "No password set on install of slapd-2.4.18-0ubuntu1" [Undecided,Invalid] https://launchpad.net/bugs/447099 [10:32] Can I just post that in the bug report? [10:33] alvin: you can put anything in a bug report. [10:33] twb: Yes, but is it the right place to talk about documentation errors? [10:34] I'm not sure. [10:34] The ubuntu server guide probably has a package within the archive -- if so, you'd report the bug against that package. [10:35] wiki.ubuntu.com is probably a different matter, but I don't know. [10:35] <_ruben> damn .. make-kpkg of 2.6.31.6 took 2.5 hrs (vm with 4 vcpus and 8gigs of ram) [10:36] It's the official server guide. I'll just ask in the bug. If it needs to be linked to that package, someone with more experience can do it. [10:36] _ruben: how many binaries did it make?! [10:36] alvin: yeah -- worst case is that someone will reassign the bug [10:38] <_ruben> hmm .. the .deb is 366MB .. that cant be good :p [10:38] _ruben: isn't make-kpkg deprecated anyway? [10:38] Some new thing with initials like "dkms" or "dkipo" or something [10:39] I wasn't listening because rolling my own kernels is such a waste of time [10:39] <_ruben> dkms is for modules .. and i did go for the new style first, but that resulted in "broken" kernels (lvm not working on boot) .. so i thought i'd give make-kpkg a go [10:41] _ruben: I presume there's a reason you can't use stock kernels? [10:41] <_ruben> yeah .. some minor performance patches related to (iscsi-)scst [10:42] <_ruben> bah .. guess there's some sort of problem with hardy and recent kernels .. this kernels seems to be having troubles with lvm as well [10:42] Oh, you're trying to deploy a .30 on hardy? [10:42] I wouldn't be surprised if there's a kernel vs. userspace conflict doing that [10:43] <_ruben> lets try a mainline build [10:43] You know, stuff like "we decided not to support hal anymore" [10:43] _ruben: I'm curious; are you actually using SCSI disks in your iSCSI deployment? [10:44] I haven't dealt with that space, but I would've assume AoE or nbd [10:44] <_ruben> twb: but sata and sas [10:44] <_ruben> s/but/both/ [10:45] Heh. "The AoE specification is 12 pages^[1] compared with iSCSI's 257 pages^[2]." [10:46] <_ruben> nice :p [10:47] The only plus in iscsi's favour appears to be its ability to be routed (i.e. go between networks) [10:51] <_ruben> hmm .. guess i'll either have to run with a stock hardy kernel, or use jaunty for instance on this san [10:52] <_ruben> eeew .. you really dont what that [10:52] <_ruben> 1gig switched network is as far as you should stretch it :) [10:52] <_ruben> hmm .. mainline build of 2.6.31.6 has the same lvm problem :/ [10:53] gtg [10:56] _ruben: What lvm problem? I have encountered lots of those in the past, but lvm on jaunty and karmic looks good. What are you trying to do? [11:02] alvin: first, he's on hardy [11:02] <_ruben> alvin: run a recent kernel on hardy :) [11:02] _ruben: what is the LVM issue, precisely? [11:03] <_ruben> the initramfs not finding the lvm [11:03] <_ruben> it finds the disks .. then waits a while for the lvm to appear, but doesnt show up [11:03] <_ruben> bbiab .. lunch [11:04] _ruben: what is root= set to in the bootloader? [11:23] _ruben: Do you use a separate /boot ? [11:32] <_ruben> alvin: yeah [11:42] hi, https://help.ubuntu.com/9.10/serverguide/C/jeos-and-vmbuilder.html mentions one should copy the templates to VMBuilder/plugins/libvirt/templates/ how are they used though? === t3chi3_ is now known as t3chi3 [11:46] i'm not running a web server do i need DNS or LAMP [11:46] ? [11:47] <_ruben> switchgrl: how would we know what you need? [11:47] _what are they? [11:49] <_ruben> DNS = Domain Name System = protocol used to translate between hostnames and ip addresses ... LAMP = Linux+Apache+MySQL=PHP = complete webserver stack [11:49] ok so no [12:00] _ruben: If you are using a separate /boot, maybe this is your problem: bug #462961. It's in the release notes. [12:00] Launchpad bug 462961 in grub2 "auto-resize install renders previous system with separate /boot unbootable" [Medium,Fix released] https://launchpad.net/bugs/462961 [12:01] j^: The example in the server guide is for using bridged networking. It is adviseable to copy it, in order to have good network settings. [12:01] ruben_: Ah, you're on hardy. That bug does not apply there. [12:01] alvin, yes, but it does not explain how to use the copied version [12:02] j^: Let me see. I thought it did. [12:03] <_ruben> alvin: nor did i use auto-resize :) [12:04] _ruben: Oh, but the bug also happens on fresh installes. The description isn't entirely correct. [12:04] _ruben: (I didn't read the release notes and all upgrades and fresh installs had trouble booting. [12:06] j^: You're right. It doesn't say how to use it. Maybe you just need to have VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl in your working directory. [12:06] that did not work [12:07] also tried adding --template with some parts of the paths [12:07] Otherwise, try --templates=VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl [12:07] well, --templates=VMBuilder/plugins/libvirt/templates [12:07] --templates=DIR Prepend DIR to template search path. [12:07] tried that, still used /etc [12:07] j^: Yes, that. [12:07] hmm [12:07] might have to add . to the path [12:08] In some old documentation, I used -c vmbuilder.cfg. That vmbuilder.cfg file contained templates = DIR [12:10] I noticed the default template in /etc/vmbuilder/libvirt/ now uses bridging (The ubuntu server guide has the wrong information here). Only, it doesn't work. Your virtual machine will end up with or something. [12:13] alvin, yes, but i need another setup so i still need to modify the templates, can also modify in /etc just wanted to follow the guide [12:14] j^: So, is --templates=DIR working for you? [12:14] no [12:16] Not good [12:35] ok, there already were some bugs about missing ldap documentation. That's good. [12:55] [6~ [14:14] Hello, I am running some virts but have a ufw running. How do I get traffic to be allowed to go to the virts, but not my server [14:15] heath_: ebtables? [14:15] I have tried ufw allow to 192.168.2.40 port 10000 [14:16] heath_: Or aren't you using bridge networking? [14:16] Is it not possible with ufw commands? [14:16] Jeeves_, I am using bridge networking [14:17] heath_: On which interfaces are you applying ufw? [14:18] I'm not sure how to just apply it to a single interface. Right now it is applied to all of them I guess. I can't establish a connection to any address unless I disable ufw [14:19] hi people [14:19] I'm trying to install ubuntu as a guest on my kvm host [14:20] but after installation and reboot I get "Boot failed, not a bootable disk" [14:20] anyone have a clue what's up? [14:21] gamla_kossan: How are you creating the vm? [14:21] with virt-manager [14:22] (on a rhel host) [14:22] what's the boot dev set to? [14:22] hard disk [14:22] (well, virtual disk) [14:27] should I be specifying br0 in the rules? or the eth? [14:27] gamla_kossan, qcow2 formats? [14:27] heath_: I'm not sure.. [14:27] heath_: huh? [14:27] gamla_kossan, your virt disk format [14:29] oh, how do I check that? === Ziber_ is now known as Ziber [14:32] gamla_kossan, I am unfamiliar with rhel, but the xml file ubuntu generates that defines your machines are in /etc/libvirt/qemu/.xml [14:32] right [14:32] and I am not sure where your images are being stores [14:33] stored** [14:33] hmm, but this is a kvm host, not qemu [14:34] gamla_kossan: Try $ file /var/lib/libvirt/images/* [14:35] root@flanders:/var/lib/libvirt/images# file poochie2.img [14:35] poochie2.img: data [14:35] =) [14:37] Just 'data'? That's weird. I expected qcow2 or raw [14:43] for anyone how cares... you have to enable DEFAULT_FORWARD_POLICY="ACCEPT" in /etc/default/ufw to allow your virts to receive traffic [14:43] birdged virts anyway === robbiew1 is now known as robbiew [15:36] ivoks: https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/328550 [15:36] Launchpad bug 328550 in initramfs-tools "qla2xxx takes ~one minute to initialize per device" [High,Fix released] [15:36] ivoks: worth a read ) [15:36] and comment ;) [15:40] ivoks: keepalived? [15:40] yes, that's one [15:42] nijaba: i was reading the bug report and wasn't concentrated on the discussion :/ [15:42] ivoks: looks like it is main already anyway [15:42] it is [15:42] but i'm not sure it's on CD [15:46] Hey does anyone here have any experience wiht setting up a server with LSI Megaraid 8308ELP raid cards in it? [15:47] Having a different policy for server kernel, imho, is the right approach. There will, most probably, be other issues. And I'm sure we could fine tune server and desktop with different sysctl setup. [15:48] ivoks: yep. and it sounds like the kernel team is now aware of that, as well as the qa team, so it is progressing === chuck_ is now known as zul [16:16] hello, im looking into making my first server :) i have end user experiance of ubuntu and im woundering if anyone can answer a few questions ^^ [16:16] !ask | Dream-Ubu [16:16] i know [16:16] dont ask to ask [16:16] Dream-Ubu: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) [16:17] i said it to see if people where alive [16:17] right - how do i set an internal static ip, and find the ip address so i can access it on an external network === ubott2 is now known as ubottu [16:18] erm, what else was there, what utility would i neeed to manage the server becuase it would have no GUI [16:19] Dream-Ubu: you mean some kind of DNAT? [16:19] if i had a 5 drive set up how would i stop it using the OS drive as storage [16:20] DNAT? [16:20] !DNAT [16:20] Sorry, I don't know anything about DNAT [16:21] ah ok [16:22] erm, well a static IP address that i can give a domain to [16:24] Dream-Ubu: your 5 drives are on RAID or LVM?, if yes, use apropiate commands to dettach it, if not cleaning fstab, powering down and remove it physically should suffice. [16:25] well the 4 storage drives would be in RAID [16:27] probs raid 1 - all sata on a raid card witch makes it easier [16:40] hi [16:41] is this the right channel to discuss about automated ubuntu installation using kickstart ? [16:42] nope [16:42] one sec [16:42] https://wiki.ubuntu.com/UDS-L/RemoteParticipation [16:43] kaushal: ^^ [16:44] jcastro_, bit confused [16:45] i have issues while performing kickstart ubuntu installation [16:45] i dont see anything in that wiki link [16:45] kaushal: OH [16:46] I thought you wanted to participate in the server track at our developer summit [16:46] nope [16:46] yes, you're in the right place [16:46] Okay, damnit, this is pissing me off to no end [16:46] let me pastebin it [16:46] how do I get Grub to boot automatically. [16:47] I power cycled a machine hard, locked up, and grub didn't boot automatically. [16:47] Ubuntu 9.10 [16:47] kaushal: http://www.ubuntu.com/products/whitepapers [16:48] kaushal: I have written a wp on the subject that should help you and is published at the above url [16:50] nijaba, great [16:50] http://paste.ubuntu.com/322522/ [16:53] What the hell is up with this: if recordfail = 1 timeout -1?!?!? [16:53] I certainly hope that isn't the case with servers [16:54] Sometimes you have to power cycle a machine, for whatever reason, and your server isn't going to boot if you do. === dendrobates is now known as dendro-afk [16:55] what should my ownership be so that i can upload files to my web directory? i keep getting permission denied when i tried to upload files or overright files via sftp. [16:55] i've got files in web dir set to root.www-data [16:56] i've added users to the www-data group but still those users get permission denied when trying to upload files [16:58] JJman: 770 on /var/www ? [16:58] 766 looks like [16:59] nijaba, any clue ? [17:00] epinky: sorry no its set to 755 [17:01] Fixed grub2. Found where to comment them out from here: http://ubuntuforums.org/showthread.php?t=1195275 [17:01] It would have been bad to power cycle this server remotely, and have it stop on the grub menu. [17:02] JJman: sudo chmod -R 755 /var/www [17:03] JJman: sudo chmod -R 775 /var/www, sry [17:04] still doesn't let me upload files to /var/www [17:04] jcastro_, http://paste.ubuntu.com/322522/ [17:04] /var/www is owned by root.root === jfluhmann_ is now known as jfluhmann [17:06] shouldn't it be in the www-data group? root.www-data for /var/www [17:07] chown -R root:www-data /var/www [17:07] sudo chown -R root:www-data /var/www [17:07] but is that right? [17:08] i assume the www-data group should be able to access /var/www [17:09] woot ok that lets me upload now. [17:09] thx [17:09] :) , you're welcome [17:11] JJman: one more thing, maybe you should take a look at Sticky bit and Jail concepts, good luck [17:11] never heard of. can u direct me to some info [17:12] JJman: just google for them :) , there's a plenty of info about that [17:14] k' [17:16] Wondering right now the way my server is setup it has a user called root (I don't even do the sudo) its the way linode has it to start the person running the linode has to change stuff, well I would like to have both domain be only allowed to access their own directoris, how can I do this? [17:20] hm, epinky would it help if i said what use i want it for and then you tell me what the best route would be? [17:22] hi epinky, how are you? I got it all working I did a reinstall and then did the guide a little different and now it appears to be working [17:23] nijaba, checking in again for my query ? [17:25] kaushal: your query? [17:25] http://paste.ubuntu.com/322522/ [17:27] Hey does anyone here have any experience wiht setting up a server with LSI Megaraid 8308ELP raid cards in it? [17:34] kaushal: you would have to create your own iso, or base your install on the dvd [17:34] ok [17:38] nijaba, any other workaround for that particular issue ? [17:38] kaushal: do a network install instead of a cd install [17:39] I believe you are not clear with my issue ? [17:39] I am using automated installation over http method [17:40] kaushal: you did write "The CD ISO image do not have universe repository :-( Is there a way to handle this situation?" in pastebin, so I am a bit confused [17:41] ah ok [17:41] kaushal: in a network install, nothing should prevent you from install package coming from universe [17:41] kaushal: just make sure you are mirroring universe [17:41] kaushal: I have a section about this in my wp [17:43] ok [17:48] Dream-Ubu: that's right [17:51] nijaba, how can i populate http://archive.ubuntu.com/ubuntu/pool/multiverse/ in my pxe server ? [17:51] and also http://archive.ubuntu.com/ubuntu/pool/universe/ in my pxe server ? [17:51] I have created using the CD image [17:52] I mean how can i mirror universe and multiverse repository into my pxe server ? [17:53] right im back, ok use for this server would be a basic storage and website (passworded access to storage) its only an atom PC so it cant be too overloaded [17:54] Dream-Ubu: ok, and ... [17:56] basicly a personal cloud [17:57] just need to know what the best set up for 4 harddrives and how to stop it accessing the OS drive [17:57] that, and static IP [17:59] stop is access the os drive n using it for storage [18:02] Dream-Ubu: can you explain better that "access the os drive" ? [18:03] ok, i want to close off the OS(operating system) drive so it wont use it to store data, i want it to use the 4 drives [18:05] make sense? [18:06] like, if i was in a box, i dont want anything except me in it, im the os, i want frogs in box 1 and eggs in box 2 and so on, i dont want anything with me ^^ [18:07] * Dream-Ubu removes last comment [18:07] mmmm, then /var should go on a partition on the other 4 disk array, you'll have to separate /var and mount OS drive where all system stuff like /etc and configuration things as read only [18:08] ok [18:10] quick question, is it more hastle than its worth? [18:13] Dream-Ubu: it's worth but for NAS I'll use other type of software :) (maybe FreeNAS), but it's just my opinion :D [18:13] its not for network, its for external connections also [18:14] if i wanted network i'd plug a external hdd into my bthomehub [18:14] nas* [18:14] thats why i want a static IP to give a domain to :P [18:17] Dream-Ubu: you can always use some Ubuntu router box to redirect (DNAT) to your local infrastructure :) [18:21] erm, confused now :) [18:21] long day today so far [18:21] by the way, hello :) [18:21] EHLO Dream-Ubu [18:23] ok, this will make it easier for me ^^ and, this is the only bad bit to my idea, its going to be a wifid server [18:23] i dont want to trail a wire upto the attick [18:24] so, the motherboard is intel littlefalls2, (atom 330) 2gb ram - 4x250gb harddrives connected to a PCI card [18:24] optional raid if i want it [18:24] Dream-Ubu: you can use CPL, using electrical network :) , it's better wired that wireless [18:25] yeah, i didnt spend 3 days convincing my dad to make this house wireless to only go n put a wire in [18:26] benafit is, it'll have a dedicated wifi network as we have 2, perfect for testing i can access it externaly [18:26] Hey does anyone here have any experience wiht setting up a server with LSI Megaraid 8308ELP raid cards in it? [18:29] Doonz: afaik there's only one driver for MegaSAS and it's for debian, maybe if you'd try [18:35] epinky: now i would only need the driver if i was going to install ubuntu onto the raid array correct? === Authority_ is now known as Authority [18:36] Doonz: yes, that's it, but as I told you I don't know of any driver for your 8308ELP. There's only one for SAS and it's for Debian [18:38] ok so if i was running the os portion of my install off of a 250gb drive and then had 2 raid cards. i should be able to see the raid arrays in ubuntu to mount correct? [18:48] Doonz: mmm, raid cards it's hardware-RAID, then you need drivers, if it was software-RAID Ubuntu will make just fine [18:48] hmm thats strange ubuntu wouldnt just support the card === fenris__ is now known as ejat [19:14] Good day. I am using ubuntu server 8.04LT and am looking for a way to have install NOT use UUIDS during installation. Any ideas? [19:15] I am using... (did that get cut off?) [19:15] 8.04LT and am looking for a way to have install NOT use UUIDS during installation. Any ideas? [19:30] hello [19:30] are there any firewall gurus out there? [19:30] preferably ufw gurus [19:31] i need some help setting up ip masquerading for pptpd vpn [20:21] how do i make an server with a user system? like you would have had in your school? [20:21] username, password and a set space [20:23] Dream: install ubuntu server, set up a static IP or hostname and then install ssh, and add user accounts [20:25] (install an ssh server, I should have said) [20:30] are there any ufw gurus out there that can help me setup ip masquerading for vpn? [20:32] LilJohn: I suggest reading http://manpages.ubuntu.com/manpages/karmic/en/man8/ufw-framework.8.html === luis__lopez is now known as luis_lopez [20:56] bventura - would it (if i make it right) allow me to log in from another internet connection? === scott_nwoktech_ is now known as scott_nwoktech [20:59] dream: yes it would [21:00] woo! brill :P [21:01] dont know why i want to try it - erm - how would i make a passworded private cloud? thats linked to a domain name === MarwolTuk_ is now known as MarwolTuk [21:21] New bug: #484617 in backuppc (main) "package backuppc 3.1.0-6ubuntu4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Low,Incomplete] https://launchpad.net/bugs/484617 === Romeo` is now known as Guest25008 [21:22] jdstrand: thanks i have tried i have tried something similar to that but it sitll didnt work, i'll try it again [21:23] couls any one explain to me how the 10.0.0.0/8 notation works? === Guest25008 is now known as Burebista [21:25] LilJohn_: that's CIDR notation, it means netmask 255.0.0.0 [21:26] ah ok so 10.0.0.0/24 means 255.255.255.0? [21:27] LilJohn_: yep, that's it :) [21:27] ok that helps [21:29] ohhhh sweet [21:29] that got it [21:29] it was a stupid subnet issue [21:29] thanks all who helped [21:40] Dream-Ubu: sorry i was having lunch, if you're still there, yes you can access your server from another location on the internet, but you need to configure that on the network that the server is on. YOu'll have to port-forward the ssh port (22) from your router (if you have one) to the server [21:40] this is a major security hole tho, make sure to use good password, VPN is better way to go [21:41] thanks - i cant make up my mind what i want to make at the moment [21:41] as for the cloud, you can set up on ubuntu but it's a lot to get into, better check the ubuntu server guide [21:41] hehee [21:41] try installing openVPN for secure access, also try setting up DNS and a mail server, that'll keep you busy for a while [21:41] thats something for me to do his week end [21:42] nice [21:42] if my tutor gives me my fricked HDD back >_< [21:42] hey another really cool project is virtualization if your CPU support it, very fun to use virtualization for a testing/learning enironment [21:43] well, its an atom, i highly doupt it will :P [21:43] I just installed a Eucalyptus cloud controller, with a handful of node controllers, and, following along here: https://help.ubuntu.com/community/UEC/CDInstall, it fails on step 4: register nodes. Is there a known issue with the karmic server images? [21:48] smcwuay was that aimed to me? [21:50] Dream-Ubu: no, it was just a general question. I just downloaded, burned, and installed the image on a few nodes on my system, and it fails to add the NC to the CC. I'm not sure that it's a Eucalyptus question since it seems as though something went wrong on the server image instal [21:50] oh i thaught it was a statement not a question >_< didnt read the "?" [21:51] and i read it as there is not "is there" [21:51] No, i was wondering if anyone else was stuck at that point. [21:53] also, it asks me a question about the NIC setup after it tells me to eject the cd and reboot. very suspect. [21:58] anyone seen chuck around? trying to find him but no luck :( [21:59] Greetings and salutations. I'd like to create a mount point to /var/log on a really big disk, but am unsure of how this will affect logging on startup. Will boot logs be in the mounted /var/log, or in the directory /var/log on the boot disk? [22:00] !openVPN [22:00] OpenVPN is a vpn technology in Ubuntu, sudo apt-get install openvpn and then see http://openvpn.net/ and see the documentation "HOWTO" noting you have already installed it. ;-) It rocks! [22:00] virtual private nameserver :P? [22:01] aaah [22:01] nice ^^ prestalled openvpn [22:02] Fenix|work: only /var/log ? modify fstab and you're done [22:03] epinky, so then boot logs will be on the mounted disk then. [22:06] Fenix|work: yep, don't forget to move your old logs, and remove that directory from "boot disk" [22:06] Umm, isn't that directory needed for the new disk to mount to? [22:07] Fenix|work: yes but it has to be on your big disk(as a mount point on /etc/fstab) [22:37] raid ?: are there drawbacks to installing an entire linux system on a RAID1 mirror? should the system be on a 3rd non-RAID drive, and only the data (/home, /var) on the RAID? will the system perform better if only the data is on RAID1 and the rest of system on non-RAID1 [22:39] bventura: if you have a third drive then just use RAID 5 [22:40] i'll try it, i've been practicing on virtual machines hehee.. gearing up to buy the real hardware [22:41] the reason I ask is that I am replacing 2 servers that were set up like that, 3 disks, 1 system disk and 2 raid1 with data,, and I want to understand why it was set up like that [22:41] predecessor at work did it and i'm not sure why [22:42] so far i'm really impressed with md and LVM seems like really cool stuff very easy [22:42] bventura: Keep in mind that raid 5 and the like are suceptible to controller failures and then the data is very difficult to recover...... so raid still requires regular backups. [22:42] right - i've got backuppc on the case [22:42] I learned this the hard way...... [22:42] ouch [22:43] Wife is speaking to me again. [22:43] hehee [22:44] backups saved in geographically different locations is also adviced :) [22:44] epinky, i want to set that up but not sure how, the data is too big to copy over internet [22:45] external drive? tape? [22:45] her mobo did raid 5, so I did it thinking it's bullet proof. Mobo died, and the data on the drives as well..... Abit wouldn't even answer my e-mails for compatible replacement controller..... [22:45] yikes [22:45] now we do raid 1, and multiple sets........ [22:46] do you put the whole system on the raid1, or just the data? [22:47] thats why i have gone to software raid in cheap setups, if you dont have money to get 2 or more real raid controller when setupping box, you should do software raid [22:47] I sould tell you I'm new to Ubuntu, but I usually place everything I value on the RAID 1 set, and go with single drives for info like and OS, etc that I backup and store elsewhere. [22:47] ok [22:47] yeah that's how i've been planning on setting up but i'm not really sure why, just because the old server set up that way [22:48] I used to think I was smarter, now I know my limits...... or so my wife tells me ;) [22:48] hehee [22:50] how much basic server setuo takes from hd with bzip ? 100M, 200M. its fast and easyt o replace if disk dies, but some production data is allways impossible to replace [23:39] awful quiet in here... anyone working on any fun projects? [23:43] Any experts on FreeRADIUS here? [23:43] experts is a big word [23:44] I'm having a little trouble with iptables...specifying multiple ports in a rule via "--dport 80,443" is not working, while doing something like "--dport 80:443" is [23:44] I'd like to use FreeRADIUS for wireless authentication. Trying to figure out if there is a way to associate the user accounts with the system user accounts. I.E., if I disable their system account, their wireless access is also disabled. [23:44] is there some other syntax, or something I need to enable to get comma separated port numbers working? [23:44] ziesemer: hardly [23:44] qman__: I've just always had to run seperate ports as 2 different rules. [23:45] http://freeradius.org/pam_radius_auth/ [23:45] that syntax is _supposed_ to work, but isn't [23:45] my dilemma is that I need a not rule [23:45] otherwise I'd just use two rules [23:45] ups... no, that's not it [23:46] ziesemer: you can set up freeradius to use PAM for auth [23:46] ziesemer: and if you lock an account (passwd -l account), it won't be able to authenticate [23:47] problem is that your wifi client must send cleartext password to freeradius [23:47] you do understand why is that? [23:48] another problem, my server is not executing my .bashrc on login [23:48] but running '/bin/bash' does it [23:48] Yes. Hope to use certificates there, but that's a different issue. [23:48] bash is most definitely my shell [23:48] Auth-Type pam { [23:48] pam [23:48] } [23:48] anyway, i'm off [23:48] Using PAM, FreeRADIUS would then use the same authentication as the server - whether that be /etc/passwd or LDAP? [23:48] take care [23:48] thx [23:48] ziesemer: should be right, yes [23:49] you could also make pam to use both shadow and ldap [23:49] s/pam/freeradius/ [23:49] or even pam, passwd and ldap :D [23:49] Thanks. Gives me something to start with! [23:49] look at 'authenticate' in configs [23:49] bye all [23:50] qman__, I don't see the comma-separated syntax in the man for iptables. [23:51] I'd just set my default policies to DENY, then my allow as 2 different rules. [23:51] this isn't actually for a firewall [23:51] it's for bandwidth shaping [23:52] my front end firewall is all set [23:52] I want to throttle everything that isn't web traffic to one speed [23:52] and throttle web traffic to another speed [23:52] though I suppose reordering the rules should work