/srv/irclogs.ubuntu.com/2009/11/24/#ubuntu-server.txt

incentifitI've created a user, developer, that is a member of 'publisher' group.  I set ownership of /var/www to root:publisher.  Then, as developer, I make a new directory in /var/www.  I think I want that new directory to be owned by root:publisher.  Is that reasonable and possible?03:01
=== nxvl_ is now known as nxvl
twbbillybigrigger: why wouldn't you use the existing www-data group?03:22
twbYou want /var/www to be setgid, I think.03:22
billybigriggereh?03:22
billybigriggertwb, i think you meant incentifit but he's gone03:23
twbSorry.03:23
billybigriggernp03:23
* twb fetches coffee03:23
billybigriggerim sipping a tea03:23
billybigriggertastes good03:23
billybigriggeranyone aware of a decent apache log analyzer?03:28
billybigriggeror is it still a battle between awstats and webalizer? i haven't set one up in awhile and was wondering if something new has sprouted03:28
twbYou could probably run them both03:29
twbIIRC they're both straightforward to set up03:29
billybigriggeryes i know, just wondering if something else with a nicer graphing or anything03:30
billybigriggernewer03:30
billybigriggerfresh03:30
billybigrigger:)03:30
twbNFI03:31
=== aurigus_ is now known as aurigus
maxagazis there a way to check what was the last upgraded packages on a system ?04:15
twbmaxagaz: /var/log/aptitude and /var/log/dpkg.log04:17
=== Mike_lifeguard is now known as Mike||gone
HFSPLUS!ops04:41
ubottuHelp! Channel emergency! soren, lamont, mathiaz or tom04:41
ScottKNot anymore.04:47
* foxbuntu is glad he stays inside the Ubuntu community most of the time... #python makes him crazy everytime04:48
twbfoxbuntu: eh, if #python is the most annoying channel, #ubuntu is second-most04:52
twbI was glad when I found the SNR in here acceptable, because sometimes I can't reproduce Ubuntu bugs on Debian (and thus use #debian on OFTC).04:53
foxbuntutwb, I would agree there04:56
ninnypantsI'm running a postfix mail server, and when I send mail the from name defaults to my mailserver url instead of the value I get in php any idea why that is?05:24
ScottKThat's a sign you aren't setting it properly in your php.  Postfix will only do that if From is missing.05:24
ninnypantsmy php is set correctly "From: ".$mail_from."<".$mail_email.">"05:25
ninnypantsand it's only the mail from variable that changes the actual email address it's sent from goes through correctly05:27
ScottKWell I guess you know more about it than me and will figure it out then.05:29
ninnypantsI certainly wouldn't say that I know more than you but I had this section of code working before, and after 2 or so emails were sent correctly with it the problem started05:33
=== MarwolTuk____ is now known as MarwolTuk
billybigriggeranyone familiar with certificates and csrs?05:47
billybigriggerim trying to create an insecure key for my mailserver and it's asking for a passphrase, just hitting enter repeats the question05:48
billybigriggeris it not possible to create a server.key without a password?05:48
ninnypantsI'm having trouble with the from value on my emails not setting correctly. I'm using postfix and the wordpress mail function http://codex.wordpress.org/Function_Reference/wp_mail06:22
ninnypantsmy code is: wp_mail($email, $mail_subject, $message, "From: $mail_from <$mail_email>"); but all of my emails show the from value as mydomain.com06:24
Dessanninnypants, it shows right on that page you listed how the header section is supposed to be included. Your code is not correct.06:32
ninnypantsnot sure what you mean. my From: header is in the correct paramater slot am I missing something?06:35
Dessan$headers = 'From: My Name <myname@mydomain.com>' . "\r\n\\"06:36
ninnypantsit still didn't change anything still shows it being from mailserverdomain.com06:39
Dessanhmm how to debug this then.... Show me what you have now as code?06:43
ninnypantscould it be something with postfix because it was sending correctly for 2 emails or so before the problem started06:43
Dessanoooh fun06:43
ninnypants$headers = "From: $mail_from <$mail_email> \r\n\\"; wp_mail($email, $mail_subject, $message, $headers);06:43
ninnypantsthat's the code06:44
billybigriggerwhile we're on the postfix topic....i can't seem to get 250-AUTH=LOGIN PLAIN to show when i pass the ehlo localhost command while telneting into my server...any ideas?06:44
billybigriggerno errors in mail.log06:44
DessanI haven't used postfix with my web app servers in a while. also the  . "\r\n\\" is important I would leave that as is and not include it in the ""06:45
ninnypantscould be a slow server before I upgraded my ram it took a long time for it to respond to telnet06:45
ninnypantsstill no dice trying $headers = 'From: '.$mail_from.' <'.$mail_email.'>'."\r\n\\";06:48
ninnypantsjust curious what is the importance of the \r\n\\ I've never had to use it when writeing my own code other than to seperate paramaters with \r\n06:49
Dessanawesome. Well now that I'm sure its not you lets see what we can find. What do the email settings in WP look like?06:49
ninnypantsin the wp_mail function?06:50
Dessanin the dashboard of WP under settings there should be a tab that says email06:51
ninnypantsnope nothing06:56
ninnypantsno tab that is06:58
ninnypantsI also just tried using ini_set to set the sendmail_from setting in the php.ini to the email address I want it to show up as being from with no luck07:10
ninnypantsDessan: you there still?07:13
=== smackdaddy is now known as cxsss
=== pan1nx is now known as info
=== info is now known as help
=== georg is now known as kwork
=== alvin_ is now known as alvin
OmahnIs it possible to use packemaker-openais in Karmic to run a load balancer with LVS or does it still have some essential parts of the clustering stack missing?10:33
=== ogra_ is now known as ogra
hjmTried to install open LDAP on 9.10 server. I am not being asked for a password at installation, cannot query anything. How can I set the database password?11:36
alvinhjm: See bug #447099 for that information11:38
uvirtbot`Launchpad bug 447099 in openldap "No password set on install of slapd-2.4.18-0ubuntu1" [Undecided,Invalid] https://launchpad.net/bugs/44709911:38
ahasenackhjm: in 9.10 the local root user is also the ldap root user as long as ldapi:// is used12:14
hjmThanx thats it12:24
benediktIm trying to follow this guide on mail filtering but it doesnt seem like spamassin is ever invoked. http://doc.ubuntu.com/ubuntu/serverguide/C/mail-filtering.html13:23
benedikt /etc/default/spamassin has "ENABLED=1" and I have followed the guide but no X-Spam headers show up in the message headers.13:31
=== ogra_ is now known as ogra
=== orudie_ is now known as Pavel
=== Pavel is now known as bro
=== bro is now known as Guest91812
=== Guest91812 is now known as paulm
benediktA X-virus-scanned header appears, so amvisvd seems to work and calles ClamAV successfully..14:13
=== johe_ is now known as johe
=== Mike||gone is now known as Mike_lifeguard
=== robbiew_ is now known as robbiew
VSpikeAfter an upgrade from 8.10 -> 9.04, my server fails a FS check at boot.  It's using a RAID1, which seems to be failing...15:50
mathiazkirkland: hi!15:59
mathiazkirkland: what was the outcome of the virt-manager demotion discussion at UDS?15:59
sorenmdeslaur: I heard back Gemalto people. Their tokens are only usable with Amazon :(16:05
mdeslaursoren: darn :(16:05
sorenInsert "from the" at an appropriate place in that sentence. I don't know how that went wrong.16:06
mdeslaursoren: I guess amazon subsidizes part of the token price, which is why they're so cheap16:07
sorenmdeslaur: Probably.16:07
sorenmdeslaur: If only "some other" company would do the same.... :)16:07
mdeslaurhehe16:08
VSpikewhat does this mean? http://pastebin.com/d2f650fe716:14
pavelmis anyone here familiar with UML ?16:15
pavelmi'm getting the following error16:15
pavelmI am getting the following error  http://pastebin.com/m26a90af816:15
VSpikeeven stranger http://pastebin.com/d7ffea8a616:15
VSpikeThe raid should be comprised of /dev/sdb and /dev/sdc16:16
VSpikeSo what is md_d0?16:16
VSpikeTHis seems relevant http://ubuntuforums.org/showthread.php?t=1168360&page=216:17
=== dendrobates is now known as dendro-afk
ArtimusI've been following https://help.ubuntu.com/community/LDAPClientAuthentication to setup LDAP authentication. The problem is, only users with posixAccount objectClass are able to login. Is there anyway to get around that? I don't really have access to modify the LDAP.17:11
uvirtbot`New bug: #487696 in samba (main) "[Samba] Error fcntl_lock: lock failed & cached_login don't run" [Undecided,New] https://launchpad.net/bugs/48769617:12
=== dendro-afk is now known as dendrobates
zroyschwhy is it that every few minutes my connection, gmpc to mpd server and icecast stream all cut off when connected from the internet. but i can still ping17:46
zroyschssh connection17:46
freefallHi. just wondering how to create a alias for postfix i.e. mail sent to webmaster@example.com is sent to me@example.com17:47
freefallIs there anyone nice enough to point me to docs on this subject?17:47
ScottKfreefall: Start with man postalias17:48
ScottKI suspect that's what you want.17:48
lamontor even man aliasees17:48
lamontman aliases that is17:48
freefallk thx!17:49
freefallagain thank you Scottk and Lamont, that exactly what I'm looking for, cheers!17:50
Deepshi, i've just installed 9.10 using the virtual machine option at boot time17:54
=== freefall is now known as freefallden
Deepstrying to use iptables now, looks like the iptables package wasn't installed by default, installed it and getting fatal errors about missing modules17:55
DeepsFATAL: Module ip_tables not found.17:55
Deeps i've tried installing linux-server and still getting the same error17:57
=== Mike_lifeguard is now known as Mike||gone
Bilge>Deeps17:58
BilgeDOOOOOOOOOO HO HO HO HO HO17:59
Deepsi lie, i neglected to to actually install linux-server, my bad17:59
Bilgederp17:59
Deepsnm17:59
zroyschwhere is ubuntu server's ssh log18:02
zroyschi set sshd_config to LogLevel VERBOSE18:03
kane___zroysch: have you read https://help.ubuntu.com/community/SSH/OpenSSH/Configuring ?18:09
middlemanadd-apt-repository is not installed on 9.1018:11
zroyschkane___: no, but I have checked the /var/log/auth.log file.18:11
zroyschand it seems to not provide much reasons for why i continually get disconnected18:11
kane___zroysch: intuitively i'd assume keep alive18:12
zroyschi have keep alive set.18:12
kane___and interval to somethin reasonable?18:12
zroyschfurthermore, i'm currently ssh'd into a centos server on the same lan, still across the internet, from the same lan18:13
zroyschit doesnt disconnect unless i tell it to18:13
zroyschKeepAlive yes18:13
zroyschServerAliveInterval 12018:13
zroyschis what my /etc/ssh/ssh_config looks like18:15
freefalldenzroysch: are you using a public/private key authentication?18:15
zroyschalso its not just ssh that breaks down18:15
zroyschthe mpd connection and icecast stream also cut out18:15
zroyschall happens at the same time18:15
zroyschseems like tcp fails. ping works even during the downtime18:16
kane___zroysch: you want your sshD_config, set keepalive there too, and clientaliveinterval18:16
kane___zroysch: ah, ok, not just localized to ssh then18:16
zroyschkane___: right. and the centos machine has no clientkeepalive line, and it stays up all the time18:18
zroyschis there any way to find out why tcp connections across the internet seemingly fail for this one server18:20
zroyschwhen i'm connected at home, on the same lan, its all good18:20
kane___zroysch: just so i get this right; from your client machine, somewhere outside on the internet, you can ssh to 2 machines: an ubuntu and a centos one. the centos one behaves as you expect, but the ubuntu one sometimes drops all tcp traffic?18:22
zroyschit seems so, i'm estimating that it is all tcp. i only connect with ssh, mpd, and an icecast stream to that server18:23
zroyschi know icmp stays up during the 30sec-1min downtime, i can still ping it18:23
zroyschwell18:23
zroyschscratch that its pinging the firewall not the server behind it18:23
middlemanUbuntu server doesnt have "add-apt-repository" installed, how can I install it?18:24
zroyschkane___: another point of interest is that when I connect to the ubuntu problem server from the office windows server (using putty, still across the internet) it appears to remain connected. (i am currently at school where i usually make my connections)18:25
billybigriggerhow come i've been waiting almost 24 hours for my A record and MX records to change to my servers new ip?18:48
billybigriggeri thought a 1 hour TTL meant changes happen after an hour?18:48
benediktbillybigrigger: there are a lot more factors to it18:57
benedikte.g. the negative ttl (how long before the dns server will be queried again for a record it has failed to find before)18:58
benediktanybody good with spamassasin/amisvd?18:58
ScottKbenedikt: What's the question?  Just ask it.19:00
android6011>a have a 1tb drive with serveral gbs of pictures and videos(some small clips others a few gb). Data recovery in case of failure could be crucial. Which filesystem would be best for me to use? it is not high performance drive so i dont think speed would be a factor19:00
zroysch1http://pastebin.ca/168580619:04
zroysch1does any of this tell us WHY it is disconnecting?19:04
Italian_Plumber1android: I would use ext319:10
Italian_Plumber1zroysch: what do you see there that's disconnecting?19:11
benediktScottK: i asked earlier, i consider reposting to be rude. But i followed the server guide for mail filtering and spamassisin doesnt seem to be invoked, there are no X-Spam-* headers in mails19:27
benediktandroid6011: ext3. And if it is important data you should back it up, preferrably automaticly.19:27
RoAkSoAxkirkland, what do you think on having testdrive doing something like "testdrive -t desktop" or "testdrive -t desktop -a i386" instead of having another executable to select a default iso image, or maybe both can be kept19:30
MaelosIs there anything in ufw which would throttle traffic?19:35
MaelosI added a couple masq/forwarding rules and am seeing horrible performance.  It could certainly be the network but thought I'd ask about ufw.19:36
benediktMaelos: how is the perfoance to and from the internet directly on the firewall machine?19:37
=== dendrobates is now known as dendro-afk
Maelosbenedikt: No issues there19:40
benediktMaelos: and check again with the machines behind it. Could have been a termpoary thing19:41
MaelosI checked numerous times, it's definitely reproducable by putting the machines behind my Ubuntu server.19:42
ScottKbenedikt: My first thought is double check your configs as it doesn't take much to get things off kilter.19:42
* ScottK is sure you've done that, but do it again.19:42
benediktkilter...?19:43
benediktanything I didnt do as described in the guide is installing the spf pakage or dkim things, i use neither of those.19:43
ScottKoff kilter == bad.19:45
benediktah. Ill go through it once again.19:45
benediktScottK: also one thing that confuses me. in postfix/main.cf, content_filter is set to 127.0.0.1:10025 but in master.cf there is something set to listen to 10025 .19:49
benediktnow everuthing is quadruple-checked19:50
zroyschis there a gnome/linux application that will let me easily upload photographs to a site like imgur/imageshack ? like right click the file and upload or something in gimp19:50
blackxoredwhat's the iptables command to redirect one local port to another local port?19:51
ScottKbenedikt: Do you know for sure the mail is going into amavisd-new?19:51
benediktScottK: the mails have a X-virus-scanned header19:52
ScottKbenedikt: OK, then we need to look in the amavisd-new config, not postfix.19:52
blackxored what's the iptables command to redirect one local port to another local port?19:52
benediktScottK: pastebin from mail.log when a message arrived19:54
benedikthttp://pastebin.com/m64f2f09c19:54
ScottKLooking19:54
benediktwhen the message get relayed to localhost:10024, its amavisd-new recieving the message19:55
sorenblackxored: iptables -t nat -I PREROUTING -p tcp --dport someport -j DNAT --to-destination the.other.ip19:56
ScottKOK.19:57
benediktat least it is the amavis process listening on 1002419:57
blackxoredsoren, to my own box from one port to another, just that19:58
ScottKbenedikt: Pastebin your amavis config where spamassassin is enabled?19:58
sorenblackxored: Oh, sorry, I misread your question.19:58
benediktScottK: /etc/amavis/conf.d/15-content_filter_mode ?19:59
blackxoredsoren, so?19:59
sorenblackxored: iptables -t nat -I PREROUTING -p tcp --dport someport -j DNAT --to-destination :otherport19:59
sorenblackxored: I think.19:59
ScottKbenedikt: Also, silly question, I imagine, but you do have spamassassin installed, right?19:59
benediktScottK: yep :-)19:59
ScottKbenedikt: If that's where you changed it, yes.19:59
benediktScottK: the guide states "First activate spam and antivirus detection in Amavisd-new by editing /etc/amavis/conf.d/15-content_filter_mode".19:59
benediktScottK: http://pastebin.com/m3753a6ca20:00
ScottKbenedikt: Yes, but the config files waterfall, so you can also do it later, for example in 50-user.20:00
ScottKI agree that looks correct.20:01
benediktjust for reference, this is the guide20:02
benedikthttp://doc.ubuntu.com/ubuntu/serverguide/C/mail-filtering.html20:02
ScottKbenedikt: When you receive mail can you check using top or your favorite ps invocation to see if the spamassassin process runs?20:02
ScottKThat's the one to be using.20:02
=== dendro-afk is now known as dendrobates
benediktScottK: it ran (spamd)20:06
djveerwhat would be the best way to set up a basic Ubuntu web server with two machines that are identical? any suggestions?20:06
ScottKbenedikt: OK. then the problem is not adding headers, not not running.  For that you need to look at spamassassin configuration.20:15
RoAkSoAxdjveer, u mean a cluster?20:16
uvirtbot`New bug: #487795 in samba (main) "Samba does not start well" [Undecided,New] https://launchpad.net/bugs/48779520:16
djveerRoAkSoAx: Is that an option?20:18
djveeri'm looking for some way to use both machines for high availability20:19
djveerrather than just having one machine that could fail20:19
RoAkSoAxdjveer, so yes, clustering... HA Clustering. Have one machine active and the other passive waiting for the first one to fail... to take control of the service20:20
benediktScottK: already did, didnt find any pre-specified options for that. im reading manuals so ill probably be able to sort this out20:20
djveerRoAkSoAx: Is there any Ubuntu documentation on that?20:20
RoAkSoAxdjveer, we are working on having that, but yes :) this miught help you nout: https://wiki.ubuntu.com/UbuntuHighAvailabilityTeam/Heartbeat20:21
ScottKbenedikt: OK.  So it's narrowed down.  Once you get it sorted, would you let me know so we can get it added to the server guide?20:21
benediktScottK: of corse i will. im not sure i have time to sort this out tonight but ill let you know20:22
djveerRoAkSoAx: thanks very much :)20:22
ScottKThanks20:22
=== Mike||gone is now known as Mike_lifeguard
RoAkSoAxdjveer, are you running karmic?20:23
benediktwho maintain the Server Guide? is it canonical/canonical employees or volunteers from the community?20:23
djveerRoAkSoAx: um... i'm likely going to be running 8.04 LTS20:24
djveernot sure what the codename for it is20:24
djveerhehe20:24
djveeri've been doing testing on 9.10 though.. which i'm sure is Karmic Koala20:24
RoAkSoAxdjveer, ok so the tutorial should suit you... since from karmic there are ongoing changes to the cluster packages and things work slightly different. Feel free to ping me if you need help20:25
djveerRoAkSoAx: will do, thanks a million20:25
zulbenedikt: volunteers20:25
zulbenedikt: or volunteer (sommer)20:25
ScottKbenedikt: sommer is the person to talk to about server guid (and he's community, not Canonical)20:26
benediktzul and ScottK: thanks20:29
thenetduckhi, I need help creating a new mysql user on my hardy heron server?20:35
benediktthenetduck: if you are a beginner with mysql i would suggest phpMyAdmin20:36
exitcode1seconded. takes all the guesswork out of mundane admin tasks (like adding users)20:37
benedikti just recond only making it availble through https20:38
* ScottK points at the security record of phpMyAdmin and suggets thinking about it.20:42
benediktwich is way i suggested using only https20:43
thenetduckbenedikt: I have a rails server set up. I can access mysql via command line, I just don't know what to put in haha20:45
exitcode1http://lmgtfy.com/?q=mysql+create+user&l=120:46
thenetduckthank you exitcode120:47
axisyshow do I auto create a user's, who is in /etc/passwd, a home dir at first ssh login ? i am using pam_radius_auth to authenticate20:48
thenetduckexitcode1: I however have searched google and don't understand it20:48
ahecan i change the ip addresses of a eucalyptus cc and nc after they have been setup?20:48
axisyshere is my pam.d/sshd file looks like http://pastebin.com/f6e97a7520:48
exitcode1okay, whelp... what do you have, what are you expecting, and what happens instead?20:49
axisysactually better yet how do I do it even w/o having a entry in /etc/passwd ?20:49
axisysusers authenticates using radius20:49
thenetduckexitcode1: i'm confused by the second part. CREATE USER user [IDENTIFIED BY [PASSWORD] 'password']20:53
thenetduck    [, user [IDENTIFIED BY [PASSWORD] 'password']]20:53
thenetduckexitcode1: do I have to enter the user and password twice?20:54
thenetduckor is this example of how to make two users?20:54
benediktScottK: this doesnt seem to be an issue, the headers are now showing. I have no idea way, I have backed every single step i have made, but they are still there. My best guess is that spamd has somehow been started with the wrong parameters and restarting the deamon fixed that.20:58
ScottKbenedikt: OK.  It's officially weird then.20:58
ScottKLet us know if you figure something out.20:58
benediktI will.. But this doesnt make any sense. I am probably doing another very similar setup in the next few days, ill see how that one behaves20:59
ScottKGreat.20:59
benediktNow i just have to add a nice rbl to the config21:00
exitcode1thenetduck: nah thats just for one user. they wanted you to be able to have the word PASSWORD as a label before the password for readability, just like the mandatory USER before the new user's name. has an example: http://dev.mysql.com/doc/refman/5.1/en/adding-users.html21:01
thenetduckoh ok thanks21:02
thenetduckso I have question about privileges,21:05
thenetduckwhat kinds of privileges should I give a user so it can read/write for my website?21:06
thenetduckfor mysql21:06
mupplo22:44
muppAm I in the channel now?22:45
Dessandepends on where you want to be22:45
Dessan:P22:45
mupp"This is NOT #ubuntu. | You have been sent to this channel because you are using a proxy service...."22:46
muppstrange, Im not using any proxys22:46
=== erichammond1 is now known as erichammond
muppanyways, I'm annoyed at tasksel, I thought you'd select what you want to install and not what to uninstall. And now all my programs are lost, including sshd...22:49
mupp****22:50
muppshould be a warning22:50
muppo_O well, nothing to do about it now22:51
dknighthello would iptables/ufw questions be better answered in #ubuntu?23:20
=== robbiew is now known as robbiew_
billybigriggerwhy does apache2 not support phtml?23:34
jdstrandMaelos: ufw does nothing with throttling traffic23:38
ivoksbillybigrigger: phtml?23:45
ivoksisn't phtml just another name for php?23:46
ivoksor you are talking about embedded perl?23:46

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!