[00:11] php [00:13] firefox is asking me to save a phtml file [00:13] while trying to read index.php [00:13] i have the addhandler line for php in my apache2.conf [00:14] dunno why its asking to save a phtml, i've never seen that before === dendrobates is now known as dendro-afk [01:00] how can I check the processor info ? [01:28] Is anyone familiar with vsftpd? I'm currently having an issue with every file I upload having no permissions. I want everything uploaded to my folder to be, by default, set to permissions of 777. [01:29] mathiaz: ping [01:29] zul: hellow fellow canadiow! [01:30] mathiaz: bonjour! [01:30] mathiaz: i already got the python dependencies for landscape and ubuntuone and launchpad in the canonical-application-support spec [01:32] zul: oh ok. [01:32] zul: I though the blueprint had been folded into the seed discussion [01:32] zul: I was wrong. I'll update the seed blueprint then [01:32] mathiaz: i dont think so [01:33] mathiaz: okies cool...besides I dont think you dont want to spend time writing 21 MIR and MIR for associated dependencies right? ;) [01:33] zul: python-celementtree was considered to not be needed anymore [01:33] noted i think ctype is apart of python2.6 as well [01:34] zul: python-svn - there was an action noted to talk to the LP team (IIUC) to check whether python-subversion would be ok [01:34] zul: smartpm-core is already in main [01:34] mwhudson would know about python-svn, he's been dealing with bzr-svn [01:35] zul: and for asterisk I'd sync up with Daviey and the other devs involved in Asterisk [01:36] zul: and I'm not sure about the outcome of drupal 6 === dendro-afk is now known as dendrobates [01:42] mathiaz: gotcha [01:44] mathiaz:i think drupalv6 was ok wwwconfig-common had to be stripped out though, whats everyone beef with wcconfig-common anyways? [01:44] zul: you should ask the security team about wwwconfig-common [01:45] zul: I don't think they're happy with having that package in main [01:45] mathiaz: i asked kees he wasnt sure why [01:45] zul: I wish I knew. it seems like a good thing to me. [01:46] wwwconfig-common was meant to be deprecated about 4 years ago, iirc [01:47] with what? [01:47] dbconfig-common, various other bits & pieces I think [01:47] bah [01:47] it's not very helpful I know [01:49] i wonder how it fail if that dependency would be removed [01:49] eg http://lists.debian.org/debian-webapps/2005/06/msg00015.html from 2005 mentions it as deprecated - there's not really a decent set of tools for packaging web apps [01:49] wwwconfig-common usually handles the database setup & some apache mangling [01:53] I see what you mean... drupal6 depends on both dbconfig-common & wwwconfig-common [01:56] looks like the only bit used is a restart script, too === dendrobates is now known as dendro-afk [03:21] hey all [03:21] http://pastebin.ca/1686380 [03:22] anyone seen that before ^^^^ [03:22] perl is complaining about locale settings [03:22] billybigrigger: it's because your remote server hasn't got the appropriate locale(s) installed. [03:22] And because OpenSSH transmits local information by default. [03:23] Either unset LANG and LC_* when you log in, configure ssh not to send them, sshd not to accept them, or simply install the locales you need on your servers. [03:23] i see that now [03:23] I think it's something like language-pack-en [03:23] Personally I preferred the old way of compiling only what you need at install time [03:23] language-pack-en language-pack-en-base [03:23] Yeah [03:24] its junk though as i only need en_CA\ [03:24] i'm trying to change the way my bash prompt looks by editting .bashrc in /home/username/.bashrc by adding line that looks something like this export PS1="\e[0;31m[\u@\h \W]\$ \e[m" and nothing changes :( [03:24] twb, anyway to remove all of the locales i don't need? [03:24] billybigrigger: you mean the en_* locales you don't need? [03:24] without remove the whole language-pack pkg? [03:24] AFAIK, no [03:25] dang [03:25] :) ah well [03:25] thanks [03:25] If you find out, let me know [03:25] I mean, short of installing localepurge or something... [03:25] Or writing dpkg 3.0 to understand i18n better [03:26] orudie, those changes *should* be immediate [03:26] orudie, maybe you have some invalid characters or something? [03:28] orudie, are you trying to do colors or something? [03:28] \e[0;31m[\u@\h \W]\$ \e[m [03:28] \e is fine...but right after.... [0 [03:28] ??? [03:28] should be \[0 [03:41] do you know where I can find a good tutorial on how to install ssl ? [03:41] no a hardy lts server? [03:44] check the server guide [03:44] https://help.ubuntu.com/9.10/serverguide/C/index.html [03:57] New bug: #401782 in qemu-kvm (main) "please build a static version of qemu-arm 0.11.x in a separate binary deb" [Wishlist,Fix released] https://launchpad.net/bugs/401782 [04:27] hello all, I am looking for a program to check pop mail and send an email based on who sends a mail === jono_ is now known as jono [04:42] anyone aware of some decent cheap vps hosts either in canada or us? [05:06] Why the hell would you need a statically-compiled qemu-arm? [05:07] Hmph, "2) build a static version of qemu-arm so the binary can be copied into an arm chroot" [05:07] ITYM debootstrap --include qemu or similar. [05:50] hi, how do i enable rewriteEngine other then specifying RewriteEngine on in /sites-available/mysite.net ? [06:18] anyone know why i might not be able to telnet into port 25 to test postfix and smtp-auth? [06:30] billybigrigger: firewall, or postfix isn't binding on that interface/port [06:30] billybigrigger: you ought to use netcat instead of telnet, too [06:31] Otherwise people will think you're old [06:32] 250-AUTH DIGEST-MD5 CRAM-MD5 [06:32] tls isn't starting [06:32] i don't see STARTTLS anywhere [06:32] smtpd_use_tls = yes in /etc/postfix/main.cf [06:32] twb, any ideas? [06:32] Um, if you're getting a 250 then surely it IS listening [06:33] And neither telnet nor netcat will STARTTLS, so of course you won't get past that point. [06:33] yeah, telnet/netcat on localhost 25 work [06:33] so i have to test from outside my server [06:34] Nov 24 23:33:30 server dovecot: Fatal: imap-login: Can't load private key file /etc/ssl/private/cakey.pem: error:0906A068:PEM routines:PEM_do_header:bad password read [06:34] billybigrigger: just specify the external interface when you netcat. [06:34] don't see why it can't auth with that key [06:34] postfix uses the same key no problems [06:34] Dunno about ssl keys. [06:35] billybigrigger@timmy:/etc/postfix$ netcat 96.31.74.120 25 [06:35] (UNKNOWN) [96.31.74.120] 25 (smtp) : Connection refused [06:35] billybigrigger: so either your firewall is blocking it, or postfix isn't binding to that interface. [06:35] don't have a firewall setup [06:35] As ss(1) what postfix is binding to [06:36] that i know of [06:36] this is a 9.04 server image on a vps [06:36] *Ask ss(1) what postfix is binding to [06:36] it already had apache installed with all the latest jaunty updates...who knows what they did to it :) [06:37] billybigrigger: sudo netstat -ntlp4 | grep :25 # on the server, outputs what? (find out what it is listening on) [06:37] what is ss(1)? [06:37] billybigrigger: man 1 ss to find out :) [06:38] ss is basically the new netstat [06:38] tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 32678/sendmail: MTA [06:38] ahh, i was using netstat as user, no wonder it wasn't showing me much [06:38] i need to practice up with netstat/netcat [06:38] btw, why does ss always use so much horizontal whitespace? I have to pipe it into cat to get something readable [06:39] billybigrigger: OK... see that 127.0.0.1 in there... that means it is binding only to localhost... not what you want. [06:39] mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 [06:39] jmarsden, :) thanks [06:39] 104? [06:40] IPv6 is wacky [06:40] should i just listen on ip4? [06:40] billybigrigger: do you use IPv6? [06:40] not at all [06:40] billybigrigger: I'd look for the inet_interfaces line in /etc/postfix/main.cf ... [06:40] inet_interfaces = all [06:40] inet_protocols = all [06:42] ok, just ran dpkg-reconfigure postfix and changed from all to ipv4 [06:42] still has the weird ipv6 address in mynetworks though [06:42] anywho [06:43] what does the /8 and /104 mean? obviously i need to add my servers ip address in there... [06:43] /8 is the class right? [06:44] CIDR notation for a chunk of IPv4 address space. You can just put your Ip address on the line without a /nn [06:44] Or you can do 1.2.3.4/32 (same end result -- just one IP address) [06:45] 127/8 is the IPv4 loopback address range. It's a full class A address. [06:45] *address range [06:46] * twb grumbles about code that treats 127.0.0.1 differently from the rest of 127/8 [06:46] hmm [06:46] added my ip/32, restarted postfix, ran netstat again and still only listening on 127.0.0.1:25 [06:47] billybigrigger: try #postfix? [06:47] dead [06:48] Patience, grasshopper. [06:49] i asked there first...nothing but a bunch of /joins [06:49] :) [06:50] billybigrigger: Check in /etc/postfix/master for anything that might be directing daemons to only listen on localhost ? [06:51] Possibly also dpkg-reconfigure postfix (after making a backup) [06:52] And postconf | grep [06:53] postconf -n is probably enough (just look at what you have changed, not at everything) [06:53] billybigrigger: If you want, pastebin the output of postconf -n somewhere and I'll take a quick look. [06:54] doh [06:54] tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 32678/sendmail: MTA [06:54] 32678/sendmail: MTA [06:54] this vps is gay, has a bunch of stuff already preconfigured [06:54] not a clean fresh server install [06:54] billybigrigger: get rid of it, then [06:54] root 32678 0.0 0.1 66932 2344 ? Ss 18:23 0:00 sendmail: MTA: accepting connections [06:55] Incidentally, does that PID strike anyone as awfully covenient? [06:55] Oops, 2**15 is 32768, not 32678 [06:55] twb: 32767 would be... 678?? [06:56] im lost now [06:56] hi [06:56] I get console-kit-daemon[3863]: WARNING: Error waiting for native console 13 activation: Invalid argument in the syslog. Any clue what could be causing this issue ? [06:57] tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 7296/master [06:57] kaushal: Invalid lines in /etc/syslog.conf, especially one that tries to send syslog output to tty13 ? [06:58] 250-STARTTLS [06:58] but i don't see... [06:58] I am running ok [06:58] 250-AUTH LOGIN PLAIN [06:58] 250-AUTH=LOGIN PLAIN [06:59] billybigrigger: Did you get postfix listening on all interfaces? [06:59] jmarsden: clearly he did [06:59] 17:57 tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 7296/master [06:59] twb: well, that could be on localhost [06:59] No, then it'd be 127.0.0.1:* [06:59] (Right?) [06:59] Ah... OK. Yes, by that I meant the 250 stuff. [07:00] jmarsden: i dont see anything in syslog-ng.conf [07:00] my working postfix have ... tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 5192/master keepalive (0.00/0/0) [07:00] from #postfix [07:02] kaushal: where's /dev/console pointing? [07:02] Oops, it's not a symlink [07:03] Hm, "invalid argument in the syslog." doesn't mean that console-kit-daemon is reading rsyslog.conf -- after all, that would be crazy [07:05] kaushal: Others seem to have seen that kind of error in Ubuntu before, but no clear answers on the forums. Bug 244218 might be related? [07:05] Launchpad bug 244218 in consolekit "console-kit-daemon segfautls and error "Error waiting for native console" (dup-of: 269651)" [Undecided,Incomplete] https://launchpad.net/bugs/244218 [07:05] Launchpad bug 269651 in consolekit "console-kit-daemon crashed with SIGSEGV in g_str_hash()" [Undecided,Confirmed] https://launchpad.net/bugs/269651 [07:12] I'm trying to use wordpress' wp_mail function to send mail but every time my code(http://pastebin.org/56962) runs the from value of the email is my mail server's domain, but it's sent from the correct email address. I have a proper mx records setup for the domain I'm sending from, and I talked with someone on here last night, and they said the From header in my code(http://pastebin.org/56962) was correct. Any id [07:21] loves how quickly it dies here :) [07:23] yeah it makes things hard some times [07:24] ninnypants: Are you (or your code) confusing the envelope address and the From: header ? The "From " header in unix mailbox format is not the same as the From: header line... [07:24] probably this is my first server setup [07:25] I just know that that is the way that you set up the headers for php's mail function [07:25] I'm not familiar with wp_mail at all, but I've been running mail servers a long time (~15 years on Linux). If you send the mail using PHP's mail function rather than wp_mail, are the results different at all? [07:26] let my try [07:29] strangely yes not sure why because wp_mail uses php mail function but now I feel somewhat stupid for staring at it for a day and not checking that [07:30] ninnypants: So now you need to recheck the docs for wp_mail to see what it is expecting that you are not doing, basically :) [07:31] the code was coppied straight from the wp docs because the code I was using wasn't cutting it and nothing changed [07:31] if you check out the example at the bottom of the page you'll see what I mean http://codex.wordpress.org/Function_Reference/wp_mail [07:32] Assuming wordpress is open source, you could read the wp_mail code, to really see what it does differently. Maybe there is some config value somewhere that is looks at which you have not set? [07:33] Hey guys, I'm looking for a way to instantiate a login.bat script on a per-group basis at login for Windows users (the groupings are on the server, not AD OUs). I found a doc that had some way to do this, but my google-fu is failing me. Anyone have an idea how to implement this? [07:34] Oh, I'm using a Samba PDC. FYI [07:37] majuk: I've never tried it, but would doing something like logon_script = scripts\%G.bat and having one foo.bat for each primary group name work for you? [07:37] jmarsden! Hmmm... it very well might. [07:37] jmarsden: it's using the PHPMailer class so not sure what's going on really never used PHPMailer before [07:38] ninnypants: Well, can you get the desired resuly by just using the mail function instead? if so... ignore wp_mail, problem solved :) [07:38] The doc I read did something to the effect of reading the group the user was in and then copying a GROUP.bat in USER.bat so then for the [netlogon] portion of samba, you only needed /PATH/TO/LOGINSCRIPTS/%U.bat [07:38] jmarsden! ^^ [07:39] But %G might work as well. I wonder how it would react if the user were in multiple groups though [07:39] One way to find out! > [07:39] > [07:39] :D [07:39] majuk: Sounds reasonable. I've done the %U.bat thing (a long time ago), but never had to deal with that per-group... %G is the users primary group. [07:40] jmarsden! Ah, right. I forget there is a primary. I'm a relatively new admin. [07:40] majuk: man smb.conf has all the info on those %X substitutions... I did man smb.conf before writing my first response to you :) [07:41] jmarsden! There's a man for the .conf file? Doesn't that beat all. Thanks man, I'll take a look at that. [07:42] majuk: man -k is your friend [07:42] twb! ZOMG, 4 years of using Linux, never seen that before. [07:43] Awesome. Thanks guys. [07:44] No problem. BTW... 4 years and you didn't ever do man man and read what was in there? :) [07:44] LOL, no, no I hadn't. [07:44] majuk: then RUTE is your friend [07:45] But now I will! [07:46] twb! Nice, thanks for the recommendation. I'll have to peruse this sometime. [07:47] I love IRC. : [07:47] majuk: you evidently aren't too bad, since you found it without asking for the URL [07:47] twb! Well I know how to use Google. :) [07:48] Usually the conversation goes "RUTE." "RUTE?" "!RUTE" [07:48] FSVO RUTE [07:49] Hahahaha, yea, I started in Gentoo, I'm used to doing some research before I ask questions, googling a term I haven't seen before is pretty par for IRC for me at this point. [07:51] But anyway, thanks for the info. You guys, as always, are awesome. [08:58] how to know which one of eth0 and eth1 the ppp0 interface is using ? [09:03] hello === t3chi3__ is now known as t3chi3 [09:12] maxagaz: why would ppp0 be using an eth interface? are you doing some kind of tunnelling? [09:14] Ng, i' just trying to know what hardware is ppp0 using [09:21] maxagaz: I'm not aware of that question being easily answered without knowing more about the setup. ppp0 is either talking to local modem hardware or is being tunnelled over a network device, but afaik you can't tell from the ppp0 interface itself where the other end is, you'd need to inspect the pppd process that created it [09:31] If anyone is looking for policy setting examples that don't revolve around Window's silly GUIs, I just found a gold mine. [09:31] http://www.pcc-services.com/custom_poledit.html === georg is now known as kwork [11:01] hello [11:01] so i can actually add my server to the amazon cloud? so when i add a site it will be using the amazon servers also? [11:20] Vartan: It's not quite that simple. [13:01] New bug: #488190 in unixodbc (main) "unixodbc doesn't cooperate well with freedts" [Undecided,New] https://launchpad.net/bugs/488190 [13:22] erichammond: are you around? [13:44] how do i mount the raid filesystem from a live cd? [13:53] morning [13:58] afternoon chuck_ [14:00] hello === Zeboss is now known as Nexen|Zeboss === chuck_ is now known as zul [14:09] How do I use a pgsql database for authentication instead of /etc/passwd and /etc/shadow? === robbiew_ is now known as robbiew === dendro-afk is now known as dendrobates [15:47] anyone using NFS here? [15:48] yep [15:48] but not as complicated as you probably want it ivoks [15:48] well, my setup is basic [15:48] one nfs share, mounted on different ubuntu clients [15:49] users are in LDAP, so uids and gids are ok [15:49] pormap running? [15:49] portmap even [15:49] now, everything is working [15:49] it's just this problem that's been there always :) [15:49] when userA creates file, it creats it with it's umask [15:50] then userB can't change it [15:50] hello [15:50] now, i could change their umasks, but i do not want that, cause i'd like them to store files with 0660 permissions only on nfs share [15:51] New bug: #488257 in samba (main) "package samba-common 2:3.4.0-3ubuntu5.1 failed to install/upgrade: " [Undecided,New] https://launchpad.net/bugs/488257 [15:51] that's doable with samba, but nfs doesn't have something like that [15:51] :/ [15:51] which version are you using? [15:52] v3 [15:52] but i think it applies for v4 too [15:52] i could use ACLs, of course... [15:53] or, forget about NFS [15:53] how do i set up a direcotry, on unix, which will force permissions on files created in it? [15:53] for example, each file created there should be 0660 [15:53] i do know how to do that with ACL [15:54] man, we should have ACLs by default in ubuntu [15:54] in any linux distro. [15:54] unix permissions are just to simple [15:56] I would use acl [15:57] there's no other way [15:57] and we moved acl to universe [15:57] bah, we suck [16:01] why was acl moved to universe? [16:02] I thought samba was very close to requiring it, i.e., many of its features don't work without acl support [16:03] i'll fight for its comback to main [16:05] i'm tryin' to build a UEC, and i was wondering if anyone know the minimum CPU specs for CLC and CC ? [16:20] alguien habla espaƱol? [16:20] :) [16:32] New bug: #488285 in multipath-tools (main) "multipathd segfault" [Undecided,New] https://launchpad.net/bugs/488285 [16:56] Hey guys, I have a functioning Samba PDC, but when ever a Windows user logs in, I get this message flood my /var/log/daemon.log. Any idea why? Googling failed me. http://dpaste.com/125035/ [16:57] Again, everything works, so this error doesn't seem to be affecting my user in any way, I would just prefer my logs weren't stuffed with this message. [17:37] hi [17:43] ruben23! Hola. Que paso amigo con queso? [17:44] majuk:hi sorry cant understand [17:44] ruben23! That means "Hello, my friend with cheese" [17:45] Or, what's up, rather [17:45] majuk:very nice.... [17:45] majuk: are you a network admin..? [17:45] CPU INTEL P4 2.6GHz, 80 Gb HD, 512mb ram.. will this do for a server? [17:45] ruben23! EEEEEERRRRRRRGGGGGG, wrong, ask your questions and someone will help if they can. [17:46] That was my 'wrong answer' buzzer, needs work. [17:46] Adam75! Depends on what you're serving, chacho. [17:47] majuk; I don't know yet. I'm thinking webserver or smth [17:48] Adam75! Short answer: it should be fine. It's probably way over kill, in fact. [17:49] <\sh> majuk, depending on the load of the webserver... [17:49] \sh! Precisely. Hence why that was the short answer. [17:50] \sh! But if he doesn't even know what he's serving, that means he's not serving much of anything usually. [17:50] So :P [17:55] <\sh> oh well.../me hasn't the "i need a server for home" users in mind ;) [17:56] \sh! Indeed. [18:05] is there anyone around who is knowledgable in networking on ubuntu server [18:06] its getting very annoying to deal with this random disconnection that occurs when im connected to the server from the internet. [18:08] yes i am zroysch [18:08] hi [18:08] !ask [18:08] Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) [18:08] !pastebin [18:08] For posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://tinyurl.com/imagebin | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic [18:08] :)) [18:08] ok, i'll try to describe my circumstance [18:08] currently i'm at panera bread [18:08] ssh'd to ubuntu server (on home lan) [18:08] also connected to the mpd server [18:08] listening to icecast stream [18:09] it'll disconnect at random. [18:09] the ssh or the icecast? [18:09] i ssh to the centos server, also on the home lan. it remains connected indefinitely [18:09] this behavior was repeated on university's network [18:09] and another restaurant [18:10] everything disconnects at the same time [18:10] for a minute or so [18:10] on the ubuntu problem server [18:10] ok [18:10] well there are lots of fault points to trouble shoot in the area. [18:10] when i'm at home on the lan (my laptop), it stays connected to the ubuntu server the whole time [18:11] what does /var/log/syslog tell you [18:12] i dont see anything there regarding an ssh connection or any of the other connections i know are failing [18:13] <\sh> zroysch, check on your centos box /etc/ssh/sshd_config for TCPKeepAlive setting...if it's enabled, there you go on your ubuntu box...but man sshd_config tells you TCPKeepAlive is spoofable..you need to look at the ClientAliveCountMax [18:13] so chances are it is either the network card in the server (assuming that this aint a virtual server) or the router/dsl modem is losing signal [18:13] its not a virtual server [18:14] \sh that doesnt solve his icecast disconnecting [18:14] i was suspect of the server nic, but wouldnt it act the same while i was at home on the lan? [18:14] zroysch yeah, but not as touchy on a lan as it does go over internet [18:14] <\sh> bogeyd6, if the centos box is on the same network as the ubuntu box...hmm.. [18:15] my home network is setup like verizon modem -> pfsense router/firewall -> ubuntu server [18:15] yes centos is connected to the same router [18:15] i dunno, i think it has to be in that internet connection [18:15] <\sh> bogeyd6, then you would have the same disconnects on the centos box [18:17] <\sh> bogeyd6, or it's something like dhcp doing some re-requesting of ips in a faster interval [18:17] <\sh> if zroysch' server is getting it's ip via dhcp ;) [18:18] usually the dhcp server will give the same lease [18:18] <\sh> as I'm not using dhcp for my home machine, I don't have disconnects... [18:18] <\sh> bogeyd6, usally [18:19] <\sh> but I'm running on linksys with ddwrt...and have no problem with the ubuntu boxes (which I only use...no other linux here) [18:19] \sh: all servers in question are static ip'd [18:19] on the lan [18:19] zroysch can you pastebin the contents of /var/log/syslog and [18:20] let us know the url [18:20] \sh: #TCPKeepAlive yes [18:21] bogeyd6 http://pastebin.com/f5602195f [18:22] server log is surprisngly clean [18:22] it just happened again [18:23] ssh: connect to host xxx.xxx.xx.xx port 22100: Connection refused [18:23] now its prompting for a password again [18:24] hah, i got an ip trying to bruteforce a username in my auth.log [18:24] connected [18:24] uh oh [18:24] fuck him. [18:24] * bogeyd6 knows how to secure me some ssh [18:24] 121.10.141.118 [18:24] i wish my auth.log said something important regarding the ssh disconnects [18:25] chinese bastard [18:25] you can [18:25] set your logging level in sshd_config [18:25] i did [18:25] its verbose [18:26] set to debug [18:26] set [18:27] restart ssh [18:27] sudo /etc/init.d/ssh restart [18:28] disconnect and reconnect (if successful start) [18:31] auth.log is where it is logging [18:31] right [18:32] waiting for a disconnect? [18:32] always [18:32] tail -f /var/log/auth.log [18:33] i'm all anxious with anticipation this time [18:33] theres gonna be a log with all the answers [18:33] or no answer! [18:34] [365176.690020] TCP: Treason uncloaked! Peer xxx.xx.xx.xx:58985/49150 shrinks window 1453160483:1453162878. Repaired. [18:34] i get a shitload of these [18:34] imean a metric shit ton [18:36] it means its shrinking the tcp window [18:36] mostly we just wait for the disconnect and then see the errors leading up to it [18:37] Nov 25 13:31:15 userv sshd[23755]: debug1: server_input_global_request: rtype keepalive@openssh.com want_reply 1 [18:37] i guess this is my client's serverkeepalive doing its thing? [18:37] yes [18:38] bah [18:39] zroysch maybe if you stop the tail it will disconnect faster [18:40] http://pastebin.ca/1687117 [18:40] but i'm still connected [18:41] how/why is root connected? i never login as root [18:41] ruh roh :( [18:42] did you su root? [18:42] ubuntu doesnt even have a root i though [18:42] t [18:43] !root [18:43] Do not try to guess the root password, that is impossible. Instead, realise the truth... there is no root password. Then you will see that it is 'sudo' that grants you access and not the root password. Look at https://help.ubuntu.com/community/RootSudo [18:43] but watch this [18:43] !noroot [18:43] We do not support having a root password set. See !root and !wfm for more information. [18:43] :P [18:43] i never set one [18:43] so i guess there isnt one. [18:43] my login i normally use has root access, but the username is not root [18:43] <\sh> sudo -i == you smell like root ;) [18:43] when was the last time you did a "sudo apt-get update && sudo apt-get upgrade" [18:43] dunno [18:44] check it out [18:44] could be a solution to our problems [18:46] http://pastebin.com/m7dc68cb2 [18:46] that tell me anything? [18:46] yes [18:46] it says everything is ok [18:47] ivoks: everything is not ok. [18:48] bogeyd6: i have 5 days of uptime, so 5 days ago [18:49] i wasn't here from the begining, so i don't know what's your problem [18:49] but this log looks ok [18:49] if, of course, you do know who userveadmin is :) [18:51] New bug: #488373 in mysql-dfsg-5.1 (main) "mysql-server-5.1 does not include the InnoDB engine" [Undecided,New] https://launchpad.net/bugs/488373 [18:53] ivoks: yes i know him. i am him [18:53] awesome, so... what's the problem? [18:53] ivoks: the disconnects are happening at random, without my authorization. [18:53] from several locations on the internet [18:53] zroysch who is smmsp [18:53] i dont know [18:54] zroysch: disconnects? [18:54] 24 packages can be updated. [18:54] 10 updates are security updates. [18:54] i guess i'll do it [18:54] sendmail user [18:54] zroysch plz do [18:54] your ssh connection drops? [18:57] zroysch has it disconnected yet [18:57] bogeyd6 yes several times [18:57] i posted the pastebin from the tail on the one [18:58] the last pastebin proved nothing of a disconnect [18:58] huh [18:58] are you running nscd? [18:58] just showed closed as if you closed it [18:59] i didnt close it [18:59] bogeyd6: which pastebin is that? [18:59] http://pastebin.com/m7dc68cb2 [18:59] this one, i guess [19:00] nope, it's this one [19:00] http://pastebin.ca/1687117 [19:00] Is the following idea for passwordless ssh an acceptable way to control many standalone clients from a server? [19:00] 1) Create ssh keys for the root user on the server: sudo ssh-keygen [19:00] 2) Edit /etc/ssh/sshd_config on the clients, and specify: AuthorizedKeysFile /etc/ssh/authorized_keys [19:00] 3) Copy the public key of the server root user to the clients' /etc/ssh/authorized_keys [19:00] This way anyone with sudo privileges on the server could do: sudo ssh user@client and automatically logon there. [19:00] Any tactical problems with this approach? [19:00] anyway, neither of those show closed connection [19:01] zroysch: let's start from the beginning [19:02] zroysch: what is the problem? you randomly get disconnected from ssh? [19:02] That's to be used in a small classroom, with the teacher sitting on the server and controlling/administering the clients where the students sit. [19:02] ivoks only when crossing on his internet connection [19:02] zroysch: does it show 'disconnected' or the connection just times out [19:02] do you actually get disconnected or it looks like connection 'crashed'? [19:02] ivoks: when connecting from the internet (tried 3 different locations), my connections get dropped at random (ssh, mpd, icecast) [19:03] describe 'dropped' [19:03] do you get disconnect or it just stalls [19:03] this ubuntu server is on my home lan. the same home lan that the centos server is on where my ssh remains connected [19:03] for example, with ssh [19:03] it disconnects, and i am given the prompt for my local machine again [19:03] do you get returned to your client prompt or terminal 'freezes' [19:03] ok [19:04] what kind of connection do you have from your home to your ISP? [19:04] its verizion fios.. [19:04] fiber to the house [19:05] a box outside that comes inside with coax to the verizon modem [19:05] i know what it is [19:05] then why did you ask [19:05] i asked what do you how, and i know what fios is [19:06] how? :) [19:06] have [19:06] yea, it was a weird way to ask i guess, so i was overly descriptive, as i thought its what you wanted [19:06] also, i believe not everyone gets fiber right up to their house [19:06] hm... [19:06] ok i just got a new kernel with the update [19:07] not sure if this is going to do anything but i'll reboot and see [19:08] zroysch: when it boots up, i'd like you to paste output from 'grep sshd /var/log/auth.log' [19:08] from one session [19:09] awesome zroysch [19:09] im not sure what you mean by one session [19:09] login to ssh and then repost auth.log [19:09] ssh into the server and wait until it drops connection [19:09] ok [19:10] rebooting [19:10] i gotta eat now [19:10] brb [19:10] heh [19:10] sshd doesn't disconnects him [19:10] i'm puzzeld by the fact that he gets his terminal back [19:11] otherwise, i'd bet on MTU [19:12] ivoks he claims on local lan its no issue [19:12] therefor MTU or some kind of firewall on modem [19:14] <\sh> ivoks, how does it fit with the centos box not disconnecting? ;) [19:14] different mtu [19:14] maximum transition unit? [19:14] but on fiber, mtu of 1500 should be ok [19:14] <\sh> hmm...nic mtu should be always 1500, or? [19:15] <\sh> (ethernet to be more precise) [19:15] not always... [19:15] \sh: GigE supports jumbo frames [19:15] sometimes with cisco vpn you can get problems if your mtu is 1500 [19:16] <\sh> jbernard, yes...but your home dsl / cable modem won't have GigE ;) [19:16] \sh: this isn't dsl [19:16] it's fiber [19:16] zroysch: yes... could you try something? [19:16] at your service [19:17] zroysch: eth0 is the name of the interface? [19:17] im not convinced its the server [19:17] yes [19:17] im betting it has to be in the verizon modem signal or the firewall [19:18] zroysch: run 'sudo ifconfig eth0 mtu 1412' [19:18] let's give it some space :) [19:18] wat [19:18] dont do that [19:19] zroysch: on server, of course [19:19] yes [19:19] it was 1500 [19:20] New bug: #248142 in backuppc (main) ""RsyncdUserName" missing from "CgiUserConfigEdit" in Meta.pm" [Low,Invalid] https://launchpad.net/bugs/248142 [19:20] i know [19:20] now observe if behaviour changed [19:22] centos server's mtu also 1500 [19:22] i belive it is... [19:22] i'm telling you it is [19:22] so, does connection drop? [19:22] rotfl [19:22] will have to give it a minute [19:22] zroysch: by default, it's 1500 always [19:23] oh [19:23] Verizon FiOS expects an MTU setting of 1492. [19:23] there we go... [19:24] true, modem should do that, but it's verzion... expect unexpected :) [19:24] yea like a blown up gasline [19:24] ADSL also works on 1492 [19:24] but clients on LAN shouldn't have 1492, only the gateway [19:25] i've seen couple of modems that don't clam mtu [19:25] so i should set the pfsense router to 1492 [19:25] er... you have your own gateway? [19:25] Hi! Desperately need help! My samba share, created with webmin cant be mounted... it just says "Cannot mount Window-share" [19:25] ivoks: well its a gateway for my lan [19:26] its the only computer connected to the vz modem [19:26] zroysch: it should have 1492 only on the modem side, on the eth side it should be 1500 [19:26] zroysch: the thing is that modem needs to do claming [19:27] * \sh loves his linksys and /me loves cable ;) [19:27] zroysch: so, does connection drops? [19:27] ivoks: not yet [19:27] that's 7 minutes [19:28] did it last that long before? [19:28] NorthByNorthWest we dont support webmin here [19:28] its seemingly random [19:28] zroysch: it's not random, it depends on amount of data [19:28] zroysch: so, if you just log in, it won't drop that fast; but if you do just 'ps ax' it could drop in a second [19:29] ivoks: whenever i'm doing something in the terminal it seems to stay connected [19:29] its only when i go back to it after doing something else i find it disconnected [19:29] hm, interesting [19:30] <\sh> tcpkeepalive not set (first shot, and it's evil) and ClientAliveCountMax + ClientAliveInterval not set (which is a better alternative for SSHD) so modem (fw) drops connection when inactive (sometimes a standard doing of FWs) [19:31] bogeyd6: Ok... screw webmin.... what if I pastebin the entry in the smb.conf? [19:31] NorthByNorthWest: go ahead [19:31] <\sh> webmin still alive? oh wow [19:32] ivoks: http://pastebin.se/199725 this is just the share... need more? [19:32] right, if it disconnects on inactivity, then mtu might not help [19:33] hmm... path missing? [19:33] lol [19:33] ivoks: lol @ me? ;) [19:33] yes [19:34] hehe... sometimes the solution becomes clear when describing it to someone else... [19:34] yes, that's very common [19:34] zroysch: so, still working? [19:35] but Im a total samba noob... im just reading the other default shares in the file and making conclusions... [19:35] ivoks: so far so good [19:35] ivoks: argh.... still cant mount [19:35] zroysch: that's 15 minutes now [19:35] NorthByNorthWest: did you restart samba when you added the path? [19:35] ivoks: yes [19:35] NorthByNorthWest: /var/log/samba/log.smbd might help [19:37] ivoks: http://pastebin.se/199726 doesnt tell me much... [19:37] New bug: #300965 in backuppc (main) "updatedb.mlocate crashes the machine, when the backupcc-pool becomes huge" [Wishlist,New] https://launchpad.net/bugs/300965 [19:37] zroysch: if it works out, see if you can set mtu to 1492 on your gateway, but only on the modem connection [19:38] ivoks: ok [19:38] NorthByNorthWest: do other share have spaces in name? [19:38] not sure still why the centos machine would be ok with the 1500 though? [19:38] shares [19:39] ivoks: *ahem* nooo... :-[ [19:39] zroysch: bad network configuration produces very strange behaviours [19:39] ivoks: are underscores ok? [19:39] NorthByNorthWest: spaces are ok, iirc, but for testing remove them [19:40] ivoks: yep... just removed spaces to begin with! [19:40] ivoks: *gnarl* still not working... *chewing on my fist* [19:40] NorthByNorthWest: other shares work, and have same configuration? [19:41] ivoks: should I pastebin the complete smb.conf? [19:41] NorthByNorthWest: sure [19:42] ivoks: want me to merge rhcs for you? [19:42] you can pm it to me [19:42] zul: from debian? no, i'll do it [19:43] ivoks:okie dokie [19:43] i have to add a patch 'exit 0' at the init script :) [19:43] right bellow #!/bin/sh [19:48] NorthByNorthWest: ? [19:48] ivoks: its coming... doing copy-paste from a ssh terminal... [19:49] :) [19:49] ivoks, I think there's a way to make users save files in a specific directory and keep those files with the permissions of that folder... I just don't remember how to do it :P [19:49] there is. acl [19:51] ivoks, I think you can do that by not using acls, but just keeping permissions of file and folders. I remember I did that so long ago :) [19:51] ivoks: finally... http://pastebin.se/ [19:51] argh [19:51] RoAkSoAx: you can use setgid to keep group === crohakon is now known as crohakon|afk [19:52] hey WTF??? [19:52] RoAkSoAx: but that doesn't stop user of saving with permission she wants [19:52] I pressed "Send" and it just killed all my input!!!! [19:52] *ROOOAAARRRRR* [19:52] hit back [19:52] *hulk is angry* *hulk smash* [19:53] ivoks, what about setting umask? [19:54] of course, but that then applies for all dirs [19:54] files [19:55] oh ok :) [19:58] Ivoks [19:58] Read from remote host xxx.x.xx.xx: Connection reset by peer [19:58] Connection to xxx.xxx.xxx.x closed. [19:59] that's firewall cuting connection [19:59] so firewall needs mtu 1492 you say [20:00] on modem side [20:01] maybe there are too many connections for it? [20:03] what do you mean [20:06] ivoks: well... mounted my local computers shared folder from the server instead... solved my problems for now... thanks for your help anyway! :) [20:06] * ivoks busy === luis__lopez is now known as luis_lopez [20:35] ahasenack: hi - were you able to test bind9 with the ldap dlz in karmic? [20:35] mathiaz: no, I couldn't come up with the queries it needed for the sdb schema [20:36] mathiaz: and the package needs a patch [20:36] (bind) [20:36] ahasenack: hm - isn't dlz and sdb two different things? [20:36] mathiaz: yes, and my config was for the sdb one [20:37] mathiaz: which is what the bind package in mandriva supported back then [20:37] mathiaz: dlz works with customizing queries [20:37] mathiaz: so it's possible to write a config for it to use the sdb schema [20:37] mathiaz: in theory, that is [20:37] ahasenack: ok - bind9 is built with the ldap dlz plugin [20:38] mathiaz: right, so these were my two difficulties: trying to make it work with sdb schema and the patch to make it work with current libldap [20:38] ahasenack: oh - so ldap dlz needs a patch to work [20:38] mathiaz: let me find the lp bug for it... [20:38] ahasenack: and ldap sdb needs to have the schema sorted out [20:40] mathiaz: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/227344 [20:40] Launchpad bug 227344 in bind9 "bind-dlz and ldap api: invalid use of "%" character" [Undecided,Confirmed] [20:41] ahasenack: great - thanks [20:41] mathiaz: regarding the sdb schema, it was just an attempt from me to not have to change the schema from sdb to dlz, so I thought I would give it a try and see if I could make the dlz config read the sdb schema [20:42] mathiaz: but I got a headache while trying to understand how dlz does its thing :) [20:42] ahasenack: right. [20:42] mathiaz: specially when I saw that it relies on ordering of results or something like that [20:42] ahasenack: IIUC the different between sdb and dlz is that dlz can do local caching while sdb does not? [20:43] mathiaz: maybe, I vaguely remember something about that [20:43] mathiaz: and dlz is supposedly included upstream, [20:43] mathiaz: but in a contrib/ directory still [20:43] ahasenack: right - sdb is also in the package [20:43] ahasenack: I think I'll go with sdb+local slapd replica [20:44] mathiaz: what do you mean sdb is in the package? We have a bind package patched with sdb? [20:44] I mean, sdb+ldap [20:44] ahasenack: hm - I think so: contrib/sdb/ldap [20:45] interesting, maybe it just needs to be enabled at build time or something? [20:46] ahasenack: yeah - may be. [20:52] erichammond: fyi, I was trying to rebundle your dapper amis today [20:52] erichammond: got bitten by the tar bug regarding sparse files [20:52] erichammond: dapper has tar 1.15.1, which is the exact borderline version for this bug === Ng__ is now known as Ng [20:53] erichammond: I then downloaded latest tar from upstream, built it on a dapper machine and copied the resulting binary over to the running instance, adjusted PATH, and only then did the rebundling work [20:59] I've got a load of log files in my /var/log directory, would it been safe to delete the oldest compressed .gz file? [21:01] hi ubuntu server community, i got a question [21:02] !ask | davidnetherlands [21:02] davidnetherlands: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) [21:02] what are the recommended minimum hardware specs for a ubuntu 9.10 server (in terms of mhz or ghz, i know about RAM) [21:02] Flare183: As long as you don't need them. [21:03] ScottK: Alright, just checking [21:04] and my second question.. where can i find some info on installing a ubuntu server on a computer with 2 hard disks.. say i want one small hd for the system and one big hd for the content (/var/www) [21:06] i'm running 804 on a pentium III 500 [21:06] 512 MB Ram [21:06] davidnetherlands: All you have to do for the second question, is partition it correctly [21:06] yeah ok italian plumber.. i'm close to that one.. p3 600mhz 512mb [21:06] so it should work [21:07] I don't see why not. I'd install hardy though, it's supported until 2013. [21:07] unless there's some awesome feature on karmic that you just have to have. [21:07] the big question is what are you oging to do with the server? [21:07] flare183.. but during the installation i'm getting the partition screen.. and only later on (after this screen) i get to install a lamp server [21:07] so how do i go about that? [21:08] Italian_Plumber, i'm just experimenting arround with a nas.. a lamp server, maybe some ruby on rails [21:09] yeah your hardware should do just fine [21:09] I also have two hard disks [21:09] thank you Italian_Plumber! [21:09] I installed hardy on the first one, not connecting the second one. [21:09] ok [21:09] and then? [21:09] afterwards, I connected the second one, mounted it in /media/data , and I was done. [21:09] but what do you use your 2nd hd for? [21:09] extra storage [21:10] davidnetherlands: all you have to do is setup the partition stuff right, and then sudo apt-get install the rest of the stuff [21:10] I use it as a torrent box, nas, internal DNS, and SVN server [21:10] okay.. nice.. [21:11] how can I download a 'magnet' link from the ubuntu commandline? [21:11] Flare183, how exactly? that is my next question.. where can i read something about 2 hard disks in a server setup? [21:12] what's a magnet link? [21:12] Ok, am I the only one that uses a server with a GUI? [21:12] Because I have to use my server as my desktop [21:12] you can install server softwares on ubuntu desktop [21:12] a server with a GUI is a desktop [21:13] a Desktop without a GUI is a server [21:13] Yeah that's what I'm doing [21:13] so yeah [21:13] yeah okay.. i know about that [21:13] But it seems like I"m the only one that does that [21:13] I used to do that here at work. [21:13] My desktop also a server [21:13] haha, being unique is not always a bad thing [21:13] Ahh ok [21:13] Sweet [21:14] i often have openssh-server on my desktop, i guess i'm unique too :p [21:14] lenios_: Same here [21:14] sometimes the lines are blurred. [21:14] kernel is not exactly the same on server edition and desktop edition [21:15] we have a server here at work with a GUI on it that really doesn't need one -- but the moron (my boss) that set it up didn't know that. [21:15] but it shouldn't make any noticeable difference [21:15] does a minimal installation of ubuntu server fit on 512Mb HDD? [21:15] dragon: no [21:15] DragonLord: Tried it, no way [21:15] dragon: ... er well... that's a guess anyway. [21:15] thanks guys, i'm gonna try it! [21:15] bye [21:16] Italian_Plumber, Flare183 ok [21:16] I wouldn't build any computer today without a 30-40GB hard drive. [21:16] Italian_Plumber: I agree with that [21:16] DragonLord: Np [21:16] I don't think you can buy a HD smaller than 80GB anymore. [21:16] requirements for server editions are 128mB of ram and 1GB of hdd [21:16] I got a thin client I want to use like a Mumble server and it has 512Mb "HDD" in it :) [21:17] yeah now that lenois says that, I am reminded that you need at least 128MB to run MySQL. [21:17] haha I've got an old HP vetrca in here right next to me that I wish I could use as a server [21:17] vectra* [21:17] Its like dead ancient [21:18] i have server edition on a 4G eeepc === erichammond1 is now known as erichammond [21:21] ahasenack: So you're saying that you have to use a non-dapper tar to bundle a dapper instance on EC2. [21:21] usage is 23.1% of 3.19GB, for those wondering [21:21] hm, gone. [21:24] lenois: that's a base install of karmic server? [21:25] with ssh server [21:26] oh... well ssh server .. .that's, what, 1MB? [21:27] well, remove 1MB from 710MB then [21:44] yeah I tried running a LAMP server with 64MB of RAM... didn't happen. [21:44] it was a VM [21:44] Italian_Plumber: I've done it with lower Memory [21:44] 32MB' [21:45] really? see I figured it wasn't happening 'cause MySQL says it needs 128MB [21:45] I've got an old dell, that I put Arch Linux onto it and I had to put A LOT of swap on it. [21:45] Like I had to start using flash drives for swap haha [21:45] oh. I'm talking hardy [21:45] Ahh ok [21:45] with conventional RAM [21:46] ahh ok [21:47] yeah my regular setup is with 576 MB of RAM... it's an old PC that someone said was "too slow"... but it runs hardy just fine. [21:47] I just got the thing and installed hardy right over it. [21:48] ... and boom! instant server. [21:48] just add water [21:48] and watch it grow [21:48] xD [21:51] now all I need are some big IDE drives [21:51] 'cause it has no SATA controller in it [21:51] or a PCI SATA controller [21:51] cheap, I know. [21:51] MAN it's quiet at the office today === crohakon|afk is now known as crohakon [22:25] I wouldn't build any computer today without a 30-40GB hard drive. [22:25] my file server uses a 4GB drive for the system [22:25] and a separate raid for storage [22:27] if it's only for the system, it might be better to waste 3-4GB to have a system up and running in case of hardware failure [23:20] lenios_, incidentally, several my storage drives failed on the same day, and I lost the RAID, while the 4GB root drive is still going strong [23:20] just can't kill those old quantum fireballs [23:21] bought new storage drives and built a second array, never even touched the root drive [23:25] ScottK: this spamassasin header thing is getting even weirder. Sometimes it doesnt show and sometimes it does. And i havent changed the config in the meantime [23:31] hi anyone can suggest, how to rescue forgotten username and password on an ubuntu-server.. [23:37] ruben23: do you have physical access to it? [23:38] yes [23:39] then reboot into a live environment (if it can take the downtime), mount your / and chroot to it and run "passwd " [23:44] <\sh> ruben23, or just change your kernel boot line on grub: init=/bin/bash ... no password prompt..or boot the rescue system from ubuntu which is also on grub [23:45] ok copy [23:45] thanks === robbiew is now known as robbiew_