=== jono is now known as jono2 === zoopster1 is now known as zoopster [00:23] hi folks, i'm using jaunty and it's giving broken packages error when installing freeradius-mysql. any ideas? === jono2 is now known as jono [00:56] hola [00:56] tu si hablas español no? xD [00:57] !es > sudit0 [01:54] Hi guys. Trying to install msttcorefonts in 9.04 and getting a message saying its been obsoleted, tried ttf-mscorefonts-installer as well with the same result. Any ideas? [02:02] have you tried ttf-liberation? === erichammond1 is now known as erichammond [02:04] No I havn't. Will they all have the same names? I need them for the JPgraph PHP class [02:05] How would I go about setting up jabber gateway servers that would work with Google talk as the client? [02:06] I've got a few general ideas but I don't want to invest a lot of time in them only to find out I'm doing it wrong. [02:18] hello to all. i have a full working bind9 dns server in my lan and want now to log all the querys for debuging some network stuff. [02:18] i have included this lines [02:18] http://paste-bin.com/view/d60fac37 [02:18] to /etc/bind/named.conf.local and executed also [02:18] sudo touch /var/log/query.log [02:18] sudo chown bind /var/log/query.log [02:18] sudo /etc/init.d/bind9 restart [02:18] my problem is that after this steps the file /var/log/query.log is still empty even when i call up some domains that my bind dns server only can resolves ! what could be wrong with the steps is some caching active or what else ? [02:29] okay it looks like app-armor needed to be informed about this too ! [02:29] https://help.ubuntu.com/8.04/serverguide/C/dns-troubleshooting.html [02:29] Before named daemon can write to the new log file the AppArmor profile must be updated. [02:31] strange thing is that i dont have still named query-logs in my log file ! [02:31] are the permission of my new logfile really good ? [02:31] -rw-r--r-- 1 bind root 0 2009-12-13 03:06 query.log [02:32] oohhh woow it worls now :-)) [02:33] thanks for the help still :-)) see you next time again ! bye ! [03:05] hi all.. could you tell me how do controlling services by console. is there an application like gnome has ? [03:06] lingga: you mean like top? [03:07] no, I want to disable or enable the services.. [03:09] I should know the name off the top of my head... [03:10] update-rc.d [03:13] lingga: I wish it could just list the current settings - there's another great app but I can't think of it's name now [03:13] MTecknology: for example, I need to disable mysql service what should I do [03:15] update-rc.d mysql stop 2 3 4 5 [03:17] MTecknology: ha, thanks. but is there an application to control it like yast in suse ? [03:18] 21:12 < MTecknology> lingga: I wish it could just list the current settings - there's another great app but I can't think of it's name now [03:19] MTecknology: did you meant update-rc.d mysql enable 2 3 4 5 ? [03:20] I meant disable [03:20] 21:13 < lingga> MTecknology: for example, I need to disable mysql service what should I do [03:21] MTecknology: Ok thanks a lot :) [03:24] I recommend rcconf as a simple GUI wrapper for update-rc.d [03:26] twb: THAT! That's what I couldn't think of :) [03:27] Although it occurs to me now that I hadn't noticed update-rc.d STOP -- I had been using REMOVE, and then digging through the relevant .postinsts when I wanted to turn it back on... [03:29] !info sysv-rc-conf [03:29] sysv-rc-conf (source: sysv-rc-conf): SysV init runlevel configuration tool for the terminal. In component universe, is optional. Version 0.99-6 (karmic), package size 23 kB, installed size 104 kB [03:29] Yeah, I don't like sysv-rc-conf [03:29] !info rc-conf [03:29] Package rc-conf does not exist in karmic [03:30] !info rcconf [03:30] rcconf (source: rcconf): Debian Runlevel configuration tool. In component universe, is optional. Version 2.2 (karmic), package size 22 kB, installed size 132 kB [03:30] oh... [03:30] Mainly because it provides runlevels as individual checkboxes, and is laid out to generally be overwhelming [03:31] rcconf also used to suppress rcS services (a bug), which I considered to be a huge feature. [03:31] nicex [03:31] Since you usually want to disable, say, apache -- not mountall [03:31] looking at pics - I do like it better [03:47] So, is it possible to limit a user to only certain directories? [03:50] crohakon: depends on what you're limiting. [03:51] for example, could I limit a user to their directory and, say, /srv/www/whatever/ ? [03:52] hi folks, some help for the freeradius-mysql installation in Jaunty [03:52] ? === jfluhmann_ is now known as jfluhmann [03:54] crohakon: how is that "their directory"? [03:54] crohakon: how is the user using the system? For example, are they simply putting and getting files over SFTP? Do they have a shell account? [03:56] twb, I was considering giving a friend a shell account to my little server in my basement for her to play around on. But I would rather she did not have access to anything to important. [03:56] Unless you give her ssh access, she won't be able to break anything but her own stuff. [03:56] She will be able to *read* files outside her home directory. [03:57] She will also, by default, be able to do things like forkbombing. Restricting filesystem access won't help you there. [04:01] I just installed 9.10 server, this is my first server. 9.10 desktop comes with an operating system with guis and such. However, I just booted up the server and all I get is a command prompt. Is that how it is supposed to be? [04:02] fbdystang: the server install media will not install any GUI by default. [04:03] twb: How do I tell if it is working then? thanks [04:03] fbdystang: define `working'. [04:03] twb: running, and giving me some fileserver space for other ubuntu and windows boxes [04:04] It's obviously running, because you can see stuff on the screen. [04:04] As to whether it is serving files, you can check this by attempting to connect to it from a client, and if that doesn't work, by testing lower-level things, like whether the service has an active process and is binding to the appropriate ports. [04:04] This really is new to me, how can I find it from other ubuntu desktops then? it is all on a router [04:05] does ubuntu desktop come with such a client? [04:05] You presumably know what IP it has. [04:06] fbdystang: If all you're looking for is file sharing I'd recommend a specialized distro. [04:06] sudo apt-get install gnome.... *innocent expression* [04:06] If you control the router, you can configure the router to give it a static IP and a name. [04:06] NOPE :( but i can check from logging into my router [04:06] crohakon: ITYM "ubuntu-desktop". [04:06] fbdystang: you can also check the IP from the ubuntu server console, of course. [04:07] twb: what is that command for IP? [04:07] "ip address" [04:07] fbdystang, https://help.ubuntu.com/9.10/serverguide/C/index.html [04:07] _{ip addr
[04:08] thankx
[04:10] OK there are a bunch of IP addresses with that, is INET the one I am looking for?
[04:11] fbdystang: Yes. The inet one for interface eth0
[04:12] rashed2020: that is all I am looking for, I thought 9.01 ubuntu server was a specialized distro, what do recommend then?
[04:13] fbdystang, ubuntu server is a specialized distro, for general server needs (exempli gratia, LAMP)
[04:13] fbdystang: If this is just serving a few files on a local LAN for a few workstations, and you are already familiar with Ubuntu 9.10 desktop, then you could just use that.
[04:14] fbdystang: Take a look at FreeNAS. Not as expandable as Ubuntu Server, but much simpler if it's just file sharing.
[04:15] I tried that with samba to no avail :( I have an old desktop that I am making into a simple fileserver for both windows and linux computers at home
[04:15] Can windows access NFS?
[04:15] I couldn't get it to access ntfs
[04:16] I did not say ntfs =)
[04:16] Windows can access NFS, there's an official MS how to.
[04:16] http://support.microsoft.com/kb/324055
[04:17] That means a repartition then right?
[04:17] If it's just a local thing though, I'd stick with Samba.
[04:17] No.
[04:17] fbdystang, I was going to suggest using NFS (id est Network File System) but was not sure if windows can access it
[04:17] And for Samba you can just use Ubuntu 9.10.
[04:17] fbdystang: Have you tried following a tutorial?
[04:18] rashed2020: haha, many, but it is always tuff understanding terminology, especially in networking
[04:20] https://help.ubuntu.com/9.04/serverguide/C/samba-fileserver.html
[04:20] Just follow that exactly. It should get you up and running.
[04:20] fbdystang: Why not start by enabling samba on one of the existing "Linux computers at home" and share a few directories that way, on a computer you already know and understand. Then come back later and create a dedicated server when you have more confidence and understanding of setting up samba.
[04:22] Good idea, rashed: i actually just found that page. I will install gnome and create some shared directories as you have advised ;)
[04:22] Thanks all
[04:22] jmarsden, when I set up my first lamp server I had no idea what I was doing. Jumping right in and getting dirty really helped me learn quickly. Also, since the box was not needed for anything else it was okay if I made mistakes. I could just reinstall.
[04:23] fbdystang, that being said, I say set up your dedicated server and learn as much as you can doing it.
[04:23] yea, thats where I am at, most important is learning to set it up
[04:24] fbdystang: Then read the Ubuntu Server Guide and try it out.
[04:25] Learning to set up samba is the same on an existing Linux box with a GUI as on a dedicated server box with shell access only... but which way you learn is up to you.
[04:26] I try to never use the GUI
[04:26] So if worst comes to worst I have a general idea of what to do.
[04:31] Well... I just ran into that. How can I edit these files without gnome? is there a terminal command to open smb.conf?
[04:34] _{there are several text editors you can use
[04:34] _{nano is probably one of the easiest to use, although i personally use vim
=== freeflyi1g is now known as freeflying
[04:35] anyone know how to have the beep ring the system (aka motherboard) bell?
[04:35] sub: that worked after installing it, thanks
[04:42] terinjokes: sudo modprobe snd-pcsp # Or something close to that... you need the driver for the PC Speaker, basically.
[04:43] jmarsden: i'm still getting o terminal bell, not a system bell
[04:44] fbdystang, I highly suggest that you do not install gnome on your server. Stick to the command line. It will really improve your understand of the OS.
[04:45] terinjokes: Hmmm. Most people ask this question the other way around... they want to get rid of the PC speaker beep :)
[04:46] crohakon: Yea, that is what I am doing. But I may chime in every once in a while to get command line help :(
[04:46] dir
[04:46] jmarsden: i know ;) the problem is that if my workstation is off, or i'm not ssh'd into the box, i'm going to be missung critical system beeps, no?
[04:46] fbdystang, dir?
[04:46] haha wrong computer, hahaha
[04:46] I have two computers with 2 keyboards in front of me :)
[04:46] fbdystang, are you a dos user? ;)
[04:47] yup
[04:47] fbdystang: an you're either using DOS/NT or on an FTP on one of them ;)
[04:47] fbdystang, I prefer the ls command just because of the highlighting
[04:48] terinjokes: actually, most dos commands are also available in unix/linux
[04:48] terinjokes: critical system beeps? When would you expect those? People put servers in machine rooms and do not then employ staff to sit around all day listening for "critical system beeps" ... so it's probably OK to leave your own Ubuntu server without hearing it beep, too?
[04:49] If you want to monitor it, set it up to send you email or SMS messages or whatever, rather than staying within earshot of it 24x7.
[04:49] jmarsden: this particular box runs here at my desk... but yes, generally it would go to the pagers
[04:50] jmarsden: and by "critical system beeps" i mean various notifications i have
[04:52] Loading that module should make that device visible... or it used to... trying it now on a Karmic desktop...
[04:52] wow, ls is even in color now ;)
[04:55] fbdystang, yes, now change all the files to random permission and look at the beautiful art!
[04:57] terinjokes: OK, on my PC here after modprobe snd-pcsp I have a new device /dev/dsp2 which is the PC speaker, so at that point catting junk to it produces audio from it... how to actually make it beep is left as an "excericse to the reader" :)
[05:02] jmarsden: no luck
[05:02] let me reboot and try again
=== twb` is now known as twb
[05:04] OK, I think I have a samba share set up. How do I access it from windows? through workgroup? or can I just us IP in internet explorer?
[05:09] jmarsden: no luck
[05:09] (in other news, that's how online games should handle the should disappearance of the gateway)
[05:10] fbdystang: From DOS you can do net use Q: \\1.2.3.4\sharename stuff. From Windows Explorer you can click Tools -> Map Network Drive.
[05:16] while i'm in this channel, anyone know why the fink package depends on gstreamer, which seems to pull in half of X?
[05:18] terinjokes, did you try --no-install-recommends?
[05:19] qman`: it's depends, not recommended
[05:19] ah
[05:19] qman`: which makes no since, to pull half of X for a console application
[05:20] finch*
[05:21] hmm
[05:21] I just checked on a hardy server, it only recommends gstreamer
[05:21] not depends
[05:21] might be a bug with the newer package
[05:21] right... for hardy
[05:23] although, i just checked online, and it's recommending gstreamer-plugins, but still depending gstreamer
[05:23] (for hardy)
[05:23] also only recommended in jaunty
[05:24] well, it depends on libgstreamer, but that shouldn't also pull in X packages
[05:24] qman`: correct, i think i subconsciencely (i can't spell, don't worry) i droppe the "lib"
[05:25] but it would pull in a lot of stuff if you are installing recommends, which is the default
[05:27] i'm on karmic, which depends (diff from juanty) libdbus, libdbus-glib, libgstfarsight, libgstreamer-plugins-base, libidn11
[05:28] might have a protocol in there or something
[05:29] can't see any other reason a text-based client would use anything gstreamer
[05:29] It Works!! Thanks for your help guys, Anyone know if I can also see these on a MAC? if so, do I just have to map it?
[05:34] qman`: well it's pulling in support of every a/v codec in the world it seems... think a maintainer is using a GUI and not realizing what's happening (perhaps?)
[05:35] i don't think a simple text-based client should be 109MB
[05:38] terinjokes, it shouldn't be doing that if you're not installing recommends
[05:38] qman`: did ---no-install-recommends
[05:38] (except 2 dashes ;) )
[05:38] in that case, I'd file a bug
[05:39] because it certainly doesn't depend on all that nonsense in previous editions
[05:39] it DOES depend on a lot of libraries, but not codecs
[05:41] qman`: http://pastebin.ca/1712912
[05:42] i realize all those aren't a/v codecs, but still
[05:43] that's far too much
[05:43] if I had to guess, I'd say gconf is pulling most of that in
[05:44] the gtk and X stuff, anyway
[05:44] it's also depending on some sound codecs, likely the work of gstreamer, unless it has voice chat or something
[05:45] and video
[05:45] (i see libv4l in there)
[05:45] another possibility is that keyring package
[05:46] if they implemented that functionality, and the keyring package depends on gtk, that would cause a big mess
[05:46] qman`: it i gtk, wouldn't I just use pidgin?
[05:46] if i had*
[05:47] well
[05:47] that's just libraries
[05:47] it's not actually installing X, just a lot of libraries generally used in gtk and X applications
[05:47] and some fonts
[05:48] I agree though, that's way too heavy for a console-based application
[05:48] qman`: i know that, i recognize most of these from by brief stint as a fink maintainer... but still, i don't want to install a bunch of unneccesary libraries
[05:48] but that's either a design choice or packaging error
[05:48] exactly, creating a launchpad account now
[05:50] I gave up on instant messaging networks a long time ago, IRC does it better :)
[05:51] qman`: it's fine and dandy it the other people use IRC ;)
[05:59] Launchpad #395001
[05:59] Launchpad bug 395001 in pidgin "apt-get install of finch requires X11 (deps wrong)" [Undecided,New] https://launchpad.net/bugs/395001
[06:09] hi
[06:11] other then the howtoforge guides whats a good guide to follow for configuring a complete working web server ?
[06:17] lwizardl: the ubuntu serve admin guide?
[06:17] *server
[06:17] http://tinyurl.com/ubuntuserverdoc
[06:19] not sure what exactly you're after, since a "complete working web server" is provided by checking that little box next to LAMP in the installer
[06:21] qman`, yeah I know it does but I seem to fail at being able to get any working sites on the server. example domain.tld when i have my registar pointing to my server they just time out
[06:22] do you mean that you have a DNS service pointing names to your IP, or you have your registrar pointing to you for DNS?
[06:22] because in the latter case you need a DNS server
[06:24] no i use zoneedit for the dns servers but then i have zoneedit pointing to my ip and then i have port 80 forwarded to the server.
[06:24] so when you run a dig on your domain, it points to the right IP?
[06:25] yeah
[06:25] in that case, the problem is most likely to do with the apache site configurations
[06:26] if you're getting any errors, troubleshoot those, otherwise pastebin one of your site configurations and I'll have a look
[06:26] qman`: or his DNAT rule
[06:26] yeah, that too
[06:26] are you sure the port forward works?
[06:27] You have to test the port forward from OUTSIDE your local network
[06:27] e.g. ssh into alioth and run a w3m there
[06:27] i followed the guide on the howtoforge site for 9.04
[06:27] guides can be wrong, you need to test it
[06:28] i'll try it again and if it fails this time then i'll post the configs
[06:28] IME guides are almost always wrong
[06:28] also, you should always look at ubuntu-specific documentation first
[06:29] a lot of things are different distro to distro
[06:29] and if you don't notice it can really mess you up
[06:29] You should start with Ubuntu's OWN documentation for the release you're running.
[06:29] k
[06:30] One guy here was configuring openldap (on 8.04) based on what he found on some blog for 6.06 or something
[06:30] Which is obviously going to have differences
[06:30] yeah, a lot can change over two years
[06:30] Hi, i'm trying to setup samba, but when I try to connect from my windows 7 computer, it seems like even though as my username I enter 'hajuu' it tries to use 'MICHAEL1\hajuu' as my username. Which is wrong obviously.
[06:30] Quite apart from the unreliability of "stuff I found on a blog"
[06:30] Hajuu: MICHAEL1 is your domain
[06:31] Thats my windows pc's name
[06:31] which obviously has no relevance to my samba username on my other computer :(
[06:31] Hajuu, that shouldn't make a difference in a workgroup configuration
[06:31] unless you're actually in a domain setup, the domain field is generally ignored
[06:31] do I need to define my samba password for my user or something maybe?
[06:31] qman`: I think it depends on how he's doing samba auth
[06:32] I've always had to do that
[06:32] at least for any users that existed before configuring samba
[06:32] smbpasswd -a
[06:32] thanks ill try, sec.
[06:34] hmm
[06:34] I *think* im connected
[06:34] how do I make a share?
[06:35] Hajuu, /etc/samba/smb.conf
[06:35] though the magic homes share should be enabled by default IIRC
[06:35] yeah I had a look through heh
[06:35] try \\server\hajuu
[06:36] it seems to connect to \\server
[06:36] but not \\server\hajuu
[06:36] perhaps it isn't defined then
[06:36] the shares are defined in smb.conf, at the bottom
[06:36] there should be plenty of examples commented out
[06:38] yay
[06:39] connecting to \\share\hajuu now
[06:39] but still cant see my home folder
[06:41] Run "smbclient -L 127.0.0.1" on the server
[06:41] That should tell you about the available shares
[06:42] haha oh im dumb
[06:43] the folder *was* empty
[06:43] xD
[06:43] thanks so much guys
[06:44] Hi everyone
[06:44] I'm having trouble installing ubuntu 9.10 server
[06:45] when I select the install option
[06:45] I get a message about kernel requires an x86-64 CPU, but only detected an i686 CPU
[06:45] sorry, that was meant to have quotes
[06:45] "kernel requires an x86-64 CPU, but only detected an i686 CPU"
[06:45] I
[06:45] I'm installing on an HP pavilion machine
[06:46] danielrheath, that means you don't have a 64-bit CPU and need the i386 version of ubuntu
[06:46] OK
[06:47] so just get the other ISO and all should be OK?
[06:47] yes
[06:47] danielrheath: or change CPU
[06:47] But that might require a new motherboard and stuff
[06:47] it's just a home server with an old machine
[06:48] the oldest 64-bit CPUs are the original athlon 64s and Pentium 4 extreme 3.0GHz+ models
[06:48] anything older than that is only 32-bit and requires the i386 ISO
[06:49] ok
[06:49] there are very few differences between the two as far as user experience is concerned
[06:49] thanks very much :)
[06:49] hm. I made a new share entirely other than the magic homes share
[06:49] and I can see it fine
[06:49] but even though I set writable = yes
[06:49] I still can't write/delete
[06:50] Hajuu, try writeable = yes and read only = no
[06:54] qman`: within the 80x86 family, at least
[06:54] yeah
[06:54] Alpha, POWER and SPARC had 64-bit CPUs much earlier.
[06:54] IA64 too
[06:54] * Hajuu has a sparc station heh xD
[06:54] but I meant x86-based
[06:54] and a thinware client
[06:55] I'm excited for ARM netbooks :)
[06:55] Nod nod nod
[06:55] I should write to Pegatron again
[06:56] heh easy question im sure
[06:57] how do I add a user to a group?
[06:57] like I want to add my samba user to my webservers group so that it can access the hosted files
[06:57] oh, there's about a thousand ways to do that ;)
[06:57] Hajuu: usermod
[06:57] i have question , why do we need to setup ubuntu server what its use?
[06:58] adduser user group
[06:58] edit the /etc/group file
[06:58] all these ways work
[06:58] ahh its ok, did it with usermod
[06:58] heh
[06:58] cheers
[06:59] Administrator_, Ubuntu Server can be used for just about any use you want, including but not limited to mail, web, and file servers
[06:59] ok and final dumb question (hopefully)
[06:59] how do I set the file permissions so that the owner group (not username) can read and write to the files
[07:00] Hajuu, chmod 775 for executables, 664 for regular files
[07:00] what do the two mean exactly
[07:01] the numbers are based on read/write/execute, user/group/world
[07:01] read is 4, write is 2, execute is 1
[07:01] add them up for the number
[07:01] each digit refers to user, group, world, in that order
[07:02] ah ok
[07:02] sweet
[07:02] you can also use the textual syntax if that doesn't sit well with you
[07:02] cheers
[07:02] it's in the man page for chmod
[07:02] meh nah thats much better
[07:02] yeah
[07:02] heh now I cant connect at all for some reason
[07:02] what fun xD
[07:08] hmm now im confused
[07:08] I can see my share
[07:09] like if I connect to my server I see a list with my share in it
[07:09] but it says I dont have permission to access it all the sudden
[07:11] New bug: #496008 in openssh (main) "public key authentication grants access even for locked accounts" [Undecided,New] https://launchpad.net/bugs/496008
[07:12] lol, that's not a bug
[07:12] im guessing that my samba user is somehow prohibited from accessing the path
[07:14] what user does samba run as?
[07:14] hmm ok if its running as root, seems unlikely that it cant access the folder :/
[07:14] any other ideas?
[07:24] hello, I am having problems with static IP on my fresh installation of Ubuntu Server -- problem is I cannot ping/connect to machine from outside but I can ping other IPs from the Ubuntu Server
[07:26] Hajuu, despite separate authentication, samba doesn't actually have separate users, it uses system users for access
[07:26] klear: By "outside" do you mean other machines on the same local LAN subnet? Did you attempt any firewalling of any kind?
[07:26] it's pretty odd but that's how it works
[07:27] jmarsden: I try to ping it from an external IP (96.57.xxx.2) to Ubuntu's IP (96.57.xxx.4) -- I flushed and stopped the firewall, no rules active
[07:28] blah dont even know why I was bothering with samba, ssh's inbuilt sftp is just as good
[07:29] klear: So the server is directly connected to a public Internet IP address -- no router at all in the way? No NAT or anything?
[07:30] yup, well it's connected to a CISCO router that comes from my ISP but it doesn't have any NAT as far as I know, it just serves as an IP delegator of sorts
[07:30] can I change the password of the www-data user or will that break apache?
[07:30] Hajuu, that user should never have a password
[07:30] heh well ok im trying to mod that directories files but not having much luck as the user I added to the www-data group
[07:31] klear: OK, and you know that Cisco allows pings through in both directions?
[07:31] yes, as I have 2 other IPs using the same CISCO and those IPs can be pinged fine
[07:31] OK. You could try using tcpdump to watch for incoming packets on the relevant interface and so see if they get to your new Ubuntu machine?
[07:32] but this is not just ICMP though, it's definitely blocking any type of access
[07:32] ok
[07:34] jmarsden: I'm definitely getting responses from "tcpdump -i eth0" ... what am I looking for exactly?
[07:34] Well, the question is who or what is "blocking"... Use something more like sudo tcpdump -i eth0 icmp # so you only see ICMP traffic.
[07:35] Then ping the .4 machine from another machine on the same local LAN and see whether any of the incoming pings show up in tcpdump.
[07:35] ok, listening, nothing moving, let me ping now
[07:35] hm... cannot get local because Ubuntu is the only machine connected to .4
[07:35] You said you had 2 other IPs behind that CISCO... so those should be on same subnet, right?
[07:36] oh right, same subnet, sorry misunderstood you
[07:36] Use one of those machines... or am I misunderstanding this?
[07:36] OK.
[07:36] yeah, doing that right now, pinging from .5 and nothing showing up on tcpdump
[07:37] right, so CISCO has 4 ports and 2 of them have Linksys routers with a bunch of computers each. Right now I'm on .5 which is behind a NAT (Linksys) connecting to the CISCO
[07:37] blah this file permission thing is really annoying, my user is a member of the www-data group, he can connect and browse folders, including his home which he can write to
[07:37] however he cant see any files in /var/www
[07:37] Hajuu: did you try to jail users?
[07:37] he can go into the folder, but its empty and unwritable
[07:37] nope just trying to connect to a remote server
[07:38] /var/* is set as 764
[07:38] klear, sounds like a routing issue to me
[07:38] klear: Hmm. Either .5 is on the same subnet, or it isn't... behind a linksys doing NAT means it isn't...
[07:38] klear: Can you document your routing setup and pastebin it somewhere?
[07:39] Hajuu, that's the problem
[07:39] sure, give me one sec
[07:39] should be 775
[07:39] err
[07:39] the directory, /var/www should be 775
[07:39] I dont want people being able to execute stuff in the documents folder..
[07:39] Hajuu: execute for a directory means to list it's contents
[07:39] executable means something different for files versus directories
[07:39] Hajuu: mount it -o noexec, then
[07:39] oh realyl
[07:39] heh
[07:40] the executable bit toggles whether you're allowed to list contents in a directory
[07:40] Anything like /home or /srv/www should be mounted -o noexec,nodev,nosuid
[07:42] im not using samba anymore.
[07:42] I'm using ssh-ftp
[07:42] Hajuu: you mean SFTP?
[07:42] yeah
[07:43] ok I corrected its permissions but still isnt working
[07:43] I cant just not list, I cant write either
[07:43] although I still cant list either
[07:43] Is the connecting user trusted?
[07:43] its just for me :/
[07:43] to get files from production to live
[07:44] jmarsden: http://pastebin.com/d76b3d084
[07:44] Hajuu: does ssh work?
[07:44] Hajuu: you need to isolate the problem.
[07:44] yes, both *work* though, I can ssh in with this account, I can write to the users home folder through both sftp and ssh.
[07:45] I just cant write to, or list the contents of, /var/www
[07:46] Hajuu: which user are you connecting as?
[07:47] Hajuu, ls -alh /var | grep www
[07:47] klear: OK, so can you check or pastebin or both (!) the IP address, subnet mask and default gw of the Ubuntu server, the Linksys router at .5, and the machines behind the Linksys router? This sounds like a misconfiguration somewhere...
[07:47] one I created, 'phpnet'
[07:47] Hajuu: and why should this user have execute permissions on /var/www/?
[07:47] drwxrw-r-x 3 www-data www-data 4.0K 2000-01-01 23:25 www
[07:47] I said I DONT want them to have execute permissions.
[07:47] sure thing, give me a few minutes
[07:47] Let's try to stay on point here.
[07:47] :P
[07:48] Hajuu, that's 765, not 775
[07:48] Hajuu: you cannot list a directory unless it is executable
[07:48] the user is not allowed to list the contents of /var/www
[07:48] bleh I just made it 777
[07:48] still cant.
[07:49] Hajuu: you do "ssh phpnet@fs ls /var/www/" ?
[07:49] im using nautilus
[07:49] for the file operations atleast
[07:49] I canot help you with nautilus.
[07:50] are you sure the permission change stuck?
[07:50] hajuu@phpnet:~$ ssh phpnet@10.1.1.9 ls /var/www/
[07:50] ssh_exchange_identification: Connection closed by remote host
[07:50] No, I dont think it did
[07:50] 'sudo chmod 775 /var/www'
[07:51] sudo: /var/run/sudo writable by non-owner (040765), should be mode 0700
[07:51] Hajuu: you have broken sudo
[07:51] twb: He's broken permissions on a lot of things under /var I think...
[07:51] yay.
[07:52] I don't understand why www still defaults to /var instead of /srv
[07:52] I guess because policy says /srv is for the local admin alone...
[07:53] jmarsden: done -- http://pastebin.com/d41f689e1
[07:53] eh great so now I cant change any permissions and I cant become root
[07:53] how wonderful.
[07:54] Hajuu: this is why you do not just make changes at random and hope it fixes things
[07:55] klear: You can check the default gw on the Ubuntu server using netstat -nr
[07:55] no, this is why you dont hand complete administrator control over to some random easilly disabled application.
[07:55] hmmm, it says 0.0.0.0
[07:55] Hajuu, it is only possible to break sudo with root access
[07:55] but I have defined it in /etc/network/interfaces though, how can this be?
[07:55] if I could become root, it would be easilly fixed, and the ability to log into root is pretty hard.
[07:55] root is the highest level of access there is
[07:55] Hajuu: if you deliberately make sudo's infrastructure insecure, it is fully justified in refusing to be a gaping security hole.
[07:56] Yeah break sudo..
[07:56] not break root
[07:56] then atleast I could fix it.
[07:56] what am I supposed to do now.. reinstall my fucking os?
[07:56] :(
[07:56] If you have physical access, you can easily become root.
[07:56] yeah
[07:56] I do
[07:56] urgh
[07:56] though it's likely more work to fix than to reinstall
[07:56] what I assume you've done is blanket change permissions on everything in /var
[07:56] which is a very bad thing
[07:56] yeah ill livecd it up
[07:56] don't need a live CD, just hit escape when grub is loading
[07:57] Indeed. If you fuck up badly enough to break sudo, it's likely that you have broken a lot of other things.
[07:57] and choose recovery mode
[07:57] klear: The second column of the line of netstat -nr output should be the gateway, in the line that starts with 0.0.0.0
[07:57] jmarsden: still using netstat instead of ss? ;-)
[07:57] bleh yeah I dont even know what the correct permissions of any of the folders are.
[07:57] ill just reinstall.
[07:57] twb: Old habits die hard :)
[07:57] jmarsden: you mean the 2nd row? because on 2nd row I do see the gateway IP
[07:58] and waste 3 hours of my time.
[07:58] yay.
[07:58] klear: CAn you pastebin the whole netstat -nr output ?
[07:58] sure, one sec
[07:59] I've always used the route command
[07:59] qman`: route ≠ ss/netstat
[08:00] qman`: route corresponds to ip route
[08:00] yes, I just mean to show the routing table
[08:00] Oh, icky. I didn't realize netstat even included that functionality
[08:00] I didn't either, always used route [-n]
[08:01] jmarsden: here is netstat -nr: http://pastebin.com/d12d9c8e2
[08:02] but netstat -[n]r shows roughly the same thing
[08:02] twb: It's been there a long time, that functionality. Works on Windows too... and on NetBSD and FreeBSD... I don't remember when or why I started using netstat -nr rather than route -n, both work.
[08:03] what do the Flags "UG" mean?
[08:03] klear: up, gateway
[08:04] thanks
[08:04] Looks fine to me. Hmm. Want to reveal the xxx so I can try pinging your machine from here?
[08:04] sure
[08:04] I dunno why people bother to obscure IPs
[08:04] haha, i know, i thought it was lame, too
[08:04] 96.57.248.4 <- the Ubuntu Server
[08:05] It's perfectly pingable from here :)
[08:05] mm
[08:05] wait, what
[08:05] you do realize that information is available to everyone on this network, just by viewing your host line?
[08:06] yep, responding here too
[08:06] qman: I thought so, goddamnit, this is what corporate life has done to me :(
[08:06] I can ping 96.57.248.4 from here in Southern California...
[08:06] So the issue is with your other PC, the one behind the Linksys, or with that Linksys, I would guess.
[08:06] ok, so it must be my .5 setup that needs a whooping
[08:06] Yes.
[08:06] what's most likely
[08:07] the machines behind the linksys don't know the route
[08:07] or the linksys itself doesn't know the route
[08:07] how could that happen though
[08:07] or for some reason the cisco is blocking the traffic
[08:07] Linksys has DNS servers from my ISP
[08:07] DNS and routes are two totally separate things
[08:07] sorry, I'll take that back
[08:08] how would Linksys not know the route in this case then?
[08:08] We're using IP addresses, not names, so DNS isn't (yet?) involved here.
[08:08] ah, I know what's up
[08:08] the cisco is not forwarding the packets out the other port
[08:09] using a switch instead of a router as a switch would solve it
[08:09] the linksys knows it's directly connected to the subnet your ubuntu server is on
[08:09] except it isn't
[08:09] it has to go through the cisco
[08:09] right
[08:09] the cisco sees the packets coming from the subnet they're destined to
[08:09] and drops them
[08:09] and the Cisco is just ignoring it
[08:09] I see, it makes sense
[08:10] let me try to ping another IP on the same subnet then
[08:10] omg, that's right!!!
[08:10] wtf man, I feel so good talkin to you guys about this!
[08:10] a true bridge of the cisco's ports should solve that, but using a switch would be easier
[08:11] honestly I don't even know why they had to bring in the Cisco whereas a Netgear switch would do fine -- is that correct?
[08:11] yes, if everything connected to it is using statically assigned external IPs
[08:11] a switch is the right device for that job
[08:12] but then how does this explain complete blocking of the system -- I understand Cisco dropping ICMP packets but I can't even access Ubuntu via SSH or anything from the same subnet
[08:12] klear: It just doesn't forward any packets to/from the same subnet.
[08:12] the router is preprogrammed to ignore traffic destined to the 'local' subnet of each port
[08:12] That set of pprts on the back of the Cisco are not acting like a switch
[08:13] oh, i thought it was only applicable to ICMP packets
[08:13] no, all packets
[08:13] it's the router barrier
[08:13] ohh
[08:13] if there's no routing to be done, they're simply dropped
[08:13] is there any way I can change that in the Cisco myself or would my ISP have blocked it?
[08:13] you would have to bridge the ports together
[08:13] klear: ISP will not lightly give you their cisco password :)
[08:13] not sure if the router is capable of that
[08:14] what you could also do, is plug all your stuff into a switch, and plug the switch into one port on the router
[08:15] on the Linksys router?
[08:15] or the Cisco
[08:15] no, the cisco router
[08:15] modem -- cisco -- switch --{ everything else, linksyses and ubuntu server
[08:15] but the switch would have to be configured with the static IP info... it would have to be a managed switch?
[08:15] no
[08:15] oh
[08:15] the switch doesn't need an IP
[08:15] klear: everything that now goes to the back of the cisco goes into the new switch, and one port from the new switch goes to the back of the cisco.
[08:15] analyzing...
[08:16] hmm
[08:16] A cheap 10/100 5 port switch would do if you have nothing better :)
[08:16] then I could configure the 2 differenet Linksyses to have static IPs and they would work?
[08:16] yes, as well as the ubuntu server having its own static IP
[08:16] klear: Yes, and plug both their WAN ports into the switch.
[08:16] wow, never thought of it that way
[08:16] everything plugged into that switch would use a public, static IP
[08:17] so a 4-port switch would have my 2 Linksyses and the Ubuntu Server... all 3 of these configured with Static IPs... then the Switch has the 4th cable going to Cisco
[08:17] yes
[08:17] klear: Yes.
[08:18] I have to try that
[08:18] but doesn't that just render Cisco useless though?
[08:18] could I not just bypass it?
[08:18] and connect that switch directly to modem?
[08:18] unless they have some strange proprietary configuration, yes
[08:18] yeah, they probably configured the modem during provisioning to work with Cisco's MAC or something
[08:19] No it may be doing all kinds of stuff... it may see all the 96.57.248.* traffic coming in router to some other IP , for example... be careful...
[08:19] in theory all you need is a switch
[08:19] but your ISP could be doing some odd things
[08:19] so the safe thing to do is leave it there and just put your switch behind it
[08:19] they are weird
[08:19] Why rock the boat, leave the Cisco in place. Jut add a small switch behind it.
[08:19] I have a couple of those small switches laying around
[08:19] yeah, I'll have to
[08:20] thank you guys, you're awesome
[08:20] I didn't even expect this kind of help, honestly
[08:20] You're welcome.
[08:20] Ubuntu rocks
[08:20] sorry for a little outro rant but...
[08:20] I'm falling in love with the damn thing
[08:21] it's like the first time I started making music back 15 years ago... hearing music come out of the computer seemed wonderful
[08:21] now I'm building a server and decided to go with Ubuntu precisely because of the huge community behind it
[08:21] and, wow, Ubuntu really really rocks!
[08:22] and everyone involved
[08:22] thank you guys, I will install mIRC and try to come here regularly
[08:23] eww, mIRC
[08:23] sorry, been a long time
[08:23] what is used nowadays?
[08:23] Pidgin?
[08:23] klear: Or switch to xchat :)
[08:23] irssi, xchat, pidgin, anything open source preferrably
[08:23] damnit!
[08:23] I feel old -- and I'm not!
[08:24] * jmarsden feels old, and *is* :)
[08:24] be wary of the "official" windows xchat port though
[08:24] it's trialware and violates the GPL
[08:25] back in my day, "/me slaps X around the neck with a large trout" was the norm
[08:25] yeah, xChat does look nice and simplistic but trialware doesn't sound good for an OS product
[08:25] There's an unofficial one from ... silver*something* that I've used on Windows... http://www.silverex.org/
[08:25] yeah
[08:26] and there's a number of other clients too
[08:26] mIRC just hasn't changed for the better at all, it's not standards compliant and looks straight out of 1998
[08:27] we used to 'crack it' back then
[08:27] it was trialware then too
[08:28] what about Pidgin, I installed it once but could not get it off Windows ever... had to format my laptop
[08:28] has it improved now?
[08:28] <_ruben> its algo was so simple you could create a keygen its own scripting engine .. enough offtopic though :p
[08:28] I honestly haven't used it since they first changed the name from gaim
[08:28] I quit using other IM protocols around that time
[08:29] <_ruben> lots of coworkers use pdigin to connect to our jabber server
[08:29] i'm using webchat.freenode.net right now... it's hot :P
[08:29] irssi is my favorite IRC client, but it's console based so not for everyone
[08:29] running xchat on this
[08:30] yeah, it looked like a colorful Putty
[08:30] <_ruben> irssi here as well .. running in putty ;)
[08:31] yeah, Putty's nice allright but the Gnome default on 9.10 is just beautiful
[08:31] I was expecting a GUI for the server edition at first but then blushed at the thought... it was embarrasing
[08:33] haha! here I come, Ychat up in here!
[08:35] thank you guys for your help and putting me up for other IRC clients
[08:35] I'll be back!
[08:46] heh ok
[08:46] and im back
[08:46] Error: Host key verification failed
[08:46] i'm getting that trying to ssh in
[08:46] (i've reinstalled)
[08:47] Hajuu: Delete the line from your local ~/.ssh/known_hosts file
[08:47] It still has a value from the previous install left in there.
[08:47] It shouldnt, I completely removed my partition table lol :(
[08:47] sec
[08:48] On your local machine that you are connecting from?
[08:48] the one im connecting to
[08:48] Hajuu: Delete the line from your local ~/.ssh/known_hosts file -- LOCAL, the machine you use the ssh CLIENT on.
[08:49] ahh that worked
[08:49] yeah
[08:49] I got what you meant :P
[08:49] Worked perfectly, thanks :D
[08:50] <_ruben> it even tells you the line number to remove :)
[08:50] meh I got that from nautilus
[08:50] so I dont think it does
[08:51] <_ruben> ah, never used nautilus, so wouldnt know
[08:57] sed -i 99d ~/.ssh/known-hosts to delete the 99th line :-)
[08:57] ok.. so. Now i'm back where I was.
[08:58] I am able to sftp in with nautilus to my server running sshd.
[08:58] the connected client can manipulate files in the users home directory
[08:58] however he cannot modify files in the server directory (for authoring files to the live server)
[08:59] Hajuu: if this is just a private server, why not use ~/public_html?
[08:59] I did this command to add the user to the www-data group
[08:59] Hajuu: OK, so now you can sftp your files up to your home dir (NOT /var/www/) . Then on the server (in a ssh session) you can move them around to whereever you need to.
[08:59] it IS ssh, it's all the same system
[08:59] same permissions
[08:59] and yes, I did test that.
[09:00] sudo usermod -G www-data --append hajuu
[09:00] thats what I did to add him to the www-data group
[09:00] and to give group full access to the folder I did..
[09:00] sudo chmod -R 775 /var/www/*
[09:01] Technically, SFTP is a component subsystem of ssh.
[09:01] exactly :P
[09:01] its really awesome. I'm in awe of the way it just worked
[09:01] and its only like 4mb.
[09:01] Truely a standard to live upto :P
[09:02] this is purely a permissions error I still reckon
[09:02] but I cant get it to work as I want
[09:03] oh wait
[09:08] blah yeah I just cant get it to work
[09:15] drwxr-xr-x 3 root root 4.0K 2000-01-02 01:55 www
[09:15] whatever I do
[09:15] it seems to stay as root
[09:15] no matter how I try to chmod it
[09:16] :(
[09:21] hahah
[09:21] um
[09:21] looks as though
[09:21] ssh caches its permissions
[09:21] or something
[09:21] cause I terminated all my connections
[09:21] restarted ssh
[09:21] and now all is well
[09:23] one final question
[09:23] is it possible to use mount or fstab to mount an sftp to a place on the filesystem?
[09:24] Hajuu: you are thinking of sshfs.
[09:25] It isn't fantastic... but no network filesystem is.
[09:25] meh thats ok it just would have made synchronizing stuff to the live server easier
[09:26] <_ruben> synchronize = rsync in my book :)
[09:31] itd be cool if they added like a filesystem wrapper sshfs:// or something and included it - it'd be like the complete package then
[09:32] I guess not everyone needs or wants that though
[09:32] anyway, thanks a lot for all your help :D
[09:32] peace
[12:42] New bug: #493727 in php5 (main) "date('Y') returns 0000 on big endian machines" [Low,Triaged] https://launchpad.net/bugs/493727
=== Brumle_ is now known as Brumle
[17:51] New bug: #496247 in augeas (main) "Sync augeas 0.6.0-1 (main) from Debian testing (main)" [Wishlist,New] https://launchpad.net/bugs/496247
=== astechgeek is now known as techgeek
[19:04] http://uk.groups.yahoo.com/group/thepirateparty/members
[19:15] How does someone get started with C++ programming for Linux? Where is there documentation of the functions and stuff you have available on the platform?
[19:20] Bilge: aptitude install build-essential
[19:21] That's documentation?
[19:21] It's already installed on my machine
[19:21] The description says it's for package building
[19:22] then any C++ programming guide ylou can find applies
[19:22] Are you implying that any Windows functions and constants and whatever are also available on Linux?
[19:22] Because I find that hard to believe
[19:22] Therefore invalidating your claim that any guide applies
[19:23] In any case I have no such definitive guide
[19:23] and the attitude invalidates me providing further help..
[19:24] Afternoon guys, Is there a way i can install ubuntu server on to a server that has no monitor attached to it.
[19:24] if i could just get the thing to boot off of an cd that would just provide me with ssh access to the box it would be all i needed
[19:25] Doonz: I think your easiest option would be to setup a virtual machine on your own system and mimic the keypresses you provide
[19:25] Doonz: You could use the installer to install openssh-server
[19:26] hmm
[19:27] so im kinda screwed i pretty much need a monitor to get the install going then
[19:27] The other option would be to try to build your own installation cd that would do it all automatically which is very likely far too painful to do fo that
[19:27] well my settings would be fairly
[19:27] I think I could do most of a server install without seeing the screen - it's mostly just all enter
[19:28] hm
[19:29] I did a server install once when I was royally wasted; just referencing a vm a little should be pretty easy I'd think
[19:29] yeah i was just hoping there would be a unnatended install option
[19:30] There's network boot options too..
[19:30] Check out this page - https://help.ubuntu.com/community/Installation
[19:31] yeah i was reading those
[19:37] Doonz: I'm not finding anything more helpful than what's on there
[19:37] yeah thats ok
[19:37] thanx tho
[19:37] ill just pull it up stairs
[19:37] :(
[19:39] Ya, it's hard to do anything without having some sort of interaction on the system
[19:39] hrm...
[19:39] if you're comfortable with an ssh install....
[19:39] Try out a systemrescuecd
=== Guest28643 is now known as dxtr
[19:42] it'll get you to a liv evironmet with no interaction. I think you just need to run one command to enable ssh access to the system
[19:53] how is the server different than the desktop, other than having no gui?
[19:55] !server
[19:55] Ubuntu Server Edition is a release of Ubuntu designed especially for server environments, including a server-specific !kernel and no !GUI. The install CD contains many server applications. Current !LTS version is 8.04. For more info see https://help.ubuntu.com/community/ServerFaq/ and https://help.ubuntu.com/8.04/serverguide/C/index.html - Use the #ubuntu-server channel for support
[19:55] LizardK|ng: different kernel; the install presents you with tasksel; and ya, all that
[19:56] tasksel? why a different kernel? optimized for server tasks?
[19:58] i am running jaunty as a server and i'm considering using ubuntu server, but i will want a gui. would it be difficult to do that?
[20:01] LizardK|ng: kernel flavour differences are best discerned by examining the kernel config options used to compile them. good question though
[20:14] Starting with Karmic for i386, there is not a server specific kernel. Server uses generic.
[21:02] is it normal for /dev/md0 to be clean after a forced reboot without resyncing?
=== LyonJT_ is now known as LyonJT
[21:26] --pidfile: command not found
[21:26] I'm trying to make a star-stop-daemon script for an app but I'm getting an --make-pidfile command not found error. Any ideas?
[21:45] mhh I need some packagemanagement tool, but not landscape :)
=== cjwatson_ is now known as cjwatson
[23:30] How can i give a user full access rights to a folder?}}}