/srv/irclogs.ubuntu.com/2010/01/28/#ubuntu-server.txt

nat2610hey I have this box that I installed like 2 yrs ago, at that time I gues that was 8.4 ... at that time libbost was coming in 1.35 which is perfect for what I needed, now I want to test on the same box to upgrade to 1,40 but I checked and 1.35 is not packaged anymore some very old libs installed from00:06
nat2610oups .. I was editing my sentence when I hit enter...00:06
nat2610let me rephrase it00:06
nat2610hey I have this box that I installed like 2 yrs ago, at that time I gues that was 8.4 ... at that time libbost was coming in 1.35 which is perfect for what I needed, now I want to test on the same box to upgrade to 1,40 but I checked and 1.35 is not packaged anymore. If I want to upgrade to 1.40, apt want to remove 1.35 which make sense but will I be able to then put back 1.35 if something doesn't go well ?00:07
nat2610is there a way to save the current deb ?00:07
nat2610or something like that?00:07
=== erichammond1 is now known as erichammond
uvirtbot`New bug: #513544 in libvirt (main) "libvirt 0.7.5 crashed on first virt-manager connection" [Undecided,New] https://launchpad.net/bugs/51354401:26
=== erichammond1 is now known as erichammond
=== erichammond1 is now known as erichammond
error404notfoundI have 3 machines at home, i need to put redirect of say *.domain.com to my private IP say 192.168.1.1 instead of public, i don't want to edit /etc/hosts as i want it to be one time "*.domain.com" redirect,do i need a basic dns setup here or what?02:53
uvirtbot`New bug: #513562 in samba (main) "Windows 7 Pro machines trust relationship fails" [Undecided,New] https://launchpad.net/bugs/51356203:02
bendjHi.  I'm setting up a 1st mai server, using ubuntu-server.  I'm planning on using exim, and integrating spamassassin.  Iiuc, I can either use spamassassin directly integrated into exim, or via amavisd-new.  Each community seems to recommend their own solution.  What do "server folks" in here use -- and Why?04:28
=== dendrobates is now known as dendro-afk
unnotusedwhy would my virtual copy of ubuntu server have an ip address of 192.168.56.101 ?05:12
unnotusedzomg, is anyone here ?05:13
twbno05:15
unnotusedfigures05:15
unnotusednothing but bots05:15
twbI imagine 192.168/16 is used because that's a private address range.05:15
unnotusednothing but bots/05:15
unnotusedGRRR05:16
unnotusedstupid chat05:16
unnotusedidk05:16
unnotusedwhy 56.101?05:16
unnotusedidk05:17
unnotusedi just wish i could get it to connect to the interwebs05:17
unnotusedso i could apt-get05:17
unnotusedand be all good05:17
unnotusedi give up for now05:20
unnotusednight05:20
jmarsdenunnotused: The issue is more with your virtualization setup than with ubuntu-server... what are you using?05:22
unnotusedsun virtualbox05:22
jmarsdenAnd you set Networking to ... what when you created the VM?05:22
jmarsdenI'm guessing NAT, and you really want Bridged05:23
unnotusedno05:23
unnotusedbridged to my wireless adapter emulated as w/e their default is05:24
jmarsdenI've not tried bridging to wireless... can you bridge to your wired adapter instead?05:24
unnotusedlol05:25
unnotusedif i had a wired network05:25
unnotusedmaybe05:25
unnotusedive got both enabled05:25
jmarsdenWell, IMO that's probably where the issue lies.05:25
unnotusedprob05:26
unnotusedone way to find out05:26
jmarsdenActually for apt-get access, NAT might be fine... did you try it?05:26
unnotusednope05:26
unnotuseddidnt figure it would work05:26
jmarsdenA server you can't access from anywhere except itself is a fairly useless server, but to get outbound access, try NAT.05:26
jmarsdenOr run a cable to your nearest switch :)05:27
unnotusedkks05:27
unnotusedima try both05:27
unnotusedi wanna get ebox working05:27
unnotusedthe college i work at just got a 1/4 million dollar blade center and it doesnt work b/c the SQL is fubar05:28
unnotusedi thought "HEY virtbox exported ubuntu/mysql server with ebox admin so even my boss can use it"05:28
unnotusedidk05:28
unnotused .. . .05:28
unnotusedits more of a pain then i expected05:29
jmarsdenWhy the virtualization?  Just run MySQL on your host OS, if that is all you need to export to the world?05:29
unnotusedbladecenter needs the sql server virtualized anywa05:30
unnotusedanyway05:30
unnotusedthe exchange is running on the card05:30
unnotused:P05:30
unnotusedi installed ubuntu server, got mysql set up, got the databases/users running got apache configured and even got the obdc driver working . . .05:31
unnotusednow i just need a way for my boss to be like (web browser to ip address, change network settings)05:31
jmarsdenWait... so you have a blade with only a wireless network connection???05:31
unnotusedno05:31
unnotusedim building the virtual image from home05:31
unnotusedthat would be05:32
unnotusedsad at the verry least05:32
unnotusedi almost have everything i need done05:33
unnotusedi just need access to apt-get05:33
unnotused:P05:33
jmarsdenPlug in the wire, bridge to eth0, and if your wired network has working DHCP, you should be all set when you restart the Ubuntu server VM.05:34
unnotusedimma try it tomm :P be lazy and such05:34
jmarsdenI have Ubuntu and Debian server VMs under VirtualBox here on my home desktop machine... so it definitely works for me :)05:34
jmarsdenOK...05:34
unnotusedkk05:34
unnotusedits past my bed time05:35
unnotusedlol05:35
jmarsdenOnly 9:35pm here in California, not my bedtime yet :)05:35
unnotusedim starting to get tired and i can do it fairly quckly in the morning from the office05:35
unnotusedi just wanted to know if it was a virtual ubuntuserver problem05:35
unnotusedand its not05:35
unnotusedso im good05:35
jmarsdenIt really doesn't sound like one to me.05:36
unnotusedim hopeing ebox will work ok05:36
unnotusedive never used it05:36
jmarsdenIf it manages the things you need to tweak with it, it will work.  It's not always as featureful as you might like if you have used webmin05:36
unnotusedjust so long as my boss can log in and change the network settings05:38
unnotusedhe isnt the CLI type05:38
unnotusedif it doesnt have a GUI its too old05:38
unnotusedlol05:38
jmarsdenWhy not just leave it using DHCP so he never has to change the network settings??05:38
unnotusedidk05:39
unnotusedhe asked to be able to change the network05:39
unnotusedand he is my boss05:39
unnotusedone of those deals05:39
jmarsdenOK...05:39
unnotused(they dont trust me)05:39
unnotused<<< student worker05:39
jmarsdenIf they don't trust you, they shouldn't use a server image you create... :)05:40
=== robbiew is now known as robbiew_
unnotused<<<< student work that does his boss's job and gets paid min wage for it . . .  whos the only reason his boss is still working05:40
unnotusedand jmarsden, the only reason they are letting me do it is b/c im the only one who knows how to set up mysql and they are too cheep to pay for MS SQL server05:41
jmarsdenMaybe you should find another minimum wage job, wait for boss to be fired, and then apply for his job :)05:41
unnotusedor wait till i get done with classes and move to california and get a job05:41
unnotused:D05:41
unnotusedi live in WV05:41
unnotusedthe middle of nowhere05:41
jmarsdenOK, well, I should let you sleep... have fun with Ubuntu and vbox in the morning :)05:43
unnotusedlol05:43
unnotusedthats05:43
unnotusednot funny05:43
unnotusedXD05:43
unnotusednight05:43
jmarsdenGoodnight05:43
uvirtbot`New bug: #513622 in squid (main) "package squid 2.7.STABLE7-1ubuntu3 failed to install/upgrade: ??? ???? post-installation ?? ?????? 1" [Undecided,New] https://launchpad.net/bugs/51362206:36
jiboumansmorning08:18
acalvohow can I change the default language?08:18
jmarsdenacalvo: At what level?  For the whole server, or for one user, or one shell session, or one command?08:29
acalvowhole server08:29
acalvoor shell session08:29
acalvowhatever is easier08:30
jmarsdenInstall the appropriate language pack, then edit /etc/default/locale to what you want, then log in.08:30
jmarsdenFor a single shell session, you can just do something like export LANG=de_DE.utf8   # as the first command in the session.08:31
acalvothank you!08:32
jmarsdenYou're welcome.08:32
=== dendro-afk is now known as dendrobates
faileasI'm running ubuntu karmic server, and using a go6 ipv6 tunnel for ipv6 connectivity. I need to start a client for the ipv6 tunnel - this is at /usr/local/gw6c/bin/gw6c before apache starts, but i'm not clear on how to set the order of how scripts in /ect/init.d start09:08
JimiDinifaileas: /etc/init.d does not define order. order is defined by /etc/rcX.d where X is a digit from 0 to 6, corresponding to run-level09:18
faileasJimiDini: and within it, there's scripts starting with two numbers, a letter (either k or s) and the script name...09:19
JimiDinik=kill, s=start09:19
JimiDininumber defines order09:20
faileasok09:20
JimiDiniS20 will start before S30 for example09:20
faileasnow i just need to work out why this app won't start unless i'm in its directory09:21
twbBy now sysvinit should be deprecated :-/09:32
faileaslol09:34
faileaswell i think my current issues arn't with that09:34
freewillieHeey10:07
freewillieCould someone help me out with my sound problem?10:08
freewillieI have installed ubuntu server, and i want to use it as a jukebox but i hear no sound10:09
freewillieIs there someone who can help me ?10:15
faileastwb: What else should i be using? ;p10:16
twbupstart10:16
faileasfreewillie: got alsa installed?10:16
twbOr in my fantasy land, metainit10:16
freewilliefaileas: yes10:16
faileasfreewillie: go to alsamixer and see if your volume is turned up10:17
freewilliefaileas: but not configured because i dont know how10:17
faileas(its not a joke. its happened to me before)10:17
freewilliefaileas: how can i put the volume up10:17
faileasfreewillie: in general you shouldn't really need to. try going to alsamixer (in cli)10:17
faileas(i'm assuming you're running cli. else it depends on your setup)10:18
freewilliei run from the commandline10:18
freewilliefaileas: This is the error: alsamixer: function snd_ctl_open failed for default: No such file or directory10:18
incorrectstrongswan or openswan?10:19
faileasfreewillie: http://ubuntuforums.org/showthread.php?t=1094196 might be a server kernel issue10:20
faileasfreewillie: mind installing a generic kernel, and seeing if that works?10:20
freewillieok10:22
freewilliethanks10:22
freewilliefaileas: I will try, but now i have to go10:22
uvirtbot`New bug: #513427 in samba (main) "'net usershare' returned error 255: net usershare add: cannot convert name "Everyone" to a SID. Invalid parameter." [Low,Incomplete] https://launchpad.net/bugs/51342710:46
nakamukascp a.c host:welcome , and it should copy to   /myscps/project/welcome directory in to the server. instead of /home/username/welcome .10:46
nakamukais it possible to change the prefix directory in the server ?10:47
nakamukacould someone help me ?10:47
_rubenincorrect: openswan here, but that was a decision made quite some time ago .. both have their pros and cons10:47
_rubennakamuka: change the users homedir, or specify full path in your scp command10:48
incorrect_ruben, i went with openswan too10:48
nakamuka_ruben,  but are there any way to specifiy like in ftp we specificy vsftp.conf anon_root = prefixdir, ?10:49
_rubennakamuka: doubt that, check the manual to be sure :)10:50
twbnakamuka: what are you actually trying to achieve?10:59
nakamukatwb, Ok, i need to copy some file to server through scp. by default if destination directory is relative path, then it is prefixed with the home directory to make absolute.  But for me i dont want home directory to be prefixed but some other directory lets say /myscps/projects111:01
twbnakamuka: why?11:02
nakamukatwb, the present code scenario is like that. :)11:02
nakamukatwb, reason behind is the destination directory can be changed quickley just by chaning a small configuration file , ie. changing prefix.11:03
jmarsdennakamuka: ssh user@example.com "ln -s scp /myscps/projects1"  # then scp -p foo user@example.com:scp/  puts the files where you want them.11:03
jmarsdenTo change where they go, change the scp symlink .11:04
twbOr even just ssh fs 'ln -s /myscps/*'11:04
jmarsdentwb: Maybe.  That could be a lot of symlinks to change for every user concerned, if the whole idea is to allow rapid switching of where stuff goes?11:06
twbjmarsden: I was assuming he was only doing it for his own silly user11:06
twbIt certainly will make a mess of $HOME11:06
nakamukatwb, that is true, but  it could be nice if there is one option like we see in ftp,  In   vsftp.conf  anon_root parameter holds the prefix directory.11:08
twbnakamuka: file a feature request with upstream11:08
nakamukatwb, where do i have to file. link ?.. sorry to ask basic questions.!11:09
twbTry #openssh, if you're using the default implementation.11:09
mobi-sheepYou too could throw in the aliases for SCP commands in the mix!11:57
nakamukamobi-sheep,  means ?11:59
mobi-sheepnakamuka: That wouldn't work, I think. Because of specific parameters.  Scripts would though.12:01
nakamukamobi-sheep, ok. any idea about ChrootDirectory in sshd_conf directory ?12:02
mobi-sheepnakamuka: I mean like this "scp-project2 <file>" would act like "scp <file> <hostname>@<ip>:<path>"12:02
mobi-sheepAssuming you're doing this for yourself, not many users.12:02
mobi-sheepnakamuka: I know nothing about that ChrootDirectory.12:03
Italian_Plumbergood morning.  I just put a 100GB hard drive in my machine.  It shows 93GiB size, and 88GiB free.  I know that 100GB is actually 93GiB -- I totally get that.  And I know that the filesystem needs some room to do its thing.  But does it really need 5GiB out of 93?13:13
Italian_PlumberI'm farily sure that I used all availiable space for the partition.13:15
Italian_Plumberthe drive is not the OS drive.13:17
_rubenItalian_Plumber:13:21
_ruben       -m reserved-blocks-percentage13:21
_ruben              Specify  the  percentage of the filesystem blocks reserved for the super-user.  This avoids fragmentation, and allows root-owned daemons, such as syslogd(8), to continue to function correctly after13:21
_ruben              non-privileged processes are prevented from writing to the filesystem.  The default percentage is 5%.13:21
_ruben5% of 100G is 5G ;)13:21
Italian_Plumberah.  well avoiding fragmentation will be good -- this drive will be written to and deleted from a lot.  Thanks!13:23
zulmorning13:24
zuljiboumans: ping14:00
jiboumanszul: hi14:01
zuljiboumans: 1:1?14:01
jiboumanswas just about to hit 'call' :)14:01
zulits my psychic powers14:01
jiboumanskirkland: ping?14:16
MTecknologyYou guys have any idea how to make a cron job that runs every hour except midnight?14:18
MTecknology* 1-23 * * * ; hrm.. I think that'll work :)14:20
PiciMTecknology: That will run every minute of every hour except 0:xx14:22
PiciMTecknology: 0 1-23 * * * would be what you're looking for14:23
MTecknologyPici: thanks, I spaced when I typed it out here14:23
smoserEtienneG, per -server mailing list14:27
smoserii'm certainly not under the impression that -virtual is being phased out14:27
EtienneGsmoser, ok, sorry for implying that then14:27
smoserthe wierd thing about that snippit of the 'earth computing' thread is that -virtual *is* -generic-pae or -server14:28
EtienneGsmoser, I see14:28
smoserits just that kernel, those modules, with some pruning of the module list14:28
smoserit makes no sense that there woudl be a performance difference14:28
EtienneGindeed14:28
smosertha tis the case in karmic and lucid. i can't knowledgably speak for before that.14:28
EtienneGi am perplexed too14:29
beniwtvHey all.... My newly installed server on RAID 1 wants to install LILO. How can I install GRUB instead? On 8.04.3. I read somewhere this is only grub-installl /dev/md0 but on the alternate installer in live mode I can't find this command :(14:38
_rubenbeniwtv: is /boot on a lvm by any chance?14:39
beniwtv_ruben: no, only RAID114:40
beniwtv_ruben: The problem with LILO is, it won't boot and it stalls on freeing initrd14:43
_rubenhmm .. wonder it thinks lilo is needed in that case, plain software raid is no reason to ditch grub14:46
beniwtv_ruben: Yeah, now I'm going to do this: boot in rescue mode from the alternate CD, activate LVM (if not active), and mount the /root partition (which is on LVM). Then I chroot, apt-get grub and install grub. Sounds possible right?14:48
_rubeni'd say so yeah14:49
beniwtv_ruben: I have someone there that will be able to follow some instructions, but it's difficult over the phone. I have ping to the server. Would is be possible to access it via ssh?14:50
_rubenthe alternate cd probably wont have sshd running, but it can be installed manually (done similar stuff with the live desktop cd for recovery)14:52
beniwtv_ruben: how can it be installed? anna-install?14:52
_rubennot sure about the possibilities offered by the alternate cd, in my case i could just apt-get it14:54
beniwtvapt-get seems to be not there, though14:54
_rubenperhaps the network-console module could do the job14:55
_rubenanna/choose_modules network-console14:56
_rubennot sure if that works for recovery purposes though14:56
beniwtvprobably I should do a ls /bin and see what's there ot use14:57
beniwtvs/ot/to14:57
uvirtbot`New bug: #513811 in bacula (main) "package bacula-director-mysql 3.0.2-3ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/51381115:11
incorrectdamn setting up L2TP/ipsec is a pain in the arse15:15
beniwtvhow does someone use grub-installer manually? is it possible?15:18
smoserkirkland, mathiaz, ttx you have a euca instance up you can do something for me ?15:22
smoserpython -c 'import boto.utils, pprint; pprint.pprint(boto.utils.get_instance_metadata())'15:23
mathiazsmoser: not for now sorry15:26
ttxsmoser: ack15:27
ttxsmoser: that seems to hang15:28
ttxsmoser: you need an instance running ?15:29
smoserit shoudln't hang15:29
smoseryeah, in an instance do that.15:29
smosersorry15:29
ttxah15:29
smoserit will hang for a couple days if you didn't have a web server on 169.254.169.25415:30
ttxright, just a sec, then15:30
ttxsmoser: good presentation yesterday, btw15:30
ttxraed the logs15:30
smoserwhy thank you.15:31
ttxsmoser: http://pastebin.ubuntu.com/364633/15:34
smoser 'block-device-mapping': {'emi': 'sda1',15:34
smoser                          'ephemeral': 'sda2',15:34
smoser                          'root': '/dev/sda1',15:34
smoser                          'swap': 'sda3'}15:34
smosergah15:34
smosershould i open a bug on that15:34
smoserec2 has15:34
smoser'ephemeral0': 'sda2'15:34
smoser(same other than '0' in ephemeral)15:34
uvirtbot`New bug: #513749 in dhcp3 (main) "dhcp3-server automatically starts ignoring startup rules on package update" [Low,Incomplete] https://launchpad.net/bugs/51374915:36
ttxsmoser: yes, file one15:46
smoserhm... could you run 'ubuntu-bug eucalyptus' for me and pass me the link ?15:47
smoserthat way we'll get the euc versions15:47
smoserapport hoosk15:47
smoserttx,15:49
ttx1.6.2~bzr1136-0ubuntu115:50
ttx(don't have apport on that box, sorry)15:50
ttx(I know, I should)15:50
ttxsmoser: let me know the bug number when filed15:54
smoserttx, you can get it pretty easily: apt-get install apport-cli15:54
smoser:)15:54
ttxmeh, kinda busy right now, trying to scrub 60 bugs in 4 min15:55
smoserfair.15:55
* patdk-lap watchings the bugs scurry away from ttx, hoping to live15:59
ahasenackmathiaz: hey15:59
ahasenackmathiaz: when using puppet with ec2, how do you manage the certificates to bootstrap puppet in a script?15:59
ahasenackmathiaz: do you use autosign on the puppet master?15:59
mathiazahasenack: aha - good question15:59
mathiazahasenack: I'm about to investigate that issue16:00
mathiazahasenack: current plan is to allow autosigning16:00
ahasenackmathiaz: there are some alternatives, not all extremely scriptable16:00
ahasenackmathiaz: like pre-generating the certs on the master, or actually doing all this work in a script talking to two hosts16:00
mathiazahasenack: alternative is to provide the private key and publick key in the user data16:01
ahasenackmhm16:01
mathiazahasenack: IMO autosigning is the best option16:01
mathiazahasenack: what I need to check if wether the autosigning process can have hooks16:01
ttxmathiaz: I've been struggling with the pxe setup today :)16:01
ttxmathiaz: now I know that lighttpd cgi module doesn't pass PATH_INFO.16:02
mathiazahasenack: with the idea that before signing a cert request, it calls an external script to check wether the certname requested should be accepted16:02
ttxmathiaz: and I have patches for boot.py error reporting16:02
smoserttx bug 51384216:02
uvirtbot`Launchpad bug 513842 in eucalyptus "block-device-mapping in metadata has 'ephemeral' not 'ephemeral0'" [Medium,New] https://launchpad.net/bugs/51384216:02
ahasenackmathiaz: I don't remember seeing that feature, but it might be deep inside the ruby things16:02
ttxsince it fails quite badly when something happens16:02
mathiazttx: hm - I did my test with apache2 - I though that PATH_INFO was a standard CGI variable16:02
ttxmathiaz: it is in my book too16:02
mathiazahasenack: yeah -  I'm not sure if puppetca supports that16:03
mathiazahasenack: If not, I'll talk to upstream about implementing it16:03
ahasenackmathiaz: the idea about using user data sounds interesting16:03
ttxmathiaz: I'll switch to apache2, no big deal16:03
ahasenackmathiaz: I was hoping I could come up with a more general solution that didn't leverage on ec2, but it does sound nice16:03
mathiazahasenack: one of the hook is to verify if a node has already been allocated16:03
mathiazahasenack: ie if the puppet knows about the client and the requested name16:04
=== robbiew_ is now known as robbiew
mathiazahasenack: if there isn't any hook available in the signing process, then I'd suggest auto signing16:04
ahasenackmathiaz: for ec2 that doesn't sound too bad, since the network setup will only allow machines you specify to reach the master16:05
mathiazahasenack: yop16:05
ttxmathiaz: pxe chaining is a little tricky to debug... especially running dnsmasq on a linksys router.16:05
mathiazahasenack: the next problem is about node allocation16:05
ahasenackmathiaz: I have thought about that yesterday16:05
ahasenackmathiaz: you mean how to tell which node will become what?16:06
mathiazttx: don't you see the tftp request in the log?16:06
mathiazahasenack: yes16:06
ahasenackmathiaz: I think I have a solution16:06
mathiazahasenack: I've got *plenty* of solutions ;)16:06
ahasenackmathiaz: if you export a shell var like FACTER_something in the node16:06
ahasenackmathiaz: you can use $something on the master as the contents of that var16:06
mathiazahasenack: right - that's an option16:06
ttxmathiaz: tftp is alright... it's the chaining that fails (get the gpxe option, point to http://)16:06
ahasenackmathiaz: so I was planing in using that in the node statement on the master16:06
mathiazahasenack: another on is to the hostname16:06
mathiazahasenack: actually the certname16:07
mathiazahasenack: webserver.test1.16:07
ahasenackmathiaz: what is the certname?16:07
mathiazahasenack: ^^ I'm a webserver in test116:07
ahasenackisn't that just derived from the hostname?16:07
mathiazahasenack: not necessarly :)16:07
mathiazahasenack: you can set a specific certname when starting puppet16:08
mathiazahasenack: that helps in EC2 since ec2-init sets the hostname of the machine to what dhcp/metadata says16:08
ahasenackmathiaz: ok, but I suppose you can only have one certname in all your nodes16:08
mathiazttx: hm - what do you mean? what fails on the client?16:08
ahasenackmathiaz: I mean, it should be unique among the nodes16:08
mathiazahasenack: yes - hence the following trick: webserver.test1.%InstanceID16:09
ttxmathiaz: on a call16:09
ahasenackmathiaz: ok16:09
mathiazahasenack: and then you match on webserver.test1 in your puppet recipe16:09
ttxmathiaz: bbl16:09
ahasenackmathiaz: I was thinking about the node just saying "hey, I'm a node of type <foo>"16:09
mathiazttx: ok16:09
mathiazahasenack: right - that's what you're aiming for16:10
ahasenackmathiaz: then on the server I wouldn't need to include all the hostnames (or certnames) in the configuration16:10
ahasenackmathiaz: like, FACTER_role="ldap-slave"16:10
mathiazahasenack: yes - that's what a good way to do it16:10
ahasenackmakes it easier if I can have several machines with the same role16:10
mathiazahasenack: yop - I'd try that - I know some puppet user are exactly doing that16:11
ahasenackmathiaz: you said "match on webserver.test1", I suppose that requires puppet with regexp support, right?16:11
mathiazahasenack: they don't have any nodes defined, just use facts16:11
ahasenackmathiaz: I read somewhere that  only newer versions have that regexp support (i.e., not the one from hardy )16:11
ahasenackmathiaz: interesting16:11
mathiazahasenack: yeah - probably something like that - I'm not sure if it actually works16:11
ahasenackthe one from hardy can't even check for variable contents in the if/else statements16:12
ahasenackI had to resort to a case statement for that16:12
mathiazahasenack: the idea is to use the dns naming scheme to state the role of the machine16:12
mathiazahasenack: yeah - hardy is probably very old :)16:12
mathiazahasenack: you should try the one in lucid16:12
mathiazahasenack: :)16:12
ahasenackindeed16:12
mathiazahasenack: using something like: webserver.pool1.prod16:13
mathiazahasenack: to state that this is a webserver in pool1 in production16:13
ahasenackright16:13
mathiazahasenack: that being said you could also use facts16:13
ahasenackpoor dns16:13
mathiazahasenack: but you need to get the complete role description into the node somehow16:13
ahasenackI try to avoid messing with dns when certificates are in place16:13
ahasenackmathiaz: right, if I can match on just "webserver.pool", that works just fine16:14
ahasenackotherwise I will have to list all poolN possibilities if I want to grow16:14
mathiazahasenack: well - the problem with using the hostname in ec2 is that there may be a chance that the hostname will be reused16:14
mathiazahasenack: overtime16:14
ahasenackmathiaz: what do you mean?16:15
mathiazahasenack: thus the idea of including the InstanceId in the certificate name16:15
mathiazahasenack: well if you start/stop a lot of instances, you may get the same IP address again16:15
mathiazahasenack: in which case you'd end up with the same hostname16:15
ahasenackhmm16:15
mathiazahasenack: so you can't get the same hostname in *running* instances16:16
mathiazahasenack: but you could get the same hostname over a long period of time16:16
mathiazahasenack: that's why you need to have a real unique ID for each machine16:16
mathiazahasenack: InstanceID can play that role16:16
ahasenackmathiaz: do you plan to have two types of AMIs perhaps? One for the master and the other being a sort of generic one for whatever you want, just enough to bootstrap puppet and then let it configure the rest?16:17
mathiazsmoser: what's a standard hostname in an ec2 machine?16:17
ahasenackec2-foo-bar-bla.internal?16:17
rykeris there any way at all to get to an instance that is stuck in startup because of a typo in /etc/fstab for an unimportant mount point?16:17
mathiazahasenack: hm - I don't think we should two AMIs. My current plan is to document how to bootstrap a puppetmaster (via a puppet recipe)16:18
smoser$ hostname16:18
smoserdomU-12-31-38-00-45-0516:18
mathiazahasenack: may be provide a package in >lucid16:18
ahasenackmathiaz: create a puppetmaster with puppet?16:18
mathiazsmoser: is the hostname unique in ec2 overtime?16:18
mathiazahasenack: yes :)16:18
smoserno16:18
ahasenackmathiaz: so it starts as a puppet node and then becomes a master?16:18
smoserexternal fqdn: ec2-72-44-32-161.compute-1.amazonaws.com16:18
mathiazahasenack: you can run puppet in a standalone mode16:18
smoserinternal: domU-12-31-38-00-45-05.compute-1.internal16:19
mathiazahasenack: yes - you can ship complete puppet recipe and ask puppet to apply to the local system16:19
mathiazahasenack: that's how I would bootstrap a master16:19
smoseri guess i dont know for certain that the hostname is not globally unique.16:19
mathiazsmoser: ok - so to make the instance name unique, including it's IntanceID is enough?16:19
mathiazsmoser: what matters here is wether the hostname is unique *overtime*16:20
mathiazsmoser: over time16:20
smoserinstance-id is enough16:20
smoserafter i pated that internal, i checked. the mac on that machine is16:21
smoser12:31:38:00:45:0516:21
mathiazahasenack: ^^ so using the instance-id is enough16:21
smoserso they're just using that.16:21
ahasenackmathiaz: if your master is not long-running, this uniqueness should not be too much of a problem, right?16:21
mathiazahasenack: and then with a hook in puppetca you can check wether the instance id does actually exist before signing the certificate16:21
smoserthe obvious fact is that i-5e222c36 cannot be eternally globally unique16:21
mathiazahasenack: agreed16:21
smoserit is probably not cross-region unique16:21
mathiazahasenack: for test environement it's ok16:22
ahasenackmathiaz: hmm, we do something similar in landscape16:22
mathiazahasenack: as you can also purge certificates on the master16:22
ahasenackmathiaz: the client can auto-register when in cloud mode16:22
mathiazahasenack: basically the puppet master will *not* sign a request for a cert that has already been issued16:22
ahasenackmathiaz: because the server is able to verify it via the ec2 api16:22
ahasenackso16:22
ahasenackI was planning in just launching an instance with a user data script. One for a puppet master, one for puppet nodes16:23
patdk-lapttx, how did you test lighttpd that you say it doesn't do path_info? cause mine do16:23
ahasenackthen the certs gave me that headache16:23
ahasenackbut in ec2 autosign sounds reasonable16:24
mathiazahasenack: yes - especially in test environement16:24
mathiazahasenack: I'd argue to use the autosign in production env as well16:24
mathiazahasenack: especially if you use things like AutoScaling16:25
ahasenackit's a policy decision, it's good to have the option16:25
mathiazahasenack: but you'd need a hook to verify that the instance actually exists16:25
ahasenackcertainly when managing hundreds of machines you can't have manual signing16:25
ttxpatdk-lap: enabled cgi mod, ran a python script, os.environ["PATH_INFO"] triggers KeyError16:25
mathiazttx: did you try to dump of os.environ?16:25
patdk-laphttp://mx1.grsi.com/test.pl/test :)16:25
mathiazttx: that's usually how I check what's in there16:26
ahasenackmathiaz: when landscape starts an instance, it gives it an OTP via user data16:26
patdk-lapit shows path_info for me16:26
ahasenackmathiaz: so when the client later gets back to the server with that otp, we can verify it16:26
ahasenack(one time password)16:26
mathiazahasenack: yop - that standard keybased process - with a timestamp it's even better16:26
mathiazahasenack: and then you sign everything with a server key16:27
mathiazahasenack: so that you don't have to keep track of issued tokens16:27
mathiazahasenack: on the server16:27
ahasenacktimestamp + replay detection for the duration of the timestamp, that's how kerberos detects these attacks, right?16:27
mathiazahasenack: yop - I think so16:28
ttxpatdk-lap: I'll give it another try :)16:28
ahasenackmathiaz: ok, thanks for the discussion! :)16:28
patdk-lapsorry, lighttpd is my baby :)16:28
patdk-lapwell, not mine, but I have been helping with it for awhile16:28
mathiazahasenack: you're welcome - let me know what you find out16:28
mathiazahasenack: I'm about to right an upstart job to include in ec2-init to enable puppet integration16:29
mathiazahasenack: so that you don't have to use a user script anymore16:29
ahasenackmathiaz: ec2-init fires other initscripts ("upstart jobs") then?16:29
mathiazahasenack: kind of16:30
mathiazahasenack: ec2-init will emit a cloud-config upstart event16:30
ahasenackmathiaz: or is it just another job and ec2-init depends on it to complete?16:30
ahasenackok16:30
mathiazahasenack: and then the puppet upstart job starts on cloud-config16:30
mathiazahasenack: the key part is how to pass the role information to instance via user-data16:31
ahasenackmathiaz: so your job will take that information out of user-data and apply it to its local puppet client configuration, mangling, say, the certname?16:32
mathiazahasenack: hm I don't know yet16:33
mathiazahasenack: I'm leaning toward the following:16:33
mathiazahasenack: 1. you can specify a puppet certname in the userdata (ex: webserv.%i.%h.%d)16:34
mathiazahasenack: with %i substituted with InstanceID16:34
ahasenackok16:34
mathiazahasenack: %h for the hostname, and %d for the domain name16:34
mathiazahasenack: if it's there16:34
mathiazahasenack: 2. pass facts in the user data16:35
mathiazahasenack: and these facts would then be availabe16:35
mathiazahasenack: in that case, the certname would default to the InstanceID16:36
ahasenackmathiaz: can you "take over" user-data like that? I suppose yes, since the instance will be launched by you16:36
ahasenackmathiaz: just wondering if other scripts elsewhere don't expect to have their own stuff in user-data16:36
mathiazahasenack: yes - we already have a specific format for doing that16:36
ahasenackmathiaz: the bit from eric hammond or has it evolved?16:36
mathiazahasenack: it has eveloved16:36
ahasenackmathiaz: #!/ in first line versus plain data?16:37
ahasenackmathiaz: ah, interesting16:37
mathiazahasenack: yes - it's based on that16:37
mathiazahasenack: IIRC if user-data starts with #cloud-config then you'll trigger the ec2-init simplified configuration16:37
mathiazsmoser: ^^?16:37
mathiazahasenack: and then one option of the simplified configuration will be to use puppet16:37
mathiazahasenack: see https://wiki.ubuntu.com/ServerLucidCloudConfig for a sample configuration file16:38
ahasenackmathiaz: where do these discussions take place? ubuntu-server? I don't remember seeing them, and they are very interesting16:38
smoserthis is correct.16:38
ahasenackmaybe just uds?16:38
mathiazahasenack: we talked about them at UDS16:38
ahasenackah, ok16:38
mathiazahasenack: and then refined them in #ubuntu-server in december16:39
mathiazahasenack: and I also made an RFC on planet and ubuntu-server@16:39
mathiazahasenack: so the #cloud-config file format will be extend to support puppet specific options16:40
mathiazahasenack: such as puppet certname and puppet facts16:40
mathiazahasenack: to support both 1. and 2. use cases outlined above16:40
squidlywith the UCE cloud how have I tell if my nodes are connecting to my main server?16:40
mathiazahasenack: this is part of https://blueprints.launchpad.net/ubuntu/+spec/server-lucid-puppet-uec-ec2-integration16:41
ahasenacksounds very interesting16:41
ttxpatdk-lap: alright, path_info works... something else is borking it16:51
ttxmathiaz: gpxe doesn't seem too happy with the pxelinux.0 it gets a 302 for16:51
ttxmathiaz: i'll spend more time on it tomorrow16:51
ttxmathiaz: PXE input/output error when going through boot.py/pxelinux.0 302, works when loading /pxelinux.0 directly16:59
kirklandsmoser: monkeying with the uec image names again?17:03
* kirkland goes update the wiki pages17:03
smoserno17:03
kirklandsmoser: looks like -uec- was added in there17:04
smoseryeah.17:04
smoserthat happened prior to alpha217:04
smoseras i ahd removed the -uec-17:04
smoserand that caused pain for people as it name-collided with 'ubuntu-desktop'17:05
smoserso this is hopefully more final17:05
smosersorry17:05
kirklandsmoser: i have a euca instance running now17:08
kirklandsmoser: what would you like17:08
smoserttx got it for me. thanks though.17:09
beniwtvhey anyone has a problem where the recovery menu appears on shutdown?17:12
beniwtv(server edition, that is)17:12
EladI just added an alias onto my server so that it forwards all root mail to my e-mail, and I am getting this e-mail every 20 minutes but don't see a cron for it under the root user .. /usr/share/sendmail/sendmail: 1248: /usr/sbin/sendmail-msp: not found17:49
Eladas some background, I had originally set up the server to use sendmail, but then switched to postfix - Can I just use apt to remove sendmail or do I risk breaking postfix in some strange way17:54
lamontsee also /etc/cron*/*?17:55
lamontwhat does 'dpkg -S /usr/share/sendmail/sendmail' say?17:56
RoyKwtf. it's 2010 and people are still using sendmail???17:59
mjeansonkirkland: is it possible to have plymouth working ina kvm guest?18:08
rykerhate to ask a simple question like this, but what I've found online doesn't work for me.  How do I make a new hostname stick after a reboot?  Putting the name in /etc/hostname doesn't work.18:20
Eladlamont: sendmail-base: /usr/share/sendmail/sendmail18:29
lamontso something in that depends: sendmail, and fails to do so in the package, it would appear.18:31
lamontsince sendmail-msp isn't in sendmail-base...18:31
skotHi all18:35
skotI'm looking for a little help with a failed soft-raid array (ubuntu-9.10 -2.6.31-17 kernel- raid5 5-disks). I have got a replacement drive (A) but on adding it, another drive (B) is failing during the sync. It gets about 60% and then the new drive (B) gets marked faulty and the sync stops. Any suggestions?18:35
bogeyd6skot, is the drive faulty?18:36
skotyes. it seems to be. smartctl reports errors in the log.18:37
skotbogeyd6, the only thing I can think to do is try to make a byte-by-byte copy of the failing drive (B) to (A) (minus any corrupt data; if the disk will stay online long enough) and then try to recreate the array with (A) substituted in for (B). Can you think of another solution?18:44
bogeyd6I dont think so18:45
bogeyd6The drive has errors and you are trying to use it18:45
Eladlamont: think I should just be able to remove sendmail, and if it breaks something just put it back? I don't think anything relies on it . . .but could be wrong18:46
uvirtbot`New bug: #509734 in libnss-ldap (main) "initgroups() fails when using libnss-ldap (but not nscd)" [Medium,Triaged] https://launchpad.net/bugs/50973418:46
incorrectdamn phpldapadmin is b0rk3d18:46
skotYeah, unfortunately I have had a failure of 2 drive in a raid5 set. I don't what else to do but try to recover as many bytes as I can.18:49
incorrectskot, you sound kinda screwed18:50
skotincorrect, that is not so funny cause that is what I feel like.18:51
skot;(18:51
incorrectbackups!18:51
incorrectsaying that i need to make backups18:51
skotI hear you, I have backups (mostly) but putting them together is no fun; and I will never be sure I have it all back the way it was...18:53
incorrectskot, these days i virtualise everything18:53
skotFor the most part, that raid array was my backup of many other sources.18:53
zulyay samba has an apport hook18:53
skotincorrect, how do you virtualize disks? Somewhere there are going to be real drives. If you lose enough, you lose data.18:54
incorrectvirtual disks, you snap shot those somewhere else18:55
incorrectok it can take a bit of space18:56
skotincorrect, I should mention that this is my home system. I know is just a matter of money, I should have thrown N + 1 + 1 drives at the situation but I thought the odds on two disks going in the same week was low enough.18:56
incorrectthis is my home system too18:56
skotincorrect, well, I got bit this time. Thanks for listening. I will go off and recover what I can.18:57
incorrectgood luck18:57
kirklandmjeanson: sorry, I don't know anything about Plymouth19:00
mjeansonkirkland: I'm interrested in the boot messages and plymouth seems to be mandatory in lucid to display them19:03
kirklandmjeanson: why would plymouth not work in KVM?19:05
kirklandmjeanson: how can I tell if plymouth is working?19:05
mjeansonkirkland: never seen it working in any of my kvm, but you should get a graphical bootsplash and service startup messages19:06
erichammondmathiaz, smoser: The EC2 instance id is unique over all time.  Amazon will be changing the format/length of the instance ids before they run out.  I'm pretty sure instance ids are unique across regions, but have not confirmed this.  Host names are not unique over time.19:06
smoserhm.. i thought that instance ids would not be unique over regions19:07
erichammondsmoser: I suspect that the id includes an id or range assigned to the authority giving it out so that even a single region does not have a single source.  I'm not positive about this.  There was an article which took apart instance ids in an attempt to figure out how many were being started each day.19:10
erichammondsmoser, mathiaz: domU-12-31-38-00-45-05 is only one of a couple possible formats for internal hostnames for EC2 instances.  There is a different format based on the internal IP address.  Each instance only gets one of these, but it is somewhat arbitrary which one.19:11
erichammondEC2 also does not make any promises about hostname formats, internal or external.19:12
mjeansonkirkland: you're my kvm guru, I thought you may of ran into that but thanks anyway19:15
patdk-lapskot, make sure you try dd_rescue :)19:18
incorrectstupid installer created my extended partition the same size as a single parition19:21
incorrecturg19:21
incorrectwhat is the easiest way to scale a partition from the command prompt?19:22
incorrectok that was easy19:28
incorrecthow can i refresh /dev i am missing a disk19:31
incorrecterr partition19:31
kirklandmjeanson: hmm, i just boot a lucid vm19:32
kirklandmjeanson: i didn't see any boot messages19:32
kirklandmjeanson: but it booted in about 4 seconds though19:32
smoserincorrect, try udevadm trigger19:32
incorrectdidn't do it19:33
incorrectreboot ftw19:38
RoyKincorrect: as in reboot For The Windows-user?19:59
squidlyhow does a UCE system determine if there a enough resources for the vm?20:06
lamontElad: if you have postfix installed, you don't need any of sendmail (and it shouldn't need any of itself either)20:07
=== mcasadevall is now known as NCommander
Italian_PlumberI have this motherboard: http://tinyurl.com/ydtdjg6 running hardy server.  I have bought this PCI card: http://tinyurl.com/ydv29tc and this hard drive: http://tinyurl.com/yknn23p ... will I be able to put in the card and drive, and have Ubuntu recognize the device, or will it be likely that I'll need to install drivers?20:53
patdk-lapit will be fine20:55
mathiazjjohansen: hi - is the cciss compiled in the -generic kernel?20:58
mathiazjjohansen: I'm trying to install lucid on an HP server - these machines usually use the cciss module20:59
MTecknologyThis is irritating... I have a WinXP 64bit key but I can't use it in a VM beecause my BIOS won;t let me20:59
mathiazjjohansen: but the installer is not able to detect any drive20:59
patdk-lapMTecknology, then you don't have a real xp key, but an oem key20:59
MTecknologypatdk-lap: i have the real key on the pressed cd in my posession21:00
patdk-lapthat doesn't matter21:00
patdk-lapwhere did the cd come from? bought at the store in a windows xp box?21:01
patdk-lapor did it come with a computer?21:01
MTecknologypatdk-lap: yup21:01
patdk-lapwith a computer, it's no good21:01
MTecknologystore21:01
jjohansenmathiaz: cciss? I am not familiar with it but I don't find it as an option21:01
MTecknologyyou don't seem to know what you're talking about..21:01
patdk-lapI don't?21:01
Italian_Plumbersorry I had to get up from my desk.  patdk-lap: was your "it will be fine" directed at me?21:03
mathiazjjohansen: http://cciss.sourceforge.net/21:03
patdk-lapItalian_Plumber, yep, you shouldn't have any issues at all21:04
jjohansenmathiaz: we have CONFIG_BLK_CPQ_CISS_DA=m21:04
jjohansenCONFIG_CISS_SCSI_TAPE=y21:04
Italian_Plumberok... I"m going to to hold you to that. :)21:04
patdk-lapunless that card only supports sata 150, then make sure the drive is set to 150 only21:04
jjohansenbut I don't see a cciss21:04
Italian_PlumberMy controller card arrives tomorrow -- just in time for the weekend.21:04
jjohansenmathiaz: I'll poke around and see if I can figure out why21:04
Italian_Plumber150, 300... I don't care.  Space is my biggest issue.21:05
mathiazjjohansen: hmm - is it there on the karmic kernel?21:05
patdk-lapItalian_Plumber, ya card is only 150, so make sure you install the jumper on the drive to limit it to 15021:05
Italian_Plumberok I'll check.  Thanks!21:06
patdk-lapcciss                  97481  321:06
patdk-lapit's a module on my redhat system21:06
jjohansenmathiaz: karmic is the same thing21:06
patdk-lapcciss module exists in karmic desktop21:07
mathiazjjohansen: ok - I'm still tracking down which module should be used for the controller21:07
patdk-lapit's in -generic21:07
patdk-lap/lib/modules/2.6.31-17-generic/kernel/drivers/block/cciss.ko21:08
patdk-lapdunno about the install cd though21:08
mathiazpatdk-lap: that's on karmic?21:08
patdk-lapyep21:08
patdk-lapwant me to check hoary?21:09
patdk-lapit's in hoary also21:09
patdk-lapmaybe it's just missing from the install cd initrd?21:10
MTecknologypatdk-lap: what does the key I'm using have to do with wether or not I can run the 64bit os?21:10
patdk-lapMTecknology, microsoft is completely nuts about their stuff21:11
patdk-lapyou have to have the cd and key that go together21:11
patdk-lapand some cd's you even have to have the right computer that goes with it21:11
patdk-lapyou can't just use any win xp key with any win xp cd21:11
patdk-lapnow, running a 64bit os in a vm is totally different, normally your computer must support VT extentions on the cpu to do that21:12
MTecknologypatdk-lap: yup... now your on my page :P - proc supports that; bios doesn't allow me to enable that support21:14
patdk-lapwhat vm you using?21:14
MTecknologyvbox21:14
patdk-lapbios upgrade? :)21:14
MTecknologynone available21:15
patdk-lapyour completely screwed, it's not a win xp 64 or key issue21:15
MTecknologycoreboot - can't do that on this system21:15
techsupporti'm having trouble locating the download for ubuntu server 32 bit 9.1021:15
MTecknologyI never said it was21:15
patdk-lapit's just your bois won't let you21:15
MTecknologywhich is what I already stated21:15
MTecknology:P21:15
patdk-lapyou said your bios has issues with your win xp 64 key :)21:15
patdk-lapnot that your bios has issues turning on vm support21:15
patdk-lapvt support21:15
MTecknologytechsupport: updatedb; locate *.iso21:16
MTecknologypatdk-lap: 14:59 < MTecknology> This is irritating... I have a WinXP 64bit key but I can't use it in a VM beecause my BIOS won;t let me21:16
MTecknologybios won't let me21:16
techsupporti didn't download it yet21:16
techsupporti'm trying to download it21:16
techsupportlol21:16
techsupportfrom ubuntu.com or something21:16
MTecknologytechsupport: http://www.ubuntu.com/getubuntu/download21:18
techsupportit says desktop21:18
techsupportbegin download desktop21:18
MTecknologyAlternative download options, including Ubuntu installer for Windows21:18
techsupportand this one says 64 bit21:19
techsupportwhat the hell21:19
techsupporthttp://www.ubuntu.com/getubuntu/download-server21:19
techsupportwhere is the 32 bit server ?21:20
MTecknologytechsupport: Alternative download options21:21
MTecknologytechsupport: read the page21:21
techsupportsorry too much work lately21:25
mathiazjjohansen: ok - so cciss.ko is available in the lucid generic kernel as well: /lib/modules/2.6.32-11-generic/kernel/drivers/block/cciss.ko21:27
MTecknologytechsupport: I know the feeling21:32
dthackerHello, I'm having problems coming up with the correct /etc/sudoers syntax for this scenario.   Users hans, bob, and fred should be be able to run any command that can be run by username "produser"21:51
dthackerAh, I misread the record format.  This works     hans, bob, fred       ALL=(produser)   ALL21:54
MTecknologydthacker: you can make groups as well22:03
MTecknologydthacker: I think man sudoers explains it pretty nicely22:04
dthackerMTecknology: yes, one step at a time.  I'm still not getting the correct config.   I now get: "/usr/bin/ksh produser as root on my.local.host"22:05
dthackerargh22:05
MTecknologydthacker: I'd make a group called produser and add the users to that group; then give that group access22:06
MTecknologydthacker: not system group; sudoers group22:06
dthackerMTecknology: would that be "User_Alias     PRODUSERS= hans,bob,fred22:08
hsnhow to disable mysql from autostarting on boot?22:08
patdk-lapcorrect way? something with up init or something22:12
MTecknologydthacker: I thought the syntax was closer to -  User_Alias ::= NAME '=' User_List22:12
patdk-lappersonally I just do a chmod -x /etc/init.d/mysql22:12
MTecknologydthacker: could have changed though22:12
dthackerMTecknology: will re-read man pages22:13
dthackerdidn'nt see any double colons22:13
MTecknologydthacker: I'd also make an alias 'Cmnd_Alias' then just link the two down below22:13
patdk-laphmm, update-rc.d22:13
jjohansenmathiaz: yep, ccisss == cpq_ciss22:21
patdk-lapoh? cciss is gone in lucid? and replaced with cpq_ciss?22:22
MTecknologyI'm gone for 1/2hr - windows is still at the "preparing to dload sp3"22:36
* dthacker decides to build a test case for this at home on his server farmlet22:39
hsnpatdk-lap: yes, update-rc.d did it22:54
MTecknologyhsn: check out rcconf sometime; handy little tool22:55
stickystylehsn: I second rcconf, I have it on all my servers.23:16
glen1you know when you buy a song off amazon, how if gives you a link that works for that time buy expires23:17
glen1what is that called?23:17
hggdhripoff?23:18
glen1haha23:19
hggdhsorry. Long time I don't by a song off amazon, don't remember...23:19
glen1well if gives you a link but that link expires23:20
glen1so you can download it once but never again using the same url23:20
glen1how does it do that? does the actual location of the file move with each purchase?23:20
hggdhyes. I dimly remember you call contact them to reinstate it (if you have not yet downloaded the songs).23:20
hggdhI do not know. I would expect the location would be calculated based on the data on the HTTP headers23:21
glen1its not really to do with amazon, its just the concept. How do they give out a link that can expire23:21
patdk-lapgen1, on lighttpd it's call, secdownload23:22
glen1ohhh thats the money23:22
patdk-lapand there are many ways to do it23:22
patdk-lapentry in database that expires23:22
patdk-lapor many many other ways23:22
glen1i always wondered how, it interested me. thanks for pointing it out to me :D23:23
glen1so I guess it's used alot in ecommerce23:23
patdk-lapand other things23:23
patdk-laplike if you want to keep people from hotlinking files23:24
patdk-lapbut still want to let people download it23:24
patdk-lapmy company would use it, if they can get their act together, to give new employees their benifits and other documents23:25
glen1could you explain how it would be used in a company?23:25
patdk-lapheh?23:25
patdk-lapyou don't use it, just cause you can23:25
patdk-lapyou need a purpose for it23:25
glen1im looking through it, how does it authenticate the user?23:26
patdk-lapin my case, it would be so only that one user can download the info, without the problems of using authenication23:26
glen1I may try to run this on my own home server to learn23:26
patdk-lapthat is up to you23:27
glen1are there any other things similiar to this?23:27
patdk-lapin this example, nothing is authenicated, once you get that one time use url23:27
patdk-lapgetting that url normally requires somekind of authenication23:27
patdk-lapbut that is up to you to handle23:27
glen1ahh cool thanks23:28
Roxyhart0Hi I just installed ubuntu 9.10 for my server, but i had some problems to install openldap...somebody have good experience or bad experience with this ubuntu version?23:35
RoyKRoxyhart0: if you have problems with openldap, please explain them and someone might know. I and probably several others are running 9.10 for servers23:40
Roxyhart0Thanks..9.10 is no comming with slapd.conf and I dont know how to configurate manualy my Domain Name23:42
Roxyhart0somebody know how to configurate manually openldap on ubuntu 9.10 (is doesn't have slapd.conf file)23:58
Roxyhart0configure (sorry)23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!