[00:24] hello, I have one computer that I want to use as a router using iptables, once I set up the filters to accept information (from port 80 for example) how do I send it to server computer (which is connected through a network swtich)? [01:20] hello, I have one computer that I want to use as a router using iptables, once I set up the filters to accept information (from port 80 for example) how do I send it to server computer (which is connected through a network swtich)? [01:20] A *router* just sends packets to where they ask to go [01:21] ok, so how do I do that with iptables? [01:21] and where exactly would I send it to? [01:21] That behaviour is orthogonal to iptables [01:22] Hi, i have a question. to connect windows client with linux samba member server, do i need to use winbind? [01:23] ok, so how would I do it? and where would I send it to? The ipaddress on the server computer is 192.168.1.136, so how would I send it there? [01:26] I am trying to set up cups most howtos tell me to setup a samba share so windows can auto detect it etc [01:26] but can I just set a port on LPR like you do with print serving routers? [01:26] hi sabgenton, so you did it before. did you use winbind in you configuration? [01:26] Argh, I thought this was #netfilter, where I'm allowed to be an ass. [01:27] I wondered what was up with all the samba questions. [01:27] Roxyhart0: no I am a total noob [01:27] to cups [01:27] are u using ldap? [01:28] I connected a windows machine to a print server over a port using LPR [01:28] wanted to do something like that with cups [01:28] if posable [01:30] do I have to use samba with cups [01:30] image_q: I guess you are using masquerading ("NAT") to share a single public IP between a number of hosts. If this is the case, you need a DNAT rule to redirect connections to your masqueraded server. [01:30] to connect a windows machine [01:31] or use iptables and forward the packages [01:32] routers don't seem to use SMB for there print server things [01:32] Roxyhart0: where would I forward them to, like how do I access another computer through the network switch? [01:32] thats all [01:32] i am doing that and i did time ago but now is not working and dont know why...i got problems with winbind-idmap [01:32] twb: looking it upnow [01:33] yes, i my case my server work as router, so any IP form the NAT is forwarding to the LAN [02:04] I keep reading up documentation on turning a computer into a router but I can't find documentation on using your computer for a router via network swtich [02:04] all the documentation assumes you use a separate network card for every computer you want in your network [02:04] is there a way to use your computer as a router via network switch? [02:26] New bug: #519119 in autofs (main) "Transitional packages need some reworking" [Undecided,New] https://launchpad.net/bugs/519119 [03:21] New bug: #297121 in irqbalance (main) "irqbalance causes ksoftirqd to use 100% CPU" [Low,Won't fix] https://launchpad.net/bugs/297121 [03:49] hi do you know a command to chekk how the logs are changing on real time? i mean to do debug from a application? [03:50] Roxyhart0, tail -f /var/log/filename [03:50] thanks :) [04:14] Hello, I'm looking for some guidence in reference to doing pam auth using authnz_external and pwauth. Does anyone have a good reference because I cannot get it to work. [04:14] I just continuously get prompted for my password over and over again [04:22] \join #apache [05:03] hi [05:03] how to restart a ppp connection ? [05:07] poff, pon? [05:36] New bug: #519155 in libvirt (main) "package libvirt-bin 0.7.5-5ubuntu7 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/519155 [05:52] hi [05:55] is there an easy to follow setup and configure guide for a true webserver configure (apache, mysql, php, dns, email server, ftp server, etc) I officially hate the howtoforge guide for ubuntu server never seems to work once I'm finished following their guide [05:55] You have an odd definition of "true webserver" [06:00] ok i guess what i wanted to say would be a fully working webserver. all I can seem to get to work is internal networking and accessing the sites via the 192.x ips but if i use the real domains it fails [06:00] never hate this kind of issue when i was using gentoo [06:01] lwizardl: Are you behind a router? [06:01] yes [06:02] lwizardl: did you forward appropriate ports to your Linux host? [06:02] and i had forwarded all the ports listed such as 80, 8080, 22, 25, etc [06:02] lwizardl: Why are you running DNS btw? [06:03] just was following that howtoforge guide and figured it was needed [06:04] I've never seen that. Following a guide without a good understanding of what you're doing sounds dubious though. [06:05] Have you verified that your domain points to your network? [06:05] yeah i even tried to use zonedit for the domain and then point to the network ip from the isp [06:06] * ball blinks [06:07] err sorry name server [06:08] Can you ssh in from outside? [06:09] (using your fqdn?) [06:09] no [06:09] Does your router log the connection attempt? [06:09] in when i go to domain.tld it brings up the router login page [06:10] lwizardl: try from outside your LAN [06:10] only time i can do that will be in the morning [06:11] so i need to reconfigure the server tonight and then test again in the morning [06:11] Sounds inefficient. [06:11] yeah but this is not going to be some huge hosting company type server [06:12] its just my home page so I don't have access to other things like vpn accounts etc [06:12] or access to something other then my home network at all times [06:12] lwizardl: In that case your "true Web server" set up definitely sounds like overkill. [06:12] lwizardl: Do you at least have a static IP address? [06:13] yes my isp gives me a static ip [06:13] That helps then. [06:13] kinda would be dumb to use a dynamic always changing ip [06:14] lwizardl: Why are you running a mail server on it? [06:15] right now i am doing the base install on the server using the install cd and set it to install openssh server, lamp, [06:15] umm maybe so people can email me ? [06:15] lwizardl: That's odd. [06:17] lwizardl: what you're URL? [06:17] s/you're/your/ [06:17] * ball is tired [06:18] thats not something i am willing to share while i'm trying to configure the server [06:18] * ball shrugs [06:18] I can't tell you whether it loads in my browser then. [06:19] If I were you I'd have a friend from outside run nmap against your fqdn and IP [06:19] I have already said that I'm am doing the install again and its still installing [06:19] ...separately, then compare results. [06:19] so I 100% doubt anyone would hit it right now [06:19] Something to consider once you get your new OS installed. [06:22] ...also think about each of those components (MTA, DNS etc.) and whether you actually *need* to run them. [06:22] I have to go. [06:22] k thanks [07:20] Trying to preserver 355 days of uptime! Ssh is timing out and when I plugged in a monitor and keyboard I get "Login timed out after 60 seconds." Is there any hope for me? [07:21] *crying* [07:22] captbaritone: you could try to unplug the network cable in case it is network related. I would guess your box is having a very high load for some reason [07:22] Excellent idea [07:23] I fear I may have been linked to by some high traffic site (All the more reason to try to get back up as soon as possible) [07:23] perhaps it's time to sacrifice uptime, and just restart [07:23] but I'm SO CLOSE to a year! [07:23] captbaritone: if you are fapping over uptimes, then no, there's no hope for you [07:23] I guess so. High stability is better than high uptime ;) [07:24] twb: It just seems so cruel. [07:24] Here goes... restarting... [07:24] :( [07:24] * twb pats PFY on head. [07:25] You will... acclimatize to cruelty [07:27] sigh [07:28] fdisk failed [07:28] sigh again [07:31] You should probably be using parted or cfdisk unless you're being clever [07:35] i need to install an domain member server to as file server to be accesed by windows machine. Someone have any good documentation? [07:50] Roxyhart08: what documentation have you already tried? [07:54] i tryed this one:http://us1.samba.org/samba/docs/man/Samba-Guide/unixclients.html#ch9-sdmsdc but i got this message uid_to_sid: winbind failed to find a sid for uid 0 [07:55] Roxyhart08: did you try the Ubuntu server guide? [07:56] but i didn find DMS [07:56] just backup domain server and i dont to do that because the PDC is very old with different distrbution [09:06] Authentication on ssh login takes like forever lately. Any ideas what might be wrong? [09:10] <\sh> adac: dns reverse lookup? [09:11] \sh, well if i do ssh -vvv then It seems to be stuck on 'debug1: Entering interactive session.' What is dns reverse lookup? [09:12] Hi, I am setting an domain member server and for some reason when i try to login form windows client is is not taking the user that i wrote instead take the user machine. any idea? [09:19] \sh, I set now 'UseDNS no'. Seems to have no effect [09:21] \sh, ok I removed now the debug output. It worked. Seems to get a lot faster now with reverse dns disabled. thx for the hint! [09:23] <\sh> adac: fix your DNS ;) [09:24] \sh, well which one? "When connecting to an OpenSSH server, one of the first things that the server does is to perform a reverse DNS loopuk on the client’s IP" So It guess the problem relies on client side? [10:03] If the server is resolving the client's IP, why would that be a problem on the client side? [10:07] hi all [10:07] can someone explain me shortly what is Ubuntu cloud? [10:08] !cloud [10:08] bah. [10:09] Presumably it's just a wanky name for eucalyptus on Ubuntu. [10:09] eucalyptus is a FOSS knock-off of Amazon's EC2. [10:09] ah [10:10] so - is functions of UC similiar to Xen Cloud ? [10:11] I suspect that "cloud" is this week's buzzword, and its operational meaning is "I am a lying bastard salesdroid" [10:11] xDD [10:12] is services migrates between physical hosts? [10:13] inkvizitor68sl: see http://en.wikipedia.org/wiki/Cloud_computing [10:14] %) [10:14] i readed all of it) [10:25] any reason why recent updates have been kept back? linux-generic linux-image-generic linux-restricted-modules-generic [10:26] da65: kept back by what command? [10:27] ran upgrade and just got that message [10:27] da65: the way certain kernel upgrades (bumped version number) works is that you get an actual new packages. A normal apt-get upgrade won't install any new packages (as depenencies), try apt-get dist-upgrade instead. [10:27] da65: aptitude upgrade is deprecated [10:27] kk, ty [10:29] yeah, wants to install [10:29] safe? For a web server? [10:30] what happened to apt-get upgrade? [10:30] Nothing [10:30] I hate change :) [10:30] I recommend the mezozoic, then [10:31] lost me, still noobish here! [10:31] ty for Ubuntu server btw, great stuff [10:31] It's not my fault [10:31] hope not [10:32] 130mb, seems large? [10:33] not going to mess all settings will it [10:33] Oops, the mesozoic was actually a terrible suggestion [10:33] pinch of salt comes to mind :) [10:34] I might leave it, if it's not a security thing [10:35] is there a command to remove all packages that are not required for just a web-email server? [10:36] if that makes sense [10:38] Perhaps you want deborphan or debfoster [10:38] are they nice girls, :) [10:39] No comment [10:39] lol [10:44] actually that sounds terrible, sry [11:54] any reason for why I cant find hb_gui? playing around with pacemaker-corosync, but I can seem to find this utility [11:57] I've installed pacemaker-openais and not pacemaker-heartbeat, is this maybe the reason? [12:21] any comments on what to choose for production usage; pacemaker-openais or pacemaker-heartbeat? [12:21] hi i am configurin a samba member server and the groups permision is not working when a windows client try to access. getent group is fine. any idea ? [12:25] somebody has working with samba as file server? [12:37] Roxy, I had lots of issues with that too. I ended up just sharing the folders and Drives that I needed to under Nataulus and used my main name and pass to access the files [12:38] but i need to give access to differnet groups of users to different folders [12:41] Ahh, I understand. I tried many ways and still it wouldnt work [12:42] i dont understand why is not working...before was working and when i changed the samba verisn doesn't work any more [12:42] i think it is a bug [12:49] hey Tek-5-8-6, which distribution did you use [12:50] i just want to know if anybody in the room try to do the same and it work? i mean Domain member server and group permision? [12:50] tek-5* i mean wich ubuntu version [12:57] morning [12:57] no body? [13:13] hi, i just want to know if anybody in the room try to do the same and it work? i mean Domain member server and group permision? befor i change ubuntu for another distribution??? [13:19] Hello. [13:20] Any idea how to make unnatended upgrades actually upgrade the installed packages? [13:33] when i mount my usb in linux and then goto windows. in windows part it has character problems. how i can solve this. [13:57] New bug: #366427 in mysql-dfsg-5.0 (universe) "errore segnalato dal sistema, l'ho appena aggiornato" [Undecided,Incomplete] https://launchpad.net/bugs/366427 [14:01] anyone who can provide me with some help with corosync. I've put up corosync.conf (http://pastebin.org/88842), but I get Feb 09 14:57:56 corosync [MAIN ] parse error in config: No interfaces defined [14:01] Feb 09 14:57:56 corosync [MAIN ] Corosync Cluster Engine exiting with status -9 at main.c:918. [14:10] smoser: ping [14:10] here [14:10] have you seen this bug ? bug 505482 [14:10] Launchpad bug 505482 in euca2ools "euca-bundle-vol dies with "Invalid cert"" [Undecided,New] https://launchpad.net/bugs/505482 [14:13] i hadn't seen it. i'll have to take a look at it. [14:14] hi someone has done a samba domain member server? [14:34] smoser: k [14:43] hi, how would i extract a gz file ? [14:43] oru_work: gunzip file.gz [14:45] Pici, hmm, i did that now i have a .tar file :) [14:46] oru_work: you didn't say it was a tar.gz file. Normally, you would do tar xzvf file.tar.gz but now you can just do tar xvf file.tar [14:47] sorr [14:47] oru_work: no need to apoligize :) [14:48] i keep forgetting the options for tar [14:56] what is the difference between these two /etc/php5/apache2/php.ini [14:56] /etc/php5/cli/php.ini [14:56] ? [14:57] cli is for commandline php and apache2 is for webserver php, I think [14:58] Indeed [14:59] well im installing this program called vTiger CRM and the installation page tells me this http://pastebin.com/m626cb117 [15:00] and i have memory_limit set to 128 in /etc/php5/apache2/php.ini [15:10] hi guys when I try to restart apache am getting the following errors http://pastebin.com/m5af340b7 === andreas__ is now known as ahasenack [15:41] what happened to the daily server builds for Lucid? [15:54] good morning. What is the best way to use USB drives in ubuntu-server, to make insertion/removal simple? [16:22] jjohansen, ping [16:22] smoser: whats up? [16:22] https://launchpad.net/ubuntu/+source/linux-meta-ec2 [16:23] that has 2.6.32.301.2 [16:23] which isn't getting 2.6.32-302 linux-image [16:23] Italian_Plumber, not sure about ubuntu server but in desktop everything works automagically, so you may want to try and mimic how desktop does it [16:23] which is what is current now. [16:25] Question, how were you able to pull from the drive if the drivers would not read it anymore? [16:25] smoser: hrmm, okay. Sounds like the reference wasn't bumped, will have to make sure it is done for the next kernel update [16:25] i made the tech team close some old tickets and i get dumb replys [16:26] jjohansen, well, can we kick it ? everything is based on that getting updated. [16:26] my build scripts wont get the new version now, unless i manually hack some things. [16:27] smoser: yeah will look at it [16:27] is there a good program out there that will stop people from attempting to brute force my ssh port? I was thinking about writing a quick php script that would do it, but if there is a better solution I may use it [16:29] php? [16:29] I would write a php cron that parsed the most recent log and then would add the person to iptables [16:30] if they had more than 3 offenses or something [16:31] take a look at sshguard [16:33] Elad, [16:33] thanks, I am looking into it [16:35] smoser: thanks, I am going to try it out [16:47] New bug: #517574 in net-snmp (main) "Please backport agent/mibgroup/host/hr_swrun.c to 5.4.1" [Wishlist,Incomplete] https://launchpad.net/bugs/517574 [17:20] Hi everyone. I just build a machine to use as a home server and am using two 500GB drives that I'd like to setup using Raid 1. When I am doing an install of Ubuntu Server, is there a recommended way I should partition the disks? Ex: a partition for just the OS, another for users, etc? [17:43] how can I change the default character set of a database to UTF-8 using phpmyadmin ? [17:47] oru_work: I'm not sure about phpmyadmin, but from a mysql prompt you can do ALTER DATABASE mydatabase CHARACTER SET = 'utf8' ; [17:49] ZimCS: Making /home be a separate partition for user data is very common and usually a good idea. How much more complex than that you get is up to you. [18:03] how can I add a folder with its contents to a .zip ? [18:03] how can I archive a folder with its contents to a .zip ? [18:06] jmarsden, thanks. like i said it's only for home use. at some point maybe host my site when my free hosting runs out [18:06] can someone help me to configure properly configure samba here ? [18:21] tottto-drummond: i've done it before, just look on google. there are lots of good samba help websites [18:22] ZimCS I ve tried that option but I can t figure out and understand exactly how to do it [18:38] mathiaz: yo! [19:44] soren, ping [19:59] i'm feeling very lost...anyone know of a good tutorial/starting point that i can use to learn about administering a LAMP server and creating dynamic content once i have it set up? [19:59] right now i'm following directions on https://help.ubuntu.com/community/ApacheMySQLPHP#To%20install%20the%20default%20LAMP%20stack%20in%20Ubuntu%207.04%20%28Feisty%20Fawn%29%20Ubuntu%207.10%20%28Gutsy%20Gibbon%29%20Ubuntu%208.04%20LTS%20%28Hardy%20Heron%29,%208.10%20%28Intrepid%20Ibex%29,%209.04%20%28Jaunty%20Jackalope%29%20and%209.10%20%28Karmic%20Koala%29 [20:00] (sorry for the long link) [20:05] ehnde: have you seen https://help.ubuntu.com/8.04/serverguide/C/web-servers.html ? [20:07] guntbert: no i have not, but that is exactly what i was hoping for [20:07] tyvm [20:09] ehnde: nice - the serverguide is always a good source - btw there is a version for newer releases too ( s /8.04/9.10/) [20:10] oh good! i'm running 9.10 [20:20] smoser: wazzup? [20:20] i think i forgot what i was going to ask. let me think. [20:20] oh yeah. [20:20] Make something up. [20:21] how were you planning on figuring out if a newer "base ami" was available for a rebundled image (https://wiki.ubuntu.com/EC2UpgradesSpec) [20:22] Ah. [20:22] To see if it's rebundled, I'd go through the ancestor list and see if any of them are in the /all thing. [20:22] If it is, and it's not the newest one, there's an update available. [20:23] ancestor list ? [20:23] Yes. [20:23] It's actually what the pseudo code in section 6.2 does. [20:24] Part of an instance's meta-data is its ancestors. [20:24] If you run ec2-bundle-image from within EC2, it'll embed the AMI of the current instance in the new image's meta-data along with the current image's ancestor list. [20:25] and otherwise the field isn't present [20:25] Since we build everything from scratch, you may never have seen this happen. [20:25] yeah,, i'd never noticed it. [20:25] probably not bundle-image, but bundle-volume would do that [20:26] you have any ideas on a better way ? [20:26] Why? [20:26] as i dont think we can really rely on that , especially as I suggest people dont use bundle-volume [20:26] :) [20:26] What do you suggest they use? [20:27] our tarballs [20:27] or vmbuilder [20:27] So they'll never be making rebundled images. [20:27] :) [20:27] Simple. [20:27] i tihnk it is borderline assassin to believe you can bundle up a booted instance. [20:28] its just going to be filled with gotchas [20:28] People do it /all/ the time. [20:28] people shoot themselves all the time. it doesn't mean i would recommend it. [20:28] No shit. That's how people make rebundled images. We (and Eric) are the only people crazy enough to always start from scratch. [20:29] s/crazy/anal/, if you please. [20:29] I'd never, ever recommend rebundling either. [20:29] i know. but eric is publicly suggesting to start with our tarballs. [20:29] Right. [20:29] I just know that people do it. [20:29] ...and this mechanism is meant as a tool for them. [20:30] If people use other means for creating images, we need a different mechanism for telling them about upgrades. [20:32] smoser: Welcome back. :) [20:32] yeah [20:32] (/me dropped ... stupid wifi module) [20:32] smoser: What was the last thing you saw? [20:32] If people use other ... [20:32] and then i said "i'm thinking that embedding that information in the image might be the right way to do it." [20:32] Ok, then you didn't miss anything. [20:33] Ah. [20:33] What information, exactly+ [20:33] ? [20:33] well, enough to determine what you were, given nothing else. [20:33] so right now [20:34] http://paste.ubuntu.com/372722/ [20:34] Why will that be any better/different? [20:34] because unless its deleted it would stick [20:34] is the /dev/mapper/foo_unformatted entries supposed to go away by themselves after a while? [20:34] if its deleted, thats an explicit action by the user. [20:35] I don't think I follow. [20:35] so in that pastebin, there are some "variables" at the top. [20:36] Right. [20:36] of those, a booted system is able to figure out all bug [20:36] but [20:36] spin, release-line (which i woudl jsut assume is 'release'), release name, image type [20:37] wait, and it can figure out image type [20:37] Right. [20:37] so i'd put something into /etc/cloud that said "spin=server" [20:37] Ok. [20:38] i think ih ave to put name in too [20:38] where name is a serial (YYYYMMDD) [20:38] ok [20:40] so then, given information in the system you could figure out that there were released images with serials newer than yours [20:41] Right. [20:41] The "spin" thing is new since I wrote that spec, obviously. [20:42] That will inevitably require additional in-image information. [20:44] I think I'm confused. [20:44] :) [20:44] What was the question again? [20:46] My goal back then was to avoid putting anything in the filesystem. Because I could. [20:47] When you say that Eric recommends people use our tarballs, what do you actually mean? Do people download the tarballs, loopback-mount the images, fiddle around, unmount, bundle, upload? [20:49] soren, yes. http://alestic.com/2010/01/ec2-ebs-boot-ubuntu [20:50] soren, i guess 'spin' doesn't require it you could make guesses based on presense of a package [20:51] do you think it reasonable to put that information in. outside of rebundling, it would allow currency to work for uec [20:52] How would it work for UEC? [20:52] I don't like guessing based on packages. [20:53] me neither [20:53] I'm sure it will break things. [20:54] for uec, the booted instance would have access to enough info to figure out if they were using the newest serial for a given suite, spin, arch [20:54] what do you think will break things ? [20:54] Guessing spin based on packages will break things. [20:54] yeah [20:55] outside of an explicit package "uec-server". or "uec-desktop" [20:55] Yeah, the more I think about that, the more ways in which it'll break come to mind. :) [20:56] ..if we're doing that, we might as well put it in a file in /etc/cloud or whatnot. [20:56] Anyhow.. back to the uec thing.. [20:56] I don't quite understand, still. Where would it get this information from? [20:56] Err... [20:56] I mean... Where would it look up its currency? [20:57] it'd look up currency from uec-images (where i plan to put a tree with such data) [20:58] ..but that information maps the suite, spin, arch, etc.-tuple to ami's and such? [20:58] amis and serial [20:58] Hm... Right, ok. [20:59] and you canfigure out that yoru serial is < available serial [20:59] Right. [20:59] Ok. [21:00] smoser: On a completely unrelated note, UPS claims my laptop will be here by noon tomorrow, so less than 14 hours from now. w00t! :) [21:00] wow [21:01] that $200 got it there faster than the $9 [21:01] :) [21:01] Imagine that :) [21:01] other unreateld note [21:01] i got my smart card reader, plugged in card. [21:01] 'gpg --card-status ' works for root, but not smoser [21:02] how do you set permissions ? probably thats per-reader udev rules [21:02] Ah. [21:02] gnupg2 ships some udev rules. [21:02] Your reader might not be included. [21:02] i've never seen gnupg2 [21:02] You're very likely using it. [21:03] well that package was not installed [21:03] just gnupg [21:03] gnupg-agent? [21:03] no agent either [21:03] Oh. [21:03] You want that for sure :) [21:04] i had agent on a remote system, but not laptop [21:06] well, that didn't magically fix things . oh well. [21:06] poke at it later. [21:30] This thread http://ubuntuforums.org/showthread.php?p=8800818#post8800818 is server related -- not a "general help" question -- I thought I'd ask if anyone here might take a look at it. It's an apt-cacher question. [22:00] How do I configure Ubuntu-Server as a Mail Server [22:17] leave [22:20] hello to all. does anybody know if the package gforge can be installed and hacked on the server like any other package too. [22:20] I mean if i install gforge do i get the php sources or only the binarys ? [22:20] I need the php sources to change some things how gforge behave. [22:24] maybe someone know a full open source simpler alternative to gforge ? how about launchpad ? is this open source ? does something simmilar exist as open source ? [22:28] okay think have found it. wikipedia has delivered the answer. [22:28] i need to use fusionforge. [22:35] Is it possible to run UEC on a hardy host ? [22:35] which DHCP server package would you suggest me to install? [23:02] which DHCP server package would you suggest me to install? [23:11] New bug: #507664 in mysql-dfsg-5.1 (main) "package zabbix-server-mysql 1:1.6.4-2build1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,Incomplete] https://launchpad.net/bugs/507664 === dendrobates is now known as dendro-afk === RoAk is now known as RoAkSoAx