[00:46] !LAMP [00:46] LAMP is an acronym for Linux-Apache-MySQL-PHP. However, the term is often used for setups using alternative but different software, such as Perl or Python instead of PHP, and Postgres instead of MySQL. For help with setting up LAMP on Ubuntu, see https://help.ubuntu.com/community/ApacheMySQLPHP - See also the Server CD installation process (different in Edgy+) === rberger_ is now known as rberger [00:57] New bug: #531076 in eucalyptus "Remove workaround in euca-describe-images that requests all images even if an image id is specified" [Undecided,Fix committed] https://launchpad.net/bugs/531076 [01:06] New bug: #373387 in vm-builder (universe) "runs chpasswd without -m prior to jaunty" [Undecided,Triaged] https://launchpad.net/bugs/373387 === dendrobates is now known as dendro-afk [01:18] "Ext4 also adds support for date-created timestamps." [01:18] Suppose I'm using ext4. Presumably it automatically sets creation timestamps without me needing to change anything. [01:19] Is there a way to inspect them (e.g. debugfs)? === dendro-afk is now known as dendrobates [02:08] Hello [02:08] any one? [02:10] hhhhhhhhheeeeeelllllllllloooooooooo === tommy_ is now known as Guest78440 [03:31] New bug: #531111 in euca2ools (main) "euca2ools generates an image that cannot be connected using ssh" [Undecided,New] https://launchpad.net/bugs/531111 [04:20] New bug: #529411 in postfix (main) "package postfix 2.6.5-3 failed to install/upgrade: alamprotsess installed post-installation script tagastas l?petamisel veakoodi 75" [Undecided,New] https://launchpad.net/bugs/529411 [04:26] New bug: #531123 in tftp-hpa (main) "pxe boot with tftpd-hpa failed with error: Forbidden Directory" [Undecided,New] https://launchpad.net/bugs/531123 [04:36] New bug: #530555 in clamav (main) "package clamav-freshclam 0.95.3+dfsg-1ubuntu0.09.10 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100" [Undecided,New] https://launchpad.net/bugs/530555 [06:17] planet or venus? [06:18] pwnguin: you what? [06:18] ive decided my front page is terrible enough that i will replace it [06:18] and im wondering whetheer anyone likes planet versus planet-venus [06:19] the plan is to take up a bunch of RSS feeds related to me and aggregate them on my homepage [06:20] currently im leaning towards venus to get some relevant practice with django templates [06:20] pwnguin: is this some kind of blogospeak? [06:20] twb: its web 2.0 baby [06:20] Hello, I need help with LDAP setup [06:20] I followed the guide on https://help.ubuntu.com/9.10/serverguide/C/openldap-server.html [06:20] so, on the ldap server itself, things are working fine [06:21] yet I attempted now to make another machine to access the LDAP server [06:21] pwnguin: if it were me, I'd go with something along the lines of ikiwiki/sphinx/gitit [06:21] so I installed libnss-ldap & configured ldap-auth-config [06:22] the problem is that it doesn't work, and I keep getting this in /var/log/auth.log: nss_ldap: failed to bind to LDAP server ldapi:///192.168.1.202:389: Can't contact LDAP server [06:22] I can't figure out the reason, although I was able to do: telnet 192.168.1.202 389 [06:22] Erm, isn't ldapi for sockets? [06:22] Use ldaps or ldap. [06:23] twb: I tried ldap:// too, same thing [06:23] Use ldapsearch instead of nss_ldap during testing [06:23] ok [06:23] twb: im not really interested in CMS for this project. it's more like, I already do things on websites with good RSS feeds so it seems possible I could snag them all for content [06:24] Something like this: ldapsearch -x -D cn=admin,dc=example,dc=net -H ldap://127.0.0.1 [06:24] pwnguin: those aren't CMSs [06:24] ikiwiki isn't a wiki? [06:24] pwnguin: they're ways to take text and turn it into wankerriffic, but still static, HTML [06:25] So you don't need any of that bullshit "web app" crap [06:25] meh [06:26] sounds great for the antisocial [06:26] pwnguin: bingo [06:26] twb: what does -xLLL mean ? [06:26] AnAnt: it means something like "actually work" [06:26] but its really annoying when someone writes an ikiwiki page and leaves no decent way to contact the author [06:27] pwnguin: that's what email is for. [06:27] assuming they publish one [06:27] If they don't, they're an ass. [06:27] It'll be in db.debian.org or keys.mit.edu or whatever anyway [06:28] twb: ldapsearch -x -b "dc=example,dc=com" works [06:28] but -D gives this:ldap_bind: Server is unwilling to perform (53) additional info: unauthenticated bind (DN with no password) disallowed [06:29] AnAnt: OK, we need to step back a bit. [06:29] AnAnt: do you want anonymous binds, or what? [06:30] Binding as the privileged LDAP account over a non-SSL connection is *really* bad juju. You're trusting root on the client machine, AND the network between them. [06:31] you could add a startTLS option [06:31] True. [06:31] if you're worried about ssl overhead [06:31] I see [06:31] well, let it be anonymous then [06:32] but you're probably only using ldap for passwording [06:32] For me, the overhead was "I don't want to waste time learning how to make valid certificates right now" [06:32] heh [06:32] its easy, you follow a nine step process and hand over money to thawte [06:33] pwnguin: if you're using RFC 2307 and no ppolicy overlay, you can't use passwd to reset your password on the client machine *unless* the client's root user has privileged access to the LDAP database. [06:33] pwnguin: I meant valid within a segregated network, not valid for Firefox users [06:33] twb: ok, on the other machine, I run: ldapsearch -x -b dc=example,dc=com -H ldap://192.168.1.202, and that works [06:34] SSL's trust model is basically like GPGs, but with extra annoying complications I didn't want to deal with. [06:34] twb: ah. then you start your own CA [06:34] pwnguin: right. [06:34] you could probably do it with puppet [06:34] twb: so why is LDAP authentication working on the server but not the other machine ? [06:34] The network in question *was* a trusted network, with very strong physical security, so I just gave up on SSL until I get some more budget. [06:35] AnAnt: i know enough about ldap to get us all in trouble, but might there be a firewall? [06:35] AnAnt: probably because on the server, ldap.conf and ldap.secret (the client config) have a valid, privileged bind account details. [06:36] s/i know/i only know/ [06:36] twb: I diffed between the ldap.conf on client and server, and only found this difference: [06:36] I know enough about LDAP to think of NIS fondly. [06:36] hi [06:36] I need help on Tomcat Client Deployer. Can someone guide me please ? [06:36] the endgame at work appears to be activedirectory =( [06:37] nss_initgroups_ignoreusers avahi,avahi-autoipd,backup,bin,couchdb,daemon,ebox,games,gdm,gnats,guest,haldaemon,hplip,irc,kernoops,.... [06:37] pwnguin: acute dysentry is a whole extra layer of hurt [06:37] AnAnt: you can ignore that [06:37] fortunately the local user group just gave a talk on tying PAM to AD [06:37] so what's the problem then ? [06:37] which i deftly recorded [06:37] AnAnt: I don't know. [06:38] twb: what about this -D thing ? [06:39] twb: ldapsearch -x -D "dc=example,dc=com", doesn't even work on the server, is that an issue ? [06:39] AnAnt: -D is the account to bind as [06:39] It takes the ldap equivalent of "root" [06:40] ok [06:41] New bug: #531150 in php5 (main) "libapache2-mod-php5 is no longer working correctly on lucid" [Undecided,New] https://launchpad.net/bugs/531150 [06:41] New bug: #531151 in php5 (main) "libapache2-mod-php5 is no longer working correctly on lucid (dup-of: 531150)" [Undecided,New] https://launchpad.net/bugs/531151 [06:41] twb: should a DNS server be installed on the LDAP server [06:41] AnAnt: it doesn't matter. [06:42] At least, it doesn't if you're using ldap:// rather than ldap:// [06:42] yup I am using ldap:// [06:42] The data *in* the database, i.e. dc=example,dc=net, doesn't have any relation to your domain name, except by convention [06:43] You could just as easily call it dc=i,dc=like,dc=waffles [06:43] (Note: some exceedingly stupid scripts might ASSUME that your IP domain matches the LDAP domain, and most will default to that.) [06:48] silly me !!!!!!!!!!!! [06:48] ldap:///192.168.1.202 !! [06:50] checking in again for my query ? [06:51] kaushal: I answered your query in -java [06:51] kaushal: Also, please try one place at a time. [06:52] persia: ok [06:59] twb: sorry for the bother ! [07:00] AnAnt: This is also a support channel for server-specific stuff. It's no bother: please ask again (and others learn from backscroll) [07:01] persia: well, the thing is that I was blind: ldap:/// instead of ldap:// ! [07:01] AnAnt: np [07:01] It's because ldapi:/// is the default [07:01] the last slash being the root directory [07:01] ah ! [07:56] irc://quakenet/ [08:06] New bug: #531180 in ntp (main) "package ntp 1:4.2.4p8+dfsg-1ubuntu1 failed to install/upgrade: " [Undecided,New] https://launchpad.net/bugs/531180 [08:08] how do i pass each line of text out of this command to an command as an argument? find . -mmin -60 -type f -exec echo {} \;|cut -d/ -f2 [08:08] find . -mmin -60 -type f -exec echo {} \;|cut -d/ -f2 [08:09] its late... find . -mmin -60 -type f |cut -d/ -f2 [08:33] checking in again for my query ? [08:37] found the answer for anyone who is interested! [08:38] find . -mmin -300 -type f -exec sh -c 'echo $1 |cut -d/ -f2|xargs ' {} {} \; [08:42] it seems that the packages dovecot-postfix does not do what it claims because there is no SASL backend working for SMTP (there is no 250-AUTH PLAIN LOGIN) [08:42] althought all the config files by default seem to be right [08:59] ttx: ping [08:59] lifeless: pong [09:00] eucalyptus on one machine [09:00] I replied to the bug [09:00] but I thought real time might be more efficient [09:00] lifeless: I didn't even know that was possible, tbh :) [09:00] in short, it works fine, upstream are wrong - don't understand iptables or something. [09:01] lifeless: interesting, maybe we should keep your bug open, just at a lesser priority (we are busy fixing the recommended use cases right now) [09:01] I realise some scripts will need a little tweaking to distribute the keys properly etc in this layout, but I think its well worth the reward of making it work by default, rather than folk having to find my blog post, read my wiki edits and manually fix it up. [09:02] For my next trick I'm going to get it running on my networks DHCP & DNS server. [09:02] which I anticipate might be a little tricky. [09:02] lifeless: ack, I'll un-invalidate your bug -- it's just a lesser priority for us to support that mode, so we cannot commit to fixing this for lucid [09:02] sure. [09:02] wishlist it [09:02] lifeless: ok, and thanks for your testing, btw :) [09:02] de nada [09:03] I needed UEC to work for me so that I could develop the hudson UEC support. [09:03] which dx need. [09:03] and as I only had the one suitable machine :- I just assumed bugs and did it. [09:20] I have a question about LDAP authentication. LDAP user "joe" logged on machine A. After some while, machine A got disconnected from the network, hence "joe" cannot login to A, since A cannot fetch the login info, is there a workaround this issue ? [09:46] well, I was wrong. Package dovecot-postfix works and you get the AUTH LOGIN PLAIN if you use STARTTLS [09:46] hi [09:46] anyone using Tomcat Application Server ? [09:47] At the moment, I stop,kill tomcat and scp the war to webapps folder and start tomcat server. is there a better way to do it ? [09:53] Anyone who can confirm that DRBD is broken with latest Lucid update (kernel 2.6.32-15)? FATAL: Error inserting drbd (/lib/modules/2.6.32-15-server/updates/dkms/drbd.ko): Unknown symbol in module, or unknown parameter (see dmesg) [09:56] New bug: #531216 in mysql-dfsg-5.1 (main) "Ubuntu 9.10 Server x86_64 - mysql crashes 'ERROR: The partition with /data/mysql is too full!' but there are at least 16 GB free on each partiton (boot and data)" [Undecided,New] https://launchpad.net/bugs/531216 [09:57] pts_: drbd needs update in lucid [09:57] pts_: which version are you trying to load? [09:58] 8.3.3? [09:58] 8.3.7 is on the way... [09:58] correct [09:59] Guess I should use the one in Ubuntu-HA repo [09:59] bug 524594 [09:59] Launchpad bug 524594 in drbd8 "[FFE] Please sync drbd8 from ubuntu-ha PPA - 8.3.7" [Undecided,Confirmed] https://launchpad.net/bugs/524594 [10:01] Is the lucid packages in Ubuntu-HA the ones that will be included in the final 10.04 release? [10:01] yes [10:05] I was wrong, I'm using 8.3.7rc2 from the ubuntu-HA [10:11] Was apt-cache show that fooled me [10:24] I've figured it out; on the ClusterStack/LucidTesting page is says to use repo deb http://ppa.launchpad.net/ubuntu-ha/ppa/ubuntu lucid main , but then changing it to deb http://ppa.launchpad.net/ubuntu-ha/lucid-cluster/ubuntu lucid main I got an update and everything is working again. Should the wiki be updated? [10:45] AnAnt: sssd or pam_ccreds might do what you want [10:45] vmlintu: what are those ? [10:46] AnAnt: pam/nss components that store user information locally so that you can still login even if connection to authentication server is broken === TREllis_ is now known as TREllis [11:49] how can i automate server to shutdown and startup everyday at a particular time i tired corn job with ACPI Wakeup is not happening [11:59] hemanth_: I think you needs BIOS support for that kind of thing. It will not work with cron, except for the shutdown. [11:59] hemanth_: You can also try WOL [11:59] alvin, bios has that feature [12:00] okies [12:00] seeing WOL [12:00] hemanth_: Then you need to set up the wakeup time in your BIOS. For WOL, you need a server to send the magic packet [12:01] alvin, any wiki on the same? or any tool ? [12:01] hemanth_: No idea. It's manufacturer related. The best place to look is in your server's manual [12:02] alvin, you mean serverguide.pdf? [12:02] No, the manual of your server/motherboard [12:03] alvin, ok :) [12:03] the issue is this manually i set the alarm it works, but not via cron! [12:06] if i place the commands in /etc/rc.local will it do the required? [12:07] hemanth_: No. Cron can't start jobs if the computer is not powered no [12:07] alvin, http://pastie.org/private/zjfjevg29vfniaiqdyfarq is what i have done as of now [12:11] Ah, I see what you're trying to do [12:11] :) [12:11] I have no experience with resuming from S3 or S5, but the shutdown command will shut you down completely (S6 I believe). So, no, this isn't working [12:12] You have to put the computer to sleep or soft off instead (I don't know how from the command line) [12:12] but manually it does, so if i put the script in startup? [12:12] manually i set the alarm and then did a shutdown after the given time it started [12:13] echo 4 > /proc/acpi/sleep [12:13] Is how I've done it in the past. [12:13] Not sure if it still works or not. [12:13] Omahn, 4 as in? [12:13] kirkland will almost certainly know the answer as he's written that tool (name escapes me) that adds power management to servers. [12:14] hemanth_: State 4, suspend to disk I think [12:14] o kool, is he around? [12:14] hemanth_: Maybe this Mythbuntu article will be of some use for you: http://www.mythtv.org/wiki/ACPI_Wakeup [12:14] alvin, i did my script seeing the same! [12:15] hemanth_: http://acpi.sourceforge.net/documentation/sleep.html [12:15] Certainly looks interesting. I think I'll mess a bit with my atom servers at home this weekend. [12:16] try automate few server [12:16] *trying to [12:17] Omahn, sleep is better than shutdown and power on u suggest ? [12:18] Omahn, S5 - "Soft Off"? [12:18] hemanth_: Err, depends on your requirements. I personally wouldn't do either, but then we're a big enterprise shop. [12:19] Omahn, i have collected a stat on the same, shall i send it over a PM? [12:20] hemanth_: Errm, you've lost me. What are you truing to do? [12:20] *trying [12:21] Omahn, automate server to shutdown and start @ a particular time each day [12:22] hemanth_: Ok, in that case you will need either 1) Wake up time support in your systems BIOS or 2) Another machine on the network to send a magic packet, or wake on lan packet, to wake the machine back up. Do you have either of them? [12:23] Omahn, yes i have first one, second one is not hard to configure i guess [12:24] hemanth_: In that case I would go with the BIOS wake up time option and just put a cron job entry in as root to do '/sbin/init 0' at whatever time you wish the machine to shutdown. [12:25] Omahn, http://pastie.org/private/zjfjevg29vfniaiqdyfarq is what i have done as of now, i have placed the same in cron.daily [12:25] but nothing is happening [12:27] hemanth_: I would put those commands in the root crontab instead of your users, unless you have also updated sudoers those lines will require manual intervention in order to work as they will be requiring password entry. [12:28] vmlintu: so I should add something to /etc/pam.d/* ? [12:28] Omahn, o! ok will put them in roots cron :) [12:28] hemanth_: Cool. Hopefully that will sort it out. [12:29] AnAnt: which ubuntu version are you using? [12:29] Omahn, there are in the root cron also! cos the user was under sudoers [12:29] vmlintu: 9.10 (karmic) [12:31] Omahn, have just removed all the sudo, lets see [12:31] Omahn, if it works the machine must go down in 4 mins [12:31] hemanth_: Hmm, in that case sudo shouldn't have prevented it from working. [12:31] hemanth_: So it's the shutdown that isn't working? [12:32] AnAnt: for pam-ccreds there's an how-to here: https://help.ubuntu.com/community/PamCcredsHowto [12:32] hemanth_: BTW - Is that your actual crontab? It doesn't have any times listed. [12:33] AnAnt: I haven't tried that with karmic myself, though [12:33] vmlintu: thanks [12:33] AnAnt: for sssd you can install the sssd package from the repo, but I've used only the lucid version of it [12:33] hemanth_: If you have those commands in cron.daily then they will only be executed once per day. So the shutdown may not take affect until tomorrow when the crontab has been run. [12:33] Omahn, yes, i have placed it in cron.daily, should i specify the time explicitly ? [12:34] hemanth_: Yes, and in roots crontab, not cron.daily [12:34] hemanth_: https://help.ubuntu.com/community/CronHowto [12:34] AnAnt: sssd documents are here: https://fedorahosted.org/sssd/wiki/HOWTO_Configure_1_0_2 [12:34] Omahn, i did service restart cron [12:34] AnAnt: I'm in the process of writing in my blog about sssd with lucid, but it isn't ready yet [12:34] hemanth_: On my system, cron.daily will only be read according to this: [12:34] 25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily ) [12:35] So at 06:25, not on restart of cron. [12:35] hemanth_: Check out that wiki page, it's got a decent amount of info on it. [12:35] hemanth_: I'm signing off for 30 mins or so now, but I'll be back later. [12:35] Omahn, had read that, have opened it again [12:35] Omahn, okies see you tomo then :) [12:36] Omahn, thanks for the inputs [12:38] morning [12:49] mdeslaur: ping how did you regenerate the cert for the mysql testsuite? [12:50] zul: I finally decided to use the upstream cert, I dropped my own test cert [12:51] mdeslaur: how did you do that then? [12:53] zul: http://bugs.mysql.com/bug.php?id=50642 [12:53] zul: I have a patch that updates the certs in the mysql package [12:54] mdeslaur: ahhhh [12:54] i might as well go fix the package in universe [12:54] zul: oh, yeah, I wanted to do that, but for some reason couldn't get it to compile...but I haven't tried since [12:54] mdeslaur: k ill have a look at it [13:01] zul: oh! you did php-imap, sweet :) [13:02] mdeslaur: yep and mcrypt and interbase....ive been a busy boy ;) [13:04] hehe [13:19] If I had a choice, which is better, having a Windows server reading/writing ext3 filesystems, or having an Ubuntu server reading/writing ntfs/fat32 filesystems? [13:24] Italian_Plumber: I would say the latter. [13:37] New bug: #530550 in vm-builder (universe) "ubuntu-vm-builder crashed with libvirtError in defineXML()" [Undecided,New] https://launchpad.net/bugs/530550 [13:41] soren: ping the server-regression-test is taking whatever is in the archive right? [13:43] zul: Yes. [13:43] soren: sweet...im testing a fix for the ssl tests [13:44] zul: mdeslaur said he had a patch for it. [13:44] soren: yeah but he didnt apply it to mysql 5.0 [13:44] zul: Right. [13:44] soren: im doing a local build before I upload it [13:50] Is there known breakage in Lucid with open-iscsi? [13:51] I get the following message: [13:51] iscsiadm: initiator reported error (5 - encountered iSCSI login failure) [13:51] And see no traffic towards the target [13:51] sommer: around ? [13:52] soren: would you take papercut bug 460398 ? [13:52] Launchpad bug 460398 in server-papercuts "/etc/timezone is not set correctly" [Medium,Confirmed] https://launchpad.net/bugs/460398 [13:52] or are you already overwhelmed ? [13:53] it's a vmbuidler bug, supposedly [13:53] not sure how much it still applies to the new release [13:53] ttx: I'm surprised it wasn't in my last release. I certainly looked at the code and fixed it up, but apparntly didn't merge it back in. [13:53] ttx: a little bit [13:53] ttx: I'm happy to accept it as a papercut. [13:54] sommer: was wondering about https://bugs.launchpad.net/server-papercuts/+bug/211915 [13:54] Launchpad bug 211915 in amavisd-new "Insecure dependency when using sql for Log Reporting" [Undecided,Confirmed] [13:54] sommer: should it be made a doc papercut, and if so, would you accept to be assigned to it ? [13:55] soren: deal [13:55] ttx: sure sounds good to me [13:55] ok, deal [13:55] Anyone tried an 8.04 to 10.04 upgrade recently? All my upgrades have been failing for a few days now. [13:55] Due to this: https://bugs.launchpad.net/ubuntu/+source/initramfs-tools/+bug/530632 [13:55] Launchpad bug 530632 in initramfs-tools "Upgrading from 8.04 to 10.04 fails on update-initramfs" [Undecided,New] [13:55] Omahn: not recently [13:56] I wasn't sure if it was something specific to our environment so this morning I spun up 8.04 with testdrive and did a default install followed by 'do-release-upgrade -d' and it fails. [13:57] ttx: Thanks for the poke. I'll target the 0.12.3 milestone for right before beta-1 freeze. [13:57] Omahn: could you make sure mvo is aware of it ? [13:58] ttx: What's the best way of contacting mvo? [13:58] (on #ubuntu-devel) [13:58] ta. [13:58] Omahn: thank you ! [13:59] Omahn: powernap / powerwake [13:59] kirkland`: That's the one :-) [14:00] The user in question has disappeared now unfortunately. Hopefully (s)he will work it out. [14:08] Nobody here with issues in Lucid with iscsi? [14:09] i dont run iscsi so I cant coment about it, but you might want to raise a bug report in launchpad [14:10] where should I ask hardware questions? (I know it's sort of a meta question, but I didn't want to just launch right into it only to be told "wrong room", y'know?) === kirkland` is now known as kirkland [14:15] kirkland, ping [14:15] 2 euca questions for you [14:16] smoser: hit me [14:16] a.) how should i do an install now [14:16] b.) in my 2 machine system, is it easy to --purge and install ? the install from usb key is a PITA [14:17] smoser: been a while since i tested package-based install, but theoretically it should work; and we need bugs filed if it doesn't work [14:17] smoser: https://help.ubuntu.com/community/UEC/PackageInstall [14:18] smoser: i did some work on purge earlier this cycle, around a2 [14:18] smoser: it was clean and working when i last left it [14:19] kirkland, ok. i might give that a run later today === dendrobates is now known as dendro-afk [14:23] Jeeves_: what iscsi issue are you referring to? [14:43] pmatulis: No need to respond to my last comment on that support case, mvo has picked up the bug report on launchpad [14:47] Omahn: roger [14:47] Omahn: i'm currently attempting an lts upgrade [14:48] Omahn: it worked [14:49] pmatulis: From 8.04 to 10.04? [14:50] Omahn: yes, but interestingly, i used a minimal hardy install via vmbuilder [14:50] pmatulis: Ah, I've not tried it with vmbuilder. I'll give that a go now. [14:50] Omahn: ok, and i'll update the bug [14:50] pmatulis: ta [14:52] nijaba: vmbuilder wiki updated [14:52] pmatulis: \o/ [14:56] nijaba: what is the story/policy behind duplicating docs in server guide and on h.u.c? [14:56] pmatulis: no policy. Doc teams decides what fits best, eventually discuss it with us [14:57] pmatulis: doc team for server generally == sommer [14:58] nijaba: ok, but it's hard to keep same/similar docs in sync i imagine. like the recent vmbuilder page [14:58] pmatulis: lots of work, indeed [14:59] what's the right support channel for the apache webserver? [15:01] StrangeCharm: if it is on Ubuntu, feel free to ask your question here [15:02] how do i add subdomains to my server? [15:04] StrangeCharm: their is a section on this on https://help.ubuntu.com/9.10/serverguide/C/httpd.html [15:05] What is replacing drbd? [15:05] thanks nijaba [15:05] ball: why do you want to replace it? [15:05] replacing drbd? [15:06] nijaba: I don't, especially. Thought I read on the mailing list that it was being superceded by something else. [15:06] ball: no, it is removed from the kernel an is a dkms package now [15:06] no :) [15:06] and will be back in the kernel soon :D [15:06] ivoks: thanks mainstream ;) [15:06] cause drbd is becoming standard part of kernel [15:07] Ah, okay. That's good to know. [15:07] I need to find out more about that. [15:07] ivoks: you might want to poke the release team wth respect to drbd though if you havent yet [15:07] zul: i'm tired of poking :) [15:07] ...starting to wish the servers had 10gbit network ports handy. [15:07] zul: i'll create my own 'super cluster extension for ubuntu' product [15:07] zul: and sell it for millions :) [15:07] ivoks: heh clububuntu? [15:08] hehe [15:08] ivoks: I only want to cluster two machines ;-) [15:08] ball: that will be only two millions :D [15:08] We're a non-profit, so that's not going to happen. [15:08] hehe [15:09] lol [15:09] I need some way to mirror a filesystem across two servers. [15:09] (for redundancy) [15:09] use drbd [15:09] there's a nice howto for lucid [15:09] ivoks: thanks. [15:09] https://wiki.ubuntu.com/ClusterStack/LucidTesting#Pacemaker,%20drbd8%20and%20OCFS2%20or%20GFS2 [15:12] ...may have to hire a consultant to do that. [15:12] ...or something. [15:12] ? it's a copy-paste tutorial :) [15:13] how do i make a new database on the default LAMP install? [15:13] Hmm... okay. === dendro-afk is now known as dendrobates [15:25] pmatulis: Upgrade works for me too in a VM created with vmbuilder. [15:26] Omahn: ok [15:36] ball: if you draw your full requirements out; you may find that you don't need filesystem replication [15:42] Daviey: I'm not sure what else to do. [15:43] Daviey: We want to run two servers side by side and when one fails, the other picks up the load. Does that sound practical with Ubuntu Server? [15:43] ball: make a list of the services and media that need replication :) [15:43] ball: yep [15:44] Daviey: the servers will be running a desktop and a few apps: OpenOffice.org, SeaMonkey, the GIMP etc. [15:44] (for a few "thin client" graphical terminals) [15:45] hey [15:45] I need people to see the same filespace regardless of which host they get connected to. [15:45] my system keeps hanging after i select install [15:45] 550mhz not going to cut it? [15:45] ShadeS: it's probably not because of your CPU [15:45] ball: it is sounding like drbd is well suited. [15:45] yeah [15:45] Daviey: thanks. [15:45] I don't think it's the cpu either [15:46] is there a slowseek option for the cdrom? [15:46] pmatulis: Was your build 32bit? [15:46] Omahn: no [15:46] ball: I think the latest LTSP has clustering capabilities, but I haven't tried it yet [15:46] alvin: I've heard rumours of those too. [15:47] alvin: Not sure whether or not to trust that though. [15:47] ball: No idea. On day, I'll try it in a virtual machine [15:48] brb, phone [15:53] anyone? [15:53] ShadeS: does it just hang? [15:53] i see a flashing _ [15:53] no keyboard response [15:53] ShadeS: how long have you left it? [15:53] more than reasonably long [15:54] ShadeS: Have you tried booting with ACPI disabled? [15:55] ShadeS: How much RAM do you have btw? [15:55] 393216k [15:56] ShadeS: That's tight, but should enable you to boot at least (I've done it on a 256 Mbyte machine) [15:57] it's just going to bea fileserver [15:57] i don't need x on it [15:59] ok [15:59] well i tried noacpi [15:59] ShadeS: I usually give my fileservers 2Gbytes RAM [15:59] i'll flip all those options on [15:59] pardon me, I don't shit gold bricks ;p [16:01] i wish i could drp that in here [16:01] but ic an't ;( [16:02] i'm going out for a smoke, if it doesn't oad by the time i'm back i'll consider it hung [16:04] hello [16:09] hi, my LAMP crashes sometimes recently. Nothing in logs.. where one could start debugging? [16:10] https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/531441 [16:10] Launchpad bug 531441 in apache2 "[karmic] Apache crashes" [Undecided,New] [16:16] still hanging [16:17] anybody knows any example of tc script /tcng file that would limit outgoing traffic on certain ports? [16:19] New bug: #531441 in apache2 (main) "[karmic] Apache crashes" [Undecided,New] https://launchpad.net/bugs/531441 [16:19] <[DS]> Hello, I am going to install Ubuntu Server for 1st time ever. I have a mobile broadband connection and need to know how to connect it through CLI. [16:19] yeah [16:19] numlock/caps are nonresponsive immediatly after i choose to install [16:19] kees: hi - so what should be done for bug 523354? [16:19] Launchpad bug 523354 in libpam-ccreds "[MIR] libpam-ccreds" [Wishlist,Incomplete] https://launchpad.net/bugs/523354 [16:20] kees: it seems that this is too late for lucid as adding pam-auth-update would be a new FF [16:22] Any ideass? [16:24] can i use a wildcard in a cname or dname dns record? for instance on the dns for foo.tld "* 10800 IN DNAME bar.com." [16:39] Stupid question, but how can I set up user directories for apache2? [16:39] hi [16:40] GhostFreeman: in /etc/apache2/hosts-allowed [16:40] i have just installed squid, is there a way to forward all the coming traffic (from any interface) [16:40] to squid [16:40] GhostFreeman: look @ example there [16:40] thanks LimCore [16:40] in order to follow it with squidview [16:41] what's the best way to make an ssl certificate for my domain? [16:41] with some iptable... [16:41] LimCore: I'm not seeing a file or directory here called hosts-allowed [16:42] New bug: #531453 in euca2ools "euca-describe-instances shows state "running ", not "running"" [Undecided,New] https://launchpad.net/bugs/531453 [16:42] New bug: #531455 in qemu-kvm (main) "daily server ISO install fails with a kernel OOPS in KVM" [Undecided,New] https://launchpad.net/bugs/531455 [16:42] maxagaz, http://www.ubuntugeek.com/how-to-setup-transparent-squid-proxy-server-in-ubuntu.html [16:42] maxagaz_, ^ [16:45] erm [16:45] /etc/apache2/sites-available/ [16:45] and sites-enabled [16:45] well they are symlinks to the later [16:45] GhostFreeman: [16:46] Yes [16:46] thanks again Limcore [16:46] New bug: #531454 in samba (main) "FFE for samba 3.4.6" [High,New] https://launchpad.net/bugs/531454 [16:49] zul: bug 74647 -> Should the bug be marked Fixed Released? [16:49] Launchpad bug 74647 in php5 "php5-gd not using bundled GD library" [Undecided,Confirmed] https://launchpad.net/bugs/74647 [16:49] uvirtbot: it should [16:50] zul: Error: "it" is not a valid command. [16:50] mathiaz: it should [16:50] zul: is it part of the changelog? [16:50] mathiaz: no it isnt, i was made aware after the fact [16:51] i'm trying to add a vserver to my site, which runs on ubuntu 9.10. i've added a new file to /etc/apache2/sites-available, run a2ensite on it, and /etc/init.d/apache2 restart. however, going to subdomain.mydomain.tld gives me an error - cannot find server. the a record for mydomain.tld points to the server's IP, and going to mydomain.tld gives me the main server. what am i doing wrong / should I be doing? [16:51] re dovecot, anyone using the 'auth_worker_max_request_count' parameter? server is throwing an error when i use it [16:53] sorry, I got disconnected [16:53] I installed & setup libpam-ccreds as mentioned in https://help.ubuntu.com/community/PamCcredsHowto. So when the machine is disconnected from the network, sudo getent passwd does show LDAP users (which are cached by pam-ccreds), yet I cannot login as an LDAP user, and I get this error: User not known to the underlying authentication [16:53] what is causing this ? I am using karmic (9.10) === AnAnt_ is now known as AnAnt [17:15] qman__, squid works fine when I'm configure my browser to use it, but not if I set iptables to force all the traffic: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 [17:15] I don't understand why [17:15] Does someone have the answer ? === nxvl_ is now known as nxvl [17:32] maxagaz_, my understanding is that while it's essentially an HTTP request, there is some additional stuff that happens when a browser speaks to a proxy, so you'd still need to set your browser to be using a proxy, even if with these iptables settings you could point it to port 80. [17:33] cyphermox, okay but that's exactly what I don't want [17:35] maxagaz_, you want to be able to use the internet through a proxy without having to set proxy settings, right? [17:36] cjwatson: hi - does the d-i support static route in preseed? Or should I use a late_command to setup static routes? [17:37] cyphermox, yes, without having to set the proxy on every bowser [17:37] maxagaz_, as I look at your iptables rule though I can't see how the traffic gets redirected to the proxy *server* although it should get sent to the right port [17:41] mathiaz: you can use static network configuration and preseed a default gateway and such, but use a late_command for more complicated cases of static routes [17:41] cjwatson: great - thanks [17:43] maxagaz_, shouldn't the iptables rule be -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to ip.of.squid.server:3128 instead? [17:43] can anyone forward a good howto for setting up virtualmin e-mail? I've got my domains moved over to Virtualmin, but I can't get the e-mail server to work [17:45] cyphermox, it doesn't work better [17:46] cyphermox, perhaps something is wrong in my squid's conf [17:48] can anyone forward a good howto for setting up virtualmin e-mail? I've got my domains moved over to Virtualmin, but I can't get the e-mail server to work [17:57] when i configure traffic shaping with htb.init, i can't get a second connection on a port, why is it so? [18:06] vmlintu: can you help with my problem ? === LimCore is now known as bender_pharaoh === bender_pharaoh is now known as limcore [18:29] mathiaz: right, adding the pam-auth-update would require a FFe, but it is an isolated change, so I'm pretty sure it would be accepted. [18:58] how can I totally purge postfix out of my system? the package is broken, and I can't use apt or even manually delete it!! [19:02] kirkland: hi [19:02] kirkland: can the VNET_PRIVINTERFACE setting be preseeded? [19:03] mathiaz: hi, not that i know of [19:03] mathiaz: i've never tried [19:03] kirkland: ok - thanks [19:03] mathiaz: i'm checking the code for you now [19:04] db_get eucalyptus/private-interface [19:04] private_interface="$RET" [19:04] set_conf_var VNET_PRIVINTERFACE "$private_interface" || true [19:04] kirkland: awesome thanks [19:05] mathiaz: hmm, well it's at least debconfified [19:05] mathiaz: there might need to be 2-3 lines needed to get preseed to work [19:06] kirkland: hmm... seems like the code will be called only if there are at least 2 interfaces [19:07] mathiaz: hmm, really? [19:07] jeeves_Moss: "broken" how? [19:07] kirkland: eucalyptus-udeb.postinst [19:07] mathiaz: yop [19:07] kirkland: in my use case, there will be only one interface at install time [19:08] mathiaz: looks to me like it's called on a cluster install [19:08] kirkland: right - but db_get eucalyptus/private-interface is only called if there are more than two interfaces [19:08] kirkland: my use case is a CC install with only one interface, but on reboot there will a second one coming up (a vlan interface) [19:09] kirkland: I want to set the private interface to be the vlan one [19:09] mathiaz: right [19:10] kirkland: I can always overwrite eucalyptus.conf as a late_command in the preseed [19:10] lamont, one sec, I'll pastbin it [19:12] lamont, http://pastebin.ca/1821641 [19:12] can anyone suggest somewhere I might get more targeted exposure for this question? http://ubuntuforums.org/showthread.php?t=1410891 [19:14] jeeves_Moss: what on earth have you done? that looks like you've manually removed files from the system? [19:14] what does this do for us: dpkg --purge --force-depends postfix [19:15] the assumption being that you either don't care about any config files, or have a way to recover them [19:15] lamont, this is a box that I inheraerated from another junior sys admin. was working on. and apparently, in some "brain wave", he tried to compile from source (not using the package manager), and then once that failed, he tried from the package manager, and when that failed, I got called [19:16] lamont, thanks. it looks like it killed the error. [19:18] heh. [19:19] if you remove files from the system dpkg assumes you want them to stay gone... [19:20] cjwatson: is there a limit to the lenght of the early_command string? [19:22] Italian_Plumber: I wuld (as was said) try a new SATA cable. If that doesn't help, another SATA card (I think they are very cheap). [19:22] *would [19:23] Cheap SATA - I mean the "StarTech" models ... [19:34] I should modify the post to mention that I ahve tried another SATA cable. [19:35] I've seen in several places that it's hard to find a "good" SATA cable -- any creedence to that? [19:36] Is there any thing specific I should look for in a new card? === luis__lopez is now known as luis_lopez [19:45] New bug: #531555 in php5 (main) "php5-cli isn't compiled with SQLite support" [Undecided,New] https://launchpad.net/bugs/531555 [19:49] Italian_Plumber: I think I have a StarTech PCI in a server I have. Adding 2 internal SATA to an old machine for RAID1. It works fine - and was only £8 or something ($10 or so). Try another one perhaps? [19:50] another of the same model? [19:50] you don't see errors like this in your syslog? [19:54] No. It isn't a "quality" card - I don't know the model but lspci says "ALi M5281" [19:54] The server is not "critical" though - just a bit of backup (+Jabber) [19:54] well I don't keep critical data on this drive either. [19:59] something like this/ http://tinyurl.com/yfwrwwz [19:59] ? [20:00] I have a basic Xubuntu 9.10 server. I want to achieve case insensitive urls. I have mod_rewrite installed and working with a .htaccess file inside the /www folder. But I do not know how to configure the correct apache file. Can someone suggest a good step-by-step tutorial? [20:00] mathiaz: it's passed to sh -c, so I think that would be the only limit; brief experimentation suggests that the limit is on the order of 128KB [20:01] sherr: Looks OK (I have URL shorteners). I wanted mostly SATA ports inside, didn't care about "RAID capability" expense, I ma using MD RAID. [20:04] who usually deals with libc/locale bugs? [20:15] kirkland: which git branch should i be pulling from for the daily-vccs spec? [20:16] hggdh: someone on the foundations team [20:16] zul: for what? qemu-kvm? [20:16] kirkland: yep [20:16] zul: well, there's two of interest ... [20:16] git clone git://git.kernel.org/pub/scm/virt/kvm/qemu-kvm.git [20:17] git clone git://git.savannah.nongnu.org/qemu.git [20:17] zul: one is kvm, and the other is qemu [20:17] zul: the first is "more important" to us [20:17] erm ok [20:22] is there a command-line utility that can make an ISO from a CD/DVD? [20:25] Italian_Plumber, readom [20:26] New bug: #531571 in eucalyptus "Metadata service not documented" [Undecided,New] https://launchpad.net/bugs/531571 [20:29] smoser: Thanks! I knew it had to be easy [20:37] how can I get my virtualmin install to config my e-mail servers corectly? I have Dovecot and Postfix, and I can't get the servers to set up properly for ANY e-mail boxes (the servers are running, but I can't log in) [20:44] what's the default mail client to queue email for sendmail? [20:44] for /usr/bin/mail [20:45] using dynDNS, how can I reach the URL associated to the IP address? [20:46] Stargaze, what are you trying to do? [20:47] display index.html in /var/www [20:47] over the internet, not LAN [20:48] how is your network setup? are you behind a router? [20:48] yes [20:49] I think the issue is port forwarding [20:49] port 80 forwarded to the box? [20:49] www.portforwarding.com [20:50] it says: trigger port 80 - public port 80, both tcp [20:50] first off, see if you can hit the box internally on port 90 [20:50] *80 [20:50] *80? [20:50] ah on port 80 [20:50] just use "http://" [20:51] do you see the web page you have hosted in /var/www ? [20:51] ok [20:51] moment [20:52] yes [20:53] ok, if you can see the webpage internally, give me the dDNS name and I'll look from here [20:53] Hi, I had a question regarding security of using samba over unsecured wan links [20:53] it's gbachot.homelinux.com [20:53] ie, how (in)secure is it connecting to a samba server from a windows host? [20:54] Stargaze, one sec. [20:55] Stargaze, can you check your IP @ www.whatismyip.com please [20:56] isn't that potentially dangerous? [20:56] Stargaze, I want to see what the ddns is resolving to [20:57] ok moment [20:57] Stargaze, if you ping gbachot.homelinux.com, you'll get the IP. I just want to make sure that the dDNS name resolves to your IP. if it does, and you can hit the box internally, then you've got a problem with your router mappings [20:58] its 81.247.191.178 [20:58] Stargaze, ok, same here. [20:58] Stargaze, one sec. I'll port scan you to see what's open [20:58] what do you see? [20:58] tnx [20:58] Stargaze, you'll see a bit of data on your end [20:59] where? [20:59] Stargaze, on your WAN [21:00] Stargaze, you're in holland, right? [21:00] belgium [21:00] Stargaze, ahhh. [21:00] 178.191-247-81.adsl-dyn.isp.belgacom.be [21:00] yes .be means belgium [21:00] Stargaze, it looks like your port forwarding didn't work. NOTHING is open on that IP [21:01] that's what i thought [21:01] Stargaze, we've got Belgium draft horses and flemish giant rabbits! [21:01] is that so!! [21:01] how very nice :) [21:02] thanks. [21:02] ok, model of router? [21:02] it's a kind of clone, one moment [21:02] kk [21:08] Stargaze: jeeves__: While evesdropping on your conversation, it occurs to me that the ISP might be blocking port 80 as well. There are ways to work around it, but that also could be the problem beside incorrect port forwarding. [21:09] jevidl, this is true. I'm just checking to see what he has open first. the port scan showed up with everything blocked, so if I could see one hole, I would suspect the same thing. [21:09] it's a b-box, but it has the same interface as another router, i don't remember which [21:09] star [21:09] Stargaze, do you have ANY ports open on it? [21:09] it's a philips [21:10] i'm new to router configuration [21:10] Stargaze, ok, if you know it's a clone, you'll have to double check the config on www.portforward.com. once you've got that done, drop me a line, and I'll have a look @ it again. [21:11] Stargaze, the problem is unless I know what make/model it is, and I can google it, I can't help you [21:11] it's Philips SNA 6500 [21:12] Stargaze, www.portforward.com [21:12] yes, i found it there [21:12] jeeves__: I need to get going, but a simple way to test the isp blocking theory would be to setup a mapping of 80 - 8080 (or something else high), for LAN port - Public port [21:13] jevidl, yep. That's what I'm trying to get him to test [21:13] assuming of course that port 80 doesn't start working :) [21:13] jeeves__: cool, good luck to you both :) [21:13] this is what i find http://portforward.com/english/routers/port_forwarding/Philips/SNA6500-18/Http_File_Server-HFS.htm [21:24] LAN port and public port are both 80, TCP and checked [21:27] ubuntu network tool shows that port 80 as open [21:27] my guess would be that your ISP simply doesn't allow incoming traffic on port 80, it's surprisingly quite common [21:28] damn isp [21:28] thanks for the assistance :) [21:56] is wiki.ubuntu.com down ? [21:58] cemc, times out here [21:58] same here [22:41] I have some nfs mounts in fstab that don't exist, and won't time out. anyone know how to make those processes die? [22:41] df hangs forever, lsof hangs forever, even ls in the folder the mount points are in hangs [23:02] kirkland: does the default UEC configuration use VLANs? [23:03] kirkland: I'm referring to the default network modem [23:03] kirkland: *mode* [23:04] kirkland: ok - found the answer: VNET_MODE="MANAGED-NOVLAN" === dendrobates is now known as dendro-afk [23:13] jdstrand: hi! [23:13] jdstrand: what's the iptables syntax to exclude a range of IP? [23:14] jdstrand: I'd like to say: for all the destination ips *not* on the 10.55.55.0/24 network [23:15] mathiaz: something like '-d ! 10.55.55.0/24' should do it [23:16] jdstrand: awesome thanks [23:17] jdstrand: and the new syntax is ! -d 10.55.55.0/24 [23:17] jdstrand: -d ! 10 ... [23:17] jdstrand: ^^ is deprecated FYI [23:18] mathiaz: cool, thanks === dendro-afk is now known as dendrobates === robbiew is now known as robbiew_ [23:47] mathiaz: right, novlan is default [23:52] smoser: http://linux.slashdot.org/story/10/03/03/1947235/Ubuntu-Desktop-In-the-Cloud?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29 [23:52] smoser: well done ;-) [23:55] hey [23:56] I select install ubuntu, and all i see is a flashing _ [23:56] any ideas? [23:56] kees: oh no, you burried libesmtp :) === dendrobates is now known as dendro-afk [23:57] ivoks: yeah, sorry about that. [23:57] but it's pretty busted. [23:58] yeah, it's unmaintained [23:58] i'm thinking on building pacemaker without support for it [23:58] works for me [23:59] and work on replacing libesmtp with something else for lucid+1 [23:59] work with upstream on that [23:59] hopefully, we could include that in lucid as a SRU :)