/srv/irclogs.ubuntu.com/2010/03/10/#ubuntu-server.txt

jan247hi guys, could someone lead me to some documentation for capacity planning for an ubuntu cloud?00:03
\shjan247: eventually http://www.ubuntu.com/system/files/UbuntuEnterpriseCloudWP-Architecture-20090820.pdf ?00:06
\shhttp://www.google.de/search?sourceid=chrome&ie=UTF-8&q=capacity+plan+for+ubuntu+enterprise+cloud <- first hit on friend google00:07
chocamohow clean are complete dist upgrades? when lucid comes out will it really be as clean and simple as a regular apt-get dist-upgrade?00:12
thebwtchocamo: ideally00:12
chocamois it better to just backup certain config files and do a clean install with new release?00:13
thebwthow much of your servers software is fromt eh repos00:13
thebwtand what version you coming from00:14
thebwtto get a good idea first hand, start up a vm and give it a shot imo00:15
thebwtmain things to watch for is non repo software that you 'installed'00:15
chocamoya ok00:15
chocamothanks00:15
=== robbiew is now known as robbiew_
zoran119hello, i got a problem with a ubuntu 8.04 lts running as a virtual machine on hyper v01:04
zoran119every day or two the clock gets stuck in a 5 second loop and i have to restart the vm to get it going again01:05
zoran119i have removed ntp ntpd from startup, i have also remove ntp script from cron.daily01:05
zoran119the problem always occurs at 00 minutes (so at 12:00:00, or 13:00:00 and so on)01:06
zoran119i just saw that there is a cron job that runs rdate -s every hour to sync the clock to an external rdate server... could this be causing trouble?01:08
\shzoran119: where did you see this rdate script, /etc/cron.hourly or /etc/cron.d ?01:17
twbA cron job to run rdate is pretttty stupid.01:19
zoran119\sh: the rdate script was in root's crontab.... 'crontab -e'01:19
zoran119\sh: i have removed that cron job now01:20
twbzoran119: sounds like whoever set up your VM was a fool.01:21
zoran119twb: why is it such a bit issue?01:22
twbzoran119: because cron events are triggered based on time.01:22
zoran119twb: infinite loop possibility?01:22
twbSo if you have a time event that causes the clock to be set back, it'll loop forever01:22
twbAlthough I guess it *ought* to work if the inetd it's talking to isn't also hokey...01:23
erichammondtwb: Doesn't cron have some smarts about triggering the same job multiple times?  I believe it does the right thing on daylight savings time shifts.01:23
twberichammond: maybe it does.01:24
twbCertainly rdate is deprecated in favour of NTP for other reasons.01:24
\shzoran119: that's not installed by default, right? actually I don't know any package which installs something into roots crontab01:24
zoran119\sh: not by default no... it was added manualy01:24
twbProbably by whoever built the pre-built guest image, or by the equivalent of vmware-tools.01:25
\shusing ntp on our esx vms does work and doesn't crash...it helps to maintain a sane time sync on our vms01:25
twb\sh: ntp won't make large steps by default.01:26
\shtwb: iburst?01:26
twb\sh: hmm?01:26
\shtwb: you meant with "large steps" that ntp doesn't sync your time at startup of ntp, or did I miss your meaning?01:28
\shgrmpf...I hate unittest01:28
lifeless?01:30
kirklandlifeless: hiya01:30
lifelesskirkland: hey01:30
\shadding the keyword "iburst" on your server line in ntp.conf it syncs the time directly after startup (just like ntpdate <ntp server> ; /etc/init.d/ntp start01:30
ChmEarl!paste01:31
ubottuFor posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://tinyurl.com/imagebin | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic.01:31
ChmEarlgetting conflict in linux-virtual install http://paste.ubuntu.com/392171/01:33
ChmEarllinux-image-virtual refuses to copy in its kernel01:34
ChmEarlhow can I cancel an install with conflicts?01:42
ChmEarlits frozen at Inst/Unpacked01:42
uvirtbotNew bug: #535439 in samba (main) "Windows Network Computer are not shown" [Undecided,New] https://launchpad.net/bugs/53543901:52
invisimeso I accidentally toasted /var/lib on my server box. I have a bunch of stuff configured on it that I don't want to lose. I have enough space on my external to copy everything that's not toasted over prior to a reinstall. how should I proceed to minimize pain and effort? it would also help if I could minimize wailing of gnashing of teeth, but at this point I'm flexible.02:24
twbinvisime: dd the entire partition is safest02:27
* invisime goes to read man dd.02:27
arrrghhhso i'm having issues with rtorrent.  keeps segfaulting, and it seems to be my config.  i _swear_ nothing changed with the config file, but when i run rtorrent with the -n switch, it works fine...02:28
arrrghhhsorry, it's been a while since i've used irc!02:30
twbarrrghhh: strace it02:30
arrrghhhwow i've never used strace02:31
arrrghhhseems to dump a ton of info to the termina.l02:31
arrrghhhis there a particular way i should be running rtorrent with strace?  i see the segfault at the end, but there's an endless amount of pretty much garbage proceeding it.02:33
invisimetwb: how do I tell which /dev/ entry is mounted as root?02:35
arrrghhhi think it may be the xmlrpc calls that is causing rtorrent to segfault... hrm.02:35
twbinvisime: /proc/mounts, perhaps?02:37
twbinvisime: if you don't know that much already, it's probably dangerous for you to be trying to do anything at all02:38
invisimetwb: well, clearly. I mean I already accidentally deleted /var/lib :P02:38
arrrghhheek02:39
=== heynow_ is now known as heynow
twbarrrghhh: put the strace output in a file, then examine the file02:40
arrrghhhtwb, i'm not sure what this output is... but perhaps it'll make sense in a file.02:40
twbarrrghhh: I expect you to at least LOOK at the manpage02:41
arrrghhhfor what, strace?  ok.  the output does make more sense in a file as well, but i still don't get why it's segfaulting.02:42
arrrghhhimpressive, i'm surprised i haven't heard of strace before.02:43
twbIt's a log of the system calls made by the rtorrent process during its lifetime.02:43
twbInterpreting what is actually happening is a skill you'll have to pick up over time.02:43
arrrghhhi see "The SCGI socket has not been bound to any address and likely poses a security risk" - i didn't think it would cause a segfault.02:44
twbOK, so now we approach the problem from the other direction.  What release are you running?  Did you enable any third-party repos?  Did you install any software by hand (instead of via apt)?02:44
arrrghhhxml-rpc i did have to compile by hand...02:45
arrrghhhrtorrent is from the repo's02:45
twbEspecially if you've done something silly like installing karmic's rtorrent into hardy, that would be a dead giveaway.02:45
arrrghhhuhm i hope not02:45
arrrghhhi'm running karmic02:45
twbHow does xml-rpc fit into this?02:45
arrrghhhi'm thinking that's what is segfaulting rtorrent02:46
twbWhat evidence do you have of this?02:46
arrrghhhwell, that error.  and when i access rtgui it *seems* to crash rtorrent.02:46
twbThis is obviously something new since I last used rtorrent, when it had an ncurses GUI.02:47
arrrghhhi had to compile xml-rpc by hand because the advanced tree that fixed a bug i was having rtgui02:47
arrrghhhoh it still uses ncurses.  but it can accept xml-rpc calls so other front-ends can control it.02:47
twbWhat do you mean "because the advanced tree"?02:49
arrrghhhit's been a while since i went thru it, lemme find the link.  essentially any torrent over 4gb would show the incorrect size unless i used the advanced tree of xml-rpc02:49
arrrghhhwell i found the directions, but not the explanation...02:52
arrrghhhi guess it has a little blurb of why in the intro02:52
arrrghhhhttp://code.google.com/p/rtgui/wiki/CompilingRtorrent02:52
arrrghhh"The original problem is caused by the standard version of XMLRPC-C that is shipped with Ubuntu."02:53
twbSo you installed xmlrpc-c AND libtorrent AND rtorrent from source?02:54
arrrghhhi believe i just did xmlrpc-c from source.  it has been a while, but as i recall libtorrent and rtorrent came from the repo's.02:55
twbSo your libtorrent and rtorrent are failing because the version of xmlrpc-c they expect isn't the version that's installed.02:56
arrrghhhthat... would make sense.02:56
twbThe *right* thing would be to wait for Ubuntu to fix the issue, probably in the next release, since AFAICT it's not a show-stopper.02:57
twbThe next least-bad thing would be to roll a .deb for your xmlrpc-c svn snapshot, then apt-get build-dep, apt-get source --build and install libtorrent, then rtorrent.02:57
arrrghhhno, not a show-stopper.  but how do i get back to a functioning rtorrent?  i'm assuming i have to purge the custom install of xml-rpc and reinstall the one from the repos?02:58
ChmEarlgetting conflict in linux-virtual install http://paste.ubuntu.com/392171/02:58
twbarrrghhh: Ideally by running "make uninstall" in the xmlrpc-c source dir and praying its uninstall code isn't completely fucked, then by running "aptitude reinstall xmprpc-c" or whatever the package name is.02:59
arrrghhhhrm.02:59
arrrghhhok02:59
twbChmEarl: it looks like you simply can't have both kernels installed at once.02:59
chocamoI am trying to setup wireless as a backup interface (don't ask), and I have wpa_supplicant connecting fine, but other problems: static ip doesnt work, tried dhcp but "no dhcpoffers received"03:03
arrrghhhtwb, aaaaaand if the make uninstall fails?03:04
ChmEarltwb, I tried to uninstall the exiting server image, but the conflict is interfering. How can I cancel that install?03:05
ChmEarlexisting03:05
chocamoi think there is a force option03:06
ChmEarl-f is force, but the apt-get always comes back and says run "apt-get install -f"03:07
ChmEarland I'm trying to do a remove?03:07
ChmEarlnevermind mates, I got it. I put both of the depends on the line together :)03:09
ChmEarlwoohoo finally03:09
twbChmEarl: dpkg -P <package name>03:10
ChmEarlthat does a cancel?03:10
twbOh, right.03:10
twbChmEarl: never mind, you fixed it already.03:10
ChmEarla purge?03:10
twbYes, -P is purge.03:10
ChmEarlI was stuck until you got me trying a diff approach, thanks03:11
ChmEarltwb- it worked.. uninstalled one, then installed the virtual type03:13
ChmEarlthe initrd was lowered from 7MB->4MB03:14
twbIf you care about saving 3MB, you shouldn't be running Ubuntu03:14
arrrghhhha, seriously03:16
RoAkkirkland, i was wondering if packages that use upstart jobs commands like update-rc.d won't work as always.03:16
=== RoAk is now known as RoAkSoAx
RoAkSoAxclear03:17
arrrghhhtwb, sorry to bug you with this, especially since i caused the problem myself... but the make uninstall didn't work.  doesn't seem to exist... is there anything else i can do?03:18
=== zz_monteith is now known as monteith
ChmEarllooking in grub.cfg, the root is (hd0,5) is the 5 0-based or 1-based03:48
arrrghhhtwb, so is there anything else i can do?  the make uninstall failed.04:24
twbarrrghhh: either reinstall, or put up with a messy system04:25
twbChmEarl: depends which version of grub :-/04:25
twbChmEarl: in GRUB Legacy, everything counts from zero.  IIRC in GRUB 2, disks count from zero and slices (partitions) count from 1.04:25
arrrghhhcan i get rid of the xml-rpc stuff at least?  i have the tar i compiled it from.04:26
twbarrrghhh: shrug04:26
arrrghhhyea... i knew all this custom stuff would bite me in the end.04:26
twbarrrghhh: it's just a phase04:27
twbarrrghhh: you'll get over it04:27
arrrghhhsomehow i doubt ubuntu is going to 'fix' the problem with xml-rpc anytime soon.  so a clean system will put me back to where i was before, getting sizes that were negative.04:28
twbIMO that is a Good Thing04:29
sekyourboxHello, I accidentally broke my network somehow in my ubuntu 804 install.  I was attempting to setup a PXE server, but when i went to setup dhcpd.conf, there was some firestarter script in there.  I deleted the config, and uninstalled firestarter just in case.  I started to setup the config file, and got sidetracked, and just deleted all the options.  I restarted the dhcpd3 and everything was working fine.  When i reboote04:29
uvirtbotLaunchpad bug 804 in eric "Bugged by pyQT api update (dup-of: 803)" [Medium,Fix released] https://launchpad.net/bugs/80404:29
sekyourboxt I tried pinging the router, and got an error.. I checked all the regular network settings and disabled any route table, and everything looks fine.. I checked ip tables and noticed that it was set to deny all traffic.. I reset the iptables, and still no luck.. Any ideas on the next step i should take to troubleshoot? i think it has something to do with firestarter uninstall04:29
uvirtbotLaunchpad bug 803 in eric "Bugged by pyQT api update" [Medium,Fix released] https://launchpad.net/bugs/80304:29
arrrghhhwell then i'd just try to redo the stupid advanced tree of xml-rpc to fix the issue just to have it broken again by an update.04:32
jayveeiptables -P INPUT -j ACCEPT, maybe?04:36
jayveecan't remember the exact syntax04:36
jayveepastebin 'iptables -L -v'04:37
sekyourboxjayvee, sorry I didnt know you were talking ...04:57
sekyourboxI did an iptables -F ; iptables --flush; and iptables-save.. When i reboot it shows the same configuration of deny all is in there.04:57
sekyourboxnot sure what to check for startup scripts04:58
twbsekyourbox: pastebin the output of "find /etc/init /etc/event*/ /etc/rc?.d/ -ls".05:02
sekyourboxsorry no internet on that machine05:02
sekyourboxlol twb05:02
twbsekyourbox: I don't care how you do it.05:02
sekyourboxokay was that just me?05:13
sekyourboxor was that a netsplit from hell05:13
thebwtsekyourbox: yup05:13
thebwtsekyourbox: oh, as in just you, you were the only one that left from my PoV05:14
sekyourboxlol, are you playing with me?05:14
thebwtNetsplit *.net <-> *.split quits: sekyourbox05:14
thebwtlol05:14
sekyourboxre spawn05:15
ChmEarlfinally got linux-image-virtual kernel running as PV guest in Xen05:23
ChmEarlguest is Karmic 9.10 server (root=1G) and host is Xen 4.0 on SuSE 11.205:24
uvirtbotNew bug: #535533 in qemu-kvm (main) "gdb fails in arm chroot" [Undecided,New] https://launchpad.net/bugs/53553306:37
mealstromhi. easy question. how to disable ip_v6 on some ethernet port ? say eth007:12
mealstromnot os easy as I supposed...07:34
jayveemealstrom, sysctl net.ipv6.conf.eth0.disable_ipv6=107:44
mealstromthanks07:45
jayveebut why do you want to disable ipv6?07:45
mealstromthere were some unfixed bugs with ipv6 and dhcp or something like this. just want to close external interface07:45
jayveeif I were you, I'd seriously consider deploying IPv6 for real some time.07:47
Jeeves_'some unfixed bugs with ipv6'07:53
Jeeves_mealstrom: Disable ipv4 as well! There are various products on IPv4 that have unfixed bugs!07:54
mealstrom(:07:54
mealstromnice idea07:54
mealstrominternal network is using ipv6 )07:54
persiaPoint-to-point serial connections are the only safe path to the future :)07:55
persiaBut more seriously, why isn't IPv6 the default for the virbr0 network in libvirt?07:56
Jeeves_persia: Because ipv6 is unfortunatly not taken very seriously by some people08:08
persiaJeeves_: Is there a technical reason we can't set up libvirt do to both IPv4 and IPv6 by default?08:09
Jeeves_You'd need some address space08:09
Jeeves_I'd think you'd need to add a /64 to the libvirt interface08:10
persiaWe're using something in 192.168/16 now for IPv4.  Couldn't we use something in fc00::/7 for IPv6 ?08:10
persia(or maybe fec0::/10 )08:11
jayveepersia, because the VMs can't connect to the Internet that way08:11
jayveeIPv6, unlike v4, doesn't have NAT for that sort of thing.08:11
jayveeyes, you can add global addresses as well, but it's a little sticker08:12
jayvees/sticker/stickier/08:12
persiaAh, so we'd need to install an IPv6->IPv4 gateway by default, and that breaks people with IPv6, etc.08:12
Jeeves_persia: Uh? What?08:12
Jeeves_You just need ipv6, not an ipv6->ipv4 gateway08:12
persiaJeeves_: I either need IPv6 NAT or a gateway to let the VMs route to the internet unless I have real address space.08:13
Jeeves_I'm trying my best to get Canonical to offer all packages on ipv6, so you won't need ipv4 at all! :)08:13
Jeeves_persia: get real address space? :)08:13
Jeeves_Seriously, get a tunnel somewhere08:13
Jeeves_Or just native, but that's probably more complicated08:14
persiaJeeves_: What packages don't work with IPv6?  Surely those can be just patched, rather than waiting for Canonical to get to it.08:14
persiaJeeves_: Also, while getting address space isn't that hard, it doesn't solve the "what gets shipped by default" issue.08:14
* persia tries not to carry local patches or configuration changes, if possible, as this makes install/replication of new stuff easier08:15
Jeeves_persia: archive.ubuntu.com and security.ubuntu.com don't have AAAA-records08:15
persiaOh, so there's no IPv6 mirror.  I understand.  Is there anything missing in the packages, or is it just a mirror thing?08:16
jayveethings like Postfix don't come configured for IPv6 out of the box08:17
jayveeSo following things like this http://www.sixxs.net/wiki/Postfix (which I wrote) becomes necessary.08:17
persiajayvee: Is there a known working patch to the default config that would sort that, or do we run into address space issues again?08:17
jayveeWell IMO it's something that should change upstream as well.08:18
jayveeIt shouldn't require hard-coding of your IPv6 address space08:18
persiaI'm in complete agreement with that.  Is there a patch that makes sense to make to default config?  (Doesn't really matter where it gets applied, once it exists)08:19
jayveeIf you don't specify mynetworks, I believe it is automatic, so if the defaults were changed to 'all' instead of 'ipv4', it should "just work".08:19
jayveeOnly disadvantage is that no spam DNSBLs support IPv6 yet.08:19
jayveeOne did, but it's now defunct.08:19
jayveeNot sure if a patch exists.08:19
* persia tends to find that ideas get more tractions when patches exist and are promoted08:20
persiaBut the lack of DNSBL for IPv6 makes it awkward :(08:20
jayveeWell DNSBLs aren't configured by default anyway, so there's one way to justify it.08:20
persiaGood point.08:20
jayveeAlso I haven't seen a single piece of spam or abuse on IPv6 yet.08:21
persiaThat's a sign of lack of adoption, really.08:21
jayveeYeah.08:21
jayveeAlso, avahi doesn't come configured with IPv6 turned on by default.08:21
persiaI could once say that about Usenet :)08:22
jayveeOne really unfortunate thing about avahi is that when you do enable IPv6 in /etc/avahi/avahi-daemon.conf, you see duplicate services.08:22
persiaIs there a local-link address space for IPv6?  I didn't think there was an equivalent to 169.25408:22
jayveeyes08:22
jayveefe80::/12 or something08:22
jayveeSo, for example, in the VNC client, you see two of every server that has IPv4 + IPv608:22
mealstromomg ... I've just said how to disable ipv6 on one nic :)08:23
* jayvee looks it up 08:23
jayveefe80::/1008:23
persiamealstrom: Sure, but you've hit on a discussion that needs happening :)08:23
jayveepersia: http://www.iana.org/assignments/ipv6-address-space/ipv6-address-space.txt08:23
Jeeves_btw, Ubuntu postfix doesn't come with ipv6-enabled by default08:23
jayvee2000::/3 (i.e. 2000-3fff) is the "global" address space08:24
jayveeJeeves_, yeah, I just said08:24
=== Disconneu is now known as Disconnect
persiaRight.  So postfix is easy: just needs a minor tweak (and some discussion on the mailing list)08:24
jayveefc00::/7 is closest to the RFC 1918 addresses (e.g. 10.0.0.0/8)08:24
persiaWell, and 172.16... and 192.168...08:24
jayveeyaeh08:24
jayveepersia: $ host www.debian.org08:25
persiaavahi needs some way to know when we're talking to a unique machine to avoid duplicated services.  Can we do something with arp to help with that?08:25
jayveewww.debian.org has IPv6 address 2001:388:1034:2900::2608:25
jayveethat's hosted in Australia. :-D08:25
jayveepersia: nothing to do with what you just said, but IPv6 doesn't use ARP08:25
persiaheh.  I wonder who tracks that record most closely :)08:25
jayveeit uses Neighbour Discovery08:26
jayveeyou could turn off ipv4 in avahi, but that breaks compatibility with every released ubuntu to date08:26
jayveenot sure how OS X does it08:26
jayveeOS X has had full IPv6 zeroconf support since 200308:26
persiaProbably ignores IPv6 if names are duplicated or something.08:26
jayveethere is also a major flaw in the internals of glibc that prevent mdns from working with link-local (fe80::/10) addresses08:27
persiaThere's an open bug about that?08:27
jayveeyes08:27
jayveeit's been open for years and years08:27
persiaAnyone working on it?08:27
jayveedoubtful08:27
jayveeit would break too much software08:27
jayveeit's more of a design flaw08:28
jayveereason being is that link-local addresses also require a "scope ID"08:28
jayveeso I can ping a global address without a scope ID, like so:08:28
jayvee$ ping6 2001:44b8:1::108:28
jayveebut to ping a link-local address, I need to specify the ethernet interface08:28
jayvee$ ping6 fe80::21b:fcff:fe25:42e7%eth008:28
jayveenow that's obviously structured differently in memory08:29
jayveebut basically glibc doesn't have the provision to return the scope in the dns functions, from what I understand08:29
jayveeactually, I think that's more nss-mdns's problem than avahi08:29
persiaSounds it.08:30
jayveeso that doesn't work in an ad-hoc setting08:30
jayveewhereas 169.254 addresses work fine with avahi right here rightn ow08:30
persiaOK.  Reading about NDP, it won't get us information we can reliably compare with something else to determine host identity.08:31
jayveethe one thing that is the same is the hostname, though08:31
persianot necessarily, but I agree it's likely safe to assume that.08:31
jayveenss-mdns also isn't enabled for ipv6 by default08:31
persiaBut I think that belongs in the avahi UIs, rather than anywhere else.08:31
jayveein /etc/nssswitch.conf, you need to change 'mdns4' to 'mdns'08:32
jayveein ubuntu 8.04, samba doesn't support ipv6, but in 8.10 and up, it is fully supported and interoperable with Windows Vista, which also supports SMB over IPv608:33
jayveehowever, LLMNR isn't supported08:33
jayveewhich is basically the IPv6 equivalent of nmblookup that microsoft invented08:33
persiaRight.08:33
merlijn-hello, I'm trying to get ubuntu to boot from an older debian kernel - I have already downgraded to grub-1 but I keep getting error 13 when trying to boot the old kernel08:33
jayveeLLMNR is rumoured to be supported by avahi one day08:33
jayveeLLMNR is not ubuntu's problem08:33
jayveehttps://bugs.launchpad.net/ubuntu/+source/nss-mdns/+bug/9494008:34
uvirtbot`Launchpad bug 94940 in avahi "mdns listed in nsswitch.conf causes excessive time  for dns lookups" [Undecided,Confirmed]08:34
persiaI think there ought to be a wiki page listing known issues and referencing open bugs, etc.08:34
persiaLooking around, I don't think one exists.08:34
persiaThere's https://wiki.ubuntu.com/IPv6Integration but that's an incomplete spec.08:34
jayveehttp://lists.freedesktop.org/archives/avahi/2007-February/000959.html08:34
persiaThere's also https://wiki.ubuntu.com/IPv6 but that's user documentation.08:35
persiaWould you mind creating https://wiki.ubuntu.com/IPv6/OutstandingIssues or similar?08:35
persiaJeeves_: Maybe you also have some useful stuff to add there?08:35
persiaif we get it all in one place, I suspect we'll be well poised to get patches where they need to be to make it work.08:36
FireCrotchisn't "outstanding issues" and the like what launchpad is for?08:36
Jeeves_FireCrotch: Yes, it is08:36
Jeeves_persia: the wiki isn't a bug tracker :)08:36
persiaFireCrotch: Launchpad does a great job of capturing individual issues, or plans to resolve classes of issues.  It does less well at organising them.08:36
persiaJeeves_: I know, but it gives us structure, so we can identify which issues block other bits, etc. and build a strategy to solve things.08:37
persiaJeeves_: I don't think just adding an "ipv6" tag to bugs gives us that.08:37
jayveethere's already the "IPv6 Task Force" in launchpad which does bugger all08:37
Jeeves_Indeed08:37
persiaMaybe that team needs a refresh :)08:38
jayvee(excuse my Australian)08:38
Jeeves_persia: Feel free to join08:38
persiaJeeves_: I need to get a new router first :)  My router doesn't support IPv6.08:39
persia(and I know almost nothing about the area)08:39
jayveeyou can learn a lot even by just running a tunnel on your PC08:39
jayveeapt-get install gw6c08:40
jayveegets you on the IPv6 internet with a single IP through an anonymous tunnel provided by freenet608:40
jayveeworks through NATs with no config08:40
persiaInstalled, and I'm sure I'll learn.08:41
jayveepersia: does http://ipv6.google.com/ work?08:41
persiaI still think it's worth trying to organise the list of issues if we want them solved.08:41
jayveeI think the main issues aren't actually technical — they're political08:42
persiajayvee: Now that I've installed gw6c, yes.08:42
jayveefor example, I was disgusted when I was reading the Ubuntu Enterprise Cloud documentation08:42
persiaI'm fairly certain the main issues are political.  That's why I think it needs organisation.08:42
jayveeit was all IPv408:42
persiaOrganisation is key to political discussion, and well-organised plans can easily overcome apathy.08:43
jayveehmm, I guess you have more faith in bureaucracy than I do :)08:44
persiaIt's not that.  I just consider bureaucracy a tool.08:45
persiaLike any tool, one needs to use it the right way.08:45
persiaDocumentating what needs doing, and in what order it needs doing builds a plan.08:45
persiaHaving such a plan makes it easier to create the necessary patches.08:45
persiaGetting those patches applied is just legwork on the various mailing lists, bug trackers, etc.08:45
persiaHaving a plan, and garnering support at the distribution level helps provide incentive and demonstration of testing to upstreams.08:46
persiaHaving a plan and garnering upstream support helps support applying patches at the distribution level when upstream balks.08:46
jayveeI'm just gonna test whether nginx supports it by default08:47
jayveeactually, I already have apache08:48
jayveehmm, someone else want to install nginx on karmic or lucid and tell me what "netstat -64ln | grep 80" says?08:48
persiajayvee: Do you need a real install, or will the result from a liveCD meet your needs?08:50
jayveelive CD08:50
jayveehey, don't go to too much trouble08:50
persiaArgh!  kvm is coredumping on every launch for me right now.  Sorry.08:54
persia(and worse yet, the "report a problem" bit won't complete)08:54
jayveeno worries at all08:54
jayveeI'm wiping the dust off one of my VMs08:55
persiaWhen kvm isn't segfaulting, I usually find it trivially easy to instantiate a new VM from a liveCD.08:55
persia(and tend to recommend that procedure rather than maintaining VMs for scratch tests)08:56
persiaA fresh install tends to avoid any yet-unfixed upgrade bugs.08:56
jayveepersia: well here we go: https://wiki.ubuntu.com/IPv6/OutstandingIssues08:57
persiaWasn't there a glibc bug?08:58
persiaJeeves_: Do you know of anything else outstanding?08:58
jayveeActually I think that a section should be added with regards to services like archive.ubuntu.com and www.ubuntu.com not having AAAA records.09:00
_rubeni thought postfix posed you a question wether to listen on ipv4 or ipv6 or both .. perhaps only during reconfiguration or so09:00
persia_ruben: It does, but only on reconfigure.09:01
persia_ruben: The idea would be to change the default.09:01
_rubenpersia: ah ok09:02
Jeeves_There's a bug where ssh x-forwarding doesn't work on a box where ipv6 isn't enabled, but ssh listen on ::09:02
persiaTemplate: postfix/protocols09:02
TeTeTttx: on bug 524147, is it true that one CC always controls exactly one Availability Zone? So you can't have an AZ with multiple CCs for redundancy within that AZ?09:03
uvirtbot`Launchpad bug 524147 in eucalyptus "UEC NC failed to fetch preseed.conf from CC using lucid-server-amd64-20100218" [Medium,Confirmed] https://launchpad.net/bugs/52414709:03
ttxTeTeT: yes it's true09:03
ttxTeTeT: you can't have multiple CCs for the same "cluster"09:04
ttxTeTeT: there is a HA module in the closed-source eucalyptus, not sure what it does though09:04
persiaJeeves_: How can ssh listed on :: when IPv6 is disabled?09:05
Jeeves_Let me rephrase that.09:06
Jeeves_ipv6 is enabled but there aren't any ipv6 addresses available09:06
persiaAh.  Right.09:07
* persia suspects that's a bug in the definition of "ipv6 is enabled"09:07
TeTeTttx: ok, so you should plan your CC and CLC to be redundant when going for a production environment, only the NC can be left brittle09:08
jayveepersia, Jeeves_: there is also the possibility for currently working IPv6 functionality to be broken for IPv4 in the future09:09
jayveeDebian recently announced that bindv6only would be enabled by default09:09
jayveecurrently, if you listen on ::, it includes the ::ffff:0.0.0.0 compabitility addresses for IPv409:09
jayveeso if your server app is IPv6-enabled, it is IPv4 enabled09:09
jayveeso you only have to support one stack09:10
Jeeves_persia: There allready is a bug about that09:10
ttxTeTeT: CLC and Walrus are the one SPOF, CC+SC you could consider losing them and still have a few clusters running elsewhere09:10
jayveeand lots of servers currently depend on that behaviour, and will then lose IPv4 functionality when that option is enabled09:10
ttxTeTeT: depends on the SLA you want to offer with the private cloud09:10
jayveereason why the option is changing is because it's not RFC-compliant, as far as I've heard09:10
jayveeunrelated, but CentOS has a bug in its installed. It says "neighbour advertisement" when it should say "router advertisement". and actually I think it should be saying "router discovery" in that particular instance, but I forget.09:13
jayvees/installed/installer/09:13
persiaJeeves_: I can't find that bug.  All I find for ssh ipv6 are bugs #281882 and #40717309:14
uvirtbot`Launchpad bug 281882 in openssh "ssh hangs in initial handshaking when using IPv6" [Undecided,Confirmed] https://launchpad.net/bugs/28188209:14
uvirtbot`Launchpad bug 407173 in openssh "openssh: Please set traffic class on IPv6 packets" [Wishlist,Confirmed] https://launchpad.net/bugs/40717309:14
Jeeves_persia: Just a sec09:15
jayveethere is a bug that I don't know whether it was reported or not, but if I use an SSH SOCKS proxy, I cannot access IPv6–enabled websites09:17
jayveewhether SSH is running over IPv4 or IPv609:17
jayveeall I get is "connection denied" or something — can't remember exactly09:17
Jeeves_persia: 43479909:18
persiabuf #43479909:18
persiabug #43479909:18
uvirtbot`Launchpad bug 434799 in openssh "X11 forwarding via SSH does not work after upgrade to karmic" [Low,Confirmed] https://launchpad.net/bugs/43479909:18
persiahttps://bugs.launchpad.net/ubuntu/+bugs?field.tag=ipv6 probably needs more, but I've added that.09:19
uvirtbot`New bug: #535583 in nut (main) "Excessive logging by apcsmart program" [Undecided,New] https://launchpad.net/bugs/53558309:21
persiajayvee: Were you talking abut bug #239701 earlier, or a different one in glibc ?09:49
uvirtbot`Launchpad bug 239701 in glibc "getaddrinfo fails with numerical IPv6 values" [Undecided,New] https://launchpad.net/bugs/23970109:49
jayveepersia, nope09:58
persiaHeh.  OK.09:58
jayveeI'm referring to the fact that resolving something like "rillian.local" can't return "fe80::21b:fcff:fe25:42e7%eth0". Only things like "2001:44b8:7df3:b970::23".09:59
persiaI found a bunch more "please enable ipv6" bugs.  I'm not sure there is a clear solution for them yet.  Added a link to the bugtracker on the page.09:59
jayveeOn OS X, it works perfectly.09:59
jayveeping6 rillian.local works both on a link-local only and a global network.09:59
jayveeon OS X09:59
Jeeves_jayvee: On osx, you're never sure wether you will use ipv4 or ipv610:00
persiaRight.  So we need to reach feature parity :)10:00
Jeeves_It depends on what answer comes in first10:00
jayveeI'm not sure whether it's an RFC-compliance issue. Maybe OS X is breaking RFCs to provide that. But I'm not sure.10:00
jayveeBut OS X has supported that since v10.3, which was released in 2003.10:00
jayveeMy v10.3 Panther system supports IPv6 better than Windows 7 and Ubuntu. ;)10:00
uvirtbot`New bug: #325111 in ntp "ntpq output truncates IPv6 addresses" [Unknown,Confirmed] https://launchpad.net/bugs/32511110:01
jayveeejabberd doesn't have IPv6 enabled by default10:01
jayveeis it worth talking about universe packages, or only main packages?10:01
jayveeI spose main is more important. ejabberd is in universe.10:02
persiaIt's worth talking about everything.10:02
persiaThe current definition of "main" is only that stuff in main builds against stuff in main.  It doesn't currently correspond to translations support, upload restrictions, security support, etc.10:03
persiaA better way to think about things is "what is available by default takes priority".10:03
jayveewell CUPS only listens on 127.0.0.1:63110:06
jayveeso http://[::1]:631/ doesn't work — not that that's a problem affected by the IPv4 apocalypse10:06
jayveelocalhost should resolve to both ::1 and 127.0.0.110:07
jayveecurrently it only resolves to 127.0.0.110:07
jayveealso, Second Life doesn't work if you have an IPv6 address for a nameserver in /etc/resolv.conf10:07
jayveebut that's offtopic — it's not in Ubuntu10:07
jayveeI do believe bind9 is IPv6-enabled by default.10:09
jayveeI think maybe some sample config in comments for IPv6 wouldn't go wrong in /etc/network/interfaces10:10
jayveecomments in configs are some of the best ways to learn, IMO10:10
persiaSome of the bugs I'm encountering reference a slowness when IPv6 is enabled, and suggest disabling it.10:12
persiaCould this be worked around by trying IPv4 first when available until the majority of folk are using IPv6?10:12
persiabug #374674 looks like an attempt to do that, but perhaps not in the ideal way10:16
uvirtbot`Launchpad bug 374674 in glibc "ipv6 link local address lookup broken" [Undecided,New] https://launchpad.net/bugs/37467410:16
Japjepersonally i would not prefer a work around that try's IPv4 before IPv6.. mainly because v6 first is expected behavior for everything .. dont think breaking that behavior is a proper solution10:17
Japjebut thats just my humble opinion10:18
persiaJapje: So, how do you suggest things be configured so that non-IPv6 using Desktop users don't need to wait for an ipv6 lookup timeout before starting the IPv4 lookup?10:18
persiaI agree with the idea, but think that IPv4-before-IPv6 is better than no-IPv610:19
Jeeves_persia: a NXdomain will not cause timeouts10:19
Jeeves_A nameserver that doesn't understand AAAA-requests will cause timeouts10:19
Jeeves_glibc is fixed, so that it won't ask for AAAA-requests if there is no routable ipv6 available10:19
persiaRight, which is extremely common at the average "WiFi HotSpot"10:19
Jeeves_Indeed10:20
Jeeves_Because using a sane nameserver is very difficult! ;)10:20
persiaAnd this causes complaints, and current documentation that recommends disabling IPv6.10:20
persiaI'd like to find a (temporary) solution that helps ensure IPv6 is enabled for everyone, and then it's easier to migrate folk.10:21
persiaNote that this may not cause hideal behaviour for IPv6 users in mixed environments by default, but surely that's better than having IPv6 just not work.10:21
=== mks1 is now known as SchneeSchwarz
=== _ruben_ is now known as _ruben
persiaOK.  Of the 68 tagged ipv6 bugs 9 have patches or branches.  Those probably need a bit of testing, and coordination with appropriate folk.  The rest need patches.10:43
hemanthhi, is there a way to keep two mysql DB's in sync in LAN?11:15
hemanthi'm on a Ubuntu 8.04 [LTS] server11:16
Jeeves_hemanth: Yes, Mysql Replication11:22
Airellscould you tell me softs like webmin to administrate servers ? ( everything that makes job easy ) thx11:29
_ruben!ebox11:29
ubottuebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox11:29
Airellsubottu, thx11:30
hemanthJeeves_, any package for that? i tired mysql replication, but there  i need to specifically indicated each and every table.11:30
Airells_ruben, thx11:31
=== Determinist_ is now known as Determinist
Jeeves_hemanth: No you don't need to do that11:46
Jeeves_* is good enough11:46
Kenjirogood morning everyone12:06
Kenjiroguys, since yesterday I am trying to fix a problem on a apache server (ubuntu 9.10)12:06
KenjiroI try to start apache2 and I get -> Syntax error on line 43 of /etc/apache2/sites-enabled/000-default:12:07
KenjiroUnknown Authn provider: ldap12:07
Kenjirohowever, I do have ldap.load in /etc/apache2/mods-enabled/12:07
cjwatsonttx: can you reproduce bug 535123?  if so, how?12:10
uvirtbot`Launchpad bug 535123 in openssh "Lucid: Recent update to ssh mean ssh-askpass-gnome fails to recognize the correct password" [High,New] https://launchpad.net/bugs/53512312:10
cjwatsonttx: you were pretty definite about which version you reckoned introduced it ...12:11
cjwatsonttx: but there were no changes anywhere near that part of the code AFAICS12:12
Kenjirook, sorry, I think I solved that by myself. I hadn't enabled the authnz_ldap module ;)12:16
ttxcjwatson: haven't reproduced it (that's why I haven't marked it Confirmed), guessed version based on reporter comment12:26
ttxi.e. tried to translate "Recent update" to something clearer12:27
cjwatsonmore likely an upstream upgrade to 5.3p1 then12:28
ttxcjwatson: switched to Incomplete/Medium to reflect the fact that it's not easily reproducible12:28
acalvois there any reason why two VMs in the same VM server sharing the same net behave different when accessing thru SSH? one faster and the other much slower12:41
acalvohow can I do some benchmarks to know the overall performance of a server?12:41
pmatulis!info iperf12:42
ubottuiperf (source: iperf): Internet Protocol bandwidth measuring tool. In component universe, is optional. Version 2.0.4-4 (karmic), package size 53 kB, installed size 200 kB12:42
acalvothanks12:43
=== pts is now known as pths
pmatulisacalvo: are you comparing performance of the 2 VMs while both are being used?12:50
acalvoyes, but just to get some results12:50
acalvoif the connection is greater than, 100Mbits, will be fine12:50
pmatulisacalvo: both using virtio network driver?12:50
pmatulis(i'm assuming you're using KVM)12:51
acalvoI can't explain why SSH'ing one gets semi-stuck entering commands and the other goes fine12:51
acalvopmatulis: VMWare ESXi server with VMware tools installed12:51
acalvoboth ubuntu 9.0412:51
pmatulisoh12:51
uvirtbot`New bug: #536620 in vsftpd (main) "SEGV when using pasv_address" [Undecided,New] https://launchpad.net/bugs/53662012:51
ograttx, you i and NCommander need to talk about likewise but i'm in several calls today, will you be around in 2-3h ?12:51
ttxogra: should be yes12:52
ogragreat12:52
acalvoconnection is fine (> 900 Mbits/sec)12:54
acalvowhy could cause a SSH to be so slow?12:55
pmatulisacalvo: well, you'll need to describe the test that makes you come to that conclusion12:55
acalvowell, I've just tested connection status with iperf and its default configuration12:57
zulmonring12:58
pmatulismorning12:58
uvirtbot`New bug: #535608 in ntp (main) "package ntp 1:4.2.4p6 dfsg-1ubuntu5.1 failed to install/upgrade: il sottoprocesso vecchio script di post-installation ha restituito lo stato di errore 127" [Undecided,New] https://launchpad.net/bugs/53560813:10
uvirtbot`New bug: #420470 in samba (main) "winbind segfault starting up" [Medium,Triaged] https://launchpad.net/bugs/42047013:16
zuldie bugs die!13:20
=== th0mz_ is now known as th0mz
uvirtbot`New bug: #529290 in samba (main) "logrotate script needs to be updated for Upstart conversion" [Undecided,Triaged] https://launchpad.net/bugs/52929014:02
=== kirkland` is now known as kirkland
uvirtbot`New bug: #514765 in samba (main) "Shared folder creation fails due to incorrect testparm path" [Low,Incomplete] https://launchpad.net/bugs/51476514:12
mathiazjcastro: hi - https://bugs.edge.launchpad.net/~ubuntu-server/+patches14:13
mathiazjcastro: ^^ what are bugs marked Fix Released included in the report?14:14
diagowhat replaced vol_id in 9.10 ?14:20
diagoI used to use vol_id --uuid14:20
diagowhat replaced vol_id in 9.10 ?14:26
persiaAsking multiple times won't get an answer faster.14:27
persiaAsking for support in this channel when all the developers are in a meeting also is likely to cause a delay.14:27
diagoI believe I waited the 10 minute period allotted by IRC14:27
diagoah, no I didn't I just saw people jumping in14:28
* _ruben never heard of such a 10minute rule14:29
_rubenand the answer might be "blkid"14:29
diagothanks _ruben14:30
diagoAnyone know how to get just the UUID?14:32
persia_ruben: The "10 minute rule" is a guideline in #ubuntu, where there's so much traffic that questions often do need repeating.14:35
=== robbiew_ is now known as robbiew
_rubenpersia: ah ok14:42
* Kenjiro is back14:45
KenjiroI am trying to find out what I am missing. I have a ubuntu server which should authenticate, using LDAP, on another server14:45
Kenjirohowever this ldap authentication is not working... and I don't know why :(14:45
Kenjiroas far as I checked, the logs don't give me a good clue :(14:46
Kenjiroall I get is this -> http://pastebin.ca/183191014:47
Kenjiroany tips? :(14:47
KenjiroI don't know which config files I should check now14:47
Kenjiro(ubuntu 9.10)14:47
Kenjiroand yes, I am FAIRLY green to ldap :(14:48
sherrKenjiro: what guide are you following?14:49
sherrKenjiro: Have you trid following :14:50
sherrhttp://www.howtoforge.com/install-and-configure-openldap-on-ubuntu-karmic-koala14:50
sherr*tried14:50
Kenjirosherr: to be true... I was "given the mission" to migrate an old server to this new one. (all the services).14:50
Kenjiroout of the blue, short time to do it... (you might know how things work) :(14:51
sherrOK, well try following a guide :-) Howtoforge are normally step by step.14:51
Kenjirosherr: let me check that guide of yours14:51
Kenjirosherr: my problem is setting up the client14:52
Kenjirothe server is ok14:52
sherrNote - not my guide. I have not used it (or configured LDAP) - but there are lots of good resources around.14:52
Kenjiro(just for the record)14:52
acalvoKenjiro: but where is the problem?14:59
acalvoKenjiro: nss_ldap?14:59
Kenjiroacalvo: that's the problem... I don't know where the problem is15:00
Kenjiroacalvo: did you check that pastebin I pasted here?15:00
acalvonope15:00
Kenjirohold on15:00
Kenjirohttp://pastebin.ca/183191015:00
acalvoit just shows that a user tried to log in15:00
acalvoand the system does not know that user15:00
acalvobut what do you want to achieve?15:00
Kenjirothat's what I get in /var/log/auth.log when I try to login using a user from the ldap server15:00
acalvorelay in another server to do the auth at PAM level?15:00
Kenjiroacalvo: I have to migrate the services from an old ubuntu server to this new one (9.10).15:01
acalvoyes, but what services?15:01
Kenjiroalmost everything is ok by now, but this login/auth thing15:01
sherrKenjiro: there are command line ldap query tools - query the ldap server for the user - is the user found?15:01
Kenjiroon the old server I can login using a LDAP user (the ldap server is another one)15:02
acalvoKenjiro: hold on15:02
Kenjiroon the new server I can't15:02
KenjiroI started checking the config files on the old server, than changing the files on the new server15:02
acalvoKenjiro: ok, look https://help.ubuntu.com/9.04/serverguide/C/openldap-server.html for "LDAP Authentification"15:03
Kenjiroacalvo: holding ;)15:03
acalvothat's why I've set up most of my servers to auth against another LDAP server15:03
acalvos/why/how15:03
Kenjirolet me check that then15:03
Kenjiroguys, first and foremost, thanks for the attention ;)15:03
acalvonp15:03
acalvoI've a server crashing randomly. I've tried to set up something to log when it crashes, but I couldn't see anything wrong15:04
acalvoany way to get all data before it crashes?15:04
acalvoit's just a web server with bind and dhcp3-server15:04
acalvoit had squid with NTLM auth, but I've removed both (squid and windbind)15:05
acalvoand now it's crashing15:05
acalvoI can ping it when it's "dead", but I can SSH to it nor access directly15:05
acalvohard reboot to get it working again15:05
* Kenjiro bbl15:05
diagoacalvo: no chance for booting into recovery?15:06
acalvowell, I guess I can15:06
acalvowhat's the point in rebooting into recovery?15:07
diagoaren't you just trying to get you data off?15:07
acalvonope15:07
acalvoI'm tryting to get it working 100%15:07
diagoah, maybe you can research the logs in recovery15:08
=== koolhead17 is now known as hothead786
AnAntHello, how can I set user permissions on LDAP ?15:08
acalvodiago: that what I've thought, but it days so early I can see nothing in the logs15:09
acalvoAnAnt: user permissions for what?15:09
acalvoAnAnt: changing something in LDAP?15:09
acalvofool question: when a computer runs out of memory (physical and virtual), it gets stucked?15:10
diagoif it doesn't it would be PAINFULLY slow15:10
diagoI can see services shutting down easily because of that though15:11
acalvoyes, but it'd recover from that15:11
acalvokill all memory-eater services and keep going, right?15:11
acalvoI'm seeing that now, when the machines is not in a peak time, swap is being used15:11
AnAntacalvo: no, for machines, ie. I want users X & Y to have admin rights on machines in the network15:12
=== hothead786 is now known as koolhead17
AnAntX & Y are LDAP users15:12
acalvowell, join them to a group that has those privileges15:12
acalvois it samba based?15:12
AnAntno OpenLDAP15:12
AnAntacalvo: so I should go on every machine and add X & Y to admin group15:13
AnAnt?15:16
acalvono15:17
acalvobut you can share LDAP groups across multiple machines15:17
acalvoand give rights to groups15:18
acalvoso every user in those groups have privileges15:18
AnAntgive rights to groups on each machine ?15:18
acalvono15:18
acalvoerm15:18
acalvojust creat groups in LDAP and, using any method, connect your machines to LDAP so they can read all information from it15:19
acalvogroups, users, and so on15:19
acalvothis way, you just have to set up once everything15:19
AnAntyes, but about permissions ?15:19
AnAntI did create the users & groups15:19
AnAntbut the question is, I got machines: red , blue , green15:20
AnAntshould I go to each machine, and add the group "admins" to the sudoers for example ?15:20
leniosas far as i know, yes15:21
leniosit's the same with AD15:21
acalvooh, with that kind of rights, yes15:21
acalvohttps://help.ubuntu.com/9.10/serverguide/C/openldap-server.html15:22
AnAntacalvo: yes, I used that guide15:22
acalvoAnAnt: try to ask in #openldap15:30
uvirtbot`New bug: #536695 in dovecot (main) "1.2.x versions before 1.2.11 are vulnerable to DoS attack" [Undecided,Confirmed] https://launchpad.net/bugs/53669515:31
AnAntok15:31
sherrI have not (yet) had the pleasure of setting up a Directory Server, but have to occasionally use AD at work. Connecting to, or replacing, AD are important topics in the business use of Linux. I'm interested in asking : has anyone experience of using any other DS other than OpenLDAP? There are very interesting opensource alternatives e.g. 389 Directory Server (ex-Fedora DS), Apache DS etc. Not only very full featured, but including decent fron15:44
sherrhttp://directory.fedoraproject.org/15:44
sherrhttp://directory.apache.org/apacheds/1.5/15:44
sherrI'm considering LDAP for future needs - currently using NIS (+AD elsewhere) :-)15:45
acalvowell, I'm using Apache Directory Studio as a front-end15:45
acalvoand openLDAP15:45
sherrto OpenLDAP?15:45
acalvoso far so good15:45
sherrDirectory Studios is the client/front-end. Looks good. Maybe the back-end is good as well.15:46
acalvosure15:46
sherrMy personal view is that a DS is more important for business use than a cloud service/eucalyptus.15:47
acalvois where all the sensitive data relays15:47
acalvoin education also15:47
sherrsensitive data relays?15:48
acalvois stored, I meant15:48
sherrOK. I am sceptical about the cloud strategy for Ubuntu/Canonical, but hope it works out of course.15:50
acalvoit seems they're working hard on it15:50
acalvowill see what it gets15:50
smoserzul, ttx, kirkland, mathiaz i will be in and out the rest of the day, if you need me, please send email.15:54
sherrYes, a lot of effort on it. I hope it pays off. Again from a boring business perspective (mine), I'd rather the effort was a Debian/Ubuntu Directory server, integrating with Samba/AD/Mail. With a decent (modern) front end.15:54
zulsmoser: kk15:54
acalvosherr: agree, from an Education point of view15:55
sherracalvo: Yes, of course. Similar needs in this area to a business - lots of users and machines.15:55
acalvoyip15:56
acalvofrom your experience, is it work to swith to worker vs prefork?15:59
sherracalvo: Mine? My sites never need to worry about it and I've never had to bother testing or switching (from prefork).16:01
acalvook16:01
sherrAll internal, non-public and <20 users (generally).16:01
uvirtbot`New bug: #536736 in samba (main) "package samba-common-bin 2:3.4.0-3ubuntu5.4 failed to install/upgrade: le sous-processus script post-installation installé a retourné une erreur de sortie d'état 2" [Undecided,New] https://launchpad.net/bugs/53673616:16
uvirtbot`New bug: #518804 in samba (main) "samba-common 3.0.28a-1ubuntu4.10 post-installation script crashes (dup-of: 460842)" [Low,Confirmed] https://launchpad.net/bugs/51880416:21
mardok_My question isn't directly releated to the Ubuntu server, but I was wondering how I solve a problem with AppArmor not loading a profile.  I installed a xen kernel and it's says "Failure: AppArmor profiles failed to load"16:24
uvirtbot`New bug: #279643 in puppet (main) "puppet needs openssl" [Undecided,Fix released] https://launchpad.net/bugs/27964316:32
=== oubiwann` is now known as oubiwann
uvirtbot`New bug: #249783 in samba (main) "Wrong message when sharing a root-owned folder" [Wishlist,Confirmed] https://launchpad.net/bugs/24978316:52
Kenjiroacalvo: hello there again.17:11
Kenjiroacalvo: really thanks for that URL you showed me. That really helped solving my problem17:11
Kenjiroacalvo: Domo arigato gosaimas17:11
cortex|skhi guys why is apache automatically reloading when i install apache module(mod_proxy for example)?17:41
GhostFreemanI'm not seeing a ~/.gemrc file in my home dir, could this be a problem?17:49
_rubenno, never seen it myself either17:52
GhostFreemanI guess it wouldn't hurt if I made on17:52
GhostFreemantrying to install Rails with Passenger and Apache217:52
igggiminI'm trying to configure ssh tunnel manager to create a secure tunnel to this home machine that I can use remotely. Can someone help me with this?17:54
igggiminFor example, how do I create the Privkey?17:54
igggiminAnd will Remote Desktop work?17:55
igggiminAnd how can I also set a tunnel to this machine for private internet access?17:55
igggiminI'm running Ubuntu 9.10 here, and will be connecting with Kubuntu 9.10. Any advice are appreciated17:56
=== luis__lopez is now known as luis_lopez
igggiminlol - nobody?18:14
igggiminin the server channel??18:14
Piciigggimin: ssh tunnel manager sounds like a graphical application, and you're not likely to find support for that in the server channel.18:15
PiciIf its not, keep in mind that not all channels are as busy as #ubuntu is.18:16
_rubensigh .. one of these days again .. boot up my fileserver, its seeing all 4 disks as spares, instead of a raid518:17
igggiminfair enough - yes it is graphical. I'm open to command line options too, either way. In the #ubuntu channel someone recommended I ask in here18:18
igggiminBut I'm finding some documentation now - thanks18:18
_rubenweird, doing a mdadm --stop followed by a reassemble does the trick18:19
_rubenhmm .. doesnt see my lvm though ... sigh18:19
andolzul: Regarding bug #462749. In a January comment you mentioned it being a good SRU candidate. Do you mind if I pick up on that, or is it an issue you'd like to finnish yourself?18:58
uvirtbot`Launchpad bug 462749 in vsftpd "vsftpd-2.2.0 (currently in karmic) is affected by pasv_address regression" [Medium,Fix released] https://launchpad.net/bugs/46274918:59
zulandol: be my guest18:59
uvirtbot`New bug: #536837 in freeradius (main) "package freeradius 2.1.0 dfsg-0ubuntu4.1 failed to install/upgrade: subprocess post-installation script returned error exit status 3" [Undecided,New] https://launchpad.net/bugs/53683719:01
RoAkSoAxzul, was my hook ok?19:05
zulRoAkSoAx: yep19:05
RoAkSoAxzul, ok I'll attach the diff to the bug report for you to sponsor it :)19:06
zulRoAkSoAx: sounds good to me19:08
=== rberger_ is now known as rberger
uvirtbot`New bug: #536853 in freeradius (main) "can't make freeradius 2.1.8 - src/main/modules.c:1358: undefined reference to `lt__PROGRAM__LTX_preloaded_symbols'" [Undecided,New] https://launchpad.net/bugs/53685319:26
mathiazkirkland: hi - could you drop the serial consoles on nickel?19:36
kirklandmathiaz: sure20:04
kirklandmathiaz: done20:06
mathiazkirkland: thanks20:11
mathiazcjwatson: hi - does anna-install only knows about udeb that are in main?20:12
mathiazcjwatson: I'm trying to anna-install vlan-udeb from the console in the installer (started via mini.iso)20:12
mathiazcjwatson: it fails with "unkown udeb vlan-udeb"20:13
RoAkSoAxzul, Done: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/53197820:13
uvirtbot`Launchpad bug 531978 in vsftpd "Apport hook for vsftpd" [Low,Confirmed]20:13
zulRoAkSoAx: thanks ill take a look at it20:13
mathiazapw: hi - is it possible to have a kernel-module udeb provide a virtual package?20:14
RoAkSoAxzul, cool I'll just ping you whenever I have the others ready20:14
mathiazapw: for now there is vlan-modules-2.6.32-16-generic-di20:14
mathiazapw: it has the kernel version hardcoded in the package name20:15
mathiazapw: I'd like to be able to make the vlan-udeb (user space) depends on vlan-modules (kernel modules) without using any kernel version. Is that possible?20:15
SEJeff_workHas anyone on the serverteam poked at http://fedoraproject.org/wiki/Features/Zarafa ?20:22
bogeyd6SEJeff_work, that costs more than zimbra :*(20:24
SEJeff_workbogeyd6, There is a gpl version which Fedora is using20:24
bogeyd6ah yes, the community version20:25
bogeyd6sans any outlook support20:26
SEJeff_workbogeyd6, Seems like something we want20:26
SEJeff_workEither way, there isn't anything really like it. Seems sane to work on getting it in Debian and in our repos20:26
bogeyd6they got a lts package too20:26
bogeyd6i think for the meantime SEJeff_work  ill still to vmwares zimbra20:29
uvirtbot`New bug: #536894 in openssh (main) "Feature request:  make ssh-agent call ssh-add automatically" [Undecided,New] https://launchpad.net/bugs/53689420:41
aubrehola, has anyone ever successfully converted a vmware image to xen for use with UEC , and if so what did you use?20:45
GhostFreemanAnyone here good with Passenger?20:50
GhostFreemanit's asking me to add some stuff to Apache conf, just not clear on if that should be added to apache2.conf20:50
aubreI'll take the silence as a no :P20:53
sherrGhostFreeman: No idea about Passenger, but the apache "conf" is "apache2.conf" - but actual sites are configured and enabled via /etc/apache2/sites-available, and linked in sites-enabled (to start). basically, all standard apache config.20:56
GhostFreemanOk, well i'll start in apache2.conf and work recursively into other apache dirs20:58
sherrServer guide might help : https://help.ubuntu.com/8.04/serverguide/C/httpd.html21:00
bogeyd6!anyone | GhostFreeman21:06
ubottuGhostFreeman: A large amount of the first questions asked in this channel start with "Does anyone/anybody..."  Why not ask your next question (the real one) and find out?21:06
bogeyd6ill help you with your apache conf21:06
GhostFreemanOk21:06
bogeyd6but i gotta know what you are trying to do21:06
GhostFreemanI just installed the passenger gem and I am going through the process of setting it up21:06
bogeyd6ok21:07
GhostFreemanits given me some stuff I need to add to the apache configuration. Before I go messing up all the conf files, I want to be sure the file its referring to is apache2.conf21:07
bogeyd6so you are at the part where you need to add something to /etc/apache2/apache2.conf on 8.0.4 lts?21:07
GhostFreeman9.04, and yes21:08
bogeyd6which version of phusion passenger?21:08
GhostFreeman2.2.1121:08
bogeyd6GhostFreeman, so we are clear is wants you to put a loadmodule passengerroot passengerruby and passengerdefault user in that apache2.conf ?21:09
GhostFreemanYes21:09
bogeyd6ok21:10
bogeyd6GhostFreeman, nano /etc/apache2/apache2.conf21:10
bogeyd6arrow all the way down to the very end of the file21:10
GhostFreemanand just add them at the bottom21:10
bogeyd6yup21:10
bogeyd6just like that21:11
bogeyd6press cntrl + x to save it21:11
bogeyd6then /etc/init.d/apache2 restart21:11
bogeyd6well sudo of course21:11
bogeyd6!noroot21:11
ubottuWe do not support having a root password set. See !root and !wfm for more information.21:11
GhostFreemanMuch appreciated bogeyd621:11
malifalhow do i redirect iptables log to some logfile other than messages?21:16
bogeyd6malifal, change in /etc/syslog.conf21:17
bogeyd6unless you use syslog-ng21:17
bogeyd6malifal, if its not already there use "kern.warning /var/log/iptables.log"21:18
bogeyd6malifal, then /etc/init.d/sysklogd restart21:18
malifali don't have /etc/syslog.conf21:19
malifali'm running ubuntu 9.0421:20
malifalsorry 9.1021:20
malifal:)21:21
malifalok it's rsyslog21:22
malifalisn't there another way of identifying the iptables messages other than redirecting all kernel warning to another file?21:25
malifalcause that's what the line is doing right?  right now everything kern.* is going to /var/log/kern.log21:26
bogeyd6malifal, sorry got pulled away21:28
bogeyd6malifal, in your iptables file you put --log-level 4 at the end of the rules21:28
malifalwatching the game ? ;)21:28
bogeyd6malifal, --log-prefix 'text' is also a good thing to do for quick grepping of the log file21:29
malifaland Man U score again21:29
cjwatsonmathiaz: yes, it only works on main; and vlan-modules-blah Provides: vlan-modules, so you can (indeed should) just depend on vlan-modules21:29
bogeyd6malifal, i get the sense you are hesitant, please go here https://help.ubuntu.com/community/IptablesHowTo21:30
bogeyd6also21:30
bogeyd6!iptables | malifal21:30
ubottumalifal: Ubuntu, like any other linux  distribution, has firewall capabilities built-in. The firewall is managed using the 'ufw' command (see https://help.ubuntu.com/community/Uncomplicated_Firewall_ufw), or 'iptables' (https://help.ubuntu.com/community/IptablesHowTo). GUI applications such as Firestarter/Gufw (Gnome) or Guarddog (KDE) also exist21:30
malifalok thanks bogeyd6 i'll check out the links21:30
mathiazcjwatson: great -thanks - so seeding vlan-udeb somewhere should be enough to pull both packages into main21:31
sherrmalifal: you can also try and use the syslogger that Ubuntu uses (rsyslogd) to look for some log "patterns" and put in a different log file. See the man page :21:31
sherrhttp://manpages.ubuntu.com/manpages/hardy/man5/rsyslog.conf.5.html21:31
malifalsherr: ok cheers, i'll consider both alternatives21:33
bogeyd6i keep forgetting people use rsyslog21:33
mathiazcjwatson: hm - I can see that vlan-modules-*-di is already in component_mismatch21:35
mathiazcjwatson: does it make sense to add vlan-udeb (vconfig userspace utility) to the installer seed in platform.lucid?21:35
sherrbogeyd6: I prefer syslog-ng but Ubuntu defaults to rsyslog, and I tend to leave it ... I haven't tried customisation yet.21:43
cjwatsonmathiaz: maybe server-ship - otherwise it would end up on the alternate CD too?21:43
mathiazcjwatson: ok21:44
savidIs there a way using apt-get or aptitude to show what would be changed if I ran "safe-upgrade" or "full-upgrade"?  ie, something like a "dry run"?21:54
sherrsavid: see : man aptitude21:58
savidsherr, yeah, I'm looking through it but can't find the command21:58
sherrSearch for  "simulate"21:58
savidAh, thanks!21:58
sherrFingers crossed! :-)21:59
savidHmm..22:00
uvirtbot`New bug: #536930 in kerberos-configs (main) "Password changing fails when "krb5" pam-config is not first" [Undecided,New] https://launchpad.net/bugs/53693022:01
savidOk,  so my goal is to be able to update my ubuntu 8.10 production-level server to use python2.6,  but it is not in the package repository for 8.10 (which only goes up to python 2.5).   What is the best way for me to approach this?22:01
savidI'm scared to do a distribution upgrade (ie, upgrade to 9.10) because of what might break...  I want as little downtime as possible22:02
savidEvery time I do an upgrade on my local ubuntu box something _always_ goes wrong,  so you can understand my fear ;-)22:02
bogeyd6savid, use a vmware image for 9.10 and test it22:03
bogeyd6vmware server is free22:03
uvirtbot`New bug: #536937 in vm-builder (universe) "-o option now broken in version 0.12.2-0ubuntu3" [Undecided,New] https://launchpad.net/bugs/53693722:06
lifelessare there UEC images for Lucid ?22:14
=== RoAk is now known as RoAkSoAx
Airellshave you noticed any problems with vsftpd ( ssL ) like "initializing TLS... " in ubu 9.10  ?22:40
uvirtbot`New bug: #536958 in openldap (main) "slapd package configuration aborts during Hardy -> Lucid upgrade" [Undecided,New] https://launchpad.net/bugs/53695822:41
=== rberger_ is now known as rberger
=== robbiew is now known as robbiew_
apwmathiaz, i believe that alll of the kernel udeb Provide: their prefix, as an example:23:07
apwcrypto-modules-2.6.33-500-omap-di_2.6.33-500.1tiomap201003101552_armel.udeb:23:07
apw Provides: crypto-modules23:07
apwmathiaz, ^^23:07
mathiazapw: great - thanks23:10
mathiazapw: I've uploaded a new version of the vlan-udeb that Depends: vlan-modules23:10
FFForeverhow do I resync my time?23:23
FFForevererrr how do I set it to gmt -8, the current time is in UTC and it is messing up my script23:24
juancri_hi folks23:43
hggdhmathiaz: could you add me to the server team (so that I can get bug mail)?23:43
juancri_hope you're doin well. I have a question about SSH access on EC2...23:43
juancri_I'm able to connect trough SSH using the user "ubuntu", but I'm not sure about how to allow other users to log in23:45
juancri_even when I add a key to them (~/.ssh/authorized_keys)23:45
uvirtbot`New bug: #536993 in samba (main) "starting billard-gl locks computer" [Undecided,New] https://launchpad.net/bugs/53699323:46
juancri_Uhm... if I enable this "PasswordAuthentication yes", other users can log in23:47
juancri_but only using their passwords23:47
juancri_not the keypair23:47

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!