/srv/irclogs.ubuntu.com/2010/03/16/#ubuntu-server.txt

v0lksmanhttps://bugs.launchpad.net/hardy-backports/+bug/28633700:00
uvirtbotLaunchpad bug 286337 in hardy-backports "Please backport OpenSSH 5.1 to Hardy" [Wishlist,Won't fix]00:00
jayveeapt-get build-dep openssh-server00:00
jayveethat'll get the build-dependencies right, and you can just ./configure && make && sudo make install00:00
v0lksmanso I won't need to re-compile openssl?00:01
v0lksmanalso does that compile in support for pam and all that?00:02
jayveeno idea00:03
jayveev0lksman: uh, why don't you use this PPA like in the bug comments? https://launchpad.net/~rainct/+archive00:03
lifelessif you use debuild, it will do a normal ubuntu build, so yes pam included. however, PPA's ++00:03
v0lksmancause it's a bit of a security risk?00:03
jayveeso is compiling it yourself00:04
v0lksmanI'd rather blame myself than tell my client I got the software from some joe...00:04
lifelessv0lksman: you can check the signatures on the ppa, check the diff against the lucid diff00:04
jayveeit's not like the PPA binaries are closed source00:04
v0lksmanlifeless: hrm...not a bad idea00:04
v0lksmanthe ppa is outdated too though00:04
jayveeyeah, that's what you'll be dealing with from here on out00:04
jayveeat least hardy's 4.9 is maintained00:05
v0lksmanuntil lucid is released00:05
v0lksman4.9?  4.700:05
v0lksmanwhere is 4.9 for hardy?  that'll do...anything more than 4.800:05
jayveewhoops, yeah00:05
jayvee4.700:05
v0lksmandamn00:05
v0lksmanhad me hoping there00:05
jayveelifeless: I'm really slack. I haven't looked into that test-driven stuff at all.00:06
lifelessjayvee: de nada00:06
jayveeI've now got some people using python-iview as an "upstream". :-D00:06
jayveeThe xbmc and boxee iview plugins re-use python-iview. I honestly didn't think it was *that* reusable. :)00:07
jayveeSo yeah, the test-driven whatever is all the more important.00:07
lifeless\o/00:07
jayveemost things I set my mind to, I "just get"00:09
jayveebut not unit testing00:09
jayveethe things I don't "just get" are unit testing, BGP, Wave Robot API, and OAuth.00:10
jayveeeverything else I can get my head around in an hour or so.00:10
jayveeOh, and D-Bus. I don't get that either.00:10
lifelessBGP is fune.00:11
lifelessdbus is NIH DCOM is NIH CORBA00:12
=== erichammond1 is now known as erichammond
axisysstill trying to find out why i need to have a monitor plug in to see the login prompt in serial console ?00:24
lullabudaxisys: that is a very strange problem.  never heard of that one...00:31
lullabudi'm curious to know the solution.00:31
lullabudwhat package do i need to install to get ubuntu to auto-register in Active Directory DNS?00:32
=== erichammond1 is now known as erichammond
axisysposted my message in ubuntu server and user mailing list ..00:52
axisyslooks like exact same problem was posted before00:53
axisyshttps://lists.ubuntu.com/archives/ubuntu-users/2009-April/182662.html00:53
axisysbut on older version ubuntu00:53
axisysthis seems to be similar bug in lucid00:55
axisyshttps://bugs.launchpad.net/ubuntu/+source/linux/+bug/52923400:55
uvirtbotLaunchpad bug 529234 in linux "monitor drops to standby with "no signal" during boot splash on luicd alpha 3" [Undecided,New]00:56
axisyslooks like i need to disable gdm .. becasue it is a desktop ..01:16
axisysso update-rc.d -f gdm remove should do it?01:17
MTecknologyaxisys: should - i prefer rcconf01:18
axisysMTecknology: rcconf ? i have not used it01:20
MTecknology!info rcconf01:20
MTecknologyubottu: *tap* *tap*01:20
MTecknology20:21 < mtbot> MTecknology: rcconf (source: rcconf): Debian Runlevel configuration tool. In component universe, is optional. Version 2.2 (karmic), package size 22 kB, installed size 132 kB01:21
ubotturcconf (source: rcconf): Debian Runlevel configuration tool. In component universe, is optional. Version 2.2 (karmic), package size 22 kB, installed size 132 kB01:21
persiaupdate-rc.d is the solution used by all the maintainer scripts : other stuff also works, but be warned that it's 1) not default and 2) it's essential not to break update-rc.d01:22
MTecknologyaxisys: /pp 1801:22
MTecknologyaxisys: sorry01:23
axisyspersia: hmm... i guess i will just go with update-rc.d then01:23
MTecknologyaxisys: rcconf is extremely simple. I only use update-rc.d when I need to add a script manually to /etc/init.d01:24
MTecknologythere's a lot of opinions in here - but usually something to back up the reason.. postgresql vs mysql.. opinions and reasons for picking one over the other?01:28
Razernokhi02:15
RazernokAnyone here?02:17
lifelessno02:18
RazernokSo much for getting help then02:21
lifelesswell, its a bit of a silly question02:21
lifelessperhaps you could ask your questions02:21
persiaThere's lots of folk here02:21
persia!ask02:21
lifeless'don't ask to ask, just ask'02:21
ubottuPlease don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-)02:22
Razernokno point to ask if no one is here to answer.02:22
persiaRazernok: /names will give you a list of folk.  Also, when lifeless said "no" he meant approximetely the opposite.02:23
lifelessRazernok: people don't reply to 'is there anyone here' style questions: folk are generally working and thats a fairly social question.  Its also very disruptive if everyone answers (because you get a lot of noise)02:23
RazernokWhat is the point of the DNS server?02:26
persiaIt translates arbitrary strings into IP addresses.02:27
persiaOr translates arbitrary strings into other strings (depending)02:27
cefa DNS is basically a semi-flat database of mappings of names to ip addresses, names, or informational data about the name, and as such can also provide mapping of ip addresses back to names. without one, you can't get a computer to recognise that www.google.com.au maps to an IP address that is used behind the scenes to make the connection. Think of it a bit like a phone book.02:32
Razernokso with it a dynamic ip can have a .com domain?02:34
persiacef: "IP addresses back to names" is just a superset of names to infomational data.02:34
lifelessRazernok: the DNS Server in Ubuntu can be used to do that but isn't needed for that. They are separate problems.02:35
lifelessRazernok: you need the DNS Server if you want to run a DNS server. You only need to run a DNS Server if you need to maintain a DNS zone yourself: small organisations and below generally outsource this to their domain registrar02:35
cefpersia: sort of.. it's constrained.. you can get a name to an ip, but not necessarily get an ip back to a name. that depends on if it's say a CNAME or if they have bothered to even provide reverse mapping (in-addr.arpa)02:35
Razernokmy server is on a dynamic ip02:36
cefRazernok: there are services that allow you to give a constant name to a dynamic ip, but it does have issues (eg: when the ip changes, etc). places like dyndns.org and the like.02:37
Razernokdyndns.org only gives dynamic ips a subdomain02:38
persiacef: My point is that when do you the in-addr.arpa dance, you're back into the "names into *" area.  Just a nitpick of mine: there *is no* reverse DNS, just a cooperative convention that mimics it.02:38
cefpersia: ahh I see what you mean.. yeah true02:39
RazernokI guess no .com domain for my server then... :(*02:40
Razernok:(02:40
cefRazernok: you get a unique hostname, and that you can point at with a different DNS (eg: ISP/DNS Registrar hosted) using a CNAME record. But, it'll still suffer all the dyndns type issues.02:41
Razernoki can only get dynamic ips not static ips02:41
cefeg: get a DNS Registrar to host iwantafunnyname.com for you, then set up a CNAME record that maps www.iwantafunnyname.com to whaterveritis.dyndns.org02:42
cefit's a hack, and you can have issues (eg: you can't the CNAME use the name for an MX - mail exchange - record, etc etc.)02:45
Razernokhmm, I hope no-ip.com's software works on linux then02:45
cefRazernok: there are a number of things and services like that, so there are options if you do go down that path02:46
Razernokhmmm, its a download. I dunno how to transfer it to the server or install it from a file. Unless they gave me a apt-get command I'm clueless on how to install it.02:46
Razernokwell, then again I could run the no-ip.com software on my windows pc since the public ip is the same02:47
Razernokbut prefer it on the actually server though02:47
Razernokanyone know the apt-get for no-ip.com's software?02:48
sekyourboxHaving trouble designating an ethernet port for sending DHCP communication using DHCPD3 on ubuntu02:49
sekyourboxWhat needs to be added in DCHPD3.CONF to only set up dhcp on one interface connected to a router?02:50
Razernoki guess no one knows then :(02:51
Razernokbye then02:51
persiaapt-cache search dynamic shows several02:53
persiaapt-cache seach no-ip even shows three.02:54
lunaphytesekyourbox: see /etc/defaults/dhcp3-server02:54
lunaphytealthough i don't quite know what "connected to a router" means.02:55
sekyourboxthx, brb02:56
sekyourboxtest03:03
KD7SPO-rodneed help settig up virtual host on ubuntu server 9.10, I can configure on other linux and bsd no problem so I must be missing something. I've copied the default file to www.ezyaspi.com in my sites-available folder and ran a2en  www.ezyaspi.com and restarted apache with sudo /etc/init.d/apache2 restart. But I still get the default page when I browse to www.ezyaspi.com page. DNS is pointed correctly. Any suggestions?03:09
sekyourboxdo you need network manager for ATH0 / wifi connections?03:14
sekyourboxHow does this work exactly, I have a physical interface WIFI0, and what seems to be some type of virtual interface ATH0.. ath0 is where im picking up my ip address.03:15
sekyourboxsorry, wlan003:16
jayveeyeah, they're a bit funny03:17
jayveedon't touch the one that doesn't do anything03:17
jayveeI have an aironet card that comes up as wifi0 and wmaster003:17
jayveeI don't touch wmaster003:18
sekyourboxI need to remove network manager03:19
sekyourboxI have wmaster0 too03:19
sekyourboxath0 has the ip of the wifi network03:19
sekyourboxI dont want to hose my internet if I drop netman03:19
Razernokhow do i open a file using command line?03:55
jayveeRazernok: you mean like a text editor?04:00
jayveenano is a good text editor to use if you're not familiar with the command line.04:00
jayvee$ nano the_file.txt04:00
Razernokhmmm, and it looks like there is no way to add users to the ftp server. weird04:02
pwnguinRazernok: maybe it's based on system users?04:04
jayveemaybe the ftp server uses your unix users as authentication04:04
jayveewhat pwnguin said :)04:05
pwnguinpersonally, i avoid ftp04:05
jayveestrongly agree04:05
Razernoknope04:05
jayveeRazernok: install openssh-server, and use an SFTP program to transfer files04:05
pwnguinslowly training our interactive media dept that it's bad04:05
jayveemost FTP cilents support SFTP these days04:05
Razernoki just tried my user and pass04:05
jayveeit's not even worth getting FTP going04:05
jayveejust use SFTP04:05
Razernokneed ftp for dreamweaver04:06
jayveeeww04:06
pwnguinpretty sure dreamweaver supports SCP04:06
jayveethat's another thing you'll want to get rid of :P04:06
pwnguinhttp://webmaster.iu.edu/tool_guide_info/dreamweaver_pc.shtml04:07
Razernokfrom the ftp server "Response:530 This FTP server is anonymous only."04:07
Razernokwtf04:07
pwnguinheh04:07
pwnguinRazernok: you have ssh set up for administration right?04:07
Razernokyea04:08
RazernokI'm on putty04:08
pwnguini haven't checked but im pretty sure that if you can scp to the box, you can sftp04:09
Razernokneed ftp so i can use Filezilla04:09
pwnguinfilezilla should support sftp as well04:10
jayveeRazernok: filezilla supports sftp04:10
pwnguin#04:10
pwnguin# Supports FTP, FTP over SSL/TLS (FTPS) and SSH File Transfer Protocol (SFTP)04:10
jayveelike I said, most FTP clients out there support SFTP04:10
pwnguinRazernok: if you want to get really crazy, set up WebDAV04:10
sbeattieactually, I believe it is possible to configure sshd to not support sftp while allowing scp, but it's not a common configuration.04:11
pwnguinprobably, but i think openssh-server allows both out of box on ubuntu?04:12
Razernoki got it but it won't let me transfer files04:15
Razernokopen for write: permission denied04:15
Razernok:(04:15
pwnguinwith FTP?04:15
Razernoksftp04:16
pwnguinwhere you trying to write to and with what user?04:16
Razernokyes04:16
Razernokits an admin user04:16
pwnguinif it's root04:17
pwnguinthat's disabled by default04:17
Razernokits a folder in root04:17
pwnguinwhere you trying to write to and with what user?04:17
Razernokin /Storage04:18
jayveeRazernok: ubuntu "admin" users aren't automatically root04:18
jayveethey are only "root" when they use sudo04:18
jayveewhen you use sftp, you just have normal permissions04:19
jayveeso you have to "chown razernok:razernok /Storage"04:19
jayveeor the equivalent04:19
Razernokso how do i upload into root?04:19
Razernokhuh?04:19
jayveewhat is the user you are trying to log in as?04:19
jayvees/log in/upload/04:19
Razernokmy admin user04:20
jayveeyeah, but what's his username?04:20
pwnguindoes it matter?04:20
Razernokjohn04:20
jayveeyou want to go "chown john /Storage"04:20
pwnguinunless04:20
pwnguinit's web data04:20
Razernokwhere do i do chown john /Storage04:22
pwnguinubuntu web server doesn't run as root04:22
jayvee/Storage doesn't sound like it's being served by the web server to me04:22
Razernokits so i have an easy to find folder for my uploads to the server but not to be seen on the web server.04:23
pwnguinthats what your homedir is for?04:23
Razernokbut you then have to type "/home/john"04:24
Razernokand i don't want the extra stuff to remember04:24
pwnguindepends on the client04:25
* jayvee bangs head on desk04:25
pwnguinmany will automatically chdir ~04:25
jayveetrue04:25
Razernokchdir???04:25
jayveeand if you use "scp some_file.txt myserver:" it automatically copies it to your home directory04:25
jayveechange directory to ~ (where ~ means home directory)04:26
jayveecd and chdir mean change directory04:26
Razernokok you've lost me04:26
RazernokI just want to be able to upload to anywhere on the server.04:27
jayveeyou could enable the root user, but you're really shooting yourself in the foot04:27
qman__Razernok, that can't be done without massively destroying the system permission scheme04:27
jayveemmm...it's a very Windows-like attitude04:28
pwnguinqman__: you could just use root, which preserves permissions but opens up another fun attack. perhaps theres a way to limit it to scp, but even then, yikes04:28
qman__allowing root to log on remotely is something I don't ever consider doing04:28
jayveeyeah, rssh can limit it to scp, but with root permissions, you could just delete rssh with scp04:28
qman__and when you run as root, everything you create is owned as root, which mucks up permissions anyway04:29
jayveeRazernok: I know when I was new to Linux, I wanted the same too, so I understand where you're coming from.04:29
jayveeBut really, it's shooting yourself in the foot still. :)04:29
Razernokso if I'm only allowed to upload to my user's home directory then how am i expected to upload to say the htdocs folder? or custom folders used as storage?04:29
qman__yes04:29
qman__it's a Very Bad Idea (tm)04:30
pwnguinRazernok: you could make yourself the owner of that directory04:30
Razernokya can't then unless you place the folders in the home directory04:30
pwnguinyou can totally change the ownership of files04:30
jayveeexactly04:30
pwnguinprobably there's a smarter way04:30
qman__Razernok, there's also ~/public_html04:30
sekyourboxI need to configure /etc/networ/interfaces.. Can i configure ath0 (wireless) in here or do I have to use some IW config file???04:30
jayveeRazernok: you should "chown" (i.e. "change owner") of your htdocs directory to yourself so you can upload to it04:31
jayveewhich is why I was talking about chown earlier04:31
pwnguinim thinking, mod_userdir and mod_rewrite04:31
Razernoki don't see a command line in filezilla04:31
pwnguinuse ssh04:31
jayveeyeah you'll need to do it from putty04:31
Razernokoh god04:31
jayveesudo chown john:john /var/www/htdocs04:32
jayveeor wherever htdocs is04:32
qman__actually04:32
qman__you probably want john:www-data04:32
qman__otherwise it might break the website04:32
jayveetrue04:32
pwnguinwhat you can do is use mod_userdir to provide a mapping from www.example.com/~john to /home/john/public_html04:32
Razernoki have no idea where htdocs is located at04:32
qman__well, there is no htdocs by default in ubuntu04:33
jayveewell if you haven't touched anything, it's actually /var/www04:33
qman__so unless you created it, it doesn't exist04:33
pwnguinand then make a public_html dir with group www-data, and set it to be sticky04:33
jayveeRazernok: I'm guessing you're reading tutorials for Fedora or Red Hat?04:33
qman__and the default website is /var/www04:33
jayveeRed Hat uses htdocs by default, but Debian and Ubuntu call it different04:33
jayveedon't read Fedora tutorials04:33
qman__yeah, that'll really mess you up04:33
RazernokI use apache04:33
qman__stick to ubuntu docs for ubuntu04:33
jayveeyeah04:33
pwnguinRazernok: the apache tutorials for Fedora aren't the same as the ones for Ubuntu/Debian04:34
jayveemy head definitely explodes when I try and do things the Fedora way in Ubuntu, or vice versa04:34
qman__debian docs are secondarily preferred, since most of the packages are similar04:34
qman__but definitely use ubuntu centric docs wherever possible04:34
pwnguinRazernok: for example, last i checked, apache ran as root on Fedora, while it runs as its own user in Debian04:35
Razernoki came from windows not fedora04:35
jayveepwnguin: on CentOS 5.4 at least, it runs as the 'httpd' user04:35
qman__debian and ubuntu also have a very different apache configuration setup04:35
qman__apache on windows is a disaster waiting to happen04:36
pwnguinjayvee: perhaps. my rhel env at work is best described as pathological04:36
jayveeRazernok: but you must have been reading a Red Hat–centric tutorial or heard from a Red Hat using user if you wanted to access a "htdocs" folder04:36
jayveeUbuntu has never had a "htdocs" folder. :)04:36
pwnguini think htdocs is the default apache stuff04:36
Razernokno04:36
Razernokon apache its called htdocs04:36
pwnguinit's probably that way on windows too04:36
jayveeyeah, possibly04:37
pwnguinRazernok: trust me, apache doesn't care04:37
jayveepwnguin: come to think of it, you might be right04:37
pwnguinRazernok: its all in the config files in /etc/apache2/04:37
jayvee%PROGRAMFILES%\Apache\htdocs or something04:37
jayveelast time I ran Apache on Windows was way back in 200704:38
pwnguinheh04:38
jayveeor 2006, actually04:38
pwnguini havent but my boss tried04:38
jayveeyeah, 200604:38
qman__the only thing worse than trying to run apache on windows, is trying to run PHP in IIS 504:38
* jayvee shudders04:38
jayveeI've done that...briefly04:38
pwnguini accidentally recomended we replace our IIS ftp site with webdav04:38
pwnguinbut it turns out apple is spawn satan04:38
pwnguinand only supports apache, poorly04:38
jayveeyou mean apple can only connect to apache webdav servers, and not, say, iis webdav servers?04:39
pwnguincorrect04:39
jayveeouch04:39
pwnguinit demands webdav 2.004:39
jayveewebdav is kind of...meh04:39
pwnguinand even then, fucks up the syntax04:39
jayveeit was new back in...199804:39
pwnguinwebdav is neat; pokes straight through firewalls04:39
jayveeWindows 98 had the glorious new "Web Folders" feature in My Computer04:40
pwnguinsupported out of box by windows, ubuntu and OSX.... IF you run apache04:40
jayveeit is easier to secure than sftp if you don't trust your users, I have to admit04:40
jayveerssh is kind of meh as well04:40
pwnguinanyways04:40
pwnguinive taken to a simple /var/www/www.pwnguin.net approach, with Virtual Directory in apache config04:41
jayveethat's what I do on my linode04:41
qman__userdir is a great solution when you want normal users to be able to upload to a web server04:42
jayveedead easy to maintain04:42
pwnguinqman__: is it possible to combine userdir and modrewrite?04:42
qman__not sure, never tried04:42
Razernokso what do i need to do????04:43
qman__I've done userdir, and I've done rewrite, but not both at the same time04:43
qman__Razernok, if you're the only user, just SSH in, and `sudo chown john:www-data /var/www`04:44
qman__then you'll be able to upload files there, and they'll show up in the default apache site04:44
qman__assuming your username is john04:44
pwnguinprotip: set the group sticky bit if you want new dirs to inherit the group04:44
pwnguin(you do)04:45
Razernokand what about normal folders for storage?04:45
qman__just use your home folder, or a folder within it04:45
pwnguini'd just use my homedir, because thats what should show up if you dont' type in anything for a directory04:45
qman__a tilde, ~, magically refers to your home folder04:45
qman__so you don't have to type /home/john every time04:46
Razernoki want to avoid typing long paths like /home/john/something/fgse.txt04:46
qman__use tab completion04:46
pwnguinRazernok: in your HTML?04:46
qman__also, that's not a long path04:46
Razernokso i need to place it in the root04:46
qman__you do not want to place files in the root04:46
Razernoklike /Storage04:46
qman__that's also a Very Bad Idea04:47
qman__to clarify04:47
Razernokalot faster to type /Storage then /home/john/Storage/file.txt04:47
qman__if your user is john, '~/Storage' means the same thing as '/home/john/Storage'04:48
jayveeyes04:48
jayvee100% agree04:48
jayveehome folders are there for a reason04:48
qman__you can also type that path very quickly04:49
jayveeI use the ~ shortcut all the time04:49
qman__keys pressed, in order: / h TAB j TAB shift+S TAB04:49
jayveeI probably haven't typed /home/jeremy for years04:49
pwnguinwell04:49
pwnguinmy bash autocomplete isn't network aware04:49
qman__mine isn't either, but I have a /home/ryan on all my machines04:50
Razernokdamnit, can't find a remove folder command04:51
Razernokwtf04:51
qman__the new version of openssh that just came out a few days ago adds tab completion to the built in sftp client04:51
pwnguinrm04:52
qman__I use scp the most, though04:52
jayveeRazernok: use "rmdir" if the folder is empty04:52
Razernokthis is ticking me off04:52
pwnguinmostly i just use gnome's remote scp mount tool04:52
qman__Razernok, rm -r if you want to remove a directory and all files within04:52
jayveeor "rm -r" if you want to remove all files inside it but BE CAREFUL with that command — you can do a lot of damage04:52
Razernokrmdir: failed to remove `/Storage': Permission denied04:52
jayveesudo rmdir04:53
pwnguinls -l /Storage04:53
pwnguinwell, maybe that lists out the dir contents, i just want to know it's ownership and permissions =/04:53
jmarsdenpwnguin: ls -ld /Storage04:53
pwnguin^ Razernok that one04:53
uvirtbotpwnguin: Error: "Razernok" is not a valid command.04:54
pwnguinwth04:54
Razernokdidn't work04:54
Razernokstill won't let me delete it04:54
qman__yeah, ^ is apparently a bot command04:54
jayveesudo rm -r /Storage04:54
qman__Razernok, this must be done from SSH or local command line04:54
jayveeit will delete everything inside /Storage, if that's what you want to do04:54
qman__not from inside an SFTP connection04:54
pwnguinls just lists the files & permissions. its how you tell what the permissions currently are04:55
* pwnguin is surprised04:55
pwnguini upgraded my linode to 10.04 and it still works04:55
qman__ha04:56
qman__jumping the gun a bit, eh04:56
Razernokthere04:56
pwnguinwell04:56
lifelessheh, been running lucid since jan04:56
pwnguini split my disk in two04:56
Razernokhmmmm, how do you unpack webmin_1.510_all.deb on windows?04:56
pwnguinone is the in case of emergency undo snapshot04:56
pwnguinRazernok: 7zip can probably do it, however...04:57
Razernokso i can place it in the preuploading folder for dreamweaver04:57
qman__Razernok, webmin is not supported on ubuntu04:57
Razernoki use winrar04:57
lifelessRazernok: you don't unpack debs on windows04:57
pwnguinRazernok: if you really want webmin, just upload the deb directl04:57
pwnguindirectly04:57
RazernokDebian package suitable for Debian, Ubuntu or other derived Linux04:57
Razernokhttp://prdownloads.sourceforge.net/webadmin/webmin_1.510_all.deb 14M04:57
Razernoksays on webmin's site04:57
qman__!webmin04:57
ubottuwebmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead.04:57
Razernokwtf, then what do i use????04:58
pwnguin!ebox04:58
ubottuebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox04:58
Razernoksame as webmin?04:58
Razernokthis is gonna be a web hosting site04:58
pwnguinhahahahh04:59
qman__you have a long way to go before you host people04:59
pwnguinwell, i guess you mean one for personal use?04:59
qman__you should not be using webmin or ebox for a web hosting site, either04:59
qman__you want something more like cpanel I'm guessing04:59
qman__webmin and ebox are aimed at general server administration, not web hosts05:00
RazernokI'm planning to host only about 5 trusted clients05:01
qman__and anyone hosting others should know his way around the command line, otherwise when something breaks you're going to be in for a world of hurt05:01
* pwnguin is barely qualified to host his own stuff, let alone other people's05:02
pwnguinis there a file or command to just identify the ubuntu release you're running?05:03
qman__pwnguin, cat /etc/issue05:03
qman__I think you can also run 'lsb-release'05:03
pwnguinah, i always go for something specific like debian_version05:03
pwnguinthanks05:03
jayveecat /etc/lsb/lsb_release05:04
qman__ah, that's what it is05:04
jayveecat /etc/lsb-release, sorry05:04
lifelesslsb_release -a05:04
lifelessthe interface is the command, not the file AIUI05:05
RazernokI have a friend who will be my site testing partner05:05
Razernokweird, sudo apt-get install “^ebox-.*” won't install ebox05:10
Razernokwtf05:10
Razernokthe site said it would05:10
qman__Razernok, apt-cache search ebox05:12
Razernokwtf05:17
Razernokebox doesn't do anything i need05:17
pwnguinfirewalls, vpn, network config, cert authority05:17
RazernokI wasted all that time to install it and its not at all like webmin05:17
pwnguinyou wasted all of 20 minutes, if that05:18
Razernokwebmin is for managing accounts and stuff. aka a web host05:18
Razernokebox does none of that05:18
Razernokand i don't know how to remove it05:18
pwnguinsudo apt-get remove ebox05:19
pwnguinhowever05:19
pwnguini see an ebox-usersandgroups05:19
Razernokso how do i install webmin then?05:19
Razernoki just installed ebox and it has nothing webmin does05:20
Razernokso how do i install webmin?05:20
pwnguinebox is modularized; does it install any extra modules by default?05:20
pwnguinnope05:20
RazernokA web-based interface for system administration for Unix. Setup user accounts, DNS, file sharing and the program is freeware.05:21
Razernokthats webmin05:21
RazernokeBox Platform is an open source SMB network server that acts as a network gateway, a unified threat manager, a network infrastructure manager, ...05:21
Razernoktwo different things05:21
pwnguinhttp://www.ebox-platform.com/05:21
pwnguini think you have to install extra modules?05:22
RazernokSo i need to know how to install webmin_1.510_all.deb05:22
pwnguinie, apt-get install ebox-usersandgroups ebox-ca ebox-dns05:22
pwnguinpersonally, i dont use ebox or webmin05:22
pwnguinjust ssh and emacs05:23
RazernokI need to webmin so i can manage clients and hosting plans and such05:23
pwnguinhowever, if you have an ubuntu .deb, just upload it and use sudo dpkg -i wtfever.deb05:24
pwnguinit sounds like people think it wont work05:24
pwnguini didnt know webmin supported hosting plans05:25
twbI think what he's really asking for is a free version of cpanel.05:26
pwnguingood luck with that05:27
twbYeah05:27
Razernokthats what webmin said it does05:27
Razernokallowing you to manage the clients and plans05:28
twbWebmin is made by people that couldn't find their arse with both hands05:28
pwnguinRazernok: i cant find any webpage describing webmin with that phrase05:29
Razernokthats what i found05:31
Razernokthat its suppose to be for managing a hosting site. (hosting plans, accounts, etc.)05:32
pwnguinits supposed to be for administrating a server05:32
pwnguinthere's a virtualmin plugin, but hell if i know if the GPL version works05:32
Razernokthis server is gonna be a hosting site. so thats why i need webmin for the (hosting plans, accounts, etc. management)05:33
pwnguinhave you ever actually used webmin?05:34
pwnguinlooks like their demo site is down05:34
Razernokno cause i can't figure out how to install it05:34
pwnguinhttp://www.webmin.com/demo.html look at screenshots05:34
twbCan we just agree that webmin is offtopic here and move it to -overflow or whatever?05:39
pwnguinhow bout we point Razernok at #webmin and never speak of the matter again05:40
Razernokno idea what to do now :(05:40
pwnguinapparently the webmin channel is on undernet? are they still around?05:41
pwnguinRazernok: try joining #virtualmin; maybe they can help you out05:42
FireCrotchYou don't want to use Webmin on Ubuntu. Trust me.05:42
* pwnguin is off to go watch House or something05:42
FireCrotchactually you don't want to use it on any debian-based distro05:43
pwnguinBut it says 'Supports Ubuntu Linux!'05:45
twbpwnguin: support is a directed relation.05:46
pwnguini think you're trying to say we don't support it, but i never claimed otherwise. im trying to drop the subject, really05:47
twbFind by me05:47
Razernoki guess there is no way to do hosting plans, user accounts, etc.05:49
pwnguinthere tools that do that for a price. obviously we don't support it, but if you're paying for it the vendor should05:49
Razernokneed a free one05:50
pwnguinseriously now. house time05:51
FireCrotchRazernok: There's one called VHCS that I've looked at in the past. Never used it so I can't say  how good it is, but I've considered using it05:53
FireCrotchThey have a live demo that you can try out though05:54
jayveeI thought ISPConfig was like a next-generation VHCS06:01
FireCrotchah ISPConfig. that's the other one that I couldn't think of the name of06:02
twbGrr!06:07
twbLucid's coreutils doesn't have timeout06:07
auajmitch: your linode just stop replying? i had to reboot mine just then06:42
twbOK, it appears to be in a separate "timeout" package there, for some reason.06:47
NoReflex hello! I'm having some problems with upstart in karmic server 64bit. It won't start postgresql. I tried http://superuser.com/questions/98702/how-to-make-postgresql-start-at-boot-time-in-ubuntu but it didn't work. can I remove upstart? I'm afraid to test it because the machine is at a remote location and if I mess it up I won't be able to connect to it anymore07:44
NoReflexI can start postgresql using /etc/init.d/postgresql-8.4 manually after login. There are links in /etc/rc*.d to postgresql init script but for some reason it isn't started automatically after reboot07:44
lifelessyou cannot remove upstart07:45
lifelessits how the server is booted07:45
NoReflexlifeless: i thought that removing upstart would install the old init system07:45
NoReflexI also searched for a logging possibility because I don't know why it won't start....and it's hard to "debug" a problem when you don't have the error message07:46
FireCrotchNoReflex: there should be an error somewhere... /var/log/syslog, the postgres log file, somewhere07:50
NoReflexFireCrotch: there isn't...I searched messages, dmesg, syslog, postgresql log, the entire log dir - I believe the log should be created by upstart - but upstart does not work with bootlogd07:52
lifelessusual thing here is it not being enabled in /etc/default/postresql or some such07:54
NoReflexlifeless: the error log is enabled in /etc/postgresql/8.4/main/postgresql.conf...and I can find there the error messages that occured after I started the application manually...but there's nothing about the "automatic" failed startup07:57
sherrNoReflex: Is there a bug logged about this? Sounds like there should be. This situation would not be ideal for Lucid.07:59
NoReflexsherr: I couldn't find a bug related to this fact...I did however find a bug regarding the inability of upstart to work with a boot logger08:01
twbSigh.  acpid is broken in lucid atm08:19
* persia points at all the lovely hardware that doesn't use ACPI :)08:20
twbI only want to use it to shut down machines that aren't responding to ssh or PS/208:21
twbUsually because there was no PS/2 keyboard plugged in when they booted08:21
persiaDo they have USB ports?  That's always a convenient way to hotplug /dev/kbd08:21
uvirtbotNew bug: #276472 in samba (main) "cp -p on CIFS mount does not preserve permissions and returns a permission denied error" [Medium,In progress] https://launchpad.net/bugs/27647208:22
twbIn this case it probably does, but that's beside the point.08:22
twbIf acpid provides support for ONE event, the power button, that event handler shouldn't assume the not-depended-upon acpi-support package is installed.08:23
persiaOh, good bug.  File & fix :)08:23
twbYeah, so now I have to install firefox into a vm, because apport-cli doesn't honour BROWSER=w3m08:24
* twb grumbles08:24
persiaYou already filed that bug?08:24
persiaThat should be *easy* to fix.08:24
twbI'm assuming it doesn't because it would inconvenience the GUI-only people08:25
twbActually, probably s/BROWSER=w3m/sensible-browser/, because this is a VM, so my dotfiles aren't present.08:25
twbOK, it does honour the x-www-browser alternative, so if I'm running X on my server, any graphical browser would work.08:28
persiaNo.  Any browser should work.08:29
persiaIt tries x-www-browser *before* www-browser08:29
twbHm.08:29
twbWhen I tried in pbuilder --login, it simply failed to use w3m.08:29
persiaSo for me, www-browser is w3m and x-www-browser is epiphany-browser (on my laptop)08:29
persiaWas w3m installed there?08:30
twbOh, I bet I forgot to install w3m, forgetting it was priority: standard, not essential: yes.08:30
persiaThat would do it.  Most build environments are type=buildd which is very minimal indeed, and doesn't include such fripperies as a browser.08:31
twbThe other exciting problem I'm gonna have now is that Xorg appears to disable the pointer emulation key (shift + num lock), so I gotta shave that yak before I can copy the transcript into the browser08:31
persiatwb: A clean yak is a beautiful yak :)08:32
twbNo, it's even weirder than that.08:33
twbMouse emulation is working, it's just the pointer's location doesn't change onscreen until I redraw the window under it.08:33
twbOK, screen env BROWSER=w3m apport-bug acpid, and I can copy the typescript into the browser that way.08:34
twb#53943208:40
twbubottu: malone bug #53943208:40
uvirtbotLaunchpad bug 539432 in acpid "powerbtn.sh assumes acpi-support is installed." [Undecided,New] https://launchpad.net/bugs/53943208:40
ubottuError: I am only a bot, please don't think I'm intelligent :)08:40
twb"PATH=(custom, no user)"... sounds like an apport fuckup08:41
persia!ohmy08:41
ubottuPlease remember that all Ubuntu IRC channels share the same attitude of providing friendly and polite interaction with all users of all ages and cultures. Basically, this means no foul language and no abuse towards others.08:41
twbSorry.08:41
persiaBut yes, that does indeed.08:42
twbI was logged in as ubuntu (uid 999), as created by casper.08:42
GeorgeJHello, is it possible to create a lvm from a software mirror without having to erase all data? If so, where could I find a tutorial?08:44
GeorgeJI have no lvm groups set up, so I'm not trying to extend one, but create a group.08:45
persiaGeorgeJ: I've never found a way short of having sufficient space and copying from one place to another.08:46
twbNow I'm getting timeout errors from the launchpad "edge server" telling me I'm part of the "launchpad beta team", so I'm not going to bother reporting that apport bug08:47
twbGeorgeJ: what is a "software mirror"?08:47
GeorgeJWell, I'm running ubuntu server and I realy don't know which channel this goes to.08:48
GeorgeJBasicaly I have two hard drives which are mirrored using software raid.08:48
persiatwb: Note that due to bug #538097, there might be issues anyway.08:48
uvirtbotLaunchpad bug 538097 in apport "+storeblob fails with "500 Internal server error" on production (works on edge)" [High,Invalid] https://launchpad.net/bugs/53809708:48
twbpersia: I got it after punching in the Summary line on the first page it takes me to08:49
twbpersia: I would normally blame my end, because it's being used to implement/test network failures, but if that was the case I wouldn't expect to even get to the edge server.08:50
persiaHard to say, really.08:50
jayveeGeorgeJ: this channel is fine for raid questions08:53
jayveealthough I'm not a raid person08:53
a_okI'm getting tired ssh and her known host problems. For some reason all my servers have a new rsa fingerprint. Is there a way i can reset this known host nonsense without disabling ssh?08:53
GeorgeJWell, I'm not having any issues with my raid setup. I'm trying to create an iSCSI target, which requires me to create a LVM group.08:54
GeorgeJAnd when I want to create a LVM group, I'm instructed that all my data will be erased, and I was looking to go around this.08:55
twbOK, now I have an even more exciting behaviour.09:15
twbOn the lucid host, this loop stops after an unpredictable number of iterations:09:15
twbwhile ip route show dev eth0 | grep -q .; do printf .; done09:15
twbIf I take out either side of the pipeline, the problem goes away and the loop runs forever09:16
twbFrom just running "ip route show dev eth0" in a loop, it certainly seems that nothing is changing...09:16
twbOK, and it's ip, not grep, that's failing, because I can't reproduce it without set -o pipefail09:19
twbSod it, I'll turn pipefail off and this error detection script can just be flaky.09:23
nennedoes apt-get upgrade have a function to ensure no upgrades that need reboot will be installed?09:38
acalvohi!09:38
acalvoin order to deploy a HA Cluster, is it really necessary to have separated service servers and load-balancer servers?09:38
twbnenne: it does not.09:38
nennetwb: ok, thanks09:39
twbnenne: *usually*, the only thing that would require a reboot would be kernel packages.09:39
nennetwb: aah yes. would a "safe upgrade" skip thoose?09:40
twb"aptitude safe-upgrade" should skip any paths that require removing or installing new packages.09:40
philthno2nenne: for most packages that recommend reboot a simple restart of the graphical interface or respective servce would be enough09:40
twbnenne: but even if you upgrade the kernel, the old kernel will continue to work indefinitely.09:41
twbnenne: packages name linux-image-* (i.e. kernels) are NEVER automatically removed in the default configuration.09:41
nennetwb: Aaah true, thing is im gonna be upgrading a server with some sensitive services and it would be nice to know what upgrades will need a reboot on forehand. To warn users. But i guess i can allways upgrade and then do the reboot 1 week later(with planned downtime) ?09:43
twbnenne: what I normally do is "aptitude -s full-upgrade", and look at what will happen (-s for simulate).09:44
twbnenne: then I just know, from experience, what is likely to need an update, and I report those to my customer09:45
nennetwb: aah i see. that seems like the best way of doing it :)09:45
twbActually I have a cron job do the -s run and email me the result09:47
nenneAah nice09:48
uvirtbotNew bug: #539454 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.37-1ubuntu5 failed to install/upgrade: il sottoprocesso nuovo script pre-removal ha restituito lo stato di errore 1" [Undecided,New] https://launchpad.net/bugs/53945409:51
uvirtbotNew bug: #227837 in libvirt (main) "[Hardy] overzealous masquerading affects vm to vm traffic" [High,Fix committed] https://launchpad.net/bugs/22783710:07
RoyKhi all. the package linux-image-virtual, is that for a virtual guest?10:13
uvirtbotNew bug: #539469 in squid (main) "does not terminate at computer shutdown" [Undecided,New] https://launchpad.net/bugs/53946910:26
twbRoyK: yes10:31
RoyKk10:32
=== Airells is now known as airells
zulmorning12:23
uvirtbotNew bug: #357067 in beautifulsoup "javascript parsing error" [Undecided,Confirmed] https://launchpad.net/bugs/35706712:32
blinkizHi. I have a iscsitarget LUN up and active. I have now added more LUNs. It seems like I have to do /etc/init.d/iscsitarget restart. No reload function. Will this create any disturbance in the already existing active LUN? It can NOT go down.13:08
zultimmah!13:22
* zul does his gollum php impression13:25
jalonsThoughts on how to return the TLS version exim is using?13:37
persiajalons: e.g. `apt-cache show exim4-daemon-heavy | grep ^Depends` : check the gnutls library version dependency.13:39
jalonspersia: thanks, but I was looking for TLS version 1.2 (per RFC 5246) vs RFC 4346, and how an exim install running (built from source to utilize libssl over gnutls due to the smaller entropy pool required for libssl)13:43
jalonsI built it about a year ago and recall nothing other than that - am I stuck stracing and looking for the calls to the libraries?13:43
persiaI'd guess you could determine the protocol version from the library version, but I could be entirely wrong.13:43
persiaIf you built it yourself without a packaging framework, perhaps so.13:44
persiaAlthough I'd recommend using nm rather than stracing to determine how it's linked.13:44
blinkizHow do I add more iscsi targets (ietd.conf) without having to restart iscsitarget service?13:53
stanman246guys.. My datacenter is changing it's default gateways, how can i be sure my server will be accessible?14:20
ballstanman246: ask your sysop for his mobile number and blackberry email address. ;-)14:22
stanman246lol14:22
stanman246thought maybe it 's possible to use a 'backup' default gateway14:23
stanman246is that possible?14:23
zulto ask your sysop for his mobile and blackberry email address? yes probably14:23
persiastanman246: Yes, but you don't really want to do that.  if you want that kind of function, look at a dynamic routing solution.14:23
persia(and for which is the right choice : ask your network admin)14:24
jalonsI'm trying to dump all remote ciphers accepted by this mail server - anybody know the magic combination of openssl s_client -connect <host> -starttls smtp, and getting -cipher into the mix?14:54
jalonsi know server decides what, but is there a way to trace what it's contemplating?14:54
=== airells is now known as Airells
jalonsother than guessing what the lowest cipher suite is, and watching it step through them14:55
jalonsnevermind, it appears I just needed to keep googling to find the answer: http://rt.openssl.org/Ticket/Display.html?id=1162&user=guest&pass=guest14:59
invisimeI am formatting a second hard drive on my home server. should I format it as ext3 or ext4?15:01
ballinvisime: yes.15:04
invisimeball: should I format it as ext3 xor ext4? :P15:05
* ball grins15:06
ballI suppose that would still be a "yes", assuming a single partition.15:06
invisimedamn clumsy english language. *must learn lojban*15:07
invisimeI'm basically looking for a comparison of the two or best practices. could you supply the information or a pointer to the information?15:08
ballinvisime: I don't use Linux much, so I'm not the best person to ask.  I think I ran ext4 experimentally on my last Linux box and it seemed to work.15:10
ballinvisime: but I'd want more sensible testing before I used it for anything important.15:10
invisimeI see.15:10
jalonsinvisime: for all intents and purposes ext4 is just ext3 + extents15:16
invisimejalons: k. thanks for the clarification.15:16
* invisime types 'sudo mkfs -t ext4 /dev/sdb1' and hits enter.15:16
acalvoin order to deploy a HA Cluster, is it really necessary to have separated service servers and load-balancer servers?15:25
jalonsacalvo: no, but it works better.15:56
ricdangerhi there16:06
ricdangerI just stup ubuntu server 9.10 with a separate /boot and LVM16:06
ricdangerbut grub will now create a wrong "set root=" entry16:06
uvirtbotNew bug: #539663 in php5 (main) "FFE for php 5.3.2" [High,New] https://launchpad.net/bugs/53966316:07
nimrod10`ricdanger, is /boot outside of LVM ?16:34
ricdangernimrod10: yes16:35
ricdangerupdate-grub will set my "/" volume as root16:35
ricdangermy / is a LVM volume btw16:36
jalonswhat's it generating that's incorrect?16:41
maxx_hHi. I have a new Intel MB with built-in Hardware-VNC-overIP which is used for a server. (no monitor connected)17:03
maxx_hIs there a way to send the video output even if no monitor is connected, so i can fetch it with vnc?17:03
persiamaxx_h: You essentially need video drivers for your hardware-VNC solution.  It oughn't be any different from any other framebuffer, except for the drivers.17:06
jalonswhen you power up the motherboard, the baseboard management controller will likely request a DHCP address for the management port: watch your dhcp server logs and VNC in17:07
jalonsor as persia said, if I misunderstood what you're trying to do17:07
maxx_hi can connect via vnc(management ip), see the bios and grub - but when the linux kernel loads i only have a black screen17:08
persiaThat's definitely a driver issue then.17:08
maxx_hif a monitor is connected, vnc works too17:08
persiaYou'll need framebuffer drivers and to direct console to that framebuffer.17:08
persiaOh, cool.  That means you don't need new drivers, you just need to fix the bug in the drivers you have.17:09
persiaEssentially, they need to not inform the kernel there's no monitor attached when VNC is active.17:09
warmexxusi have a similar problem... a headless ubuntu server, that I can only SSH when the keyboard/monitor is attached.17:12
persiawarmexxus: That's not similar at all.  That's likely a buggy BIOS failing to initialise properly without a keyboard.  There are hardware stubs you can buy that fake it.17:12
warmexxus:( it's just so strange... I can ssh with a monitor/kb attached, and I can connect while headless but it disconnects after so many minutes... but only when headless...17:13
warmexxusi will take your tip and google up the best I can... thank you17:13
maxx_hgraphiccard: VGA compatible controller: Intel Corporation Core Processor Integrated Graphics Controller (rev 12)17:15
maxx_hchipset: intel Q5717:15
maxx_hwhat i see is that it uses the vga16fb - should i trie different fb drivers?17:16
persiamaxx_h: I'd just report a bug against the driver you have.17:21
RoAkSoAxkirkland, ping17:23
kirklandRoAkSoAx: howdy17:23
RoAkSoAxkirkland, how's it going? :)17:23
RoAkSoAxkirkland, could you take a look to: https://wiki.ubuntu.com/GSoC/2010/AndresRodriguez and give me some feedback?17:28
kirklandRoAkSoAx: sure thing17:29
RoAkSoAxzul, for apport hooks, attaching info from the syslog should be whenever the user accepts to attach the conffile or should it always be attached?17:29
RoAkSoAxkirkland, awesome, thanks :)17:29
uvirtbotNew bug: #539727 in vm-builder (universe) "python-vm-builder_0.12.2-0ubuntu3 doesn't set locales correctly" [Undecided,New] https://launchpad.net/bugs/53972717:42
zulRoAkSoAx: if the user agress then attach the syslog info17:42
RoAkSoAxzul, ok will do it that way then17:43
persiaRoAkSoAx: I'll suggest you grep syslog for the class of interesting stuff, and only attach that.  I'd be happier showing you my output from bind without showing you that cron is executing mirrorpr0n every 12 minutes.17:44
RoAkSoAxpersia, yeah I'm doing that actually: report['SyslogBind9'] = recent_syslog(re.compile(r'named\['))17:45
persiaCool :)17:45
RoAkSoAx:)17:45
kirklandzul: howdy howdy18:16
zulkirkland: hey18:16
kirklandzul: where are the daily qemu-kvm builds?18:16
zulhttps://edge.launchpad.net/~ubuntu-server-edgers/+archive/server-edgers-qemu-kvm18:16
zulis it just me or is the wiki slow today?18:18
kirklandzul: really slow18:19
zulk thats what i thought18:19
kirklandzul: did you take a snapshot of the debian/ from the lucid package, I guess?18:20
zulkirkland: yeah I havent had a chance to update it yet18:21
kirklandzul: okay, cool; yeah, there's some good stuff that would be nice to get in the daily too18:21
zulkirkland: k ill put that on my todo list18:21
kirklandzul: i was going to blog about your work, announce it, etc.... is that okay with you?18:21
zulkirkland: sure18:22
uvirtbotNew bug: #526823 in mysql-dfsg-5.0 (universe) "error al actualizar" [Low,Invalid] https://launchpad.net/bugs/52682318:32
kirklandzul: http://blog.dustinkirkland.com/2010/03/qemu-kvm-daily-builds-thanks-chuck.html18:32
zulkirkland: nifty cool18:32
kirklandzul: same to you ;-)18:35
uvirtbotNew bug: #526827 in mysql-dfsg-5.0 (universe) "package mysql-server-5.0 5.1.30really5.0.75-0ubuntu10.3 failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Low,Invalid] https://launchpad.net/bugs/52682718:37
prebensorry to bother, but I may need som help with Karmic+multipath+lvm218:39
prebenanyone got this to work?18:39
axisyshow do I safely enable telnetd on ubuntu server? there is no host on the same network, just cisco router and it needs to access the ubuntu server .. so telnet seems only option18:46
persiaaxisys: Install the IOS ssh client (reed)18:48
persiaaxisys: http://www.cisco.com/en/US/tech/tk583/tk617/technologies_tech_note09186a00800949e2.shtml#settingupaniosrouterasssh18:48
* persia has no good recommendations for CatOS other than "Upgrade"18:50
axisyspersia: hmm.. that wont be an option for this scenario due to company policy .. but i am glad it is a valid option18:50
axisyshow do I start telnetd .. may be then use ufw limit telnetd ? i do that limit for ssh18:51
persiaThere exists no safe way to enable telnetd, unfortunately.  There are lots of unsafe ways.  `apt-get install telnetd` is likely the easiest of these.18:52
axisyspersia: yep.. telnetd is not safe period.. looks like it will be sitting in a  private network18:53
axisyspersia: what you know looks like that router has ssh already there.. these network guys never ever used it.. lol18:56
jaypurif i run sudo apt-get update on server18:58
jaypurit will download AND  install  the updates or i need to run something to install them18:58
zulmdeslaur: does this look sense to you? https://bugs.edge.launchpad.net/ubuntu/+source/ntp/+bug/51770118:59
uvirtbotLaunchpad bug 517701 in ntp "ntpd apparmor rule does not allow reading dhcp based config" [Low,Incomplete]18:59
prebenanyone used /etc/lvm/lvm.conf ?19:01
persiajaypur: Neither.  It just updates the status of updates available.  "upgrade" and friends perform upgrades.19:01
jaypurhm19:01
jaypurlet me try19:01
mdeslaurzul: yeah, that looks okay...don't remove the old one just in case, just add the new one19:01
zulk19:02
jaypur.yeah it's upgrade  thanks persia19:02
zulmdeslaur: rw?19:03
mdeslaurzul: same as the old one19:04
jalonspreben: yes, but I haven't touched multipathd on anything newer than hardy19:04
prebenjalons: it seems to me that lvm somehow prevents multipathd to add the mulipath devices if diskgroups are on the pvs19:05
prebenjalons: so I'm trying to configure lvm.conf, so it wont touch the disks before the multipath devices are available19:06
preben.. or something19:06
jalonswhich is logical, you don't want to start your lvm until the physical disks are ready19:06
jalonsI'm trying to find a host I have this one, as I seem to recall fighting CLVM vs LVM on this issue19:07
prebenit works pretty good. multipath -ll is good, pvs, vgs, lvs all good.19:08
prebenbut soon as I reboot, the lvm access the pvs as /dev/sda,c,d and so on, instead of /dev/mapper/alias (from multipath)19:08
prebenand multipath -ll is completly silent19:09
jalonsok, so you want to strip out the devices {} section of lvm.conf?19:09
jalonsbasically, ignore /dev/sd{a,b,c}*, and manually specify what you want19:10
RoAkSoAxkirkland, how do I change the color of the byobu's status bar?19:10
jalonsthere's a regex in there somewhere to ignore all sd{a-z}.{1-9} devices, so if you drop another drive in later it doesn't freak out - is that the jist?19:11
prebenit gets worse, I have installed the os on lvs to19:11
kirklandRoAkSoAx: F919:11
jalonshrm.19:11
RoAkSoAxkirkland, oh got it thanks lol :)19:11
prebenthere is a filter seciont in /etc/lvm/lvm.conf - but I havent managed it to work yet19:11
jalonspreben: you want to multiplath the connection to the OS i take it?19:12
prebenjalons: I have managed this to work in a linux kvm guest with a single path19:12
prebenjalons: the os boots on a single internal disk, the multipathed disks are on a EMC san19:12
jalonsright, it's replacing the LVM devices with their multipath siblings19:12
prebenI think so19:14
kirklandRoAkSoAx: ;-)19:14
jalonspreben: ok, it definitely sounds like you want to set up filtering (although if the system disk is seperate from the actual LVM, you should be fine)19:15
prebenI tried this filter: filter = [ "a|^/dev/sdc|", "a|^/dev/mapper/|", "r/.*/" ]19:15
prebento include the boot disk(/dev/sdc) and include the multipath devices under /dev/mapper and ignoer evrything else19:16
jalonsso that's accepting sdc and anything under /dev/mapper, and rejecting everything else19:16
jalonswhy do you want the boot disk included?  is it part of the LVM that's hanging off your SAN/19:16
prebenno, buts the boot drive is in a diskgroup by it's own19:17
prebenwith root and swap volumes19:17
jalonsah.19:17
jalonsduh, even though it's seperated out we still have to tell lvm about it19:17
jalonsso to start from the top now that i get it - upon reboot it's finding the LVM that contains / and swap, but it's mangling the mpath hosts, showing them up as /dev/sdX rather than the appropriate mpathX devices19:18
jalonsyou're sure LVM is starting after multipath daemon?19:19
jalonsor before, not sure on the logic there - sorry to wall-o-text and run, but market closes in 40 minutes and I need to start final checks19:19
prebenI think thats the core of the problem. But i tried grepping under /etc/init.d after lvm, but no such luck19:20
prebenjalons: thanks for helping out19:20
uvirtbotNew bug: #539791 in samba (main) "mount.cifs cannot mount a DFS share when using Kerberos authentication" [Undecided,New] https://launchpad.net/bugs/53979119:21
RoAkSoAxzul, bug #533603 bug #533601 and bug #53197819:31
uvirtbotLaunchpad bug 533603 in net-snmp "Apport hook for net-snmp" [Wishlist,Confirmed] https://launchpad.net/bugs/53360319:31
uvirtbotLaunchpad bug 533601 in bind9 "Apport hook for bind9" [Wishlist,Confirmed] https://launchpad.net/bugs/53360119:31
uvirtbotLaunchpad bug 531978 in vsftpd "Apport hook for vsftpd" [Wishlist,Confirmed] https://launchpad.net/bugs/53197819:31
zulRoAkSoAx: the vsftpd one is pending19:32
RoAkSoAxzul, oh ok :)19:32
FougnerHi! I'm trying to setup lighttpd+rtorrent with a scgi_local, but all I get from lighttpd is 500 - internal server error, where should I start looking?19:33
wack479trying to get the "SetEnvIf Request_URI "^/robots\.txt$" dontlog" (keep the server from logging any robots.txt requests) but for some reason its not working for me. does the code not just go in the apache.conf?19:34
wack479trying to get the "SetEnvIf Request_URI "^/robots\.txt$" dontlog" (keep the server from logging any robots.txt requests) but for some reason its not working for me. does the code not just go in the apache.conf?19:43
ventzTrek: hey20:04
Trekhiya ventz, i'm just here to track your issue is all20:04
ventzthanks :)20:04
ventzso here's the problem20:04
Trekventz: sounds to me like whatever you used to set your IPs went *poof* and isnt operating properly20:04
ventzwe bootup templates of ubuntu (jeos actually). At somepoint, we forget to re-ip a template. Now there's a duplicate IP.20:05
ventzThe problem is that the system doesn't tell us when we boot it up20:05
ventzthis constantly happens and we manually trace it down20:05
ventzi am wondering if there's a way to at least know right away that there's a duplicate system IP20:06
ventzin RHEL, when you boot it up, when it takes the network IP, it tells you about this20:06
ventzSame for windows.20:06
ventzanyone? :)20:10
Trekif anyone is here, please poke me with /CTCP Trek IAMHERE20:10
ventzwhen you have > 1200 hosts, it can become somewhat of a hassle to deal with this20:10
=== luis__lopez is now known as luis_lopez
Trekventz: a thought, have you tried using a script to find the culprit computers, rather than tracking it down manually?20:11
Trekventz: i'm not a networking expert, but just a thought20:12
ventzUsually the network guys trace it to an esx rack and from there to an esx port20:12
ventzafter that it's usually our job to find it20:12
jalonsa HA dhcpd that assigns the initial IP, a script that runs on the host that converts itself from the DHCP ip to static with whatever IP is assigned via DHCP?20:12
ventzmy problem is not just finding it -- that's annoying, but it's something that we can do in a finite steps. What kills me is finding out that this has happened in the first place. Usually we notice as people start getting different results running projects from different networks (thus hitting different resources or not reaching a resource)20:13
jalonsa central server that runs through each network class arping the IPs, looking for collisions is a passive solution20:13
jalonsi've used both, didn't like either method20:15
jalonsventz: IPwatchD? http://www.linuxconfig.org/IPwatchD_an_IP_conflict_detection_tool_for_Linux20:17
jalonslooks like it might have some X dependencies from the page, which would be evil20:17
jalonsbut, *shrug*20:17
jalonsmight be a starting point20:17
MaletorHey I added ServerName mydomain.com to a sites-available file, but I can't get apache to start up without this error "Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName"20:21
MaletorI have multiple TLDs so I need to be able to put them in the virtual host file...20:22
ventzjalons: let me check that out. I've never used that20:22
ventzI think it's for a running system though20:22
jalonsventz: so you need something in the installer that's able to detect an IP conflict?20:23
FougnerMaletor: set ServerName in apache2.conf to a FQDN20:24
MaletorFougner: I'm reading about that, but it doesn't say what to do if I want to link multiple FQDNs to this IP...20:25
jalonsJust pick one.20:26
jalonsdetermine a ServerName, and then user ServerAlias for the others20:26
FougnerMaletor: you might as well use the hostname20:27
MaletorFougner: ?20:27
MaletorHow would I forward requests from domain1.com to 192.168.1.13 internally and requests to domain2.com to 192.168.1.10 ?20:28
jalonswith virtual hosts20:29
brontosaurusrexi'am trying with some basic ircd-hybrid setup..., but i can only connect to 127.0.0.1, what is minimum one should do in ircd.conf ?20:33
jalonsbrontosaurusrex: in your listen {} block, make sure you don't have host localhost or host 127.0.0.1.  You really shouldn't be asking what's the minimum you need for ircd.conf, but rather actually go through and understand each configuration option before you fire up your daemon20:35
ventzjalons: yes20:39
ventzsomething that will detect it on bootup20:39
ventzand not take the IP if there's an ip conflict20:39
brontosaurusrexjalons: thanks20:46
=== andreas__ is now known as ahasenack
jalonsventz: I think you're going to need to script it to ifup then arp during install21:01
jalonsthat's the only way I can think to solve that21:01
jalonsifup && arping <IP to use>.  if response die else carry on21:05
klaasI'm running a full encrypted system using luks and cryptsetup plus dropbear for remote unlocking - I want to change the dropbear port from 22 to something else but I can't fint the setting where its changed - adjusting etc/init.d/dropbear /etc/defaults/dropbear does not work - anyone got an idea where the port could be hidden? :)21:08
McWineyhelp! when accessing my server through a browser, php files are being downloaded instead of displaying in the browser. How can i fix?21:12
McWineyhere's what i mean: http://eckcite.com/test has two folders with identical index files (with html and php file extensions)21:14
MaletorHow do I add a virtual host so that it is going to 192.168.1.10 ?21:18
MaletorWhen my web server is 192.168.1.1321:18
faileasi'm noticing that there have been a LOT of attempts to brute force my system via SSH. While they haven't suceeded, (mostly due to incompetance) any suggestions on what i should do, other than changing the port i'm listening on?22:01
jiboumansfaileas: this is Normal unfortunately. there's 2 obvious things you can do22:02
jiboumans1) use knock to only open ports if you know the knock sequence22:02
jiboumans2) add a rule to your firewall to block IP addresses after X unsuccessful attempts22:02
faileasjiboumans: how do i do that?22:02
jiboumansfaileas: there'll be tutorials all over the web. I'm sure google can point you there quicker than I could22:03
faileasalternately, could i restrict SSH access to maybe 2-4 ip addresses - all my systems are ipv6 enabled and static?22:03
jiboumansfaileas: if you dont have a need to have access open to the world, of course you shouldn't22:04
jiboumanspersonally, i have my ssh open to a very finite set of IP addresses, 2 of which are company jump boards which are open to the world22:04
Maletoruse certificates22:19
MaletorHow do I tell apache2 to forward incoming requests to mydomain.com to a another IP address (internal)?22:20
\shMaletor: you should read about apache2 mod-proxy, or iptables ... depending on your needs22:21
Maletorwell can i just set it so that all requests go to some default, and the ones that go specifiically to mydomain.com go to my computer ip22:22
Maletorgiven that my computer is the web server22:23
gooseis there some way I can have all emails sent to /var/mail/ forwarded to my real email address via sendmail?22:31
qotsai successfully set up a bridge-interface with bridge-utils (version 1.4-5). after i got an ip from my adsl-modem with dhclient my computer justs shuts down. no joke. this is reproducible. any help is highly appreciated.22:31
* Mojo- waves23:37
Mojo-Anyone got a moment for a n00b question?23:37
Mojo-For 225 people, it sure is quiet in here...23:42
goosejust ask, don't ask to ask :p23:42
Mojo-Hah23:43
Mojo-Alright23:43
Mojo-Anyone had any issues with SSH hanging takin the cpu(s) to 100%?23:44
gooseum. I could maybe see that if you were using like, a 30 GiB RSA key, but otherwise no, I'd say that's an abnormal problem23:45
Mojo-Heh23:45
Mojo-4 separate installs.23:45
Mojo-Debian 5, and 3 ubuntu server installs23:45
Mojo-No major changes done23:45
Mojo-Save a static ip and installing vim-nox23:45
Mojo-Also, not using the keys yet, just using passwords.23:46
gooseI just checked23:46
goosewhen I SSH into my server, my CPU does spike to 100% when verifying my RSA key, but it doesn't hang23:46
gooseI barely even caught it23:46
Mojo-Mine doesn't even offer a password prompt.23:46
Mojo-Even on the localhost.23:46
gooseit didn't even have time to show up on the graphs, just flew by the htop screen23:47
pwnguinyou have ssh keys23:47
pwnguinjust how crazy were they?23:47
Mojo-I do.23:47
Mojo-Um23:47
gooselol. of course I do :p as compared to my 8192 bit RSA key, a "password login" is crap23:47
Mojo-Whatever the default install is.23:47
gooseanyways, incase anyone was wondering, the answer to my question was simple:23:48
gooseecho "your@email.com" > ~/.forward23:48
goose(and ofc, have "sendmail" installed)23:48

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!