[00:00] https://bugs.launchpad.net/hardy-backports/+bug/286337 [00:00] Launchpad bug 286337 in hardy-backports "Please backport OpenSSH 5.1 to Hardy" [Wishlist,Won't fix] [00:00] apt-get build-dep openssh-server [00:00] that'll get the build-dependencies right, and you can just ./configure && make && sudo make install [00:01] so I won't need to re-compile openssl? [00:02] also does that compile in support for pam and all that? [00:03] no idea [00:03] v0lksman: uh, why don't you use this PPA like in the bug comments? https://launchpad.net/~rainct/+archive [00:03] if you use debuild, it will do a normal ubuntu build, so yes pam included. however, PPA's ++ [00:03] cause it's a bit of a security risk? [00:04] so is compiling it yourself [00:04] I'd rather blame myself than tell my client I got the software from some joe... [00:04] v0lksman: you can check the signatures on the ppa, check the diff against the lucid diff [00:04] it's not like the PPA binaries are closed source [00:04] lifeless: hrm...not a bad idea [00:04] the ppa is outdated too though [00:04] yeah, that's what you'll be dealing with from here on out [00:05] at least hardy's 4.9 is maintained [00:05] until lucid is released [00:05] 4.9? 4.7 [00:05] where is 4.9 for hardy? that'll do...anything more than 4.8 [00:05] whoops, yeah [00:05] 4.7 [00:05] damn [00:05] had me hoping there [00:06] lifeless: I'm really slack. I haven't looked into that test-driven stuff at all. [00:06] jayvee: de nada [00:06] I've now got some people using python-iview as an "upstream". :-D [00:07] The xbmc and boxee iview plugins re-use python-iview. I honestly didn't think it was *that* reusable. :) [00:07] So yeah, the test-driven whatever is all the more important. [00:07] \o/ [00:09] most things I set my mind to, I "just get" [00:09] but not unit testing [00:10] the things I don't "just get" are unit testing, BGP, Wave Robot API, and OAuth. [00:10] everything else I can get my head around in an hour or so. [00:10] Oh, and D-Bus. I don't get that either. [00:11] BGP is fune. [00:12] dbus is NIH DCOM is NIH CORBA === erichammond1 is now known as erichammond [00:24] still trying to find out why i need to have a monitor plug in to see the login prompt in serial console ? [00:31] axisys: that is a very strange problem. never heard of that one... [00:31] i'm curious to know the solution. [00:32] what package do i need to install to get ubuntu to auto-register in Active Directory DNS? === erichammond1 is now known as erichammond [00:52] posted my message in ubuntu server and user mailing list .. [00:53] looks like exact same problem was posted before [00:53] https://lists.ubuntu.com/archives/ubuntu-users/2009-April/182662.html [00:53] but on older version ubuntu [00:55] this seems to be similar bug in lucid [00:55] https://bugs.launchpad.net/ubuntu/+source/linux/+bug/529234 [00:56] Launchpad bug 529234 in linux "monitor drops to standby with "no signal" during boot splash on luicd alpha 3" [Undecided,New] [01:16] looks like i need to disable gdm .. becasue it is a desktop .. [01:17] so update-rc.d -f gdm remove should do it? [01:18] axisys: should - i prefer rcconf [01:20] MTecknology: rcconf ? i have not used it [01:20] !info rcconf [01:20] ubottu: *tap* *tap* [01:21] 20:21 < mtbot> MTecknology: rcconf (source: rcconf): Debian Runlevel configuration tool. In component universe, is optional. Version 2.2 (karmic), package size 22 kB, installed size 132 kB [01:21] rcconf (source: rcconf): Debian Runlevel configuration tool. In component universe, is optional. Version 2.2 (karmic), package size 22 kB, installed size 132 kB [01:22] update-rc.d is the solution used by all the maintainer scripts : other stuff also works, but be warned that it's 1) not default and 2) it's essential not to break update-rc.d [01:22] axisys: /pp 18 [01:23] axisys: sorry [01:23] persia: hmm... i guess i will just go with update-rc.d then [01:24] axisys: rcconf is extremely simple. I only use update-rc.d when I need to add a script manually to /etc/init.d [01:28] there's a lot of opinions in here - but usually something to back up the reason.. postgresql vs mysql.. opinions and reasons for picking one over the other? [02:15] hi [02:17] Anyone here? [02:18] no [02:21] So much for getting help then [02:21] well, its a bit of a silly question [02:21] perhaps you could ask your questions [02:21] There's lots of folk here [02:21] !ask [02:21] 'don't ask to ask, just ask' [02:22] Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) [02:22] no point to ask if no one is here to answer. [02:23] Razernok: /names will give you a list of folk. Also, when lifeless said "no" he meant approximetely the opposite. [02:23] Razernok: people don't reply to 'is there anyone here' style questions: folk are generally working and thats a fairly social question. Its also very disruptive if everyone answers (because you get a lot of noise) [02:26] What is the point of the DNS server? [02:27] It translates arbitrary strings into IP addresses. [02:27] Or translates arbitrary strings into other strings (depending) [02:32] a DNS is basically a semi-flat database of mappings of names to ip addresses, names, or informational data about the name, and as such can also provide mapping of ip addresses back to names. without one, you can't get a computer to recognise that www.google.com.au maps to an IP address that is used behind the scenes to make the connection. Think of it a bit like a phone book. [02:34] so with it a dynamic ip can have a .com domain? [02:34] cef: "IP addresses back to names" is just a superset of names to infomational data. [02:35] Razernok: the DNS Server in Ubuntu can be used to do that but isn't needed for that. They are separate problems. [02:35] Razernok: you need the DNS Server if you want to run a DNS server. You only need to run a DNS Server if you need to maintain a DNS zone yourself: small organisations and below generally outsource this to their domain registrar [02:35] persia: sort of.. it's constrained.. you can get a name to an ip, but not necessarily get an ip back to a name. that depends on if it's say a CNAME or if they have bothered to even provide reverse mapping (in-addr.arpa) [02:36] my server is on a dynamic ip [02:37] Razernok: there are services that allow you to give a constant name to a dynamic ip, but it does have issues (eg: when the ip changes, etc). places like dyndns.org and the like. [02:38] dyndns.org only gives dynamic ips a subdomain [02:38] cef: My point is that when do you the in-addr.arpa dance, you're back into the "names into *" area. Just a nitpick of mine: there *is no* reverse DNS, just a cooperative convention that mimics it. [02:39] persia: ahh I see what you mean.. yeah true [02:40] I guess no .com domain for my server then... :(* [02:40] :( [02:41] Razernok: you get a unique hostname, and that you can point at with a different DNS (eg: ISP/DNS Registrar hosted) using a CNAME record. But, it'll still suffer all the dyndns type issues. [02:41] i can only get dynamic ips not static ips [02:42] eg: get a DNS Registrar to host iwantafunnyname.com for you, then set up a CNAME record that maps www.iwantafunnyname.com to whaterveritis.dyndns.org [02:45] it's a hack, and you can have issues (eg: you can't the CNAME use the name for an MX - mail exchange - record, etc etc.) [02:45] hmm, I hope no-ip.com's software works on linux then [02:46] Razernok: there are a number of things and services like that, so there are options if you do go down that path [02:46] hmmm, its a download. I dunno how to transfer it to the server or install it from a file. Unless they gave me a apt-get command I'm clueless on how to install it. [02:47] well, then again I could run the no-ip.com software on my windows pc since the public ip is the same [02:47] but prefer it on the actually server though [02:48] anyone know the apt-get for no-ip.com's software? [02:49] Having trouble designating an ethernet port for sending DHCP communication using DHCPD3 on ubuntu [02:50] What needs to be added in DCHPD3.CONF to only set up dhcp on one interface connected to a router? [02:51] i guess no one knows then :( [02:51] bye then [02:53] apt-cache search dynamic shows several [02:54] apt-cache seach no-ip even shows three. [02:54] sekyourbox: see /etc/defaults/dhcp3-server [02:55] although i don't quite know what "connected to a router" means. [02:56] thx, brb [03:03] test [03:09] need help settig up virtual host on ubuntu server 9.10, I can configure on other linux and bsd no problem so I must be missing something. I've copied the default file to www.ezyaspi.com in my sites-available folder and ran a2en www.ezyaspi.com and restarted apache with sudo /etc/init.d/apache2 restart. But I still get the default page when I browse to www.ezyaspi.com page. DNS is pointed correctly. Any suggestions? [03:14] do you need network manager for ATH0 / wifi connections? [03:15] How does this work exactly, I have a physical interface WIFI0, and what seems to be some type of virtual interface ATH0.. ath0 is where im picking up my ip address. [03:16] sorry, wlan0 [03:17] yeah, they're a bit funny [03:17] don't touch the one that doesn't do anything [03:17] I have an aironet card that comes up as wifi0 and wmaster0 [03:18] I don't touch wmaster0 [03:19] I need to remove network manager [03:19] I have wmaster0 too [03:19] ath0 has the ip of the wifi network [03:19] I dont want to hose my internet if I drop netman [03:55] how do i open a file using command line? [04:00] Razernok: you mean like a text editor? [04:00] nano is a good text editor to use if you're not familiar with the command line. [04:00] $ nano the_file.txt [04:02] hmmm, and it looks like there is no way to add users to the ftp server. weird [04:04] Razernok: maybe it's based on system users? [04:04] maybe the ftp server uses your unix users as authentication [04:05] what pwnguin said :) [04:05] personally, i avoid ftp [04:05] strongly agree [04:05] nope [04:05] Razernok: install openssh-server, and use an SFTP program to transfer files [04:05] slowly training our interactive media dept that it's bad [04:05] most FTP cilents support SFTP these days [04:05] i just tried my user and pass [04:05] it's not even worth getting FTP going [04:05] just use SFTP [04:06] need ftp for dreamweaver [04:06] eww [04:06] pretty sure dreamweaver supports SCP [04:06] that's another thing you'll want to get rid of :P [04:07] http://webmaster.iu.edu/tool_guide_info/dreamweaver_pc.shtml [04:07] from the ftp server "Response: 530 This FTP server is anonymous only." [04:07] wtf [04:07] heh [04:07] Razernok: you have ssh set up for administration right? [04:08] yea [04:08] I'm on putty [04:09] i haven't checked but im pretty sure that if you can scp to the box, you can sftp [04:09] need ftp so i can use Filezilla [04:10] filezilla should support sftp as well [04:10] Razernok: filezilla supports sftp [04:10] # [04:10] # Supports FTP, FTP over SSL/TLS (FTPS) and SSH File Transfer Protocol (SFTP) [04:10] like I said, most FTP clients out there support SFTP [04:10] Razernok: if you want to get really crazy, set up WebDAV [04:11] actually, I believe it is possible to configure sshd to not support sftp while allowing scp, but it's not a common configuration. [04:12] probably, but i think openssh-server allows both out of box on ubuntu? [04:15] i got it but it won't let me transfer files [04:15] open for write: permission denied [04:15] :( [04:15] with FTP? [04:16] sftp [04:16] where you trying to write to and with what user? [04:16] yes [04:16] its an admin user [04:17] if it's root [04:17] that's disabled by default [04:17] its a folder in root [04:17] where you trying to write to and with what user? [04:18] in /Storage [04:18] Razernok: ubuntu "admin" users aren't automatically root [04:18] they are only "root" when they use sudo [04:19] when you use sftp, you just have normal permissions [04:19] so you have to "chown razernok:razernok /Storage" [04:19] or the equivalent [04:19] so how do i upload into root? [04:19] huh? [04:19] what is the user you are trying to log in as? [04:19] s/log in/upload/ [04:20] my admin user [04:20] yeah, but what's his username? [04:20] does it matter? [04:20] john [04:20] you want to go "chown john /Storage" [04:20] unless [04:20] it's web data [04:22] where do i do chown john /Storage [04:22] ubuntu web server doesn't run as root [04:22] /Storage doesn't sound like it's being served by the web server to me [04:23] its so i have an easy to find folder for my uploads to the server but not to be seen on the web server. [04:23] thats what your homedir is for? [04:24] but you then have to type "/home/john" [04:24] and i don't want the extra stuff to remember [04:25] depends on the client [04:25] * jayvee bangs head on desk [04:25] many will automatically chdir ~ [04:25] true [04:25] chdir??? [04:25] and if you use "scp some_file.txt myserver:" it automatically copies it to your home directory [04:26] change directory to ~ (where ~ means home directory) [04:26] cd and chdir mean change directory [04:26] ok you've lost me [04:27] I just want to be able to upload to anywhere on the server. [04:27] you could enable the root user, but you're really shooting yourself in the foot [04:27] Razernok, that can't be done without massively destroying the system permission scheme [04:28] mmm...it's a very Windows-like attitude [04:28] qman__: you could just use root, which preserves permissions but opens up another fun attack. perhaps theres a way to limit it to scp, but even then, yikes [04:28] allowing root to log on remotely is something I don't ever consider doing [04:28] yeah, rssh can limit it to scp, but with root permissions, you could just delete rssh with scp [04:29] and when you run as root, everything you create is owned as root, which mucks up permissions anyway [04:29] Razernok: I know when I was new to Linux, I wanted the same too, so I understand where you're coming from. [04:29] But really, it's shooting yourself in the foot still. :) [04:29] so if I'm only allowed to upload to my user's home directory then how am i expected to upload to say the htdocs folder? or custom folders used as storage? [04:29] yes [04:30] it's a Very Bad Idea (tm) [04:30] Razernok: you could make yourself the owner of that directory [04:30] ya can't then unless you place the folders in the home directory [04:30] you can totally change the ownership of files [04:30] exactly [04:30] probably there's a smarter way [04:30] Razernok, there's also ~/public_html [04:30] I need to configure /etc/networ/interfaces.. Can i configure ath0 (wireless) in here or do I have to use some IW config file??? [04:31] Razernok: you should "chown" (i.e. "change owner") of your htdocs directory to yourself so you can upload to it [04:31] which is why I was talking about chown earlier [04:31] im thinking, mod_userdir and mod_rewrite [04:31] i don't see a command line in filezilla [04:31] use ssh [04:31] yeah you'll need to do it from putty [04:31] oh god [04:32] sudo chown john:john /var/www/htdocs [04:32] or wherever htdocs is [04:32] actually [04:32] you probably want john:www-data [04:32] otherwise it might break the website [04:32] true [04:32] what you can do is use mod_userdir to provide a mapping from www.example.com/~john to /home/john/public_html [04:32] i have no idea where htdocs is located at [04:33] well, there is no htdocs by default in ubuntu [04:33] well if you haven't touched anything, it's actually /var/www [04:33] so unless you created it, it doesn't exist [04:33] and then make a public_html dir with group www-data, and set it to be sticky [04:33] Razernok: I'm guessing you're reading tutorials for Fedora or Red Hat? [04:33] and the default website is /var/www [04:33] Red Hat uses htdocs by default, but Debian and Ubuntu call it different [04:33] don't read Fedora tutorials [04:33] yeah, that'll really mess you up [04:33] I use apache [04:33] stick to ubuntu docs for ubuntu [04:33] yeah [04:34] Razernok: the apache tutorials for Fedora aren't the same as the ones for Ubuntu/Debian [04:34] my head definitely explodes when I try and do things the Fedora way in Ubuntu, or vice versa [04:34] debian docs are secondarily preferred, since most of the packages are similar [04:34] but definitely use ubuntu centric docs wherever possible [04:35] Razernok: for example, last i checked, apache ran as root on Fedora, while it runs as its own user in Debian [04:35] i came from windows not fedora [04:35] pwnguin: on CentOS 5.4 at least, it runs as the 'httpd' user [04:35] debian and ubuntu also have a very different apache configuration setup [04:36] apache on windows is a disaster waiting to happen [04:36] jayvee: perhaps. my rhel env at work is best described as pathological [04:36] Razernok: but you must have been reading a Red Hat–centric tutorial or heard from a Red Hat using user if you wanted to access a "htdocs" folder [04:36] Ubuntu has never had a "htdocs" folder. :) [04:36] i think htdocs is the default apache stuff [04:36] no [04:36] on apache its called htdocs [04:36] it's probably that way on windows too [04:37] yeah, possibly [04:37] Razernok: trust me, apache doesn't care [04:37] pwnguin: come to think of it, you might be right [04:37] Razernok: its all in the config files in /etc/apache2/ [04:37] %PROGRAMFILES%\Apache\htdocs or something [04:38] last time I ran Apache on Windows was way back in 2007 [04:38] heh [04:38] or 2006, actually [04:38] i havent but my boss tried [04:38] yeah, 2006 [04:38] the only thing worse than trying to run apache on windows, is trying to run PHP in IIS 5 [04:38] * jayvee shudders [04:38] I've done that...briefly [04:38] i accidentally recomended we replace our IIS ftp site with webdav [04:38] but it turns out apple is spawn satan [04:38] and only supports apache, poorly [04:39] you mean apple can only connect to apache webdav servers, and not, say, iis webdav servers? [04:39] correct [04:39] ouch [04:39] it demands webdav 2.0 [04:39] webdav is kind of...meh [04:39] and even then, fucks up the syntax [04:39] it was new back in...1998 [04:39] webdav is neat; pokes straight through firewalls [04:40] Windows 98 had the glorious new "Web Folders" feature in My Computer [04:40] supported out of box by windows, ubuntu and OSX.... IF you run apache [04:40] it is easier to secure than sftp if you don't trust your users, I have to admit [04:40] rssh is kind of meh as well [04:40] anyways [04:41] ive taken to a simple /var/www/www.pwnguin.net approach, with Virtual Directory in apache config [04:41] that's what I do on my linode [04:42] userdir is a great solution when you want normal users to be able to upload to a web server [04:42] dead easy to maintain [04:42] qman__: is it possible to combine userdir and modrewrite? [04:42] not sure, never tried [04:43] so what do i need to do???? [04:43] I've done userdir, and I've done rewrite, but not both at the same time [04:44] Razernok, if you're the only user, just SSH in, and `sudo chown john:www-data /var/www` [04:44] then you'll be able to upload files there, and they'll show up in the default apache site [04:44] assuming your username is john [04:44] protip: set the group sticky bit if you want new dirs to inherit the group [04:45] (you do) [04:45] and what about normal folders for storage? [04:45] just use your home folder, or a folder within it [04:45] i'd just use my homedir, because thats what should show up if you dont' type in anything for a directory [04:45] a tilde, ~, magically refers to your home folder [04:46] so you don't have to type /home/john every time [04:46] i want to avoid typing long paths like /home/john/something/fgse.txt [04:46] use tab completion [04:46] Razernok: in your HTML? [04:46] also, that's not a long path [04:46] so i need to place it in the root [04:46] you do not want to place files in the root [04:46] like /Storage [04:47] that's also a Very Bad Idea [04:47] to clarify [04:47] alot faster to type /Storage then /home/john/Storage/file.txt [04:48] if your user is john, '~/Storage' means the same thing as '/home/john/Storage' [04:48] yes [04:48] 100% agree [04:48] home folders are there for a reason [04:49] you can also type that path very quickly [04:49] I use the ~ shortcut all the time [04:49] keys pressed, in order: / h TAB j TAB shift+S TAB [04:49] I probably haven't typed /home/jeremy for years [04:49] well [04:49] my bash autocomplete isn't network aware [04:50] mine isn't either, but I have a /home/ryan on all my machines [04:51] damnit, can't find a remove folder command [04:51] wtf [04:51] the new version of openssh that just came out a few days ago adds tab completion to the built in sftp client [04:52] rm [04:52] I use scp the most, though [04:52] Razernok: use "rmdir" if the folder is empty [04:52] this is ticking me off [04:52] mostly i just use gnome's remote scp mount tool [04:52] Razernok, rm -r if you want to remove a directory and all files within [04:52] or "rm -r" if you want to remove all files inside it but BE CAREFUL with that command — you can do a lot of damage [04:52] rmdir: failed to remove `/Storage': Permission denied [04:53] sudo rmdir [04:53] ls -l /Storage [04:53] well, maybe that lists out the dir contents, i just want to know it's ownership and permissions =/ [04:53] pwnguin: ls -ld /Storage [04:53] ^ Razernok that one [04:54] pwnguin: Error: "Razernok" is not a valid command. [04:54] wth [04:54] didn't work [04:54] still won't let me delete it [04:54] yeah, ^ is apparently a bot command [04:54] sudo rm -r /Storage [04:54] Razernok, this must be done from SSH or local command line [04:54] it will delete everything inside /Storage, if that's what you want to do [04:54] not from inside an SFTP connection [04:55] ls just lists the files & permissions. its how you tell what the permissions currently are [04:55] * pwnguin is surprised [04:55] i upgraded my linode to 10.04 and it still works [04:56] ha [04:56] jumping the gun a bit, eh [04:56] there [04:56] well [04:56] heh, been running lucid since jan [04:56] i split my disk in two [04:56] hmmmm, how do you unpack webmin_1.510_all.deb on windows? [04:56] one is the in case of emergency undo snapshot [04:57] Razernok: 7zip can probably do it, however... [04:57] so i can place it in the preuploading folder for dreamweaver [04:57] Razernok, webmin is not supported on ubuntu [04:57] i use winrar [04:57] Razernok: you don't unpack debs on windows [04:57] Razernok: if you really want webmin, just upload the deb directl [04:57] directly [04:57] Debian package suitable for Debian, Ubuntu or other derived Linux [04:57] http://prdownloads.sourceforge.net/webadmin/webmin_1.510_all.deb 14M [04:57] says on webmin's site [04:57] !webmin [04:57] webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead. [04:58] wtf, then what do i use???? [04:58] !ebox [04:58] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [04:58] same as webmin? [04:58] this is gonna be a web hosting site [04:59] hahahahh [04:59] you have a long way to go before you host people [04:59] well, i guess you mean one for personal use? [04:59] you should not be using webmin or ebox for a web hosting site, either [04:59] you want something more like cpanel I'm guessing [05:00] webmin and ebox are aimed at general server administration, not web hosts [05:01] I'm planning to host only about 5 trusted clients [05:01] and anyone hosting others should know his way around the command line, otherwise when something breaks you're going to be in for a world of hurt [05:02] * pwnguin is barely qualified to host his own stuff, let alone other people's [05:03] is there a file or command to just identify the ubuntu release you're running? [05:03] pwnguin, cat /etc/issue [05:03] I think you can also run 'lsb-release' [05:03] ah, i always go for something specific like debian_version [05:03] thanks [05:04] cat /etc/lsb/lsb_release [05:04] ah, that's what it is [05:04] cat /etc/lsb-release, sorry [05:04] lsb_release -a [05:05] the interface is the command, not the file AIUI [05:05] I have a friend who will be my site testing partner [05:10] weird, sudo apt-get install “^ebox-.*” won't install ebox [05:10] wtf [05:10] the site said it would [05:12] Razernok, apt-cache search ebox [05:17] wtf [05:17] ebox doesn't do anything i need [05:17] firewalls, vpn, network config, cert authority [05:17] I wasted all that time to install it and its not at all like webmin [05:18] you wasted all of 20 minutes, if that [05:18] webmin is for managing accounts and stuff. aka a web host [05:18] ebox does none of that [05:18] and i don't know how to remove it [05:19] sudo apt-get remove ebox [05:19] however [05:19] i see an ebox-usersandgroups [05:19] so how do i install webmin then? [05:20] i just installed ebox and it has nothing webmin does [05:20] so how do i install webmin? [05:20] ebox is modularized; does it install any extra modules by default? [05:20] nope [05:21] A web-based interface for system administration for Unix. Setup user accounts, DNS, file sharing and the program is freeware. [05:21] thats webmin [05:21] eBox Platform is an open source SMB network server that acts as a network gateway, a unified threat manager, a network infrastructure manager, ... [05:21] two different things [05:21] http://www.ebox-platform.com/ [05:22] i think you have to install extra modules? [05:22] So i need to know how to install webmin_1.510_all.deb [05:22] ie, apt-get install ebox-usersandgroups ebox-ca ebox-dns [05:22] personally, i dont use ebox or webmin [05:23] just ssh and emacs [05:23] I need to webmin so i can manage clients and hosting plans and such [05:24] however, if you have an ubuntu .deb, just upload it and use sudo dpkg -i wtfever.deb [05:24] it sounds like people think it wont work [05:25] i didnt know webmin supported hosting plans [05:26] I think what he's really asking for is a free version of cpanel. [05:27] good luck with that [05:27] Yeah [05:27] thats what webmin said it does [05:28] allowing you to manage the clients and plans [05:28] Webmin is made by people that couldn't find their arse with both hands [05:29] Razernok: i cant find any webpage describing webmin with that phrase [05:31] thats what i found [05:32] that its suppose to be for managing a hosting site. (hosting plans, accounts, etc.) [05:32] its supposed to be for administrating a server [05:32] there's a virtualmin plugin, but hell if i know if the GPL version works [05:33] this server is gonna be a hosting site. so thats why i need webmin for the (hosting plans, accounts, etc. management) [05:34] have you ever actually used webmin? [05:34] looks like their demo site is down [05:34] no cause i can't figure out how to install it [05:34] http://www.webmin.com/demo.html look at screenshots [05:39] Can we just agree that webmin is offtopic here and move it to -overflow or whatever? [05:40] how bout we point Razernok at #webmin and never speak of the matter again [05:40] no idea what to do now :( [05:41] apparently the webmin channel is on undernet? are they still around? [05:42] Razernok: try joining #virtualmin; maybe they can help you out [05:42] You don't want to use Webmin on Ubuntu. Trust me. [05:42] * pwnguin is off to go watch House or something [05:43] actually you don't want to use it on any debian-based distro [05:45] But it says 'Supports Ubuntu Linux!' [05:46] pwnguin: support is a directed relation. [05:47] i think you're trying to say we don't support it, but i never claimed otherwise. im trying to drop the subject, really [05:47] Find by me [05:49] i guess there is no way to do hosting plans, user accounts, etc. [05:49] there tools that do that for a price. obviously we don't support it, but if you're paying for it the vendor should [05:50] need a free one [05:51] seriously now. house time [05:53] Razernok: There's one called VHCS that I've looked at in the past. Never used it so I can't say how good it is, but I've considered using it [05:54] They have a live demo that you can try out though [06:01] I thought ISPConfig was like a next-generation VHCS [06:02] ah ISPConfig. that's the other one that I couldn't think of the name of [06:07] Grr! [06:07] Lucid's coreutils doesn't have timeout [06:42] ajmitch: your linode just stop replying? i had to reboot mine just then [06:47] OK, it appears to be in a separate "timeout" package there, for some reason. [07:44] hello! I'm having some problems with upstart in karmic server 64bit. It won't start postgresql. I tried http://superuser.com/questions/98702/how-to-make-postgresql-start-at-boot-time-in-ubuntu but it didn't work. can I remove upstart? I'm afraid to test it because the machine is at a remote location and if I mess it up I won't be able to connect to it anymore [07:44] I can start postgresql using /etc/init.d/postgresql-8.4 manually after login. There are links in /etc/rc*.d to postgresql init script but for some reason it isn't started automatically after reboot [07:45] you cannot remove upstart [07:45] its how the server is booted [07:45] lifeless: i thought that removing upstart would install the old init system [07:46] I also searched for a logging possibility because I don't know why it won't start....and it's hard to "debug" a problem when you don't have the error message [07:50] NoReflex: there should be an error somewhere... /var/log/syslog, the postgres log file, somewhere [07:52] FireCrotch: there isn't...I searched messages, dmesg, syslog, postgresql log, the entire log dir - I believe the log should be created by upstart - but upstart does not work with bootlogd [07:54] usual thing here is it not being enabled in /etc/default/postresql or some such [07:57] lifeless: the error log is enabled in /etc/postgresql/8.4/main/postgresql.conf...and I can find there the error messages that occured after I started the application manually...but there's nothing about the "automatic" failed startup [07:59] NoReflex: Is there a bug logged about this? Sounds like there should be. This situation would not be ideal for Lucid. [08:01] sherr: I couldn't find a bug related to this fact...I did however find a bug regarding the inability of upstart to work with a boot logger [08:19] Sigh. acpid is broken in lucid atm [08:20] * persia points at all the lovely hardware that doesn't use ACPI :) [08:21] I only want to use it to shut down machines that aren't responding to ssh or PS/2 [08:21] Usually because there was no PS/2 keyboard plugged in when they booted [08:21] Do they have USB ports? That's always a convenient way to hotplug /dev/kbd [08:22] New bug: #276472 in samba (main) "cp -p on CIFS mount does not preserve permissions and returns a permission denied error" [Medium,In progress] https://launchpad.net/bugs/276472 [08:22] In this case it probably does, but that's beside the point. [08:23] If acpid provides support for ONE event, the power button, that event handler shouldn't assume the not-depended-upon acpi-support package is installed. [08:23] Oh, good bug. File & fix :) [08:24] Yeah, so now I have to install firefox into a vm, because apport-cli doesn't honour BROWSER=w3m [08:24] * twb grumbles [08:24] You already filed that bug? [08:24] That should be *easy* to fix. [08:25] I'm assuming it doesn't because it would inconvenience the GUI-only people [08:25] Actually, probably s/BROWSER=w3m/sensible-browser/, because this is a VM, so my dotfiles aren't present. [08:28] OK, it does honour the x-www-browser alternative, so if I'm running X on my server, any graphical browser would work. [08:29] No. Any browser should work. [08:29] It tries x-www-browser *before* www-browser [08:29] Hm. [08:29] When I tried in pbuilder --login, it simply failed to use w3m. [08:29] So for me, www-browser is w3m and x-www-browser is epiphany-browser (on my laptop) [08:30] Was w3m installed there? [08:30] Oh, I bet I forgot to install w3m, forgetting it was priority: standard, not essential: yes. [08:31] That would do it. Most build environments are type=buildd which is very minimal indeed, and doesn't include such fripperies as a browser. [08:31] The other exciting problem I'm gonna have now is that Xorg appears to disable the pointer emulation key (shift + num lock), so I gotta shave that yak before I can copy the transcript into the browser [08:32] twb: A clean yak is a beautiful yak :) [08:33] No, it's even weirder than that. [08:33] Mouse emulation is working, it's just the pointer's location doesn't change onscreen until I redraw the window under it. [08:34] OK, screen env BROWSER=w3m apport-bug acpid, and I can copy the typescript into the browser that way. [08:40] #539432 [08:40] ubottu: malone bug #539432 [08:40] Launchpad bug 539432 in acpid "powerbtn.sh assumes acpi-support is installed." [Undecided,New] https://launchpad.net/bugs/539432 [08:40] Error: I am only a bot, please don't think I'm intelligent :) [08:41] "PATH=(custom, no user)"... sounds like an apport fuckup [08:41] !ohmy [08:41] Please remember that all Ubuntu IRC channels share the same attitude of providing friendly and polite interaction with all users of all ages and cultures. Basically, this means no foul language and no abuse towards others. [08:41] Sorry. [08:42] But yes, that does indeed. [08:42] I was logged in as ubuntu (uid 999), as created by casper. [08:44] Hello, is it possible to create a lvm from a software mirror without having to erase all data? If so, where could I find a tutorial? [08:45] I have no lvm groups set up, so I'm not trying to extend one, but create a group. [08:46] GeorgeJ: I've never found a way short of having sufficient space and copying from one place to another. [08:47] Now I'm getting timeout errors from the launchpad "edge server" telling me I'm part of the "launchpad beta team", so I'm not going to bother reporting that apport bug [08:47] GeorgeJ: what is a "software mirror"? [08:48] Well, I'm running ubuntu server and I realy don't know which channel this goes to. [08:48] Basicaly I have two hard drives which are mirrored using software raid. [08:48] twb: Note that due to bug #538097, there might be issues anyway. [08:48] Launchpad bug 538097 in apport "+storeblob fails with "500 Internal server error" on production (works on edge)" [High,Invalid] https://launchpad.net/bugs/538097 [08:49] persia: I got it after punching in the Summary line on the first page it takes me to [08:50] persia: I would normally blame my end, because it's being used to implement/test network failures, but if that was the case I wouldn't expect to even get to the edge server. [08:50] Hard to say, really. [08:53] GeorgeJ: this channel is fine for raid questions [08:53] although I'm not a raid person [08:53] I'm getting tired ssh and her known host problems. For some reason all my servers have a new rsa fingerprint. Is there a way i can reset this known host nonsense without disabling ssh? [08:54] Well, I'm not having any issues with my raid setup. I'm trying to create an iSCSI target, which requires me to create a LVM group. [08:55] And when I want to create a LVM group, I'm instructed that all my data will be erased, and I was looking to go around this. [09:15] OK, now I have an even more exciting behaviour. [09:15] On the lucid host, this loop stops after an unpredictable number of iterations: [09:15] while ip route show dev eth0 | grep -q .; do printf .; done [09:16] If I take out either side of the pipeline, the problem goes away and the loop runs forever [09:16] From just running "ip route show dev eth0" in a loop, it certainly seems that nothing is changing... [09:19] OK, and it's ip, not grep, that's failing, because I can't reproduce it without set -o pipefail [09:23] Sod it, I'll turn pipefail off and this error detection script can just be flaky. [09:38] does apt-get upgrade have a function to ensure no upgrades that need reboot will be installed? [09:38] hi! [09:38] in order to deploy a HA Cluster, is it really necessary to have separated service servers and load-balancer servers? [09:38] nenne: it does not. [09:39] twb: ok, thanks [09:39] nenne: *usually*, the only thing that would require a reboot would be kernel packages. [09:40] twb: aah yes. would a "safe upgrade" skip thoose? [09:40] "aptitude safe-upgrade" should skip any paths that require removing or installing new packages. [09:40] nenne: for most packages that recommend reboot a simple restart of the graphical interface or respective servce would be enough [09:41] nenne: but even if you upgrade the kernel, the old kernel will continue to work indefinitely. [09:41] nenne: packages name linux-image-* (i.e. kernels) are NEVER automatically removed in the default configuration. [09:43] twb: Aaah true, thing is im gonna be upgrading a server with some sensitive services and it would be nice to know what upgrades will need a reboot on forehand. To warn users. But i guess i can allways upgrade and then do the reboot 1 week later(with planned downtime) ? [09:44] nenne: what I normally do is "aptitude -s full-upgrade", and look at what will happen (-s for simulate). [09:45] nenne: then I just know, from experience, what is likely to need an update, and I report those to my customer [09:45] twb: aah i see. that seems like the best way of doing it :) [09:47] Actually I have a cron job do the -s run and email me the result [09:48] Aah nice [09:51] New bug: #539454 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.37-1ubuntu5 failed to install/upgrade: il sottoprocesso nuovo script pre-removal ha restituito lo stato di errore 1" [Undecided,New] https://launchpad.net/bugs/539454 [10:07] New bug: #227837 in libvirt (main) "[Hardy] overzealous masquerading affects vm to vm traffic" [High,Fix committed] https://launchpad.net/bugs/227837 [10:13] hi all. the package linux-image-virtual, is that for a virtual guest? [10:26] New bug: #539469 in squid (main) "does not terminate at computer shutdown" [Undecided,New] https://launchpad.net/bugs/539469 [10:31] RoyK: yes [10:32] k === Airells is now known as airells [12:23] morning [12:32] New bug: #357067 in beautifulsoup "javascript parsing error" [Undecided,Confirmed] https://launchpad.net/bugs/357067 [13:08] Hi. I have a iscsitarget LUN up and active. I have now added more LUNs. It seems like I have to do /etc/init.d/iscsitarget restart. No reload function. Will this create any disturbance in the already existing active LUN? It can NOT go down. [13:22] timmah! [13:25] * zul does his gollum php impression [13:37] Thoughts on how to return the TLS version exim is using? [13:39] jalons: e.g. `apt-cache show exim4-daemon-heavy | grep ^Depends` : check the gnutls library version dependency. [13:43] persia: thanks, but I was looking for TLS version 1.2 (per RFC 5246) vs RFC 4346, and how an exim install running (built from source to utilize libssl over gnutls due to the smaller entropy pool required for libssl) [13:43] I built it about a year ago and recall nothing other than that - am I stuck stracing and looking for the calls to the libraries? [13:43] I'd guess you could determine the protocol version from the library version, but I could be entirely wrong. [13:44] If you built it yourself without a packaging framework, perhaps so. [13:44] Although I'd recommend using nm rather than stracing to determine how it's linked. [13:53] How do I add more iscsi targets (ietd.conf) without having to restart iscsitarget service? [14:20] guys.. My datacenter is changing it's default gateways, how can i be sure my server will be accessible? [14:22] stanman246: ask your sysop for his mobile number and blackberry email address. ;-) [14:22] lol [14:23] thought maybe it 's possible to use a 'backup' default gateway [14:23] is that possible? [14:23] to ask your sysop for his mobile and blackberry email address? yes probably [14:23] stanman246: Yes, but you don't really want to do that. if you want that kind of function, look at a dynamic routing solution. [14:24] (and for which is the right choice : ask your network admin) [14:54] I'm trying to dump all remote ciphers accepted by this mail server - anybody know the magic combination of openssl s_client -connect -starttls smtp, and getting -cipher into the mix? [14:54] i know server decides what, but is there a way to trace what it's contemplating? === airells is now known as Airells [14:55] other than guessing what the lowest cipher suite is, and watching it step through them [14:59] nevermind, it appears I just needed to keep googling to find the answer: http://rt.openssl.org/Ticket/Display.html?id=1162&user=guest&pass=guest [15:01] I am formatting a second hard drive on my home server. should I format it as ext3 or ext4? [15:04] invisime: yes. [15:05] ball: should I format it as ext3 xor ext4? :P [15:06] * ball grins [15:06] I suppose that would still be a "yes", assuming a single partition. [15:07] damn clumsy english language. *must learn lojban* [15:08] I'm basically looking for a comparison of the two or best practices. could you supply the information or a pointer to the information? [15:10] invisime: I don't use Linux much, so I'm not the best person to ask. I think I ran ext4 experimentally on my last Linux box and it seemed to work. [15:10] invisime: but I'd want more sensible testing before I used it for anything important. [15:10] I see. [15:16] invisime: for all intents and purposes ext4 is just ext3 + extents [15:16] jalons: k. thanks for the clarification. [15:16] * invisime types 'sudo mkfs -t ext4 /dev/sdb1' and hits enter. [15:25] in order to deploy a HA Cluster, is it really necessary to have separated service servers and load-balancer servers? [15:56] acalvo: no, but it works better. [16:06] hi there [16:06] I just stup ubuntu server 9.10 with a separate /boot and LVM [16:06] but grub will now create a wrong "set root=" entry [16:07] New bug: #539663 in php5 (main) "FFE for php 5.3.2" [High,New] https://launchpad.net/bugs/539663 [16:34] ricdanger, is /boot outside of LVM ? [16:35] nimrod10: yes [16:35] update-grub will set my "/" volume as root [16:36] my / is a LVM volume btw [16:41] what's it generating that's incorrect? [17:03] Hi. I have a new Intel MB with built-in Hardware-VNC-overIP which is used for a server. (no monitor connected) [17:03] Is there a way to send the video output even if no monitor is connected, so i can fetch it with vnc? [17:06] maxx_h: You essentially need video drivers for your hardware-VNC solution. It oughn't be any different from any other framebuffer, except for the drivers. [17:07] when you power up the motherboard, the baseboard management controller will likely request a DHCP address for the management port: watch your dhcp server logs and VNC in [17:07] or as persia said, if I misunderstood what you're trying to do [17:08] i can connect via vnc(management ip), see the bios and grub - but when the linux kernel loads i only have a black screen [17:08] That's definitely a driver issue then. [17:08] if a monitor is connected, vnc works too [17:08] You'll need framebuffer drivers and to direct console to that framebuffer. [17:09] Oh, cool. That means you don't need new drivers, you just need to fix the bug in the drivers you have. [17:09] Essentially, they need to not inform the kernel there's no monitor attached when VNC is active. [17:12] i have a similar problem... a headless ubuntu server, that I can only SSH when the keyboard/monitor is attached. [17:12] warmexxus: That's not similar at all. That's likely a buggy BIOS failing to initialise properly without a keyboard. There are hardware stubs you can buy that fake it. [17:13] :( it's just so strange... I can ssh with a monitor/kb attached, and I can connect while headless but it disconnects after so many minutes... but only when headless... [17:13] i will take your tip and google up the best I can... thank you [17:15] graphiccard: VGA compatible controller: Intel Corporation Core Processor Integrated Graphics Controller (rev 12) [17:15] chipset: intel Q57 [17:16] what i see is that it uses the vga16fb - should i trie different fb drivers? [17:21] maxx_h: I'd just report a bug against the driver you have. [17:23] kirkland, ping [17:23] RoAkSoAx: howdy [17:23] kirkland, how's it going? :) [17:28] kirkland, could you take a look to: https://wiki.ubuntu.com/GSoC/2010/AndresRodriguez and give me some feedback? [17:29] RoAkSoAx: sure thing [17:29] zul, for apport hooks, attaching info from the syslog should be whenever the user accepts to attach the conffile or should it always be attached? [17:29] kirkland, awesome, thanks :) [17:42] New bug: #539727 in vm-builder (universe) "python-vm-builder_0.12.2-0ubuntu3 doesn't set locales correctly" [Undecided,New] https://launchpad.net/bugs/539727 [17:42] RoAkSoAx: if the user agress then attach the syslog info [17:43] zul, ok will do it that way then [17:44] RoAkSoAx: I'll suggest you grep syslog for the class of interesting stuff, and only attach that. I'd be happier showing you my output from bind without showing you that cron is executing mirrorpr0n every 12 minutes. [17:45] persia, yeah I'm doing that actually: report['SyslogBind9'] = recent_syslog(re.compile(r'named\[')) [17:45] Cool :) [17:45] :) [18:16] zul: howdy howdy [18:16] kirkland: hey [18:16] zul: where are the daily qemu-kvm builds? [18:16] https://edge.launchpad.net/~ubuntu-server-edgers/+archive/server-edgers-qemu-kvm [18:18] is it just me or is the wiki slow today? [18:19] zul: really slow [18:19] k thats what i thought [18:20] zul: did you take a snapshot of the debian/ from the lucid package, I guess? [18:21] kirkland: yeah I havent had a chance to update it yet [18:21] zul: okay, cool; yeah, there's some good stuff that would be nice to get in the daily too [18:21] kirkland: k ill put that on my todo list [18:21] zul: i was going to blog about your work, announce it, etc.... is that okay with you? [18:22] kirkland: sure [18:32] New bug: #526823 in mysql-dfsg-5.0 (universe) "error al actualizar" [Low,Invalid] https://launchpad.net/bugs/526823 [18:32] zul: http://blog.dustinkirkland.com/2010/03/qemu-kvm-daily-builds-thanks-chuck.html [18:32] kirkland: nifty cool [18:35] zul: same to you ;-) [18:37] New bug: #526827 in mysql-dfsg-5.0 (universe) "package mysql-server-5.0 5.1.30really5.0.75-0ubuntu10.3 failed to install/upgrade: subprocess post-installation script returned error exit status 1" [Low,Invalid] https://launchpad.net/bugs/526827 [18:39] sorry to bother, but I may need som help with Karmic+multipath+lvm2 [18:39] anyone got this to work? [18:46] how do I safely enable telnetd on ubuntu server? there is no host on the same network, just cisco router and it needs to access the ubuntu server .. so telnet seems only option [18:48] axisys: Install the IOS ssh client (reed) [18:48] axisys: http://www.cisco.com/en/US/tech/tk583/tk617/technologies_tech_note09186a00800949e2.shtml#settingupaniosrouterasssh [18:50] * persia has no good recommendations for CatOS other than "Upgrade" [18:50] persia: hmm.. that wont be an option for this scenario due to company policy .. but i am glad it is a valid option [18:51] how do I start telnetd .. may be then use ufw limit telnetd ? i do that limit for ssh [18:52] There exists no safe way to enable telnetd, unfortunately. There are lots of unsafe ways. `apt-get install telnetd` is likely the easiest of these. [18:53] persia: yep.. telnetd is not safe period.. looks like it will be sitting in a private network [18:56] persia: what you know looks like that router has ssh already there.. these network guys never ever used it.. lol [18:58] if i run sudo apt-get update on server [18:58] it will download AND install the updates or i need to run something to install them [18:59] mdeslaur: does this look sense to you? https://bugs.edge.launchpad.net/ubuntu/+source/ntp/+bug/517701 [18:59] Launchpad bug 517701 in ntp "ntpd apparmor rule does not allow reading dhcp based config" [Low,Incomplete] [19:01] anyone used /etc/lvm/lvm.conf ? [19:01] jaypur: Neither. It just updates the status of updates available. "upgrade" and friends perform upgrades. [19:01] hm [19:01] let me try [19:01] zul: yeah, that looks okay...don't remove the old one just in case, just add the new one [19:02] k [19:02] .yeah it's upgrade thanks persia [19:03] mdeslaur: rw? [19:04] zul: same as the old one [19:04] preben: yes, but I haven't touched multipathd on anything newer than hardy [19:05] jalons: it seems to me that lvm somehow prevents multipathd to add the mulipath devices if diskgroups are on the pvs [19:06] jalons: so I'm trying to configure lvm.conf, so it wont touch the disks before the multipath devices are available [19:06] .. or something [19:06] which is logical, you don't want to start your lvm until the physical disks are ready [19:07] I'm trying to find a host I have this one, as I seem to recall fighting CLVM vs LVM on this issue [19:08] it works pretty good. multipath -ll is good, pvs, vgs, lvs all good. [19:08] but soon as I reboot, the lvm access the pvs as /dev/sda,c,d and so on, instead of /dev/mapper/alias (from multipath) [19:09] and multipath -ll is completly silent [19:09] ok, so you want to strip out the devices {} section of lvm.conf? [19:10] basically, ignore /dev/sd{a,b,c}*, and manually specify what you want [19:10] kirkland, how do I change the color of the byobu's status bar? [19:11] there's a regex in there somewhere to ignore all sd{a-z}.{1-9} devices, so if you drop another drive in later it doesn't freak out - is that the jist? [19:11] it gets worse, I have installed the os on lvs to [19:11] RoAkSoAx: F9 [19:11] hrm. [19:11] kirkland, oh got it thanks lol :) [19:11] there is a filter seciont in /etc/lvm/lvm.conf - but I havent managed it to work yet [19:12] preben: you want to multiplath the connection to the OS i take it? [19:12] jalons: I have managed this to work in a linux kvm guest with a single path [19:12] jalons: the os boots on a single internal disk, the multipathed disks are on a EMC san [19:12] right, it's replacing the LVM devices with their multipath siblings [19:14] I think so [19:14] RoAkSoAx: ;-) [19:15] preben: ok, it definitely sounds like you want to set up filtering (although if the system disk is seperate from the actual LVM, you should be fine) [19:15] I tried this filter: filter = [ "a|^/dev/sdc|", "a|^/dev/mapper/|", "r/.*/" ] [19:16] to include the boot disk(/dev/sdc) and include the multipath devices under /dev/mapper and ignoer evrything else [19:16] so that's accepting sdc and anything under /dev/mapper, and rejecting everything else [19:16] why do you want the boot disk included? is it part of the LVM that's hanging off your SAN/ [19:17] no, buts the boot drive is in a diskgroup by it's own [19:17] with root and swap volumes [19:17] ah. [19:17] duh, even though it's seperated out we still have to tell lvm about it [19:18] so to start from the top now that i get it - upon reboot it's finding the LVM that contains / and swap, but it's mangling the mpath hosts, showing them up as /dev/sdX rather than the appropriate mpathX devices [19:19] you're sure LVM is starting after multipath daemon? [19:19] or before, not sure on the logic there - sorry to wall-o-text and run, but market closes in 40 minutes and I need to start final checks [19:20] I think thats the core of the problem. But i tried grepping under /etc/init.d after lvm, but no such luck [19:20] jalons: thanks for helping out [19:21] New bug: #539791 in samba (main) "mount.cifs cannot mount a DFS share when using Kerberos authentication" [Undecided,New] https://launchpad.net/bugs/539791 [19:31] zul, bug #533603 bug #533601 and bug #531978 [19:31] Launchpad bug 533603 in net-snmp "Apport hook for net-snmp" [Wishlist,Confirmed] https://launchpad.net/bugs/533603 [19:31] Launchpad bug 533601 in bind9 "Apport hook for bind9" [Wishlist,Confirmed] https://launchpad.net/bugs/533601 [19:31] Launchpad bug 531978 in vsftpd "Apport hook for vsftpd" [Wishlist,Confirmed] https://launchpad.net/bugs/531978 [19:32] RoAkSoAx: the vsftpd one is pending [19:32] zul, oh ok :) [19:33] Hi! I'm trying to setup lighttpd+rtorrent with a scgi_local, but all I get from lighttpd is 500 - internal server error, where should I start looking? [19:34] trying to get the "SetEnvIf Request_URI "^/robots\.txt$" dontlog" (keep the server from logging any robots.txt requests) but for some reason its not working for me. does the code not just go in the apache.conf? [19:43] trying to get the "SetEnvIf Request_URI "^/robots\.txt$" dontlog" (keep the server from logging any robots.txt requests) but for some reason its not working for me. does the code not just go in the apache.conf? [20:04] Trek: hey [20:04] hiya ventz, i'm just here to track your issue is all [20:04] thanks :) [20:04] so here's the problem [20:04] ventz: sounds to me like whatever you used to set your IPs went *poof* and isnt operating properly [20:05] we bootup templates of ubuntu (jeos actually). At somepoint, we forget to re-ip a template. Now there's a duplicate IP. [20:05] The problem is that the system doesn't tell us when we boot it up [20:05] this constantly happens and we manually trace it down [20:06] i am wondering if there's a way to at least know right away that there's a duplicate system IP [20:06] in RHEL, when you boot it up, when it takes the network IP, it tells you about this [20:06] Same for windows. [20:10] anyone? :) [20:10] if anyone is here, please poke me with /CTCP Trek IAMHERE [20:10] when you have > 1200 hosts, it can become somewhat of a hassle to deal with this === luis__lopez is now known as luis_lopez [20:11] ventz: a thought, have you tried using a script to find the culprit computers, rather than tracking it down manually? [20:12] ventz: i'm not a networking expert, but just a thought [20:12] Usually the network guys trace it to an esx rack and from there to an esx port [20:12] after that it's usually our job to find it [20:12] a HA dhcpd that assigns the initial IP, a script that runs on the host that converts itself from the DHCP ip to static with whatever IP is assigned via DHCP? [20:13] my problem is not just finding it -- that's annoying, but it's something that we can do in a finite steps. What kills me is finding out that this has happened in the first place. Usually we notice as people start getting different results running projects from different networks (thus hitting different resources or not reaching a resource) [20:13] a central server that runs through each network class arping the IPs, looking for collisions is a passive solution [20:15] i've used both, didn't like either method [20:17] ventz: IPwatchD? http://www.linuxconfig.org/IPwatchD_an_IP_conflict_detection_tool_for_Linux [20:17] looks like it might have some X dependencies from the page, which would be evil [20:17] but, *shrug* [20:17] might be a starting point [20:21] Hey I added ServerName mydomain.com to a sites-available file, but I can't get apache to start up without this error "Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName" [20:22] I have multiple TLDs so I need to be able to put them in the virtual host file... [20:22] jalons: let me check that out. I've never used that [20:22] I think it's for a running system though [20:23] ventz: so you need something in the installer that's able to detect an IP conflict? [20:24] Maletor: set ServerName in apache2.conf to a FQDN [20:25] Fougner: I'm reading about that, but it doesn't say what to do if I want to link multiple FQDNs to this IP... [20:26] Just pick one. [20:26] determine a ServerName, and then user ServerAlias for the others [20:27] Maletor: you might as well use the hostname [20:27] Fougner: ? [20:28] How would I forward requests from domain1.com to 192.168.1.13 internally and requests to domain2.com to 192.168.1.10 ? [20:29] with virtual hosts [20:33] i'am trying with some basic ircd-hybrid setup..., but i can only connect to 127.0.0.1, what is minimum one should do in ircd.conf ? [20:35] brontosaurusrex: in your listen {} block, make sure you don't have host localhost or host 127.0.0.1. You really shouldn't be asking what's the minimum you need for ircd.conf, but rather actually go through and understand each configuration option before you fire up your daemon [20:39] jalons: yes [20:39] something that will detect it on bootup [20:39] and not take the IP if there's an ip conflict [20:46] jalons: thanks === andreas__ is now known as ahasenack [21:01] ventz: I think you're going to need to script it to ifup then arp during install [21:01] that's the only way I can think to solve that [21:05] ifup && arping . if response die else carry on [21:08] I'm running a full encrypted system using luks and cryptsetup plus dropbear for remote unlocking - I want to change the dropbear port from 22 to something else but I can't fint the setting where its changed - adjusting etc/init.d/dropbear /etc/defaults/dropbear does not work - anyone got an idea where the port could be hidden? :) [21:12] help! when accessing my server through a browser, php files are being downloaded instead of displaying in the browser. How can i fix? [21:14] here's what i mean: http://eckcite.com/test has two folders with identical index files (with html and php file extensions) [21:18] How do I add a virtual host so that it is going to 192.168.1.10 ? [21:18] When my web server is 192.168.1.13 [22:01] i'm noticing that there have been a LOT of attempts to brute force my system via SSH. While they haven't suceeded, (mostly due to incompetance) any suggestions on what i should do, other than changing the port i'm listening on? [22:02] faileas: this is Normal unfortunately. there's 2 obvious things you can do [22:02] 1) use knock to only open ports if you know the knock sequence [22:02] 2) add a rule to your firewall to block IP addresses after X unsuccessful attempts [22:02] jiboumans: how do i do that? [22:03] faileas: there'll be tutorials all over the web. I'm sure google can point you there quicker than I could [22:03] alternately, could i restrict SSH access to maybe 2-4 ip addresses - all my systems are ipv6 enabled and static? [22:04] faileas: if you dont have a need to have access open to the world, of course you shouldn't [22:04] personally, i have my ssh open to a very finite set of IP addresses, 2 of which are company jump boards which are open to the world [22:19] use certificates [22:20] How do I tell apache2 to forward incoming requests to mydomain.com to a another IP address (internal)? [22:21] <\sh> Maletor: you should read about apache2 mod-proxy, or iptables ... depending on your needs [22:22] well can i just set it so that all requests go to some default, and the ones that go specifiically to mydomain.com go to my computer ip [22:23] given that my computer is the web server [22:31] is there some way I can have all emails sent to /var/mail/ forwarded to my real email address via sendmail? [22:31] i successfully set up a bridge-interface with bridge-utils (version 1.4-5). after i got an ip from my adsl-modem with dhclient my computer justs shuts down. no joke. this is reproducible. any help is highly appreciated. [23:37] * Mojo- waves [23:37] Anyone got a moment for a n00b question? [23:42] For 225 people, it sure is quiet in here... [23:42] just ask, don't ask to ask :p [23:43] Hah [23:43] Alright [23:44] Anyone had any issues with SSH hanging takin the cpu(s) to 100%? [23:45] um. I could maybe see that if you were using like, a 30 GiB RSA key, but otherwise no, I'd say that's an abnormal problem [23:45] Heh [23:45] 4 separate installs. [23:45] Debian 5, and 3 ubuntu server installs [23:45] No major changes done [23:45] Save a static ip and installing vim-nox [23:46] Also, not using the keys yet, just using passwords. [23:46] I just checked [23:46] when I SSH into my server, my CPU does spike to 100% when verifying my RSA key, but it doesn't hang [23:46] I barely even caught it [23:46] Mine doesn't even offer a password prompt. [23:46] Even on the localhost. [23:47] it didn't even have time to show up on the graphs, just flew by the htop screen [23:47] you have ssh keys [23:47] just how crazy were they? [23:47] I do. [23:47] Um [23:47] lol. of course I do :p as compared to my 8192 bit RSA key, a "password login" is crap [23:47] Whatever the default install is. [23:48] anyways, incase anyone was wondering, the answer to my question was simple: [23:48] echo "your@email.com" > ~/.forward [23:48] (and ofc, have "sendmail" installed)