[00:00] Nonpython: look for -t option in /etc/default/bind9. Is it there? e.g. /var/lib/named [00:01] no, just "-u bind" [00:01] if OPTIONS [00:01] s/if/in/ [00:01] Nonpython: see if user bind has permissions to read/write /var/run/named.pid, for example [00:02] /var/run/named.pid does not exist. [00:03] Nonpython: see if running named-checkconf spits out any problems [00:03] ok [00:03] /etc/bind/named.conf.options:27: unknown option 'zone' [00:03] /etc/bind/named.conf.options:32: unknown option 'zone' [00:04] Nonpython: can you pastebin /etc/bind/named.conf.options? [00:05] http://pastebin.com/S02aqCMm [00:06] Nonpython: those errors may be in /var/log/daemon.log or /var/log/messages as well. See if any other hints are in there. [00:06] Nonpython: "Unknown paste ID, it may have expired or been deleted!" [00:07] Nonpython: FYI you might also like `apt-cache show pastebinit` [00:08] http://www.pastie.org/966716 [00:09] Nonpython: move zone blocks outside of options { }; [00:10] ok [00:11] do-release-upgrade claims there are no new releases despite being on 8.04.1 [00:12] Theravadan: that's normal. LTS to LTS upgrade will only be enable when 10.04.1 is released [00:12] mathiaz, darnit [00:13] Theravadan: https://wiki.ubuntu.com/MaverickReleaseSchedule <- this is currently scheduled for end of july 2010 [00:14] f1yback: Re: that 4" thick thinkpad, I have no idea what I'm going to do with it :P [00:15] mathiaz, hmm if I change /etc/update-manager/release-upgrades such that Prompt=normal can I go to 8.04? [00:15] Theravadan: I don't know [00:15] SpamapS: o/ [00:15] mathiaz, hmm i'll try it with a non-essential machine [00:16] bc well don't toss it [00:16] first thing you should do with it though is run dban on it [00:16] a) to clear the preverious own's data [00:16] b) also gives the hd a chance to reallocate any sectors going bad [00:16] previous owner [00:16] sorry long day [00:17] cross your fingers - upgrading [00:19] f1yback: first order of business is to pretend in a Starbucks I think. [00:19] hahah [00:19] only problem with that is if it has someone else's porn on it [00:19] that's why I always wipe boxes I am given or find on the street side on trash day [00:19] also just because it's none of my damn business what was on there [00:20] f1yback: that's actually pretty scary now that you brought it up. [00:20] yeah i'd wipe the hd [00:21] do make a backup of the recovery sw and/or partition first if you plan to reuse the os it came with [00:21] then just wipe it with dban or mhdd if you can inititalize the "ATA security erase unit" command [00:21] mhdd has the added bonus of surface testing and smart log checking [00:22] hi!!!!!!! [00:22] hi [00:24] I have a ton of errors from Bind! http://www.pastie.org/966742 [00:24] Upgraded my Ubuntu 9.10 to Ubuntu 10 and it also upgraded my php 5.2 to php-5.3. How can I downgrade to php version 5.2 again? [00:27] Nonpython: part of that is permissions. make sure user bind can read those files that you're getting permission denied on. [00:27] Nonpython: if possible, pastein one of those zone files [00:33] does anyone have a copy of /etc/apt/sources.list from a fresh U.S.A. install of unbuntu server 10.04 [00:33] ???? [00:34] ryoohki: I think people gave you that already... [00:34] i didn't see it [00:35] JanC: USA? [00:35] http://www.pastie.org/966760 [00:35] is db.trueblogtales.com [00:39] oh yeah just upgraded from 8.04.3 LTS to 10.04 [00:41] Nonpython: your CNAMEs are a problem. try this, but update your serial first, and maybe clean up my fubar formatting. http://www.pastie.org/966770 [00:42] Nonpython: I don't think that should give you any problems, but try loading just that zone, then clear up the error log, then load the other zones === chewbranca_ is now known as chewbranca [00:45] Two errors: 18-May-2010 23:44:53.537 couldn't add command channel 127.0.0.1#953: address in use [00:45] 18-May-2010 23:44:53.537 couldn't add command channel ::1#953: address in use [00:45] And a third: 18-May-2010 23:44:53.539 zone trueblogtales.com/IN: NS 'ns.trueblogtales.com' has no address records (A or AAAA) [00:46] Nonpython: for the NS, you need: IN A 69.175.115.18 [00:46] ok. [00:47] Nonpython: sorry: ns IN A 69.175.115.18 [00:48] What do the first two mean? [00:48] Nonpython: try this (also update serial again, don't use the one in the paste) http://www.pastie.org/966770 [00:49] Nonpython: only change is line 15 [00:49] I did exaCTLY that [00:49] (sorry my kb is borked) [00:49] binBASH, sorry, i don't. [00:50] binBASH, if you're having issues, please do open a bug [00:50] Nonpython: are you saying your file looks exaclty like that, minus the serial, and you are still getting 'NS 'ns.trueblogtales.com' has no address records'? [00:51] No, the ...couldn't add command channel... errors. [00:54] Nonpython: stop and start bind [00:54] question, is squash just really sensitive to cdrom read errors or does getting low on ram cause squashfs to shit [00:54] the latter [00:54] I seen this way too much on a variety of machines and hardware [00:54] ah [00:54] What do I do with the reverse zone if I have two domain names with the same first three octets but have different last octet? [00:55] and I was running a program designed to fill up the ram [00:55] So Yeah. [00:55] thx [00:55] I should know, I practically maintain it. [00:56] hahaha ;) [00:56] thx I wanted to make sure my hw was stable [00:56] so using memtest.sh [00:56] amazing though I can run months on a livecd on my main desktop [00:57] my laptop which is actually better hw shit but since I switched it to a usb flash drive works fine [00:57] f1yback: please watch the language in here [00:57] hello any one with squid experience? [00:57] ok [00:58] so squashfs gets *CANUCKED* easily [00:58] there [00:58] i need to password protect my proxy but i dont know wich acl to use [00:58] Nonpython: if I understand you correctly, you use the same file. You want PTR records. [00:59] Yay! [00:59] Nonpython: similar to the CNAME.. e.g. 1 $TTL IN PTR foo. [01:00] oh and you are one too [01:00] that explains it [01:00] * f1yback bites Nonpython [01:00] CANUCK! [01:01] flyback: not true, I am from Blane, Washington, also known as Meth Lab Estates. [01:01] Which is literally on the border. [01:02] I moved there in case I had to move to Canadia. [01:03] oh wavecable [01:03] not wave.home.com [01:03] Yeah. [01:04] Same company. [01:04] no there's a canuck isp called wave [01:04] Yeah, wavecable operates in canada as just "wave". [01:04] Hi, please help today is my external on major project. I am able to deploy my .war but not able to run servlet and jsp code on it, getting exception error.root cause [01:04] com.mysql.jdbc.exceptions.jdbc4.CommunicationsException: Communications link failur === Edgan__ is now known as Edgan [01:09] How can I setup reverse DNS for a second domain on a IP address that is identical except for the least significant octet already has a domain with reverse DNS stuff? [01:11] Nonpython, you can set multiple reverse DNS for one IP, but they get served round-robin style [01:11] you don't get all of them, just whichever one is up next [01:11] Not the same IP. [01:11] Say you have a server with the IP 42.42.42.42 [01:12] and that has the domain example.com. [01:12] but you also have 42.42.42.43 that hosts example.net. [01:12] Found the solution to my problem, if anyone needs to revert back to php version 5.2 from php 5.3 after upgrading Ubuntu then here it is: http://ubuntuforums.org/showthread.php?p=9152778 [01:12] How do you set up reverse IP for the latter? [01:13] same way as the first [01:13] I am a tard. :( [01:13] 42.42.42.42.in-addr.arpa IN PTR example.com [01:13] YAY! [01:13] 43.42.42.42.in-addr.arpa IN PTR example.net [01:13] Kutakizukari: Please don't encourage people to use unsupported PHP versions. That last thing one should run is a PHP that doesn't have security support. [01:14] If you need 5.2, don't upgrade to Lucid until your're ready for 5.3. [01:14] those should have trailing dots, but you get the idea [01:14] I know, I am smrt! [01:15] ScottK, drupal needs 5.2 not 5.3. I was not aware that it would do that. [01:15] many have the same problem and the solution was difficult to find. [01:15] That solution isn't a solution. [01:15] for me and many others it is [01:15] I understand you think it is. [01:16] Are there bugs about Lucid's drupal not working? [01:16] just the version 5.3 will not run drupal it needs php version 5.2 [01:17] rather than downgrading PHP, this should have been reported as a bug in the drupal package for lucid [01:17] so it could be fixed [01:17] rather than having people run old, potentially insecure software [01:18] no bugs just an option to not upgrade php version 5.2 to 5.3 would have been nice [01:18] not working on 5.3 IS a bug [01:18] ok [01:19] Supporting one version of PHP per release is more than enough. [01:20] understand you point [01:41] there is a bug http://drupal.org/node/360605 === dendrobates is now known as dendro-afk [01:57] Hey guys. Does anyone know of a FTP server that will allow me to use active directory to authenticate users? [02:06] SpamapS: howdy [02:08] hey man can anybody help. [02:13] !ask | Mkools [02:13] Mkools: Please don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) [02:15] Mkools: ahh - I see your earlier question now. Sorry I can't help.... === dendro-afk is now known as dendrobates === dendrobates is now known as dendro-afk [02:36] I'd like to install a pastebin server for my intranet. Any suggestion? [03:00] jetole: i know pureftpd can authenticate against ldap so it should work [03:21] New bug: #582627 in openldap (main) "slapd sometimes doesn't start in lucid; can't log in if using nss_ldap" [Undecided,New] https://launchpad.net/bugs/582627 [03:24] has anyone had any luck getting wordpress to work with ssl and apache? [03:27] hi [03:29] I can't see autofs anymore in "ps aux" on lucid, why ? [03:29] how else should I check running processes ? [03:50] apparmor can do that [04:13] kirkland: ping? [05:02] I looked at my server and there was only 2MB of RAM free, and I looked and found that there were 12 Apache web server processes running! What could cause this? [05:02] having apache2 installed, and it being used [05:03] I have 10 spawned [05:04] you can mess with apache settings to lower the number, but it should be fine as is. [05:05] Should it be eating up ~300MB of ram on a server with 2 unheard of websites? [05:07] Nonpython: no, I don't think so [05:07] WTF is it wrong? [05:07] (My english is not good) [05:08] I think I get the picture, but I don't know what is wrong.. maybe #httpd can help\ [05:09] * slackster is inserted in what is wrong, however [05:09] where are you getting the 300MB number from? [05:09] interested [05:10] merely adding up the memory used by each process won't give you an accurate number [05:10] ajmitch: top and statistics skills. [05:11] Combined the percentages and calculated based off of my meager 384MB [05:12] taking into account memory used for buffers/cache? [05:12] Huh? [05:13] the point being that free memory is essentially wasted, and the kernel will use it [05:13] see the output of 'free -m', specifically the line about buffers/cache [05:13] It was a mod_php thread and memory leak. [05:14] PHP would do it.. [05:14] It was filling up its memory and spawning a new thread to have more. [05:31] hi, any idea how ubuntu installer treats a home partition which already has an encrypted home folder with the same name as the username you are creating on the installer? [05:33] No [05:36] hmm... I will have to test that on a VM first, then :-) [05:36] Nonpython, thanks [05:36] deslector: encrypted how? [05:37] twb, I have an installation of 9.10 with /home on a separate partition [05:37] twb, on that partition, user foo has his encrypted home folder [05:37] on that partition too, there is a .ecryptfs folder [05:38] I want to do a fresh install with 10.04 [05:38] You will lose it. [05:38] twb, when I get asked to create a user, i want to create the user foo [05:38] Huh. [05:39] I am wondering if the installer will overwrite something as to make my old home unreadable or if it will recognize what is happening and simply use what is already there [05:39] I've never seen per-user file-level encryption like that. It sounds insane. [05:39] I plan to use the same password as before for user foo [05:39] I guess ubuntu is using a fuse crypto layer and a loopback mount or something [05:39] twb, this is regular "encrypted home" ubuntu feature [05:40] I didn't tweaked it or anything [05:40] It wasn't there in 8.04, so I don't know about it. [05:40] hi all i installed ubuntu-desktop package on my ubuntu server edition..but gui doesn't come when i boot my system...plz tell me wht is the next step [05:40] twb, ok, thanks... [05:40] deslector: is there a reason you're reinstalling Ubuntu rather than just upgrading? [05:41] twb, just my OCD, I guess... :-) [05:42] doesn't update installer ask whether to keep config files before replacing.. in this case passwd files? [05:42] I would think it would be ok [05:42] *think* [05:43] slackster, I'm not updating, I'm doing a fresh install... that's the thing [05:45] how to take gui option in server 9.10?? [05:45] fresh install should overtwrite everything? [05:45] apctr: which GUI.. [05:46] slackster, that's what I would think... just wondering if the installer was "smart" enough to recognize this scenario... [05:46] slackster: i installed ubuntu-desktop package but it will satrt only in terminal mode... [05:46] apctr: try "startx" [05:47] slackster: i tried but it fails [05:47] deslector: sorry, I don't know it well enough [05:47] apctr: what about "sudo /etc/init.d/gdm start" [05:47] apctr: you may need to configure X first [05:47] slackster, don't worry... I'll just try it on a VM first :-) [05:48] (plus, I always back up my data when doing dangerous stuff :-) [05:48] What package is mpm_netware in? [05:49] KenjiPops: how to configure it? [05:49] apctr: sudo dpkg-reconfigure xserver-xorg [05:51] slackster: it is showing some error :upstat job [05:57] ok, found the answer [05:57] http://ubuntuforums.org/showthread.php?t=1463392 [05:57] last post [05:57] :-) [05:59] deslector: glad you figured it out. :) [06:00] hopefully it works as planned [06:00] The installer is probably dumb, because you aren't expected to *re*install, you're expected to upgrade [06:05] twb, yep, that's what I thought too... but the post I linked before says otherwise... [06:06] I trust forum users about as far as I can throw them [06:06] twb, "throw them" ? [06:07] An idiom. [06:07] I mean: "I do not trust forum users" [06:07] twb, oh, ok... well, I wouldn't trust my /home either... that's why god invented backups ;-) [06:08] twb, anyway, thanks for your time :-) [06:12] How do I install mpm_netware on ubuntu 8.04? [06:12] Nonpython: never heard of it. What is it? [06:12] apache module. [06:13] Ah, apt-file indicates it's part of the apache2 package. [06:13] Except for the fact that I have that package and it is not there. [06:14] Perhaps it is not a DFSG-compliant component? [06:15] DFSG? [06:15] Debian Free Software Guidelines; an early definition of "open source". [06:16] Ahh, old baggage from epicfailbian. [06:17] Here's the apt-file results as a web page: http://packages.ubuntu.com/search?searchon=contents&keywords=mpm_netware&mode=filename&suite=lucid&arch=any [06:17] yeah [06:17] I think I know what I need to do [06:18] Only the documentation is there! [06:19] you reach a point where you get defeated enough times you decide that you have had enough [06:19] The documentation seems to indicate that mpm-netware is only useful if you're running netware, which sounds like a separate OS (i.e. not ubuntu). [06:19] yeah. [06:20] I'm going CentOS. [06:20] twb: it is. [06:20] So why do you want *Ubuntu's* apache2 to have mpm_netware? [06:21] I need to limit apache's number of threads because it is raeping my memory in the butt, [06:21] . [06:21] I don't think switching to netware is the right way to achieve that. [06:21] Nonpython: I was going to recommend freebsd.. [06:22] seems very light to me [06:22] Nonpython: have you asked #httpd (the Apache channel) about it? [06:22] 8 times, no responce. [06:22] Did you ask about limiting memory usage, or about installing mpm-netware on Ubuntu? [06:23] Did you wait several hours for a response? [06:23] I found out about mpm-netware through them, then I asked about ubuntu installs 8 times. [06:23] They won the useless award for uselessness. [06:24] You should be telling them the symptoms (i.e. "I'm running out of memory"), not trying to diagnose it yourself (i.e. "how do I install mpm-netware?"). [06:26] I have. [06:26] OK, then there's not much more I can do. [06:27] Nonpython: is this a purely static server? [06:28] No, it runs PHP scripts out the ass. [06:28] PHP in threaded apache? [06:28] Yes. [06:28] or PHP in fastcgi mode w/ threaded apache? [06:28] ok threaded PHP is *a waste of time* [06:28] I do not know [06:29] each thread must use its own pool of memory.. [06:29] What is this "fastcgi" thing? [06:29] it gains *no benefit* by being thread safe.. but does cost because of the mutexes. [06:29] I assume that it is faster CGI. [06:29] fastcgi runs php on the backend independent of the webserver [06:29] In cases where you want to serve static and php or mixed languages, its a good choice. [06:30] In cases where you just have PHP, mod_php in prefork mode is by far the most stable and highest performing configuration [06:31] Nonpython: where are you getting these memory readins from? [06:31] Nonpython: but let me make this very clear. *threaded MPM + PHP is a waste of time* [06:31] Ok. [06:31] Nonpython: run "free -m" and subtract cached [06:31] Have spent extensive time trying to make that work well. The issue is that Zend's memory allocator is not stable enough to share one pool of RAM. [06:32] and buffers [06:32] yeah its just a big damn joke [06:32] that they even suppor threading.. totally stupid [06:32] 212 used MB. [06:32] Nonpython: so you have more than 2MB free now... ;) [06:33] Nonpython: you should be ok [06:33] No, this is without apache. [06:33] * Nonpython is stupid [06:33] you've stopped apache? [06:33] Yes. [06:33] I didn't think you could even HAVE threaded PHP [06:33] The only time where a pure PHP workload makes sense w/ fastcgi is when you are going to have a ridiculously high number of clients running PHP scripts ... but then you should be using lighttpd or nginx for your fastcgi frontend. [06:33] Doesn't apache-php5 force you to use apache2-mpm-stinky ? [06:34] twb: look up "ZTS" aka "Zend Thread Safety" [06:34] SpamapS: heh, I don't care THAT much :-) [06:34] 381 MB of 384 MB including cache. [06:34] twb: ^5. :) [06:34] IMO anyone running PHP is already lost [06:34] not including cache. [06:34] PHP has its moments. :) [06:35] twp: I need mah schweet wordpress. [06:35] Nonpython: don't worry about the cache [06:35] Eh, it's moment was being perl for people who didn't already know perl. [06:35] or not.. [06:35] I know perl. [06:35] Nonpython: yes, well, wordpress doesn't exactly have a hot security record. [06:35] and I hate PHP. [06:35] Nonpython: this was back in the 90s when all web code ran on perl. [06:36] It stole mah throne! [06:37] twb: php was to perl as Windows 1.0 was to Mac OS [06:37] dumb it down, make it cheap and people will buy it. [06:38] Choosey programmers choose Perl. [06:38] To referance weird peanut butter. [06:39] How do I set up FastCGI? [06:39] Nonpython: I run wordpress on a Xen instance w/ 384MB of RAM .. it works fine [06:39] SpamapS: yeah [06:39] apache 2233 0.4 4.9 34120 18848 ? S 22:02 0:10 /usr/sbin/httpd [06:39] apache 18689 0.5 5.2 34884 20180 ? S 21:41 0:17 /usr/sbin/httpd [06:39] just use prefork. :) [06:40] *prefork*, that's what I was trying to remember (re. "stinky" above) [06:40] twb: I was hoping somebody had called it stinky. :) [06:40] SpamapS: presumably that 384 MB is a xen instance that *just* runs wordpress? [06:40] and courier-imapd [06:41] and postfix [06:41] and irssi :) [06:41] oh and mysqld for wordpress [06:41] Ah, OK, so you're not taking a one-jail-per-service approach. [06:41] no, you're pretty much pwning me on the next wordpress vuln [06:42] :-) [06:42] My VPS runs Bind 9, Apache 2, Mod_PHP, MySQLd, Courier, and Postfix. [06:42] oh I have BIND too [06:42] another one with a great record [06:43] I wouldn't know; the systems I've set up (as opposed to adopting) run dnsmasq for DNS caching, and have their DNS records hosted elsewhere. [06:43] I don't think hosting your own DNS records is best practice anymore... [06:44] yeah I have moved away from it more and more [06:44] last few domains I registered I just let the registrar do it. [06:44] included for free and works quite well [06:44] Not that I know much about dnsmasq's security record, but it's only internal-facing, so less of an issue. [06:45] And getting three services from a single easily-configured daemon is a pretty nice win :-) [06:54] I tried fastcgi, it made things worse. I lost 1MB. [06:58] Brave Brave Sir Nonpython, Bravely installed CentOS, Bravely thought Ubuntu kinda sucks for servers! [07:00] btw, I love Ubuntu on the desktop and lappy, but if falls on its face as a server. [07:04] Please take your advocacy elsewhere. [07:05] (Unless you want to rant about something specific, in which case we can either try to fix it, or commiserate.) [07:10] I do Kent... [07:12] * ajmitch wonders if he'll come back when he finds that centos will probably suck just as hard at php [07:28] OK, NTP question time. [07:28] Which strata will ntpd (and/or ntpdate) accept as "good enough" to take time from? [07:30] can i setup a raid with 3 disks, 1x1TB and 2x500GB? [07:30] Some of my netboot farm is out-of-step by an offset matching the timezone, and I'm trying to isolate the fault. [07:47] billybigrigger: The 1TB will only use 500GB of its total space [07:48] Callum__, so im better off running the 2x500's in raid 5 [07:48] billybigrigger: you need at least three drives for RAID 5 [07:49] with just two drives you can use RAID 1 or RAID 0 [07:49] 0 it is then :) [07:49] just remember that with RAID 0 you get no redundancy whatsoever =P [07:50] yup [07:51] RAID0 will HALVE your integrity [07:51] because if either drive fails, you have lost everything [07:51] will have to have the 1tb sit and do nightly backups for the raid0 then [07:51] Well, RAID0 isn't even RAID. [07:52] yeah, technically [07:52] although a RAID 0 is probably faster than a single drive heh [07:52] can't remember [07:53] my server has three hardware RAID 1s working together using LVM2... its quite fast despite the performance penalties from the RAID setups [07:54] 2x 250GB SATA, 2x 80GB SATA and 2x 73GB SCSI, because I have no money [08:11] Salutations, going a little nuts. Getting /dev/null permission denied on boot which causes fetchmail to fail to start. I've updated rc.local to set the permissions correctly after the fact and if I manually start fetchmail after logging in it works. I've found some references to bugs regarding this, but no obvious fix.Running hardy. Suggestions? [08:13] grep -sr null /etc/udev/* returns: [08:13] /etc/udev/rules.d/40-basic-permissions.rules:KERNEL=="null", MODE="0666" [08:14] That mode is correct. [08:15] Yeah, but something is setting it incorrectly during boot. [08:15] When I've seen "/dev/null not writable!" errors from bash in the past, it is usually because the root filesystem is corrupted and the kernel has remounted it read-only. [08:15] * owh checks, but I doubt it. [08:15] Suggest forcefscking [08:16] It's a reiserfs filesystem on a VM. [08:16] And it's mounted rw. [08:17] Urk [08:17] For furture reference: don't use reiserfs without a damn good reason. [08:17] huh? [08:17] I had no choice in the matter. [08:17] * owh likes ext* [08:19] None of this would be an issue if this container wasn't being rebooted irregularly by the host. Another thing I have no control over. 'nuf said about that :) [08:19] Stupid VPS vendors [08:19] * owh nods [08:19] I still say forcefsck [08:20] If I wasn't in a place where I cannot move right this month or the next, I'd have tossed them aside. Right now I don't have that luxury. The force fsck might be fun, if I do that and it doesn't come back I'm fsckd. [08:21] If your filesystem is corrupt, you're already fucked -- you just don't know it yet [08:21] That's very true, but at least the users don't yet know it either. However if I forcefsck it and reboot and it doesn't come back I can't actually do anything about it either. [08:22] Fortunately you have diligently taken backups every day since you got this host. [08:22] Or: you have learnt the value of good backups :-) [08:22] I have, but this is live and losing live data right at this moment is a real PITA. [08:23] Well, you don't have to forcefsck RIGHT NOW, but doing it in the next day or so is definitely a good idea. [08:24] I have to say, I don't actually think the fs is corrupt. I don't see any other evidence of this. The permissions are reset every boot and have been doing that for at least 18 months, but the node has been up for most of that time without issues. The VPS provider has been "fixing" things which seems to necesitate rebooting my containers. [08:24]