[00:15] I have apache all set up happy, but one of my virtual hosts says that, no matter what existing file I put in, it just throws a 404. [00:16] please help1 [00:16] ! [00:20] just one of them? The others are fine? [00:20] Yeah [00:21] anything odd about it compared to the others? [00:21] No. [00:21] hmm, not typo'd the path for it? [00:23] off to check [00:24] nope [00:24] what does apache have to say in its logs? [00:26] [Sun May 23 03:13:31 2010] [error] [client 24.113.225.222] File does not exist: /htdocs [00:28] does the host have unusual letters/characters/etc in its name? or some reason that its idea of the path isn't right? [00:28] No, no === flyback is now known as phlyback [00:29] curious [00:29] Curious" [00:30] "Curious" is not a word you want to hear, like "unspecified infection". [00:31] well it's got to be something that's different about that one [00:32] most likely a typo in the config === phlyback is now known as flyback [00:33] it could be a permission screw up I guess, but les slikely I'd say [00:36] Quoth the perl one liner, there is no (non-expected) differences. [00:38] well temporarily change the path to point at one of the other ones - does it work then? [00:38] ok [00:39] It works perfectly with the other dir. [00:41] so it's the dir not the config - change it back making sure it really does point to that dir [00:42] It works now, I think there was a typo in the dir. [01:05] Setting up my first Ubuntu LAMP Server - is it fairly secure from the default install, or ar there some recommended steps to secure the box, worried about DoS attacked and brute force attacks over SSH and others? [01:05] yosi1234: brute force over ssh happens [01:06] is there anyway to limit that [01:06] Install fail2ban. [01:06] like after 5 attempts it blocks their IP [01:06] yosi1234: so move the ssh port to something that isn't the default, set up firewalls to ensure you block all ports you don't want exposed externally; if you always ssh from the same place then firewall it to just those ports [01:06] yosi1234: It does exactly that [01:06] and yeh use something like that [01:07] thanks guys [01:07] is fail2ban better than ip tables, just getin use to that [01:09] also has anyone used Ubuntu server on ESXi? I like the simple snapshot backup options of esxi, but don't want a performance hit... [01:09] it should work on ESXi, but you always get some hit [01:23] does ESXi support backing up with snapshots, do do u have to pay for that? [01:23] I am having some trouble with likewise-open5 after a do-release-upgrade from 9.10 to 10.04, the services dcerp*, eventlogd, and lsassd do not start. I can start them after I log in with a local account, and then log in with AD accounts. Anyone have some ideas. [01:24] also i guess ubuntu server doesn't have to understand the RAID card, lsi 9260 if its sitting on a virtual enviroment, vmwars just has to understand the storage device [01:25] I have completely removed and purged likewise-open and completely reinstalled with the same results. === unreal_ is now known as unreal [02:28] Does ubuntu server automatically mount usb devices or do I have to manually mount them? [02:34] nevermind, had to do it manually [03:11] * bintut waves [03:12] anyone here uses aws particularly the ec2? [03:13] any idea if there if amazon provides a test instance for people to play with it to be familiarize how it works? === tommy_ is now known as KenjiPops === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [05:42] alright how do install "hwinfo" on my ubuntu server just using another computer that has internet, or the ubuntu server 10.4 live cd? [05:43] my server has a wifi card that needs drivers so i can get to the internet and actually make it a server for when im away from home. [06:48] ldapadd -D cn=admin,cn=config -w password -x -f /usr/share/kyapanel/ldap/ldifs/phpgwaccount.ldif [06:48] ldap_bind: Invalid credentials (49) [06:48] need help [06:50] ldapadd -D cn=admin,cn=config -w password -x -f /usr/ldifs/phpgwaccount.ldif helpme ldap_bind: Invalid credentials (49) [07:01] my network interface doesnt support scanning...what does that mean? [07:01] :-( [07:43] So, I'm half-considering using eBox on something. The problem is, it appears that very few of the modules are in the official repositories even for Lucid. So the question is, how safe is the ebox PPA, for a production server? (It makes we wince to think about, but it may be the best bet for the situation.) [07:47] clear [07:47] haha doh [08:23] anyone know the performance hit running Apache (LAMP) on ESXi vs On a dedicated server? I'm concerned about network latency and hard drive latency [09:15] anyone know the performance hit running Apache (LAMP) on ESXi vs On a dedicated server? I'm concerned about network latency and hard drive latency [09:27] <_ruben> yosi1234: its not that easy .. a VM on a beefy ESXi will perform much better than on a low-end dedi server [09:43] didnt latest vanilla kernel got some imprvements on that network latency side [09:51] New bug: #584484 in chkrootkit (main) "chkrootkit incorrectly identifies bindshell if mailserver runs tls" [Undecided,New] https://launchpad.net/bugs/584484 [09:51] my concern w/ ESXi (like any virt implementation) is resource contention from other VMs. [10:51] New bug: #584497 in landscape "The EC2 endpoint should be HTTPS by default" [High,Confirmed] https://launchpad.net/bugs/584497 [12:42] hello all please someone help me with IDJC [16:01] Hello, I was wondering how to start apps on boot as deamon [16:02] I hope someone can help me a litle [16:03] I want to start my own java app and call of duty 4 server [16:03] freewillie: Look up docs on 'upstart' - you can put scripts in /etc/init that it will call [16:04] penguin42 I was that far, but then my apache server wouldn't start anymore [16:05] * penguin42 hasn't really got to grip with upstart yet, I'm still a bit old school [16:05] penguin42, Coul it have something to do with paths? [16:05] penguin42, Oh ok [16:05] well paths are always good at breaking things :-) Can you pastebin your script somewhere? [16:06] penguin42, ok [16:07] #!/bin/bash [16:07] java Main [16:07] thats all [16:08] I think there needs to be some headers to say when to start it and what has to happen if it crashes etc [16:09] freewillie: http://upstart.ubuntu.com/getting-started.html [16:10] thanks [16:10] penguin42, I think i can solve my problem i think [16:16] hello all please someone help me i have a problem with IDJC [16:16] i need to start IDJC ;( [16:18] ne7work, sorry, I can't help you [16:18] why? [16:19] I have no idea what IDJC is [16:22] What is it? [16:24] freewillie, Internet DJ Console [16:25] ah, i had problems to to run it [16:26] what is the problem excactly then? === dendrobates is now known as dendro-afk [17:35] * penguin42 has ubuntu-server in a KVM guest booting off another KVM guest via iscsi [17:37] lol [17:37] why do you do that to yourself? [17:40] masochism? [17:43] add a win2008 guest than, and then a few guests running on that [17:43] * RoyK^ is off [17:43] so what's the right way to report a bug from a text mode ubuntu-server? will ubuntu-bug do something sane? [17:46] Can I give create a user and give him SSH access to my server so that he can't access anything that is not in her home dir? [17:46] er [17:46] :-) [17:46] Can I create a user and give her SSH access to my server so that she can't access anything that is not in her home dir? [17:46] Fixed :) [17:46] do you really want ssh or just sftp ? [17:46] What is the diff between ssh and sftp? [17:47] sftp can just do file transfer [17:47] (I'm not sure if it's actually the same underlying protocol as scp or not?) [17:47] It'll be better to give her ssh. [17:47] So that she can edit files in her home dir. [17:48] ok, so I think the best you can do there is probably give her a restricted shell [17:49] penguin42, I heard something about chroot. Is that what you are talking about? [17:49] no, I don't think chroot would work for a full ssh login, it can be done for sftp [17:52] penguin42, then what? [17:54] SpaceGhostC2C: I am logging out, I will try the rubby stuff tomorow [17:54] a restricted shell (e.g. rbash) will restrict where they can cd to, but it's not really that protective [17:55] * freewillie is leaving... [17:55] penguin42, so, will it be much easier to just give her (s)ftp access? [17:55] yes, there is a chroot setup (somewhere) for sftp that should be pretty secure [17:56] hello to all. i need some start up help with setting up ubuntu on a hp proliant ml 530 [17:57] penguin42, ok. thanks. i'll investigate it further. [17:57] is anybody here who can advice me a little what is needed. it is enoght just to put the ubuntu server cd in te cdrom [17:58] and connect over ssh to the server ? [17:58] maybe a netwrok setup is better ? [18:42] anyone here using ubuntu server on ESXi? [18:43] i'm trying to figure out how much latency it adds to network and storage [18:43] i have a very busy lamp server i want to virtualize [18:43] you asked this the other day [18:44] I told you the answer [18:45] ikonia: you said that there was a performance hit, but I need to quantify how much.. tried to find something online, but no luck [18:45] trying to figure out how many ms/ns on the network lag [18:46] and any IOPS performance [18:46] for storage [18:46] yosi1234: it's nothing to do with ubuntu, it's how you setup and manage your esx host [18:46] as I told you [18:46] so ask the vmware support people, if you have an esx host, you have access to their support resources [18:46] no i have free esxi [18:47] but you are right [18:47] it maybe more of a question for them [18:47] esx works different than the free version, so you need to quantify which version you want to use with the vmware support groups [18:47] fair enough [18:48] i will try to see if they have a support channel for that stuff.. what do do like about it is the ease of backing up virtual disks, but no at the expense of performance [18:48] I searched all over for a good ubuntu/linux baremetal backup solution but can't find any, but acronis, but it doesn';t support ext4 [18:50] yosi1234: You could run lucid with ext3 I think [18:51] any ext4? support? [18:53] oh, u mean the OS, there is also backup software called Lucid [18:53] LOL [18:53] prefer ext4, on the raid adpter the performance is much better on ext4 [18:53] just got a nagios message - data is running low, only 3,5TiB left [18:54] ext3 is safe [18:54] rock stable [18:54] well-proven [18:54] ext4 is newer [18:54] true... [18:54] good point.. [18:54] the latter is better for large volumes, BIG files etc [18:54] but I'd stick with ext3 for now [18:54] maybe acronis on ext3 is a good solution then [18:55] for storage? [18:55] * RoyK^ uses opensolaris + zfs for storage [18:55] yes [18:55] for a LAMP server [18:55] zfs beats the whole gang [18:55] hi volume, high traffic [18:55] how much do you need? [18:55] ext3 will be fine [18:56] need bare metal backup option [18:56] a terabyte? 10? 100? [18:56] fair enough [18:56] yosi1234: just take regular dd images of the disk [18:56] 2 TB, but 15 concurrent users [18:56] 15,000 [18:56] yosi1234: or make a kickstart profile of the machine and just backup the application data [18:56] that's access, not users [18:56] its a realtime collaboration site [18:57] yosi1234: 2TB will work fine with any FS, except perhaps UFS [18:57] RoyK^: you'd probably get away with it even on ufs, although at the upper end of the limit [18:57] fair enough... one sec, pgone call, shit... [18:57] phone call [18:57] brb [18:57] ikonia: yes, it'll work with ufs as well, but I wouldn't recommend it [18:57] zfs ftw! [18:58] god no [18:58] god? which one? anyone seen him? [18:58] or her? [18:58] it === RoAk is now known as andreserl === SkyHAPPY is now known as Sky[x] [20:48] ïðèâåò âñåì [20:49] o.o [20:49] that worked Tonny_Bennet [20:49] I've upgraded from 8.04.1 to 9.10 so far, now doing 10.04 [20:50] Ó ìåíÿ åñòü ïðîáëåìêà ñ ssh ñåðâåðîì ïîìîæåòå? [20:54] Theravadan: You know that you can do 8.04.* to 10.04 ? [20:55] jpds, well from 8.04 you can but right now it's not possible from 8.04.1+ until a few months from now [20:55] Theravadan: Try: do-release-upgrade -p [20:56] jpds, what does the -p do? [20:56] Upgrades to a proposed release. [20:56] jpds, read that from the docs, how is that different from running w/o -p? [20:57] It will actually upgrade a hardy box to lucid. [20:57] jpds, whoa that would have saved me a lot of time. [20:57] Time is money. o/ [20:58] jpds, got that right! [21:06] New bug: #578064 in php5 (main) "php5 crashed with SIGSEGV in start_thread()" [Undecided,New] https://launchpad.net/bugs/578064 [21:58] * RoyK^ encrypts all his data with rot-13 - TWICE [22:00] RoyK^: well done for double measure :-) [22:01] security is my profession [22:02] is there any way to know how much data has been written to a tape drive? [22:03] not really [22:03] thanks guntbert [22:03] whatever process that writes it needs to keep track on it [22:03] just realized it was more relevant here [22:04] RoyK^, do you know if there is a way to make tar output the size of what it has written? [22:04] I think -v says that [22:04] testing..... [22:05] RoyK^, -v says the file names when writing, and when viewing with -t it says the file sizes [22:05] RoyK^, but when its done I need it to tell me the total size, taking compression into account [22:06] question is, why are you using tar for backup? [22:06] it's 2010, not 1980 [22:07] open backup solutions like bacaula are far better [22:07] RoyK^, I'm using it to write to a tape drive; I looked into using dump, but the files are on an ntfs drive [22:07] I happen to have a tape drive, and I figured I'd clear some old backups and files off a couple harddrives onto a few tapes I have [22:09] and tar is very simple and straight forward [22:15] hello all [22:15] bondiblueos9: it's very simple, yes, but that's it [22:15] i have problem with my creative audio driver [22:15] http://pastebin.com/sFt9iazc [22:15] please someone help me [22:16] Hey guys, do you know of a PPA that can provide a version of innodb plugin for mysql compiled against the lucid version? we're having no end of trouble here [22:16] bondiblueos9: using a proper backup system will make life easier [22:16] chrismsnz: mysql in lucid should support innodb quite well [22:18] RoyK^: well, we wish to use some of the new features like fast index creation on innodb [22:18] stuff that isn't supported until mysql 5.5, or whatever they decide to name the next release [22:19] ne7work: Did you read through the Ubuntu Forums thread about Creative Labs XFI driver compilation on Linux? Whatever, I would say that compiling an audio driver in this channel is off-topic really. [22:19] ne7work: http://ubuntuforums.org/showthread.php?t=870001 [22:20] chrismsnz: I'd say install mysql from source into another directory [22:20] RoyK^: I'm doing that now :( Was hoping to avoid it, oh well :| [22:21] or pay someone to backport it [22:21] seems to me it's an engine rewrite [22:21] that someone very well may be me [22:21] not merely a module [22:22] it's a storage engine plugin [22:22] sherr, and again i have error [22:22] i make all of these thread step by step [22:22] and i have errors? [22:23] isn't mysql 5.5 still in beta? [22:23] RoyK^: yes, thats why we're not running it [22:23] however, mysql 5.5 has merged in the new innodb changes from the innodb project [22:24] but they also release the new work as a plugin for earlier versions [22:28] chrismsnz: what do these changes do to performance? [22:29] it's improved, but there's other good features in there too [22:29] fast index creation is killer - no longer requires a temp table when adding an index to a table [22:29] anything you can't do better with postgresql? [22:30] RoyK^: been barking up that tree as well :P [22:31] mysql has a lot to answer for to us... we've got a lot of coupled code [22:31] i.e. working around its broken optimiser [22:31] so rewriting it to psql will cost a little [22:32] yeah, we are using an abstraction layer, but some work will be required [22:33] considering waiting until drizzle is released, psql 9 and whatever mysql brings out by then and doing a shootout between them [22:33] seeing if it's worth a move [22:33] imho psql beats the shit out of mysql at most work [22:33] ya, replication tho is a pita until 9 tho, right? [22:34] I don't think it's really well integrated until 9 [22:34] some parts exist in 8, but not in the main tree [22:37] seems postgres is in opensolaris still [22:37] nice [22:37] I guess Oracle will kick that out soon [22:39] heh [22:39] oracle are strange [22:40] not strange [22:40] jut money-eating parasites [22:40] they own innobase, which is the main/best storage engine for mysql [22:40] but they still seem to be chugging along [22:40] i notice all the drizzle guys who used to work at sun got out of dodge when oracle bought them [22:40] work for rackspace now [22:41] I just work for an air research institute in norway [22:41] we have tons of data and we need zfs to handle it [22:41] ah true [22:42] Eyjafjallajökull has been filling up our drives with ash for some time [22:42] soon you'll have btrfs ;) [22:42] in one, perhaps two years, yes [22:42] currently btrfs is quite useless compared to zfs [22:44] zfs is awesome, that's for sure [22:44] you can FUSE it if you're really desperate [22:44] but opensolaris isn't bad [22:44] RoyK^: have you used nexenta? [22:45] http://www.nexenta.org/ a very interesting project [22:45] only tried it [22:45] went back to osol quite quickly [22:45] not so good? [22:45] larger userbase on osol, thus better support [22:46] from the community [22:46] ya [22:46] I work for an ecommerce company in NZ, so no massive storage requirements [22:46] but our database is becomming a problem [22:47] what is "massive storage"? [22:47] 10TB? [22:47] guess so [22:48] we use MogileFS to manage stuff like product images and other stuff [22:48] we're extending our zpool to 50TB these days [22:48] heh, I know people who have a multiple of that at home ;-) [22:48] (I don't want to ask them why they need that) [22:49] heh [22:49] this is a nice box http://pastebin.com/hCHtteKt [22:49] this is also a rahter nice box http://pastebin.com/9kDJw9Gw [22:50] nice :D [22:51] the 16-core baby has been chewing ash for a week or so now [22:51] did't really cost a lot - NOK 43k [22:51] doh [22:52] * RoyK^ hands chrismsnz a doh-nut [22:52] :) [22:53] what was that doh about? === Thell is now known as Thell|Away [23:03] I added "postgres hard nofile 300000" to limits.conf but I can't raise the no files via ulimit, anyone know why? [23:07] can anyone reccomend a good brute force SSH password cracker? I want to test how secure my router's SSH is [23:07] lol of course you do [23:07] but seriously, would that even work? [23:07] what do you mean? [23:07] i mean, wouldn't the ssh server decide to stop responding and block after several failed attempts? [23:08] lol, I want to test it! [23:08] that was the point of my request [23:08] and even if it didn't, wouldn't brute forcing take forever, like more than a few seconds for each attempt? [23:08] 'meh, I've got time, and it's internal to the network [23:09] I don't mean to shut you down; I'm curious like that too [23:09] ohhh [23:09] well, as I said, I want to test just how "hard" DD-WRT has their SSH attack blocking. Personally, I don't belive that it's as strong as tehy claim [23:10] but even if there is no ssh brute force cracker, you could just think of how many possibilities you'd have to brute force for a password of your length, average case (half of worst case I think, ie half of all of them) [23:10] and then think about how long each attempt would take [23:10] and then you shoudl know how long it would take on average to brute force your password [23:11] lol, it's 12 car long, capitals, numbers, and specials. [23:12] jeeves_Moss: you use passwords with ssh ? [23:12] JanC, ??? [23:13] please read the ssh manual about ssh keys and disable all password logins ;) [23:13] I use passwords with ssh because i'm too lazy to set up keys and everything I use isn't really a security concern to me; then again I could set up keys and claim I did it because I'm too lazy to remember passwords [23:13] lol [23:13] yea, well, I ~could~ do that, but.... [23:13] although, at least you can use passwords from anywhere [23:13] this is VERRY true! [23:14] I mean, I guess you could use a key from anywhere too [23:14] anyways, scratch that. Next project for this afternoon. Getting TLS working. [23:14] if you happen to have the keyfile on you [23:15] I hate e-mail servers. it's offical! [23:16] seriously, if you don't care about login into your router from some random other computer, why do you care about password strength ;) [23:17] and password login throtling etc. [23:18] how do you know that random PC has no trojan or whatever? [23:20] anyway, there are lots of brute force cracking programs that you could use with any tool you want (they generate a password and supply it to whatever program you want) [23:31] do anyone know the location of dialog scripts from Ubuntu-Server CD INSTALL who are responsible by manage system install? [23:41] Jeeves_: install fail2ban === RoyK is now known as Guest45690 === RoyK^ is now known as RoyK