[00:05] and thats a big nope [00:06] webPragmatist: This doesn't answer your question, but I prefer to use rsync over ssh. That way I only have to worry about controlling a single point of access on the server (sshd). [00:07] i am using rsync [00:07] it's called rsync with xinetd so it will run as root and not bitch… but the problem is, well… it's bitching [00:07] because it's not really running as root, it's running as like "nobody: [00:08] webPragmatist: clarification: I prefer to do it over ssh rather than use rsyncd. [00:08] oh [00:08] lol [00:08] i dunno about that jazz [00:09] lsyncd doesn't use scp, etc. [00:09] http://www.server-world.info/en/CentOS_5/lsync/1.html [00:09] or rather it does but i don't care to try it [00:09] rsyncd should work [00:10] webPragmatist: rsync works over ssh without using "scp, etc." [00:11] and you just use keys i suppose [00:11] are you going to be around tomorrow? [00:12] in general is the only difference the authentication? or what [00:13] i put my clone in here if you have anything to say :) [00:35] hi what is the latest upgraded kernel version of ubuntu-server..? [00:35] like for ubuntu-8.04 LTS [00:36] oh man, I've got a dead battery in one of my UPSs [00:37] its so bad that its bulging in places [00:38] since that 1500VA UPS is ancient, I am going to assemble a RBC7 battery for a newer APC SmartUPS 1500VA unit I have, but its going to set me back at least NZ$267 >_> [00:38] and considering we're a non-profit, money isn't easy to set aside [01:00] anyone here deal with alot of NFS shares? [01:01] hi guys, i need a little help with my domainkey setup in the zonefile [01:01] i have setted it up: http://pastebin.com/aGSs4pby [01:01] but dig [01:02] sorry, dig _domainkey.mara-tour.ro TXT returns no answer [01:02] do you have any idea why? [01:04] ? [01:04] looks ok to me here [01:04] domainkey.mara-tour.ro. 0 IN A 67.215.65.132 [01:05] billybigrigger, that is a total foobar test :) [01:05] he said txt, not a [01:05] and it starts with a _ [01:05] dig -t txt _domainkey.mara-tour.ro [01:05] thought he was looking for a mail record [01:05] nope [01:05] not familiar with txt sorry [01:05] check: dig -t txt _domainkey.patrickdk.com [01:06] he is looking to get dkim working [01:06] yes [01:06] patdk-wk: you are right, that is what i`m trying to do [01:06] not familiar with dkim...looks like you've volunteered pat :P [01:07] heh, you forgot to put a . on the end of your domains :) [01:07] so it's not _domainkey.mara-tour.ro [01:07] but _domainkey.mara-tour.ro.mara-tour.ro. [01:08] patdk-wk: i will try it now, but tryied before and still nothing [01:08] well, either it must just be, _domainkey [01:08] or, _domainkey.mara-tour.ro. [01:09] atleast based on the other examples i nthe file [01:09] though _domainkey.mara-tour.ro. would be the safe garrentied way [01:09] works [01:09] works? [01:09] ;; ANSWER SECTION: [01:09] _domainkey.mara-tour.ro. 3600 IN TXT "'t=y" [01:09] extra ' though [01:09] it doesn`t to me [01:10] you foobar'ed your test also? :) [01:10] dig -t txt _domainkey.mara-tour.ro [01:10] well, that won't work [01:11] QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 [01:11] your local dns server is caching the bad result [01:11] for up to an hour [01:11] :D [01:11] so you have to contact your server directly [01:11] dig -t txt _domainkey.mara-tour.ro @92.114.86.188 [01:11] hehe [01:11] :D [01:12] patdk-wk: thank you very much! [01:14] nohup dd if=/dev/urandom of=/dev/sdg bs=8192 > /dev/null 2>&1 & [01:14] nothing better than running that on 3 drives [01:14] just wish urandom was faster than 2MB/s [01:18] patdk-wk: Authentication-Results: mx.google.com; spf=pass (google.com: domain of testmail@mara-tour.ro designates 92.114.86.188 as permitted sender) smtp.mail=testmail@mara-tour.ro; dkim=pass header.i=@mara-tour.ro [01:18] google says that dkim pass [01:18] yahoo dont [01:19] cache? [01:19] why all my mails go into spam folder if the ip is not reported as spam? === pgraner-afk is now known as pgraner [01:23] guys, whats the easiest way to send e-mail from console? want to make my server notify me when somthing happen trough bash script [01:26] mail command? [01:26] Hey is there a way to configure ubuntu server to connect to a wireless accesspoint to install? [01:27] telnet? [01:27] php mail? [01:28] you can run a php command via sh [01:28] or telnet i thin [01:28] think* [01:28] but php is sure [01:32] Hey is there a way to configure ubuntu server to connect to a wireless accesspoint to install? [01:34] Or where are the packages that the server needs to install? [02:11] Has anyone worked out how to move a windows image into ubuntu's eucalyptus cloud yet? === jjohansen is now known as jjohansen-afk [02:50] hi guys [02:51] i need some advice about setting up the server [02:51] firstly [02:51] about the networking [02:52] how do i go about setting up the network on the server? [02:54] hello?is anybody available there? [02:55] your guidance is truly appreciated === dendro-afk is now known as dendrobates [03:06] Does anyone know why ifconfig would not want to read from /etc/network/interfaces [03:17] I swear I have this one server that changing the interfaces file does NOTHING I can set the address manually but changing the interfaces file has no effect. Everytime it reconnects it goes back to some other settings! [03:19] It can't be the syntax because this syntax works in every other ubuntu machine I have [03:19] Need help: I am trying to install Ubuntu server 9.10 in virtual machine manager. But Virtual machine manager returns : Unable to complete install: 'internal error unable to start guest: char device redirected to /dev/pts/0 [03:19] qemu: could not open disk image /var/lib/libvirt/images/UbuntuServer.img: No such file or directory [03:23] How to install ubuntu server 9.10 in virtual machine manager? === dendrobates is now known as dendro-afk === dendro-afk is now known as dendrobates [03:52] p1l0t, ifconfig doesn't use those settings, it's strictly a manual override tool [03:53] oh [03:53] you should run `sudo service networking restart` to apply changes made there [03:53] wilco [03:59] how do i get about setting up the network for the server?? [04:10] cs1, it is explained clearly in the Ubuntu Server Guide, linked in the topic [04:11] ok. [04:11] sorry [04:11] maybe i phrased my question wrong. [04:11] if you are having a more specific problem, please explain [04:11] i want to know is it REALLY necessary to setup the TCP/IP and stuff [04:11] because we are only running the server within the company enviroment [04:11] you can't communicate with the internet if you don't have TCP/IP [04:12] icic [04:12] sorry if i ask stupid questions as im new to this [04:12] you could potentially use a different protocol, but these days, TCP/IP is the only one in widespread use [04:12] icic. [04:12] novell IPX/SPX is long gone, and IPv6 hasn't taken off yet [04:12] so its better to setup TCP/IP?? [04:13] how about DHCP?? [04:13] is it neccesary?? [04:13] DHCP operates over IP [04:13] DHCP is entirely optional [04:13] ok [04:13] regarding remote administration [04:14] say i dont want to set it up now [04:14] will i have trouble setting it up later in the future?? [04:14] it being remote administration, that's easy [04:14] simply install the openSSH server [04:14] it can be done at any point in time [04:14] icic [04:15] so it wont cause the server to crash later on?? [04:15] of course not [04:15] it wouldn't be very useful if it did [04:15] ok. [04:15] about DNS [04:16] DNS is also optional [04:16] not necessary to setup right?? [04:16] ok [04:16] provided you don't mind using IPs to refer to your computers [04:16] i cant use host name to refer to the pc in the company?? [04:16] not without some sort of name resolution [04:16] sorry [04:16] you can with dns [04:16] computer name [04:16] DNS is one way, there are many [04:17] you can set up the hosts files, or use netbios, though that one's a bit trickier with linux [04:17] DNS scales the best [04:17] i see [04:18] so in a way its better to setup DNS to avoid any unwanted problems later on? [04:18] as opposed to using hosts files, yes [04:18] since each computer's hosts file must be configured in order to work [04:18] while a DNS server can provide names to all computers on the network [04:18] icic [04:19] so without DNS,i will have to use the ip address to communicate with them?? [04:19] yes [04:19] ok. [04:19] network authentication [04:19] which one is more flexible [04:20] OpenLDAP [04:20] Samba and LDAP [04:20] Kerberos [04:20] Kerberos and LDAP [04:20] im not sure what are the difference among this four [04:20] Depends on what you want to do [04:20] they are all more or less equally flexible [04:20] icic [04:20] setting up a working system with any of the above is quite a complex process [04:21] because we want to setup ERP on the server [04:21] so we want to setup the server to be stable [04:21] be aware that if you are trying to integrate with a microsoft active directory network, not all features are implemented in samba and you will have limited functionality [04:21] why isn't there a config in /proc/? [04:22] so its better to use Kerberos?? [04:22] no, samba is the only real way to integrate with active directory [04:22] aahh [04:22] ok [04:23] you can get basic authentication if you make some undocumented tweaks to your windows servers [04:23] but other than that, there isn't much [04:23] If you have any Windows computers on your network you will want samba more then likely [04:23] yes. [04:24] yes, samba provides the best way to communicate with windows [04:24] as limited as it is [04:24] limited as in?? [04:24] samba's authentication is on the same level as windows NT 4 [04:25] getting it to work with active directory is an exercise in frustration, to say the least [04:25] and you won't get anything more than simple authentication [04:25] ok. [04:25] none of the extra features like group policy are available [04:25] sounds extremely hard to setup then [04:25] it's definitely an advanced-level task [04:26] i see. [04:26] I wouldn't say extreme but it does take a little reading [04:26] ok. [04:26] for the remote administration, its better to use OpenSSH or eBox?? [04:26] i read in forums, ebox seems to be the more favorable option [04:27] if you like hold-your-hand interfaces, then yes [04:27] but be prepared for little bugs and things to pop up [04:27] I use SSH but I have not tried eBox [04:27] and definitely make sure you lock down your internet access to it [04:27] I use SSH exclusively [04:27] what is eBox? [04:27] !ebox [04:27] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [04:28] oh, ewww. lol [04:28] in other words SSH is more stable than ebox?? [04:28] More secure for sure [04:28] eBox is likely more user friendly... I wouldn't even classify eBox and SSH together [04:29] because of the way ebox and similar interfaces work, if you try to do things manually as well as use ebox, you will be in a situation where the 'automagic' code is fighting with you over your manual settings [04:29] confusing things can happen [04:29] so unless you plan to use ebox exclusively, I suggest not using it [04:29] icic. [04:30] yeah, I would likely not like ebox because it wont be flexible enough [04:30] icic. [04:30] we want flexibility [04:30] thats why we are looking for options [04:30] automagic code has fighting me my whole life - hence why I switched to linux... of course now even linux is starting with auto-magic but at least my servers are still fairly pure [04:30] before we start setting up the server. [04:31] ebox fills the niche of cookie-cutter setups [04:31] custom setups are better served manually [04:31] ok. [04:31] cs1: ah... doing some research for work or something? definitely play with this stuff in VMs to get a feel for things [04:32] yes. [04:32] im doing research for work [04:32] yes, definitely set up a test system and play with it [04:32] make sure it will work for you before you commit to it [04:32] its better to run things in VM before doing it on the server right?? [04:32] Or just stick it on some old computer and learn with it [04:33] I started a few years ago just because the Windows crashed on this old computer we had. No I run the company on that server. lol [04:33] LOL [04:33] about setting up the security for the server [04:33] im not entirely clear about this [04:34] Ubuntu is pretty good with being configured by default for security. Just read carefully about the changes you make [04:34] icic. [04:34] so i can setup up the server without have to fiddle with the security options>? [04:36] there aren't any "security options" per se [04:36] icic. [04:36] about the monitoring part [04:36] Well it depends what you do. Security options is kind of a vague statement [04:36] security is not something that you just "turn on", it is a philosophy you follow throughout your system design [04:36] hrmm [04:36] ok [04:36] ubuntu is secure by default, so you only need to worry about the things that you add or configure [04:37] ok [04:37] set up a proper firewall preventing internet access to things that should not have it, etc [04:37] what is the server going to be used for? [04:37] to host ERP system [04:37] Enterprise Resourcing system [04:38] I wish I knew what that was [04:38] ermmm [04:38] http://en.wikipedia.org/wiki/Enterprise_resource_planning [04:39] here is the lin [04:39] *link [04:39] hope it helps [04:39] how about monitoring part?? [04:39] from the documentation [04:39] i can see there are 2 ways to go [04:39] 1 is using Nagios [04:39] another is Munin [04:40] Nagios is a good platform [04:40] I have not used Munin [04:40] but if you're only monitoring one system, either is overkill [04:41] I am actually working on my own system, but I have much more to learn about MySql [04:41] they're designed to be full network reporting infrastructures [04:41] ok [04:41] File servers [04:41] for windows clients, samba is king [04:42] for linux clients, there are lots of options [04:42] ok. [04:42] nfs is probably the best option for linux clients [04:42] thats for the DNS right?? [04:42] * giovani cringes [04:42] ic [04:42] NFS has specific weaknesses [04:42] cs1: Munin is for instrumentation (graphing mostly). Nagios is for alerting. [04:42] such as?? [04:42] it is wholly insecure without a tightly knit directory service [04:43] cs1: Munin can feed alerts to Nagios [04:43] if high throughput and performance is not critical, sftp is a great option [04:43] secure authentication and easy to use linux-to-linux [04:44] i see [04:44] there are many more options though, especially if you're looking into distributed file systems [04:44] i have no idea about file server [04:44] nfsv4 is not insecure [04:44] ok [04:45] most of the weaknesses in nfs were eliminated w/ v4 [04:45] what other options do i have?? [04:45] but its still more complex than samba [04:45] SpamapS, you still need a directory service to set up per-user access [04:46] NFS works great in specific situations [04:46] i see [04:46] but there are plenty where it is a poor choice too [04:46] qman__: yeah, I really wish people would just standardize on a single LDAP schema and one kerberos implementation so we can stop saying "it depends" [04:46] New bug: #605719 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.31-1ubuntu2 failed to install/upgrade: subprocess pre-removal script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/605719 [04:46] Windows can interact with samba directly [04:46] anything else you choose will require you to install software on windows clients [04:47] all the computer in the company uses linux [04:47] but we wanna prepare ourselves just in case we have 1 or 2 windows platform [04:47] then, your options go way up [04:47] LOL [04:47] this is head cracking [04:48] tons of options with neat features, like AFS [04:48] what does AFS stands for? [04:48] there are about as many options are there are keys on your keyboard [04:48] Andrew File System [04:48] geez [04:48] Areallyhardtogetrunning File System [04:48] haha [04:48] at least, it was 6 years ago [04:49] I suppose if you expect solutions that are out of the box to work well [04:49] My theory is it was a ploy by CMU to encourage people to get advanced degrees trying to understand it. [04:49] you will be disappointed [04:49] well, AFS wasn't written by CMU [04:49] http://en.wikipedia.org/wiki/Category:Network_file_systems [04:49] just to give you an idea [04:49] @.@ [04:49] thats alot [04:50] AFS was an IBM project originally [04:50] the chat application [04:50] then became CMU [04:50] can i add this feature in later on? [04:51] or its better to perform it while i setup my server [04:51] I don't know what you mean by "the chat application" [04:51] http://www.itp.uzh.ch/~dpotter/howto/kerberos <-- NFSv4 + LDAP + Kerberos = pages and pages of fun repetitive steps that could be packaged just like MS packages ActiveDirectory [04:51] cs1 you can setup any thing at any time [04:51] you can install anything at any time, but be aware that sometimes changing things breaks them, so any changes you make later you will want to perform on a test system first [04:51] aaahhh [04:51] ok [04:52] because im looking at the documentation for ubuntu server [04:52] there is a part called chat applications [04:52] SpamapS, that's my biggest feature request for ubuntu server, a tasksel-style ready to go directory setup [04:53] qman__: I believe it was discussed at UDS Maverick [04:54] guys...what is version control system?? [04:54] cs1: wow [04:54] SpamapS : yes? [04:55] it is a system to keep track of versions and changes to files [04:55] mostly used for source code or important documents [04:55] i see [04:55] cs1: version control is just so vital, I'm surprised that you would ask. I'm sorry, I don't mean to imply anything by that. [04:56] yes, it's a critical part of the development process of any software [04:56] qman__: Should be used for config info too [04:56] i see i see. [04:56] FreeBSD figured that out a long time ago.. we're just not figuring it out w/ etckeeper. [04:56] so its a MUST to have?? [04:56] only if you have something you need to keep track of [04:56] s/development of any software/infrastructure of any company/ [04:57] ok. [04:57] such as a software project, some important documents, or anything that changes that you need to keep track of [04:57] i see i see. [04:57] like, say, /etc/apache2/* ;) [04:57] SpamapS : i ask about it because i have no idea what is it about. =) [04:58] version control is especially important if you have multiple people working on something [04:58] aaahhh [04:58] qman__: Its pretty vital to keep track of changes to system configurations IMO. [04:58] How do I change my server locale? [04:58] about windows networking [04:58] if someone deletes something important from a file, you can get it back [04:58] SpamapS: the other really annoying thing about nfsv3/krb/ldap is I don't have a turn-key way to get SSO [04:59] seems like windows networking is the hardest of all right?? [04:59] integration with windows is handled mostly with samba [04:59] qman__: what if you hae one person.. but that person quits. Its going to be vital to your organization to be able to understand why that person did things.. version control can definitely help untangle messes and timebombs. [04:59] ok [04:59] cs1: actually setting up samba to talk to windows clients is pretty simple [04:59] so just install Samba an configure it?? [04:59] file sharing with samba is easy [04:59] authentication is not [05:00] ok [05:00] authentication as in accessing each other file? [05:00] that is, active directory authentication [05:00] qman__: agreed. it can be.. maddening. ;) [05:00] user-based file permissions is also fairly simple [05:00] i see [05:00] perghhh...information overload on my head now [05:01] cs1: just figure out the next thing you need to do.. leave the rest for after thats done. [05:01] SpamapS, I can definitely see the value there, I don't really use it myself because I'm pretty much a one-man IT department, even with the jobs I do for other people [05:02] how about backups?? [05:02] but bringing others into the equation, that would be critical [05:02] backups have even more options than file sharing [05:02] Bacula is a software to handle backup? [05:02] qman__: one man IT depts. are actually *more* important to wrap in version control. :) [05:03] cs1: I am a huge fan of Bacula [05:03] easy to use?? [05:04] cs1: depends on your setup.. if you just backup "everything everywhere" .. then its easy because the config file is very simple. [05:04] I'd suggest rsnapshot, too. I've never used bacula, tho [05:04] cs1: if you start trying to get tricky w/ different file sets and agents and policies.. its still not all that "hard" .. but its not point and click. ;) [05:05] about the networking part [05:05] we have router and switch on our server [05:05] most of my backups consist of tar commands in a cron script [05:05] rsnapshot is good for very simple setups. Its kind of like Apple's Time Machine without the pretty graphics. ;) [05:05] do we still need to configure TCP/IP?? [05:05] SpamapS: and it works. [05:05] cs1, you cannot access network resources if you don't configure TCP/IP [05:06] cs1: I think you may need to think about getting some training. [05:06] SpamapS: please don't compare it to TimeMachine... I hate TM with a passion [05:06] yeah [05:06] cs1: we can answer questions, but the reason you're feeling overwhelmed is you need a stronger foundation. [05:06] i seriously need training now [05:07] ubuntu is absolutely a very good "first linux server" tho... [05:07]