[00:14] ok...i finally found the answer to my keyboard layout problem... [00:14] simply run sudo dpkg-reconfigure console-setup and make the appropriate selections [00:15] thanks for the help :) [00:15] anyone know of any cli tools that can show you active ports things are bound to as well as the number of packets being received/sent on those ports? [00:15] similar to top peraps? [00:46] New bug: #612380 in php5 (main) "mysqli_ssl_set should not expect MYSQLI_STATUS_INITIALIZED" [Undecided,New] https://launchpad.net/bugs/612380 [02:07] hi guys. I want to add a script in /etc/init.d/ to startup, but only after networking is up. so how do I update-rc.d it? [02:29] anyone? I'm starting a deamon using "start-stop-daemon --start --quiet --pidfile $SCRIPT_PID --startas $DAEMON -- $DAEMON_OPTS", but it doesnt record the pid in the specified file, so the "stop" option doesnt work. Any suggestions, please? [03:22] EvilPhoenix: netstat -pln --inet [03:23] EvilPhoenix: the only way, that i know of, to get the packet count on ports is by doing some iptables packet counting per port [03:23] EvilPhoenix: or, you could use something like ntop, but that's more of a web-gui type thing [03:31] thanks [03:34] did it work the way you wanted? [03:35] rdw200169: havent checked, the server's offline for system updates tonight [03:35] ;) [03:35] i can tell you tomorrow if it worked :) === rmk_ is now known as rmk [04:56] zul: Hey Chuck... You happen to be around now? I want to thoroughly irritate you. :) [05:08] <_Snark> Q - can i softraid across multiple (sata) controllers, or do all raid member disks need to be on the same controller? [06:00] How do I run a dummy xserver? [06:26] New bug: #612428 in dhcp3 (main) "package dhcp3-server 3.1.2-1ubuntu7.1 failed to install/upgrade: ErrorMessage: pacote dhcp3-server já está instalado e configurado" [Undecided,New] https://launchpad.net/bugs/612428 [07:26] hi all, new to UB-server... if I want to change the hostname of a system, can I just edit the hosts and the hostname file in /etc, or it it like windows and i have to change 10000 files? [07:26] new to linux [07:42] Yosi123: Those files will do indeed. But there are some programs which base stuff in their configfile on the hostname [07:42] so the best thing to do is: [07:42] sudo grep -r /etc [07:43] that will show all the files that contain your old hostname [07:43] awesome [07:43] thanks [07:43] see the problem i'm running into is when i setup the server, i just maid it the domain of my first domain but now i'm holding tons of virtual apache setups [07:44] note sure how dangerous it is to change the domain name of the machine [07:44] it itsn't [07:45] see now i would liek to gibve it a more generic name... [07:45] but does the system domain have to be a real world domain? does it have to match something? [07:46] No [07:47] thats what i thought... [07:47] i did the grep u mentioned [07:47] and it only came back in the hosts file and the network files [07:47] so it looks pretty clean [07:48] what si the point of giving the machine a domain to begin with? [08:01] does anyone know, does ubuntu-server support phpmyAdmin? [08:02] Yosi123: yes [08:04] <\sh> apt-get install phpmyadmin [08:04] joschi> is it worth to install it... i need to restore a .sql file.. someone told me its easy with that tool... is there an easier way without it? [08:04] Yosi123: you could just use `mysql` [08:04] <\sh> Yosi123: restoring an sql file is more easy with the client [08:04] sh - which client? the gui? [08:05] <\sh> mysql -u root -p database_name < filename.sql [08:05] <\sh> Yosi123: mysql client [08:05] yeah, they told me its very standard... so maybe i'll just use that command instead of in stall phpmyadmin just to restore the one file [08:05] <\sh> or the much better way: mysql -u root -p \n use \n set FOREIGN_KEY_CHECKS=0; \n source ; \n set FOREIGN_KEY_CHECKS=0; [08:05] <\sh> done [08:06] awesome, thanks... [08:06] <\sh> aeh the last set FOREIGN_KEY_CHECKS needs to be =1 ;) [08:06] k [08:11] sh - is there any way to execute the sql from the MySQL Query Tool? I copy and pasted the file into it, but when I hit the execute button it says "No SQL command" [08:11] sql file* [08:17] <\sh> Yosi123: I don't know the mysql query tool.... [08:17] \sh: why do you need to disable foreign key checks? Is the dump you're restoring out-of-order? [08:17] Yosi123: Why not just use 'mysql [08:17] ' [08:18] .\ dumpfile [08:18] <\sh> twb: we had some problems before, yes :( [08:18] * twb blames mysql [08:19] <\sh> twb: no I blame broken software :) magento is one of them (especially [08:19] <\sh> when you are using a mysqldump backup of magento dbs... :() [08:19] \sh: what, the dump was created by something other than the database? [08:19] <\sh> twb: no but magento is creating new tables during runtime, and adding some foreign keys to other tables...:( [08:20] Surely if myqsl creates a dump, it SHOULD be coherent, regardless of what app(s) use the database [08:20] Oh, I see [08:20] <\sh> twb: and sometimes, if not most of the time, the rollback of an mysqldump gives you problems... [08:20] <\sh> regarding magento [08:39] Is the lucid partner repo mirrored anywhere? [08:39] <\sh> twb: I'm mirroring it locally ;) [08:40] I'm getting 50kiB/s trying to mirror it directly from archive.canonical.com [08:40] \sh: I mean are public mirrors allowed, and if so, where is a list of them [08:40] twb: It's not designed to be mirrored. [08:40] <\sh> twb: dunno...ask one of the canonical sysadmins [08:40] jpds: that's what I figured; I wanted confirmation [08:41] <\sh> since the move of sun-java* packages to partner it should be mirrored somewhere publically [08:41] Indeed; I'm pissed because I found that epiphany Just Doesn't Work with icedtea, so I need to do this dance to get $customer's token java applet to work again :-/ === _ng is now known as _NG [09:38] Anyone have any luck with a Canon LBP-1120 under 10.04? [10:08] hi all, i have ubuntu server 10.04, have external hd connected that ftab mounts on boot, but if it'snot there... i't won't even start!! anyone?? [10:08] UUID=......... /home/external/ vfat ro 0 0 [10:08] no hd, no boot :( [10:09] PirosB3: hdd defect? usb port defect? [10:09] not at all, [10:09] PirosB3: does it work with another OS? [10:09] as soon as i attach drive it boots correctly [10:10] yes, everything works fine [10:10] i'm afraid it's something to do with fstab [10:10] PirosB3: check the output of `dmesg`. there should be some entries when you plug the hdd in [10:11] [ 6.046500] sd 0:0:0:0: Attached scsi generic sg2 type 0 [10:11] [ 6.047292] sd 0:0:0:0: [sdb] 488397168 512-byte logical blocks: (250 GB/232 GiB) [10:11] [ 6.048528] sd 0:0:0:0: [sdb] Write Protect is off [10:11] [ 6.048532] sd 0:0:0:0: [sdb] Mode Sense: 21 00 00 00 [10:11] [ 6.048535] sd 0:0:0:0: [sdb] Assuming drive cache: write through [10:11] [ 6.053044] sd 0:0:0:0: [sdb] Assuming drive cache: write through [10:11] [ 6.053073] sdb: sdb1 [10:11] [ 6.056795] sd 0:0:0:0: [sdb] Assuming drive cache: write through [10:11] [ 6.056825] sd 0:0:0:0: [sdb] Attached SCSI disk [10:11] [ 6.476964] usb-storage: device scan complete [10:11] ops, sorry [10:16] PirosB3: `sudo blkid /dev/sdb1` will show you the correct UUID which you can use in your fstab [10:17] joschi: i have the correct uuid [10:17] PirosB3: what does `mount /home/external` tell you then? [10:18] PirosB3: because the partition has been correctly detected by your system (see `dmesg`) [10:18] mount: secondo mtab, /dev/sdb1 è già montato su /home/external [10:18] mount non riuscito [10:18] lol [10:18] for mtab, it is already mounted [10:18] mount failed [10:18] PirosB3: please use LANG=C ;) [10:18] ah, ok [10:19] translate ;) [10:19] PirosB3: I hope you have run the mount command with sudo and not as your normal user. maybe you have a stale /etc/mtab file [10:19] lol [10:20] ....maybe :) [10:20] ok [10:20] it says mounted [10:20] but it's fstab for me [10:21] PirosB3: no. fstab is the file you edit, mtab is the file your system generates for it to remember which devices are mounted [10:21] yes, i'm saying my fstab line maybe needs some sort of option [10:21] UUID=......... /home/external/ vfat ro 0 0 [10:22] looks good to me. you *could* add "defaults" to the options ("ro") but the rest is ok [10:25] what does defaults do? [10:25] add rw, suid, dev, exec, auto, nouser, and async [10:26] and rw is overridden by your ro [10:26] nono, i need only write [10:26] -> `man mount` by the way ;) [10:26] :D [10:26] ok 1 sec [10:29] nope :( [10:29] New bug: #612463 in clamav (main) "Cannot update klamav virus signature" [Undecided,Invalid] https://launchpad.net/bugs/612463 [10:29] adding defaults dosen't do it :( sob [10:31] not even with auto!!! [10:31] going nuts [10:31] how can this be so stupid [11:03] Hi guys I am looking for a system which I could use for centrally administering desktops systems at work. something which would allow me centrally deploy updates and install packages when needed. is there anything which is free (as in beer and speech) which can do this. [11:04] someone told me about puppet has anyone used it before? [11:05] bigbrovar: Maybe landscape? [11:05] Otherwise, cfengine or puppet [11:06] (i prefer cfengine) [11:06] Jeeves_: its not free beer. [11:06] bigbrovar: ? [11:06] New bug: #612480 in antlr3 (main) "Sync antlr3 3.2-4 (main) from Debian unstable (main)" [Wishlist,Confirmed] https://launchpad.net/bugs/612480 [11:06] is it possible to configure cfengine or puppet to use as a central update system or mass installation of packages across systems [11:07] Jeeves_: its not free as in price [11:07] bigbrovar: cfengine is. [11:07] puppet is. Only landscape isn't [11:08] Jeeves_: yeah I know I was asking if if cfengine could be used for updating/updating many systems at once [11:08] bigbrovar: cfengine has a client-server setup [11:08] So the client periodically downloads scripts from the server and executes them [11:09] Jeeves_: oh ok [11:09] hmm not exactly what I wanted but I would give it a try [11:10] Jeeves_: might also checkout spicewalk I heard there was plans to make a debian port would see how far that got. [11:10] Jeeves_: thanks :) [11:12] yw === _NG is now known as _ng [11:16] is it possible to install ubuntu using a virtual drive? [11:18] Zee5han: define "virtual drive" [11:18] to install ubuntu you need to boot with the CD [11:19] now lets say i dont have a CD and I mount the ISO with PowerISO [11:19] Zee5han: not necessarily [11:19] you could install ubuntu over network [11:19] will I still be able to boot and install? [11:20] or you just use something like wubi [11:20] What's wrong with a USB install...? [11:20] Zee5han: if you have a usb stick and the computer supports booting from usb you could also install ubuntu using unetbootin [11:21] I have tried wubi but when it is downloading the ISO it says itll take around 150hrs [11:21] Zee5han: so now you have several alternatives: install over network, install over windows, install over usb [11:22] can I also try it out... like Live CD... LIve USB [11:23] yes [11:23] Thanks [11:23] Zee5han: unetbootin will just copy the contents of the live cd on a usb drive [11:23] Zee5han, The liveUSB is basically the same as the LiveCD - except that you can actually keep changes made to the USB...handy that. [11:24] So I cant make changes on a LiveCD [11:24] lets day my CD is RW [11:24] Zee5han, Um...CD's being read-only... [11:25] Zee5han, Doesn't matter if your drive is R/W or the CD itself is R/W, doesn't happen like that. However, with the USB, you can make changes...and keep them. Handy for installing clamav and using it for workstations... [11:25] Zee5han: you can of course remaster a live cd. but on the usb stick you could do changes on the fly [11:26] Thanks [11:29] Anyone tried setting up a Canon LBP-1120 on 10.04 server? [11:58] Hi all. I need some help here. I've set up a two node cluster with pacemaker/corosync. Here I'm running DRBD, Samba, Winbind and LDAP (for sid-uid mapping). This works great. Both nodes are member in the AD domain (2008r2) with a virtual IP. The problem is: If I add a user in AD getent passwd wont get the new user (sometimes it does). If I then kill winbindd and change active node it works and the new user is listed. Any ideas [11:58] on what might be going on? [12:06] somebody know how i can capture data with tcpdum in intervales of 5 minutes each 5 min? [12:08] Roxyhart0, Couldn't you create a script to do so and use cron to handle the job? [12:09] maybe, but i am not sure if i want to add the data to the same file ...how to do that [12:10] Roxyhart0, Probably append the date or time or something to the file - so that you're creating a file for that particular time? Just a thought... [12:11] yes, i cant use >> [12:11] as i tried and the file is not in the format that i want [12:12] Roxyhart0, Not sure I understand what you mean by "the file is not in the format that I want" => in what, content? In name? [12:13] format as i will read with wireshark...i tried to append with >> but after that wireshark doesn accept the format [12:14] Append with >> ? Hmm...not sure I grok this - however, something you might find useful: http://www.cyberciti.biz/tips/shell-scripting-creating-reportlog-file-names-with-date-in-filename.html === _ng is now known as _NG [12:19] If I simplify my issue: If I add/delete users in Active Directory, getent passwd gets the updates after a few seconds. But for some reason this stops working after some time, so I have to restart windbindd to make it work again. [13:03] big woe! [13:26] New bug: #612513 in mysql-dfsg-5.1 (main) "package libmysqlclient16 5.1.41-3ubuntu12.6 failed to install/upgrade: erreur lors de l'écriture de « »: Succès" [Undecided,New] https://launchpad.net/bugs/612513 [13:34] uvirtbot: !fr [13:34] TuxSax: Error: "!fr" is not a valid command. [13:34] !fr > uvirtbot [13:34] uvirtbot, please see my private message [13:34] ubottu: Error: "please" is not a valid command. [13:34] Error: I am only a bot, please don't think I'm intelligent :) [13:35] LOL [13:35] having fun? [13:35] yeah [13:35] it has been 10 years since I've left the IRC stuff, I'm back now to find a lot of things evolved in the bots... [13:36] heh [13:36] artiifical intelligence has improved somewhat [13:36] still have a lot to find out... [13:36] on how to use those bots... [13:36] *artificial [13:37] TuxSax: you can converse with the bot in private [13:38] !botabuse [13:38] Please investigate with me only with "/msg ubottu Bot" or in #ubuntu-bots. Search for factoids with "/msg ubottu !search factoid". [13:38] !usage [13:38] Hi! I'm #ubuntu-server's favorite infobot, you can search my brain yourself at http://ubottu.com/factoids.cgi - Usage info: http://wiki.ubuntu.com/IRC/Bots [13:56] New bug: #612525 in openldap (main) "apparmor profile is not good for first backend creation" [Undecided,New] https://launchpad.net/bugs/612525 [13:57] Hi there. I would like to edit a line in /etc/ufw/before6.rules. DROP router-advertisement. Should I edit in that file or should I put my own lines somewhere else? [13:58] Put in my own lines.. I mean.. put in some other file? [14:10] How do I restore the original /etc/init/mysql.conf from mysql-server-5.1 that I accidently removed? [14:16] simmel just download the package and unzip :) [14:18] klaas: I'd rather have apt-get/dpkg fix things since it's somewhere in that database. But sure, I've thought about it. [14:18] I've seen a solution for this before but I can't remember what I searched for then. [14:19] you can run reinstall [14:19] or reconfigure [14:21] aptitude reinstall mysql-server-5.1 ? [14:21] Because that doesn't solve it. [14:46] Everyone: You have a few more hours to submit your last papercuts candidates, bugs nomination for the last subcycle is tomorrow ! [14:55] morning :-) [14:56] Daviey: good morning, how's eucalyptus doing? [14:57] hggdh, Hey! Not too bad.. Been trying to work with Eucalyptus to get some of our patches merged upstream and raise some kitten killer bugs, [14:58] * hggdh likes kitten killers [14:59] or even kitchen, for that matter [15:00] Daviey: any expectations (great or otherwise) re. timeframe? [15:02] hggdh: about milestoning to alpha-3 (bug 610987): if you really mean it, you should also "Target to release" to maverick... and assign someone (be it Canonical Server team if you don't know what to put there) [15:02] Launchpad bug 610987 in eucalyptus "euca-describe-availability-zones verbose incorrect output" [High,New] https://launchpad.net/bugs/610987 [15:02] otherwise it's just lost [15:03] I just targeted to maverick [15:03] and tentatively assigning to Dave (feel free to reassign in UECland) [15:04] I've asked Eucalyptus to look into that once. [15:04] ttx: thanks. My view right now is that there is nothing to test is these bugs don't get fixed [15:04] I'm not entirely convinced it's there issue, it could be one of the patches we are carrying.. but they seemed willing to help debug [15:04] I'm scheduling a call with Euca today, i think - to follow up [15:05] ttx: I thought that milestoning would be enough, sorry [15:05] smoser, free for a quick call? [15:05] can i have 5 minutes ? [15:05] Daviey: we should plan to have a "plain" build to reproduce against [15:05] (even if it's more painful to install) [15:06] This "must be in the patch you carry" was raised a few times already and was mostly debunked as false in the end [15:06] ttx, Yes.. I did for the last Alpha make it only have essential patches in a PPA.. but i don't think that added too much value [15:06] Only confirmation, really. [15:07] ttx, Actually, euca made no reference to it being our patch - I raised it that out of the patches, this one I wasn't convinced was totally upstreams issue [15:07] But they are taking a look regardless. [15:07] hggdh: for alpha3 IMHO we should concentrate on fixing the basic functionality, like registration and running a single instance. [15:07] hggdh: there is no way everything will get fixed in the next day [15:08] ttx: so just basic functionality tests? [15:08] Yes! That is good ttx, i agree... [15:08] this is doable, of course. And easy :-) [15:08] hggdh: well, if that fails, there is no point in fixing how it behaves under load [15:08] ttx: ack [15:08] The ones that are concerning me at the moment, are "Auto registraion issue" and to a slightly lower priority "instance poor success rate" [15:09] I think we are spreading thin by trying to fix every regression [15:09] * hggdh will be able to complete tests in about one day \o/ [15:09] and I fear that we won't solve anything if we go that route [15:09] concentrating on the basic ISO test for alpha3... then fixing everything else after [15:09] ttx / hggdh: Euca are quite pleased to get access to the QA machines for this... elmo said it's ok, and i'll file a RT now. [15:10] at least we'd have something installable [15:10] This makes it easy for hggdh to find an issue, ping them - and demostrate via screen etc. [15:10] Daviey: GREAT! I think this is an extremely good move [15:10] No more faffing with trying to communicate an issue. [15:10] Daviey, ping [15:10] smoser, o/ [15:10] Daviey: could you sum up the key bugs preventing the basic ISO test from succeeding ? [15:11] mumble [15:11] win! [15:11] Daviey: bug 610987 is clearly *not* one of them [15:11] Launchpad bug 610987 in eucalyptus "euca-describe-availability-zones verbose incorrect output" [High,New] https://launchpad.net/bugs/610987 [15:11] I want to keep in the A3 radar only those "basic functionality" issues [15:12] ttx: https://launchpad.net/server-papercuts/+milestone/maverick-beta ... 1 bug targeted? Did I put mine in the wrong place? [15:12] so remilestoning to beta everything that is a regression under load [15:12] ttx: this bug only affects (it seems) when running 'euca-run-instances -n [15:12] SpamapS: the milestone nomination will occur tomorrow [15:12] SpamapS: your proposlas should be undecided/New [15:12] ttx: oh.. ok, well I jumped the gun a bit, oops. ;) [15:13] SpamapS: you just overstpped your authority :) [15:13] removed. :-P [15:13] * SpamapS imagines ttx in Cartman's mirrored glasses.. ...... respect mah authoritah [15:13] SpamapS: though if you want to handle papercuts from now on, just let me know :P [15:14] * SpamapS dives back into spam can [15:14] Daviey: so, preventing the "basic tset" from succeeding, we have: [15:14] bug 609112 [15:14] Launchpad bug 609112 in eucalyptus "euca_conf --discover-nodes fails to register nodes" [High,Confirmed] https://launchpad.net/bugs/609112 [15:14] ttx, 2 mins.... on call with smoser [15:15] ttx: I eould add bug 610259 -- it may be a special case of 609112 [15:15] Launchpad bug 610259 in eucalyptus "inconsistent output euca_conf and euca-describe-availability-zones" [High,Confirmed] https://launchpad.net/bugs/610259 [15:16] hggdh: that doesn't prevent the basic test from succeeding, right ? [15:16] expect for the fact that you have no clue of what NCs are in, no [15:16] ttX ^ [15:17] hggdh: I think it's the same issue [15:17] ttx: I think it can, also. I opened separate because there was a chance it was unrelated [15:18] s/it can/it is/ [15:18] the key bug is that euca_conf doesn't register nodes anymore [15:18] ack [15:19] ttx, thta isn't correct [15:19] it doesn't say it did [15:19] smoser: when I tested it, I only got the NCs in via 'euca_conf --register-nodes', never via --discover-nodes' [15:20] ok. [15:20] so manybe im' wrong then/ [15:20] my experience is that register-nodes works, but --list-nodes shows no nodes [15:20] not sure -- I only tested on topo1 (all-in-one, plus 5 NCs) [15:20] but things run fine, and euca-describe-availability-zones output is correct. [15:20] Daviey: if you agree that the node registration issue is the key bug, that's something we can investigate on our side [15:21] Daviey: I'm sure you welcome external help on this one ? [15:21] smoser: hum. I will try again, with a current ISO/UEC images [15:21] well, as of friday, --list-nodes was broken for me [15:22] yes, same (from Thurday, and earlier, no changes in euca-2.0) [15:22] How can I put a user inside a chroot when they log in? Moreso, so they're only dropped into it if they're above uid 1000 (if possible) [15:25] ttx, The more help the better :) [15:25] Daviey: ok, I'll try setting up a system to reproduce that [15:26] ttx, Awesome! [15:26] * ttx wonders if he could start from an A2 system [15:28] ttx, Hmm.. i'm not sure how the libjibx is handled for upgrade.. need to test that [15:28] Daviey: I'll figure it out [15:29] * ttx pauses while the ISO loads [15:34] smoser: I am reloading the whole shebang. This is actually not bad, since I will be able to test the apparmour issue === ogra_ is now known as ogra [15:36] Hola... could someone help me? I've installed ubuntu server with gnome and gdm to log in, but when I run gdmsetup, I get these errors... http://pastebin.com/SGDgqs6k [15:37] ttx, If i want to get a new upload of euca into A2, guess it needs to be published before Tues early morning? [15:38] Daviey: A3? [15:38] into A3, you mean ? Given the current state of the ISO... [15:38] err yeah [15:38] I'd say that a late Tuesday upload will make it [15:38] ttx, Does that mean Wednesday is likely to be the A3 iso? [15:38] poisonborz: it seems you are missing some Gnome packages [15:39] Daviey: I hope so. [15:39] ok, super [15:39] the current ISo is borken, says no kernel, some apt-cdrom failure apparenbtly [15:40] given that the release team is... fragmented... it should take some time to fix that. [15:40] hggdh: it would be great if that is all whats wrong... could you tell me what those packages are? [15:42] poisonborz: unfortunately, no... perhaps you can try the #ubuntu channel? === dendrobates is now known as dendro-afk === mathiaz_ is now known as mathiaz [16:08] How hard is it to write a custom pam module that handles crap when you log in over ssh? [16:08] I want to perform a certain set of commands and then drop the user in a certain chroot [16:12] Daviey: so I targeted the other bugs to -beta, let's focus on the node registration issue [16:12] MTecknology, I'm not sure pam is the best way to achieve that... I would suggest a custom shell, perhaps [16:13] ttx, Agreed.. if i can whack out a fix for registration - i'll start tackling the others [16:13] I would like to land design refresh for A3.. but not sure that is likely now.. [16:13] this might just snowball-fix the others [16:13] snowball-break the other features:) [16:16] Daviey: What I'm looking for is user| ssh user@host.com -> sshd| cp -r /etc/chroot-skel /tmp/[mktemp]; ln /home/user /tmp/[mktemp]/home/user; mount [stuff]; chroot /tmp/[mktemp] /bin/bash; logount| rm -r /tmp/[mktemp] [16:17] Daviey: unless there's some better option [16:17] MTecknology, A throwaway chroot on every login? [16:18] MTecknology: erm - is it possible to hardlink directories these days? [16:19] RoyK: ln -s [16:19] Daviey: ya [16:19] MTecknology: looked more like you were trying to hardlink it [16:20] RoyK: those were far from complete commands. Sorry about leaving out the -s :) [16:22] Daviey: any ideas if somebody did the hard part of that already? [16:22] how do i set global umask in multi-user setting, we'll be using ubuntu server with LTSP and Gnome. is it /etc/profile ? [16:23] AndyGraybeal: yuppers [16:23] thank you MTecknology [16:24] AndyGraybeal: after you change that, you need a reboot iirc [16:25] is /etc/profile read for all shells? [16:26] is it possible to have usernames of andy.graybeal in ubuntu? [16:26] MTecknology, The cleanest solution may well be PAM.. There is a PAM module for creating a home dir if it doesn't exist [16:26] You could adapt that i suppose, but don't expect it to be too trivial [16:27] Daviey: are you talking to me? [16:27] AndyGraybeal, no [16:27] Daviey: :) k [16:27] :) [16:28] AndyGraybeal, you can have dots in usernames... and it works.. but useradd will complain :) [16:28] Daviey: any ideas for a better solution? My original goal was to just build a whitelist of what apps the user can launch - I'm somewhat considering chmod o-x on everything I don't want them running.. [16:29] AndyGraybeal: if you want to avoid headaches.. make sure the first/last character is a letter.. some apps like to complain otherwise. I use dots all the time though. [16:29] some of my user accounts :P -> JF81F5D.s SEF5644E4.s S5A76C029.s SAB0FFB17.s [16:29] MTecknology, Not at the moment.. i'm sorry i can't give you more focus atm.. Have lots to do :( [16:31] Daviey: ok, thanks. So far all I've found is libpam-chroot which seems to have no docs. [16:34] MTecknology: why not just create ssh chroots for the users? [16:35] pmatulis: how do I do that? [16:35] pmatulis: I some some docs on it but they weren't very helpful [16:36] MTecknology: there is quite a lot of hits for that. what didn't work? [16:37] pmatulis: it seemed to be almost all for removing ability to access cli and required making the users home directory owned by root:root [16:39] MTecknology: not sure about that but what specifically is wrong with those solutions? [16:40] Daviey: arh, I downloaded the wrong A2 ISO. [16:40] oh dear [16:40] looks like I won't have time to try it out today, and I don't work tomorrow morning [16:41] :/ [16:41] Daviey: we can have a discussion now on how to debug it, like how it's supposed to work, if you need any of that info ? [16:42] pmatulis: I can't have everything owned by root, and they need to have cli access [16:43] MTecknology: ownership changes are top level directories, that should be ok since by nature folks are trapped in the chroot [16:44] MTecknology: re cli access, i don't get it, of course they have cli, can you explain? [16:44] pmatulis: I'm only trying to control what the user can do when logged in. I'll initiate processes as the user than I don't want them to be able to do [16:44] ttx, Hmm.. i remember following the initial design of how it should work.. I am a little unsure, so it would help. [16:44] ok, mumble [16:45] * Daviey enages [16:45] MTecknology: oh ok, not a chroot at all then [16:45] pmatulis: That's just the solution I kept getting pointed at [16:46] MTecknology: and it's not like you know what they will be running, just what you don't want them to run? [16:46] pmatulis: If I can restrict them to a whitelist set of apps, that would be ideal [16:47] MTecknology: apps are cli-based? [16:47] pmatulis: ya [16:47] pmatulis: this is on a server [16:48] MTecknology: so just use ssh remote commands via a forced-command checking script :) [16:48] MTecknology: are the apps interactive? [16:48] pmatulis: vim is === _NG is now known as _ng [16:49] pmatulis: You mean like make them run ssh -e for every single command? [16:51] MTecknology: yeah [16:51] MTecknology: but not sure about interactive stuff [16:51] it'll almost all be interactive [16:52] They need to use thigns like vim, ssh, pu, pcd, prush, ls, cat, mv, rm, cd, wget, tar <- which covers probably almost all of it [17:04] hey guys im using sshfs to mount a remote directory on my local server. Is there a way to make this mount a constant connection because sometimes it disconnnects and then i have to manually remout it [17:04] join #ubuntu-community [17:05] opps lol [17:05] Doonz: its probably more of a ssh configuration than a sshfs config... i'm guessing a longer ssh connection timeout or something, check the OpenSSH manual === dendro-afk is now known as dendrobates [17:05] why would it time out tho [17:06] box boxes are running and there hasnt been a disconnect for the internet [17:06] Doonz: lots of reasons. sometimes the network bogs down, for whatever reason, and the host/guest connection doesn't see any packets for a while [17:06] Doonz: and then the timeout is satisfied, and the connection is closed [17:07] Doonz: you could also look into enabling the keepalive, so that inactivity doesn't shut your ssh connection [17:07] uh [17:07] * Doonz is a noob [17:08] Doonz: you're gonna have the best luck reading the man page for ssh_config. you're looking for 'TCPKeepAlive' [17:08] sshfs user@remotehost:/home/user/scripts/ /home/user/scripts/ [17:08] thats the command i run [17:09] yeah, thats fine, but, on the inside of that command, a 'normal' ssh session is being created, which means your default ssh configuration still applies [17:09]