=== erichammond1 is now known as erichammond [00:13] Got a server (brand new) that literally every time I power it down, I've got to re-install grub2....any clues? [00:16] YankDownUnder: you're probably not installing grub to the right place. [00:16] Hey, how do i mv/cp files recursively overwriting files and folders on the destination? [00:17] SpamapS, I'd have assumed that (as in this case) I've done it the same as I always do for this type of build... (grub-install /dev/sda => MBR?) [00:17] fidelix, cp -Rf [00:17] This does not work. [00:18] fidelix, cp -rf ? [00:19] I'll check [00:19] The first one worked. [00:20] Thanks YankDownUnder [00:20] fidelix, Yer welcome mate [00:25] YankDownUnder: depends on what device your system is actually booting from. [00:25] YankDownUnder: its not a hardware raid card by any chance, is it? [00:27] SpamapS, RAID is disabled on the mobo...all is fine when I actually do a warm boot, but from a cold boot, it freaks out... [00:40] YankDownUnder: oh, that is actually pretty odd. I wonder if the controller is somehow screwing with writes to the MBR because of the RAID. === jjohansen is now known as jj-afk [01:04] how do i tell upstart which services to add for startup and remove unwanted services that are starting now? [01:06] I'm wondering if hiddev is availble in the server kernel, or what the options are for usb based ups - I use apcupsd but I have no /proc/bus/usb/devices - anybody familiar in this area? [01:06] Im using 8.04 [01:25] SpamapS, There's a thought...have to check this out - I'll be in front of the server next week - so have to see what I can find out via remote...hate having to go through this all the time when the machine is powered down - it's going to be taken down at least two more time in the next month before it's got a perm home... [01:41] anyone knows the path to httpd.conf ?? [01:41] pwd [01:41] ahh everything is in /etc/apache2 [01:42] tucemiux, /etc/apache2/ yes and see /etc/apache2/sites-available/default [01:43] ryoohki, the only way I know of is to manually edit the files, which are located in /etc/init/ [01:47] anybody here with raids and also bothered to align partitions properly ? [01:47] curious if it's worth the hassle [01:57] qman__: thanks! i was trying to avoid that but i could see vim was one of the ways [02:02] clusty, I didn't bother, but I don't think my drives have 4k sectors [02:03] of course my transfer speeds are limited by gigabit ethernet anyway, so I'm not super concerned about performance [02:03] qman__: i am getting strange speeds [02:04] on windoze i get from 30mb/s to 210 [02:04] on a 3 disk raid 5 [02:05] locally or over the network? [02:05] gigabit ethernet has a theoretical maximum of 125MB/s, but in reality is limited to closer to 100MB/s [02:05] qman__: locally [02:05] the fastest speeds I've ever sustained over SMB are about 80-85MB/s [02:06] qman__: also IO totally chokes it. as in a simple copy overloads the IO so much the PC is unresponsive [02:06] can barely wake up from screen saver [02:06] fakeRAID? === robertpayne_ is now known as robertpayne [02:07] qman__: real raid [02:07] intel [02:07] barely any cpu used [02:07] but IO used to the brim [02:08] would have expected the io scheduler to perform in a decent manner [02:08] expecting windows to perform in a decent manner is a mistake [02:08] no no [02:08] that is linux [02:08] if windoze blows, i can understand [02:08] ...and expect [02:08] D: [02:08] what controller is it? [02:09] srcsas18e [02:09] misaligned blocks on 4k sectors could cause that, but there's likely something else going on here [02:09] i did not align anything [02:09] could cause slowdown, that is [02:09] and what kind of disks? [02:09] 7200 32mb cache disks [02:09] 1tb [02:10] middle of the road [02:10] WD, seagate, samsung? RAID class or consumer? WD Greens? [02:10] wd consumer black [02:10] one i managed to kill tLER [02:10] other 3 were to new :( [02:10] kill=enable [02:11] qman__: so you think alligning would help a lot? [02:12] it would improve performance certainly, but I don't think it's what's causing the whole machine to choke like that [02:12] qman__: do i comment out the "start on started" or change it to something like "start on manually" ??? [02:12] but only if those disks use 4k sectors [02:12] I don't know if they do [02:12] btw, do i have to recreate partitions, or just moving them to the right boundary would be enough? [02:13] you could probably move them, but I don't know how or what utility to use [02:13] parted [02:13] can do it [02:13] so what do i need to align to? [02:13] 4KB multiple ? [02:14] you want your filesystem's 4k blocks to match up with the 4k sectors, so I guess [02:14] qman__: a moment of your time, please [02:15] qman__: the stripe size/width don't matter ? [02:15] ryoohki, I would comment out the "start on" line(s) [02:15] to disable a service [02:15] clusty, all the stripes/widths I know of would be multiples of 4k [02:15] 64k, 128k [02:15] qman__: thanks! [02:16] so they should be fine, unless the controller is reserving an amount of space before your filesystem that is not a multiple of 4k [02:16] qman__: they are indeed. 256kb x3 [02:16] i can waste space [02:17] the thing is, most things are multiples of 4k, and most filesystems already use 4k blocks [02:17] i am not gonna cry over 4kB-1 B :D [02:17] the only problem arises when something reserves an amount of space that isn't a multiple of 4k [02:17] such as the MBR [02:17] do extended partitions eat a non multiple of 4 ? [02:18] so your system has to be intelligent enough to slide it to the 4k sectors [02:18] that, I don't know enough about [02:18] wikipedia should be some help there [02:18] thanks for the hint. i will look at that [02:19] but again, that shouldn't be system crippling [02:19] it'd cause notable slowdown [02:19] but it wouldn't be hanging your box [02:19] unless the controller is doing something stupid [02:21] absolute worst case scenario, each disk is doing three times the number of reads/writes they would otherwise need [02:26] I've got older systems with disks that can't even manage 30MB/s that run just fine [02:31] New bug: #619004 in clamav (main) "package clamav-daemon (not installed) failed to install/upgrade: sub-processo script post-installation instalado retornou estado de saída de erro 1" [Undecided,New] https://launchpad.net/bugs/619004 [02:34] hello, is it possible to choose kernel during Ubuntu server installation process? [02:37] Is it possible to choose or change default kernel during ubuntu server installation process? [02:38] Anyone have any good ideas on measuring PPTP traffic? [02:38] (bandwidth) [02:45] qman__: running now a long iozone to see really what sort of bottlenecks are there [02:47] anyone know how to choose kernel during "expert mode" installation? [02:50] anyone know how to choose kernel during "expert mode" installation? [02:52] qman__: i have seen this also on another work PC [02:52] with a raid [02:52] that heavy DB access makes it so unresponsive it stops pinging for a short while [02:55] anyone know how to manually choose kernel during "expert mode" installation? (sure it's possible) [02:59] asanir22: do you stutter ? [03:01] clusty, what do you mean by stutter? [03:05] nobody replies! [03:20] asanir22: that can mean 2 things: ppl don't know, or they don't like you. either way asking every 5 min won't change jacl schitt [03:23] sorry clusty, i was not aware of discipline here [03:25] this channel moves a lot slower than #ubuntu, patience is important here [03:26] as for your question, I don't know if that's possible [03:31] there an easy way to see top like 10 processes by memory usage? [03:38] robertpayne, certainly, see `man top` [03:40] there's probably also a way to do it with ps [03:46] i prefer htop [03:46] it's a candy filled version of top [04:23] i have gest xp system running i was woundering how to enable 3d for the virt video card [04:49] shebaloma: virtual box ? [05:49] to the bloke asking about 10 top processes: I've just used a conky-cli customised rc that does basically that - and I've got it to show me some other important things via the server's console... [05:58] ps auxw O r | tail -n 10 [05:58] shows top 10 (albeit, in ascending order) === freeflyi1g is now known as freeflying [08:27] i have a little problem with ubuntu on my server... basically the server has a remote video redirection, which works fine with 8.04 lts, but then i upgraded to 10.04 and now, at some point during boot, ubuntu changes font or resolution or something, and all i see in my video redirection console is garbage... is there a way i can fix that? === rmk_ is now known as rmk [08:39] trying to restrict login hours for the user "test". Added ssh;*;test;Al0900-1000 to /etc/security/time.conf and added account requisite pam_time.so in /etc/pam.d/common-account (I also tried in /etc/pam.d/login). I even rebooted the computer afterwards. The user "test" can still ssh while the time restriction should occur. What am I missing? [08:40] g0rd0n, when booting, enter grub, and manually edit the boot line to include "modeset=0" [08:40] ok, i guess i can set that in menu.lst as well [08:41] I've run into a lot of problems with the changes myself [08:41] New bug: #619064 in openldap (main) "package slapd 2.4.21-0ubuntu5.3 failed to install/upgrade: il sottoprocesso vecchio script di post-installation ha restituito lo stato di errore 1" [Undecided,New] https://launchpad.net/bugs/619064 [08:41] i tested debian 5 -> 6 and have even more problems there [08:41] that should get you booting to a normal terminal [08:41] machine won't even boot [08:42] but i think im gonna settle on 10.04 and do things with kvm [08:54] *;*;test;!Al0900-1000 works but ssh;*;test;!Al0900-1000 does not (meaning test can ssh). An idea? [09:11] ssh* is the key [09:15] while I don't know anything about that system, I would assume that * means allow any type of login, where ssh would only allow ssh [09:17] is it advisable to convert ext3 to ext4 on an ubuntu 10.04 system? [09:19] only if you think you'll benefit from the performance gains [09:19] there are still some bugs surfacing with ext4, some trivial, some rather nasty [09:19] qman__, that's because we have /etc/pam.d/sshd so ssh* works as sshd does. this I understand now [09:26] ok then ill wait :P [09:27] i dont want a nasty server [09:28] it's considered stable, but unless you stand to benefit greatly, I would just stick with ext3 [09:29] After configure cloud computing in ubuntu. I am unable to access frontend server with https://ipaddress:8443 in our proxy network..... How i can change ssl port [09:32] i hate to look so stupid but i am stupid. my son set up mail on his server somewhere else, and he just told me that i have to copy it off there, i don't know how? [09:33] i think his server is ubuntu, i know my box is and the one i want to copy it to is ubuntu 10.04 [10:06] How can I have dom0/pvops kernel form 10.04 thanks [10:06] where can I donwload those debs ( dom0/pvops kernel ) [10:08] kuttan_: I believe Xen dom0 kernels are apt-gettable from the main archive. [10:09] hello to all. i have a question related to proxys. i need to have a transparent fast proxy with the possibility to skip/filter special html tags if a php page is called. Does exist something like that ? [10:10] twb thx for reply, but I can't see anything for lucid ( 10.04 ) [10:10] kuttan_: is universe enabled? [10:10] yes [10:11] Hm. [10:13] twb linux-image-virtual , is domU ( guest ) only . am I right [10:14] Last time I looked, all kernels were domU capable as at lucid [10:14] And you're right, I can't see a dom0-enabled kernel package... [10:15] I shifted from centos/rhel to ubuntu .. missing dom0 :( [10:15] I don't use xen myself, so I don't know if that's because it's no longer necessary, or because Ubuntu have dropped dom0 support [10:16] twb Yup looks like that [10:18] http://osdir.com/ml/kernel-team/2010-01/msg00000.html (random google hit) [10:19] I suppose you could use hardy as the dom0 [10:19] thanks let me check hardy repo . [10:19] Hardy has dom0 packages [10:27] okay [10:51] is there an easy way to include some html on every page that apache spits out? (thats is htm, php, everything) [10:54] boki: libapache2-mod-layout http://www.musc.edu/webserver/mod_layout.html [10:55] joschi, great! [11:08] uhmm, whats the correct way to install apache mods? [11:08] apt-get install libapache2-mods [11:09] btw, i've problems with ssh, i've set the single ip to listen and syslog says "init: ssh main process (23654) terminated with status 255" because the network is not initialized, how can i posticipe the ssh start? [11:10] am curious to see if my method of upgrading from 8.04 to 10.04 is correct: 1. modify /etc/apt/sources.list 2. aptitude update 3. aptitude install aptitude 4. aptitude safe-upgrade 5. aptitude dist-upgrade 6. reboot [11:11] g0rd0n: not really [11:11] g0rd0n: https://help.ubuntu.com/community/LucidUpgrades#Network%20Upgrade%20for%20Ubuntu%20Servers%20(Recommended) [11:12] lol thank you [11:13] uh thats even easier than my way, nice [11:13] yep :) [11:13] and for sure more compatible insted of editing sources.list [11:15] yeh [11:15] although i have a fresh minimal install, but it cant harm to do things properly :p [11:18] http://codepad.org/a5cFk17e should this configuration work concerning smtp? i want to accept smtp from those 3 ip's [11:33] how can i figure out why a certain mod is not working? [11:35] shit [11:35] I'm using 2x Apache servers mounting their document root's from a NFS server. I notice very high load on both apache servers, but low cpu usage...is this normal with NFS clients? [11:35] now i wish i hadnt upgraded to grub2 [11:35] lol [11:35] I'm using dedicated gigabit nics for the nfs shares/server [11:44] can i format /boot on a running system? and if yes, how can i format it so that the first sector starts at 63? seems to be a requirement for grub2... [11:49] \j #grub [11:49] i got good help there [11:54] xampart: thanks [12:03] how can i figure out why the content that should display with mod_layout is not showing up? (apache gave no errors on startup) [12:07] hi, somebody know if there are someway to use rsync without promt the password? I can use password-file as my connection use ssh (the accounts for user are ldap/pam and login to their own folders) so i cant also use private key for that. any idea? [12:10] I'm guessing it's because of the errors. [12:18] Roxyhart0: you'd need to explain in more detail what exactly you're rsyning, because you've mentioned useds and their own folders and that doesn't explain why a private key can't be used [12:19] becauseand i have 100 users and 100 computers, so i dont want create a private key for each user in each machine??? [12:20] I am doing a scrip to backup clients machine from each user in the server each [12:21] hour with rsync and i dont know how dont promt the password..the users account are ldap accounts [12:22] and they shoudl copy the data in the folder that just each one have permision (each user have his pwn folder which permision just to him) [12:23] sounds nice === e-jat is now known as ejat [12:27] o i can do perfectly but it promt the password and i would like to avoid it as is a script running with cron...any idea? [12:29] boki: look at server error log, check if it's enabled via a2enmod [12:29] alex88, it is, nothing in logs [12:29] what mod? [12:30] does anyone here have experience setting up Ubuntu as a Kerberized SSH-server? [12:30] that is, support full SSO, with Kerberos not only as PAM backend, but actual Kerberized authentication directly in SSH? [12:31] i'm about to pull my hair out.. [12:31] rawler_: http://www.pdc.kth.se/resources/software/login-1/linux/ssh-with-kerberos-gssapi-on-ubuntu like this? [12:32] rawler_: also https://help.ubuntu.com/community/SSH/OpenSSH/Advanced?action=show&redirect=AdvancedOpenSSH [12:33] rawler_: last page [12:33] 13:24 -!- paulws [~paulws@166.205.139.167] has joined #ubuntu-server [12:33] 13:25 -!- e-jat is now known as ejat [12:33] sorry [12:33] http://developer.novell.com/wiki/index.php/HOWTO:_Configure_Ubuntu_for_Active_Directory_Authentication [12:34] alex88: is heimdal-client fully compatible with mit-server? [12:34] rawler_: dunno, try..i've just linked tutorials that seems to be fine... [12:35] alex88: well, I've already found those through google.. [12:35] rawler_: oh sorry. [12:36] I haven't tried the heimdal client yet, since our previous CentOS hosting environment runs MIT-kerberos, and I want to avoid spurious compatibility-errors.. [12:47] anyone with experience with incremental backup of mysql? does every 5 min sound doable with a full backup each day? [12:48] ftp backup, i'm wondering if servers can handle that [12:50] http://mywiki.wooledge.org/FtpMustDie [12:50] lenios, injust test rsync and is great!! [12:50] no rsync [12:51] tar/zip + crypt + ftp [12:52] backup server is a remote ftp server [12:53] Anyway, you can't make an incremental backup of mysql files [12:53] They're not coherent when mysql is running -- you have to either stop mysql for the backup run, or tell mysql to generate a dump (basically a huge .sql file) [12:53] (and the .sql file will have broken charset) [12:54] Yeah, well, mysql is inherently brain-damaged [12:54] AFAICT if sqlite is for rapid-deployment of toys and postgres is for production, there's not anywhere in between where mysql is a good idea [12:54] can't i make a sql query and put that in a file? [12:55] lenios: sure you can, but it's not going to be useful [12:55] it's only for a few tables, not the entire database [12:56] zash: we should convince all those PHP dweebs to store data in slapd instead of mysql [12:56] "after all, it's an object database -- no need for an ORM!!1!" [12:56] by the way, i'm using java with hibernate [12:58] how would postgresql be better for backups? [12:59] hi twb [13:00] oh, postgre has a PITR [13:41] twb: no! text files is most awesome!! ;) === MTeck is now known as MTecknology [13:44] is there a way to make a non-graphical install? the video redirection of my server delivers garbage past the first install screen [13:44] g0rd0n: there's a graphical server install? :O [13:44] g0rd0n: do you want a text based, or a fully automated installer? [13:47] zash: text-based... well you are right, it's not graphic... but somehow i still have problems [13:47] odd... [13:49] i see lots of vertical stripes... i tried with nomodeset but no luck with that eitehr [13:51] zash: the lucid server install media FORCE framebuffer on systems that have video cards [13:52] zash: you can opt-out of that on installed systems, but not on the install media (due to a bug). [13:52] :( [13:52] g0rd0n: you either need to type blind, or pull out the graphics card and do the install over the serial port, or preseed the entire install, or install hardy and upgrade to lucid afterward [13:53] serial port... interesting, i will try to connect to the serial console and see if i can do there [13:53] twb, what about a net-install? [13:53] g0rd0n: oh, sorry, if you're installing over serial you'll need to roll your own install medium (e.g. PXE boot). [13:53] I had problems with graphics mode once I installed, but not during the install, but I use net-install [13:54] patdk-wk: all my installs are PXE-based. [13:54] mine are pxe too [13:54] i have no possibility of influencing PXE, i just can mount ISO files remotely and boot from them [13:55] g0rd0n: yeah, I spoke to someone else with the same kind of funky remote access [13:55] g0rd0n: I think you're totally fucked [13:55] lol [13:55] roll your own net-install iso? :) [13:55] Oh, another way would be to boot whatever's on there, and write the boot media directly onto /dev/sda, then reboot off the hard disk. [13:56] That's heaps of fun, because if mess up the install you can't reboot to get back to the installer, because you've just blown away /dev/sda [13:57] twb, he can use any other iso image to boot to though, to fix it :) [13:57] If only everything was running coreboot and we just had "target scsi" style AoE installs... [13:57] patdk-wk: I guess [13:58] patdk-wk: is there a howto for creating the net install iso? couldnt find an official one [14:02] g0rd0n, that would be why I said, roll your own [14:02] I dunno if these would help or not: https://help.ubuntu.com/community/Installation/MinimalCD [14:06] Strictly, the *minimum* you need to install is the d-i kernel and ramdisk, and a bootloader to load them into memory [14:08] http://archive.ubuntu.com/ubuntu/dists/lucid/main/installer-amd64/current/images/netboot/ [14:08] e.g. curl .../boot.img.gz | gunzip -c >/dev/sda [14:09] i think im gonna go with 8.04 and upgrade it as i did before, avoiding to upgrade grub2 :P [14:11] hi all. I have a simple set of iptables rules that should monitor and log into mysql - using ulogd - connections from and to the server. The problem is that the first ulogd mysql connection triggers a recursive set of connections that block my mysql server. How can I make such a rule to prevent ulogd localhost mysql connections from being logged? [14:19] prodigel: so, don't log connections to mysql? [14:20] e.g. -A LOG -i lo -j RETURN; -A LOG -j [whatever] [14:20] twb, I've tried something like this: http://pastebin.com/xFnD49RE with no luck. [14:21] twb, those are all the iptables rules [14:22] Sorry, ICBF helping further. Try #netfilter. === dendro-afk is now known as dendrobates [14:27] twb, is this the real meaning? http://www.urbandictionary.com/define.php?term=icbf [14:29] prodigel, why don't you try something sane, like limiting the amount of ulogs per rule [14:29] patdk-wk, do you think that would be useful for firewall monitoring? [14:30] maybe you should think about this some more [14:30] is it really interesting to know that someone connected to mysql 1000 times per second? vs 100times? [14:31] even syslog stops logging dups [14:33] hggdh: hi! [14:34] hggdh: how is UEC testing going on 10.04.1? [14:36] New bug: #619224 in samba (main) "package samba-common 2:3.4.7~dfsg-1ubuntu3.1 failed to install/upgrade: sub-processo script post-installation instalado retornou estado de saída de erro 1" [Undecided,New] https://launchpad.net/bugs/619224 [14:38] mathiaz: all-in-one done and gone, having some issues on topo2 (all distributed) [14:48] hggdh: related to 10.04.1 or hardware related? [14:52] mathiaz: all ssh calls to instances fail on a ping (no response) [14:52] mathiaz: sorry. before SSHing, I ping the instance. All pings are getting no response [14:52] kirkland: ^^ - could you help out on the 10.04.1 UEC testing front? [14:53] mathiaz: hi there [14:53] mathiaz: sure, will do [14:53] hggdh: and in the all-in-one setup it works correctly? [14:53] hggdh: can you ping the NC from the CC? [14:53] hggdh: rather [14:54] hggdh: can you ping the CC from the CLC? [14:55] mathiaz: yes, the all-in-one worked [14:56] hggdh: ok - so it's probably a routing issue between the CLC and the CC [14:56] mathiaz: and the CC is pingable from the CLC [14:56] mathiaz: sounds like routing, yes [14:56] hggdh: from the CC can you ping the private IP of the instance? [14:57] mathiaz: yes [14:58] hggdh: on the CC, is there an interface define for the publich IP of the instance? [14:58] hggdh: can you ping the public IP of the instance from the CC? [15:01] mathiaz: for the CC interfaces: yes, see http://pastebin.ubuntu.com/479421/ [15:01] hggdh: and a ping 10.55.55.101 from the CLC doesn't work? [15:03] mathiaz: it does not. Interestingly, .101 is an active instance [15:03] hggdh: I'd check the routing table on the CLC [15:03] hggdh: I'd also start a tcpdump on the CC to see if there are any packets related to 10.55.55.101 [15:04] mathiaz: yes, I was going to get it now [15:09] i see LVM is selected by default now in the installer, but is it really useful on a dedicated server? [15:11] <_ruben> sure, why not? === dendrobates is now known as dendro-afk [15:15] Define "dedicated" === dendro-afk is now known as dendrobates [15:18] I tried logging in to my server via SFTP, but the login credentials were denied. Is there anything I have to enable? [15:21] kirkland: hi there, can you enlighten me how the pre-seeding of nodes is done in eucalyptus? E.g. where is the user name and password for the nodes stored on the front end? [15:21] twb: root server, two hard disks, software raid1 [15:22] Then I fail to see why you WOULDN'T put LVM on [15:22] phidah: the failure will be explained in auth.log on the server. [15:22] phidah: by design, detailed failure information is not disclosed to the client. [15:23] heh i think i never used lvm [15:23] kirkland: I see /etc/eucalyptus/preseed/, but it's empty - maybe because it is a packaged install? [15:23] g0rd0n: just wait until a cron job files /var/log or /var/tmp and you start losing mail from /var/spool/postfix [15:23] s/files/fills/ [15:24] ok since I tail -f'ed the auth.log I see the same host hammering the ssh trying to log in as root... [15:24] Do I just ignore that or...? [15:25] <_ruben> use fail2ban for instance to block such attempts [15:25] phidah: well, I would install firewall rules that -j TARPIT all packets from any host that makes more than three connection attempts in a sixty-second interval. [15:25] I don't like fail2ban and friends because even when they correctly uses -m set, it's still relying on a userspace process instead of in-kernel counters. [15:26] twb: okay. do you have an application that does that for me correctly? [15:26] or should it be done manually? [15:26] phidah: er, it's a sequence of iptables rules, not an application. [15:27] I know but wouldn't it be best to have some kind of automated procedure? [15:27] What I'm proposing is a static set of rules [15:27] The "procedure" would be to write an /etc/iptab that's sane, then leave it alone forever [15:28] What would the rule be like to block after say 5 attempts within 1 minute? [15:28] The downside of the approach is that it assumes you already have a clue wrt. iptables best practices, which few people do. [15:29] phidah: yes. [15:29] Well I tried a bit of iptables before but it scares the heck out of me [15:30] phidah: in which use something like denyhosts/fail2ban/whatever; you're less likely to blow your foot off [15:30] *in which case [15:41] zul: ping [15:41] Omahn: pong [15:42] zul: Hello! I've just pushed a branch up to LP that provides upstart scripts for the nis package. ttx has previously pointed me in your direction as a suitable person to give it a check over. [15:42] zul: Is it too late anyway for maverick given that I've missed the feature freeze? [15:42] Omahn: cool ill have a look when i can [15:43] Omahn: it shouldnt be [15:43] zul: https://bugs.launchpad.net/ubuntu/+source/nis/+bug/569757 [15:43] Launchpad bug 569757 in nis "NIS upstart dependancy broken for lucid" [Wishlist,Confirmed] [15:44] GAAHHHHH [15:44] zul: We've been using it here on Lucid in production for a couple of months now without any (known!) issues but I'm not sure how I should be coping with upgrades/etc in the post/pre etc scripts. [15:44] mathiaz: typo in an euca command [15:44] * hggdh fumes [15:44] Omahn:cool ill take a look [15:44] zul: Thanks, much appreciated. === jj-afk is now known as jjohansen [15:46] TeTeT: sorry, i'm a bit overcommitted at the moment to handle that explanation [15:46] TeTeT: there are no username/passwords transferred via UEC preseed [15:46] TeTeT: rather the username is eucalyptus, and the necessary public key is installed [15:46] mathiaz: okay, i'm off of the last phone call, can focus on some ISO testing now [15:47] kirkland: ok, sorry to bother you in stressful times, I just saw "d-i passwd/username string ubuntu" in the preseed [15:48] TeTeT: huh? where? [15:48] TeTeT: i'm definitely not following your request, then [15:48] kirkland: https://pastebin.canonical.com/35930/ from /etc/eucalyptus/preseed/ from neem, training cloud front-end [15:48] kirkland: line 29, but please forget it if you need to do other work now, nevermind! [15:49] TeTeT: this is setting the userId to SSH to [15:50] TeTeT: 'eucalyptus' is the reserved username for the Eucalyptus pacakge run-time [15:51] hggdh: I see the eucalyptus ssh key and user in eucalyptus-common section\ [15:52] Is there any groups that users per default should be member of in order to be able to do port forwarding? [15:53] TeTeT: yes, this is correct. Eucalyptus exchanges internal data between the components [15:53] TeTeT: I am sorry, I just got back here. Could you re-state your issue (so that we will be talking about the same thing)? [15:54] hggdh: I wonder how the user/password synchronisation between the front-end and nodes happens when using CD based install of UEC. Especially I wonder what happens if I change the password later on the front-end [15:54] hggdh: would new nodes still get the old password or get a new one? [15:57] TeTeT: what user/password are you talking about? If it is the user in the instance... there is just one, 'ubuntu', and it does not have a password [15:57] TeTeT: if it is the 'eucalyptus' userId, this is reserverd for Eucalyptus usage, nobody should ever log in as it [15:58] TeTeT: in this case, it does not matter *what* would be the password, anyway, since Eucalyptus does SSH via public key [16:00] hggdh: I was refering to the user on the node controller, for example 'ubuntu' [16:00] or student [16:08] TeTeT: this instance userId is fixed on 'ubuntu'; we do not provide a password to it, users are expected to SSH in with public-key authentication [16:09] TeTeT: so, even if the user changes (i.e., *sets*) a password for 'ubuntu', it would not get to be used [16:09] normally [16:10] hggdh: hmm, is /etc/eucalyptus/preseed for the instances? I thought it is used for the node controllers that connect to the front-end? [16:12] TeTeT: yes indeed. There should not be an 'ubuntu' user there [16:13] TeTeT: in this case the userId inherited is the 'eucalyptus' account. There is no password associated with it [16:14] hggdh: can you confirm that the node has the same user and password as the front end? I haven't done a CD based install in ages [16:15] TeTeT: every NC installed inherits the 'eucalyptus' userId (and the public key into ~/.ssh/authorised_keys). There is *NO* password associated with this Id [16:16] TeTeT: actually, the 'eucalyptus' userId is a system Id (uid=121); what is actually passed is the CC's public key [16:16] hggdh: so the admin user entered in the front-end install dialogue is never passed on to the node? [16:20] TeTeT: well, now... [16:21] TeTeT: good Q. Now I am unsure. I will do an install from CD, fully manual, and test [16:22] hggdh: ok, was just thinking to do the same [16:24] TeTeT: any install has to have an admin user, so one would have to be created. I am not sure the 'ubuntu' would be used [16:38] hi there, does anyone know if 10.04.1 iso's will be released today? [16:42] sla: It's expected to be today, yes. [16:42]