/srv/irclogs.ubuntu.com/2010/08/30/#ubuntu-server.txt

=== twister004_ is now known as twister004
=== twister004_ is now known as twister004
dev001Anybody here successfully launched Ubuntu 10.04.1 LTS Server in a Xen DomU, on a non-pvops Xen 4 host (e.g., OpenSUSE 11.3).  Initial/Stage1 install is fine, but a reboot & attempted launch of LTS Guest via pygrub, I get: ""Boot loader didn't return any data!".  Not any problems for non-Ubuntu guests.  Suspect pvops-related _sumthin_ ...01:10
jMylesI need some help with port forwarding.  I'm just trying to forward a port to another computer.01:29
jMylesHere are my rules: http://pastebin.com/mbVGzZbN01:30
tt33l3r Having a problem with "Keep Aligned" setting on gnome changing back to set on every reboot. Anyone know how to fix this?01:58
=== dendro-afk is now known as dendrobates
dominicdinadaQuestion..... I just flushed my firewall ruleset. And it is set to allow local traffic only. But for some reason Samba is not allowing local connections so what do I do ? Sudo -A -s 192.168.1.0/24 ACCEPT02:57
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
tf2ftwI have a svn folder with perms drwxr-sr-x . My user is in the group that owns the folder yet SVN commit fails with permission error. any clues?05:10
chrismsnzdid you try logging in/out with that user or restarting apache?05:12
chrismsnzsometimes takes a refresh/relogin for the groups to update05:12
tf2ftwhmm well im sshing into the server. do i need to disconnect and reconnect?05:12
chrismsnzyep05:13
tf2ftwok lemme try. thanks05:13
chrismsnzhth05:13
tf2ftwnope. that did not work05:14
tf2ftwwait, not its unknown command05:14
tf2ftwoh, no thats xchat telling me Uknown command05:15
chrismsnzheh05:15
tf2ftwI have a user "svn" in a group "svn"05:15
tf2ftwI have changed the own of the svn folder to user svn o.O05:16
chrismsnzthat will work05:16
chrismsnzdrwxr-sr-x05:16
chrismsnz= owner read/write, group read only, world read only05:16
chrismsnzalso, did you mean make that setguid?05:16
tf2ftwah, actuayeah05:17
tf2ftwsticky bit05:17
tf2ftwi can successuflly comit while on the server but not from my client05:17
chrismsnzi always thought sticky was +t for some reason05:17
chrismsnzok, how are you commiting, over DAV right?05:18
chrismsnzusing apache?05:18
tf2ftwRight05:18
chrismsnzyou might need to add the www-data user to that group05:18
=== twister004_ is now known as twister004
chrismsnzcause apache's going to try and write to that dir on your behalf when you connect via it05:18
tf2ftwah, so i need to add apache to the svn group?05:18
chrismsnzyes05:19
tf2ftwthats usermod -a -G user group right?05:19
chrismsnzusermod -a -G group user05:20
tf2ftwright thanks05:20
chrismsnzalso, I'm not 100% but i think you may need to "chmod g+w <svndir>" on your repository dir to allow apache to write05:21
tf2ftwoh wait a minute, user apache does not exist.. did they change the username to apache2  ?05:21
chrismsnzi'm not 100% on the way that the sticky bit works05:21
chrismsnzif it's ubuntu, it's www-data iirc05:21
tf2ftwyeah ubuntu server05:21
chrismsnzyeah, the user is www-data05:21
tf2ftwsame error. maybe an apache restart?05:22
chrismsnzyes apache restart05:23
chrismsnzcan you also show me the permissions of your svn dir05:23
tf2ftwdrwxrwsr-x05:24
chrismsnzshould work ;)05:24
tf2ftwstill same perm error. im going to restart my client and recreate the svn folder05:25
tf2ftwok the new svn has perm r05:26
ChmEarlwww-data is right05:26
tf2ftwdrwxr-sr-x05:26
chrismsnzright05:27
chrismsnzso if apache is part of the SVN group, and your SVN user is part of the SVN group05:27
chrismsnzthen you should:05:27
chrismsnzchgrp -R svn <svn directory>05:28
chrismsnzchmod -R g+w <svn directory>05:28
chrismsnzwhich will recursively set the files to be owned by group SVN, then recursively allow the group to make changes05:28
chrismsnzyour next problem will probably be that files are being created in the svn directory with permissions based on whoever does the saving, which is a new kettle of fish05:30
tf2ftwok let me try that. the weird thing is i can check out the repo but i cannot commit to it (via dav)05:30
chrismsnzI think I solved that with a DAV parameter somwhere05:30
tf2ftwi added www-data to the svn group but still cannot commit  via dav05:31
tf2ftwlet me try your chgrp options\05:31
tf2ftwok  so i tried what you just suggested, but still no joy. i logged in and out, and apache restart.05:33
tf2ftwi can view the repo via http (with credentials)05:34
chrismsnzright05:34
chrismsnzis it your DAV configuration?05:35
tf2ftwlet me pull that up05:35
chrismsnzchuck it in a pastebin and i'll take a look05:35
tf2ftwok tahkns05:35
tf2ftwhttp://pastebin.com/RrC4UvDY05:37
tf2ftweverything else is commented out or not needed05:38
tf2ftwsuch as <location /svn> etcc05:38
chrismsnzseems fine, do you have any dav-related errors in /var/log/apache2/error_log?05:39
chrismsnzerror.log*05:39
tf2ftwall permission denied errors XD05:40
chrismsnzpaste :D05:40
tf2ftwhttp://pastebin.com/1zA09FB005:41
chrismsnzok05:42
tf2ftwi can rm the log to clear it right?05:42
chrismsnzwho is the owner/group of /var/svn/testfolder/db/ ?05:42
chrismsnzjust leave it, should be timestamped05:42
tf2ftwok db looks like this05:43
tf2ftwdrwxrwsr-x05:43
tf2ftwwhich is 277505:43
tf2ftwwait, no its not05:43
chrismsnzif you do "ls -ltr" it should show the user and group05:43
chrismsnzboth are SVN?05:43
chrismsnzsvn*05:43
tf2ftwdrwxrwsr-x root svn05:44
tf2ftweverything from /var/svn down is root svn05:45
chrismsnzcan you paste me "cat /etc/group | grep svn"05:46
tf2ftwhttp://pastebin.com/W0x3ch6n05:46
tf2ftwwait a min, looks like www-data is not in the svn group05:47
tf2ftwwtf05:47
chrismsnzyep05:47
chrismsnzthe svn user is in the www-data grou05:48
chrismsnzp05:48
tf2ftwhahaha05:48
tf2ftwthats what happened, i had the backwords when i did the usermod05:48
tf2ftwsorry bout that05:48
chrismsnznp05:48
chrismsnzusermod -a -G svn www-data05:48
chrismsnzi think is what you need05:48
tf2ftwyeah tahts the one. lemme try a log out/in and apache restart05:49
chrismsnzsorry, back05:49
tf2ftwexcellent! thanks a lot! im up and going now05:50
tf2ftwman, its rare you dont get noob killers when you ask a question05:50
chrismsnzhaha05:51
tf2ftwanyways, thanks again.05:51
chrismsnzyou caught me in procrastination mode :)05:51
chrismsnzsweet - good luck, i hope you don't run into any more probs05:51
tf2ftwthanks05:51
chrismsnzgetting two users part of a secondary group to write nicely to the same dir was a major pita for me05:52
tf2ftwhmm.. im trying to break my partner of using FTP all the time.05:52
tf2ftwso this should be interesting05:52
xamparti did an usb-installation of 10.04 server, using usb-create. why does uname -a show 2.6.32-24-generic?09:40
ewookdarnit. what apache mod is it that runs not only cgi's as another user, but the "whole" (ie, different domain, different pidowner)09:45
ewookI thought it was mpm09:46
ewookbut I cannot locate it with a2enmod.09:49
ewookperhaps a question for #apache09:49
joschiewook: mpm_itk or mpm_peruser10:04
=== twister004__ is now known as twister004
ewookjoschi: yeah, mpm_itk I thought I just got. but guess not.10:12
=== ivoks_away is now known as ivoks
=== 15SAAQ7I2 is now known as JJman
uvirtbotNew bug: #626728 in apache2 (main) "typing error in default-ssl" [Undecided,New] https://launchpad.net/bugs/62672811:42
uvirtbotNew bug: #626744 in bacula (main) "package bacula-director-mysql 5.0.1-1ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/62674412:06
=== oubiwann is now known as oubiwann-away
=== oubiwann-away is now known as oubiwann
=== unreal_ is now known as unreal
kaushalhi12:35
kaushalcan someone please guide me about https://bugs.launchpad.net/ubuntu/+source/xen-meta/+bug/540110 ?12:36
uvirtbotLaunchpad bug 540110 in xen-meta "ubuntu-xen-server has broken dependencies (dup-of: 538917)" [Undecided,New]12:36
uvirtbotLaunchpad bug 538917 in xen-tools "xen-tools is not available in lucid" [Undecided,New]12:36
kaushalchecking in again for my query ?12:57
sorenkaushal: I'm not sure what your question is?13:01
kaushalsoren: is there a fix for it ?13:02
sorenkaushal: Are you asking if it has been fixed or if it can be fixed?13:02
kaushalsoren: yeah13:03
pmatulis:)13:04
soren:(13:04
sorenkaushal: Well, then yes.13:04
kaushalsoren: ok13:05
* soren questions the usefulness of this conversation13:05
kaushalso i need to wait for it ?13:05
kaushalsoren: apologies13:06
kaushalsoren: is there a irc channel for LP ?13:08
sorenSure.13:08
sorenI'll let you guess what it's called :)13:08
kaushalLaunchPad :)13:08
pmatulisbzzzt13:08
kaushalpmatulis: any thing wrong from my end ?13:09
pmatuliskaushal: no13:09
kaushaloh ok13:09
sorenLike other IRC channels, the launchpad channel features a # prefix.13:09
kaushalsoren: i needed ubuntu specific13:10
kaushalsoren: so any related to LP bugs should be discussed in which irc channel ?13:10
sorenkaushal: Are you talking about bugs /about/ Launchpad or bugs /on/ Launchpad /about/ Ubuntu?13:12
kaushalbugs /on/ Launchpad /about/ Ubuntu13:12
sorenIt depends on the nature of the bug.13:12
sorenIn some cases, it's this channel.13:12
sorenOther times, it'll be #ubuntu-desktop, #ubuntu, #ubuntu-devel, #kubuntu-devel, #ubuntu-motu..13:13
Pici#ubuntu-bugs ...13:13
sorenAnd this is not an invitation to post some question in all of those at the same time.13:13
xfafmorning13:13
sorenPici: Occasionally, I suppose.13:13
kaushalsoren: ok13:14
sorenkaushal: You seriously need to learn to ask more specific questions.13:15
kaushalsoren: sure13:15
kaushalsoren: specific questions ?13:15
sorenepic13:15
kaushali did not understand that13:16
kaushalI wanted to discuss about that LP Bug13:16
kaushalhence the question13:16
kaushalwas there something wrong ?13:16
sorenWhen you ask a question... Try to be specific.13:16
sorenExplain what you want, what you're talking about, why you ask, etc.13:16
kaushalah ok13:16
kaushalsoren: thanks13:17
sorennp13:17
cemcis there a nice logwatcher style something, that will watch auth.log for me and send me an email the moment somebody logs in through ssh ?13:41
zashcemc: tail -f /var/log/auth.log | grep something about successful auth | while read line; echo "$line" | mail -s "someone logged in" you@example.com; done13:43
=== xfaf is now known as zul
zashor something13:43
cemczash: I know I can write my own, but I thought maybe there is one already, something nicer ;)13:44
cemchm, maybe I can add it to fail2ban13:45
cemcinstead of iptables filtering, it just sends an email13:46
uvirtbotNew bug: #626812 in unixodbc (main) "unixodbc-dev depends on libqt3-mt" [Undecided,New] https://launchpad.net/bugs/62681214:10
Crankygeek02Good morning14:23
=== dendrobates is now known as dendro-afk
Crankygeek02Anyone familiar with eGroupware?14:25
ivokssoren: ping14:26
ivokssoren: when --dns is used with vmbuilder, vmbuilder sets up dns in /etc/network/interfaces as dns-nameserver14:27
ivokssoren: and that's great, but there's on problem14:27
ivokssoren: to populate /etc/resolv.conf, that requires resolvconf14:27
=== dendro-afk is now known as dendrobates
ivokssoren: so, vmbuilder should really write to /etc/resolv.conf or install resolvconf by default14:28
ivokssoren: (if you are still maintaining that code :)14:28
kpettitCrankygeek02: I've used it a bit14:35
uvirtbotNew bug: #626822 in mysql-dfsg-5.1 (main) "mysql 5.1 don't want to shut down properly, crashes upgrades. Besides that, works like charm." [Undecided,New] https://launchpad.net/bugs/62682214:35
Crankygeek02Kpettit: I am having a issue with the setup. I an passing all the config checks. But when I try and load the site, I am getting an error stating that I have npt created the database tables. Click here for setup.14:41
kpettitAh sorry, couldn't help ya there.  You might want to check #egroupware14:42
=== kpettit_ is now known as kpettit
Crankygeek02You can see the error here:  http://www.intellitechgroup.com/egroupware14:52
Crankygeek02Nobody answers in that channel  lol14:52
jMylesI'm trying to forward a port to a specific computer on my network.  If I run iptables -t nat -vnL, it shows some packets (16 of them, seemingly about one for every time I try) but it doesn't seem to do anything.15:09
jMylesMy IPtables rules are here (not forwarding properly): http://pastebin.com/Kb9yCDcD15:20
patdk-wkheh?15:25
jMylespatdk-wk: Is that directed at me?15:25
patdk-wkyep15:25
* patdk-wk wonders where the other half of the problem is15:25
patdk-wklike what are you forwarding? from where? to where?15:25
=== dendrobates is now known as dendro-afk
jMylesAll external requests at port 8000 to a single computer on my network15:26
patdk-wkwell, I don't see any dnat rules, so ya, it shouldn't work15:26
patdk-wkyour nate table is also empty, dunno how nat works15:27
patdk-wknat15:27
jMylespatdk-wk: This can be a learning moment for me - I'm so lost.  I don't know what dnat is.  My nat table has a rule under prerouting: 16   776 DNAT       tcp  --  *      *       0.0.0.0/0            24.39.111.23        tcp dpt:8000 to:10.0.0.88:800015:29
raubvogelFor those of you using rsyslog, how does the /etc/rsyslog.d dir works? I mean, do you start with the 50-default.conf and then add a, say, 55-mine.conf which adds the changes from the default you want to use?15:30
patdk-wkjMyles, your pastbin is missing that15:30
patdk-wkand I cant being to help with inproper info15:30
kpettitAny recommendations for desktop search?  Need to index or be able to search for 500k files.  So I imagine I'll need something that keeps a database index15:31
jMylespatdk-wk: It is on line 18 of my pastebin15:31
jMyleshttp://pastebin.com/657BazSt15:31
jMylespatdk-wk: Oh dear, I posted the wrong pastebin before, sorry.15:32
=== aetaric__ is now known as aetaric
patdk-wkI don't get the forward rule you have15:36
jMylespatdk-wk: I'm not sure I do either - I cloned and modified it.  It it supposed to say "forward all traffic on port 8000 to 10.0.0.88"15:37
=== dendro-afk is now known as dendrobates
patdk-wkactually, it's needed if you don't have a default policy of accept15:37
jMylesSo, since I have a default policy of accept, no forward rule is required?  Only the prerouting?15:38
patdk-wkyep15:38
patdk-wkI dunno why you would run default policy accept on a firewall though15:39
patdk-wkwith internet access15:39
jMylespatdk-wk: Well we're not really terribly in need of a firewall anyway.  All I really want is to be able to easily forward traffic.15:41
uvirtbotNew bug: #626855 in openldap (main) "package slapd 2.4.21-0ubuntu5.3 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/62685515:41
jMylespatdk-wk: I notice that the number of packets for the prerouting and forward rules are > 0 - does this mean they are working-ish?  Also, they are different from each other.  Is this a problem?15:41
patdk-wkthey mean two totally different things15:42
patdk-wkit looks fine to me though15:43
jMylespatdk-wk: OK.  So the traffic is supposedly making it through?15:44
patdk-wkya, as far as I can tell15:44
patdk-wkuse tcpdump15:44
jMylespatdk-wk: What can I do, apart from netstat -ta, which doesn't show me any such traffic, to see what it happening on the computer?15:44
jMylesok, tcpdump15:44
jMyleson the gateway or the endpoint?15:44
patdk-wkheh, everything :)15:44
patdk-wkfirst on your external interface15:44
patdk-wkthen internal interface15:45
patdk-wkthen on 10.0.0.8815:45
binBASHMoin patdk-wk15:46
jMylespatdk-wk: holy heck - it's a jungle!! :-)  Can I grep 8000 and get what I want?15:47
patdk-wksure15:48
ssureshotDoes ubuntu update packages during releases? Ieee... will lucid server ever have a newer version of samba than 3.4.7 ?15:50
ssureshotin it's repositories of course15:50
jMylespatdk-wk: So grepping shows me nothing that I can identify as interesting.  :-\15:50
smoserssureshot, it is not likely15:54
patdk-wktcpdump -ni eth0 port 800015:55
smoserin general, updates for stable releases are governed by the SRU process (https://wiki.ubuntu.com/StableReleaseUpdates)15:55
patdk-wkdid you test it, while you had tcpdump going?15:55
smoserif you want newer packages for a stable release, you the right places i backports https://help.ubuntu.com/community/UbuntuBackports15:55
ssureshotso packages are basically as is then.. I was curious just because I've had such an issue with 9.10 and samba 3.4.0..15:55
* patdk-wk is using samba on karmic and lucid, no issues15:56
ssureshotsamba worked good but the whole point and print issue was horrible15:57
ssureshotthanks for the replies good info15:57
patdk-wkhmm, I use it for printing at home15:57
patdk-wkdunno about point15:58
ssureshotthe whole rpc service was broken in 3.4.0 with point and print ... wasn't fixed untill 3.4.5.. I researched that for a few weeks looking for a resolution ..15:59
smoserssureshot, the other option, if you need something newer or older is to do a rebuild of the source for yourself. you can do this locally, or use PPAs.16:00
smoserie, that would allow you to grab maverick's version and build for lucid, or some other combination16:00
patdk-wkoh heh, strange16:00
patdk-wkrunning lucid, pointnprint works for my wifes win7 laptop16:01
patdk-wkI don't use samba for printing at work, so wouldn't know about more than just that one16:01
ssureshotyup lucid works great :) was fixed16:01
ssureshotI actually pulled samba from the lucid repository16:01
ssureshotto make it work lol16:02
patdk-wkkarmic is almost dead now anyways16:02
jMylespatdk-wk: OK!  So, on 10.0.0.88, I see this stuff whenever I try to hit it on 8000: 11:01:10.731058 IP 10.0.0.197.44208 > 10.0.0.88.8000: Flags [S], seq 4136560425, win 5840, options [mss 1460,sackOK,TS val 30137570 ecr 0,nop,wscale 5], length 016:02
Gzul: yeah, just managed to work out bug 61930216:03
uvirtbotLaunchpad bug 619302 in qemu-kvm "kvm -initrd 'file' dumps core if 'file' does not exist" [Low,New] https://launchpad.net/bugs/61930216:03
ssureshotyeah sure is... I just talked my boss into finally making the jump to 10.4 for Support reasons16:03
patdk-wkjMyles, that sure isn't a firewall or even dnat issue, your accessing it direct16:03
patdk-wksounds like whatever is suppost to be on port 8000 doesn't exist16:03
=== g0rd0n_ is now known as g0rd0n
jMylespatdk-wk: OK, great.  Thank you for your help!! :-)16:04
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
jca1981Need Help :  my upgrade to lucid failed, getting this error when i do a dpkg --configure -a http://pastebin.ubuntu.com/485784/16:32
Jimboohi ppl need little help, i've installed apache2 with php5 via cgi, but from some reason i have when i try phpinfo() i have virtual directory support disabled... could anyone gimme advice where to enable it?....16:34
Gjca1981: by any chance are yuo still in a chroot of some sort?16:43
sorenjca1981: I asked you about this hours ago in #ubuntu-dk :) Are you running in metal?16:47
sorens/in/on/16:47
patdk-wkhmm, the minimalcd's for vmware are nice16:57
kpettitI'm noticing alot of newer versions of stuff I want is in the maverick but not lucid repositories.17:04
kpettitIs there a way I can add packages from that repository without having to upgrade Ubuntu version or downloading packages manually?17:05
patdk-wkuprade to maverick :)17:05
guntbert!latest | kpettit17:05
ubottukpettit: Packages in Ubuntu may not be the latest. Ubuntu aims for stability, "latest" may not be a good idea. Post-release updates are only considered if they are: fixes for security vulnerabilities, high impact bug fixes, or unintrusive bug fixes with substantial benefit. See also !backports.17:05
patdk-wkissues normal come into the dependencies17:05
guntbertpatdk-wk: thats not really good advice17:05
kpettityeah I got that.  There is just a couple apps that I needed.17:05
patdk-wkgnuyoga, dunno, I have been running maverick since the repository was created17:06
patdk-wkit's been ok for me17:06
kpettitusually I can find ppa repositories, but sometimes not.  Usually end up doing alot of googling17:06
kpettitpatdk-wk, is your system lucid or maverick?17:07
patdk-wkboth17:07
patdk-wkI have like 10 hoardy systems, probably 15 lucid, and 2 maverick17:08
kpettitah ok, cool thanks.17:08
Picihoary or hardy?17:08
patdk-wkhardy? 8.0417:09
patdk-wkthe last of my xen systems17:09
jMylesSo, it appears pretty clear that packets are getting into my network to the forwarded computer, but they don't seem to be getting back out?  The computer in question sees the packets, but doesn't seem to issue a response.17:16
SpamapSjMyles: would you mind restating your question, I don't see it in the backscroll...17:17
jMylesSpamapS: I am trying to set up a (temporary) web server on a computer inside my network.  I'm trying to forward some port (any port, really, but 8000 for now) to that computer.  With a lot of awesome help from patdk-wk, I have determined that packets are now making it into that computer.  However, the connection is timing out.  http://pastebin.com/657BazSt17:18
SpamapSjMyles: does the web server have a firewall configured?17:19
jMylesSpamapS: Well, I ran tcpdump and verified that packets were incoming.  I even installed firestarter (which I think we're all lukewarm about) and watched as the packets came in and were blocked, and then enabled service for port 8000.17:21
jMylesSpamapS: I still get messages like this (both input and output, input shown here): Input Dropped: IN=eth1 OUT= MAC=00:40:f4:58:73:8b:00:16:cb:9d:8b:da:08:00 SRC=10.0.0.88 DST=10.0.0.46 LEN=52 TOS=0x10 PREC=0x00 TTL=64 ID=16170 DF PROTO=TCP SPT=36693 DPT=22 WINDOW=1879 RES=0x00 ACK URGP=017:22
jMylesSpamapS: That's on the server.17:22
patdk-wkthat message is so unrelated, it's about port 22, not port 800017:24
ChmEarlmaverick daily build CD is now i386 only. No amd64 for 2 days17:25
jMylesAhh, DPT.  I just learned something.17:25
SpamapSjMyles: DPT=22 means ssh17:25
* SpamapS expresses his lag shame17:25
jMylespatdk-wk and I determined that the packets were getting here, on time and in good shape, but it just doesn't work the same as it does if I access it from another computer on the network.  It's stone dead.17:32
patdk-wkas far as I know, he has no service on port 800017:36
patdk-wkor, some firewall on it is blocking the replies17:36
ScottKChmEarl: We're in beta freeze so rebuilds are done as needed, not daily.17:36
ChmEarlty- i386 worked well17:37
jMylespatdk-wk: Well I am watching the console on port 8000 (a django server / debugger - again super temporary) and it is doing nothing.17:38
=== ivoks is now known as ivoks_dinner
=== luis__lopez is now known as luis_lopez
SpamapSjMyles: you may be running into "the NAT problem" if you're trying to access the external IP from a machine inside the same LAN as the web server.17:49
patdk-wkna, his tests where internal on local lan17:50
patdk-wkand his nat rules are good17:50
SpamapSis there a SNAT rule for  -s $SOURCE_NETWORK -d $EXTERNAL_IP -j SNAT --from $EXTERNAL_IP ?17:50
smoserhallyn, where do you do development of qemu-kvm ?17:57
smoserie, if i want to propose a change, where should i grab source from ?17:57
cemchey guys. in ubuntu 10.04 is there some framework to manage a bunch of servers at once? for example I want to run a certain command or sequence of commands on say 30 servers, not necessarily with cssh. something like: put scripts somewhere, upload script with rsync, run script on servers, get result in mail or something18:07
zulcemc: puppet18:09
cemczul: thanks, I'll take a look18:13
hallynsmoser: you mean upstream?  git://git.kernel.org/pub/scm/virt/kvm/qemu-kvm.git18:17
hallynsmoser: our tree is at lp:ubuntu/qemu-kvm18:17
smoserhallyn, thats what i wanted, i guess. I was wondering if you had a middle resting place for development of the packaged versions.18:18
smoserie, like the eucalyptus branch at https://code.launchpad.net/~ubuntu-virt18:19
smoseranyway.18:19
smosernext question:  are you expecting a new version of qemu-kvm for maverick ? hallyn18:20
smoseri'm asking because if you are, then likely bug 619302 will be fixed magically. but if not, we should get a fix for it (and someone has attached patch to bug).18:21
uvirtbotLaunchpad bug 619302 in qemu-kvm "kvm -initrd 'file' dumps core if 'file' does not exist" [Low,New] https://launchpad.net/bugs/61930218:21
cemczul: how well is this puppet integrated in ubuntu? like... does it work? :)18:27
zulcemc: yes it does afaik18:27
SpamapScemc: puppet is awesome, and works great on ubuntu.18:32
cemcSpamapS: the one in lucid too? 0.25.4 ?18:33
yann2cemc, works, but client daemon leaks a lot.18:36
yann2better run puppet-run than puppetd18:36
yann2not sure about lucid though, am mostly using 8.4 - 9.418:38
hallynsmoser: hm, i wasn't planning on a new version, but it's not out of the question18:39
smoserby new version i meant new upstream qemu-kvm version18:39
smoserie, 0.1318:39
hallynright, but that's not out yet?18:39
hallyn(or is it?)18:39
smoserok. just seeinf if we were meaning the same thing.18:39
smoseryou're much more aware of when it is due and such.18:40
hallyn0.12.5 is still the lastest unfort18:40
hallyn(just pulled and checked tags)18:40
smoserok. then you should probably pull that patch.18:40
smoserif you'd like I can push a branch and request a merge.18:40
smoser(the patch is both trivial and upstream)18:40
hallynsmoser: looks fine to me18:41
smoserso nothing required from me ?18:42
hallynsmoser: since i don't have upload rights yet anyway, i'd say just subscribe whatever team does the FFEs to the bug...18:42
smoserwell, thats not a FFE18:42
hallynoh, true18:43
smoserjust normal sponsorship18:43
hallynthat's the part i still have the hardest time with.  (gotta find how to do a sru for lxc for lucid too)18:44
hallynsmoser: all right i'll create a bzr branch and propose it for merging, thx18:44
smoseris Daviey around ?18:45
smoserhallyn, well, really, you need to get PPU for qemu-kvm and lxc.18:45
smoserhallyn, i might suggest you put a "staging" branch in the ~ubuntu-virt team18:46
smoserfor qemu-kvm18:46
smoserthen you (and I and others) can push things there, and then when you request kirkland or someone to pull, they just build that.18:46
smoserthat is what Daviey is doing foe ucalyptus and it seems to work well18:47
hallyndo i have write access to ~ubuntu-virt?18:47
smoseri think so, i thought i'd seen you push to the ppa18:49
=== dendrobates is now known as dendro-afk
hallynsmoser: i might do that then i guess18:51
=== dendro-afk is now known as dendrobates
=== ivoks_dinner is now known as ivoks
tynothelp! can't get ubuntu 10.04.1 to save dns settings. just trying to use google's public dns server 8.8.8.8, but it keeps defaulting to the local router which is not running dns.19:12
delimitertry removing the resolvconf package19:12
tynotdelimiter, where does it resolve to after resolvconf's been removed?19:13
delimiteryou'll need to fix /etc/resolv.conf one more time after removing it19:14
delimiterto point at 8.8.8.819:14
tynotso, save 8.8.8.8 and then remove the package?19:14
Picierr. A better way would be to modify your /etc/dhcp3/dhclient.conf file19:15
delimiterother way around19:16
tynotd'oh!19:16
tynotpici, does modifying dhclient.conf hold settings better?19:17
delimiterto each his own, I personally think having resolvconf running on a server a dumb idea19:17
Picidelimiter: Its a dependency of postfix19:17
tynotI just need a working dns to download packages.19:17
delimiterno, it's only suggested by postfix19:18
tynotat the moment, we're pulling from isp's.19:18
Picioh, rdepends didn't specify :(19:18
Picitynot: Modify/edit the prepend domain-name-servers line in that file so whenever you get a new dhcp address it'll use the thing you specified there instead.19:18
tynoti have a static local ip19:19
tynotc class19:19
Picioh. Then delimiter's suggestion is probably better.19:19
PiciOdd.19:19
tynotnot so for our purposes19:19
tynotso.... change the nameserver line from 192.168.1.1 to 8.8.8.8, for instance... remove resolvconf then we're good to go?19:21
delimitertynot: yes19:22
tynotwould you mind giving me the syntax to remove resolvconf package?19:22
ScottKttx: http://launchpadlibrarian.net/54104562/buildlog_ubuntu-maverick-i386.cobertura-maven-plugin_2.3%2Bdfsg-1_FAILEDTOBUILD.txt.gz looks like it needs someone who understands a bit about maven to resolve, but would be a good FTBFS for someone to fix (would also solve some depwait too)19:24
tynotwould you mind providing the syntax to remove resolvconf package?19:25
tynot#delimiter the command to remove resolvconf?19:27
RoyKapt-get remove --purge resolvconf19:27
RoyK--purge is optional, though19:27
tynotwill try, RoyK, thx.19:28
=== dendrobates is now known as dendro-afk
tynotdelimiter, Got "Package resolvconf is not installed, so not removed" Hmm.19:33
delimitertynot: strange19:34
tynotvery.19:34
lamontdelimiter: I agree with you that resolvconf makes no sense on a server... that's why postfix only suggests it19:34
delimiterwhat else would overwrite /etc/resolv.conf ?19:35
tynotbut, it defaults back to the local router, 192.168.1.1, when we reboot.19:35
delimiteris dhclient running?19:35
tynotshouldn't be. how do I check? The local IP was set to static 192.168.1.111.19:36
=== xfaf is now known as zul
RoyKdelimiter: you _are_ running ubuntu server, not desktop?19:36
delimiterps -ax | grep dhclient19:37
RoyKdelimiter: is there a dns server set in /etc/network/interfaces?19:38
delimiterRoyK: fyi It's tynot who is in need of help not me :)19:38
* RoyK slaps RoyK 19:39
RoyKtynot: see question above :)19:39
tynotok, delimiter, what are we looking for in the output to the screen? it says eth4.leases eth4. not sure what to make of that. no ip addresses. OK, RoyK, I'll check.19:41
tynotRoyK, no apparent DNS in etc/network/interfaces.19:42
=== aetaric_ is now known as aetaric
tynotroyK?19:44
delimitertynot: sounds like you still have a dhclient process around, which could be a problem as it might be overwriting your resolv.conf. Suggest to kill it or reboot to start fresh19:44
=== dendro-afk is now known as dendrobates
RoyKtynot: killall dhclient19:45
RoyKand dpkg -l | grep dhcl19:45
tynotk19:45
tynotno dhclient found19:46
tynotno dhclient process found19:46
RoyKok, after killing dhclient, try rebooting if convenient19:46
tynotsure19:46
tynoth/o19:47
tynotrebooted. now what?19:49
RoyKcheck /etc/resolv.conf19:49
tynotback to local router ip 192.168.1.119:50
tynotI did write out 8.8.8.8 in nano. went back to check b4 rebooted. hmm.19:50
tynotit's been years since I admin'd a linux box. is there an ipconfig equivalent in linux?19:52
tynotanyone?19:54
tynotbuehler?19:54
smoser(it may be the case that no one knows what 'ipconfig' is)19:54
tynotno prob19:54
tynotit's been a while for me, so this seems foreign again.19:55
keeszul: hey, just wanted to point out nagios-plugins 1.4.14-5ubuntu3; looks like hardening-wrapper got missed in the latest merge. I've fixed it, though.19:55
tynotcannot figure why the /etc/resolv.conf file is being overwitten.19:56
zulkees: oh...odd thanks19:56
tynotdelimiter? RoyK? still around? sounds like dhcp is running, but is not showing in processes.19:58
RoyKtynot: grep -r resolv.conf /etc20:03
RoyKperhaps you can find something from that20:03
tynotk20:03
tynotbrb20:03
MTecknology!lts20:04
ubottuLTS means Long Term Support. LTS versions of Ubuntu will be supported for 3 years on the desktop, and 5 years on the server. The current LTS version of Ubuntu is !Lucid (Lucid Lynx 10.04)20:04
tynotok. I get: Restart nscd becasue resolv.conf has changed, although I'm not sure what we're looking for specifically. sorry.20:06
tynotone line reads: in an old resolv.conf file exists, restore it20:08
tynotoops, that's "IF and old resolv.conf file exists, restore it"20:08
tynotbye20:12
smoserjjohansen, ping20:37
dominicdinadaNeed some advice I accidentally knocked the server offline by doing a port scan. if the server is set to rate limit drop if a threshold is reached usually after XXX amount of time it will resume connectivity  ?20:44
dominicdinada!ratelimit20:44
patdk-wkno idea, depends on how you configure it20:46
dominicdinadawell i guess where would i look. in the logs it says syn flood detected. DROP packets... and the rules are set to drop packets if xxxx /min is reached but no where does it say to ban the computer from network20:47
uvirtbotNew bug: #627032 in openldap (main) "package slapd 2.4.23-0ubuntu3 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/62703220:51
tacomasteri was wondering will ubuntu server support being an update server for other os's?20:57
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
dominicdinadastill blocking me and i dont see any rules blocking me21:10
dominicdinadajust a standard rate limit to drop flood packets but doesnt it lift21:10
tynothave dns resloved now, but can't seem to pull down packages. advice?21:14
tynotbrb21:15
smoserwhat errors do you get  when you try to "pull down packages"21:16
tynotback21:26
uvirtbotNew bug: #625005 in krb5 (main) "package libkadm5clnt6 1.7dfsg~beta3-1ubuntu0.6 failed to install/upgrade: subprocess installed post-installation script returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/62500521:26
bdmurrayzul: could you be a bit more verbose in stuff like bug 626416?21:27
uvirtbotLaunchpad bug 626416 in ubuntu "package openbsd-inetd 0.20080125-4ubuntu2 failed to install/upgrade: sub-processo novo script pre-installation retornou estado de saída de erro 2" [Undecided,New] https://launchpad.net/bugs/62641621:27
tynotsmoser, for instance, getting "Couldn't find package <whatever>"21:27
uvirtbotNew bug: #622502 in postfix (main) "package postfix 2.7.0-1 failed to install/upgrade: el subproceso script post-installation instalado devolvió el código de salida de error 75" [Undecided,New] https://launchpad.net/bugs/62250221:28
smosertynot, hm.. you may need to 'sudo apt-get update' first21:28
uvirtbotNew bug: #619728 in samba (main) "package samba 2:3.4.7~dfsg-1ubuntu3.1 failed to install/upgrade: corrupted filesystem tarfile - corrupted package archive" [Undecided,New] https://launchpad.net/bugs/61972821:29
uvirtbotNew bug: #620445 in samba (main) "package samba-common 2:3.4.7~dfsg-1ubuntu3.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/62044521:29
tynotthink I've tried that, smoser, but what the hell. give it another shot.21:29
smoserwell, what does it say when you try it ?21:29
tynotsmoser, THAT worked. however, I've been trying to pull down an Xwindow client, ala kubuntu-desktop, for days and get the previously-mentioned error.21:32
smosertynot, so you're doin gtha thow ? 'apt-get install kubuntu-desktop' ?21:33
tynotWow! the update worked! Woo and hoo!21:34
tynotyeah, smoser, it's pulling down and installing? kubuntu desktop. how does one run it when it's through? startx?21:35
smoserif you get kubuntu-desktop (this is obviously not '#ubuntu-server' related)  then you i think a reboot will get you a kdm login prompt.21:36
smosernot certain, but i think21:36
tynotsmoser, as no one's on it yet, it's worth a try.21:37
tynotto anyone, really. Is there an easy-to-use x-window or mac desktop shell for a remote MacBook Pro?21:38
aetarictynot: you can use ssh... but OS X doesn't use X11 unless you install it. and even then...MOST apps don't use it21:41
tynotaetaric, so other than, like, vnc, ssh would give a MacBook Pro user an X11 view of the server?21:43
aljosai'm trying to use eucalyptus on my workstation, having problems with running an instance - http://dpaste.com/236432/ - any ideas why?21:45
aetaricno. you can use ssh to view VNC securely21:45
aetaricVNC is the only way to see the actual desktop21:46
smoseraljosa, well, you have no nodes registered.21:46
smoser$ sudo euca_conf --list-nodes21:46
tynotaetaric, thanks, man. so, once kubuntu-desktop is done installing, it should boot to a gui login, correct? from there, I think I can handle setting up vnc myself.21:47
aljosasmoser: "euca_conf --discover-nodes" doesn't find anything although i have eucalyptus-nc running. any idea what can i do?21:48
aetarictynot: yeah... are you installing kubuntu on you macbook pro?21:48
smoseraljosa, you can register it by hand21:49
tynotaetaric, ha!! GOD, NO!!! xD we're installing it on an Ubuntu server 10.04.1.21:49
=== jeff_ is now known as Guest47303
LichteI just installed mysql-server and I can't get logged in as root on either localhost or from another computer21:49
Lichtewhat do I have to do to get logged in21:50
aetarictynot: oh...i was about to say.... that seems a bit daft.21:50
Lichte?21:50
smoseraljosa, sudo euca_conf --register-nodes21:50
tynotaetaric, just to confirm, it looks like the get/install of kubuntu desktop worked. Once rebooted, it should now come up in a gui, correct?21:51
Krenarihello guys21:51
aetarictynot: yeah21:51
tynotaetaric, coolness. thx, man. cheers!21:52
aetarictynot: and OS Xhas both a built in VNC server and client21:52
tynotit does?21:52
tynothow? where?21:52
Krenarii need a tutorial have to configure and secure ubuntu server like a web server21:52
tynothow does one launch it?21:53
aljosasmoser: http://dpaste.com/236438/ - i've tried but nothing changed, any ideas?21:53
Krenarican anyone help me pls, i really need very good security configuration!21:53
DrNick_hi.  have just upgraded a server to 10.4, since then it refuses to recognise the printer attached to the parallel port.  /dev/lp0 isn't created upon boot.  the lp module is loading, with the message "lp: driver loaded but not devices found".  have tried switching parallel port modes in the bios with no luck.  worked ok before the upgrade21:53
DrNick_reloading the lp module presents the same message btw.  any ideas anyone?21:53
smoseraljosa, this is lucid ?21:53
aljosasmoser: yes21:54
aetarictynot: System prefs > sharing > screen sharing21:54
Krenarican anyone help me pls21:55
smoseraljosa, unfortunately at this point all i can suggest is restarting things.21:55
DrNick_Krenari: try refering to the documentation on the website as a starting point21:55
smosersudo restart eucalyptus CLEAN=121:55
aljosasmoser: ok, thanks21:55
smoserand on the node: sudo restart eucalyptus-nc CLEAN=121:55
smosernot that that is the right solution, or you couldn't figure it out, but that is what i would try at the moment.21:55
KrenariDrNick_, i am very my with opensource platform can u guide me a little bit more ?21:56
tynotaetaric, oh, I don't want to share MY MacBook's screen, I want to view the server's screen from my MacBook Pro. Still work the same, different IP addresses?21:56
LichteWhy am I getting: ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES), even after I set a password during the installation of mysql-server ???21:57
aetarictynot: yeah... there is a client, just not sure where it is21:57
tynotaetaric, "Remote Management"?21:57
aetarictynot: pretty sure you see it when you click on the computer in the "Shared" area on the left of the finder window21:58
tynotaetaric, thx. I'll look into it. appreciate the help. cheers!21:59
DrNick_at the moment i'm considering looking out for a 2nd hand parallel port print server to just network the printer, although if i could get it working connected to the lp port again that would be great22:00
LichteWhy am I getting: ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES), even after I set a password during the installation of mysql-server ???22:04
LichteWhy am I getting: ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES), even after I set a password during the installation of mysql-server ???22:18
dominicdinada!cron22:27
ubottucron is a way to schedule execution of software/scripts. See https://help.ubuntu.com/community/CronHowto  -  There is also a decent Howto at http://www.tech-geeks.org/contrib/mdrone/cron&crontab-howto.htm22:27
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
thesheff17I'm trying to run virt-migrate with virsh migrate --live vm029 qemu+ssh://192.168.1.5/system...I see this on the debug mode on the source virtual machine msg=operation failed: migration to 'tcp:vmserver05:49155' failed: migration failed.  Any ideas?22:37
ChmEarlthesheff17, you have ssh keys/passwordless setup for root?22:39
thesheff17ChmEarl: yes22:39
thesheff17ChmEarl: from source to dest...do I need dest -> source?22:40
ChmEarlthesheff17, another sanity check is remote use of VirtManager22:40
uvirtbotNew bug: #627097 in dovecot (main) "dovecot crashes on sieve login" [Undecided,New] https://launchpad.net/bugs/62709722:42
thesheff17ChmEarl: I think I got it to work...I think it was complaining about DNS stuff. I hard coded vmserver05 in the host file of the source virtual machine server22:43
LichteWhy am I getting: ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES), even after I set a password during the installation of mysql-server ???22:45
thesheff17!ask22:46
ubottuPlease don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-)22:46
thesheff17Lichte: try sudo /etc/init.d/mysql reset-password and make sure you are using the right password and using mysql -u root -p to connect.22:47
Lichtethesheff17: that didn't work22:47
thesheff17Lichte: http://ubuntu.flowconsult.at/en/mysql-set-change-reset-root-password/22:48
thesheff17Lichte: it used to in ubuntu 9.10 and before22:49
delimiterDoes anyone think ondemand (cpu frequency scaling) is good for a server? I'm wondering if it could sap performance in any way22:53
cloakableI don't think so, but there may be use cases where it would affect things.22:54
qman__if you are using virtualization, CPU scaling can affect the RTC of the VMs23:00
qman__that's the only real issue I've ever noticed with them, powernowd specifically23:00
qman__performance in general is not a problem, just sometimes side effects like that show through23:01
yann2is there any other way where to put known hosts than $HOME/.ssh/known_hosts ? I'd like to deploy it automatically and prevent a user from modifying it23:29
yann2oh found it /etc/ssh_known_hosts2 , sorry23:30
yann2mmh doesnt seem to work :(23:34
Tim_Ras anybody installed any server versions onto a flash drive before?23:43

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!