=== sailerboy is now known as zz_sailerboy === dendro-afk is now known as dendrobates === zz_sailerboy is now known as sailerboy === dendrobates is now known as dendro-afk === sailerboy is now known as zz_sailerboy [01:36] How are we supposed to get sun-java6-jre on 10.04? === Guest22179 is now known as AdamDV [02:53] test === cameron is now known as ftcameron [03:22] gday .. I'm sorry to ask this, but I've been searching for ages now to get networking running ... 10.04 standard kvm. tun is 666 and I'm in libvirtd,kvm groups. error is failed to add tap interface to brudge... [03:23] brctl addif virbr0 tap0 -> interface tap0 does not exist! [03:26] So.. I thought I was using ecruptfs- now I'm not sure. Is there any really really easy to to tell if I am or am not using it? [03:26] I looked in mount and didn't see .Private mounted which is what's making me second guess this === zz_sailerboy is now known as sailerboy === sailerboy is now known as zz_sailerboy [04:03] ok so i'd like to visualize free hard disk space on my server - is there a PHP gui or some such thing i can use on my server? file light is cool... i guess i could forward it over X... [04:18] How do I prevent a package from being upgraded in ubuntu? [04:19] SJr, let me google that for you.... http://www.ubuntugeek.com/how-to-prevent-a-package-from-being-updated-in-ubuntu.html [04:20] thanks you saved me the trouble of having to google it myself [04:20] SJr: you set in /etc/apt/apt.conf.d/50unattended-upgrades [04:20] Unattended-Upgrade::Package-Blacklist { [04:20] astm, that only works for automatic updates... [04:23] SJr: Why do you think you want to stop a package upgrade? [04:23] Because the update version is the devil [04:23] lol [04:23] settle down there mrs. palin... [04:23] SJr: If there's a broken update, we should address the problem. What package and what update and why? [04:23] autofs is broken in Ubuntu 10.04, after months of trying to fix it, and live without it, I came accross the idea of simply using the one from 9.10, and that worked, except I just found out that it got upgraded. [04:25] I can't find a good link but there are a bunch of bug reports out there for this already === unreal_ is now known as unreal === _TechAway_ is now known as _Techie_ === _Techie_ is now known as _TechAway_ === _TechAway_ is now known as _Techie_ [06:43] anybody know if there is a postgresql-9 ppa for ubuntu ? [06:44] ...have you checked their project home page? === nxvl_ is now known as nxvl [08:05] SpamapS: hey, around? === Qwert is now known as Aqaz [08:44] What is LVM? [08:44] !lvm [08:44] Tips and tricks for RAID and LVM can be found on https://help.ubuntu.com/community/Installation/SoftwareRAID and http://www.tldp.org/HOWTO/LVM-HOWTO - For software RAID, see https://help.ubuntu.com/community/FakeRaidHowto [08:45] oh [08:45] so I don't need it for a home server [08:59] Will I be able to select what I want during setup , or will it be like the desktop edition and just install stuff at random [09:16] Name141: i think the server setup runs tasksel during installation [09:18] mgolisch: yeah I (tried) to select samba server [09:18] and then let it go [09:19] hopefully it'll be more compact [09:21] hi .. may i know what the differ between root device : instance vs ebs ? [09:27] how do I force acpi again ? [09:27] I have to edit grub2 right? === bigjools is now known as bigjools-afk === maedox is now known as maedox|afk [10:40] i am stuck on user permissions: can you create a user that cannot browser your config files (/etc/apache2/sites-available for example) [10:41] or am i not thinking straight here? running php with fcgid and suexec and open_dir('/') just worries me [10:46] anyone can help me on user permissions? [10:54] does anyone see my chat? (had before that webchat from me was not visible) [11:07] hi, can anyone see me? (webchat failed 10 mins ago) [11:09] zaas, o/ [11:10] nice. so i have a question about user permissions. I run apache, suxexec, fcgid and php and i don't like that open_dir('/') works fine... am i missing something? === ivoks-afk is now known as ivoks [11:15] or more general: can you prevent users to list directories? === Qwert is now known as Aqaz === Aqaz is now known as Qwert [11:31] zaas: in general yes, make sure that the user/group don't have read or execute rights on the directory [11:31] zaas: in your special case open_basedir restrictions in PHP might do the trick === Qwert is now known as yuio === maedox|afk is now known as maedox [11:41] joschi: but there must be a reason that /etc/apache/sites-available/ has r on user, group and world? figuring out wether openbase_dir is considered safe, read something about that not being true [11:41] can't chmod my whole server :) [11:42] in sftp mode it was quite easy [11:42] zaas: why shouldn't /etc/apache/sites-available/ be world readable? [11:42] you can read its config? [11:42] zaas: what? [11:43] well, is it not bad that any user on the system sees how my virtual hosts are configured? [11:43] zaas: that depends on your users. you can change the permissions if you need to. [11:44] zaas: if you want it really secure, don't give anyone an interactive shell and remove PHP or any other dynamic scripting languages from your webserver [11:44] haha :) [11:44] the shell is not so hard [11:45] and exec and some other commands are easy to disable in php.ini, but the fact they can list and read stuff outside /var/www/user/public just bugs me [11:45] can you change those permissions on user-level? [11:45] zaas: I already told you to set open_basedir accordingly [11:46] i know, and i responded to that as well: heard some rumors of it not being safe [11:46] zaas: of course you could always put the php processes inside a chroot environment. but that's a lot of management overhead [11:46] zaas: well, if you don't like it, don't use it. [11:47] i would like it a lot, if it works of course. you rely on it? [11:47] just wondering how veteran ubuntu server maintainers deal with these kind of things [11:47] zaas: yes, but not exclusivly [11:47] semi-new to it all [11:48] what other measures have you taken then in your PHP environment? [11:49] zaas: proper permissions, SuExec/SuPHP and for "special guests" chrooted php processes [11:49] zaas: plus a sensible AppArmor configuration [11:49] zaas: or grSecurity/RBAC on other systems (!= ubuntu) [11:50] just ubuntu. Boy, it's no walk in the park to manage a server :) fun though. Does ubuntu come with apparmor configured sensible? [11:51] zaas: not for all applications [11:51] zaas: and it depends a lot on your setup [11:51] i have done a apt-get only [11:52] nothing preinstalled but ssh [11:52] just apache, ruby, php and mysql [12:00] but did you change persmissions on your sever config folders like apache? [12:02] hey .... [12:02] i have a problem with my ubuntu server installation, i try to install 10.04 on a ibm server with hardware raid5 on a 2.5 tb volume, after a successful installation, my server don´t find any bootloader. hope for help [12:03] <\sh> Tomash: gpt partition table? [12:04] \sh : yes ...becaus >2tb [12:04] <\sh> Tomash: imho grub can't boot from gpt tables...but there should be a new gpt partition table label, named gpt-bios [12:05] \sh : yes, right ... this is already there [12:06] <\sh> ok..then I don't know...I just have always a system partition with msdos label for the system to boot, and the storage device is mostly gpt with partitions > 2TB [12:08] \sh : ok , then I ll try this ... thx === BlackZ_ is now known as BlackZ [12:47] \sh : how I change in the installer the label to msdos ? === _Techie_ is now known as _TechAway_ [12:49] hi guys. How can you install sun-java6-jdk on ubuntu-server from a command line, and automatically accept the licence agreement, without user interaction? [12:50] <\sh> progre55: via preseeding and these settings: http://paste.ubuntu.com/496972/ === rgreening_ is now known as rgreening [12:50] <\sh> Tomash: I never did that via installer, I'm deploying via FAI... [12:50] <\sh> Tomash: eventually you need to trigger "parted" manually from the CLI [12:51] \sh : i ve no parted and mklabel in the installation process :( .... [12:52] \sh : i ll think, first install the system, then change the label and try a new installation [12:52] has anyone ever heard of the root account expiring? :) [12:52] i'm seeing this on a hardy server [12:52] pam_unix(cron:account): account root has expired (account expired) [12:53] <\sh> Tomash: oh well...what about totally recreating your partition layout? it should automatically detect the right label...sorry...I'm long gone to deploy any server manually with big storages, only doing that automatically [12:54] <\sh> pmatulis: On hardy I don't have any root password which could expire ;) [12:54] \sh : no, the server set automatically an gpt label [12:54] \sh: thanks. and what's preceeding? [12:54] \sh: it's not the password, it's the account [12:55] <\sh> Tomash: yes, when you created a partition first with >2TB, yes...you need to get rid of the partition layout first...could you make 2 volumes on your raid device, one less 2TB for system, and the other one with the >2TB part? [12:56] <\sh> progre55: man debconf-set-selections.... there you have a manual about preseeding..the license agreement is a debconf questions, which can be preseeded [12:57] \sh : ok, thx, then i try this [12:57] <\sh> pmatulis: I never heard about "account expiring" but "password expire" (man password /-e) [12:59] <\sh> pmatulis: oh, i never tried usermod --expiredate on a root account, eventually someone tried that ? ;) [12:59] \sh: i saw that as well but i'm looking for a cause right now [13:00] <\sh> pmatulis: "usermod --expiredate 1 root" ? I don't know if that will ever work, but that could be a cause [13:00] \sh: thanks, appreciate [13:20] \sh: another question, please. As far as I got it, you can just put those settings in a file (e.g. java_license), and before you "apt-get install" java, you say "sudo debconf-set-selections java_license", right? [13:32] i'm trying to install slapd in ubuntu 10.04 server.. but i can't find slapd.conf [13:34] ztripez: there is none [13:35] pmatulis, oh? [13:35] i guess https://help.ubuntu.com/community/OpenLDAPServer is out of date then.. [13:36] ztripez: did you read the first few paragraphs? [13:37] pmatulis, uhm no.. did i miss something? [13:38] ztripez: yes. please read [13:39] ztripez: since Oct 2008 ubuntu does not use slapd.conf. now using so-called 'cn=config' configuration method [13:40] pmatulis, oh.. i miss that part yes ;) [13:40] ztripez: so ldap configuration is in ldap itself. changes are immediate, no need to restart, blah blah blah [13:41] pmatulis, i see [13:41] ztripez: https://help.ubuntu.com/10.04/serverguide/C/index.html [13:42] pmatulis, thanks [13:45] ztripez: yw [13:46] New bug: #643477 in nmap (main) "package nmap 5.00-3 failed to install/upgrade: Package is in a very bad inconsistent state - you should reinstall it before attempting a removal." [Undecided,New] https://launchpad.net/bugs/643477 [13:49] Hello. Can someone point me to a tutiorial that will allow me to have vnc4server start automatically after a reboot? I'm running Ubuntu Server 10.4 without a desktop enviroment. [13:49] Everything I find is old. [14:05] <\sh> progre55: yes that's the thing to do [14:05] <\sh> progre55: sorry...had a meeting [14:06] \sh: thanks man, truly appreciate ) === dendro-afk is now known as dendrobates === ivoks is now known as ivoks-brb [14:48] do you know if with php-cgi (mod_fcgid) and suxexec you can parse a second php.ini and also use /etc/php/cgi/php.ini? [14:48] (not using php) [14:48] can you do this in a vhost? [14:51] New bug: #643531 in samba (main) "package winbind 2:3.4.0-3ubuntu5.6 failed to install/upgrade: subprocess new pre-removal script returned error exit status 137" [Undecided,New] https://launchpad.net/bugs/643531 [14:55] I have a *NEW* question: does the server install force you to install all the files included on the cd? Or does it install a minimal base system + optional packages? [14:56] are there any problems with putting a normal user in the www-data group [14:56] peaces: no there is not [14:56] *are not [14:56] Right now I'm debootstrapping a bare bones system onto a hard drive and finishing the "installation" with a chroot [14:56] which is less than optimal [14:57] duaneb: it does install only the needed things, the others are optional [14:57] any chance there's a list somewhere of what is installed with zero extra packages? [14:57] or at least how large the base system is? [14:58] duaneb: if you use the alternate cd you can install only the base system, whitout any optional [14:59] hrm [14:59] interesting [14:59] that's the ncurses interface? [15:00] I mean, I am interested in running server software, so the ubuntu server image is useful [15:00] I'm just wary of installing it with my limited space [15:01] New bug: #642932 in mysql-5.1 (main) "mysqld crashed with SIGSEGV" [Low,Incomplete] https://launchpad.net/bugs/642932 [15:05] does/can a system-wide ssh authorized_keys file exist? [15:08] i want all the crap that runs on startup, like bluetooth which i dont need [15:08] to stop loading modules [15:10] bug 5608 <- can't we fix it? Seems only a change on permissions would do the trick [15:10] Launchpad bug 5608 in samba "SWAT expects to authenticate as root" [Unknown,Confirmed] https://launchpad.net/bugs/5608 [15:23] Hello. Can someone point me to a tutiorial that will allow me to have vnc4server start automatically after a reboot? I'm running Ubuntu Server 10.4 without a desktop enviroment. [15:26] ehcah, without a DE...? so what does vnc do for you? [15:27] I just want to be able to get to the terminal. [15:27] ssh :D [15:27] or basic x in environment. [15:27] much much easier & more secure. [15:27] I want to do this from my LAN though. [15:27] well if you don't have any DE, what does X do for you? you can just forward any X apps over ssh as well. [15:28] doesn't matter [15:28] ok. [15:28] i ssh on my lan every day. [15:28] if you have a DE, using vnc makes sense [15:28] The other option is to manage through webmin? [15:28] without one... it really doesn't to be honest. [15:28] i thought you wanted the terminal... [15:28] I do. [15:28] i use webmin as well tho [15:28] hi, my apache 2.2.14 has exploded on ubuntu 10.04 . this is the answer to a restart : /usr/sbin/apache2: symbol lookup error: /usr/sbin/apache2: undefined symbol: apr_atomic_xchgptr [15:28] so you can manage thru the terminal or webmin. i wouldn't do updates or installs thru webmin tho. [15:29] i've been googling arround and looks like there is no fix yet. [15:29] Webmin updates are horrible. [15:29] too slow or times out. [15:29] ehcah, yes so just do updates thru aptitude or apt-get via ssh ;) [15:29] so, how I can go back on the package versión ? by command line if possible. [15:29] Ok. [15:29] permalac_, so you compiled apache yourself? [15:29] I started out with Fedora 12 and a product called Amahi. [15:29] ehcah, amahi's cool. [15:29] Yep. [15:29] if that's what you need haha [15:30] I think I can replicate it with Ubuntu [15:30] ? [15:30] i just want a few pieces of it [15:30] oh yea [15:30] i have [15:30] arrrghhh: nope, just updated, and installed munin-node [15:30] some parts are harder than others i would imagine [15:30] permalac_, so you think munin-node did it...? i'm not sure what that is. i run apache, but am by no means an expert on it. [15:30] I'm very new to linux. I got comfortable with Ubuntu and F12 started to mess me up. [15:30] lol [15:31] I knwo they're close, but... [15:31] yea, fedora is a little odd [15:31] I also have xbmc live on a few pc's and ubuntu DE + xbmc in my theatre room. [15:31] there's a lot of differences. granted it's all the linux kernel... but a lot of the userland stuff is different, which is to be expected. [15:31] I was starting to confuse the OS's. [15:31] arrrghhh: no, I don't think so, now it's not activated on the sites, and still does not work. I just though that if I want help I must give all the information. that's all [15:31] but yea if you don't have a DE, just use ssh. [15:31] k. [15:32] ssh will also allow me to remote in over the web as well I beleive? [15:32] permalac_, huh... well i'm not sure and i'm late for work :P just copyin stuff over to my phone before i leave. [15:32] ehcah, if you open up the ports [15:32] i forward ssh to an odd port above 1024 [15:32] arrrghhh: any suggestion? fast fast. :) [15:32] if you forward 22 over the internet, you're just asking people to brute force it. [15:33] permalac_, i mean you could try purging & reinstalling apache... [15:33] alrighty g2g [15:33] have a good one guys === unreal_ is now known as unreal [15:38] lifeless: pong === 18VABJFG3 is now known as jfluhmann [16:00] When i use the install guide (https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html) for slapd, and when i'm about to add the frist entry i get an error [16:00] ldap_add: Naming violation (64) [16:00] additional info: value of single-valued naming attribute 'dc' conflicts with value present in entry === ivoks-brb is now known as ivoks [16:04] I am not able to get our Ubuntu Server 10.04 to detect USB HDD's or USB Flash Drives currently. Last worked around two months ago. Linux seems to see the USB 2.0 and 1.1 as I see those drives load at boot time. Anyone else having similar troubles? [16:06] mdlueck, you mean they don't show up with fdisk -l ? [16:07] maedox: Usually I see messages in syslog for the PnP event. syslog is completely quiet currently. Verbose as ever on Ubuntu Desktop. [16:08] maedox: Also /dev/disk has only the internal RAID drives [16:09] maedox: Excuse me, /dev is where the recognized partitions show up at [16:10] mdlueck, ok, odd. Not sure I can help you. Are your USB-ports working with a keyboard? [16:11] maedox: I guess I could double check. Server is connected to a KVM via PS/2 connectors currently. [16:12] maedox: Good idea, will IPL the server... be back in a while... [16:12] mdlueck, best to be sure. I have to run now, but I'll be back later. Someone else can hopefully give some input. [16:13] maedox: Thanks for that idea at least! :-) === oubiwann is now known as oubiwann-away === oubiwann-away is now known as oubiwann [16:17] has anyone used the pkinit protocol extension to kerberos? [16:21] ttx: anyone in particular who should be assigned the ubuntu-release-notes part of the qemu-sdl bug? [16:22] hallyn: no, those will get reviewed as we go closer to release [16:22] ttx: ok, thanks === mathiaz_ is now known as mathiaz [16:24] pmatulis: that rings a bell.. is that the stuff that helps you talk to windows? [16:25] SpamapS: it provides SSL certificate support to kerberos [16:25] is there a hotfix available for ubuntu 8.04 LTS for this new kernel exploit? === luis__lopez is now known as luis_lopez [16:26] MACscr: Yes. http://www.ubuntu.com/usn/usn-988-1 [16:27] Pici: i think he means a fix that does not require a reboot [16:27] pmatulis: Then no, its a kernel bug. [16:27] "kernel = IPL" in my mind at least [16:27] MACscr: some hotfixes have been proposed but have not stood up to the test [16:28] MACscr: what release are you running? [16:28] MACscr: sorry, 8.04 [16:28] unfortunately 8.04, so i cant use ksplice =/ [16:28] as they dont have a xen kernel version [16:28] for hardy [16:29] man i love ksplice [16:29] Hey [16:29] I started installing the Percona binaries of MySQL Server, for Ubuntu. But in the middle of installation, a conflict was discovered with mysql-server-core-5.1, since both packages contain some man file. now I can't remove the old one, and can't install the new one. [16:29] all of the rest of my servers were pretty much patched instantly [16:29] MACscr: Hardy is at least not vuln to 3301 AFAIK [16:29] how to I cancel the pending percona installs [16:29] so I can quietly remove the original mysql-server [16:30] s/to/do/g [16:35] ok never mind, I managed with aptitude [16:37] pmatulis: ahh, not the same thing then [16:40] ok, im a bit confused, i just ran apt-get update/upgrade and i see that it setup: linux-headers-2.6.24-28-xen (2.6.24-28.79). It also says im running 2.6.24-28-xen right now. I do not see a kernel available in my /boot/ folder to change to the .79 version [16:40] since its a minor change, do i just need to reboot and the new kernel just replaced the existing one? [16:41] MACscr: yes [16:46] Whoah - just got this error: Err http://archive.ubuntu.com/ubuntu/ lucid-updates/main libwbclient0 2:3.4.7~dfsg-1ubuntu3.1 : 404 Not Found [IP: 91.189.88.30 80] [16:47] Trying to install mencoder... [16:47] FunnyLookinHat: apt-get update [16:48] Ah of course. [16:48] Wow [16:48] Thanks SpamapS [16:48] FunnyLookinHat: its a good idea to just apt-get update before every apt-get install/upgrade/etc. [16:49] * SpamapS wonders if aptitude does it automatically [16:52] * FunnyLookinHat doubts it - given the error I just encountered. :) [16:53] FunnyLookinHat: were you using aptitude then? or apt-get [16:53] Yeah [16:53] I always use aptitude [16:53] apt-get feels too cheeky [16:53] lol [16:53] SRSLY! [16:56] hello! is this the place to ask network-related questions? [16:57] That depends! [16:57] Give it a try :) [16:57] etheretic: Try, this is the place for chat related to Ubuntu Server [16:58] Jeeves_: keywords - wifi, partially work, wonky dns, heeelp. qualify? 8-) [16:58] was tossed over here from #ubuntu. [16:59] etheretic: Just ask the question :) [16:59] OK, from above, starting over... > I am not able to get our Ubuntu Server 10.04 to detect USB HDD's or USB Flash Drives currently. Last worked around two months ago. Linux seems to see the USB 2.0 and 1.1 as I see those drives load at boot time. I attached a USB KB directly and the server boots up and is able to use the USB KB plugged into the same USB port I was trying the USB HDD in. [17:01] etheretic: And you are running Ubuntu Server? If not, then I have no idea why you would get "tossed" to the server room. [17:03] Jeeves_: i'm on an open access wifi signal. it usually behaves, but lately it has bcome unreliable; irc and p2p (transmission) works, whereas ping, amule, firefox and updates don't. ried other dns servers (8.8.8.8, 8.8.4.4) but no joy. [17:03] etheretic: Who runs the wifi network? [17:04] mdlueck: no, desktop. which is why i though the #ubuntu hint a bit odd. [17:04] Anyway, diner! [17:04] Jeeves_: no idea. but they are connected to getinternet.no [17:05] etheretic: You're not seriously asking people all over the world why your neighbous network doesnt work, right? [17:05] Anyway, diner [17:05] etheretic: Perhaps you just fried their brain circuits (shrug) [17:06] why isn't there an #ubuntu-networking channel, anyway? [17:06] etheretic: err, this is about as close as it gets. :) [17:07] etheretic: There is... Networking the desktop OS or serer OS... :-) [17:07] mdlueck: #ubuntu-wifi-woes then. [17:07] etheretic: wifi networks are quite prone to external interference... === dendrobates is now known as dendro-afk [17:08] etheretic: what actual evidence do you have that transmission works? [17:08] etheretic: reminds me of the old usenet group barny.die.die.die.die [17:09] SpamapS: think you're right. only sensible explanation for the mercurial behaviour of this connection. [17:09] * etheretic pines for alt.pave.the.earth [17:10] etheretic: a nice simple test of your wifi network is just to ping your gateway IP with 1500 byte packets [17:11] sudo ping -s 1500 x.x.x.x [17:11] etheretic: if you're getting packet loss with that, then your issues are the wifi. I'd suggest repositioning the anetenna, or changing wifi channels. [17:12] Isn't there a nice GUI signal quality indicator in Ubuntu Desktop? If so, what signal strength does it show? [17:12] 31% [17:13] hi guys, I'm having a strange issue with apache2 and ipv6 virtualhost [17:13] guess canging to vicd wouldn't make a difference. === dendro-afk is now known as dendrobates [17:13] etheretic: Perhaps that is not enough signal to get a reliable connection [17:13] is there someone who have it working? [17:14] mdlueck: have had peachy connection with 20%. [17:14] The cards I have are NetGear brand, with the Athos chipset. I do not normally use wireless though. [17:15] I have used their PCI cards, and PCCard is a WAG511 [17:15] I forget the PCI PN# [17:16] mdlueck: signal *strength* yes [17:16] but quality is another thing ;) [17:16] 31% should be fine [17:16] SpamapS: can't for the life of me remember the relevant command to map the immediate network neighbourhood. [17:17] SpamapS: Like I said, I prefer sending my data over ether vs air! ;-) [17:17] etheretic: map? why would you want to map it? [17:17] mdlueck: convenience trumps performance for the more pragmatic. :) [17:17] SpamapS: to find the address of my gw. [17:18] [17:18] etheretic: route -n | grep 0.0.0.0 [17:18] route! [17:18] * etheretic beams [17:19] paste? not much. [17:20] I'd hazard 192.168.1.0 . [17:20] etheretic: take off the grep portion and you'll see that the second column is the gateway [17:21] 192.168.1.1 then. [17:23] kirkland, http://aws.typepad.com/aws/2010/09/new-amazon-ec2-feature-bring-your-own-keypair.html [17:24] SpamapS: pinged. it's in the 4-70 millisecond range. [17:26] link monitor is nice and blank, suddenly. h'm. [17:27] New bug: #625849 in clamav (main) "Upcoming release fixes bzlib security issue" [Medium,Fix released] https://launchpad.net/bugs/625849 [17:29] SpamapS: this smacks of wifi woodoo - just poked it, and it suddenly decided to work! [17:32] New bug: #643682 in clamav (main) "DoS due to PDF parsing issues" [Undecided,New] https://launchpad.net/bugs/643682 [17:32] etheretic: :) [17:32] etheretic: your neighbors probably turned off their phone. ;) [17:33] 8-) [17:34] anyone encountered the iotop/iowait bug? [17:34] CONFIG_TASK_DELAY_ACCT not enabled in kernel, cannot determine SWAPIN and IO % [17:35] ...which makes iotop rather stunted. [17:36] We've heard cries for it to be re-enabled yes. [17:37] smoser: it's about damn time [17:37] oh. [17:37] back in 10.10? :) [17:46] New bug: #643698 in net-snmp (main) "Can not install snmp" [Undecided,New] https://launchpad.net/bugs/643698 [17:47] has anyone purchased EC2 reserved instances here? I was wondering how long they take to become available? Mine just keep saying payment-pending...I'm also checking with my company to see if something is wrong with the credit card. [18:19] if i add a user whom i want sudo privileges granted, i add the user and put them in sudo group. i put their public key in authorized_keys and they can ssh in without a password. but sudo asks them for a password and none is set. is there a solution for this that doesn't involve giving them a password? also what about 'su'ing to different users (without passwords set) once logged in as one with pub key auth? === Qwert is now known as linux_ === linux_ is now known as Qwert === ivoks is now known as away === away is now known as ivoks-away [18:28] <\sh> peaces: sudo without a password doesn't work....you can give the NOPASSWORD: flag in your sudoers file, or set a password [18:29] \sh: i've read you are only supposed to edit the sudoers file with visudo as root. can this operation be scripted? [18:30] or nano /etc/sudoers as root :> [18:32] peaces: I set passwords, is there a particular reason why you don't want to set them? :) [18:32] maswan: users won't use passwords for anything else, they log in over ssh with key authentication. i was just hoping i could get away with giving them sudo power without a password as well [18:33] peaces: sure. hm. can you set the NOPASSWORD flag on the adm group perhaps? [18:34] Its the 'admin' group, 'adm' is for log file access mostly. [18:34] <\sh> peaces: you can script it, or much better use sudo-ldap with a ldap server [18:34] well, yes, that one [18:36] why should i not add a line to /etc/sudoers with a bash script [18:39] got a box with logical volumes and i need to expand one. is there any prep i need to do prior or can i just run lvresize === unreal_ is now known as unreal === ivoks-away is now known as ivoks [19:23] update-manager [19:24] out-of-context-words [19:24] Sorry [19:26] Okay then. [19:27] Is it advisable to install ubuntu-desktop package on Ubuntu server? [19:30] azaq: Most people don't, then again, we get alot of people here asking how to do it. [19:31] Pici: Yes, but is it advisable to install? [19:32] azaq: I'd say no. There aren't many graphical administrative anyway, you'll be doing most of your admin work on the terminal/tty. [19:33] Pici: Agreed, but is there any harm to have a desktop? [19:33] ttx: hi! [19:33] Part of the answer depends on if you care about long term support. [19:33] ttx: I ran into bug 641001 [19:33] Launchpad bug 641001 in puppet "cacrl should be use instead of hostcrl when generating apache2 passenger configuration" [Medium,Triaged] https://launchpad.net/bugs/641001 [19:33] Server is supported 5 years, desktop only 3. [19:34] ttx: I was wondering if I should push that in maverick or wait for maverick-updates to open? [19:34] ttx: the impact is that apache2 ssl configuration uses the wrong CRL [19:34] Scottk: Yes, but I'm still not able to understand as to why one cannot have display manager? [19:34] ttx: thus revoked puppet client won't be denied access to the puppet master by apache [19:34] azaq: You can. [19:34] It's just no longer what we'd call a server. [19:35] Pici: Well i wanted to know about using display manager and not tranforming it to ubuntu desktop [19:37] Scottk: using 'sudo apt-get install ubuntu-desktop' will only give it a display manager. Why it would not be called server? Will that transform it to ubuntu-desktop(As in transforming Ubuntu to Kubuntu by removing ubuntu-desktop, libroot2 and then installing kubuntu-desktop) ? [19:37] It wiil. [19:38] But I'm not removing server.. [19:39] Right, but the base server is essentially desktop without the desktop. [19:39] how do I setup a user for the secured samba folders so that I can login to that folder? [19:39] ScottK: Then why it should affect? [19:39] It mostly shouldn't. [19:40] But use of desktop apps isn't supported in this channel. [19:40] do I put the normal user as 'admin users = melissa [19:40] er.. [19:40] ScottK: Sure..Most likely what all can it affect? All ttyl work can be performed by terminal [19:40] do I put the normal user as 'admin users = loginname' , then use explorer to login like I would on the machine ? [19:41] Or is there another way? [19:42] azaq: More packages installed, more load on the system, more things to go wrong. Generally on a server you want to limit it to what you need to do the servers job for performance and security reasons. === ivoks is now known as ivoks-dinner [19:42] ScottK: Pici: Could you suggest me commands manual for working on ttyl? [19:42] ScottK: Agreed. [19:43] azaq: The Ubuntu Server Guide gives lots of examples https://help.ubuntu.com/10.04/serverguide/C/serverguide.pdf [19:43] ScottK: Thank you === jsalisbury is now known as jsalisbury_brb [19:44] ScottK: Most likely I woudn't be going for display manager. [19:44] ScottK: But at the same time I not confident enough to use ttyl on ubuntu-server .... [19:45] My very first Linux server I thought the same. After a week I didn't need it again. [19:46] ScottK: Then how did you manage on using ttyl for all the administrative chores? [19:46] The server guide gives examples for pretty much everything. [19:46] SpamapS: I wanted to move that java packaging discussion forward [19:49] Thanks [19:55] I think I found it, I needed to run ' smbpasswd -a user ' [19:55] I guess [19:55] any testimonial running Active Directory as guest on kvm + virtIO ? [20:00] ScottK: sg good for network info on a noob level as well? defining terms without presumptions of prior knowledge etc. === _TechAway_ is now known as _Techie_ [20:03] I'm having a problem with nssldap-update-ignore-users. It bases it's config on a minimum user ID, so will add, say, www-priv will get added to the ignore list every time nssldap-ignore-users is run. BUT: www-priv is in a group in LDAP, so LDAP will then not be asked about this group, breaking privs. Is there a way to tell it to exclude adding certain users to this list? [20:13] regarding the recent 32-bit compatability kernel vulnerability: The security bulletin seems to be telling me to update a 'linux-image' package, but I don't actually have that package installed and apt-get upgrade doesn't seem to want to give me anything that looks like a kernel [20:16] markatto: What does 'dpkg -l|grep linux-image' give you? That's dpkg -(little L) [20:16] nothing [20:17] pedahzur: This is a vps, rackspace may have given me a different kernel package, but I don't see any extra entries in the apt sources [20:18] markatto: What about 'dpkg -l|grep linux' [20:18] ls /boot ? [20:18] pedahzur: no kernels, just some libs and headers [20:19] odd. [20:19] markatto: dpkg -l|grep image [20:22] still no kernel [20:22] cups, imagemagic, libgif, etc [20:22] right. ignore me then ;-) [20:22] markatto: odd. [20:22] maybe my host is using openvz and I don't know it? [20:22]