/srv/irclogs.ubuntu.com/2010/10/18/#ubuntu-server.txt

=== unreal_ is now known as unreal
uvirtbotNew bug: #662435 in nut (main) "megatec_usb driver stopped working after upgrade from 8.04 to 10.04" [Undecided,New] https://launchpad.net/bugs/66243500:46
fluvvellwhen I tcpdump on eth0, I get " listening on eth0, link-type EN10MB (Ethernet)"  is this telling me my port is only running on 10Mb/s  ? and not 100Mb/s  ?00:49
qman__fluvvell, no, I have a gigabit adapter, confirmed running at gigabit, which reports the same thing00:59
=== adamdv is now known as AdamDV
fluvvellqman__, thanks. Yeah a quick check on my local adapters confirmed the same earlier. I think i'm looking for some network analysis tools to find a bottleneck. Samba share, and a virtual guest on my server, cpu usage not telling the whole story.01:40
HintHI+02:15
Hintnobody online?02:18
twbHint: what is your REAL question?02:18
HintI'm just a noobie and I'm probably going to use this channel02:19
=== adamdv is now known as AdamDV
Alex_21Hi All,04:36
Alex_21I'm looking for comppetition software that will aloow me to set up a website that will allow people to post their entries in pain text and then have the opportunity to vote for only one entry per user.04:37
Alex_21A Wordpress plugin that can do this is also an option.04:38
Alex_21.04:38
Alex_21Any iddeas?04:38
Alex_21I would appreciate any help.04:38
tacosnstuffhve you tried a content manger like drupal?04:39
Alex_21No.04:39
Alex_21I have not.04:39
tacosnstuffsee if drupal.org helps04:39
Alex_21Okay.04:39
Alex_21Hmm.04:39
Alex_21I'm going to go look.04:40
Alex_21Is there a good single sign on product that works with Wordpress and Drupal?04:40
tacosnstuffim going to use it for some stuff myself tho I dunno if itll help you in your specific sitution04:40
tacosnstuffmibbie this? http://drupal.org/node/4317804:42
Alex_21Thanks.04:44
Alex_21I'm not trying to migrate to Droopal though.04:44
tacosnstuffhey peeps im new to hosting wondering how i can get strted. i just installed my lamp solution stack but being an overall noob not sure how to get the right ip, dns, gateway set up etc can someone help?04:44
Alex_21What I have is an existing.04:45
tacosnstuffsorry Alex_21 not sure. I'm not into wordpress04:45
Alex_21I would say that you should only allow ports through your gateway that are absolutely necessay and change ssh to be on another port.04:45
tacosnstuffer... k lost me Im very new to hosting my own site so Im wondering if there are good screenshot how tos04:46
tacosnstuff:)04:46
Alex_21Welll, continuing on, my blog will have users, but I want to set up a way for them to vote on their favourite post without needing to have a seperate user name and password. I also need a platform for voting on.04:47
tacosnstuffonce i get over this static ip hump Im doing the drupal thing nd Im off to the races04:47
Alex_21There are many good ones on http://www.howtofordge.com/04:48
Alex_21Sorry, http://www.howtoforge.com/04:48
Alex_21.04:48
tacosnstufftnx Alex_21!04:49
tacosnstuffsorry i wasnt able to help04:49
Alex_21I don't know about hte quality of the pictures though.04:49
tacosnstuffdrupal is awesome but im not familliar with the wordpress thing04:49
Alex_21No problem.04:49
Alex_21I'm sure I'll find a solution though.04:50
=== MenZa is now known as lhavelund
Alex_21Thanks all.05:17
Alex_21God night.05:17
Evethow to upgrade to Enterprise Cloud without reinstalling?05:22
Evetsolved: https://help.ubuntu.com/community/UEC/PackageInstall05:26
HintAlex_21: maybe a good php script, search for that ;D05:26
nagchampai'm trying to set up a mail gateway, which hsa two jobs, receive incoming mail, scan and forward it to the mailserver, and relay outgoing mail after scanning it07:08
nagchampaI was reading https://help.ubuntu.com/10.04/serverguide/C/mail-filtering.html which points to the postfix install guide, but that seems to set up postfix as a primary mail server07:09
nagchampathe gateway has no need for mailboxes, and i'm wondering if there's a simple way to set up postfix to act only as a relay07:09
joschinagchampa: postfix is a full-featured mta. it can be configured to only work as a relay server07:13
nagchampajoschi: it seems the mail filtering guide for ubuntu is designed for what will be a primary mail server, not just a gateway07:14
nagchampai'm trying to find the needle in the haystack that shows how to use the ocntents of that guide with postfix purely as a relay07:15
=== _TechAway_ is now known as _Techie_
nagchampahrm, i've found something i might be able to work with http://www.postfix.org/STANDARD_CONFIGURATION_README.html#firewall07:20
_Techie_would having an invalid xorg.conf prevent a TTY screen from showing?07:23
=== _TechAway_ is now known as _Techie_
=== baffle_ is now known as baffle
TribaalHi all08:19
TribaalI'm having trouble installing Ubunut Entreprise Cloud on 10.04 - Does anybody have any experience using that?08:19
TribaalSpecifically, the controller doesn't seem to be serving the preseed file on port 8774 - so the node autoinstall fails...08:20
jscinozHi... I recently upgraded my server to 10.10, and it no longer boots correctly... the network connection comes up, but sshd and other services do not... When i use the out-of-band console (this is a virtual server) I see: mountall: Disconnected from plymouth, along with a message stating plymouth was killed by SIGABRT... I tried to uninstall plymouth, but it seems to be required... Why can't I remove it? A headless server has no ne08:24
=== Guest34991 is now known as lau
jscinozok, awesome... I can see why people dissuaded me from using ubuntu as a server OS... too much desktop-oriented crap making the boot process over-complex... I'll probabaly just stick with gentoo and good, *RELIABLE* openrc08:31
\shjscinoz: hmm?08:32
jscinozwhy does mountall depend on plymouth08:33
jscinozplymouth seems to be preventing my server from booting properly... and it' cant be removed because some idiot decided that every server wants some shiny bootsplash08:33
jpdsjscinoz: https://bugs.launchpad.net/ubuntu/+source/mountall/+bug/556372/comments/208:34
uvirtbotLaunchpad bug 556372 in mountall "Please remove the plymouth dependency from mountall / cryptsetup" [Undecided,Won't fix]08:34
\shjscinoz: tbh...I don't know what's up with your server, but I do really have some strange server setups, and all are working after fixing some network settings, which were changed WRT upstart..but I don't have problems...08:35
jscinozWell network starts, i can ping the box fine08:35
jscinozbut sshd and other daemons don't appear to start08:36
jpdsjscinoz: All the latest updates applied?08:36
jscinozjpds, yes08:36
\shjscinoz: add --debug to the kernel commandline and check the logfiles for upstart output..having a working network after boot, doesn't have to say that during boot you have a working network...and sshd relies on it AFAIK08:37
binBASHmoin \sh08:38
binBASH:)08:38
jscinozone moment sh08:38
jscinozwhere does upstart log to?08:38
\shhey binBASH08:38
\shjscinoz: to the console and eventually to kernel.log or syslog whatever...you'll find the output very easily08:39
jscinozhang on...08:39
TribaalSo folks, would anybody have an idea why apache would stop listening on port 8774 of a UEC controller after installing upgrades? :) Everything works fine if the system is not upgraded from a fresh 10.04 install...08:42
Tribaalbut if I upgrade my UEC master node (with walrus, eucalyptus etc...), adding more nodes from the install CD fails (the node can't find the preseed file on port 8774 of the master)08:43
_Techie_does anyone in here know where i can get an HP 610N jet direct module from cheaply?09:24
uvirtbotNew bug: #662576 in samba "winbind deletes the offline cache on every startup" [High,Triaged] https://launchpad.net/bugs/66257611:01
=== jjohansen is now known as jj-afk
uvirtbotNew bug: #662578 in net-snmp (main) "SNMP not able to poll basic mibs" [Undecided,New] https://launchpad.net/bugs/66257811:11
uvirtbotNew bug: #256802 in tomcat5.5 (universe) "tomcat <6.0.18: Directory Traversal (CVE-2008-2938)" [Low,Fix released] https://launchpad.net/bugs/25680211:17
=== _Techie_ is now known as _TechAway_
uvirtbotNew bug: #662588 in tomcat6 (main) "tomcat6 6.0.28-7 FTBFS due to missing ant-trax.jar" [High,In progress] https://launchpad.net/bugs/66258811:31
=== doko__ is now known as doko
TribaalAre there known issues when installing Ubuntu Server 10.10 on a mac mini?12:12
TribaalI know it's not the best scenario anyway but I don't really have a choice right now12:13
jo-erlendif you can install ubuntu desktop on it, then you should be able to install ubuntu server on it.12:13
TribaalAlright12:14
jo-erlendalso remember that anything you can do with ubuntu server can also be done with ubuntu desktop.12:15
Tribaalwell I'm planning to use it at an UEC controller, so there is no real point in having a full desktop system12:17
TribaalCLI is fine12:17
jo-erlendoh, ok.12:17
=== Barre_ is now known as Barre
uvirtbotNew bug: #662638 in tomcat6 (main) "Postinst fails if webapps/ROOT is a symlink" [Undecided,New] https://launchpad.net/bugs/66263813:31
MTecknology!info php5-fpm13:33
ubottuphp5-fpm (source: php5): server-side, HTML-embedded scripting language (FPM-CGI binary). In component universe, is optional. Version 5.3.3-1ubuntu9 (maverick), package size 2875 kB, installed size 7624 kB13:33
phretorhello, what shold I prefer between start-stop-daemon and upstart? Since I need to keep my process running all the time I would go for upstart.13:42
zul&yawn*13:50
zulphretor: then go for upstart13:50
phretorzul: does it have something like start-stop-daemon's --user/--group?13:50
zulphretor: no but you can specify it when do the exec13:52
phretorzul: exec is part of bash right?13:53
zulphretor; yes13:53
phretorzul: looks like I have to use sudo/su to lower privileges; not a very good idea.14:04
hallynkirkland: so i want to update lxc, kvm, seabios for natty - were you by chance planning on doing those?14:16
hallynif not i'll give them a shot sometime this week14:17
phretorzul: http://paste.pocoo.org/show/276963/ - my first attempt.14:45
zulphretor: i would move the env after the stop/start chunk14:45
jcastrottx: https://blueprints.edge.launchpad.net/sprints/uds-n/+settopics14:46
jcastroyou need to start accepting/declining the cloud sessions asap please14:46
jcastroor they won't get scheduled14:46
phretorzul: I am getting a very idiotic error. Looks like exec doesn't allow root (or any other user) to launch that sudo -u ... -g ...14:47
zulphretor: you might want to try on #upstart14:47
ttxjcastro: on my way14:49
smoserttx, ping15:05
=== ivoks-afk is now known as ivoks
uvirtbotNew bug: #662687 in apache2 (main) "package apache2.2-common 2.2.14-5ubuntu8.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/66268715:26
_rubenbah! .. software raid over 2 2TB disks .. both grub2 and lilo fail to install into the mbr15:28
jformananyone rsyslog-inclined folks around? trying to debug an issue where a ubuntu log server is writing out duplicate log messages from a remote syslog client15:28
ttxsmoser: pong15:29
smosertts, wanted to chat sometime today about natty specs15:30
smosers/tts/ttx/15:32
ttxok, joining mumble15:32
_rubenguess gpt is messing with me, guess i'll go have to see if we have some of those flash drives around to put (part of) the os on15:35
jo-erlendI'd like to allow only users from spesific machines to connect to the sshd on my machine and they should use passwords. How do I configure that?15:35
zulDaviey: mumble?15:39
cemca have a 10.04 in a directory on a centos server. is there a way to to apt-get installs after chroot'ing to that directory?15:40
Davieyzul: Can do.. but that means i have to reach for my headset15:40
zulDaviey: yeah dont want to put you off ;)15:41
ivoks:(15:41
ivoksbuilding, in which is my office, is on fire15:41
zuloh...crap...thats bad15:42
ivoksyep15:42
Davieyivoks: I trust you aren't still in it?15:42
ivoksDaviey: i'm not, no :)15:42
Davieyivoks: I hope you don't lose anything15:43
ivoksDaviey: me too; fire's not on my part of the building15:44
ivoksbut still, smoke...15:44
Davieyivoks: insured?15:45
ivoksof course15:45
ivoksDaviey: you have to be, by law15:45
ivoksas with cars15:45
Davieyivoks: but for equipment... or just the building?15:45
ivoksi don't have much of equipment there, so i don't expect problems with that15:47
ivoksi just can't work there :/15:48
Daviey:(15:51
ttxSpamapS: ping15:52
Davieyhggdh: Are you around?15:52
hggdhDaviey: yes, at least physically (mentally, I am not sure)15:53
Davieyhggdh: heh15:53
hggdhDaviey: what can I do for you?15:56
Davieyhggdh: Great!  Fancy filing a UEC Testing / QA blueprint?15:56
Davieyhggdh: you know the naming convention, right?15:58
hggdhwhich one of them? They seem to change continuously...15:59
Davieyheh15:59
hggdhnp15:59
Davieyhggdh: "cloud-XXXXXXXXXXXXXXX" is the part that really matters.... but we have been doing cloud-server-n-XXXXXXXXX15:59
Davieyi can't see a problem if you wanted to do cloud-qa-n-XXXXXXX  that is technically viable... but best check with ttx16:00
hggdhI will keep on what has been done, at least for the sake of consistency16:00
ttxcloud-qa is fine by me16:00
ttxJamesPage: about the java-housekeeping spec, you changed it to from other to appselection ?16:02
ttxDaviey: what happens if you rename an accepted and scheduled spec from one track to another ?16:03
phretorsorry for repeatedly asking the same thing over and over but I really see no explaination to this. Why does "# exec sudo -u worker -g worker /usr/bin/Xvfb :99" says "Sorry, user root is not allowed to execute '/usr/bin/Xvfb :99' as worker:worker"?16:03
JamesPagettx: not sure I ever raised it under 'other' - its called packageselection-server-n-java-library-housekeeping now16:04
ttxok16:04
JamesPagettx: want me to rename?16:04
ttxDaviey: same track is autoscheduled in the same room in a row, is it a feature ?16:04
Davieyttx: Registered participants clash?16:06
ttxJamesPage: no...16:07
Daviey(people need to use that feature lots more)16:07
ttxDaviey: Registered participants clash???16:07
lauis there any AUTHPRIV SyslogFacility with the openssh-server ubuntu package ?16:08
laudefault comes with AUTH but I don't see the difference with AUTHRPIV16:08
eagles0513875hey ikonia are you around? i tried what you said re db i cant gain access still :( even tried reparing the user table16:19
eagles0513875dunno what else i coudl try16:19
hggdhDaviey, ttx: https://blueprints.edge.launchpad.net/ubuntu/+spec/cloud-server-n-qa16:21
Davieyhggdh: hmm... Do you want this to be a general server/cloud QA session, or targeted towards EC2?16:21
ttxhggdh: acked for uds-n16:21
Daviey / UEC16:21
ttxmathiaz_: o/16:22
hggdhDaviey: I figure it should be targeted to UEC16:22
mathiaz_ttx: o////16:22
Davieyhggdh: agreed, sounds good16:22
=== mathiaz_ is now known as mathiaz
ttxmathiaz_: I was wondering if I shouldn't move the "hadoop" session to the "cloud" track. I think it's still cloud-relevant16:23
hggdhDaviey: it's in the description (OK, one single 'UEC', but still ;-)16:23
ttxand also a better link with the other install-service specs16:23
mathiazttx: sure - seems ilke a good plan16:23
ttxmathiaz: ok, will do16:23
ttxmathiaz: also there is a possibility to book a two-hour session16:23
mathiazttx: great!16:23
ttxmathiaz: so maybe we should lump architecture and implementation into one16:24
mathiazttx: so a two hour session on monday for the installation service would be usefull16:24
ttxok, I'll supersede one with the other and make it 2-hour16:24
ttxkim0: ping16:33
kim0ttx: pong16:34
ttxkim0: looks like your ubuntutheproject-community-n-buildingservercontributors duplicates ubuntutheproject-server-n-community16:34
eagles0513875hey guys any mysql db users here16:34
kim0ttx: ok I guess I can remove it16:35
ttxkim0: that last one is already approved and prioritized16:35
kim0sure16:35
ttxso we should lump one into the other :)16:35
ttxWe can make it a community spec if you want16:35
ttx(I can name it  ubuntutheproject-community-n-server )16:35
kim0ttx: that makes sense16:35
ttxok, will fix it16:36
kim0ttx: do I delete the dup ?16:36
ttxI'll mark it superseded16:36
cemcdoes ubuntu server have the possibility to remote connect with vnc for installation?16:36
kim0ttx: great16:36
cemclike 'linux vnc' on centos ?16:37
mathiazJamesPage: hi!16:39
mathiazJamesPage: thanks for testing bug 65822716:39
uvirtbotLaunchpad bug 658227 in openldap "upgrade process does not upgrade underlying BDB format from 4.7 to 4.8 (so slapd aborts with "Program version 4.8 doesn't match environment version 4.7" error message)" [High,Fix committed] https://launchpad.net/bugs/65822716:39
mathiazJamesPage: and the good work you put in preparing the fix16:39
JamesPagettx: no problem - think I covered all the bases!16:39
JamesPagemathiaz: sorry mean't you!16:39
JamesPagemathiaz: thats what you get for a context switch from java dependency analysis16:40
mathiazJamesPage: how is that going?16:40
JamesPagemathiaz: OK - to hard by hand so putting something together that does a high level 'hits/misses' score for a given application stack16:41
JamesPagemathiaz: fairly rudimentary but gives an idea of scale of packaging.16:41
mathiazJamesPage: yeah16:41
mathiazJamesPage: being able to automate would be great16:41
mathiazJamesPage: even if it's just to get an idea16:41
JamesPagemathiaz: looking at alot of 'not found' messages at the moment!16:42
JamesPagemathiaz: can we grab some time to discuss the application packaging and distribution spec for UDS-N?16:44
mathiazJamesPage: sure - what are the name of the BP you've filed?16:45
JamesPagemathiaz: all linked against me from https://wiki.ubuntu.com/ServerTeam/NattyIdeaPool16:46
mathiazJamesPage: great!16:46
ttxSpamapS: around ?16:46
SpamapSttx: I am now sorry17:05
uvirtbotNew bug: #662768 in whois (main) "Please merge whois 5.0.8 (main) from Debian unstable (main)" [Wishlist,New] https://launchpad.net/bugs/66276817:06
ScottKJamesPage: I do have a couple of thoughts for you on that spec when you have a moment ...17:14
SpamapSScottK: which one? The server app delivery spec?17:21
ScottKSpamapS: Yes.17:21
SpamapSScottK: I just yesterday discovered your (fairly old now) spec to fix backports to not install all backports.17:22
ScottKSpamapS: Yep.  Still trying to get that one done.17:22
ScottKIt's on the agenda (again).17:22
SpamapSScottK: which would, in effect, do the same thing we're wanting to do with PPA's.. but with less isolation.17:22
ScottKAnd without messing with trust boundaries.17:22
SpamapSyeah, its the exact same thing as the post release apps.17:23
ScottKPost-release apps is a bit of a different problem.17:23
SpamapSThe web-dev world can do this now with their own PPA's.. its not like end-user apps where they need software center to hold hteir hand.17:23
ScottKYes, but there is a tension between people who just want stable in a release and crackheads who must have the latest at all times.17:24
SpamapSThe real focus of this is to make it easier to build a little wart of instability on top of the incredibly stable core of Ubuntu.17:24
ScottKRight, but I don't think that's an alternative to having those packages in the release.17:25
ScottKI think it's a layer on top.17:25
ScottKYou can get a stable/consistent version of X from $RELEASE or enable (whatever it ends up being) and have the latest at all times.17:26
SpamapSstable no, consistent yes. The versions of libmemcached and mongodb that we have in lucid, for instance, are extremely broken compared to the ones available now.17:26
ScottKBroken or incomplete?17:27
SpamapSI think one problem is we rush a bit to get stuff into the release when its not done. ;)17:27
ScottKIf they are broken, they should get fixed via SRU.17:27
ScottKSure.17:27
SpamapSthey are somewhat broken at their cores.. SRU's would be pointless as the entire community that is built around them does not use the version we have, they use the newest one.17:28
SpamapSThe SRU process is far too long for a web shop to wait.17:29
ScottKI agree with that.17:29
ScottKBut I also think "It's broken" is an SRU reason.17:29
SpamapSAgreed17:29
SpamapSthe reason you don't see it getting fixed is *nobody* is using those versions to report the bugs. Occasionally somebody does.. and we fix it.17:30
ScottKAlso not all web developments are based on crack of the day.17:30
SpamapSOnly crazy people using mongodb right now. ;)17:30
SpamapSAgreed, a good web shop will only accept the risk of one of these crazy web scale type techs if they have to.. most of the time they want that LTS level of stasis where they can focus on their issues for 3 years before even thinking about upgrading.17:31
ScottKI think this spec could be interesting as an "In addition to" including packages in the distro and not "instead of" and it would be really cool if we could deliver via backports.17:31
ScottKWe'd need tech board permission to push stuff straight to backports and not through the development release when the development release is late cycle and ~frozen, but that's doable.17:32
SpamapSI want them in backports too. I think the only reason we're thinking PPA's is the isolation, but if backports can achieve that then we don't have to care so much.17:32
ScottKAlso if it's in backports, it can be described as "in" Ubuntu, not "on" Ubuntu.17:33
SpamapSThe ony nice thing about PPA's is that we can delegate trust to upstreams similar to the single package uploader rights. When they have single package uploader rights, does that extend to backports?17:33
ScottKNo, but getting a backport approved is relatively trivial.17:33
ScottKIdeally it's a no change backport, they file a bug that says the new version builds, installs, and runs on $RELEASE, a backports acks it, and an archive admin runs a script.17:34
ScottKWe don't require the bug filing/testing be done by developers.17:34
ScottKAnd if someone says that they've tested it, we don't go around looking for reasons not to believe them.17:34
uvirtbotNew bug: #662782 in unixodbc (main) "Please sync unixodbc 2.2.14p2-2 (main) from Debian unstable (main)" [Wishlist,New] https://launchpad.net/bugs/66278217:36
ScottKAlso any MOTU can join ubuntu-backporters, so getting a server team person to be able to deal with these directly is not a problem.17:39
corecodehey17:52
corecodesomehow my dovecot doesn't use ~/.dbox after an upgrade17:53
corecodeany idea why that could be?17:53
JamesPageScottK: sorry I missed you earlier; want to catchup now? - have 10 before a meeting17:53
ScottKJamesPage: See my discussion in the backscroll with SpamapS.  Then we can discuss further if you want.17:54
ttxDaviey: http://summit.ubuntu.com/uds-n/track/cloud/ is done17:56
ttxdown17:56
mathiazSpamapS: https://subtrac.sara.nl/oss/sali17:56
=== metcalfc_ is now known as metcalfc
=== jdstrand_ is now known as jdstrand
chiapagringoHas anyone ran into this error message why attempting to mount exported NFS shares?  Â¨mount.nfs: access denied by server while mounting¨18:10
chiapagringoand if so, any ideas on what is causing the issue?18:11
=== metcalfc_ is now known as metcalfc
=== jj-afk is now known as jjohansen
lateniteHi folks, Is there a way to give a user rootrights BY DEFAULT? I have script with commands like fdisk and dont want to change it wirh PREFIXING sudo all over the place.18:42
cwillu_at_worklatenite, run the script with sudo18:43
latenitecant do that it more complex with many ssh calls and stuff18:44
Byronhello all. I just upgraded from 10.04 to 10.10 and do not have access to the Internet. I have an IP address, but no access to the web.18:44
lateniteit s like : ssh user@box "fdisk /dev/sdc"18:44
cwillu_at_workssh root@box?18:45
EvilPhoenixcwillu_at_work:  i think he's asking how he can give any user the power of root user18:45
EvilPhoenixwhich i don't think is possible at all18:45
EvilPhoenixwithout using sudo18:46
EvilPhoenixand adding everyone to sudoers18:46
cwillu_at_workEvilPhoenix, and I'm deliberately not saying how to do it, because it's insane18:46
cwillu_at_workyes, it can be done, no, I won't tell you how.18:46
EvilPhoenixindeed18:46
EvilPhoenixi think it falls into the "Not Supported Procedures" rules18:46
latenitethats what I am asking for. the ubunutsystem that will be "currupted" is just a pendrive used to install anoterh system. Imagine my "main.sh" http://pastie.org/1230431 .18:48
EvilPhoenixlatenite:  we cant help you with giving root to everyone18:48
EvilPhoenixafaik, its against chat policies18:48
lateniteIf I call that script with "sudo main.sh" I am STILL in trouble18:48
latenitesince there is a variable $user...who ssh into the ubunut bos..but here will not be albe to to all the commands..since he has no roights18:49
lateniteand I dint want to change the script.18:49
latenitecwillu_at_work, EvilPhoenix see my problem? I could use ANY distribution on the pendrive and make $user='root'18:50
EvilPhoenixi wonder if ubottu is here18:51
lateniteBut I d realy like to use ubuntu....but therefor I need a user with root powers18:51
EvilPhoenixi belive...18:52
EvilPhoenixbelieve*18:52
EvilPhoenixthat it is against the chat policies to help you with this18:52
EvilPhoenixcwillu_at_work:  amirite?18:52
lateniteEvilPhoenix, what poilitcs?18:52
* EvilPhoenix checks the access list18:52
lateniteEvilPhoenix, I just want to tune my system...to my needs18:53
cwillu_at_worklatenite, this has nothing to do with ubuntu, it's how the kernel handles permissions18:53
cwillu_at_workif you need to do things that only root can do, you need to become root, one way or another18:54
EvilPhoenixeither with sudo or logging in as the root user18:54
EvilPhoenixdepending on the setup18:54
cwillu_at_workor some other setuid executable, or hacking up the kernel, or whatever18:54
latenitethats the problem in the first place. the script was written with the assumption that "root" ssh's into the box18:54
cwillu_at_worklatenite, eh?18:55
latenitesince that can t be done with ubunut18:55
EvilPhoenixcwillu_at_work:  can I PM you?18:55
lateniteI changed root to $user18:55
cwillu_at_workthe assumption is that that you ssh into the box as root, it has nothing to do with the user you come from18:55
cwillu_at_workEvilPhoenix, sure18:55
cwillu_at_worklatenite, you can ssh into ubuntu as root, just not with a password unless you enable that18:55
cwillu_at_work(typically you would use an ssh key instead)18:56
latenitecwillu_at_work, but when I do ssh root@box it fails.18:57
latenitehow would I set root passwd?18:57
cwillu_at_worklatenite, you don't.18:57
cwillu_at_workyou use an ssh key18:57
pmatulislatenite: you need to allow root to log in via SSH and use a key with a blank passphrase18:57
cwillu_at_workI mean, you can, but it's just dumb18:57
EvilPhoenixIN ANY CASE.  we arent allowed to help with getting someone to use root18:58
EvilPhoenixor enabling it18:58
cwillu_at_workEvilPhoenix, um?18:58
EvilPhoenixi just checked with the ubuntu ops channel18:58
EvilPhoenixcwillu_at_work:  enabling root to ssh18:58
EvilPhoenixwould also require enabling that account18:58
cwillu_at_workEvilPhoenix,  hardly18:58
EvilPhoenixno?18:58
cwillu_at_workEvilPhoenix, you just dump a key in /root/.ssh/authorized_keys18:58
cwillu_at_worker, a pubkey18:58
EvilPhoenixwith sudo18:58
cwillu_at_workof course,18:58
EvilPhoenixwhich assumes you have sudo18:58
EvilPhoenixin which case if you don't you're stuck at square one again where you dont have permissions18:59
latenitecwillu_at_work, i dont want to use keys...since thats an installscript.....there will be no keys in that env18:59
cwillu_at_worklatenite, then you'll have to use passwords and sudo18:59
* Pici is confused.18:59
cwillu_at_workthere's no other way to do it18:59
EvilPhoenixPici:  i am too :/ :\18:59
EvilPhoenixPici:  but isnt everyone at some point in time? x]18:59
lateniteok. so can I do "ssh root@box"? on ubuntu anyhow?19:00
=== ivoks_ is now known as ivoks
EvilPhoenixlatenite:  if you have the sshd configured to let root login yes19:00
cwillu_at_worklatenite, not without doing configuration on the ubuntu box, and if you're going to do that, then you should use an ssh key rather than enabling root's password19:01
EvilPhoenix^^^  what he said19:01
cwillu_at_workEvilPhoenix, key-based logins are allowed by default for root19:01
uvirtbotEvilPhoenix: Error: "^^" is not a valid command.19:01
EvilPhoenixcwillu_at_work:  *shrugs* i'm assuming the sshd is configured to not allow Root to login even with ssh keys19:01
EvilPhoenixthen again19:01
cwillu_at_workEvilPhoenix, it's not19:01
EvilPhoenixi havent had coffee yet today so i'm tired x]19:02
EvilPhoenix*away for said coffee*19:02
cwillu_at_workEvilPhoenix, such a restriction is unnecessary anyway, as there's no default keys in authorized_keys19:02
cwillu_at_worki.e., it's still secure by default19:02
=== _TechAway_ is now known as _Techie_
latenitecwillu_at_work, it sias yes on permit root login http://pastie.org/1230475 but http://pastie.org/1230482 root hast no password set here19:05
latenitehow would I set root pwd?19:05
cwillu_at_worklatenite, you don't19:05
_Techie_ffs19:05
_Techie_!root19:05
ubottuDo not try to guess the root password, that is impossible. Instead, realise the truth... there is no root password. Then you will see that it is 'sudo' that grants you access and not the root password. Look at https://help.ubuntu.com/community/RootSudo19:05
latenitecwillu_at_work, just did http://pastie.org/123048719:06
latenitewhats so bad about that?19:06
_Techie_latenite, read that link from ubottu, it shows you how to enable a root password in there19:06
_Techie_now stop beating around the bloody bush19:07
lateniteok thanks :)19:09
_Techie_and cwillu_at_work, dont rage at me for pointing him in the right direction to give the potential for screw ups, its his server so its his choice19:09
cwillu_at_work_Techie_, you can stop raging now19:10
cwillu_at_worklatenite, do you understand what I mean by using an ssh key to log in?19:12
_Techie_cwillu_at_work, also, when did the ubuntu gods stop people knowing how to access root when they want to19:12
_Techie_people used to do it all the time19:13
cwillu_at_work_Techie_, why are you talking to me?19:13
latenitecwillu_at_work, sure but the installscript I deal with can be used on any bos....I dont want to create keys....19:13
_Techie_cwillu_at_work, oh, sorry mistook evil for you19:14
cwillu_at_worklatenite, the installscript is pretty much irrelevant though19:14
latenite_Techie_, thats how I feel to. I know that a regual user can have all the rights to do waht he want...I root grants them the right..........What I dont know is: why thsi is NOT allowd to be told on chat???19:15
cwillu_at_workI would like a cookie for not losing it on you _Techie_ :p19:15
cwillu_at_worklatenite, your terminology is... wrong19:15
latenitecwillu_at_work, in what way?19:15
_Techie_latenite, im gonna ask around19:16
latenite_Techie_, cool :)19:16
cwillu_at_worklatenite, "regular user" typically refers to the account, not the actual person19:16
_Techie_and cwillu_at_work, i really am sorry i should have gone off with you as my target, you didnt deserve it and probably never will19:16
_Techie_sholdnt*19:16
cwillu_at_workthat said, there are very good reasons to not enable to root account19:16
cwillu_at_workfor one, you don't need to enable the password to get a root prompt19:17
_Techie_i just get extremely frustrated when i see people enforcing their own rules upon other people so abusively19:17
cwillu_at_work_Techie_, well, point of interest, it _is_ policy :p19:17
latenite_Techie_, :)19:17
_Techie_anyway, gonna start asking around as to when it became so bad19:17
cwillu_at_workif you have to ask, you almost certainly don't know enough to keep from severely breaking things19:17
latenitewho makes these rules? its a free world! and my box!...If I was to burn it...I could just do it!19:18
cwillu_at_worklatenite, the two other biggies is that root passwords on internet accessible machines need to be monitored _very_ carefully for intrusions19:18
PiciYou can do whatever you want, but don't expect us to support it here.19:18
cwillu_at_workand finally, logging on to a graphical session as root gives _far_ too much power to any application running in the session.  Any trivial security flaw in firefox now becomes a remote root exploit.  Many applications don't even work correctly with elevated privileges19:19
latenitecwillu_at_work, it a "freakin' pendrive used to boot a box so I can ssh into it...while insalling....teh user that loging in MUST have root rights BUT MAY NOT have to prepend sudo all th etime19:19
latenitewhat is so bad about all that?19:20
cwillu_at_worklatenite, it's a free world, and my mouth!  You don't have the right to demand information from me :p19:20
latenitecwillu_at_work, :) no wars :) Just asked some stuff.19:20
cwillu_at_worklatenite, (a) you don't need a password on root to get a root prompt.  (b) say you browse some documentation from that pendrive, with firefox running as root...19:21
lateniteso ?19:21
cwillu_at_worklatenite, any minor vulnerability in firefox (or plugins) now becomes a remote exploit19:22
cwillu_at_workthere's a sizeable percentage of rootkit'd unix boxes on the web19:22
lateniteI know...19:22
latenitethis box and the pendirve are not on the net....19:23
pmatulislatenite: not enabling root is a ubuntu thing; so naturally ubuntu folk support that policy.  i've used many other linux distros as well as freebsd and openbsd so i'm less vehement about it.  so it depends who you talk to19:24
latenitepmatulis, thanks ... that feel that way to. To me it s just a specific ubunut feature...that I must be allowed to change19:25
latenite...so I still dont get why there are policie not to tell19:25
latenitethat sound s so "non GNU"19:26
PiciThe policy is to educate.19:26
cwillu_at_worklatenite, because if you have to _ask_, you have more to learn first19:26
cwillu_at_workit's a trivial operation19:27
latenitecwillu_at_work, that s why I am asking......to learn! so what? you re telling me to learn more?19:27
latenitein other words you would HINT me into the right direction?19:27
latenite...i d be fine with that.19:27
_Techie_cwillu_at_work, a user may not necessarily know exactly how root is locked, for all they know ubuntu re wipes the password at each boot19:27
cwillu_at_worklatenite, you managed to ignore every approach I gave you before :p19:27
latenitecwillu_at_work, anyone of them required me to change my script....which I will not do.19:28
lateniteso I just made root acount aktive19:28
cwillu_at_workso you're not interested in learning.  Gotcha :p19:28
latenitethat works for now but is not what I wanted in the first palce19:28
latenitesure I am...I want to learn how to grant a user all rights to the box19:29
cwillu_at_worklatenite, you can't19:29
lateniteI d be happy to learn the steps19:29
cwillu_at_workthat operation is basically meaningless19:29
cwillu_at_workthere are ways to make it kinda look like you did that, but they're pretty much useless19:29
cwillu_at_worklatenite, you know, I bet you're thinking there's an administrator group :p19:30
cwillu_at_worklinux has no such concept19:30
lateniteI told you what I want to achieve.....so!19:30
lateniteis there a way?19:30
* cwillu_at_work repeats himself19:31
cwillu_at_work<cwillu_at_work> that operation is basically meaningless19:31
cwillu_at_work<cwillu_at_work> there are ways to make it kinda look like you did that, but they're pretty much useless19:31
cwillu_at_work* ivoks has quit (Ping timeout: 252 seconds)19:31
cwillu_at_work<cwillu_at_work> latenite, you know, I bet you're thinking there's an administrator group :p19:31
cwillu_at_work<cwillu_at_work> linux has no such concept19:31
cwillu_at_workivoks, sorry for the ping :p19:31
uvirtbotNew bug: #662847 in openvpn (main) "multiple DNS search domains not supported by update-resolv-conf" [Low,Triaged] https://launchpad.net/bugs/66284719:31
_Techie_cwillu_at_work, hehe, there is no administrator group, however there is an admin group =P19:31
cwillu_at_work_Techie_, ... which only has meaning because sudo looks for a group by that name before determining whether to switch to the root user :p19:32
cwillu_at_workit has no power in itself19:32
_Techie_which is also very odd19:32
cwillu_at_work_Techie_, it's the only way it could possibly work19:32
_Techie_because by default sudo looks for the sudo group in other distro's19:32
cwillu_at_work_Techie_, generally, but not universally19:33
_Techie_and only in ubuntu is it set to %admin19:33
_Techie_well, the only one ive come across19:33
cwillu_at_workadmin tends to have more meaning to a non-technical user than "sudo"19:33
_Techie_anyway, i have to go or ill be late for class, ill try get back on later19:34
cemchow do I update an ltsp chroot without (re)starting any services which might be activated ?19:34
lateniteI my user was in group admin...could he just do "fdisk /dev/sda/ without the use of sudo?19:34
_Techie_latenite, no he would have to sudo19:34
cwillu_at_worklatenite, you'll learn a lot more if you read what people say19:34
latenitedamn that :) laughs....19:34
latenite_Techie_, have fun at class :) thanks so far19:34
cwillu_at_workgiven that I just explained what the admin group did 8 lines up :p19:34
latenitecwillu_at_work, I m ut...thanks anyway :)19:35
cwillu_at_workut?19:35
latenite*out19:35
=== _Techie_ is now known as _TechAway_
cemcor better yet, can I apt-get without automatically restarting any services ?19:38
pmatuliscemc: you don't have any services running in the chroot19:51
pmatuliscemc: are you saying how to prevent any from starting?19:52
cemcpmatulis: right. but I have them running outside of the chroot. what if I have a cupsd running outside, and cupsd gets updated inside the chroot?19:52
pmatuliscemc: the point is that you need to prevent any services from starting in the first place19:53
pmatuliscemc: this is documented19:53
pmatulishttps://help.ubuntu.com/community/UbuntuLTSP19:54
cemcpmatulis: right, I saw that after I asked the first question. actually I thought it would be similar to a normal chroot (no LTSP), but I guess that's LTSP-specific then?19:55
pmatuliscemc: i think so, yes19:55
cemcmhm19:56
pmatuliscemc: anyway, you're looking for variable LTSP_HANDLE_DAEMONS=false19:56
pmatuliscemc: also, see IRC channel #ltsp19:56
cemcpmatulis: thanks19:57
pmatuliscemc: i happen to be upgrading my ltsp server to lucid right now19:57
cemc;)19:59
=== _TechAway_ is now known as _Techie_
attention_chaudhello, ok... I'm not sure if I am on crack or not but I can't remember how to list folders with owners and groups from root.... and I can't seem to find it on the web except for ls which only lists the files. Anybody able to help me? I feel mentally challenged at the moment.20:39
Picils -l20:40
PiciOr are you looking for something else?20:40
Picilike lsattr20:40
Pici!enter > Pici20:40
ubottuPici, please see my private message20:40
attention_chaudno no ls -l!!! thanks Pici. I'm having a brain fart day20:43
icekCould the fact that I am running ubuntu desktop, rather than ubuntu server cause problems with dhcpd failing?20:44
guntberticek: nothing speaks against the default dhcpd - I suspect its webmin...20:44
icekoh20:45
guntberticek: what was the error?20:45
icekbut when i vim into the dhcpd conf file it looks the same as the webmin one20:45
icekno subnet declaration for eth1 not configured to listen on any interfaces20:45
icekwhich implies that the dhcpd conf file is confgiured right20:45
guntberticek: if it is not configured to listen on any interface - why should it start anyway?20:47
icekbut i configured it!20:47
guntberticek: my point: webmin did something wrong - so use vi (and your brain :-)) to configure it correctly20:48
_Techie_or nano =)20:49
guntbert_Techie_: only experts here - experts use vi ;-))20:50
_Techie_guntbert, i find that very insulting, i love my nano20:52
guntbert_Techie_: keep it - use it - be good with it :-)  (and don't be easily insulted :-))20:54
lateniteHi folks, I am new to raid1 and want to know what to do fist: mdadm --create on both entire discs and THEN partioen my md device? OR create (say 5) same partitions on each disk and THEN do mdadm --create .. /dev/sda1 /dev/sdb1 and mdadm --create .. /dev/sda2 /dev/sdb221:29
fluvvelllatenite, need to partition first. Assuming your drive is blank21:35
fluvvelldrives * are21:36
dominicdinadaugh if I was running pentesting on my web application and obviousally it found a hole and broke the phpmyadmin setup, it is forced an error and says check the logs. Would removing and reinstalling phpmyadmin correct the problem?21:43
dominicdinadaI mean i also use mysql workbench on my Doze machines and that is able to connect, and all the tables i checked seem to be fine it is just the phpmyadmin tables that are causing problems21:44
latenitefluvvell, why not make md0p1, md0p2 , md0p3 ? what makes the difference between partionin fist or last?21:49
fluvvelllatenite, you need the partitions before you can assemble a mirrored raid array.21:55
qman__latenite, you have to create partitions of type linux raid autodetect on all the disks you want to use, then you create the md device22:03
qman__md devices don't have partitions on them, if you want to divy them up, you need to use LVM22:03
qman__on my file server, I simply have disks with only one, full-size partition on them, which form md0, and an ext3 filesystem directly on md022:06
dominicdinadahow do i delete all my archived logs obviously rm -r *.gz deletes them in each folder i run it in but from /var/log/ how do i recursively delete all the archives without going to each folder22:31
KillMeNowdomincdinada:  you can use the find command with +mtime=X and pipe it to use the rm command22:38
KillMeNowsomething like:  find *.gz +mtime +20 | rm -rf22:40
KillMeNowthe mtime command will look at how old the last modification was to that file22:40
draikI upgraded my Ubuntu server from 10.04 to 10.10, but now I don't have Internet access. I have an IP from my router, but no outside access. Has anyone come across this issue and found a resolution?22:40
dominicdinadaKillMeNow: ok thank you22:41
KillMeNowmake sure you test it out and DON"T do it from root22:41
KillMeNowyou can bork lots of things up if you're not careful22:41
KillMeNowdraik:  sounds like you're getting an IP dynamically22:42
KillMeNowhave you tried setting it statically to something outside the DHCP range?22:43
KillMeNowi'm done for the day folks, see you tomorrow22:43
draikKillMeNow: I have the IP set and is not shared.22:43
KillMeNowcan you ping?22:44
draikI tried "google.com", but it gives "Unknown host"22:44
KillMeNowtry pinging your gateway22:44
KillMeNowvia IP22:44
KillMeNowif you can ping your gateway, it's not the network22:44
KillMeNowyou'll likely need to set your resolver in /etc/resolv.conf22:45
draikYup, I can ping the gateway.22:45
KillMeNowtype this in:  cat /etc/resolv.conf22:45
KillMeNowis there a nameserver listed?22:45
draikNo. It is the domain that I gave it.22:46
KillMeNowok, there should be two lines in resolv.conf22:46
KillMeNownameserver xxx.xxx.xxx.xxx22:46
KillMeNowand if it's on a domain:  search somedomain.com22:46
draikYes, I have the "search domain.com" entry.22:47
KillMeNowthe nameserver line should have the IP address of your DNS server22:47
draikI'll update the necessary fields with that of my desktop.22:47
draikThank you, KillMeNow. BTW, is a reboot required, or just restart the networking service?22:47
KillMeNowyou might need to restart the networking service, i don't think you need to reboot22:47
KillMeNowrarely do you need to reboot a service on linux22:47
KillMeNowyea you probably will need to restart the network service22:48
draikWOOHOO. I'm online again. Thank you, KillMeNow.22:48
KillMeNowwelcome22:49
=== jo-erlend is now known as StAlphonzo
bluefrogin 10.10 how do I restart the network, pls? I added eth1 in /etc/network/interfaces and I would like to bring it up with tha parmeters I inserted.22:58
bluefrogok got it. needed to use the old /etc/init.d/networking restart as service networking restart dos not work properly apparently23:00
nomadgisIs there anyone here that could answer questions about Bind9 configuration?23:05
SpamapSnomadgis: you should just ask your question, and somebody will pipe up if they have an answer23:26
nomadgisI am the owner of a hosted domain, but when browsers are pointed to my domain I want them to be directed to a directory on my local machine. Does this mean that I what I want is to host my domain myself? Or, do I need to configure BIND to direct traffic from the host to my IP?23:32
SpamapSnomadgis: that has almost nothing to do with bind 9 configuration.23:33
SpamapSnomadgis: IMO, you should let your DNS registrar host your DNS unless you have a very good reason to host it yourself (which may be as simple as "I want to learn how to do that."23:34
SpamapS)23:34
nomadgisIf I allow them to continue hosting the domain, how do you then integrate a LAMP system with it?23:42
qman__nomadgis, the only way would be to configure a subdomain that points to your IP23:42
qman__and whether or not/how you do that depends on who hosts your domain23:42
nomadgishow so?23:43
qman__whoever is hosting your domain name for you, the person answering DNS queries for your name23:43
qman__how to configure that depends on how their system works23:43
qman__whether they have a web interface, email requests, trouble tickets, or whether they support doing that at all23:44
nomadgisthe domain is at GoDaddy and I believe they have a fairly robust system for doing this kind of thing. I just don't know where to start looking. Forwarding addresses, subdomains, and TCP/IP traffic in general are all fresh topics for me...23:45
qman__you can host it yourself, but that requires significant work and configuration at your registrar23:45
qman__well, what you want is a subdomain pointing to your IP23:45
qman__you could do a redirect but the content hosted on your local server would still be referred to by IP once forwarded23:46
qman__to have full name functionality, a subdomain is the way23:46
nomadgissounds likely. and how does this work?23:47
qman__you set it up with your DNS provider23:47
qman__then, the main domain points to your hosted site, and the subdomain points to your local server23:47
qman__there is no technical reason you can't do this, but your provider might have limitations23:48
nealmcbnomadgis: it might help to review why you want to serve from your local machine (which will probably be less available etc).  Would it work to mirror that local directory to the machine at your hosting provider?23:48
=== jjcm_ is now known as jjcm
nomadgisI think that would also work. basically I have some fairly sophisticated things happening on my machine related to web mapping. tons of geographic layer being served and accessible to my via localhost...but I want this same access via mydomain.com23:51
=== jjcm is now known as jjcm_
=== jjcm_ is now known as jjcm
nomadgisfor example a postgresql db runs by default on localhost:5432, but I want to access the same data stored locally on my machine from mydomain.com:543223:53
nomadgisfrom www23:53
nealmcbnomadgis: hmmm - could be risky to expose your home machine to the internet like that - and is postgresql really set up to be securely used over the internet?23:55

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!