=== unreal_ is now known as unreal [00:46] New bug: #662435 in nut (main) "megatec_usb driver stopped working after upgrade from 8.04 to 10.04" [Undecided,New] https://launchpad.net/bugs/662435 [00:49] when I tcpdump on eth0, I get " listening on eth0, link-type EN10MB (Ethernet)" is this telling me my port is only running on 10Mb/s ? and not 100Mb/s ? [00:59] fluvvell, no, I have a gigabit adapter, confirmed running at gigabit, which reports the same thing === adamdv is now known as AdamDV [01:40] qman__, thanks. Yeah a quick check on my local adapters confirmed the same earlier. I think i'm looking for some network analysis tools to find a bottleneck. Samba share, and a virtual guest on my server, cpu usage not telling the whole story. [02:15] HI+ [02:18] nobody online? [02:18] Hint: what is your REAL question? [02:19] I'm just a noobie and I'm probably going to use this channel === adamdv is now known as AdamDV [04:36] Hi All, [04:37] I'm looking for comppetition software that will aloow me to set up a website that will allow people to post their entries in pain text and then have the opportunity to vote for only one entry per user. [04:38] A Wordpress plugin that can do this is also an option. [04:38] . [04:38] Any iddeas? [04:38] I would appreciate any help. [04:39] hve you tried a content manger like drupal? [04:39] No. [04:39] I have not. [04:39] see if drupal.org helps [04:39] Okay. [04:39] Hmm. [04:40] I'm going to go look. [04:40] Is there a good single sign on product that works with Wordpress and Drupal? [04:40] im going to use it for some stuff myself tho I dunno if itll help you in your specific sitution [04:42] mibbie this? http://drupal.org/node/43178 [04:44] Thanks. [04:44] I'm not trying to migrate to Droopal though. [04:44] hey peeps im new to hosting wondering how i can get strted. i just installed my lamp solution stack but being an overall noob not sure how to get the right ip, dns, gateway set up etc can someone help? [04:45] What I have is an existing. [04:45] sorry Alex_21 not sure. I'm not into wordpress [04:45] I would say that you should only allow ports through your gateway that are absolutely necessay and change ssh to be on another port. [04:46] er... k lost me Im very new to hosting my own site so Im wondering if there are good screenshot how tos [04:46] :) [04:47] Welll, continuing on, my blog will have users, but I want to set up a way for them to vote on their favourite post without needing to have a seperate user name and password. I also need a platform for voting on. [04:47] once i get over this static ip hump Im doing the drupal thing nd Im off to the races [04:48] There are many good ones on http://www.howtofordge.com/ [04:48] Sorry, http://www.howtoforge.com/ [04:48] . [04:49] tnx Alex_21! [04:49] sorry i wasnt able to help [04:49] I don't know about hte quality of the pictures though. [04:49] drupal is awesome but im not familliar with the wordpress thing [04:49] No problem. [04:50] I'm sure I'll find a solution though. === MenZa is now known as lhavelund [05:17] Thanks all. [05:17] God night. [05:22] how to upgrade to Enterprise Cloud without reinstalling? [05:26] solved: https://help.ubuntu.com/community/UEC/PackageInstall [05:26] Alex_21: maybe a good php script, search for that ;D [07:08] i'm trying to set up a mail gateway, which hsa two jobs, receive incoming mail, scan and forward it to the mailserver, and relay outgoing mail after scanning it [07:09] I was reading https://help.ubuntu.com/10.04/serverguide/C/mail-filtering.html which points to the postfix install guide, but that seems to set up postfix as a primary mail server [07:09] the gateway has no need for mailboxes, and i'm wondering if there's a simple way to set up postfix to act only as a relay [07:13] nagchampa: postfix is a full-featured mta. it can be configured to only work as a relay server [07:14] joschi: it seems the mail filtering guide for ubuntu is designed for what will be a primary mail server, not just a gateway [07:15] i'm trying to find the needle in the haystack that shows how to use the ocntents of that guide with postfix purely as a relay === _TechAway_ is now known as _Techie_ [07:20] hrm, i've found something i might be able to work with http://www.postfix.org/STANDARD_CONFIGURATION_README.html#firewall [07:23] <_Techie_> would having an invalid xorg.conf prevent a TTY screen from showing? === _TechAway_ is now known as _Techie_ === baffle_ is now known as baffle [08:19] Hi all [08:19] I'm having trouble installing Ubunut Entreprise Cloud on 10.04 - Does anybody have any experience using that? [08:20] Specifically, the controller doesn't seem to be serving the preseed file on port 8774 - so the node autoinstall fails... [08:24] Hi... I recently upgraded my server to 10.10, and it no longer boots correctly... the network connection comes up, but sshd and other services do not... When i use the out-of-band console (this is a virtual server) I see: mountall: Disconnected from plymouth, along with a message stating plymouth was killed by SIGABRT... I tried to uninstall plymouth, but it seems to be required... Why can't I remove it? A headless server has no ne === Guest34991 is now known as lau [08:31] ok, awesome... I can see why people dissuaded me from using ubuntu as a server OS... too much desktop-oriented crap making the boot process over-complex... I'll probabaly just stick with gentoo and good, *RELIABLE* openrc [08:32] <\sh> jscinoz: hmm? [08:33] why does mountall depend on plymouth [08:33] plymouth seems to be preventing my server from booting properly... and it' cant be removed because some idiot decided that every server wants some shiny bootsplash [08:34] jscinoz: https://bugs.launchpad.net/ubuntu/+source/mountall/+bug/556372/comments/2 [08:34] Launchpad bug 556372 in mountall "Please remove the plymouth dependency from mountall / cryptsetup" [Undecided,Won't fix] [08:35] <\sh> jscinoz: tbh...I don't know what's up with your server, but I do really have some strange server setups, and all are working after fixing some network settings, which were changed WRT upstart..but I don't have problems... [08:35] Well network starts, i can ping the box fine [08:36] but sshd and other daemons don't appear to start [08:36] jscinoz: All the latest updates applied? [08:36] jpds, yes [08:37] <\sh> jscinoz: add --debug to the kernel commandline and check the logfiles for upstart output..having a working network after boot, doesn't have to say that during boot you have a working network...and sshd relies on it AFAIK [08:38] moin \sh [08:38] :) [08:38] one moment sh [08:38] where does upstart log to? [08:38] <\sh> hey binBASH [08:39] <\sh> jscinoz: to the console and eventually to kernel.log or syslog whatever...you'll find the output very easily [08:39] hang on... [08:42] So folks, would anybody have an idea why apache would stop listening on port 8774 of a UEC controller after installing upgrades? :) Everything works fine if the system is not upgraded from a fresh 10.04 install... [08:43] but if I upgrade my UEC master node (with walrus, eucalyptus etc...), adding more nodes from the install CD fails (the node can't find the preseed file on port 8774 of the master) [09:24] <_Techie_> does anyone in here know where i can get an HP 610N jet direct module from cheaply? [11:01] New bug: #662576 in samba "winbind deletes the offline cache on every startup" [High,Triaged] https://launchpad.net/bugs/662576 === jjohansen is now known as jj-afk [11:11] New bug: #662578 in net-snmp (main) "SNMP not able to poll basic mibs" [Undecided,New] https://launchpad.net/bugs/662578 [11:17] New bug: #256802 in tomcat5.5 (universe) "tomcat <6.0.18: Directory Traversal (CVE-2008-2938)" [Low,Fix released] https://launchpad.net/bugs/256802 === _Techie_ is now known as _TechAway_ [11:31] New bug: #662588 in tomcat6 (main) "tomcat6 6.0.28-7 FTBFS due to missing ant-trax.jar" [High,In progress] https://launchpad.net/bugs/662588 === doko__ is now known as doko [12:12] Are there known issues when installing Ubuntu Server 10.10 on a mac mini? [12:13] I know it's not the best scenario anyway but I don't really have a choice right now [12:13] if you can install ubuntu desktop on it, then you should be able to install ubuntu server on it. [12:14] Alright [12:15] also remember that anything you can do with ubuntu server can also be done with ubuntu desktop. [12:17] well I'm planning to use it at an UEC controller, so there is no real point in having a full desktop system [12:17] CLI is fine [12:17] oh, ok. === Barre_ is now known as Barre [13:31] New bug: #662638 in tomcat6 (main) "Postinst fails if webapps/ROOT is a symlink" [Undecided,New] https://launchpad.net/bugs/662638 [13:33] !info php5-fpm [13:33] php5-fpm (source: php5): server-side, HTML-embedded scripting language (FPM-CGI binary). In component universe, is optional. Version 5.3.3-1ubuntu9 (maverick), package size 2875 kB, installed size 7624 kB [13:42] hello, what shold I prefer between start-stop-daemon and upstart? Since I need to keep my process running all the time I would go for upstart. [13:50] &yawn* [13:50] phretor: then go for upstart [13:50] zul: does it have something like start-stop-daemon's --user/--group? [13:52] phretor: no but you can specify it when do the exec [13:53] zul: exec is part of bash right? [13:53] phretor; yes [14:04] zul: looks like I have to use sudo/su to lower privileges; not a very good idea. [14:16] kirkland: so i want to update lxc, kvm, seabios for natty - were you by chance planning on doing those? [14:17] if not i'll give them a shot sometime this week [14:45] zul: http://paste.pocoo.org/show/276963/ - my first attempt. [14:45] phretor: i would move the env after the stop/start chunk [14:46] ttx: https://blueprints.edge.launchpad.net/sprints/uds-n/+settopics [14:46] you need to start accepting/declining the cloud sessions asap please [14:46] or they won't get scheduled [14:47] zul: I am getting a very idiotic error. Looks like exec doesn't allow root (or any other user) to launch that sudo -u ... -g ... [14:47] phretor: you might want to try on #upstart [14:49] jcastro: on my way [15:05] ttx, ping === ivoks-afk is now known as ivoks [15:26] New bug: #662687 in apache2 (main) "package apache2.2-common 2.2.14-5ubuntu8.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/662687 [15:28] <_ruben> bah! .. software raid over 2 2TB disks .. both grub2 and lilo fail to install into the mbr [15:28] anyone rsyslog-inclined folks around? trying to debug an issue where a ubuntu log server is writing out duplicate log messages from a remote syslog client [15:29] smoser: pong [15:30] tts, wanted to chat sometime today about natty specs [15:32] s/tts/ttx/ [15:32] ok, joining mumble [15:35] <_ruben> guess gpt is messing with me, guess i'll go have to see if we have some of those flash drives around to put (part of) the os on [15:35] I'd like to allow only users from spesific machines to connect to the sshd on my machine and they should use passwords. How do I configure that? [15:39] Daviey: mumble? [15:40] a have a 10.04 in a directory on a centos server. is there a way to to apt-get installs after chroot'ing to that directory? [15:40] zul: Can do.. but that means i have to reach for my headset [15:41] Daviey: yeah dont want to put you off ;) [15:41] :( [15:41] building, in which is my office, is on fire [15:42] oh...crap...thats bad [15:42] yep [15:42] ivoks: I trust you aren't still in it? [15:42] Daviey: i'm not, no :) [15:43] ivoks: I hope you don't lose anything [15:44] Daviey: me too; fire's not on my part of the building [15:44] but still, smoke... [15:45] ivoks: insured? [15:45] of course [15:45] Daviey: you have to be, by law [15:45] as with cars [15:45] ivoks: but for equipment... or just the building? [15:47] i don't have much of equipment there, so i don't expect problems with that [15:48] i just can't work there :/ [15:51] :( [15:52] SpamapS: ping [15:52] hggdh: Are you around? [15:53] Daviey: yes, at least physically (mentally, I am not sure) [15:53] hggdh: heh [15:56] Daviey: what can I do for you? [15:56] hggdh: Great! Fancy filing a UEC Testing / QA blueprint? [15:58] hggdh: you know the naming convention, right? [15:59] which one of them? They seem to change continuously... [15:59] heh [15:59] np [15:59] hggdh: "cloud-XXXXXXXXXXXXXXX" is the part that really matters.... but we have been doing cloud-server-n-XXXXXXXXX [16:00] i can't see a problem if you wanted to do cloud-qa-n-XXXXXXX that is technically viable... but best check with ttx [16:00] I will keep on what has been done, at least for the sake of consistency [16:00] cloud-qa is fine by me [16:02] JamesPage: about the java-housekeeping spec, you changed it to from other to appselection ? [16:03] Daviey: what happens if you rename an accepted and scheduled spec from one track to another ? [16:03] sorry for repeatedly asking the same thing over and over but I really see no explaination to this. Why does "# exec sudo -u worker -g worker /usr/bin/Xvfb :99" says "Sorry, user root is not allowed to execute '/usr/bin/Xvfb :99' as worker:worker"? [16:04] ttx: not sure I ever raised it under 'other' - its called packageselection-server-n-java-library-housekeeping now [16:04] ok [16:04] ttx: want me to rename? [16:04] Daviey: same track is autoscheduled in the same room in a row, is it a feature ? [16:06] ttx: Registered participants clash? [16:07] JamesPage: no... [16:07] (people need to use that feature lots more) [16:07] Daviey: Registered participants clash??? [16:08] is there any AUTHPRIV SyslogFacility with the openssh-server ubuntu package ? [16:08] default comes with AUTH but I don't see the difference with AUTHRPIV [16:19] hey ikonia are you around? i tried what you said re db i cant gain access still :( even tried reparing the user table [16:19] dunno what else i coudl try [16:21] Daviey, ttx: https://blueprints.edge.launchpad.net/ubuntu/+spec/cloud-server-n-qa [16:21] hggdh: hmm... Do you want this to be a general server/cloud QA session, or targeted towards EC2? [16:21] hggdh: acked for uds-n [16:21] / UEC [16:22] mathiaz_: o/ [16:22] Daviey: I figure it should be targeted to UEC [16:22] ttx: o//// [16:22] hggdh: agreed, sounds good === mathiaz_ is now known as mathiaz [16:23] mathiaz_: I was wondering if I shouldn't move the "hadoop" session to the "cloud" track. I think it's still cloud-relevant [16:23] Daviey: it's in the description (OK, one single 'UEC', but still ;-) [16:23] and also a better link with the other install-service specs [16:23] ttx: sure - seems ilke a good plan [16:23] mathiaz: ok, will do [16:23] mathiaz: also there is a possibility to book a two-hour session [16:23] ttx: great! [16:24] mathiaz: so maybe we should lump architecture and implementation into one [16:24] ttx: so a two hour session on monday for the installation service would be usefull [16:24] ok, I'll supersede one with the other and make it 2-hour [16:33] kim0: ping [16:34] ttx: pong [16:34] kim0: looks like your ubuntutheproject-community-n-buildingservercontributors duplicates ubuntutheproject-server-n-community [16:34] hey guys any mysql db users here [16:35] ttx: ok I guess I can remove it [16:35] kim0: that last one is already approved and prioritized [16:35] sure [16:35] so we should lump one into the other :) [16:35] We can make it a community spec if you want [16:35] (I can name it ubuntutheproject-community-n-server ) [16:35] ttx: that makes sense [16:36] ok, will fix it [16:36] ttx: do I delete the dup ? [16:36] I'll mark it superseded [16:36] does ubuntu server have the possibility to remote connect with vnc for installation? [16:36] ttx: great [16:37] like 'linux vnc' on centos ? [16:39] JamesPage: hi! [16:39] JamesPage: thanks for testing bug 658227 [16:39] Launchpad bug 658227 in openldap "upgrade process does not upgrade underlying BDB format from 4.7 to 4.8 (so slapd aborts with "Program version 4.8 doesn't match environment version 4.7" error message)" [High,Fix committed] https://launchpad.net/bugs/658227 [16:39] JamesPage: and the good work you put in preparing the fix [16:39] ttx: no problem - think I covered all the bases! [16:39] mathiaz: sorry mean't you! [16:40] mathiaz: thats what you get for a context switch from java dependency analysis [16:40] JamesPage: how is that going? [16:41] mathiaz: OK - to hard by hand so putting something together that does a high level 'hits/misses' score for a given application stack [16:41] mathiaz: fairly rudimentary but gives an idea of scale of packaging. [16:41] JamesPage: yeah [16:41] JamesPage: being able to automate would be great [16:41] JamesPage: even if it's just to get an idea [16:42] mathiaz: looking at alot of 'not found' messages at the moment! [16:44] mathiaz: can we grab some time to discuss the application packaging and distribution spec for UDS-N? [16:45] JamesPage: sure - what are the name of the BP you've filed? [16:46] mathiaz: all linked against me from https://wiki.ubuntu.com/ServerTeam/NattyIdeaPool [16:46] JamesPage: great! [16:46] SpamapS: around ? [17:05] ttx: I am now sorry [17:06] New bug: #662768 in whois (main) "Please merge whois 5.0.8 (main) from Debian unstable (main)" [Wishlist,New] https://launchpad.net/bugs/662768 [17:14] JamesPage: I do have a couple of thoughts for you on that spec when you have a moment ... [17:21] ScottK: which one? The server app delivery spec? [17:21] SpamapS: Yes. [17:22] ScottK: I just yesterday discovered your (fairly old now) spec to fix backports to not install all backports. [17:22] SpamapS: Yep. Still trying to get that one done. [17:22] It's on the agenda (again). [17:22] ScottK: which would, in effect, do the same thing we're wanting to do with PPA's.. but with less isolation. [17:22] And without messing with trust boundaries. [17:23] yeah, its the exact same thing as the post release apps. [17:23] Post-release apps is a bit of a different problem. [17:23] The web-dev world can do this now with their own PPA's.. its not like end-user apps where they need software center to hold hteir hand. [17:24] Yes, but there is a tension between people who just want stable in a release and crackheads who must have the latest at all times. [17:24] The real focus of this is to make it easier to build a little wart of instability on top of the incredibly stable core of Ubuntu. [17:25] Right, but I don't think that's an alternative to having those packages in the release. [17:25] I think it's a layer on top. [17:26] You can get a stable/consistent version of X from $RELEASE or enable (whatever it ends up being) and have the latest at all times. [17:26] stable no, consistent yes. The versions of libmemcached and mongodb that we have in lucid, for instance, are extremely broken compared to the ones available now. [17:27] Broken or incomplete? [17:27] I think one problem is we rush a bit to get stuff into the release when its not done. ;) [17:27] If they are broken, they should get fixed via SRU. [17:27] Sure. [17:28] they are somewhat broken at their cores.. SRU's would be pointless as the entire community that is built around them does not use the version we have, they use the newest one. [17:29] The SRU process is far too long for a web shop to wait. [17:29] I agree with that. [17:29] But I also think "It's broken" is an SRU reason. [17:29] Agreed [17:30] the reason you don't see it getting fixed is *nobody* is using those versions to report the bugs. Occasionally somebody does.. and we fix it. [17:30] Also not all web developments are based on crack of the day. [17:30] Only crazy people using mongodb right now. ;) [17:31] Agreed, a good web shop will only accept the risk of one of these crazy web scale type techs if they have to.. most of the time they want that LTS level of stasis where they can focus on their issues for 3 years before even thinking about upgrading. [17:31] I think this spec could be interesting as an "In addition to" including packages in the distro and not "instead of" and it would be really cool if we could deliver via backports. [17:32] We'd need tech board permission to push stuff straight to backports and not through the development release when the development release is late cycle and ~frozen, but that's doable. [17:32] I want them in backports too. I think the only reason we're thinking PPA's is the isolation, but if backports can achieve that then we don't have to care so much. [17:33] Also if it's in backports, it can be described as "in" Ubuntu, not "on" Ubuntu. [17:33] The ony nice thing about PPA's is that we can delegate trust to upstreams similar to the single package uploader rights. When they have single package uploader rights, does that extend to backports? [17:33] No, but getting a backport approved is relatively trivial. [17:34] Ideally it's a no change backport, they file a bug that says the new version builds, installs, and runs on $RELEASE, a backports acks it, and an archive admin runs a script. [17:34] We don't require the bug filing/testing be done by developers. [17:34] And if someone says that they've tested it, we don't go around looking for reasons not to believe them. [17:36] New bug: #662782 in unixodbc (main) "Please sync unixodbc 2.2.14p2-2 (main) from Debian unstable (main)" [Wishlist,New] https://launchpad.net/bugs/662782 [17:39] Also any MOTU can join ubuntu-backporters, so getting a server team person to be able to deal with these directly is not a problem. [17:52] hey [17:53] somehow my dovecot doesn't use ~/.dbox after an upgrade [17:53] any idea why that could be? [17:53] ScottK: sorry I missed you earlier; want to catchup now? - have 10 before a meeting [17:54] JamesPage: See my discussion in the backscroll with SpamapS. Then we can discuss further if you want. [17:56] Daviey: http://summit.ubuntu.com/uds-n/track/cloud/ is done [17:56] down [17:56] SpamapS: https://subtrac.sara.nl/oss/sali === metcalfc_ is now known as metcalfc === jdstrand_ is now known as jdstrand [18:10] Has anyone ran into this error message why attempting to mount exported NFS shares? ¨mount.nfs: access denied by server while mounting¨ [18:11] and if so, any ideas on what is causing the issue? === metcalfc_ is now known as metcalfc === jj-afk is now known as jjohansen [18:42] Hi folks, Is there a way to give a user rootrights BY DEFAULT? I have script with commands like fdisk and dont want to change it wirh PREFIXING sudo all over the place. [18:43] latenite, run the script with sudo [18:44] cant do that it more complex with many ssh calls and stuff [18:44] hello all. I just upgraded from 10.04 to 10.10 and do not have access to the Internet. I have an IP address, but no access to the web. [18:44] it s like : ssh user@box "fdisk /dev/sdc" [18:45] ssh root@box? [18:45] cwillu_at_work: i think he's asking how he can give any user the power of root user [18:45] which i don't think is possible at all [18:46] without using sudo [18:46] and adding everyone to sudoers [18:46] EvilPhoenix, and I'm deliberately not saying how to do it, because it's insane [18:46] yes, it can be done, no, I won't tell you how. [18:46] indeed [18:46] i think it falls into the "Not Supported Procedures" rules [18:48] thats what I am asking for. the ubunutsystem that will be "currupted" is just a pendrive used to install anoterh system. Imagine my "main.sh" http://pastie.org/1230431 . [18:48] latenite: we cant help you with giving root to everyone [18:48] afaik, its against chat policies [18:48] If I call that script with "sudo main.sh" I am STILL in trouble [18:49] since there is a variable $user...who ssh into the ubunut bos..but here will not be albe to to all the commands..since he has no roights [18:49] and I dint want to change the script. [18:50] cwillu_at_work, EvilPhoenix see my problem? I could use ANY distribution on the pendrive and make $user='root' [18:51] i wonder if ubottu is here [18:51] But I d realy like to use ubuntu....but therefor I need a user with root powers [18:52] i belive... [18:52] believe* [18:52] that it is against the chat policies to help you with this [18:52] cwillu_at_work: amirite? [18:52] EvilPhoenix, what poilitcs? [18:52] * EvilPhoenix checks the access list [18:53] EvilPhoenix, I just want to tune my system...to my needs [18:53] latenite, this has nothing to do with ubuntu, it's how the kernel handles permissions [18:54] if you need to do things that only root can do, you need to become root, one way or another [18:54] either with sudo or logging in as the root user [18:54] depending on the setup [18:54] or some other setuid executable, or hacking up the kernel, or whatever [18:54] thats the problem in the first place. the script was written with the assumption that "root" ssh's into the box [18:55] latenite, eh? [18:55] since that can t be done with ubunut [18:55] cwillu_at_work: can I PM you? [18:55] I changed root to $user [18:55] the assumption is that that you ssh into the box as root, it has nothing to do with the user you come from [18:55] EvilPhoenix, sure [18:55] latenite, you can ssh into ubuntu as root, just not with a password unless you enable that [18:56] (typically you would use an ssh key instead) [18:57] cwillu_at_work, but when I do ssh root@box it fails. [18:57] how would I set root passwd? [18:57] latenite, you don't. [18:57] you use an ssh key [18:57] latenite: you need to allow root to log in via SSH and use a key with a blank passphrase [18:57] I mean, you can, but it's just dumb [18:58] IN ANY CASE. we arent allowed to help with getting someone to use root [18:58] or enabling it [18:58] EvilPhoenix, um? [18:58] i just checked with the ubuntu ops channel [18:58] cwillu_at_work: enabling root to ssh [18:58] would also require enabling that account [18:58] EvilPhoenix, hardly [18:58] no? [18:58] EvilPhoenix, you just dump a key in /root/.ssh/authorized_keys [18:58] er, a pubkey [18:58] with sudo [18:58] of course, [18:58] which assumes you have sudo [18:59] in which case if you don't you're stuck at square one again where you dont have permissions [18:59] cwillu_at_work, i dont want to use keys...since thats an installscript.....there will be no keys in that env [18:59] latenite, then you'll have to use passwords and sudo [18:59] * Pici is confused. [18:59] there's no other way to do it [18:59] Pici: i am too :/ :\ [18:59] Pici: but isnt everyone at some point in time? x] [19:00] ok. so can I do "ssh root@box"? on ubuntu anyhow? === ivoks_ is now known as ivoks [19:00] latenite: if you have the sshd configured to let root login yes [19:01] latenite, not without doing configuration on the ubuntu box, and if you're going to do that, then you should use an ssh key rather than enabling root's password [19:01] ^^^ what he said [19:01] EvilPhoenix, key-based logins are allowed by default for root [19:01] EvilPhoenix: Error: "^^" is not a valid command. [19:01] cwillu_at_work: *shrugs* i'm assuming the sshd is configured to not allow Root to login even with ssh keys [19:01] then again [19:01] EvilPhoenix, it's not [19:02] i havent had coffee yet today so i'm tired x] [19:02] *away for said coffee* [19:02] EvilPhoenix, such a restriction is unnecessary anyway, as there's no default keys in authorized_keys [19:02] i.e., it's still secure by default === _TechAway_ is now known as _Techie_ [19:05] cwillu_at_work, it sias yes on permit root login http://pastie.org/1230475 but http://pastie.org/1230482 root hast no password set here [19:05] how would I set root pwd? [19:05] latenite, you don't [19:05] <_Techie_> ffs [19:05] <_Techie_> !root [19:05] Do not try to guess the root password, that is impossible. Instead, realise the truth... there is no root password. Then you will see that it is 'sudo' that grants you access and not the root password. Look at https://help.ubuntu.com/community/RootSudo [19:06] cwillu_at_work, just did http://pastie.org/1230487 [19:06] whats so bad about that? [19:06] <_Techie_> latenite, read that link from ubottu, it shows you how to enable a root password in there [19:07] <_Techie_> now stop beating around the bloody bush [19:09] ok thanks :) [19:09] <_Techie_> and cwillu_at_work, dont rage at me for pointing him in the right direction to give the potential for screw ups, its his server so its his choice [19:10] _Techie_, you can stop raging now [19:12] latenite, do you understand what I mean by using an ssh key to log in? [19:12] <_Techie_> cwillu_at_work, also, when did the ubuntu gods stop people knowing how to access root when they want to [19:13] <_Techie_> people used to do it all the time [19:13] _Techie_, why are you talking to me? [19:13] cwillu_at_work, sure but the installscript I deal with can be used on any bos....I dont want to create keys.... [19:14] <_Techie_> cwillu_at_work, oh, sorry mistook evil for you [19:14] latenite, the installscript is pretty much irrelevant though [19:15] _Techie_, thats how I feel to. I know that a regual user can have all the rights to do waht he want...I root grants them the right..........What I dont know is: why thsi is NOT allowd to be told on chat??? [19:15] I would like a cookie for not losing it on you _Techie_ :p [19:15] latenite, your terminology is... wrong [19:15] cwillu_at_work, in what way? [19:16] <_Techie_> latenite, im gonna ask around [19:16] _Techie_, cool :) [19:16] latenite, "regular user" typically refers to the account, not the actual person [19:16] <_Techie_> and cwillu_at_work, i really am sorry i should have gone off with you as my target, you didnt deserve it and probably never will [19:16] <_Techie_> sholdnt* [19:16] that said, there are very good reasons to not enable to root account [19:17] for one, you don't need to enable the password to get a root prompt [19:17] <_Techie_> i just get extremely frustrated when i see people enforcing their own rules upon other people so abusively [19:17] _Techie_, well, point of interest, it _is_ policy :p [19:17] _Techie_, :) [19:17] <_Techie_> anyway, gonna start asking around as to when it became so bad [19:17] if you have to ask, you almost certainly don't know enough to keep from severely breaking things [19:18] who makes these rules? its a free world! and my box!...If I was to burn it...I could just do it! [19:18] latenite, the two other biggies is that root passwords on internet accessible machines need to be monitored _very_ carefully for intrusions [19:18] You can do whatever you want, but don't expect us to support it here. [19:19] and finally, logging on to a graphical session as root gives _far_ too much power to any application running in the session. Any trivial security flaw in firefox now becomes a remote root exploit. Many applications don't even work correctly with elevated privileges [19:19] cwillu_at_work, it a "freakin' pendrive used to boot a box so I can ssh into it...while insalling....teh user that loging in MUST have root rights BUT MAY NOT have to prepend sudo all th etime [19:20] what is so bad about all that? [19:20] latenite, it's a free world, and my mouth! You don't have the right to demand information from me :p [19:20] cwillu_at_work, :) no wars :) Just asked some stuff. [19:21] latenite, (a) you don't need a password on root to get a root prompt. (b) say you browse some documentation from that pendrive, with firefox running as root... [19:21] so ? [19:22] latenite, any minor vulnerability in firefox (or plugins) now becomes a remote exploit [19:22] there's a sizeable percentage of rootkit'd unix boxes on the web [19:22] I know... [19:23] this box and the pendirve are not on the net.... [19:24] latenite: not enabling root is a ubuntu thing; so naturally ubuntu folk support that policy. i've used many other linux distros as well as freebsd and openbsd so i'm less vehement about it. so it depends who you talk to [19:25] pmatulis, thanks ... that feel that way to. To me it s just a specific ubunut feature...that I must be allowed to change [19:25] ...so I still dont get why there are policie not to tell [19:26] that sound s so "non GNU" [19:26] The policy is to educate. [19:26] latenite, because if you have to _ask_, you have more to learn first [19:27] it's a trivial operation [19:27] cwillu_at_work, that s why I am asking......to learn! so what? you re telling me to learn more? [19:27] in other words you would HINT me into the right direction? [19:27]