| patdk-lap | setting up an outgoing email server is much much harder | 00:00 |
|---|---|---|
| nagchampa | that's not what i want it to do | 00:00 |
| patdk-lap | email relay? | 00:00 |
| nagchampa | yes | 00:00 |
| nagchampa | but filtering | 00:00 |
| patdk-lap | accept email from users and set to other email servers | 00:00 |
| nagchampa | also handle th eincoming mail, but have it forward to the primary mail server afterwards | 00:00 |
| nagchampa | we've got an exchange 2010 server which it should forward incoming mail to | 00:01 |
| patdk-lap | hmm, looks like that example, has it filter all email | 00:01 |
| patdk-lap | no matter where it goes | 00:01 |
| nagchampa | that's what i want | 00:02 |
| patdk-lap | in my setups I only have it filter incoming email to me, and virus scan all email | 00:02 |
| patdk-lap | looks pretty straight forward to me | 00:02 |
| nagchampa | that's great, not to me | 00:02 |
| patdk-lap | well, email has been nothing but more and more complex every few years | 00:03 |
| patdk-lap | due to different ways of protecting from virus and spam | 00:03 |
| nagchampa | the postfix guide details a single type of setup, but doesn't explain much about what other setups are possible | 00:03 |
| patdk-lap | I don't see anything in there about other things for outgoing email, like spf, dkim, hostnames, dns entries | 00:03 |
| nagchampa | spf and dkim are hanled in the mail filtering guide | 00:05 |
| k5673 | nagchampa: Look at this http://beginlinux.com/server_training/mail-server/1044-postfix-mail-gateway | 00:06 |
| patdk-lap | na, I only see receive dkim checking, not outgoing signing | 00:06 |
| nagchampa | i'm sure i'm not the first, but I find postfix completely overwhelming... | 00:07 |
| patdk-lap | same for spf, but that just reqiures dns entries :) | 00:07 |
| patdk-lap | na, postfix is very simple, and flexable | 00:07 |
| patdk-lap | it's the flexability that makes it alittle confusing at first | 00:07 |
| k5673 | nagchampa: Try to configure sendmail | 00:07 |
| nagchampa | patdk-lap: i'm sure it's simple once you understand how it works | 00:07 |
| k5673 | Wahahaha | 00:07 |
| nagchampa | to me it seems overly complex | 00:08 |
| patdk-lap | heh, I grew up on sendmail, writing cf files, before m4 came around | 00:08 |
| k5673 | The good of sendmail is it flexibility. The bad: it's flexibiity. | 00:08 |
| patdk-lap | well, it's the monolithic flexability :) | 00:09 |
| === Pilif12p|afk is now known as Pilif12p | ||
| nagchampa | thanks for the link k5673 | 00:09 |
| patdk-lap | atleast postfix breaks it down into parts, incoming smtp, outgoing smtp, .... | 00:09 |
| === _Techie_ is now known as _TechAway_ | ||
| k5673 | nagchampa: You're wellcome! | 00:09 |
| === _TechAway_ is now known as _Techie_ | ||
| nagchampa | k5673: that looks like an outgoing filter only | 00:11 |
| patdk-lap | you don't want my setup :) | 00:12 |
| k5673 | nagchampa: but aren't you trying to send the emailz to an Exchange server? | 00:12 |
| patdk-lap | it consists of 8 postfix installs running on one machine :) | 00:12 |
| nagchampa | essentially i want it to sit between the internet and the mail server, when the mail server sends mail out it goes through the filter to be scanned and then sent on, and incoming mail should be received by the gateway, scanned and forwarded to exchange | 00:12 |
| nagchampa | do i need to have seperate postfix instances? | 00:13 |
| patdk-lap | ya, one works fine | 00:13 |
| patdk-lap | one sec, I have 2 postfix installs doing just htat for exchange 2007 | 00:13 |
| === _Techie_ is now known as _TechAway_ | ||
| k5673 | I don't think you'll need two instances | 00:14 |
| k5673 | But, for convenience, you can virtualize them | 00:15 |
| k5673 | If you like | 00:15 |
| k5673 | KVM | 00:15 |
| patdk-lap | heh, you can run postfix on the same machine as many times as you want, no need for two seperate ones :) | 00:15 |
| nagchampa | the server is already running on ESXi | 00:15 |
| nagchampa | patdk-lap: that's what i thought | 00:15 |
| k5673 | Ah! Right | 00:15 |
| patdk-lap | my master.cf file: http://userv.pastebin.com/91xmSLq6 | 00:17 |
| patdk-lap | you probably just want to use one content filter, just set them all to the same port | 00:17 |
| patdk-lap | I use different amvisd rules for outgoing and incoming | 00:18 |
| nagchampa | the problem i'm having is finding clear documentation on the configuration options | 00:19 |
| patdk-lap | google :) | 00:19 |
| nagchampa | trust me, i'm googling | 00:19 |
| nagchampa | exim seems to have a crapload more documentation and examples | 00:20 |
| patdk-lap | I didn't have any issues, and I only started using postfix 4 years ago | 00:20 |
| nagchampa | i'm starting to think it's a better option | 00:20 |
| patdk-lap | I've installed >20 postfix setups since them now | 00:20 |
| nagchampa | you've come from sendmail though, which has a lot of similarities (from what i've heard) | 00:21 |
| patdk-lap | I actually came from the rfc's | 00:21 |
| patdk-lap | I always normally read the rfc's before I attempt to do something | 00:21 |
| patdk-lap | kind of hard to do something, if you dunno how it's suppost to work | 00:21 |
| nagchampa | subtle | 00:22 |
| patdk-lap | ya, I'm insane like that | 00:22 |
| patdk-lap | ah, I see that ubuntu doc does have spamassassin disabled finally though :) | 00:23 |
| patdk-lap | oh wait, it says enable it, heh, still screwed up | 00:23 |
| nagchampa | you have a problem with spamassassin? | 00:23 |
| patdk-lap | ya | 00:24 |
| patdk-lap | why use it when it's included in amavisd? | 00:24 |
| patdk-lap | it just eats memory, and never used | 00:24 |
| nagchampa | i thought amavisd used spamassassin | 00:24 |
| patdk-lap | it does | 00:24 |
| patdk-lap | why you don't need spamd | 00:24 |
| === Pilif12p is now known as Pilif12p|afk | ||
| patdk-lap | amavisd does not use spamc | 00:25 |
| patdk-lap | therefor no need for spamd to use memory | 00:25 |
| patdk-lap | amavisd runs it's own version of spamd inside itself | 00:25 |
| === Pilif12p|afk is now known as Pilif12p | ||
| patdk-lap | it's like a waste of 100megs of memory | 00:26 |
| nagchampa | example of what i'm having problems with http://www.postfix.org/STANDARD_CONFIGURATION_README.html#firewall | 00:26 |
| nagchampa | they've got a block of config with a translation following | 00:27 |
| nagchampa | well, a ffew | 00:27 |
| nagchampa | one of them has this in the thranslation | 00:27 |
| nagchampa | Lines 1-7: Accept mail from local systems in $mynetworks, and accept mail from outside for "user@example.com" but not for "user@anything.example.com". The magic is in lines 4-5. | 00:27 |
| nagchampa | of course, they don't explain what the magic is in lines 4-5, and reading the documentation for the two options that are linked leaves me none the wiser | 00:28 |
| patdk-lap | dunno, I don't use it | 00:28 |
| patdk-lap | but I don't have an issue with that | 00:29 |
| nagchampa | care to explain then? | 00:29 |
| patdk-lap | I'm pretty sure relay reciepient map handles that | 00:31 |
| nagchampa | i'm not asking what handles it | 00:32 |
| nagchampa | i'm asking what the hell the options mean :P | 00:32 |
| patdk-lap | parent_domain_matches_subdomains? | 00:32 |
| nagchampa | i get that, kind of, only match subdomains to parent domains for these things | 00:32 |
| patdk-lap | it means, if someone uses, myname.example.com, postfix will treat it as example.com, if there isn't a match for myname.example.com | 00:33 |
| nagchampa | why do they have it enabled for debug_peer_list and smtpd_access_maps is what i dont' get | 00:33 |
| patdk-lap | the default is: parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps | 00:35 |
| patdk-lap | well, it does fix the case when you send email from that server itself | 00:36 |
| patdk-lap | cause it will add it's name as default | 00:36 |
| patdk-lap | so you will get, root@email-gateway.example.com by default | 00:36 |
| nagchampa | so which of the two is that handled by? | 00:36 |
| nagchampa | debug_peer_list or smtpd_access_maps? | 00:36 |
| nagchampa | i think i'm starting to get some of this, the master.cf defines which of the postfix processes you have running (although i don't get why many are here that don't seem to be runnin gwhen postfix is running | 00:45 |
| nagchampa | man maildrop | 00:46 |
| nagchampa | woops | 00:46 |
| nagchampa | :P | 00:46 |
| Patrickdk | well, that doesn't just define daemons | 00:54 |
| Patrickdk | it defines interactions between programs | 00:54 |
| Patrickdk | some of them are daemons | 00:54 |
| Patrickdk | some of them are just for handling mail, so are only started when there is email to handle | 00:55 |
| MTecknology | I'm trying to run mysql inside of a jail.... it doesn't like me - any ideas what I'm doing wrong? | 01:00 |
| MTecknology | I try to start it and get "start: Unknown job: mysql" | 01:00 |
| k5673 | MTecknology: have you installed mysql-server package in the chroot? | 01:01 |
| MTecknology | k5673: ya | 01:01 |
| MTecknology | k5673: I'm starting to think that maybe runnign things inside of a jail is not the best idea... | 01:02 |
| k5673 | MTecknology: Have you tried KVM? | 01:02 |
| MTecknology | k5673: i have - but this system has 1GB RAM | 01:02 |
| k5673 | And? | 01:02 |
| k5673 | MTecknology: You can do it each one with 128 MB RAM | 01:02 |
| k5673 | For tests, of course | 01:03 |
| k5673 | MTecknology: For production, more RAM | 01:03 |
| MTecknology | this is production and won't get more ram | 01:03 |
| k5673 | Ah, right | 01:03 |
| k5673 | What ar you trying to achieve, chroot-jailing all those services? | 01:04 |
| MTecknology | ya | 01:04 |
| MTecknology | k5673: I think I' | 01:04 |
| MTecknology | k5673: I think I'm just going to not do the chroot jails... it'll just be easier | 01:05 |
| k5673 | MTecknology: But, what are you trying to do? | 01:05 |
| MTecknology | k5673: I was tring to have one chroot for everything I wanted to run on the system | 01:05 |
| k5673 | MTecknology: But why, for security reasons? | 01:06 |
| MTecknology | k5673: just to keep things neat and tidy, I'm combining a lot of different servers into one little desktop | 01:07 |
| k5673 | MTecknology: Ah right. | 01:07 |
| MTecknology | k5673: company is liquidating so I'm downsizing what I have | 01:08 |
| k5673 | MTecknology: If that the case, keep in mind the backups. Desktops aren't too much reliable. | 01:08 |
| MTecknology | k5673: ya, I'll plug in an external and use rsnapshot | 01:08 |
| k5673 | MTecknology: Budgets are a trouble for all. I have too much luck. | 01:09 |
| k5673 | MTecknology: Last week, i got approved a budget for two Supermicro servers. Dual Quad-core, 16 GB RAM, 4 TB RAID 5 each. | 01:10 |
| MTecknology | lifeless: heh.. uds is going on? | 01:10 |
| MTecknology | k5673: nice- our issue is some morons up top... | 01:10 |
| k5673 | MTecknology: Ha! | 01:11 |
| k5673 | MTecknology: I think you must install each service normally | 01:11 |
| k5673 | MTecknology: Not in chroot-jails. | 01:12 |
| MTecknology | k5673: that's the one thing I wanted to avoid :P | 01:12 |
| k5673 | MTecknology: Jails are most for sandboxing and development | 01:12 |
| MTecknology | k5673: I'll just toss it all only the one system - i guess with the whole downsizing thing, I'll be trimming the stuff I used to do a lot | 01:12 |
| k5673 | MTecknology: Instead, use virtual domains, with a MySQL backend for the accounts. | 01:12 |
| k5673 | MTecknology: I think that will be a solution for you | 01:13 |
| nagchampa | Patrickdk: thanks, i've been reading the manual pages, slowly piecing it all together... | 01:13 |
| MTecknology | k5673: not really :P | 01:13 |
| MTecknology | k5673: thanks for the help | 01:13 |
| k5673 | OK | 01:13 |
| MTecknology | k5673: I'm kinda biting the bullet and I think in the end I'll realize it's not that big of a deal | 01:14 |
| k5673 | MTecknology: It's not a big deal. | 01:15 |
| MTecknology | k5673: in whose opinion ;) | 01:16 |
| MTecknology | :P | 01:16 |
| MTecknology | I'm kinda phsychotic when it comes to neat and clean | 01:16 |
| k5673 | MTecknology: That's right! | 01:18 |
| ruben23 | hi guys any idea on this i cant apt-get update afetr i install ubuntu-server ----------->http://pastebin.com/ph97fr5r | 01:24 |
| k5673 | ruben23: do you have tried nslookup us.archive.ubuntu.com | 01:33 |
| k5673 | ruben23: ? | 01:33 |
| k5673 | ruben23: Or, just remove all the us. from your /etc/apt/sources.list to use the main server archive.ubuntu.com | 01:33 |
| MTecknology | k5673: yay... now the only issue seems to be either php or mysql - assuming php | 01:35 |
| k5673 | MTecknology: test your php installation, creating a file named test.php and add this http://pastebin.com/k7pA8LfX | 01:37 |
| MTecknology | k5673: :P I always do that on one line | 01:37 |
| MTecknology | k5673: but ya, all I get is a white screen | 01:38 |
| k5673 | MTecknology: so, the problem is php. Check the permissions and owner of the file you just created. Quick and dirty, set to 0777 and nobody:nogroup | 01:39 |
| MTecknology | k5673: I created it as www-data | 01:40 |
| k5673 | MTecknology: if that dazent work, can be php or the interaction with nginx | 01:41 |
| k5673 | MTecknology: http://www.howtoforge.com/nginx_php5_fast_cgi_xcache_ubuntu7.04 | 01:41 |
| MTecknology | k5673: holy crap that looks ugly | 01:42 |
| === _TechAway_ is now known as _Techie_ | ||
| MTecknology | it really suggests using lighty for php!? | 01:42 |
| k5673 | MTecknology: It is. It is. | 01:42 |
| MTecknology | that page is horrible | 01:43 |
| MTecknology | no offense to the link | 01:43 |
| MTecknology | I think it's just php5-fpm not wanting to behave itself | 01:43 |
| MTecknology | hence the reason I tend to run with php5-cgi instead | 01:43 |
| MTecknology | I'd rather not this time though.... | 01:43 |
| MTecknology | I'm going to go have supper with my fiancee - back in a bit | 01:44 |
| ruben23 | k5673: hi sorry i got disconnected this is my nslookup--------->http://pastebin.com/DzAue9Ct | 01:57 |
| k5673 | ruben23: the last time i got that issue, just removed the subdomain and worked.... Try it for just one. Remove the us. | 01:59 |
| k5673 | ruben23: and apt-get update again. | 01:59 |
| ruben23 | ok ill try thanks | 02:01 |
| ruben23 | k5673: unusual still the same...:-( | 02:07 |
| k5673 | ruben23: try apt-get clean apt-get autoclean | 02:08 |
| ruben23 | yep same thing i guess ill try to re-install | 02:09 |
| ruben23 | the server again | 02:09 |
| k5673 | ruben23: nah! | 02:10 |
| k5673 | ruben23: I can't remember the procedure to get that work again | 02:11 |
| k5673 | ruben23: look at this http://ubuntuforums.org/archive/index.php/t-922471.html | 02:14 |
| SpaceBass | hey folks | 02:36 |
| SpaceBass | since upgrading my server box to 10.10, my server won't accept inbound web connections to its apache server, etc | 02:36 |
| SpaceBass | any thoughts? | 02:37 |
| === _Techie_ is now known as _TechAway_ | ||
| Andre_Gondim | is it possible to run ubuntu server by flash driver? | 03:00 |
| Andre_Gondim | is it possible to run ubuntu server installer by flash driver? | 03:00 |
| twb | I don't know what a "flash driver" is. | 03:02 |
| twb | You can certainly boot an installer from an MTD device, like a USB key or CF card. | 03:03 |
| Jordan_U | Andre_Gondim: Yes, many people run Ubuntu server from a flash drive*. | 03:06 |
| Andre_Gondim | twb, what I need to do? Just extract iso file in a pen driver? | 03:06 |
| twb | Andre_Gondim: no, download and install an hd or net install medium | 03:09 |
| twb | IIRC the hd medium expects you to also then copy an .iso file into its root directory. | 03:10 |
| === harrisonk is now known as harrisonk_away | ||
| === Pilif12p is now known as Pilif12p|afk | ||
| Andre_Gondim | isn't there iwconfig in ubuntu maverick server? | 04:35 |
| i_is_broke | whats the best book to read about networking and its proto' | 04:38 |
| twb | What's the cost per mips/flops "sweet spot" for a VT-enabled LGA775 right now? | 04:42 |
| === Andre_Gondim is now known as Andre_Gondim-afk | ||
| === _TechAway_ is now known as _Techie_ | ||
| === _Techie_ is now known as _TechAway_ | ||
| EspadaV8_W | hello, i was wondering if there were package lists for the ubuntu server releases | 07:48 |
| EspadaV8_W | i'm trying to find out what's changed between 10.04 and 10.10 | 07:48 |
| twb | EspadaV8_W: the archive contains a Packages database mapping each file to a package. | 07:50 |
| twb | Er, not Packages. | 07:50 |
| twb | Contents-<arch>.gz | 07:51 |
| twb | e.g. http://archive.ubuntu.com/ubuntu/dists/maverick/Contents-amd64.gz | 07:51 |
| twb | You'd probably be better off getting installing apt-listbugs and apt-listchanges or so | 07:51 |
| uvirtbot | New bug: #666152 in openssh (main) "package openssh-server 1:5.3p1-3ubuntu4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 127" [Undecided,New] https://launchpad.net/bugs/666152 | 07:51 |
| EspadaV8_W | twb: i don't have any ubuntu installs handy, i was wondering if there was any reason to use 10.10 instead of the lts release | 07:52 |
| twb | EspadaV8_W: there isn't | 07:53 |
| twb | I suppose there are also release announcements that give a summary of areas of major progress. | 07:53 |
| twb | https://lists.ubuntu.com/archives/ubuntu-announce/2010-October/000139.html | 07:54 |
| twb | That seems to just link to a "wow, clouds r kool!" news article. | 07:55 |
| EspadaV8_W | is lts -> lts upgrade supported? or would i need to go from 10.04 -> 10.10 -> 11.04 ... ? | 07:55 |
| EspadaV8_W | lol | 07:55 |
| twb | Yes, LTS-to-LTS is supported. | 07:55 |
| jpds | EspadaV8_W: lts→lts is supported. | 07:55 |
| EspadaV8_W | awesome, thanks | 07:58 |
| EspadaV8_W | i guess i'll just use the 10.04 then | 07:58 |
| EspadaV8_W | thanks for the help guys :) | 08:01 |
| neuro666 | hi, how to manage apache2 vhost in mysql db with ubuntu server? | 09:50 |
| joschi | neuro666: you'll have to install mod_vhost_mysql (http://fabienne.tc2.utelisys.net/~skinkie/mod_vhost_mysql2/) or mod_myvhost (http://code.google.com/p/mod-myvhost/) | 10:14 |
| joschi | neuro666: but there's no package for either of them in Ubuntu's package tree | 10:15 |
| neuro666 | joschi : thanks, is it working in your servers under ubuntu & apache2? | 10:17 |
| joschi | no | 10:17 |
| neuro666 | ok | 10:17 |
| === airtonix_ is now known as airtonix | ||
| === _TechAway_ is now known as _Techie_ | ||
| === _Techie_ is now known as _TechAway_ | ||
| xampart | i need to put up a reverse proxy, where every request to www.example.com/wiki/ would be proxied to http://wiki.backend.com/. how would i do about doing this? | 11:14 |
| twb | xampart: install varnish or squid or something? | 11:15 |
| JKL_ | http://httpd.apache.org/docs/2.0/misc/rewriteguide.html search for the proxy | 11:16 |
| twb | "Varnish is an HTTP accelerator designed for content-heavy dynamic web sites. In contrast to other HTTP accelerators, many of which began life as client-side proxies or origin servers, Varnish was designed from the ground up as an HTTP accelerator." | 11:20 |
| twb | I've also seen nginx used as a reverse proxy to SSL-tunnel traffic to a "dumb" httpd | 11:21 |
| === AstralSt is now known as AStorm | ||
| _ruben | xampart: kinda depends on what kind of system www.example.com runs on and if it has any proxy capabilities | 11:30 |
| twb | And what he wants the proxy FOR | 11:32 |
| xampart | wiki.backend.com is a confluence tomcat-webapp. i need to make it so, that users can securely (sslproxy + clientcerts) browse our wiki from outside our lan | 11:34 |
| twb | xampart: we used pound+nginx for that | 11:35 |
| _ruben | i've used apache+mod_proxy for that | 11:35 |
| twb | xampart: is sslproxy something that can act like gpg-agent/ssh-agent, but for HTTPS challenges? | 11:36 |
| twb | I've wanted such a thing for aaaages | 11:36 |
| twb | Currently I have to hand-write a script for each site, that uses curl to acquire a session cookie and dump it into the browser | 11:36 |
| xampart | don't really know what you're asking =) but i found this sslproxyengine directive in apache and tested it with my ca + clientcert inside lan | 11:38 |
| xampart | _ruben: i would like to know our configuration for apache+mod_proxy. i tried "proxypass /wiki/ http://wiki.backend.com/ proxypassreverse /wiki/ http://wiki.backend.com/" | 11:40 |
| twb | Grah! | 11:50 |
| twb | Why, when I ssh into a lucid server running lshd (instead of sshd) as root, is PATH=/bin:/usr/bin ? | 11:50 |
| twb | Do universe programs have to "opt in" to ubuntu's crack-addled replacement of /etc/profile with whatever GUI-happy pam-based is used now? | 11:51 |
| lycan-work | hey guys, how can I create a new user on my ubuntu-server ? | 12:04 |
| twb | lycan-work: "adduser fred" | 12:04 |
| lycan-work | twb so how do i add the user to all main groups / default and root accessible ? | 12:05 |
| lycan-work | i want the new user with admin power | 12:05 |
| twb | To add an existing user to an existing group, "adduser fred dip" | 12:05 |
| twb | You will want to consult documentation to learn which groups are appropriate for any given user. | 12:05 |
| lycan-work | ah | 12:05 |
| lycan-work | thought there was a lil console gui to add new users easier | 12:06 |
| twb | ("dip" provides access to modems and ATM.) | 12:06 |
| twb | There probably is, but here we expect you to learn to do things properly | 12:06 |
| lycan-work | twb yea | 12:17 |
| drcode | hi all | 12:18 |
| drcode | I try to install ubuntu server 10.04, Is there recommanded on swapfile size? | 12:19 |
| lycan-work | drcode i would do default | 12:20 |
| lycan-work | 512m usually fine | 12:20 |
| drcode | k | 12:21 |
| drcode | thanx lycan-work | 12:21 |
| twb | I don't run with swap | 12:23 |
| twb | I don't think I've ever seen a 2.6 system that was actully utilizing the same while still being responsive enough that you could manually kill off the misbehaving process | 12:24 |
| twb | I prefer to just leave that job to the OOM-killer | 12:24 |
| twb | s/the same/swap/ | 12:25 |
| twb | (Oh, and a swapFILE will have worse performance than a swap partition.) | 12:25 |
| uvirtbot | New bug: #666253 in libpam-ldap (main) "Make password change prompts translatable" [Undecided,New] https://launchpad.net/bugs/666253 | 13:47 |
| === zul_ is now known as zul | ||
| blackxored | hello guys, sadly I still have some servers using windows, I wanted to know if creating a CA with openssl on one on my boxes, will be compatible with the windows servers (by compatible I mean, I know the certs are the same, but it will allow me to choose from the CA as for windows-based ones whenever I'm installing a windows service which requires a CA)? | 14:50 |
| mdeslaur | blackxored: yeah, it should be fine...I have done it before...I seem to recall having to package certs as pkcs12 to import them into windows though | 14:52 |
| mdeslaur | but that's just manipulation | 14:52 |
| blackxored | mdeslaur, ok great ;) | 14:52 |
| blackxored | but whenever I install a windows service (which I wont' but my coworkers will), it will allow them to automatically request a new certificate for the service, or I'll have to do it manually | 14:53 |
| blackxored | arent' we all lazy? :P | 14:53 |
| mdeslaur | blackxored: I'm not quite sure what you mean by that...if it's webservers, they will need to send you their CSR and you will need to sign it with openssl | 14:54 |
| blackxored | when you install most of window servers that require ssl, it prompts you for a CA, and it automatically asks for the certificate and imports it | 14:55 |
| mdeslaur | blackxored: hmm...I'm not aware of what would do that...do you have a specific example? | 14:56 |
| blackxored | Office Communication Services, Lync, IIS I believe | 14:56 |
| mdeslaur | blackxored: well, last time i installed IIS, it was a manual process | 14:57 |
| blackxored | which version? | 14:57 |
| mdeslaur | blackxored: a long time ago... | 14:58 |
| blackxored | well i'm talking about iis 7.x or something | 14:58 |
| blackxored | I won't use iis | 14:58 |
| blackxored | hehehe | 14:58 |
| blackxored | luckly | 14:58 |
| blackxored | apache with haproxy | 14:58 |
| blackxored | :P | 14:58 |
| blackxored | but still | 14:58 |
| mdeslaur | blackxored: well, then I don't know, sorry | 14:58 |
| blackxored | I've cited an example | 14:58 |
| === RoAkSoAx is now known as andreserl | ||
| === RoAk is now known as RoAkSoAx | ||
| jetole | Hey guys. If I compile my own app (in this case it's libldap linked against openssl). Is there a way I can uninstall it and revert? Do you know how I can tell dpkg/apt-get/aptitude between them aside from the initial dpkg -i? | 16:02 |
| === jdstrand_ is now known as jdstrand | ||
| Mankdim | Hello, can any one help me plz? I'm installing ubuntu 10.04 server, booting from usb flash disk, when I get to partition menue, it doesn't recognize the hard disk, just the the flash disk. | 16:25 |
| ramseyd | Hi guys | 16:27 |
| ramseyd | I am trying to do apt-get install libvirt-bin | 16:27 |
| ramseyd | But it gets stuck | 16:28 |
| ramseyd | like so: http://dpaste.org/VtkJ/ | 16:28 |
| ramseyd | When I try to kill the process, it tells me to run dpkg --configure -a which gets stuck again | 16:28 |
| ramseyd | So Im running in a circular loop | 16:28 |
| ramseyd | Any way I can resolve this problem? | 16:28 |
| RoAkSoAx | ramseyd, do: "sudo dpkg --configure -a" | 16:28 |
| ramseyd | RoAkSoAx: root@webhost:~# sudo dpkg --configure -a dpkg: status database area is locked by another process | 16:29 |
| ramseyd | oh my bad, i ran that command and it got stuck | 16:29 |
| ramseyd | root@webhost:~# sudo dpkg --configure -a Setting up hal (0.5.14-0ubuntu6) ... invoke-rc.d: ---------------------------------------------------- invoke-rc.d: WARNING: invoke-rc.d called during shutdown sequence invoke-rc.d: enabling safe mode: initscript policy layer disabled invoke-rc.d: ---------------------------------------------------- | 16:29 |
| ramseyd | http://dpaste.org/VtkJ/ | 16:29 |
| RoAkSoAx | ramseyd, seems that other process is running and it is locking it. You might wanna check that | 16:31 |
| ramseyd | RoAkSoAx: Yea, how do I unlock that process? (The process in question being: sudo dpkg --configure -a) | 16:33 |
| whaley | during my last `aptitude safe-upgrade` I noticed that I pulled down linux-image-2.6.32-309-ec2{a}. Should I plan on upgrading my kernel instances or does that happen automatically? | 16:34 |
| whaley | errr, wrong channel, sorry :) | 16:34 |
| a_ok | how do I set the locale to something decent? | 16:34 |
| === Andre_Gondim-afk is now known as Andre_Gondim | ||
| Jeeves_ | hehe, looks like the uds-connectivity is broken :) | 16:37 |
| Mankdim | Hello, can any one help me plz? I'm installing ubuntu 10.04 server, booting from usb flash disk, when I get to partition menue, it doesn't recognize the hard disk, just the the flash disk. | 16:39 |
| Mankdim | any tips | 16:39 |
| k5673 | Mankdim: Are your disks SATA? | 16:40 |
| Mankdim | yes | 16:40 |
| k5673 | Mankdim: In the BIOS, try to change the mode of the SATA controller to Compatible, or something different to AHCI | 16:42 |
| k5673 | Then, try again. | 16:42 |
| Mankdim | aha | 16:42 |
| Mankdim | ok I'll try | 16:42 |
| Mankdim | thanks | 16:42 |
| k5673 | Mankdim: That because the installer maybe can't recognice the controller in AHCI | 16:43 |
| Mankdim | IC | 16:43 |
| Mankdim | ok | 16:43 |
| k5673 | Hello Yo! I'm having an issue with samba. Ubuntu 9.04 server. Some folders and files names are corrupted, like M9DPK0~T, when browsing from Windows Explorer and Nautilus. But in the server's console, i can see the names normally. | 16:47 |
| uvirtbot | New bug: #666363 in unixodbc (main) "unixodbc should not require x11" [Undecided,New] https://launchpad.net/bugs/666363 | 17:01 |
| k5673 | Hello Yo! I'm having an issue with samba. Ubuntu 9.04 server. Some folders and files names are corrupted, like M9DPK0~T, when browsing from Windows Explorer and Nautilus. But in the server's console, i can see the names normally. | 17:11 |
| pmatulis | k5673: note that 9.04 is now EOL | 17:19 |
| Pici | k5673: I've seen that when browsing from Windows to files shared over samba that contain invalid characters for Windows files. | 17:20 |
| Pici | Like colons. | 17:20 |
| Pici | I'm not sure why nautilus would be doing it, unless you're connecting via samba too. | 17:20 |
| === oubiwann-away is now known as oubiwann | ||
| uvirtbot | New bug: #666383 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.41-3ubuntu12.6 failed to install/upgrade: " [Undecided,New] https://launchpad.net/bugs/666383 | 17:46 |
| k5673 | It doesn't have invalid chars | 17:46 |
| drcode | hi all | 17:47 |
| drcode | how I can run update in console? | 17:47 |
| drcode | like auto update that I got in gui? | 17:48 |
| soren | drcode: apt-get update | 17:50 |
| drcode | it only update pkg list | 17:50 |
| soren | apt-get upgrade | 17:50 |
| drcode | it dosn't install auto update | 17:50 |
| drcode | upgrade will not upgrade the ubuntu ver? | 17:51 |
| soren | Let's start over. What do you want to do? | 17:51 |
| drcode | in ubuntu gui , I got automticly info on new update pkg | 17:52 |
| drcode | when I installed ubuntu server it ask me if I want to get auto update | 17:52 |
| drcode | I said no | 17:52 |
| drcode | how can I do it manualy | 17:53 |
| soren | install unattended-upgrades | 17:53 |
| drcode | its same like in gui? | 17:53 |
| soren | It doesn't offer a gui. | 17:54 |
| soren | So no. | 17:54 |
| soren | It doesn't offer a ui at all. | 17:54 |
| soren | It's *unattended*. | 17:54 |
| drcode | it run auto or I can run it manualy, I prefer manauly | 17:54 |
| soren | You *specifically* asked for auto update. | 17:55 |
| soren | ..and I already told you how to do it manually. | 17:55 |
| soren | 16:50 < soren> drcode: apt-get update | 17:55 |
| soren | 16:50 < soren> apt-get upgrade | 17:55 |
| soren | Done. | 17:55 |
| drcode | I want to run auto update manualy | 17:55 |
| drcode | a min | 17:56 |
| drcode | for manualy I run apt-get upgrade? | 17:56 |
| drcode | ok | 17:58 |
| drcode | I undrstand | 17:58 |
| drcode | thanx | 17:58 |
| uvirtbot | New bug: #659854 in samba "Nautilus 2.32.0: Copy to SMB " [Undecided,New] https://launchpad.net/bugs/659854 | 18:12 |
| SpaceBass | hey folks | 18:22 |
| SpaceBass | I upgraded from 10.4 to 10.10 and now when I run sudo su - ... or screen... I get a seg fault - any ideas? | 18:22 |
| RoyK | SpaceBass: uh - can you strace that? | 18:33 |
| RoyK | SpaceBass: also, keep in mind that most servers should be kept on 10.04 LTS if you don't really need 10.10 (10.10 isn't LTS) | 18:34 |
| SpaceBass | RoyK, will strace and report back. | 18:35 |
| RoyK | k | 18:35 |
| SpaceBass | re: LTS vs 10.10 - its a "home server" so I dont mind being on the edge...as long as the core functions work :/ | 18:35 |
| RoyK | ok | 18:35 |
| RoyK | your choice :) | 18:35 |
| SpaceBass | (it was a poor choice, for the record) | 18:36 |
| === amarcolino__ is now known as amarcolino | ||
| RoyK | SpaceBass: no strace yet? | 19:04 |
| === _TechAway_ is now known as _Techie_ | ||
| === kiu_ is now known as kiu | ||
| === _Techie_ is now known as _TechAway_ | ||
| SpaceBass | RoyK, kinda got side tracked - also managed to break my ldap auth | 19:55 |
| === AStorm is now known as AstralStorm | ||
| RoyK | ouch | 19:55 |
| RoyK | hope you have a good backup, then | 19:55 |
| SpaceBass | yeah, no data loss | 19:56 |
| SpaceBass | just config errors | 19:56 |
| consumerism | i was running dpkg-reconfigure postfix when my ssh session died. now i have logged in again but dbdriver config is locked by another process. can i kill it safely, or what should i do to run dpkg-reconfigure postfix again? | 19:56 |
| qman__ | consumerism, I would kill the process and run it again | 19:58 |
| coxn | I'm building a preseed file, and I'd like to automatically do the lvm step like so: | 20:01 |
| coxn | d-i partman-auto/disk string /dev/sda | 20:01 |
| coxn | d-i partman-auto/method string lvm | 20:01 |
| coxn | my problem comes when I later do this: | 20:02 |
| coxn | d-i partman-auto/choose_recipe select home | 20:02 |
| coxn | which produces a / that is too small (6.5 GB) | 20:02 |
| coxn | so I'm left doing an expert string | 20:02 |
| coxn | is there (a) an alternative where I could _just_ tell it that I want a bigger / | 20:02 |
| coxn | or (b) anything I should be aware of in producing my expert string? | 20:03 |
| SpaceBass | whoohooo! fixing ldap auth fixed sudo and screen | 20:03 |
| coxn | I have this, which I have not tried: http://dpaste.org/FQsn/ | 20:03 |
| coxn | feedback most welcome | 20:04 |
| SpaceBass | next challenge - no web services are responding to traffic from other hosts - can view http://localhost fine, but other hosts on same subnet get denied | 20:05 |
| === oubiwann is now known as oubiwann-away | ||
| === oubiwann-away is now known as oubiwann | ||
| coxn | SpaceBass: are you running ufw and/or did you set a Listen directive on a specific IP? | 20:09 |
| coxn | SpaceBass: also, do a "sudo netstat -plnt" to see what's listening where | 20:09 |
| coxn | anybody in here have experience with preseed? | 20:09 |
| SpaceBass | coxn, no firewall, unless the 10.04->10.10 installed and activated one. it could be listen directives, I'll check - natstat shows port 80 listening | 20:09 |
| coxn | SpaceBass: what is it listening on? "0.0.0.0:80" or "127.0.0.1:80" or what? | 20:10 |
| coxn | possibly "::1:80" | 20:10 |
| _ruben | coxn: i do preseed my installs, except for the partitioning part, partman-auto is way too complex/limited/strange/etc for me :) | 20:10 |
| coxn | _ruben: I'm discovering that. Ugh. | 20:11 |
| coxn | _ruben: how do you do partitioning, then? | 20:11 |
| _ruben | coxn: manually .. as a bonus it allows you to finetune the partitioning for each (type of) server | 20:12 |
| _ruben | ideally partman(-auto) would have a sortof hook system, where it'd allow you to run a script which does the heavy lifting and return a xml/txt/whatever file to base the /etc/fstab on | 20:14 |
| _ruben | (heavy lifting meaning: paritioning/formatting/etc) | 20:14 |
| RoyK | SpaceBass: netstat -ln --tcp - does apache/whatever listen to something useful? | 20:14 |
| SpaceBass | RoyK, coxn thanks, tried to reinstall one of the services - looks like mysql wasn't running - thus the error 500 in the logs | 20:15 |
| SpaceBass | seems a lot of services didn't start when I booted | 20:15 |
| SpaceBass | I appreciate all your great troubleshooting help and advice! | 20:16 |
| RoyK | SpaceBass: if you try to apt-get dist-upgrade, what does it say? | 20:16 |
| RoyK | SpaceBass: there might be some packages left hanging | 20:16 |
| SpaceBass | 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded | 20:16 |
| RoyK | ok | 20:16 |
| SpaceBass | and to your earlier point - my critical servers (email, etc) are still on LTS versions :) | 20:17 |
| RoyK | good | 20:17 |
| * RoyK got a little pissed of at work today - some IDIOT managed to reboot the Solaris 10 box used for our main file server just because of some NIS messup he couldn't understand | 20:19 | |
| uvirtbot | New bug: #666469 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.37-1ubuntu5.4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/666469 | 20:36 |
| === SasaGloc is now known as SasaGloc_afk | ||
| * SasaGloc_afk is away: Gone away for now | 20:37 | |
| === _TechAway_ is now known as _Techie_ | ||
| lennart_ | Any one know how I can dump installed packages to a list and use that list to install on another machine? | 20:48 |
| helloren | how do i change the banner when someone logs in the server? i am running ubuntu 10.04 openssh server | 20:50 |
| pmatulis | lennart_: dpkg should do it | 20:50 |
| lennart_ | The old way with dpkg --set... etc. doesn't seem to work | 20:50 |
| lennart_ | on 10.10 | 20:50 |
| * RoyK worries a little about Ubuntu's rfc2550 compliance | 20:51 | |
| pmatulis | lennart_: doesn't seem? | 20:52 |
| lennart_ | doesn't work | 20:52 |
| pmatulis | lennart_: is there a bug? if the man page says it should work and it doesn't then a bug needs to be filed | 20:52 |
| lennart_ | dpkg --get-selections > installed.lst | 20:53 |
| lennart_ | dpkg --set-selections < installed.lst | 20:53 |
| pmatulis | lennart_: ok, and then? | 20:53 |
| lennart_ | nothing | 20:53 |
| RoyK | lennart_: from the manual | 20:54 |
| RoyK | Note that this will not actually install or remove anything, but just set the selection state on the requested packages. You will | 20:54 |
| RoyK | need some other application to actually download and install the requested packages. For example, run apt-get dselect-upgrade. | 20:54 |
| lennart_ | Aha that was the missing part, thanks | 20:55 |
| * RoyK throws an RTFM at lennart_ | 20:56 | |
| lennart_ | Come on whats a manual? | 20:56 |
| pmatulis | lennart_: man man | 20:56 |
| lennart_ | man lazy :) | 20:57 |
| pmatulis | ;) | 20:57 |
| SpaceBass | next challenge, different box :D | 20:59 |
| SpaceBass | my vlan and ethernet configs arent surviving a reboot - they are correct in /etc/networking/interfaces but I have to manually bring them up each time | 20:59 |
| RoyK | pastebin that file | 20:59 |
| SpaceBass | k - may require some trickery since that box isn't online - just rebooted :D - one sec | 21:00 |
| SpaceBass | interesting - lsmod shows 8021q loaded but usedby is 0 | 21:01 |
| SpaceBass | ifconfig shows my eth0.5 interface, but I can't pass any traffic | 21:02 |
| SpaceBass | RoyK, http://pastebin.com/ZXk337n9 | 21:06 |
| SpaceBass | I'd prefer not to have eth0 at all - but if I leave it out, then eth0.5 won't come up and if I set it to dhcp it (Appropratly so) gets an address | 21:08 |
| RoyK | SpaceBass: iirc the supported way is to use 'up ip addr add...' instead of the older eth0:n | 21:08 |
| RoyK | SpaceBass: I might be wrong, though - btw is 8021q in /etc/modules? | 21:09 |
| SpaceBass | RoyK, yes to module question - I got the vlan info from: https://wiki.ubuntu.com/vlan | 21:10 |
| RoyK | I see | 21:11 |
| RoyK | dunno then, sorry | 21:11 |
| RoyK | SpaceBass: is this on 10.10? | 21:11 |
| SpaceBass | thanks for the suggestions! yes 10.10 | 21:12 |
| RoyK | k | 21:12 |
| * RoyK repeats suggestion of not using 10.10 for anything but workstations | 21:12 | |
| SpaceBass | :D | 21:13 |
| SpaceBass | fair enough | 21:13 |
| SpaceBass | got it! added 'auto eth0.5' and commented out the 'eth0' line | 21:15 |
| RoyK | :) | 21:16 |
| RoyK | but - VLANs on a home server? | 21:16 |
| RoyK | using a dd-wrt router or something | 21:16 |
| RoyK | ? | 21:16 |
| SpaceBass | RoyK, PFsense | 21:19 |
| * SpaceBass has a serious problem...er...hobby | 21:20 | |
| RoyK | k | 21:20 |
| SpaceBass | full server cabinet, the works | 21:20 |
| * RoyK shares SpaceBass problems^Whobbies | 21:20 | |
| SpaceBass | glad I'm not alone, there should be a support group for people like us | 21:20 |
| RoyK | or group therapy or something :D | 21:21 |
| SpaceBass | :) | 21:22 |
| SpaceBass | or more importantly, for our significant others - but I did let my wife put the laundry stuff in my server room...(maybe it was the laundry room first, but thats symantics) | 21:23 |
| RoyK | lemme see - I've got a 20cm stack of harddisk platters for an upcoming attempt to make a sound installation - is that nerdy enough? | 21:23 |
| SpaceBass | that counts! | 21:23 |
| RoyK | we have a truckload of old harddrives at work, well, we did, and I've become a master of dissasembling them :D | 21:24 |
| RoyK | 'cept some Seagate drives where the spindle is fixed with some irritating stuff | 21:24 |
| RoyK | http://forums.seagate.com/t5/Barracuda-XT-Barracuda-and/Tool-to-disaassemble-Seagate-platters/td-p/32657 | 21:25 |
| SpaceBass | I feel like I have a ton of 250, 300, 350gb sata drives and nothing too useful to do with them - drobo is a bit on the pricey side for the little bit of storage I'd gain | 21:25 |
| SpaceBass | RoyK, so are you cracking the drives open and fixing them? | 21:25 |
| * RoyK just found a drawer full of 50-250MB drives | 21:25 | |
| RoyK | not fixing - just removing the platters (and the magnets) | 21:26 |
| SpaceBass | ah | 21:26 |
| RoyK | with all sorts of platters, smal 2,5", 3,5" platters with different thickness and those even smaller platters from 15k drives, the sound from them varies quite a bit | 21:29 |
| RoyK | so somehow a glockenspiel out of old drives :D | 21:29 |
| SpaceBass | ohhh you literally meant sound installation! I read that as "working install of some software platform" | 21:29 |
| SpaceBass | very cool! | 21:29 |
| RoyK | I did :) | 21:30 |
| consumerism | is there a way to script the configuration of postfix in dpkg-reconfigure? i want to install it on a cloud image that would need to run every time a new server launches | 21:32 |
| uvirtbot | New bug: #666491 in etckeeper (main) "dpkg does not trigger commit" [Undecided,New] https://launchpad.net/bugs/666491 | 21:37 |
| helloren | ok i got to the /etc/motd file, and opened it the vi editor but i can edit it some how. i know how to use the vi editor but the "i" command for vi does not work nor does the "a" command, and the back space key does not ether. anyone know why that is? | 21:39 |
| helloren | but i cannot edit it** | 21:39 |
| yann2 | hello - how can I allow a user to run a command as another user using sudo without being required to type a password? | 21:42 |
| Patrickdk | edit sudoers file, and tell it to not require a password | 21:43 |
| helloren | patrickdk: what should i use for the openssh server, for ipv6 tunnel broker? i was looking at gogo6.com, as one for the server what do you think? | 21:47 |
| Patrickdk | heh? | 21:47 |
| Patrickdk | does it matter? | 21:47 |
| Patrickdk | personally, I'm using he to ipv6 tunnel, but I really don't like tunnels at all | 21:48 |
| helloren | i dont know thats why i was asking you | 21:48 |
| === ng_ is now known as zz_ng_ | ||
| === Pilif12p|afk is now known as Pilif12p | ||
| _Techie_ | im having some weird problems getting phpvirtualbox running | 22:00 |
| _Techie_ | my php is working for http://phpsysinfo.technz.info/ , but whenever i request the file http://vbox.technz.info/config.php apache just hands me the file | 22:01 |
| === _Techie_ is now known as _TechAway_ | ||
| AlanMeta | hi all, where does apache2 store which user its running as? I've check /etc/apache2/apache2.conf but couldn't find it :-( | 22:33 |
| erichammond | smoser: I've subscribed you to a couple bugs I thought you might be interested in. Let me know if you'd rather I notify you of them some other way. You're welcome to subscribe me to any related to EC2 as I'm interested in tracking these. | 22:36 |
| AlanMeta | hi all, where does apache2 store which user its running as? I've check /etc/apache2/apache2.conf but couldn't find it :-( | 22:42 |
| Pici | AlanMeta: A quick grep reveals that its set in /etc/apache2/envvars:export | 22:43 |
| Pici | er, forget the :export part | 22:43 |
| Pici | /etc/apache2/envvars | 22:43 |
| AlanMeta | Pici thanks | 22:46 |
| yann2 | is it possible to split the sudoers file in several files? like a sudoers, and a sudoers.local? | 22:51 |
| yann2 | t is possible to include other sudoers files from within the sudoers file currently being parsed using the #include and #includedir directives. < sorry for the question, it was in the man sudoers :( | 22:52 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!