=== _Techie_ is now known as _TechAway_ === bastidrazor is now known as bastid_raZor [00:28] anyone have a 10.10 box (physical) that would be willing to test a script for me on? === _TechAway_ is now known as _Techie_ [02:16] good evening [02:18] how can I configure nsswitch.conf to not timeout with the error "YPBINDPROC_DOMAIN: Domain not bound" before logging in as a local user on a client configured with NIS with no connection to the NIS server? I'm trying to make logging in to a local user work without long timeouts when the connection is lost to the NIS server [02:19] the problem seems to be with the group line of nsswitch, group: files nis [02:19] jdimatteo1: not using NIS would be the most obvious way [02:20] Listing files before nis SHOULD suffice to allow local users to log in prior to issuing nis requests. pastebin your whole nsswitch.conf. [02:20] twb: thanks, but I want NIS to normally work. I am trying to better handle the unusual case where the network connection is not working and someone needs to login as a local user (e.g. root needs to login to update the networking configuration). [02:21] twb: one sec regarding pastebin [02:22] There are also a bunch of options you can put in [square brackets] in nsswitch.conf; I think they're documented in the libc or coreutils info pages... [02:24] http://pastebin.com/SAqs2uGq [02:24] twb: your help is greatly appreciated... this problem just drive me nuts [02:25] I'm reviewing man libc now [02:27] jdimatteo1: ah, start with man nsswitch.conf [02:28] Also, are you broadcasting for the YP server, or are you hard-coding its IP? [02:29] twb: I already read man nsswitch.conf. from what I understand, [SUCCESS=return] should be the default anyway, and the other statuses (notfound, unavail, tryagain) don't seem any better [02:31] twb: I'm sorry, can you please explain what you mean by broadcasting? I have the YP server hostnames set in /etc/yp.conf, and the ypserver IP addresses defined in /etc/hosts. Maybe broadcasting is setup as well, but I'm not sure (I didn't originally configure this NIS configuration)... [02:31] twb: does that sufficiently answer your question about broadcasting? [02:32] Hmm? [02:32] I mean do you have "server 1.2.3.4" in /etc/yp.conf (IIRC) [02:32] yes, I do. (specifically, I have http://pastebin.com/hi05CCRp) [02:32] If you don't, IIRC it basically causes it to "ask around" (i.e. broadcast) to find a yp server, which probably takes a while [02:33] You can also try turning off / removing nscd [02:33] Also, if Network Manager is installed, get the fuck rid of it. It causes more network problems than anything else short of a backhoe [02:35] twd: I'm not familiar with nscd, and I don't think it is installed on my system (e.g. "whereis nscd" shows no path) [02:36] twb: I think Network Manager is installed... I agree with you that it is annoying on a server, so I'm uninstalling it now to simplify things [02:37] In 8.04, if you had NIS and NM installed the damn thing would take twenty minutes to netboot [02:37] Er, to boot at all. [02:37] jdimatteo1: i agree, manual is much easier. seems pointless to have any kind of NM on a server ;) [02:37] rdw200169: NM is pointless everywhere [02:38] twb: double-agree [02:38] double-plus-un-good! [02:38] :) something we all agree on, thats nice [02:40] i never thought it was that hard to understand /etc/networking/interfaces... but then again, i'm not normal i guess [02:41] Normal users don't DESERVE computers [02:41] * twb is a sysadmin [02:41] you guys still use interfaces? [02:41] * Nafallo uses vtysh for that ;-) [02:42] Nafallo: that's not in Debian. [02:42] twb: OMG, that fixed the issue :) now let me update my nsswitch to actually work for shadow too and see if it is completely solved [02:42] jdimatteo1: fucking typical :-/ [02:44] twb: quagga [02:44] Oh, yeah, there it is in apt-file [02:44] I haven't switched to IPv6 yet, so I haven't bothered. [02:45] neither have I [02:45] I mean, it's not like I have an AS... [02:45] when I do add IPv6 I'll do dual-stacking though [02:45] I do :-P [02:45] I did think about it, but I decided it wasn't worth the hassle just to improve multi-path routing to my office [02:45] twb: I really hardly believe that fixed it... but it really did... seems unbelievable... [02:46] I mean, most outages are caused by telstra not fixing their copper, which will fuck BOTH my ISPs. [02:46] And of course we were talking about NIS clients, which tends to imply leaf nodes on the network, i.e. BGP is not relevant. YMMV, etc. [03:02] <_Neytiri_> can i get some help with ldap i am getting this error [03:02] <_Neytiri_> root@Pandora-Eywa-DC1:~# ldapadd -x -W -D "cn=admin,dc=xray-hope,dc=local" -f ~/people_group.ldif [03:02] <_Neytiri_> Enter LDAP Password: [03:02] <_Neytiri_> ldap_bind: Invalid credentials (49) [03:02] <_Neytiri_> root@Pandora-Eywa-DC1:~# [03:02] <_Neytiri_> it never asked me to set a password when i set it up [03:05] twb: fyi, I must have been confused earlier because it turns out network-manager had nothing todo with the issue. I really couldn't believe network-manager caused my NIS issue, so I reverted to saved snapshot of the system, updated the nsswitch file, and the yp timeout errors are no longer occurring... I guess it is getting too late for me, since I'm not sure why it is working now, but I just wanted to point out ne [03:07] goodnight all. my problem is fixed and I have no idea why. good enough for me === jdimatteo1 is now known as jdimatteo1_afk [03:15] jdimatteo1_afk: still there? [03:15] jdimatteo1_afk: what VM technology are you using (e.g. KVM)? Are you bridging the VMs to the main network, and are you using proxy arp? IME VMs often have trouble with even simple things, like getting UDP to work reliably. [03:18] <_Neytiri_> anyone here can tell mow how to get ldap working on ubuntu 10.4 [03:20] _Neytiri_, set the password in slapd.conf [03:20] <_Neytiri_> where do i find that file? [03:20] _Neytiri_: client or server side? [03:21] <_Neytiri_> serverside [03:21] _Neytiri_, /etc/ldap [03:21] <_Neytiri_> slapd.cond doesent exist [03:21] you should know where to find that file since you need to edit it to setup your ldap server [03:21] <_Neytiri_> .conf* [03:22] <_Neytiri_> the only .conf file is a ldap.conf [03:22] look in there then, you should see lines for rootdn and rootpw [03:22] _Neytiri_: is slapd installed? [03:23] <_Neytiri_> twb, it should be i am following this tutorial http://www.debuntu.org/ldap-server-and-linux-ldap-clients [03:24] _Neytiri_, but you just said it never asked to setup a password [03:24] <_Neytiri_> slapd is already the newest version. [03:24] <_Neytiri_> it didnt [03:24] _Neytiri_, look at the 3rd step in the guide you just posted [03:25] <_Neytiri_> did that it only asked 3 things [03:25] <_Neytiri_> omit ldap config, pure db and allow ldapv2 [03:26] if you didnt omit the ldap config, you should of been asked those other questions [03:26] should have* [03:27] <_Neytiri_> i dinty omit it and it never asked me [03:27] <_Neytiri_> didnt* [03:31] _Neytiri_, have you tried the guide for ldap in the ubuntu server guide? [03:31] the one i'm looking at looks nothing like that guide you posted [03:31] <_Neytiri_> where do i find that? [03:31] doc.ubuntu.com [03:32] or help.ubuntu.com actually [03:35] <_Neytiri_> i did a remove on everyting i installed from that tutorial and am working off of https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html [03:43] <_Neytiri_> where would i set the actual domin name? [03:44] _Neytiri_: you mean the LDAP DN? [03:44] <_Neytiri_> ya [03:48] It's just the (root)binddn and rootbindpw in the LDAP client [03:48] And the objects themselves in the LDAP server [04:19] Usually when i log into my Ubuntu 10.04 Server, at least every other day there is something for me to upgrade using apt-get upgrade. Since about 9 days, it always reports 0 packages can be updated. [04:19] This is on two different 10.04 Servers the same, can it be or is there something wrong? [04:20] 10.04 has been released. [04:20] That means the only updates for it are security updates [04:21] It's actually bad that you were getting updates every other day -- it meant there were lots of vulnerabilities in the original 10.04 release [04:21] twb: so you mean i also will not receive updates to already installed packages should there be any? [04:21] There are two kinds of updates [04:21] SECURITY updates fix bugs. [04:22] FEATURE updates introduce bugs. [04:22] Released versions of Ubuntu only get the former. [04:22] What i am saying is, say Dovecot will release a new version of itself. Will that show up when i run apt-get upgrade? [04:22] It will not. [04:22] Hmmmm [04:23] What if the update fixes a security hole? [04:23] Then the security team will (usually) backport that security patch to the earlier version. [04:23] There are exceptions to this, such as Mozilla products. [04:24] Sorry to be numb, somehow i feel nervous that nothing was there to update since days... [04:24] overrider: but change is bad! [04:24] its 10.04 server lts, and runs apache, dovecot and postfix and the likes. [04:24] anybody has used kernel direct boot ? [04:24] twb: yeah sure, just wanted to make sure i still receive the security updates; [04:24] fij0: never heard of it. [04:25] im trying but the VM donsent boot [04:25] twb, http://www.mail-archive.com/libvir-list@redhat.com/msg15128.html [04:25] overrider: unfortunately I don't know a way to be confident about that; you could certainly check that -security is still listed in your sources.list, and that "apt-get update" works. [04:25] twb, you pass to the VM the kernel of the host .........basicaly [04:26] sorry mi inglish is realy poor [04:26] english [04:26] I don't see how that could ever work [04:26] twb, libvirt support that - http://libvirt.org/formatdomain.html [04:27] twb, it is realy healfull with lvm , so you cant exec the VM in an lv in the host [04:27] like xen [04:27] Surely it assumes that either you're running a module-less kernel, or that neither host nor guest EVER changes kernel [04:27] Oh, I see what they're saying. [04:28] They just mean the equivalent of qemu -kernel and -initrd -- as opposed to having a bootloader inside the virtual disk. [04:28] twb, yes [04:28] twb, work, im sure, but i cant doit :S [04:28] I have done that before with qemu, a lot. I haven't ever done it with libvirt [04:29] All you do is copy the kernel and ramdisk out of the guest's /boot [04:29] You probably shouldn't put the guest's kernel and ramdisk in the host's /boot, though [04:30] In what way is it not working? [04:33] twb, when is booting , crash and say [04:33] boot args (cat /proc/cmdline) [04:34] check rootdelay= (did the system wait long enought?) [04:34] OK, so it can't find the root filesystem. [04:34] twb, yes [04:34] Please pastebin your libvirt config file (the XML file), and the full boot transcript. [04:36] twb, the xml - http://pastebin.com.ar/6320 [04:36] I don't think the " should be there [04:37] twb, the /var/log/libvirt/qemu/base.log - http://pastebin.com.ar/6321 [04:37] twb, what quote ? [04:37] Oops, ignore that, it should be there. [04:37] No, I change my mind again, it shouldn't :-) [04:37] Inside , you have a " on each end. Try removing it [04:38] You can see those quotes aren't present in the CMDLINE example at http://libvirt.org/formatdomain.html#elementsOSKernel [04:39] twb, yes, i dont know why put that :S , anyway , i remove and happend the same thin [04:42] OK, try specifying the root filesystem by device name instead of UUID [04:42] Also, in the fallback initrd you get, try catting /proc/partitions [04:42] And also in there, look at /dev/disk/by-*/ [04:43] sorry but i dont understand [04:44] After it talks about rootdelay, it should give you a busybox shell [04:44] twb, yes [04:45] OK, in there, run "cat /proc/partitions" [04:47] 252 0 4194304 vda [04:47] OK, so try root=/dev/vda instead of root=UUID=... [04:48] something like this ? root=/dev/vda ro [04:49] twb, it work !!! thanks a lot ! [04:50] hey sorry for the noob question, i jsut did a fresh install of 10.10 server and i accidently mistyped the proxy server on the installation. How do I reenter the corrent info? [04:51] OK. Either you got the UUID wrong, or you can't rely on udev UUID/NAME labelling. [04:51] fij0: because it's a VM, it should be pretty safe to just use root=/dev/vda forevery [04:51] *forever [04:51] DanInOz: when it fails, hit "back" or "reconfigure" or whatever the option is [04:51] i've already completed the install [04:52] DanInOz: oh, then go to /etc/apt/apt.conf [04:52] yeap, changed that. still uses old setting for some reason [04:52] That shouldn't happen. [04:52] i'll just [04:52] what is the value of $http_proxy? [04:52] double check it quick but [04:52] i dunno how to change that >< [04:52] DanInOz: you don't know how to change what? [04:52] like i said, i a a noob haha [04:53] system variables [04:53] I don't know what you mean by "system variables" [04:53] sorry i been reading articles off google trying to fix it I could completely have my wires crossed [04:54] ok i checked apt.conf and it has defiantly saved the change i made [04:54] apt still is trying to use the first value though [04:54] Then check the environment variable $http_proxy. [04:55] how do i do that? [04:55] echo $http_proxy [04:56] it just comes up blank [04:56] Then I don't know where you're getting the "wrong" proxy value from. [04:56] Hm, I suppose you should also check /etc/apt/apt.conf.d/*, but I'm not aware of the installer touching that. [04:56] ok i will look [04:56] Also, I'm assuming you're using either "sudo apt-get" or "sudo aptitude"; if you're using something like synaptic, I can't help you. [04:57] If all else fails, you can try grepping recursively over /etc for the bad proxy string. [04:58] ok thank you :) i'll try those things [04:58] thanks for your patiance! [05:17] * pennyless is away: Gone away for now [06:47] hey guys i have a quick question for anyone. does it matter waht order i configure dovecot + postfix? [06:47] I shouldn't think so, but I haven't done it. [06:49] ok :-/ [06:50] prior install i was able to get all incoming email then no outgoing then at a point i couldnt get incoming emails either [06:50] That was weird. I just noticed that all my alternatives-managed files in /usr/bin weren't symlinks. [06:53] O_o [06:53] im apprehensive to follow the setup guides for dovecot and postfix again [06:53] to end up with the same result as before :( [06:53] eagles0513875: so go through your /etc history to find out what changed? [06:54] already purged and reinstalled just havent configured yet [06:55] atm not sure what would be worse having postfix not working right or having to deal with a microsoft exchange server [07:02] hey twb [07:03] im wondering if the issues i was having could be dovecot related [07:03] dovecot in lucid is old stable version 1.1.2 [07:03] lates is 2.0.6 [07:11] New bug: #670250 in dovecot (main) "upgrade to latest stable version 2.0.6" [Undecided,New] https://launchpad.net/bugs/670250 [07:13] hehe ^^ i reported that [07:13] any email experts in here this morning? [07:14] <_ruben> try asking more specific questions instead [07:15] _ruben: I'm ignoring him, FWIW [07:15] _ruben: my question is doesnt it matter what order i confgure postfix or dovecot [07:17] <_ruben> it doesnt, you should "glue 'em together" yourself anyway [07:18] ok [07:18] interesting [07:18] thanks [07:20] .win 67 [07:21] ? [07:23] hi [07:23] I have been facing issue about collectd MySQL Plugin for configuring Multiple DB,It defaults to root user inspite of other user being hard coded in the config,Please advice [07:23] I am using collectd 4.10.1 [07:28] good morning [07:28] have a 8.10 installation.. and saw now, that there are no updates.. [07:29] can't make updates now, cause on http://ch.archive.ubuntu.com/ubuntu/dists/ there is no intrepid ... grrr [07:33] Isn't 8.10 EOLd by now? [07:34] noaXess: you should probably upgrade to a release that's still supported, see https://help.ubuntu.com/community/UpgradeNotes [07:34] i think it is twb [07:35] twb: EOL i think yes.. but don't i need first update to the latest packages on 8.10? [07:35] noaXess: https://wiki.ubuntu.com/Releases [07:35] noaXess: I don't know; read the notes I linked to [07:35] ok === _TechAway_ is now known as _Techie_ [07:43] Can some one please help me about my query ? [07:44] Sorry, MySQL is boring [07:44] i see [07:44] what makes you say so [07:48] Because it's not very good at being a real database (cf. postgres), and it's not very good at being an easy-to-use, lightweight toy database (cf. sqlite). [07:49] Which is the position of every DBA I've ever met; the only people that like it are PHP users, which is kind of an anti-recommendation. [07:59] kaushal: What do you mean when you say hard-coded in the config? [08:01] owh: shall i pastebin the collectd.conf ? [08:01] No. [08:01] when i run the mysql command i am able to connect [08:02] So, what is the actual problem? [08:02] whereas when i use collectd, it maps to root@localhost by default [08:02] inspite of setting user other than root user [08:03] I could see in the collectd debug log [08:03] IIRC mysql has some broken thing where referring to either "localhost" or "127.0.0.1" actually makes it use a socket instead of a port [08:04] Not having ever used collectd, I suspect you might have a syntax error in your config. Can you increase the vebosity? Did you reload/restart collectd after updating the config? [08:04] twb: You appear to be referring to a network/non-network connection parameter which changed default behaviour for security purposes in v4 of MySQL.I don't think it's relevant. [08:08] OK, that was just a shot in the dark [08:08] The last couple of times someone was in here, that turned out to be the problem [08:09] The problem being described appears to be an authentication issue. [08:10] twb: If you make a shot in the dark, that's fine, but it would be smart to let your audience know that it's a shot in the dark. There's nothing wrong with firing off ideas, but you need to provide some context since not everyone knows everyone in this place. [08:10] sorry [08:12] BRB [08:16] I have increased the verbosity [08:16] to debug [08:16] it still not worked [08:17] [2010-11-03 01:17:26] mysql_real_connect failed: Access denied for user 'root'@'localhost' (using password: NO) [08:17] [2010-11-03 01:17:26] read-function of plugin `mysql' failed. Will suspend it for 10 seconds. [08:17] i get that error [08:18] kaushal: that's from collectd's log? [08:19] yes [08:19] http://pastebin.ubuntu.com/524931/ [08:21] kaushal: that doesn't look like root@localhost [08:22] kaushal: Is that the complete configuration file for collectd? [08:22] owh: nope [08:22] Does mysql have a nagios user? [08:22] yes [08:22] Let me pastebin it again [08:23] Did you reload privileges? [08:23] http://pastebin.ubuntu.com/524934/ [08:23] that will explain the details [08:24] It is possible/probable that you have a syntax error in your config, or that collectd doesn't use the credentials the way you expect. [08:25] Do you want me to pastebin the collectd.conf ? [08:25] Is there an /etc/default/collectd file which perhaps overrides stuff? [08:26] I have compiled collectd from source [08:26] I am using collectd 4.10.1 [08:26] Well, at that point you lost all support really. Is there not a ubuntu packaged version? [08:27] ok [08:27] but it does not support multiple instances [08:27] I am using 8.04 [08:27] The reason I say that is because when you use a ubuntu package, things are stored in certain places and people like me expect things to be in those places. [08:28] ok [08:28] Is multiple instances support a compile option? [08:28] nope [08:28] So, you hacked it? [08:28] http://collectd.org/wiki/index.php/Plugin:MySQL [08:30] Let me get this straight. You're just trying to collect stats from mysql? [08:32] Does it work for one database? [08:33] yes [08:35] Why are you then showing a different socket? [08:43] It has been configured like that [08:43] A different socket for a different database? [08:44] yes [08:44] What happens if you create two plugin sections, rather than two database sections in the same plugin section? [08:47] ok [08:47] owh: Let me try it out [08:48] Thanks for the hint [08:48] will update you now [08:49] still the same [08:50] So, why are you doing this with two different sockets again? [08:51] Its multiple MySQL Instances [08:52] I think you're going to have to ask the collectd developers about this one. [08:52] ok [08:52] owh: i can pastebin the collectd.conf [08:53] As I said before, I'm not a user of collectd. I'm asking silly questions to get you to say :"Doh, aha!" [08:57] i will be installing bacula but it ask me to use dbconfig-common will this erase my other databases? [08:57] owh: Thanks for the support [08:57] np [08:58] kaushal: Not that we got to an answer, but sometimes that happens :) [08:58] yes an attempt is crucial in life [08:58] isnt it [08:58] Thats much appreciated [08:58] Yup [08:59] owh: the irony is that no one responds on #collectd [08:59] I have been following it rigorously [08:59] for quite some time [08:59] I'd see if there is a mailing list and send an email there. [09:00] I have tested it with the older version too and then i used the latest under the impression that it would be working fine [09:00] but it did not worked either [09:00] ugh, postfix doesn't want to work with clamav-milter at all [09:01] give it the right name for the socket = still says socket file doesn't exist, even though it does and clamav-milter is running [09:03] postfix/smtpd[8781]: warning: connect to Milter service unix:/var/run/clamav/clamav-milter.ctl: No such file or directory [09:03] definitely does exist, and is a valid socket [09:09] Grumble [09:10] I get annoyed every time I see clamav on a server, using up all the free CPU and memory [09:10] I think "if they didn't have Windows desktops, I could get rid of this stupid scanner" [09:32] New bug: #670289 in rabbitmq-server (main) "Laptop won't shut down with rabbitmq running" [Undecided,New] https://launchpad.net/bugs/670289 [09:34] twb: our business itself doesn't have any Windows machines, but all of our staff do at home so yeah its required [09:34] Stupid staff [09:34] I jump on their heads! [09:35] it frustrates me how little about computers they know >_> [09:35] but we don't pay them haha we're a non-profit organisation of course [09:36] They should need a license to use them [09:36] like automobiles and forklifts and handgus [09:37] *handguns [09:39] heh [09:59] hey: I'm having problems with: https://help.ubuntu.com/10.04/serverguide/C/kerberos-ldap.html does anyone care to help ? [10:05] evelyette: you need to describe the problem first. [10:12] Hello [10:23] twb, hi [10:23] well the problem is with step 5: the command I try to issue says: ldap_bind: Invalid credentials (49) [10:23] it's because I don't have cn=admin,cn=config [10:24] Are you on 10.04? [10:24] 10.10 [10:24] twb, ^ [10:24] Then why aren't you reading the 10.10 server guide? [10:25] does it exist? [10:25] well it should be the same ... [10:25] TIAS [10:26] yes it's the same [10:26] so, do you have any idea why that happens [10:26] because I've read this: http://www.openldap.org/doc/admin24/slapdconf2.html and there's no mentioning of "cn=admin,cn=config" [10:26] so why should that even be there? [10:28] IIRC cn=admin,cn=config is where Ubuntu moved the database config from slapd.conf into the database itself [10:28] I've only dealt with slapd on 8.04, so I don't know much about it [10:29] no it's the cn=config ... [10:29] not the cn=admin,cn=config [10:29] http://www.openldap.org/doc/admin24/config_dit.png [10:29] there's cn=module,cn=config and cn=schema,cn=config. ... [10:29] but no cn=admin,cn=config [10:35] Dunno, man [10:46] i hated it when they moved to cn=config [10:53] I hated pretty much every change from 8.04 to 10.04 [10:53] If joeyh's cuts get off the ground, I will just switch to it and tell the customers I'm running the "reliable" version of ubuntu [10:54] The only reason I adopted ubuntu was because of the "when it's NOT ready" release schedule [11:00] twb: Take a look at what's in Debian and not of the security hardening features in Ubuntu first. [11:01] w.u.c/Security/Features IIRC [11:01] Yeah, you have a point there [11:01] Poor kees, he tries so hard to get traction there [11:02] I just get so angry when simple stuff like booting from NFS doesn't work in an LTS release because of cyclic dependencies in the upstart jobs [11:09] hi...what is a good program to pipe log files to on my ubuntu server? primarily i'd like to feed it logs from apache2 and postgres8.4, and would like the rolled every 24 hours [11:10] kinygos, this is done by default, though the rotation is usually longer than 24 hours [11:11] bugger...it's always the way, i've literally just found an article on LinuxLogFiles on ubunt.com (sorry about that) [11:12] qman__: thanks for that...i'll check what's going on in my server at the moment :) [11:13] kinygos: what you pipe them into really depends on what you're trying to achieve [11:14] e.g. logcheck and denyhosts both work by reading logfiles, but they do different things [11:22] twb: It's clear that the boot work in the last LTS was not well considered for the server use case. That's unfortunate, but I suspect a one off occurrence. If you have suggestions on how to fix it, I'm sure if it's not too invasive, they'd be open for changes. [11:23] twb: very good point...thanks :) [11:24] hey [11:24] ScottK: I realize that specific case was a one-off, but there seem to be a lot of one-offs for server users [11:24] trying to debootstrap a lucid image for uploading to ec2 as an ami [11:24] do I need to install the ec2 kernel? [11:25] in the chroot? [11:25] About the worst thing Debian did to me was the motd fuckup [11:25] twb: I think NFS is sufficiently non-obscure that there would be interest in getting it fixed. A large problem is that most server people don't test pre-release. [11:25] Nod. [11:26] I tested 8.04 pretty extensively, but IIRC timing of 10.04 didn't tie in with the contracts I was working late 09 / early 10 [11:27] (i.e. I wasn't paid to start developing until June, and that was only because we discovered without warning that 8.04 didn't work with the Atom D510's GPU.) [11:27] any thoughts on the ami / ec2 kernel? [11:28] I was used to the IOSTAT command and at some debian installations the iostat utility give ma all information in one line, as in (vmstat 1) ... but now on lucid iostat gives me statistics vertically, it's so hard to read changes if you do a iostat 1 ... is there a way to change the format to be on one line again? I did not find anything in the man pages .... or is this a new iostat? [11:30] Hatrix|away: I've never seen a one-line iostat in linux. [11:30] twb: what is joeyh's cuts? [11:31] Hatrix|away: Joey Hess is talking about making time-based snapshots of Sid, called "cuts" [11:31] twb: hmm, and for what reason, is this ubuntu related or debian related? [11:31] ref http://kitenet.net/~joey/code/debian/cut/ [11:32] Hatrix|away: I don't understand the question. [11:33] Hatrix|away: did you mean iostat output like this? http://paste.debian.net/98916/ [11:33] twb: yes, exactly [11:33] That's OpenBSD. [11:33] on linux, it looks like this: http://paste.debian.net/98917/ [11:34] (And that's FC3, so it has been like that for a while.) [11:34] well, i have it on a debian machine, and was used to it, but all ubuntu machines i have have the long output [11:35] twb: like here: http://inetpro.org/pastebin/10475 [11:36] this is a debian 5.0.3 [11:36] I don't know how you got that. Try looking at the manpage. [11:36] omg....i've just looked in /var/log/auth.log for sshd logins, and it's packed with failed attempts from ip addresses i've not seen!!! am i being naive?? [11:36] I did, I am not a linux newbie ... but I did not find out anything [11:37] kinygos: haha, yes, for years i put my ssh logins to different ports (like, bigger 32000), that will not stop a determined person, but stops all those script kiddys and bot-net attacks [11:37] any SSH server listening on the default port will get hit [11:38] there are many ways to protect yourself [11:38] wow...i think changing port is the first thing to do [11:38] changing ports can be very inconvenient, and isn't the only way [11:38] twb: ah, please forgive me, I never check the path of this iostat, it's a selfcompiled one from http://linux.inet.hr .... seems the prior admin loved the iostat onliner from bsd that much :-) haha, and I was searching my ASS off in the man pages [11:38] limiting firewalls and fail2ban will also negate these attacks [11:39] i'm a big fan of port knocking for ssh access [11:39] c0nv1ct: with -m pknock, or do you use some lame-ass userland implementation? [11:39] qman__: yes, and that's why I said that I do it this way, of course there are million different ways, i like the port knockers though, but to much trouble for me [11:39] twb, lame-ass userland that works fine for me [11:39] Bah. [11:40] If anyone has a working -m hashlimit / -m recent implementation, let me know. [11:40] twb, what advantages does -m pknock give? [11:40] I use a -m recent [11:40] I can get -m recent working, but -m hashlimit just sits on its ass matching every / no packet. [11:40]