/srv/irclogs.ubuntu.com/2010/11/08/#ubuntu-server.txt

clustyis it safe to upgrade a headless machine over ssh ?00:00
jpdsclusty: Always good to have a backup plan.00:01
jpdsclusty: But most of the time it should be safe.00:02
clustyjpds: i remember it used to start it's own ssh server on some strange port00:03
clustyin case one needed to update ssh itself00:03
jpdsI'm never seen/heard of that.00:03
=== _Techie_ is now known as _TechAway_
clustyjpds: http://pastebin.com/BLBWhaTz00:21
=== _TechAway_ is now known as _Techie_
qman__it usually works, but have a contingency plan00:39
qman__don't go upgrading the production server in a datacenter hundreds of miles away when you need it going tomorrow ;)00:39
robert_lightany Eucalyptus folks out there?  I'm having UEC woes00:51
=== _Techie_ is now known as _TechAway_
robert_lightmmm....not much chatter going on here...any Eucalyptus folks here?01:02
=== _TechAway_ is now known as _Techie_
qman__robert_light, there rarely is01:32
qman__!ask01:32
ubottuPlease don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-)01:32
qman__!anyone01:33
ubottuA large amount of the first questions asked in this channel start with "Does anyone/anybody..."  Why not ask your next question (the real one) and find out?01:33
qman__this channel moves slowly, you have a much better chance of getting an answer if you just ask about your problem and wait01:33
databitswhat is the best ircd to use ?02:00
qman__databits, best is a matter of opinion, though unreal is very popular02:10
qman__it's one of the more featureful02:10
databitsthanks that is the one that I just downloaded02:16
databitshad another questions... what is the usual directory to install daemons/applications ?02:17
databitswhat is good practice ?02:17
twbdatabits: that is not the correct way to install software in Ubuntu.02:21
twbdatabits: you should *always* install stuff via apt-get, until you know enough to know when it's OK not to.02:22
databitsok well how would I go about doing the sudo apt-get install command with unreal then ?02:26
twbYou would say something like "apt-cache search unreal", to find out the package name, then "sudo apt-get install <package name>"02:27
qman__actually, looks like it's not in the repositories02:28
twb(Unfortunately I can't see an unreal ircd there, so I suggest you pick a different one that IS there.)02:28
databitsI think I can manage compiling it myself02:28
twbdatabits: I advise you not to do that.02:28
databitswhat is standard practice for a directory02:28
qman__well, you wanted to know best practice02:28
databitstwb: why ?02:29
qman__best practice is not to compile software yourself02:29
toddnineHey guys.  I'm using Chef to manage my cluster and I'm having problems with iptables.  I'm adding this to the file "/etc/iptables.d/zookeeper" -A INPUT -p TCP --dst 10.0.1.179 --dport 2888 -s 10.0.1.177 -j ACCEPT02:29
twbBecause while you can compile the package and walk away, you probably aren't capable of properly integrating it into the existing package management framework, nor for monitoring upstream vulnerability notifications and backporting security patches to the version you compiled.02:29
qman__especially with something like an ircd, you open yourself up to security holes by doing so02:29
toddnineaccept tcp on ip 10.0.1.179 from 10.0.1.177 right?02:29
toddnineon port 288802:29
twb...which is basically why you have a distro instead of compiling everything yourself02:30
databitsI can handle compiling the software myself... that is simple.  I just never picked up on which directory to use02:30
qman__it's not about compiling it once02:30
qman__it's about keeping up to date and fixing problems as they arise02:30
twbtoddnine: -d, not --dst02:30
qman__and managing problems with other related packages in the package management02:30
twbdatabits: if you want to do that, I'm not going to come around and break your arms in order to stop you.  But I do advise against it.02:31
qman__there is no "directory to use" for self-compiled software, because self-compiled software is against best practice02:31
databitswell I see it as a good learning experience02:31
twbAs well as apt-cache, you can search by tags: http://paste.debian.net/99277/02:31
databitsok if that is the truth then why am I reading that unreal is one of the better ircd's ? the only way you can use it is by compiling it yourself02:32
jmarsdendatabits: Best practice would perhaps be to learn about packaging and then package the ircd and get it accepted into Debian and Ubuntu :)02:32
twbjmarsden: +1.  Or file a Request For Package (RFP) bug.02:32
toddninetwb: awesome thanks02:34
databitsin general say a peice of software uses apt-get where would it be stored ?02:34
jmarsdenIn a repository02:35
databitson my hd02:35
toddnineone more question.  These are all nodes that use DHCP (just testing vmware nodes).  After they get an IP address, the ssh daemon isn't binding to the ip.  I'm using 10.04.  Is there something I'm missing in my config?02:35
jmarsdenWhereever the packager packaged it to install to.  Read the FHS (File Hierarchy Standard) and Debian Policy for details of what kinds of files go where.02:36
twbtoddnine: ssh doesn't bind to an IP/interface by default.  It listens to :* and ::*.02:36
twbtoddnine: if you've changed sshd_config to bind to specific intefaces, you'll probably have race problems due to the high level of asynchronicity in Ubuntu's init.02:37
jmarsdendatabits: http://www.pathname.com/fhs/ and http://www.debian.org/doc/debian-policy/ch-opersys.html#s9.102:37
twbdatabits: you can use "dpkg -L <package name>" to find out where files are.02:37
twbdatabits: for packages that aren't installed yet, you can use apt-file(1) or packages.ubuntu.com.02:38
toddninetwb: haven't touched anything.  It's weird, if I leave it after boot I can't ssh in.  If I log in via the console and /etc/init.d/networking restart, everything is fine02:39
databitsthank you02:40
twbtoddnine: "after boot I can't ssh in" is different from "ssh isn't binding to the IP"02:41
twbtoddnine: "/etc/init.d/networking restart" probably (re)starts ssh as a kludgy side-effect02:42
twbtoddnine: what you ought to do is get out-of-band access to the VM's local console, and work out what's really going on in there.02:42
toddninetwb: True, I also have a really strange issue where bash won't recall commands with the up key02:47
jmarsdentoddnine: Does it work with ctrl-p -- if so, you probably have a keyboard mapping issue or some kind02:48
twbtoddnine: hit ^P02:49
twbAs jmarsden says, it's probably because your TERM is wrong, or maybe because the other admin set root's default to bloody set -o vi.02:49
toddninejmarsden: ctrl+p does work02:50
twbIMO you should just learn to use ^P :-P02:50
jmarsdentoddnine: Try    set -o emacs       and see if that fixes it?02:51
k-radis lighttpd a secure web server ?02:51
twbk-rad: there's no such thing as a "secure" web server.02:52
toddnineunfortunately now02:52
toddninenot*02:52
toddnineit works correctly over ssh02:52
k-radcould i get an enlightened recommendation for a light http web server that isn't too insecure02:52
jmarsdentoddnine: in the session where it does not work, do     echo $TERM    and compare with the result in the ssh session02:52
k-radany opinions on boa web server ?02:54
k-radalso is sqlite3 an acceptable SQL solution for web servers ?02:54
k-radthe aim of what i'd like to accomplish is to easily setup a web server, secure, and provide all features that wordpress requires02:55
jmarsdenk-rad:    sudo apt-get install wordpress02:56
k-radwow.  thank you.  that includes web server ?02:57
jmarsdenk-rad: It pulls in the dependencies it needs.  Try it!02:57
k-radthank you02:58
jmarsdenk-rad: You're welcome.02:59
qman__I noticed an error in the serverguide, here: https://help.ubuntu.com/10.04/serverguide/C/samba-fileserver.html03:00
qman__it references /etc/init.d/samba, which no longer exists03:00
qman__what should I do to resolve it?03:00
jmarsdenFile a bug against ubuntu-serverguide and ideally then attach a patch correcting the issue :)03:01
qman__ok, will do03:01
qman__ah, already been reported03:09
qman__bug 66576303:09
uvirtbotLaunchpad bug 665763 in ubuntu-docs "obsolete usage in example for restarting samba" [Undecided,New] https://launchpad.net/bugs/66576303:09
jmarsdenqman__: Cool, so just hot the "this bug affects me" button so it gets a bit more attention :)03:10
qman__yep :)03:10
JasonMSPIm using putty to login to my server.  I have a client that has uploaded some file names in Russian.  When I go into their home directory the names are all ???? as if the langhuage isn't installed.  How do I add the language/font for russian?  if I FTP i can read the russian, but in the shell its only '????'  Im running 10.0403:14
qman__JasonMSP, it's probably on your client machine03:19
qman__I have files with Kanji names that work fine on all my ubuntu machines with no special configuration03:19
qman__for windows XP, it's in control panel, regional and language settings03:19
JasonMSPOn my windows machine im fine.  Its in the shell (im using putty) that the files come up as "????????"03:20
yann2so the problem is it is not displaying unicode fonts on windows right03:20
yann2maybe your FTP client and putty dont use the same font03:21
yann2and you use a font in putty that doesnt have unicode03:21
qman__yes, also possible03:21
qman__I don't have any files to verify but I would bet money that the ubuntu server is not at fault here03:21
yann2anyway this is not an ubuntu issue, but a windows one, I m afraid03:21
JasonMSPif its windows I can figure it out03:22
qman__ubuntu has always been great about other languages and special characters03:22
yann2JasonMSP, there might be updates for you to install on windows update.03:22
JasonMSPглавная03:22
yann2that displayed fine here ;)03:22
qman__and here as well03:23
JasonMSPthats one of the folders it displays fine except inside the shell03:23
JasonMSPI guess putty more to be more acurate03:23
qman__JasonMSP, http://oi53.tinypic.com/js2741.jpg03:25
JasonMSPhmmm...03:26
yann2I cant paste it in putty under linux though03:30
yann2ok figured it out03:32
yann2you need to select UTF 8 in translation03:32
yann2in the options03:32
yann2and then select a font where you have utf8 installed, in my case monospace instead of fixed03:32
JanCwhy do you use PuTTY in linux?03:33
yann2http://waste.mandragor.org/putty-utf8.png03:34
yann2JanC, I don't, but it got me intrigued :)03:34
JasonMSPim on a windows machine logged into my server03:34
yann2JasonMSP, the screenshot is actually a putty window :) just need to select appropriate font03:35
yann2and utf8 too03:35
JanCsomebody needs to fix PuTTY to use utf-8 by default, this is 2010 after all, not 1990 or so...  :P03:36
yann2off to bed now, good night and good luck JasonMSP03:36
qman__yeah, but windows doesn't always play nice with utf803:36
JasonMSPthanks03:36
JanCqman__: it's a terminal emulator to connect to unix/linux systems, so it shouldn't care about Windows03:37
JanCand especially not when run on linux  ☺03:37
=== _Techie_ is now known as _TechAway_
JasonMSPdidn't get it working.  I tried UTF-8 my font right now is console and none of the others I tried worked03:49
=== MenZa is now known as lhavelund
=== _TechAway_ is now known as _Techie_
andres_alguien en español?05:39
=== baggar11_ is now known as baggar11
qman__!es | andres_05:44
ubottuandres_: En la mayoría de canales de Ubuntu se habla sólo en inglés. Si busca ayuda en español o charlar entra en el canal #ubuntu-es. Escribe "/join #ubuntu-es" (sin comillas) y dale a enter.05:44
andres_gracias por el comentario, ya esoty en ubuntu-es y ubuntu-server05:44
andres_solo que estoy pidiendo ayuda por estos tres canales05:44
andres_para configurar el ldap se debe tener creado un dominio?05:45
andres_somebody can help me whit ldap?05:56
andres_i am following the guide from ubuntu oficial page05:57
andres_but i have a problem when05:57
andres_i add the entries05:58
andres_somebody?05:58
twbandres_: is there an error message?05:58
andres_yes, this one05:58
andres_ldap_bind: Server is unwilling to perform (53)05:59
andres_        additional info: unauthenticated bind (DN with no password) disallowed05:59
andres_do i have to configure the DNS?05:59
twbThat's saying you're trying to make changes anonymously.05:59
twbYou probably need to connect using the rootbinddn05:59
andres_what do you mean?06:00
andres_what is rootbinddn?06:00
twbThe rootbinddn is the name of the LDAP superuser06:00
andres_mmmm06:01
andres_i will try06:01
andres_that user dont exist in my sistem06:01
twbe.g. cn=admin,dc=example,dc=net06:01
andres_and as root?06:01
twbWhat command are you running?06:02
andres_this :   ldapsearch -xLLL -b "dc=example,dc=com" uid=john sn givenName cn06:03
andres_sorry06:03
andres_is this06:03
andres_sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif06:03
twbSo you're logging in as cn=admin,dc=example,dc=com.06:04
andres_yes06:04
twbEither you aren't providing a password, or you're providing the wrong password, or that account doesn't exist in ldap.06:04
andres_i am following this guide06:05
andres_https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html06:05
andres_when i put that comamd line06:06
andres_ldap ask me a pass06:06
andres_but it dont have a pass, so i just press enter06:06
andres_when i put a pass, it say me that is a wrong pass06:07
twbWhy don't you have a password?06:07
twbThat page sets the password to "secret"06:08
andres_yes, but i write it, and it say that is wrongç06:10
MTecknology!info sphinxsearch06:11
ubottusphinxsearch (source: sphinxsearch): Fast standalone full-text SQL search engine. In component universe, is optional. Version 0.9.9-6 (maverick), package size 2417 kB, installed size 6640 kB06:11
MTecknology!info sphinxsearch lucid06:11
ubottusphinxsearch (source: sphinxsearch): Fast standalone full-text SQL search engine. In component universe, is optional. Version 0.9.8.1-2 (lucid), package size 1462 kB, installed size 3888 kB06:12
twbandres_: then I don't know.  Sorry.06:12
MTecknologyheh... 0.9.9 is kinda old..06:12
andres_dont worry06:12
andres_thank for your help06:12
andres_a question06:26
andres_i have to configure dns for ldap?06:26
twbNot necessarily.06:27
twbIndeed, is it technically possible for LDAP to replace DNS06:27
andres_thank06:30
andres_problem resolved06:35
andres_i was wrong06:35
twbWhat did you do wrong?06:36
eagles0513875hey guys is it possible to install ubuntu cloud features on kubuntu06:56
* Datz wonders if system information on login is disabled even for multi core systems if load is above 1.07:00
uvirtbotNew bug: #672417 in cloud-init (main) "Correct grammar, punctuation in root authorized_keys message on EC2" [Undecided,New] https://launchpad.net/bugs/67241707:01
twbShould be easy enough to test07:04
eagles0513875hey twb is it possible to install the cloud computing features that server has on kubuntu07:08
* Datz has ubu-server on only a single core07:10
twbDatz: my multi-core boxes are 8.04, so I can't check for you without pissing about with a VM07:11
twbIf you have qemu/kvm lying around, you can tell it to emulate multiple cores07:11
Datztwb: ah, that's ok. Just curious. ;)07:19
GanymedeHello, I have a server here with tons of RAM but no hard drive. I'd like to run Ubuntu on it so I was wondering if there was some way I could start up Ubuntu from the LiveCD but then run it entirely out of RAM. I do not, at this time, have the capability to use a SAN or set up a DHCP server for network boot.07:23
GanymedeAs far as I know, if using the LiveCD, the LiveCD must remain in the tray and it gets accessed every now and then, which is slow. I'd like it to have the root filesystem in RAM so the CD never needs to be accessed.07:23
GanymedeAnd I'm ready and willing to accept that if the power gets cut to this machine, I'll lose all my data on it.07:24
databitsanyone in here know of some good sick trance/\/bass track's ?07:25
databitsI need some sick tech to listen too07:25
twb!offtopic07:26
ubottu#ubuntu is the Ubuntu support channel, for all Ubuntu-related support questions. Please use #ubuntu-offtopic for other topics (though our !guidelines apply there too). Thanks!07:26
twbGanymede: casper and/or live-initramfs supports that07:26
databitswoops wrong window07:26
twbGanymede: at least some versions take "toram" as a boot option.07:27
* Datz remembers slax gives the option to run from ram at boot.07:29
Ganymedetwb: So if I'm understanding you correctly, all I need to do it supply BOOT=live as a kernel parameter at the boot prompt from a standard (desktop) LiveCD ISO and the additional options listed at http://manpages.ubuntu.com/manpages/lucid/man7/live-initramfs.7.html are also available to me?07:30
twbGanymede: last time I looked Ubuntu used casper, not live-initramfs/live-boot (the Debian fork).07:31
twbThe live CD will already be using boot=live or boot=casper, IIRC you hit F6 to edit the boot prompt from gfxboot.07:32
GanymedeThere's something very satisfying about being able to download ISOs from a non-local site in 63 seconds.07:38
twbPfft07:38
twboptical media are obsolete07:38
twbWhat's satisfying is BOOTING from a remote site in 60 seconds07:38
EventyretMorn RoyK07:42
RoyKmorn07:43
Ganymedetwb: Thanks...I may have gotten it working with adding toram after boot=casper...I can't really tell if it actually doesn't need the CD anymore.08:03
twbYou should be able to eject the CD if it worked08:03
GanymedeI will try that now...I am currently testing on a VM so I don't know if VMWare player will eject the CD anyway regardless of whether the guest has it mounted.08:03
GanymedeMy guess is that it worked since I ejected the CD and Ubuntu didn't complain.08:05
GanymedeHere is unrelated question. Suppose I'm on a Ubuntu machine will hard drive and swap with 24G physical memory. If I run a VMWare or VirtualBox guest with 16G physical memory, does all that memory need to be in physical RAM at once? Or can the 16G of pages for guest memory be selectively swapped based on usage?08:07
=== _GoRDoN__ is now known as _GoRDoN_
GanymedeOr is this more a question for #vmware/#vbox? From what I can tell, VirtualBox grabs all the memory all at once but VMware grabs it as needed (grows dynamically) but I haven't done any futrher testing.08:08
twbThat's a question for #vmware08:08
GanymedeOkay, thanks.08:08
RoyKGanymede: IIRC vmware doesn't allocate anything before it's used08:08
twbThe blessed VM tech for #ubuntu-server is kvm08:08
twbIIRC vmware-server allows you to either allocate memory up-front or on-demand (ballooning)08:09
RoyKit'd be nice to one day see KVM with the same possibilities as vsphere ESXi08:09
twbRoyK: HTFS08:09
RoyK?08:10
twbHack The Fucking Source08:10
RoyKtwb: not my cup of tea - it'll take a little more than a few hacks to make that a reality08:10
twbThat's "hack" as in "work on", not "hack" as in "kludge"08:11
twbOr employee someone to work on it, or whatever08:11
GanymedeThat sounds like a $10,000+ job.08:12
twbProbably :-)08:12
GanymedeNot that I know what the i in ESXi means...only ever used ESX without the i.08:12
twbESXi is ESX without the local GUI08:12
derknechti have a ubuntu 8.04 server, it crashes after some weeks, and then needs multiple startups to get it up and running again. I think that this is a hardware problem (maybe graphics card) but found nothing in the log files. is there a way to test hardware, or how should i trace this problem? Thanks for any advice.08:22
twbderknecht: first of all, run memtest86+ for a day or two08:23
twbderknecht: then, it's probably simplest to swap in new components08:24
twbOr you could just remove the GPU -- you shouldn't be running a GUI on a server anyway08:24
derknechttwb:  i know, but the customer want it. Thanks, i should try this08:25
twbI hate customers08:26
twbI know better than they do, dammit :-/08:26
derknechttwb: me too :D  but they are pay me . . .08:29
derknecht:D08:29
=== _Techie_ is now known as _TechAway_
=== _TechAway_ is now known as _Techie_
twbI want a package like vrms, that will send me a monthly warning about server packages that don't receive five-year support.08:55
eagles0513875hey guys anyone an expert with postfix?09:29
RoyKeagles0513875: for general postfix   questions, just ask, but if you need "export help", try #postfix09:32
eagles0513875RoyK: my issue is i configur eit according to the ubuntu wiki09:32
eagles0513875the problem is outgoing email09:33
eagles0513875i think it might be the version of squirrelmail that comes with ubuntu09:33
matti:)09:34
eagles0513875matti: ?09:36
mattieagles0513875: ?09:36
mattieagles0513875: I am just smiling :P09:36
eagles0513875lol09:37
eagles0513875ikonia: check your connection plz09:39
* EvilPhoenix pokes eagles051387509:55
EvilPhoenix:P09:55
* eagles0513875 waves to EvilPhoenix09:56
=== _Techie_ is now known as _TechAway_
eagles0513875hey guys anyone know able ot help me setup dovecot to work with sasl10:25
joschieagles0513875: what exactly doesn't work for you?10:41
eagles0513875to configure sasl do i need to go through this https://help.ubuntu.com/community/PostfixDovecotSASL10:42
eagles0513875cuz im having some issues following it10:42
joschieagles0513875: https://help.ubuntu.com/10.04/serverguide/C/postfix.html10:43
eagles0513875im on that joschi10:43
eagles0513875at the bottom of it it has this url https://help.ubuntu.com/community/PostfixDovecotSASL10:43
uvirtbotNew bug: #670526 in dbconfig-common (main) "phpmyadmin broken after hardy -> lucid upgrade" [Undecided,New] https://launchpad.net/bugs/67052610:50
cjwatsonkirkland: dunno, it's certainly supposed to be installed by default.  tasksel tasksel/force-tasks     string server11:25
cjwatsonkirkland: logs?11:25
raubvogelAm I the only one still having issues with ureadahead and /var on its own partition?11:26
cjwatsonraubvogel: bug 52348411:41
uvirtbotLaunchpad bug 523484 in ureadahead "ureadahead requires /var on root filesystem" [Medium,Triaged] https://launchpad.net/bugs/52348411:41
raubvogelI have been following that bug and 542334. In fact, I am going to add some stuff to 523484 if what I am about to try does not work out.11:44
raubvogelWhat scares me is that I have 4 10.04LTS servers I installed /var on a diff partition during install and they work fine. Only this one I forgot to do that is causing me headaches11:45
raubvogelIf I need to, can I remove ureadahead without any harm to the system besides, well, slower boot?11:49
k-radhas anyone successfully integrated some type of beowulf cluster with ubuntu or can tell me what that might involve ?12:06
cjwatsonraubvogel: ureadahead just speeds things up, it shouldn't be mandatory12:15
cjwatsonyou could just turn off its upstart jobs if they're causing problems12:15
cjwatsonwhich is probably easier than removing the package => removing ubuntu-minimal12:15
k-radmorning eagles051387512:34
eagles0513875hey k-rad12:34
k-radnice to see you :)12:34
k-radi lost that beowulf mailing list12:34
k-radya think it'd be hard to do ?  with ubuntu a desktop and another computer assisting in its allocation of cpu/memory resources ?12:35
k-radthere doesn't seem to exist a #beowulf channel on freenode that is functional12:35
k-radhow are you this morning ?12:36
uvirtbotNew bug: #672523 in unixodbc (main) "package odbcinst1debian1 2.2.11-21 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/67252312:42
raubvogelcjwatson, I honestly do not know if ureadahead is the guilty party. It might as well be it just happens to be the last thing shown on the screen before machine takes a dump12:45
raubvogelBut, I do not know where else to begin; it seems the people in those two bugs are in the same boat12:46
cjwatsonraubvogel: easy to experiment, right?12:46
raubvogelif I can duplicate that in a VM, sure!12:46
raubvogelFor now I will have to leave that server alone. In about an hour it will start being used again12:47
cjwatsonI figured that if it wasn't booting properly it couldn't be in production ...12:47
raubvogelWell, if i leave /var in /, as it was before, it works.12:48
raubvogelcjwatson, Honestly I am concerned about the other servers. At first I thought this was just a careless move from my part. You know, edit fstab and be done with. I did not expect something like this be a bug12:54
qman__I ran into a problem a while back when I used JFS on /var for a myth box12:55
qman__it wouldn't mount /var because it couldn't mount JFS, because something was preventing it from loading12:55
qman__didn't have time to investigate and just formatted without separate /var12:55
kirklandcjwatson: http://people.canonical.com/~kirkland/installer.tar.bz213:14
cjwatsonhmm.  it all *looks* ok.  guess I'll have to try it13:18
cjwatsonthere was quite a big tasksel merge between lucid and maverick, so I suppose I might have broken something there13:19
user666what setting file should i look into to allow password-less ssh connections13:20
user666server is 9.1013:20
raubvogelqman__, that is why I am leaving the system as is for now13:20
user666i did generate ssh keys, i did cat the pub key to server, ect, no go13:21
raubvogeluser666, how about /etc/ssh/sshd_config?13:21
cjwatsonuser666: see what /var/log/auth.log says when you attempt to log in13:21
raubvogelAlso ssh -vvv should tell you what happened13:21
cjwatsonraubvogel: ssh -vvv doesn't tend to tell you why authentication failed13:22
cjwatsonraubvogel: generally, if the server told the client the reason, it would be an information-leak vulnerability13:22
cjwatsonso you need to look in /var/log/auth.log on the server13:22
raubvogelAgreed, but it would at least say if it even tried to do key authentication13:23
user666ok, looking into sshd_config13:24
cjwatsonno, look at the logs first13:24
cjwatsondon't waste time guessing configuration before looking at the logs13:24
cjwatsonit might be something as simple as a permissions error13:25
user666both auth files are chmoded to 64013:25
cjwatsonlook at what the log tells you13:25
user666logs dont show any attempts to find key pairs13:26
cjwatsonI usually 'tail -f /var/log/auth.log', hit Enter a few times so there's blank space, and then try to log in13:26
user666ups, actually i found: Authentication refused: bad ownership or modes for file /home/playserver/.ssh/authorized_keys13:26
cjwatsonthere you go13:26
cjwatson'man sshd' lists the required permissions13:27
cjwatsonnote that it is not just the file itself you need to check13:27
user666permissions for authorized_keys or what ?13:32
cjwatsonsee the manual page13:32
Kudosslightly off-topic, anyone know how to tell scp to use a specific device?13:59
Kudostrying to pull from a VPN without sending all traffic through it13:59
Lord_Rahlcan anyone point me to a how on have one nic point to a separate network and one nic pointing to another14:03
cjwatsonKudos: I doubt you can, wrong layer really.  it's probably easier to set up policy routing14:03
cjwatsonKudos: ('man ip', I think)14:04
Kudoscjwatson: damn, that looks complicated :P14:05
cjwatsonhopefully there's a simpler howto around somewhere.  I'm not an expert14:06
Kudosip neighbour add looks like it might be what i want?14:07
Kudoscjwatson: you sent me down the right route, thanks14:27
Kudoslololo, route14:27
raubvogelLord_Rahl, both static or dhcp?14:27
Kudosgeddit?14:27
Lord_Rahlthe nic are static one will be run a dhcp server. It is for asterisk server14:27
raubvogelLord_Rahl, so, you have 2 nics?14:28
raubvogelLike eth0 and eth114:28
raubvogelAs opposite to eth0 and eth0:114:28
Lord_RahlI have two nics.14:29
raubvogelDefine them in /etc/network/interfaces14:29
Lord_Rahlhere is what I have in my interface http://pastebin.com/PdCQ9ZJP14:31
raubvogelShouldn't you use another gateway on line 19?14:31
cjwatsonKudos: you're welcome14:32
Lord_RahlI guess so that is the phone network side it does not need to go to net. I guess I can point it back to itself14:33
Lord_Rahlraubvogel, here is what I receive when I restart networking : root@Asterisk:~# sudo /etc/init.d/networking restart14:34
Lord_Rahl * Reconfiguring network interfaces...                                                                                                                                ssh stop/waiting14:34
Lord_Rahlssh start/running, process 2952214:34
Lord_RahlSIOCADDRT: No such process14:34
Lord_RahlFailed to bring up eth0.14:34
Lord_Rahlraubvogel, Do I need to place them on a different subnet?14:36
raubvogelWhich is the gateway for each of them?14:38
Lord_Rahleth1 is use the real gateway. eth0 does not have a gateway on that network14:43
Lord_Rahlor no way to get to it14:44
EventyretAnyone able to explain how to setup dns for a IRC Cloak i got a Rdns setup for my server.14:47
_rubenLord_Rahl: dont specify a gateway for eth0 then14:57
raubvogelexactly, so it will use the default one14:58
Lord_Rahl_ruben, OK i will try that15:01
Lord_Rahl_ruben, that work you the man!15:02
Eventyretany help on setting up a vhost ?15:02
therobotI'm trying to backport wkhtmltopdf from lucid to hardy with prevu (in a hardy box), I'm just running prevu wkhtmltopdf/lucid but I get "Unable to find a source package" error, what I am doing wrong?15:03
uvirtbotNew bug: #672594 in clamav (main) "package clamav-daemon 0.96.3 dfsg-2ubuntu1.0.10.04.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/67259415:28
alfonxHi. I have been using Gentoo and now want to switch to ubuntu server. I wonder, how webapps (gallery, phpstuff, phpmyadmin etc tec) is managed for multiple "sites/domains/vhosts" on ubuntu. is there anything like "webapp-config" on gentoo. Can Ubuntu-server share one installation of a webapplication for multiple domains? Or do the webapplications have to provide this functionality?15:35
zealiodHow do I use ebtables to log which mac addresses are using certain vlans?15:35
hggdhJamesPage: Qs for you re. Hudson deployment15:43
JamesPagehggdh: fire away15:44
hggdhJamesPage: (1) I have a server hat could be used; care to have a look?15:44
JamesPagehggdh: yes please15:44
simplexioalfonx: buntu is linux like gentoo.. so yeas. easily ? i dont know, but here is is vhost conf for apache15:52
mathiazNg: hi - have you heard of Graphite - Enterprise Scalable Realtime Graphing - http://graphite.wikidot.com/?15:56
mathiazSpamapS: ^^?15:56
Ngmathiaz: I've not personally tried it, but I've heard of it and like that it's Python. The DB isn't RRD, but is fixed-size though, which is a downside for us15:58
mathiazNg: right - because you'd like to measure everything for ever ;)15:59
Ngye15:59
Ng+s15:59
alfonxsimplexio: probably my question was not clear. when i do "apt-get install drupal6", can i then configure it independently for two "sites-enabled"? will one "apt-get upgrade drupal6" work for both sites? In gentoo the webapp-config tool is doing hardlink- and symlink-magic to share the application with thousands of vhosts, but it is only installed once.16:02
kirklandcjwatson: shall I open a bug about this?  if so, against what?16:04
robbiewkirkland: Daviey: and who ever else in San Antonio...leaving in about 20min, so should be there closer to 11:30/noon...I'll cover lunch ;)16:05
cjwatsonkirkland: a bug on tasksel would be good, I think16:06
cjwatsonfor starters16:06
cjwatsonkirkland: can you poke Daviey about my query about a test case for bug 633015, from Friday or so?16:07
uvirtbotLaunchpad bug 633015 in dpkg "debian/source/include-binaries doesn't allow for inclusion of modified binaries" [Undecided,Fix committed] https://launchpad.net/bugs/63301516:07
=== jdstrand_ is now known as jdstrand
light_Anyone know why my node instance is stuck in BeaBIOS and doesn't boot up when started on a node-controller....yet when I bring up the same image in kvm...it works just fine?16:08
Davieyo/16:14
Davieycjwatson: Will do that!16:14
Davieycjwatson: Can i use my heavy weight package, or can i use a sample foo package?16:14
Davieyrobbiew: Groovy16:14
zul\\\\\\\\\\\\\\\\\\\\\\\\\16:15
cjwatsonDaviey: I just want something I can test reasonably easily for SRU verification16:15
cjwatsonsince I want this SRU out of the way for something else :)16:15
cjwatson(enabling xz support, which needs a backport to lucid-cat, and I'd rather do that on top of current -proposed)16:15
MezSuggestions for what to use to proxy SMTP for a bastion host?16:19
Davieycjwatson: I understand... will try and do that today, or otherwise tomorrow.16:21
Daviey(currently sprinting)16:21
k-radcan anyone give me some tips on how to link my fully qualified domain to a service such as dyndns.org (free) using CNAME so that i can make my wordpress/lamp installation functional here ?  or another dyndns.org type service which is free, that is supported by dd-wrt16:35
flohackHi! I'm trying to use selinux on maverick on Amazon EC2 and it seems to crash the machine. Is anyone using selinux on amazon ec2 here?16:41
simplexioalfonx: you no idea. but symlink & hardlink magic is easy to by hand or by script16:45
zealiodhow can i just log traffic from certain vlan with ebtables?16:48
alfonxsimplexio: thanks17:04
ScottKalfonx: I believe that the Ubuntu Server Guide (see /topic) covers some of this.  At least enough to give you an idea of how it works.17:12
=== NG_ is now known as ng_
ruben23hi guys how do i check packages that are installed17:23
ruben23on my ubuntu server17:23
alfonxruben23: start aptitude and slecet "installed packages" .. if you like to use some kind of text gui17:24
bluefrogruben23, dpkg -l17:24
ivoksor, ls -d /usr/share/doc/* | cut -d\/ -f517:29
ivoks:)17:29
XeNoTIs it possible to add a authorized_keys as a paramater with the vmbuilder command?17:31
SpamapSmathiaz: I evaluated graphite for the UEC monitoring / monitoring framework stuff but rejected it for inflexibility I think.17:41
bluefrogivoks, except that you may be missing stuff17:45
ivoksbluefrog: which one?17:45
=== _TechAway_ is now known as _Techie_
bluefrogivoks, not talking specially of a server. taking example on my desktop. your line wll give 1370 hits, dpkg -l 138617:46
ivoksdpkg -l prints more than just installed packages17:47
ivoksbut my command doesn't provide exact output too ;)17:48
bluefrogivoks. got some rc with dpkg -l17:48
bluefrognot only ii17:48
ivoksexactly17:48
bluefrogok17:48
hggdhzul: working today?17:55
zulhggdh: yep in san antonio17:55
zulhggdh: whats up?17:56
hggdhzul: we need, later on, to discuss the SRU process for server, and what I can do there17:56
zulhggdh: sure17:56
=== _Techie_ is now known as _TechAway_
makomianybody see the error in samba? If I do a "dpkg-reconfigure samba" I get a "sed: -e expression #1, char 143: unknown option to `s'"18:22
uvirtbotNew bug: #672688 in bacula (main) "package bacula-director-mysql 5.0.1-1ubuntu1 failed to install/upgrade: el subproceso script post-installation instalado devolvió el código de salida de error 1" [Undecided,New] https://launchpad.net/bugs/67268818:31
=== _TechAway_ is now known as _Techie_
AivarasKiviliusHello, I need to create new user and give for him premissions to lounch only irssi ir screen, How to do that?19:25
AivarasKiviliusUser won't be able to do anything except that.19:26
=== lifeless_ is now known as lifeless
=== luis__lopez is now known as luis_lopez
jdstrandhallyn: hey. I haven't had a chance to look at your next merge request yet, but came across this: https://www.redhat.com/archives/libvir-list/2010-November/msg00281.html19:42
jdstrandhallyn: fyi only19:42
uvirtbotNew bug: #672717 in samba (main) "sed error after "dpkg-reconfigure samba"" [Undecided,New] https://launchpad.net/bugs/67271719:47
claude2can anyone help with a xen question?19:52
claude2i cant tell if you need any special modifications to make ubuntu 10.04 run as a domU19:53
claude2im using the desktop ubuntu install presently19:53
claude2im having some instability and io errors19:58
RoAkSoAxclaude2: afaik Xen is not supported in Ubuntu. sorry :(19:59
k-radhow does one link a domain name with a LAMP installation.  i'm guessing there are better ways than forwarding with masking with dyndns.org19:59
SpamapSk-rad: you just need to set a DNS name to the IP of the server. If its a dynamic IP, then that gets unreliable and difficult to manage.20:00
k-radSpamapS, how do i create my own dns name and link it to my server ?20:00
k-radi use godaddy would that do it ?20:00
raubvogelAivarasKivilius, I think what you want is something similar to a restricted shell20:01
RoAkSoAxk-rad: yes, just use  godaddy's dns's and add an entry pointing to the IP address of your server for your domian name20:02
k-radRoAkSoAx, thank you sir20:02
RoAkSoAxwelcom :)20:02
uvirtbotNew bug: #672731 in openldap (main) "impossible to install slapd" [Undecided,New] https://launchpad.net/bugs/67273120:07
k-radRoAkSoAx, sir, do you know a easy guide for someone who installs wordpress, and then, LAMP with it.  since its all installed with wordpress package, it skips any configurations any tutorial might be able to walk you through20:08
=== idk is now known as Guest21908
k-radi found a how-to.  i'm good.  thank you all20:09
Guest21908hello, i just installed the server dist. what is the best way to communicate with it remotly? some kind of shell connection with ssh? please, kick me in the right direction, like a google search string20:09
RoAkSoAxk-rad: there's lots of how-to's in google :). I personally installed it from source instead of using the ubuntu package20:09
Guest21908openSSH? :)20:10
RoAkSoAxGuest21908: yes, just ssh! sudo apt-get install openssh-server (if you haven't done so already) and you are pretty much set20:10
RoAkSoAxGuest21908: of course you'll have to tune it up, (such as change ports and stuff)20:10
Guest21908RoAkSoAx: thanks! i think its there from the installer. ill fire it up and google thru laptop then20:11
Guest21908thanks for answering on a thousand-asked-question20:11
RoAkSoAxlol no problem :)20:12
k-radthe irc dns command is very useful in finding a ip address that is linked to dyndns.org for /etc/mysql/my.cnf / bind-address = xx.xx.xx.xx20:14
k-radwhich is /dns20:15
k-radi will set it to my hostname.dyndns.org, the bind-address, since that will change anyway, hopefully, it will accept alphabetical characters20:17
k-radmy dyndns.org is setup in my router.  i had to give up optware the right way, but with 4bit upstream, can save me $10 a month :)20:18
=== luis__lopez is now known as luis_lopez
k-radby default bind-address = 127.0.0.1.  thats what i use for my dns server cache (dnsmasq) perhaps i can set dnsmasq to use a different listening ip, and reflect those changes anywhere, those who are familiar with dns caching, what could i set my dnsmasq listening interface to other than default ?20:21
k-radthis will not work for me not even with a sudo   mysql -u root   ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)20:24
k-radgot it done, thanks all20:30
=== ng_ is now known as NG_
k-radany thoughts on lighthttp ?20:37
k-radis it possible that when i got to the bind-interface = 127.0.0.1 and it said to change it to your own ip, would that be a WAN ip or static ip ?  thats /etc/mysql/my.cnf20:39
SpamapSlighttpd seems to be pretty solid and fast.. its not as fast as nginx, but certainly has easier code to work on when you don't speak russian. ;)20:44
fluvvellA linux client on my network is making dns request for a server no longer in existence on the local net. How can I find which process is making the request?20:44
SpamapSfluvvell: is resolve.conf updated with the newe DNS server info?20:45
SpamapSerr20:45
SpamapSresolv.conf20:45
fluvvellSpamapS, the request to my dns-server is about the A record for a media server I used to have 6 months ago.20:46
fluvvellso the request is valid, the dns server is answering, but I dont know why the client is asking for it still.20:47
fluvvellmy approach is therefore, "Whos asking?"  Looking into processes on the client, I can't work out which one might want the old media server20:48
SpamapSfluvvell: ah20:48
SpamapSfluvvell: thats a tough one20:48
SpamapSfluvvell: because DNS is UDP, the window for a socket will be relatively tiny.20:48
fluvvellso  open files? or netstat with some options20:48
fluvvellOh20:49
fluvvellright20:49
SpamapSfluvvell: sudo fgrep -r badhostname /etc /home /usr20:49
fluvvellIts asking about 3 times per second20:49
fluvvellok20:49
SpamapSfluvvell: thats pretty fast20:49
fluvvellyes!20:49
SpamapSfluvvell: maybe you can catch it.. I think you can log who owns a packet with iptables20:50
* SpamapS hasn't done this tho20:50
* fluvvell wonders why he chose media as the name for a server!20:51
fluvvellat least 8 times per second in the logs on the dns server20:53
guntbertfluvvell: and the logs on the client reveal nothing?20:54
k-radhttp://pastebin.com/Vyh5ymTZ  in /etc/hosts i'm supposed to define an ip address against a domain in that pastebin that domain had a subdomain.  do i need a subdomain for my registered domain ?  or should there be a way to fill in both of my godaddy name servers here ?20:54
k-radalso, i don't know what number to prefix before the domain  they are asking for linode address20:55
fluvvellguntbert, no mention of media in any log files.20:56
guntbertfluvvell: I was thinking about errors like "unable to find/contact..."20:57
fluvvellgiven that cifsd is at the top of the process usage, I'm guessing something on the desktop is trying to find a share20:57
fluvvellguntbert, tcpdump is giving me  SMB PACKET: SMBreadX (REQUEST)21:04
guntbertfluvvell: seems plausible - you could use wireshark too (easier to see details of the protocol) - OR look into /etc/fstab ....21:07
* RoAkSoAx wonders who was the one that wanted to look into openvswitch?21:21
bogeyd6Anyone can point me to a guide on setting up mysql load balancing cluster on 10.04.1 ?21:22
RoAkSoAxbogeyd6: this is not ubuntu specific but almost everything should be the same: http://www.howtoforge.com/loadbalanced_mysql_cluster_debian21:25
bogeyd6RoAkSoAx file is too old21:27
bogeyd6prob more like http://barkingiguana.com/2008/07/07/high-availability-mysql-on-ubuntu-804/21:27
RoAkSoAxbogeyd6: it uses mysql 5.0.19 the only that will differ is heartbeat related stuff21:28
RoAkSoAxbogeyd6: give it a try and see what happens21:28
bogeyd6k21:28
bogeyd6RoAkSoAx lookie here https://help.ubuntu.com/community/HighlyAvailableLAMP21:29
bogeyd6jackpot21:29
bogeyd6spent an hour on google looking for aht21:29
=== NG_ is now known as ng_
bogeyd6!search googleit21:30
ubottuFound:21:30
RoAkSoAxbogeyd6: the drbd config seems ok, the heartbeat related config is really old and pretty much useless nowadays. And that is just a failover cluster, not a loadbalancing cluster :)21:31
RoAkSoAxbogeyd6: for more updated stuff refer to https://wiki.ubuntu.com/ClusterStack/LucidTesting21:31
RoAkSoAxbogeyd6: we hope to include cluster related stuff in the Ubuntu Server Guide soon21:32
fluvvellguntbert, yes, fstab seems to offer no clues. What could be attempting to mount otherwise?21:43
guntbertfluvvell: some media player (VLC,...) ?21:44
fluvvellIts as if some desktop application has remembered a connection or something..21:44
fluvvellguntbert, yes was wondering something like that. VLC not running,21:45
guntbertfluvvell: was only an idea - but I'm off -- Good luck :-)21:46
fluvvellcheers21:47
fluvvellFOUND IT!!21:50
fluvvellfirefox had an add-on called minion  which was set up to the old media server21:51
=== _Techie_ is now known as _TechAway_
kinygoshi....my /var/log/auth.log is full of pam_unix(cron:session) entries...i've found a forum suggestion to comment out the line @include common-session in /etc/pam.d/cron...but my file doesn't have such a line (it has @include common-session-noninteractive)...what does commenting that line actually do?22:00
remix_tjkinygos: i think this line is useful22:02
kinygosremix_tj: that's what i was afraid of22:03
remix_tjuseful for knowing which cron users runs22:04
kinygosah...the ones filling up my log are for user root, but as you say, there are also those for when i sudo something with my username, so probably best to live with it22:06
=== ng_ is now known as NG_
databitswhat is it called when you run two different websites off of one server ?22:46
KnightHackerdatabits: Virtual Hosts?22:47
=== jamiew is now known as jamiew_away
hallynzul: around?23:27
zulhallyn: kind of...whats up/23:27
hallynzul: on blueprints for natty,23:28
hallynyou marked containers-in-uec 'pending approval'23:28
hallyndoes that come before review?23:28
hallynbefore 'review' state, that is23:28
hallynjust wondering what i shoudl do with mine...23:28
zulhallyn: good question im not sure..23:28
hallynSpamapS: you marked yours 'review' right?23:28
hallynmathiaz: oh, you're prolly the one i should ask :)23:29
mathiazhallyn: once i've finished writting my spec and put them in a review state23:30
mathiazhallyn: so that other team members can start to look at them23:30
mathiazhallyn: pending aproval is the last step23:30
mathiazhallyn: before the specs is actually accepted for this release cycle23:30
SpamapShallyn: the ones I'm ready for peopel to review, yes23:31
SpamapSand people too23:32
SpamapSIMO, review means "everybody take a look" pending approval means "discussion over, give me a yes or no approver"23:32
SpamapSI set one of mine to Pending Approval because its basically just a TODO list of stuff for me..23:33
=== _TechAway_ is now known as _Techie_
hallynmathiaz: thanks!23:46

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!