[00:01] entropy4: the netbios anounce [00:02] must be.. [00:03] * entropy4 makes a mental note for future occasions [00:03] (didn't think that would work to be honest) [00:03] the weird thing was that after setting up static dhcp, the dhcp server successfully entered the server's hostname into dns (confirmed by nslookup from windows box) but i still couldnt ping that hostname [00:04] entropy4: what dns service where the windows configured to use [00:07] the router [00:07] interesting [00:08] so ubuntu wasnt responding to pings to its hostname till samba was installed... or something.. [00:09] anyway thanks for your help ikonia - afk for awhile [00:09] entropy4: you fixed it yourself [00:10] I would have put money on samba not working [00:10] alright i completly restarted my apache install (all config files and everything) plus i reset my port forwarding on my router. can anyone walk me through setting up apache? (NAT is ON) [00:11] snake: what makes you think it's not working ? [00:11] ikonia, i try to connect and it doesn't work [00:11] snake: what was your private IP addres? 10.1.1.5 ? [00:11] ??? [00:12] you mean my external? [00:12] snake: you told me your private IP address earliaer [00:12] no your private [00:12] internal? [00:12] i don't know where to find private [00:12] 10.0.0.5 [00:12] you told me it was 10.0.0.5 earlier [00:13] is that the right address for your internal address ? [00:13] -_- yes but isn't that IP only on my network? [00:13] yes [00:13] snake: correct [00:13] when i type ifconfig [00:13] snake: telnet 10.0.0.5 80 [00:13] yes that works. [00:13] but [00:13] what about if my friend wants to connect [00:13] snake: then it's working and the problem is your nat [00:13] .... [00:13] snake: your nat is not working/being blocked [00:14] snake: some ISP's won't allow port 80 open [00:14] should i try another port? [00:14] snake: up to you, I personally think your nat is not setup [00:15] they don't give me very many options in NAT. [00:16] just 'opened' or 'secured' [00:16] what did you chose ? [00:16] choose [00:16] opened [00:16] after you told me about nat [00:16] snake: have you disabled the firewall on ubuntu, AND the one on the router ? [00:17] hang on, i have to find the one for my router and DESTROY it [00:17] err turn it off [00:19] I have a drbd question [00:20] The example in the ubuntu server guide works by mirroring two disks, one in each host. [00:20] If I want a RAID1 on each host, should I do an mdadm RAID1, and then run drbd on top? Or can/should I tell drbd to do the local mirroring, too? [00:21] twb: for me, I'd use mdadm [00:21] twb: raid1 is for local mirroring [00:22] Right, I want a RAID1 array on each host, and then to use drbd to mirror the "master" host's array to the "slave" host's array [00:22] twb: seems reasonable [00:22] twb: it's device block level so host1@md0 -> host2@md0 seems reasonable [00:22] Nod. [00:23] Also, in lucid can I create a whole-disk drdb-slaved md RAID1, and then create partitions *inside* that? [00:23] HIstorically you couldn't partiton an mdadm array, but IIRC that changed recently [00:23] twb: I wouldn't use mdadm on a disk, but only partitions, but that's just my personal experience [00:23] Plan B is to do it the old way -- partition each disk normally, then create raid1 mirror and drdb-slaving for each partition separately [00:24] twb: I personally like plan b [00:24] okey dokey [00:24] (just personal preference though) === dannf_afk is now known as dannf [00:40] ikonia: do I have to compile the drbd kernel module? [00:42] Looks like it's using DKMS and choking because I'm in a chroot :-/ === marfarma_ is now known as marfarma [02:27] In lucid, what's the option to tell plymouth not to mess with my video at all? [02:27] For some reason I have a faulty host that stops signalling AT ALL when vga16fb/vesafb load [02:28] I've been trying things like vga=normal, video=vga16fb, video=vesafb:disable [02:41] twb: I don't remember offhand but its on the wiki under the kernelmodeswitch stuff [03:36] OK, so I have tried to set up drbd per ubuntu-serverguide_10.04, but I can't tell if it's working. [03:39] Is there a channel for drbd? [03:54] On the primary, http://paste.debian.net/100180/ [03:54] AFAICT the primary can't see the secondary [04:02] OK, progress: http://paste.debian.net/100181/ [04:05] Finally, I found a problem to fix! [ 316.949668] block drbd0: The peer's disk size is too small! [04:09] That's it! [04:09] It's working! [04:09] Mua ha ha [04:15] twb, how many nodes ? [04:28] two [04:28] three [04:38] UndiFineD: so now I have it working for /srv, I need it to work for / [04:38] ^^ nice [04:38] UndiFineD: Error: "^" is not a valid command. [05:23] hello [06:55] hey guys is anyone alive in here i need some help [06:56] is it possible to not have ones home folder encrypted after it has been setup that way? [06:56] I'm alive but I'm still a bit of a n00b [06:57] sigh ok [06:57] i dont wanna have to reformat my server over dovecot not liking an encrypted home dir [06:59] nobody else here [06:59] !encryption [06:59] For information on setting up encrypted private directories (8.10+) see https://help.ubuntu.com/community/EncryptedPrivateDirectory [07:01] what do you know... answer found after hitting page down a couple times [07:02] waiting on the page to load crimynal [07:03] you on a 12 boad modem or something? [07:03] no [07:03] university is heavily filtered :( [07:04] why the hell would you filter help.ubuntu.com? sounds more like you got put on bandwidth restriction for too much uploading [07:05] i dont upload [07:05] odd [07:05] we are on a 6mbps adsl connection [07:05] for close to 450 students [07:05] ffs [07:06] i'm on fios... for just me [07:06] fios? [07:06] yeah... its a verizon service, about 5-7x faster than your university's connection [07:07] nice [07:08] at home im on 10mbps cable business line [07:08] 6mbps dsl for 400 students? That cant be right [07:08] ashtray: ya this school has issues [07:08] wifi infrastructure sucks major [07:09] any trouble loading web pages? [07:09] ha some pages [07:09] i imagine youtube is out of the question [07:09] they blocked all web based emails like gmail [07:09] the wiki [07:09] no [07:09] funnily enough [07:09] at least last i checked it wasnt [07:10] thats messed [07:10] i managed to get to u tube [07:10] If you can watch videos you must be on more than a 6mbps adsl line [07:10] they take some time to download and buffer [07:11] i'm getting 30Mb/s down and 25Mb/s up.... and my school encouraged forwarding your email through gmail [07:11] im fedup of gmail [07:11] starting my own business and i setup my own email server for my business running it on my 10mbps atm [07:12] what email software are u running [07:12] i'm looking for some email software for linux [07:12] for smtp [07:12] & imap === robbiew1 is now known as robbiew [07:12] lamps? [07:13] crimynal: nope [07:13] ashtray: im using postfix + dovecot :) [07:13] dovecot i have setup to use imaps [07:13] thats web software crimynal [07:13] then i have web based squirrelmail [07:13] what type of linux are you running [07:13] just make sure your home directory isnt encrypted [07:13] ubuntu server lol [07:13] i followed the guides [07:13] !dovecot | ashtray [07:13] ashtray: IMAP and POP are protocols for fetching email. The officially-supported server in Ubuntu is Dovecot (packages "dovecot-imapd" for IMAP, and "dovecot-pop3d" for POP) - See also !MailServer for information on the SMTP protocol [07:13] !postfix [07:13] postfix is the default !MTA and !MDA on Ubuntu. For help, read https://help.ubuntu.com/community/Postfix and https://help.ubuntu.com/community/PostfixBasicSetupHowto - See also !MailServer [07:13] thats what im using [07:14] accounts are system accounts that are checked against the shadow file [07:14] !MailServer [07:14] Ubuntu supports the Simple Mail Transfer Protocol (SMTP) and provides mail server software of many kinds. You can install a basic email handling configuration with the "Mail server" task during installation, or with the "tasksel" command. See also https://help.ubuntu.com/community/MailServer and https://help.ubuntu.com/10.04/serverguide/C/email-services.html [07:14] lol [07:14] i have them setup [07:14] but for some reason dovecot seems to hate an encrypted home directory [07:14] I'm going to be using EC2 though. So my ubuntu will already be setup. I need to know what i should run for smtp [07:15] ashtray: you can setup your own personal cloud [07:15] using ubuntu-server [07:15] eagles, stupid question here.... home directory isn't encrypted by default is it? [07:15] no [07:15] its specified during installation [07:15] didnt think so. I've been having an RSA problem and thought maybe that was it for a sec [07:15] and i need to find out if its possible to having it not be encrypted after install [07:15] ashtray: O_o [07:16] i can set up my own personal cloud using ubuntu-server....hmmm [07:16] umm whatchou talkin bout eagles [07:16] !cloud [07:16] stupid bot [07:16] hold on ashtray [07:16] you mean on ec2 launch an ubuntu instance? [07:16] ok [07:16] no ubuntu instance [07:16] a private instance for your own personal cloud [07:17] hey guys, just installed apache2 and mysql to host my VtigerCRM software i'm working on getting setup.. now that my server is installed and running which user should adminster this server? [07:18] banker247_: not the root user just your user name you setup on the server then you sudo to edit the conf files etc [07:18] mysql i would create a 2nd user thats got full permissions and not use the root user for mysql [07:18] ashtray: http://www.ubuntu.com/cloud/private [07:19] i was reading that earlier [07:19] if your interested in doing something at home no expense and you gain cloud experience [07:19] its on canicals server? [07:19] no [07:19] your own servers [07:19] eagles0513875, i'm a bit confused as to who the "root user" is .. is it my login? that i sudo to root with? [07:19] I only have my desktop... is that enough? [07:19] you need at least 2 machines :( [07:19] i only have 1 login for my box.. when i want to run commands as root i sudo [07:19] fuck me [07:20] !language | ashtray [07:20] ashtray: Please watch your language and topic to help keep this channel family friendly. [07:21] I guess if I want to practice or something I will have to set up a VPC in amazon? [07:21] !sudo | banker247_ [07:21] banker247_: sudo is a command to run command-line programs with superuser privileges ("root") (also see !cli ) . Look at https://help.ubuntu.com/community/RootSudo for more information. For graphical applications see !gksu (Gnome, XFCE), or !kdesudo (KDE). If you're unable to execute commands with sudo see: http://www.psychocats.net/ubuntu/fixsudo [07:21] thats just as good right? [07:21] banker247_: you would sudo from your current account your on lets say if its banker247_ you just run sudo COMMAND password you used to login [07:22] ashtray: everyone has their own opinions about things [07:22] your opinion? [07:22] being a student and on a tight budget [07:22] i would setup a small one on my own hardware [07:22] eagles0513875, yup thats what i've been doing.. so by what you're saying when i did sudo apt-get install apache2 the apache2 installed under root? [07:23] ashtray, you can build your own box fairly good quality with under 100 bux ;) [07:23] thats the onlyw ay youll be able to install anything as there are some locations for files like /etc you cant modify without being sudo [07:23] I dont have 100. I'm poorer than a college student. lol [07:23] ashtray, you in USA? [07:24] lol [07:24] yeah virginia [07:24] ashtray: i am a student with no job [07:24] near DC [07:24] over 18? [07:24] yeah [07:24] and here i am working on starting my own business [07:24] calla craigslist add mow do some gen labor and you can make few hundos [07:24] ;) [07:24] anyhow.. check craigslist sometimes people are GIVING.. away computers [07:25] broken ones or what not.. just salvage em.. [07:25] thing is banker247_ [07:25] what about a ppc? [07:25] Could I just use a ppc as my second computer? [07:25] from what i was told you need a machine that supports virtualization at the hardware level [07:25] ppc = pocket pc [07:25] oh ok [07:25] with out hardware virtualization performance is lacking [07:25] i didn't think older machines would support virtualization [07:26] doesn't need to be older.. sometimes people give away new broken stuff [07:26] or a business going out of business liquidates.. its all over just look around [07:26] i'm 27... been toying with computers since i was 12 or so.. i used to build my own just from hitting up local businesses and taking their broken things.. i dont know if things have changed.. [07:27] but i mean.. alot of these rigs within 5 years are comming with decent vid cards in them.. [07:27] ya but you dont need a fancy graphics card for a server banker247_ [07:27] here's a good starting point.. go on craigslist.. check your local area.. search for free [07:27] good idea [07:28] eagles0513875, yea thats what i mean.. so he shouldn't have a problem [07:28] ashtray, or get a job ;) [07:28] okay and back to reality ;) [07:28] im thinking of building a new i7 desktop and turning my core 2 quad into a server [07:28] have to wait for its ram to return had to rma back to corsair [07:29] ashtray, i gaurantee.. if you put effort into it you can find what you need via craigslist or garage sales.. if you don't want to get a job.. i mean there are ways of getting things done my friend [07:29] so what should the minimum specs be on a computer for virtualization? [07:29] ram is key [07:30] the more ram the more vms you can fit on it [07:30] my quad has 8gb of ram [07:30] so i coudl support up to 8 vms with 1gb per vm [07:30] or less or more [07:30] depends [07:32] eagles0513875, i've been learning linux for the last 6 months or so and i have to ask.. linux power users i'll assume you'd be one.. do you guys do pretty much everything out of the CLI? or you use the GUI at all really? [07:33] banker247_: on ubuntu there is a file called the sudoers file [07:33] and if a user is in there then they have super user privs [07:33] if not they are a normal user with out super users privs [07:34] eagles0513875, that went above my head [07:38] !root | banker247_ [07:38] banker247_: Do not try to guess the root password, that is impossible. Instead, realise the truth... there is no root password. Then you will see that it is 'sudo' that grants you access and not the root password. Look at https://help.ubuntu.com/community/RootSudo [07:39] haha [07:42] wb ashtray [07:42] wait you didnt leave that was someone else [07:43] nope. i'm waiting for the movie Inception to finish unzipping. Then I'm off to windblows because ubuntu can't play 1080 that well. [07:47] This movie is has so far taken 10 minutes to unzip and its not finished. insane. [07:54] this makes no sense [07:56] any dovecot experts in here [08:06] hey coffeedude [08:06] mornign twb [08:21] any dovecot experts in here i have a question [08:21] and something im rather puzzled about [08:22] drwx------ 18 jonathan dovecot 4096 2010-11-19 06:41 Maildir <--- when the group is dovecot my email works like a charm when the group is jonathan like it says in the wiki i have permission issues [08:22] my home directory where my Maildir is is encrypted im not sure if that has anythign to do with it [08:25] eagles0513875: unencypt it, or re-create the partition [08:25] twb: how did you progress with your mirroring ? [08:25] ikonia: do you have any site i have been searching for something that will tell me how to permanently unencrypt my home directory but cant find anything [08:26] drbd or aoe? [08:26] eagles0513875: how did you encrypt it ? [08:26] twb: drbd [08:27] ikonia: during install it asked me if i wanted to encrypt my home directory and i hit yes and i checked and its using encryptfs [08:27] eagles0513875: if it was me, I'd copy the data off, blank the partition and put the data back [08:27] :-/ [08:28] how does it work though with the group as dovecot and then if i change the group to jonathan it gives me hell [08:28] eagles0513875: or your could look on the first hit on google http://virtually-a-machine.blogspot.com/2010/08/howto-disable-ecryptfs.html [08:28] thats what im still trying to figure out and understand [08:28] eagles0513875: what are you on about "groups" [08:29] drwx------ 18 jonathan dovecot 4096 2010-11-19 06:41 Maildir <--- if i change dovecot to jonathan i get an error which complains about the /home/jonathan/Maildir not haveing +w which it does [08:29] eagles0513875: not for the user dovecot it doesn't [08:29] or ght egroup [08:29] eagles0513875: look at your permissions only the OWNER has permissions [08:30] dovegot is the group [08:30] dovecot even [08:30] i know but when i have the group set to jonathan though [08:30] i get this error Nov 19 08:53:23 eagle dovecot: IMAP(jonathan): mkdir(/home/jonathan/Maildir/cur) failed: Permission denied (euid=1000(jonathan) egid=1000(jonathan) missing +w perm: /home/jonathan) [08:30] the permissions are right according to the wiki i chmod 700 on that folder and all subfolders [08:31] shouldn't be 700 on all sub folders [08:31] the wiki says otherwise [08:31] the ubuntu dovecot wiki [08:31] eagles0513875: show me the URL [08:32] ikonia: I got it working for /srv, but not booting from drbd [08:32] twb: ahhh booting, bold move. [08:32] https://help.ubuntu.com/community/Dovecot ikonia [08:33] eagles0513875: then it's wrong [08:33] what should the appropriate permissions on the directory be [08:33] as well the user and group are fine as is? [08:33] eagles0513875: your running the dovecot process to delivery mail - it's the group dovecot, how can something with no access that directory be expected to deliver mail [08:33] or "read mail" I should say [08:33] not deliver [08:33] ikonia: it doesnt deliver it but when i restart dovecot it works [08:34] which i find very odd as well [08:34] so the way it is now is ok the way i have it? [08:36] ikonia: the way i have it now is fine or its still not right? [08:36] hang on [08:36] just taling to someone [08:37] ok [08:38] talking even [08:38] eagles0513875: your just using dovecot for imap yes ? [08:39] imaps yes [08:39] so the permissions on your home dirs maildir needs to be something that obviously you own, but dovecot can read/write to - what user are you running dovecot as ? [08:42] ikonia: thats the htop past of all dovecot related threads [08:42] ? [08:42] what is [08:42] whoops [08:42] here it is sry bout that ikonia http://pastebin.com/TNcAhrST [08:43] eagles0513875: I don't want a process list [08:43] eagles0513875: I want to know what user your running dovecot as [08:43] how can i determine that [08:44] eagles0513875: your running your own business as an ISP and hosting provider, come on [08:45] right now email im using for personal email nobody else [08:45] so ? [08:45] as someone who runs a hosting business for companies, you should be able to tell me what user a process is running as [08:45] root [08:46] are you sure ? [08:46] yes [08:46] so then the group/user permissions would not matter as root can do what it wants [08:47] heh, this is fun to watch... [08:47] ok ikonia [08:47] * eagles0513875 has to head to class [08:47] thanks for your help ikonia [08:47] I thought you'd have to leave [08:47] and your welcome [08:47] no no, come back, i haven't finished my popcorn! [08:48] * eagles0513875 slaps rdw200169 [08:48] ikonia: last question [08:48] where would be the best place to discuss wiki updates [08:48] eagles0513875: you can change the wiki - it's public [08:49] ok might just end up doing that [08:49] change it to what ? [08:49] what needs changing [08:49] not entirely but the dovecot one needs some updating [08:49] from what I'm reading it looks fine [08:49] what bout the cmod -R 700 the step before that [08:49] why ? what's wrong with it [08:49] myuser mygroup would be jonathan jonathan [08:50] that's fine, your running dovecot as root [08:50] humm ok [08:50] if i wasnt [08:50] but you are [08:50] just a curiosity question here [08:50] if i wasnt though [08:50] the user would be jonathan jonathan or jonathan dovecot [08:50] why would you change a guide to something your not [08:50] but you are [08:50] I have new 2TB disks. the installer wants me to create GPT disk labels; is there any reason I *should not* continue using msdos disk labels? [08:51] eagles0513875: think about it - something would need to write the that dir, the writing thing would need write access to mail dir to read/write to your mail box [08:52] twb: I believe msdos partitions can't support 2TB partitions [08:52] twb: I actually think eagles0513875 had his issue a while back [08:52] ya i did [08:52] ikonia: partman seems to disagree, fwiw [08:52] but ikonia turned out bad ram [08:52] errors galore [08:52] just sent it rma [08:52] eagles0513875: your disk problem turned out to be ram [08:53] really ? [08:53] ikonia: ill see once i get the ram back if i still have issues or otherwise [08:53] how odd/interesting [08:54] if the user and group are jonathan and the folder has rwx access shouldnt that still work [08:54] or would the group need rwx permissions as well [08:55] eagles0513875: it doesn't matter your running as root [08:55] ok [08:55] it's not running as root [08:55] if your running as root it can go through those permissions fine [08:55] shauno: he said it was ? [08:56] http://pastebin.com/CTi5QMqv dovecot-auth and saslauthd are root, everything else is user dovecot, or user jonathan [08:56] shauno: exactly [08:57] /usr/sbin/dovecot is running as root, but not all it's children are [08:57] ill be back [08:57] need to relocate [09:08] back [09:09] shauno: is the user and group fine as jonathan dovecot? [09:09] eagles0513875: it depends who owns the process [09:09] if the process is owned by dovecot as your ps shows - no [09:09] as how can the user dovecot access something it has no access to [09:10] if the process is owned as Jonathan, then yes, as jonathan owns it [09:10] work it through in your head [09:10] since the ps shows a mix what do i do? [09:10] eagles0513875: I would suggest shutting everything down, and then on restart watch what happens [09:11] start up starts up fine im going by what is written in the logs [09:11] I didn't say it won't start up [09:11] I said watch what happens [09:11] what processes are running at start and owned by who [09:11] and now apache is acting up O_o cuz squirrelmail isnt loading [09:12] what happens when you connect - who luanches that process [09:15] parent process is started as root [09:16] child processes are dovecot ikonia [09:16] eagles0513875: ok - so work it through, if the directory is owned by Jonathan, and only the owner has access, will they be able to read/write to your maildir ? [09:18] so the group dovecot needs rwx permissions as well [09:19] eagles0513875: well, that's one possible solution, or make the process start as the mailbox owner (which it should do when you connect and auth) [09:19] eagles0513875: just work it through logically [09:19] ya i am will adjust the group permissions to have rwx [09:20] twb: "msdos" part tables support up to 2 TB. [09:21] thanks ikonia [09:21] twb: I'm not sure why the installer would switch to GPT if it's smaller than that. [09:21] My disks are labelled 2tb (i.e. equal, not less) [09:21] twb: That could mean at least 3 different things. [09:22] SCSI1 (0,0,0) (sda) - 2.0 TB ATA WDC WD2001FASS-0 │ [09:22] ...according to partman [09:22] 2*10^12 bytes, for instance. [09:22] I don't think I've *ever* seen an HDD manufacturer that provided disks in GiB / TiB units [09:23] Or 2*1024*10^9 bytes. Or 2*1024^2*10*6 bytes. [09:23] twb: You mean specifically stating that it's "TiB" rather than "TB"? [09:24] soren: if the disks ship with a gpt table on them, the installer leaves it alone [09:24] No, I mean *delivering* 2**31 bytes when I ask for 2TiB [09:24] ikonia: Good point. [09:24] soren: I've got a 1TB disk that came with a gpt table on and ubuntu offered up gpt [09:24] twb: Ah. [09:24] ikonia: I'm in priority=low and clicking on the disk, to create a new disk label [09:24] twb: Ah, right. Well, the part table limit is 2 TiB, so 2 TB should be fine. [09:25] soren: you experiencing any issues with 2tb [09:25] btw, debian's d-i daily does the same (defaults to gpt on these disks) [09:25] eagles0513875: Largest disk I have is 1TB, so no :) [09:25] 1953514584 is the size reported by /proc/partitions [09:25] So actually *less* than 2TB (SI units) [09:26] ikonia: hopefully some new ram will fix my issues installing to my 2tb drive [09:26] eagles0513875: what made you think it was bad ram ? [09:26] ikonia: ran memtest for 12 hrs [09:26] Presumably they'll claim the "missing" 2% is for bad block replacement [09:26] came up with over 400 errors [09:27] eagles0513875: ahh, a very good sign [09:27] viva corsair life tiem warrenty [09:28] submitting rma request and they got back to me in 25 min that they approved my rma [09:28] !watchdog | eagles0513875 [09:31] ikonia: is there a wiki floating around for setting up watchdog? [09:31] eagles0513875: I have no idea, have a look [09:32] im looking on google and its not turning up anything for me [09:32] ill keep hunting [09:36] guys i am having a funky issue with squirrelmail and apache2 [09:37] sometimes it doesnt load squirrelmail [09:37] but lets me see all the dir's i have in /var/www [09:37] and then after 5 min it will load squirrelmail [09:38] what does the log file say when you try to access it and it fails [09:41] ikonia: nothing in theapache 2 logs are showing out of the ordinary [09:41] eagles0513875: do you see the access request hit the log? [09:42] no [09:42] wait let me look again [09:46] not seeing anythign out of the ordinary in the log [09:46] I didn't ask for anything ordinary, I asked a clear and simple request for information [09:46] eagles0513875: do you see the hit request in the log, yes or no [09:46] no [09:47] eagles0513875: ok - so how do you expect it to work [09:47] that is out of the ordinary [09:48] you make a request and you don't see the hit in the log [09:48] that means it's not hitting the server [09:48] so how would the server ever respond [09:48] let me look again [09:48] as before, walk it thorugh [09:48] through [09:48] which apache log [09:48] eagles0513875: !!!! [09:48] ? [09:48] eagles0513875: you are running a web hosting business [09:48] eagles0513875: how can you not know this [09:49] eagles0513875: is it running off the root domain of the box [09:49] [Fri Nov 19 10:21:44 2010] [error] [client 194.204.113.45] PHP Notice: Undefined variable: default_folder_prefix in /usr/share/squirrelmail/include/load_prefs.php on line 109, referer: http://webmail.eagleeyet.net/src/right_main.php [09:49] thats all i get in the erro log relateing to squirrelmail [09:49] eagles0513875: does that time stamp corrispond with your hit request ? [09:49] yes [09:50] from earlier havent tried again now [09:50] oh come on [09:50] help us to help you [09:50] your saying its failing [09:50] check ! [09:50] seems to be behaving now [09:50] when it fails - work it through, apply common sense [09:50] ok [09:50] then what's left is the provlem and we can work it through [09:50] problem [09:51] I suggest clearing your logs also, so the next time you get an error, you know it's not an old entry [09:51] ok [09:51] eagles0513875: I'd seriously thinnk about trying to run a web hosting business....seriously [09:54] soren: I'm going to do one scratch install, just to see how borked gpt is (particularly gpt+extlinux) [09:54] soren: then I'll go back to msdos because I understand it [09:54] twb: gpt has good support [09:55] ikonia: gptmbr.bin isn't exactly intuitive. [09:55] yeah, I'll agree on that [09:56] If you can help me work it out, I'd appreciate it [09:56] I'll certainly try [09:56] I only really use GPT with IA64 HPUX and it handles it different [09:57] well, and on my mac, but I never mess with that [09:57] http://git.kernel.org/?p=boot/syslinux/syslinux.git;a=blob_plain;f=doc/gpt.txt;hb=HEAD [09:58] ughh, this looks fun [10:02] sob :( think they blocked ssh port [10:03] Hmm. [10:04] eagles0513875: run your sshd on 443, then [10:04] might have to do that [10:04] twb: but there is something not right though with the connection on campus here [10:04] its super sluggish in general [10:05] i think they took dns down :-/ viva windows [10:06] what has that got to do with windows ? [10:07] Maybe he thinks windows still uses netbios [10:07] who knows [10:07] no it has AD [10:07] so ? [10:07] Hi! [10:07] again - what has that got to do with windows [10:07] its offtopic im not goign to continue talking bout it. [10:07] I would provide simple webhosting to my users [10:07] because you've just made a stupid comment [10:07] eagles0513875: I don't think AD distributes the hosts database via LDAP. [10:07] Web, Email, and SSH [10:07] halvors: ok - what's up ? [10:07] this is not home network thsi is school network its all windows mostly [10:08] Whats the simples whay to create new domains on my server? [10:08] eagles0513875: so - if someone takes something down - it won't work [10:08] eagles0513875: I've just shut down my email serve "viva linux" [10:09] Is there some simple hjosting panels i can use, also i will have a solotion that not need SSH to create new domains. [10:09] halvors: the hosting tools such as webmin and cpanel don't work well with the default config layouts within ubuntu [10:10] ikonia: So it's impossible to host simply with Ubuntu Server? [10:11] halvors: webmin and cpanel aren't supported here [10:11] halvors: you could probably make them work if you tried [10:11] halvors: I'm not aware of a tool that I'd consider good and stable (and simple) thats secure and compatible with ubuntu's layout, but I don't use such tools so may be out of touch [10:11] halvors: ebox is allegedly blessed by Ubuntu, but I can't vouch for it or support it myself [10:27] good morning [10:28] I beg a few help just for confirm I'm doing it well [10:28] morning HackeMate :) [10:28] HackeMate: just ask your question [10:30] I have this local7.* /var/log/dhcpd/dhcpd.log in rsyslog.d, it works well, but now I want to rotate the log daily and as max size 4096 [10:31] so in /etc/logrotate.conf I put size=4096k [10:31] and rotate daily [10:31] but it does nothing with this file [10:31] my question is: do I need create a /var/log/dhcpd/dhcpd.log { size=4096k }? [10:32] or the dhcpd/dhcpd.log is wrong [10:32] I swear I was reading the man logrotate for a week but I dont get this, I'm not native english [10:34] hi, how can i check in init script which user is running the script or his uid? [10:35] anebi: why do you want to know? [10:36] twb: i wan to check if the script is started with root and if is, then to run the script with su -c and use other username [10:36] anebi: why? [10:37] Starting your daemon with start-stop-daemon --user nobody would be a better way to go about it. [10:38] twb: yes, i will change the init script in this format when i get more time, but for now i need to use su - and to check for the user that is running the script [10:39] anebi: all init scripts are run as root [10:41] ikonia: thanks [10:44] hi i want to know suport the bind9 buld form the ubuntu repasetory DLZ as defauld? [10:45] www2: DLZ ? [10:46] database suport in BIND e.g. mysql [10:46] ooh I don't know, good question [10:46] I've never done it with bind -> mysql before [10:47] oke [10:47] that sounds potentially painful [10:47] i heft done one time early but on a vm [10:47] as test [10:52] Why not postgres, if you have enough zones to warrant a database? [10:53] Or drizzle. [10:53] twb: Why postgres if all you need is to store simple, structured data? [10:54] Because I've never met a DBA that liked mysql [10:54] I've never met a DBA that liked any DB. [10:55] twb: I've always found that people use PostgreSQL because they need some of the fancier features. If you don't need them, MySQL seems the better choice (since it's (AFAIK) generally faster). [10:55] @soren i agree with you [10:56] The aforementioned DBA bigots explained that mysql is faster because it doesn't implement an actual ACID RDBMS [10:56] and i wand only use as a test server on my privet computer [10:56] That if you went out of our way to configure it to be reliable, it'd be slower than postgres [10:57] Of course, I'm not a DBA, so I'm only speaking second-hand. [10:58] twb: a) InnoDB is ACID compliant, and has been around since forever. [10:58] twb: b) If this is just to store DNS entries, ACID doesn't seem like much of a concern. [10:59] In that case, why SQL/RDBMS instead of something from the bdb/couch/tokyocabinet line of databases? [11:00] Oops, s/couchdb// [11:00] Never mind, I'm just being a bigot and I don't REALLY need to know the answer. [11:01] now i heft install allready instald my sql for my older projects [11:01] brb [11:01] :( [11:02] I just wanted to know if I should put /var/log/dhcpd/dhcpd.log or /var/log/local7 === Sky[XX] is now known as Sky[X] [11:31] New bug: #677411 in tomcat6 (main) "tomcat6-user should include in webapps ROOT, manager, doc etc." [Undecided,New] https://launchpad.net/bugs/677411 [11:35] hi, I'm trying to get a webserver running in EC2, when I attempt to ssh via ahaney3@seelabmac1:~$ ssh -i rss.pem root@ec2-174-129-127-238.compute-1.amazonaws.com I get Connection to ec2-174-129-127-238.compute-1.amazonaws.com closed. [11:35] what's my user name? [11:40] ahaney3: root? [11:42] New bug: #677413 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.37-1ubuntu5.1 failed to install/upgrade: subprocess new pre-removal script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/677413 [11:49] anyone here that knows a good chassis for a home NAS? preferably something compact that can take, say, 4 SATA drives... [12:16] Hello everybody. I´m running ubuntu server 10.10 and installed gnome. How can i disable running x? I´ve "update-rc.d -f gdm remove" and i get "Removing any system startup links for /etc/init.d/gdm ..." but x is still starting!? [12:17] i want to get konsole login and beeing able to start gnome with "startx" [12:19] nobody has an hint? [12:26] Has anyone written a free (e.g. Affero GPL) landscape server component? [12:43] hi, I'm trying to get a webserver running in EC2, when I attempt to [12:43] ssh via ahaney3@seelabmac1:~$ ssh -i rss.pem [12:43] root@ec2-174-129-127-238.compute-1.amazonaws.com I get Connection to [12:43] ec2-174-129-127-238.compute-1.amazonaws.com closed. [06:35] [12:43] what's my user name? [12:55] ahaney3: I imagine that depends on what OS image you're running [12:59] hello, i´ve installed gnome on 10.10 server. how can i start on konsole login? i already run "update-rc.d -f gdm remove" and it worked, but x is still starting!? [12:59] tmade: gdm is not an sysvinit job in 10.04 [12:59] Er, from 10.04 onwards [13:00] Instead, it's an upstart job, and you need to go in /etc/init/gdm.conf and modify "start on" [13:02] tmade: you can also edit /etc/default/grub [13:07] thanks..i´ll try [13:14] pmatulis: how is grub related to x? [13:15] pmatulis: what do i have to edit in /etc/default/grub? [13:16] tmade: btw, "konsole" is a KDE terminal emulator. In english, the text mode is "console" or "fbcon". [13:16] twb: i´m new on ubuntu...i know about upstart. below start there´s "start on (filesystem and started dbus and (drm-device-added card0 PRIMARY_DEVICE_FOR_DISPLAY=1 or stopped udevtrigger))". How to edit? I expected there are runlevels defined!? [13:17] tmade: just comment out the entire "start on" line(s) [13:17] twb...ok, console === SirFiChi is now known as ihCiFriS [13:17] I don't think runlevels have existed for a long time now [13:18] it's all emulated [13:18] ah..that easy. I´m an experianced linux user(mainly on rhel), but ubuntu is that different... [13:18] patdk-wk: he's quoting runlevel events, which still exist in upstart [13:18] But you're right that they're basically spoofed [13:18] why? [13:18] for me it is great [13:19] ..like it was :-) [13:19] Which, of course, leads to tmade's problem of being unable to disable gdm by simply putting "runlevel 3, please" in his bootloader [13:19] (Which is the old RH way.) [13:20] Even pre-upstart, runlevels in Ubuntu didn't work like on RH. [13:20] true [13:20] ok [13:21] why is runlevel 2 on ubuntu the same like on all other distribution i know runlevel 3. there isn´t runlevel 3 on ubuntu? [13:21] Mentally I find it useful to treat RH and derivatives and Debian and derivatives like they are two different operating systems. [13:22] Scottk: you are right [13:22] On Ubuntu and Debian run levels 2 - 6 do the same things. [13:22] By default [13:22] what means rl 3 on debian /ubuntu? [13:24] twb: uncommenting the "start" is working!! thanks... [13:24] everybody told me "update.rc" to edit services [13:25] tmade: that's the Debian/old way [13:25] quite frustrating to execute a command and getting exit code 0 without success [13:25] I totally agree [13:26] Also frustrating that you have to edit a free-form text file in order to disable a server [13:26] *service [13:26] there´s no other way? [13:26] If there is, I don't know it [13:26] hggdh: Around? [13:26] ok...don´t like this [13:27] chkconfig is (was) just great [13:27] hello [13:28] pmatulis: just because of curiousitiy: "you can also edit /etc/default/grub". how can i start/stop services there? [13:28] If apt dependency for me to install a service, but I NEVER want to start it, I can do [13:28] dpkg-divert --rename /etc/init/foo.conf [13:29] haha [13:30] I was trying to edit a file on a remote and getting really confused... until I realized I was in mg, not vi [13:30] "why isn't ^[$ going to the EOL?!" [13:36] New bug: #677459 in samba (main) "Programs fail to install: package samba-common 2:3.4.7~dfsg-1ubuntu3.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 10" [Undecided,New] https://launchpad.net/bugs/677459 [13:37] twb: Just delete it. [13:40] the file? or mg? :) [13:40] soren: yeah, good point. It's a conffile [13:40] patdk-wk: Or the whole server. That should stop it good. [13:40] soren: otoh then I can't bring it back when complain that is still needed [13:40] twb: Rename it. [13:41] That's what dpkg-divert did :-{P [13:41] Well, yes. [13:41] I thought you were asking for ways that did not involve dpkg-divert. [13:41] Sorry, no [13:41] I deliver. You complain :) [13:42] If it's not named .conf, upstart ignores it. [13:42] What I want is to prevent services *auto*starting, but still allow auto-stopping and manual stop/start/restarting, *without* editing a file [13:42] i.e. the equivalent of "update-rc.d foo disable" [13:43] The purpose being to allow stuff like puppet to reliably disable services without needing to know how to parse upstart's file format [13:54] twb: Yeah, not sure how I'd do that. [13:55] Daviey: So... Merge proposals would fly through when they were really simple, right? [13:56] * soren twiddles thumbs [13:56] soren: Sorry... i hadn't seen the mail yet... but this ping helps you queue jump. [13:57] * twb points at the queue jumper [13:57] Daviey: https://code.launchpad.net/~soren/ubuntu/natty/nova/webob-dependency/+merge/41300 [13:57] NORK NORK! [13:57] soren: seen it now! [13:57] * soren points at things anyway [13:57] soren: 43 mins... pah... that is no patience :) [13:58] Daviey: need to organize an interrupt queue [13:58] Daviey: I am *waiting* for this build to work. [13:58] Daviey: This is the sort of stuff I was talking about. [13:58] soren: I should probably comment that you haven't described why that is now a needed dep? [13:58] Dunno about you guys, but I wrote me an imapbiff so rt tickets IRQ me. [13:58] Daviey: Adding another build-dependency is hard to get wrong, and even if I did, fixing it would be a 2 second task. [13:59] http://paste.debian.net/100207/ [13:59] twb: I can see merit in a indicator widget that pings me when there is a merge proposal waiting on me [13:59] Daviey: You have that, you know? [13:59] soren: irc doesn't count :P [13:59] No. [14:00] soren: This is related to the great twisted drop? [14:01] Daviey: No, it's related to changes in the aPI. [14:01] Daviey: We just happen to use webob upstream now. [14:01] Daviey: Without this dependency, crap fails. [14:02] Daviey: I added the dependency because *it was missing*. [14:03] Daviey: Seriously, you expect me to explain why we chose to use webob upstream? [14:03] Daviey: Because, srsly, then you can do this on your own. I don't need this. [14:03] s/explain/justify/ whatever. [14:04] lptools has review-notifier. It tells you when you have reviews to do. It's lovely. Crashy, but lovely. [14:05] soren: no... i wasn't asking you to justify why upstream adopted it [14:07] soren: I'm not trying to make the process harder... really i'm not [14:07] Daviey: then what *are* you trying to do? [14:07] soren: make it "better" [14:08] Daviey: Try harder. [14:08] soren: We are a team, right? [14:08] Daviey: Yes? [14:08] soren: Improving collaboration.. is what this is trying to achieve [14:09] soren: I think waiting 43 mins, and getting frustrated is perhaps unfair on the rest of us. [14:10] soren: Equally, you found a few things you weren't happy with on zul's branch... This is what it's all about... we shouldn't be backing out changes, due to disagreements... it should surely be solved in the merge proposal? [14:10] Look, whatever. I just thought it'd be better for everyone if we all used the same packaging. *You* insisted on reviewing even the most miniscule of detils. [14:10] details. [14:10] soren: I can see you are frustrated, and that is not what i want at all. [14:10] soren: Do minute changes need reviewing on the upstream branches? [14:11] They do. [14:11] Daviey: called? [14:11] soren: what is the difference then? [14:11] hggdh: hold fire [14:11] Daviey: Openstack has an implicit promise that we keep trunk clean, functional and good. [14:12] soren: I'm not trying to dictate a process... i really want your input, if you have suggestions. [14:12] Daviey: a) Ubuntu has no such promise. [14:12] soren: The server team want to try and add that :) [14:12] Daviey: b) This is not going to turn into a package in Ubuntu until someone rolls a package out of it. [14:13] Daviey: The platform is not releasable at all times, so at least on the surface that sounds like overreaching. [14:13] Daviey: We expect people to be able to take any tarball of Nova and run it. [14:13] Daviey: I don't for a second expect people to grab half-baked Ubuntu versions of packages. [14:13] soren: What is the main concern you have? [14:14] dudes....relax [14:14] Daviey: That I have a job I need to do. [14:14] soren: Well, we want to help with that... not getting in the way. [14:14] Daviey: ...and now I need to block on stuff for no good reason. A big change to the packaging would be a good reason. Adding a build-dependency is not a good reason. [14:15] I'm not even *adding* a build-dependency. [14:15] I'm documenting it. [14:15] soren: If this package ever gets in main, then as you know... we need to justify each depends that isn't already in main. [14:16] You were doing such a good job at keeping this constructive.... [14:16] New bug: #677476 in mysql-dfsg-5.1 (main) "package mysql-server-5.1 5.1.37-1ubuntu5.5 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/677476 [14:16] soren: ugh? Sorry, i really am trying. [14:17] Daviey: If upstream adds a dependency (we did), not documenting in debian/control does not "fix" that. [14:17] It sounds to me like the review point should be before upload, not at each committ to a packaging branch. [14:17] Daviey: If you have a problem with the dependency, take it up with upstream. We're just trying to package stuff here. [14:17] ScottK: Hmm... the trouble with that is bulk... per-commit review is easy to manage... would you enjoy doing a 1000 line diff? [14:18] Daviey: How's this: [14:18] Daviey: No, but I'd be frustrated if I was stuck waiting on reviews for a one liner. [14:18] We all subscribe to changes to the packaging branch, and get to shout and scream if someone does something stupid. [14:18] soren: I agree... but this is the Ubuntu package.... with UEC last cycle, we had to patch out some stuff as we didn't have the depends that upstream needed... === thomas_s is now known as thomas_s_ [14:19] So, whilst we ALWAYS want to... sometime we can't always provide the deps upstream needs. [14:19] subversion worked that way for years and years. [14:19] Daviey: That's a problem you solve when you have it, not in advance for all possible packages. [14:19] ScottK: Within 2 mins of soren asking for the review, it was done and pushed :/ [14:19] soren: i think Daviey's point is that he was just asking why it was needed. [14:19] zul: I realise. [14:19] Daviey: Certainly, but the review really doesn't add value in this case. [14:19] ScottK: This isn't all packages. === thomas_s_ is now known as thomas_s [14:20] ScottK: I disagree. [14:20] and a review was probably not needed in this case [14:20] Daviey: The issue isn't the 2 minutes, it's the 45 minutes and the cost of multiple context swtiches. [14:20] That sort of thing really screws with developer workflow. [14:21] Daviey: So what would you have expected? A build log from a failed build? Output of "grep -r import.webob ."? [14:21] ScottK: Hmm.. I don't think anyone complained of context shifting here. :/ [14:21] Daviey: Part of being a team (as you pointed out we were) is trusting each other just a tiny bit. [14:21] Daviey: It sounds to me like soren isn't finding the process helpful. [14:21] soren: I was confused why it wasn't a needed dep, but now is... When you said it's new upstream, then it solved that concern for me. [14:22] ScottK: And the reason we are talking is to try and improve it. [14:22] soren: Oh... i don't want you thinking at all, that it's a lack of trust - it's really, really, not. [14:23] What are you talking about folks? [14:23] * matti is trying to make a heads and tails out of the conversation .. [14:23] matti: Merge code review, vs just push and maybe ask questions later. [14:23] Ah. [14:23] soren Daviey: in this case it probbaly should be like done on irc saying soren: im adding a build dependency because of so so daviey: ok....there done [14:23] Daviey: Thanks :) [14:24] soren: If I make it so merge proposals go to my inbox, and try that nifty widget - that would probably increase the speed i see it... would that help? [14:25] (currently Launchpad mail goes into a subfolder) [14:26] soren: I think i would benefit from knowing your ramifications of a merge proposal taking an ~hour. [14:26] Daviey: I'm just really, really disappointed that we can't just assume that if I add a build-dependency, it's because it's needed to build the thing. [14:27] soren: Hmm.. would it help if we schedule a call? Sometimes it's easier to thrash this stuff out verbally. [14:27] Daviey: We talked about this face-to-face in Orlando. I raised these concerns then. [14:28] soren: I really must insist, it's not a lack of trust or confidence thing [14:29] Daviey: To sort of quote Jono, this doesn't sound like a very JFDI kind of process. [14:29] soren: It might be valid to note zul's merge proposal from yesterday... He didn't document why he added a dep, and you called him on it? Whilst i'm in no mind that you know the code better, is this a similar situation? [14:30] ScottK: I don't think you are helping tbh. [14:30] Daviey: I *know* zul did not add a dependency on greenthreads upstream. [14:30] Daviey: So why it needs adding in the packaging isn't clear to me. At all. [14:30] ScottK: I do. [14:30] fwiw [14:31] kirkland, ping [14:31] Daviey, ping [14:31] Thanks. [14:31] i'd like to put ubuntu packaging branch for euca2ools somewhere. right now i think that kirkland has that at ~core-dev, which is useless for daviey and i [14:32] smoser: are you a member of ubuntu-virt? [14:32] smoser: put it in ~ubuntu-virt... that is what we did with euca... and is a good location IMO. [14:32] yes. [14:32] thats what i was thinking [14:32] ok. i'm putting it htere. [14:33] soren: I think we can formulate a process that can work... lets have the weekend to ponder about it? [14:34] Daviey: Are you going to do it? [14:34] soren: wassat? [14:34] Daviey: Formulate a process that can work. [14:35] soren: No, i mean - lets have the weekend to think about it... and kick off a discussion on Monday? [14:35] Daviey: Formulating from scratch by committee is virtually impossible. Someone usually writes a draft to get started. [14:35] soren: Ok, if you are happy for me to do that... i will. [14:35] thats reasonable [14:36] Daviey: Hey, you can draft all you want. Doesn't mean I'll agree :) [14:36] thats not :) [14:36] New bug: #677485 in tomcat6 (main) "Tomcat 6 installation failure due to sed" [Undecided,New] https://launchpad.net/bugs/677485 [14:37] soren: Well yes... you can do that... but it would be ideal if we can have a plan we all agree on :) [14:38] Daviey: That's what I'm saying. We can't actually write (as in sit down and type) the thing together. [14:38] Daviey: So someone must write a draft first, and have it discussed/mangled afterwards. [14:41] Daviey: And I'm happy for to draft it. [14:41] Daviey: Err... Happy for *you* to draft it. [14:42] soren: Ok, i'm happy to do that [14:42] Daviey: ..then we will discuss that, adjust to make everyone happy (or at least equally miserable) and agree. [14:43] soren: So i can better understand the issue can you send me a quick email with your main concerns, and also hilight which circumstances it blocks you as an upstream. [14:43] That'll make it easier to come to a resolution i feel [14:43] whereto? [14:43] dave@ubuntu.com [14:44] ok [14:44] soren: It would also be useful to know what your end goal requirements are. [14:45] soren: I appreciate it can also be a challenge being an upstream and a ubuntu developer at times :( [14:47] To be honest... It used to be quite easy. [14:49] soren: i just replied to your merge review from yesterday [14:56] * ttx just read backlog. Happy to contribute to the discussion when we'll have a good starting point [14:57] fwiw euca packaging was successful by having open branches and whoever released it was supposed to review changes (default to trusted rather than untrusted) [14:58] We had way more of small incremental packaging improvements from everyone that way. [14:58] I think new Ubuntu releases should use peer reviewing, not necessarily each commit to a packaging branch. [14:58] Daviey, soren ^ [15:03] soren! [15:04] ttx: yeah... the concern I have is a huge diff at the end before upload... although, regular uploads absolves this [15:04] Daviey: if it's a packaging branch, you just have to review packaging changes, right [15:05] ttx: true [15:05] ttx: I'm going afk, but i'll keep that in mind and send it on Monday to devel-discuss [15:05] so unless you review the packaging completely, that should be manageable [15:05] s/review/change/ [15:06] Daviey: ack [15:06] ack... i really need to dash.. but thanks [15:07] mdeslaur, did you get a response from me on the ssh thread ? [15:07] ball: eh? [15:07] soren: Sorry. I just haven't seen you for some time. [15:08] ball: Sorry, having trouble mapping "ball" to an actual name. [15:08] soren: ball is my actual name ;-) [15:09] smoser: yeah, from your gmail account? [15:09] ball: Ah. irssi says your name is "Lay off the cookies" :) [15:09] Oh, that's so appropriate for me this morning. :-9 [15:10] smoser: that's pretty much how I thought it worked, thanks for the clarification [15:10] ugh. [15:10] fudge [15:10] ikonia: there is something that squirrelmail doesnt like is if i change the permissions to rwx for the group O_o [15:10] i hate iphone [15:10] :) [15:10] eagles0513875: permissions where ? [15:10] Maildir directory [15:11] Nov 19 16:00:25 eagle dovecot: IMAP(jonathan): mkdir(/home/jonathan/Maildir/.INBOX.Sent/cur) failed: Permission denied (euid=1000(jonathan) egid=1000(jonathan) missing +w perm: /home/jonathan) [15:11] just tried to login right now ikonia [15:11] mdeslaur, so you would not suggest that we need to turn off password auth then, right ? [15:12] eagles0513875: what user id is squriell mail being launched under (unix level id - not application user) [15:12] smoser: I still recommend we do it...it's just not critical or urgent [15:12] (clearly with the correct spelling rather than the utter tosh I've just typed) [15:13] smoser: do amazon firewall instances between each other? I'm curious now :) [15:14] your instances can talk to your intsances via internal ips [15:14] (possibly un-firewalled, but i'm not usre) [15:15] ikonia: would squirrelmail have a uid if its just runs of apache [15:15] smoser: can an instance talk to another customer's instance, either using the private ips or using the public ips without going through a firewall? [15:15] smoser: my questioning is unrelated to ssh :) [15:16] oh, then i can be more open :) [15:16] instances can talk on internal IPs [15:16] so, my ugess, swithout reading, is that firewall applies to internal and external identically [15:17] i've just not played much with the internal IPs. [15:17] it would make sense though, especially given a little trick amazon plays to its customers favor [15:17] eagles0513875: it's being run as apache then [15:17] if you lookup a ec2 ip address from internal to ec2, you'll get an internal IP back. [15:18] ikonia: it be haves fine with the permissions drwx and thats it [15:18] so that hostname based communication uses internal IP addresses, which gets you reduced rates [15:18] any other permissions given to the Maildir give problems [15:18] not only in squirrelmail with thunderbird [15:18] eagles0513875: ok - so think it through [15:18] i reverted the permissions to the way they were before [15:18] eagles0513875: first of all, squrill mail does not actually read the Maildir filesystem [15:18] smoser: I wonder if they isolate customers between each other or if the firewalling is done at the main box that does the NAT [15:18] eagles0513875: it makes an imap connect to the imap server and generates html based on that [15:19] ok [15:19] eagles0513875: so if you re-read that error message you'll find it's dovecot that's complaining - not squirellmail [15:19] smoser: anyway...it's something to put on my free-time to-do list :P [15:19] eagles0513875, so lets walk it through again [15:19] eagles0513875: what user is owning the dovecot process that squirellmail connects as ? [15:20] mdeslaur, what do you mean by isolate ? [15:20] smoser: can customer A port scan customer B via the private network [15:20] mdeslaur, probably [15:21] oh [15:21] wait [15:21] smoser: thats a concern [15:21] probably not [15:21] that's less a concern ;) [15:21] ikonia: the parent process is root all child process are mostly dovecot with 3 imap processes being jonathan [15:21] mdeslaur, i think not. you can check, but i'm almost certain its no. otherwise, the firewall would be too easily avoided. [15:22] and thus really, useless. [15:22] eagles0513875: ok - so from that, what does that tell you [15:22] smoser: well, it limits connections from non-customers [15:22] smoser: malicious customers are easy to punish, malicious internet, not so much :) [15:23] mdeslaur, that works if your customer base is small [15:23] true [15:23] yes, internet much larger than intranet [15:23] but for amazon, intranet == very large [15:23] also true [15:24] ikonia: since the parent process is root just drwx are only needed on the Maildir not for the group as well [15:24] eagles0513875: no [15:24] eagles0513875: it means there are two different users connecting after the auth, the first one (jonathan) is probably you, the second is probably squirellmail (doevcot) [15:24] eagles0513875: do you agree/disagree with that ? [15:25] correct [15:25] so i probably need to tweak saslauthd [15:25] eagles0513875: ok - so if your connect (jonathan) works it's because you are the owner and has permissions, but if what permissions would you see if you where connecting as the USER dovecot [15:25] or modify dovecot to allow the same account to access the server more then once? [15:26] many users can access the same account, it's imap [15:26] eagles0513875: look at the error - it's file system permissions, keep it simple [15:26] its complaining about +w on /home/jonathan/Maildir [15:26] which it has [15:26] the user jonathan can access your maildir becuse it's the owner, what would happen if the user dovecot tries to access it [15:27] Daviey: Sent. [15:27] it wont be able to as the group permissions arent set [15:27] eagles0513875: there we go [15:27] eagles0513875: and what is the error complaining of ? [15:27] ikonia: Nov 19 16:00:25 eagle dovecot: IMAP(jonathan): mkdir(/home/jonathan/Maildir/.INBOX.Sent/cur) failed: Permission denied (euid=1000(jonathan) egid=1000(jonathan) missing +w perm: /home/jonathan) [15:28] eagles0513875: ok "permission" denied [15:28] drwx------ 7 jonathan jonathan 4096 2010-11-12 11:08 jonathan <-- thats my home folder permissions [15:28] eagles0513875: so again - walk it through, the connection is coming from the user "dovecot" does that user have access, no, what is the error "permission denied" what does that tell you ? [15:29] that i probably need sudo to access the folder [15:30] NO! [15:30] that the groups are missing rwx permissions [15:31] eagles0513875: the user dovecot - can that access that folder, no, the error is permission deneid, what do you need to do to resolve that [15:31] make the Maildir have the user dovecot [15:32] NO ! [15:32] then your user can't access it [15:32] look at "group" [15:32] give the group dovecot rwx access [15:33] eagles0513875: is the user dovecot a member of the group dovecot ? [15:34] your asking if jonathan in my case is a member of the dovecot group [15:34] no [15:34] I'm not [15:35] I'm asking in clear english - is the USER dovecot a member of the GROUP dovecot [15:36] and yes it is [15:36] i think i got it O_o [15:37] no i dont i thought i was on to something [15:37] eagles0513875: then you can change the group permissions with confidence [15:37] ikonia: would adding the users jonathan to the group dovecot work as well? [15:37] eagles0513875: if you change the group ownership to dovecot and give it group read/write access, then the user jontahan (you) will have full control, and the webmail cilent (dovecot) will have read-write access [15:37] eagles0513875: there is nothing wrong with the user jonathan [15:37] why are you even looking at that [15:37] think about what I'm saying [15:38] the problem is the dovecot user - not jonathan [15:38] * eagles0513875 re reads again [15:38] ok [15:39] chgrp dovecot /home/jonathan/Maildir; chmod g+rwX /home/jonathan/Maildir [15:40] qman__: i think i got it solved [15:45] thanks ikonia [16:01] greetings [16:09] eagles0513875: are you sorted now ? [16:10] si senor (yes sir) [16:17] excellent [16:17] well done [16:18] mathiaz: ping [16:18] kirkland: o/ [16:18] mathiaz: can you mumble or phone? [16:18] kirkland: sure [16:18] mathiaz: what's your preference? [16:32] soren: done [16:34] mathiaz: ? [16:35] mathiaz: we lost you on mumble === mathiaz_ is now known as mathiaz [16:52] New bug: #677535 in dhcp3 (universe) "package dhcp3-server (not installed) failed to install/upgrade: cannot access archive: No such file or directory" [Undecided,New] https://launchpad.net/bugs/677535 [17:13] GRAAH [17:13] lxc 0.7's lxc-ubuntu template generates a rootfs that works [17:13] I modify it slightly, and mine doesn't work [17:27] zul: hi, just wanted your take on the patch in bug 382832 [17:27] Launchpad bug 382832 in libnss-ldap "Need comment for line added to /etc/ldap.conf by nssldap-update-ignoreusers(8)" [Wishlist,Triaged] https://launchpad.net/bugs/382832 [17:27] you had +1'd it a while back [17:28] nigelb: yeah I havent had a chance to get to it yet [17:28] we have our sudoers stored in LDAP on our network [17:28] zul: Can I help in anyway? [17:29] under centOS this works by setting up /etc/ldap.conf to talk to the ldap server and setting up files ldap in nsswitch.conf [17:29] forward it upstream, debdiff it.. anything I can do? [17:29] nigelb: sure a debdiff would be nice :) [17:29] zul: awesome! on it! [17:29] I have the same settings in ubuntu 9.10 but for some reason sudo does not work here as it does under CentOS [17:30] I thought for a moment that LDAP resolution under Ubuntu may look to /etc/ldap/ldap.conf on the client side, but putting sudoers_base in there doesn't seem to do the trick either [17:31] zul: there is also bug 644632 with a patch. Can you take a quick look so I can package it together? [17:31] Launchpad bug 644632 in libnss-ldap "nssldap-update-ignoreusers needs to be configurable to ignore users" [Low,New] https://launchpad.net/bugs/644632 [17:32] also getent passwd and getent group talks to ldap just fine on the ubuntu box [17:32] nigelb: im ok with it [17:33] zul: cool, I'll put boht of them onto one debdiff [17:44] ikonia: sry to bother ya again but what exactly is this telling me Nov 19 16:45:50 eagle dovecot: IMAP(jonathan): fchown(/home/jonathan/Maildir/dovecot-uidlist.tmp, -1, 114(dovecot)) failed: Operation not permitted (egid=1000(jonathan), group based on /home/jonathan/Maildir === jean-paul_ is now known as www2 [17:49] eagles0513875, I thought we went over that a few days ago, your using encrypted home dirs [17:49] patdk-wk: ikonia helped me today and all permissions issues are resolved now [17:49] ah [17:49] you turned off encrypted home dirs? [17:49] no [17:49] still encrypted [17:56] eagles0513875: it doesn't work with encypted file systems [17:56] ahh i was thinking permission issue possibly again on that particular file in the directory [17:57] eagles0513875: there are a few notes on the web that say it doesn't like encypted file systems, they may be wrong but a few people appear to be having issues with it, so I'd at least have %50 confidence that it doesn't like encypted file systems [17:58] ya im regretting encrypting my home dir [17:58] the solution is pretty simple though [17:58] don't store your email in your home dir [17:58] or unencrypt [17:58] the permissions issues appear to be fixed, but from what I'm reading this is beyond that [17:58] ikonia: thing is it seems to work i can send and recieve emails just fine [17:59] eagles0513875: that's not dovecot [17:59] dovecot doesn't send mail [17:59] dovecot doesn't even receive, unless you use it's lda [18:06] operation not permitted generally means something being made impossible [18:06] apparmor/selinux, encrypted file systems, that sort of thing [18:19] Hello! I am going to try out Ubuntu Private Cloud, and was wondering if the cloud controller can also act as a node controller. [18:24] New bug: #638145 in eucalyptus "metadata service returns 500 error on Lucid" [Undecided,New] https://launchpad.net/bugs/638145 [18:26] mdeslaur: I'm thinking the "here's what you do to SSH" stuff should be in the server guide too if it's not. [18:27] ScottK: it's liked in the server guide [18:27] OK. [18:27] s/liked/linked/ === ihCiFriS is now known as SirFiChi [19:39] I can't get pptpd VPN to work. It used to work just fine, but then stopped. I am not getting errors in logs, but it doesn't connect.. any suggestions for troubleshooting? [19:40] on the client, it says: anon warn[open_inetsock:pptp_callmgr.c:326]: connect: Connection refused [19:40] | anon fatal[callmgr_main:pptp_callmgr.c:124]: Could not open control connection to SERVERIP [19:41] "Connection refused" implies the port is closed, can you netcat to it? [19:42] I have never uses netcat [19:42] used [19:42] just try a simple connection: nc ipaddress port [19:42] installing [19:43] if it is refused then either it is filtered or nothing is listening [19:43] conn refused. [19:43] or it is the wrong port :) [19:44] lsof -i :1723 shows nothing... hmm [20:15] Hello, can i dissable the login for a certain user but this user should still be able to work in the system. Same as it can be set for the root acc? [20:35] amokpaule: passwd -l user [20:35] this command sets his password as expired and the user can not login [20:36] but can be used as user [20:43] Many thanks :) === Sky[xxx] is now known as Sky[x] [21:33] SpamapS: ping [21:35] SpamapS: ill be adding your plymouth apache passphrase thingy tonight === SirFiChi is now known as ihCiFriS [23:03] Is there a diagnostic for checking why an apache server does not work. [23:05] snake_: Define 'does not work; [23:05] !doesntwork [23:05] Doesn't work is a strong statement. Does it sit on the couch all day? Does it want more money? Is it on IRC all the time? Please be specific! Examples of what doesn't work tend to help too. [23:08] zul: cool! I think it needs a little polish.. haven't looked at it since rc [23:08] SpamapS: we might remove it later on if plymouth gets fixed properly [23:08] zul: plymouth does the right thing I think [23:10] * SpamapS is finding it hard to concentrate, as the starbucks he has selected to finish his afternoon in has become overrun with shrill high school gossip girls..gggaaahhhh [23:12] Pici, oh sorry. i have help somewhere else now. (but they asked the same thing lol) [23:12] omg but then like I just and like my besfriendislike omg fmliwilljusttextyouandlikeletsgo to denver [23:12] =-o [23:14] snake_: Yeah, I saw. ;) === jeiworth_ is now known as jeiworth [23:36] where do i change the settings of my port number and ip address for apache2? === Eric is now known as Guest84402 [23:40] snake_: /etc/apache2 , there are a few ways to do it depending on what you want. You want the Listen directive most likely