[00:00] kirkland: ping [00:02] _Techie_: So if I look up ssh motd, I can replicate it telling me ram usage and such? [00:03] _Techie_: Thanks [00:04] <_Techie_> veovis1, you could search, how to disable ssh motd on ubuntu, that should provide the information on how to disable it, and therefore if you reverse the process, it should be enabled [00:04] _Techie_: Thanks, I'll try that too... [00:10] _Techie_: Yeah, /etc/update-motd.d is a collection of scripts that you can edit. Thanks! === ng_ is now known as NG_ [00:11] <_Techie_> veovis1, no problem [00:35] hello world [00:36] I am getting the nosegneg TLS warning (https://gist.github.com/714703) in dmesg, though I do not see 4gb seg fixup in my logs and do not see a performance hit [00:36] how can I find out where this is coming from, I have in the past had to recompile ruby enterprise with the appropriate flags but I thought the libc6-xen package handled this for me [00:46] can someone help me get the priority upped on this? the patch fix is listed in the comments, and just needs to be added by the maintainer. https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/668042 [00:46] Launchpad bug 668042 in libvirt "target device info is not in dumpxml" [Low,New] === erichammond1 is now known as erichammond === erichammond1 is now known as erichammond === hackeron_ is now known as hackeron === erichammond1 is now known as erichammond === _Techie_ is now known as _TechAway_ === jjohansen is now known as jj-afk === _TechAway_ is now known as _Techie_ [02:09] i'm testing my encrypted raid10 [02:09] the system boots with all disks. when i unplug i'm dumped to the standard busybox [02:09] i tried to set mdadm boot degraded to true but that doesn't work [02:10] how may i boot the system === _Techie_ is now known as _TechAway_ [03:15] anyone here? [03:53] draven_sol, ya? [04:02] !anyone > draven_sol [04:02] draven_sol, please see my private message [04:04] hello [04:04] how come spamassassin is giving mail, including spam very low scores [04:05] I'm running Mandriva on a different server, and it's doing a lot more tests that the stock SA ubuntu installation [04:05] twb do you know how to install an encrypted raid so if it degrades the system will still boot, the raid is raid10 [04:05] Sure. It's asked of you at install time in expert mode [04:06] draven_sol: I *think* it's BOOT_DEGRADED=true in /etc/initramfs-tools/conf.d/mdadm [04:06] (Then "update-initramfs -u -k all", of course.) [04:07] twb, i've set that and ran the update-initramfs -u all [04:07] it continues to fail and drop me to busy box [04:08] twb, i've kept /boot on a separate unencrypted non-raided drive and have / on the encrypted raid [04:08] draven_sol: this is lucid? [04:08] 10.04 lts server [04:08] Works for me on 10.04, but I only have RAID1 and do not encrypt the root filesystem [04:09] twb, do you have any part of the raid encrypted? essentially i could just make a /data encrypted mount point on the raid and leave / unencrypted [04:09] Incidentally, what is the point of encrypting the root filesystem of a SERVER? That would mean either 1) you keep the secret on-disk, defeating the point of using it; or 2) you need to be physically present every time you reboot. [04:10] draven_sol: I do not do block encryption at all [04:10] twb, it's a home media server and i prefer to keep all things encrypted, so it is physically present [04:12] twb, i've managed to have the system "install" and boot where it looks to be encrypted and raided but unlike a standard raid10 if i pull a drive out to test if it can boot degraded after it's synced i can't recover thus rendering the system dead [04:13] It drops you to a busybox shell, right? [04:13] yes [04:13] Does it say something like "add bootdegraded=yes to boot paramters"? [04:15] If you have been testing things, one possibility is that you're boot the array which was already out-of-sync [04:15] i.e. it tries to boot degraded, but only the disk you removed has an up-to-date copy [04:16] twb, i booted the system and allowed it to be fully synced prior to powering off and removing the drive using mdadm --device /dev/md0 [04:16] I'm trying to setup postgresql 9.x using ubuntu-server 10.10 [04:16] does 10.10 only use ipv6? [04:16] the clients can't seem to access it using the ipv4 schema. [04:16] etcetera: define "only" [04:17] twb: will it only negotiate inbound requests from valid ipv6 addresses [04:17] etcetera: AFAIK everything SHOULD default to dual-stack [04:18] can't get postgres clients to connect to it even though I have a valid pg_hba.conf [04:18] twb, since i've encrypted /etc and anything other than boot can i assume that the bootdegraded option for the initramfs-tools will not be read and will not auto attemp to boot a degraded system? [04:19] draven_sol: IIRC the ramdisk's behaviour is to mdadm --assemble --scan [04:19] draven_sol: i.e. it won't care about /etc/mdadm.conf being inaccessible [04:21] ok, when i've issued that command in busybox it complains about not finding /dev/md0 and the user root [04:22] draven_sol: you issued what command? [04:22] the mdadm --assemble --scan [04:24] mdadm --misc --scan --detail, then check dmesg and /proc/mdstat [04:24] with bootdegraded=yes, it should then go on to mdadm --assemble --scan --run (the --run forces it). [04:24] ..those last two commands are straight from /usr/share/initramfs-tools/scripts/init-premount/mdadm [04:25] Which at your busybox prompt is /scripts/init-premount/mdadm [04:26] twb, thank you [04:29] what's the correct way to specify an ipv6 range for an internal network? [04:30] etcetera: isn't the netmask fixed at halfway in? [04:30] twb: ? [04:31] Maybe that's only for RIR-level allocations [04:31] yea I'm hosting a virtualbox instance of ubuntu-server. [04:31] but the vbox instance is getting a proper address from the router. [04:32] trying to assign a range for the intranet the postgres server can respond to. [04:34] Unless you actually care about IPv6, I suggest you just work out how to make postgres talk IPv4 [04:34] twb: that's the issue, I don't think it's talking over ipv4 [04:34] ifconfig eth0 doesn't show a valid ipv4 address. [04:35] so fix that [04:35] ? [04:36] etcetera: do what you gotta do so that it DOES get an IPv4 address [04:36] well..shouldnt ubuntu-server do ipv4 / v6 at the same time? [04:36] Yes [04:36] I mean the router says it's gotta a valid ipv4 address, ifconfig just is not showing it. [04:38] if it does both, why wouldnt it show the valid ipv4 address.... [04:40] I don't know. [04:40] Pastebin the output of "ip l; ip a; ip r" [04:41] twb: none of them shows a valid ipv4 address. [04:41] you would think they would shout something like this from the rooftops. [04:42] *WE ARE CHANGING THIS< YO* [04:44] I don't know who you mean by "they", but I haven't heard of anybody else having problems with IPv4 in postgres or ubuntu. [04:44] i'm sure it's just my incompetence. [04:44] Which sounds to me like you've fucked up somehow, although I can't tell how from what you've told me. [04:44] I havent messed with linux in forever. [04:45] Maybe you haven't got proxy ARP (or even basic networking) working correctly [04:45] That would prevent you getting an IPv4 address, but you ALWAYS get an IPv6 address. [04:45] I've got a valid ipv6 address that I can ping from the host. [04:46] etcetera: is ARP working? [04:46] no idea what that is :-( [04:46] ARP is a protocol for associating ethernet MACs with TCP/IP addresses. [04:46] DHCP relies on it [04:46] DCHPv4 does, I mean [04:48] so, how would I check that it's working? [04:48] arping? ip neighbour show? [04:49] Note that it has to work between your VM and your DHCP server. [04:49] i.e. working between your domU and your dom0 is necessary but not sufficient [04:50] hmm, interesting... [04:50] that coud be one reason why it's not working, ive bridge the two devices, the host can ping the guest, but the guest can't ping anything. [04:50] *facepalm* [04:52] ICMPv4 over ethernet also inherently relies on ARP [05:33] upgrade from 8.10 to 10.4 but keep GRUB and exclude GRUB2 - can I do this from the [05:33] command line using apt-get upgrade ? [05:41] do-release-upgrade states 'No New Release Found' status set to normal, not 'never' or 'lts' only, the system is 9.04 trying to upgrade to 10.04. Any ideas? [06:26] New bug: #436630 in spamassassin (main) "spamassassin caches DNS servers forever" [Wishlist,Confirmed] https://launchpad.net/bugs/436630 === _TechAway_ is now known as _Techie_ === _Techie_ is now known as _TechAway_ === _TechAway_ is now known as _Techie_ === _Techie_ is now known as _TechAway_ === _TechAway_ is now known as _Techie_ [06:58] !away | _Techie_ [06:58] _Techie_: You should avoid noisy away messages and -nicks in a busy channel like #ubuntu, or other Ubuntu channels; it causes excessive scrolling which is unfair to new users. Use the command "/away " to set your client away silently. See also «/msg ubottu Guidelines» [06:58] <_Techie_> nigelb, seriously, you lote are starting to really piss me off [06:58] hrm? [06:59] <_Techie_> i left #xubuntu because of that, i got banned from #ubuntu earlier today due to it [07:00] <_Techie_> so i mean this in the nicest way, leave me the F alone [07:00] <_Techie_> ask me anything else, just dont use !away [07:01] _Techie_: plonk [07:03] meh, its just IRC manners and part of the ubuntu guidelines [07:03] <_Techie_> well until a mod decides if my 2 lines are worse than 2 lines of parts and joins, i dont give a rats arse about the guidelines [07:17] upgraded from lucid to 10.10 with a raid 5. can not boot "ALERT! /dev/mapper/(username)-root does not exsist. dropping to a shell!" Any help on this one? [07:26] anyone know if it's possible to filter 'top' output by process name? [07:48] yes, tried the ? key [07:49] by > > it move from default cpu % to sorting by name [08:01] New bug: #681245 in php5 (main) "package libapache2-mod-php5 5.3.2-1ubuntu4.5 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/681245 [08:23] hello [08:24] my sudoers file is like this www-data localhost=(ALL) NOPASSWD: sudoedit /etc/dhcp3/dhcpd.conf [08:24] itthe plan is let www-data modify tthe dhcpd.conf file [08:24] Yikes. [08:24] but it doesn't work [08:24] what's wrong? [08:24] www-data and NOPASSWD. [08:24] itthe=the [08:25] soren: i have a cgi that must modify that file [08:25] via webpage [08:26] truth that the cgi doesn't execute the sudo command in anywhere, but doesn't grant the permission anyway? [08:26] <_Techie_> ermm [08:26] <_Techie_> why not move the file into a writeable area and symlink it back [08:26] /etc/sudoers only defines what sort of privs people get if they calll things through sudo. [08:27] _Techie_: to do that i prefer give chmod 777 then [08:27] soren: no chance then? [08:28] You can't just put something in sudo's configuration file and expect it affect people not using sudo. [08:28] <_Techie_> why not change the owner or the group [08:28] <_Techie_> rather than the whole lot [08:29] HackeMate: IOW, your cgi has to call sudoedit. [08:30] ...but I'm still not sure what you expect to happen. Can you CGI drive a visual, interactive editor? [08:30] your. [08:35] HackeMate: Techie is right. chgrp www-data /etc/dhcp3/dhcpd.conf && chmod g+w /etc/dhcp3/dhcpd.conf ... simple and fairly safe. [08:35] HackeMate: more likely is that you'll need sudo to restart/reload the service [08:40] SpamapS: I solved that part [08:40] the cgi does an exec sudo /etc/init.d/dhcp3-server that works [08:40] SpamapS: no problem about changing the group and the user of that file? [08:41] i mean if the file is deleted and restored a backup from ssh [08:41] or some strange situation [08:42] HackeMate: If your backup/restore procedure alters file ownership, you're screwed anyway. [08:43] moin [08:43] well, true that [08:44] so the only problem could be if an user via ssh modifies or changes the attributes [08:45] i'll create a solution that verifies itss perrmissions and i guess it should be ok [08:47] thanks yguys, you helped me [08:47] but now! (heh, sorry for abuse) the dhcpd log is stored in /var/log/dhcpd.log [08:47] i wannt to rotate it so i put rotate daily and size=4096k in logrotate.conf [08:48] but the file is being big [08:48] not rotate [08:48] what i miss [08:49] <_Techie_> james [08:49] <_Techie_> sorry wrong channel [09:07] HackeMate: install logrotate :) [09:51] +spamI did [09:51] SpamapS: I did [10:07] this is my logrotate.conf http://pastebin.com/cbb5ZP0i- at those [10:08] if i want rotate dhcpd [10:08] what block do i need add [10:08] or //var/log/dhcpd/dhcpd.log [10:09] im freaking lagged [10:22] Anyone know if Ubuntu Enterprise Cloud supports booting from an LVM logical volume? === _Techie_ is now known as _TechAway_ [11:16] Hi guys. I really do need some advice setting up a mail-server. I have my main site, mycompany.com on amazon, and mail.mycompany.com and smtp.mycompany.com are pointed to another IP address, that's a mail hosting service (loopia.se). I've set up exim4 on my server (mycompany.com) and want to send out emails from me@mycompany.com, but they are getting marked as spam and I'm getting them back saying "550-Unrouteable address\n550 Sender [11:16] verify failed". rdns for mycompany.com is okay, but MX is directed to the mail-service. Any suggestions, please? === SirFiChi is now known as ihCiFriS [13:00] 'morning. How does ubuntu Firewall options compare to other's? Say embedded router with dd-wrt or even server specific distro's like a smoothwall or something? === twister004__ is now known as twister004 === JanC_ is now known as JanC [13:35] ehcah: same thing [13:35] ehcah: they're all based on iptables [13:40] RoyK: I'm trying to figure out how to bypass my Telco's gateway as no matter how I try to disable their embeded firewall, I can not. [13:41] RoyK: Their Fiber is connected to some sort of gateway, which then is connected via ethernet to a their router. [13:46] RoyK: I got a head of myself there a bit... Assuming that I can figure out how to make a direct connection without the second telco provided device, I want to host my own router on either Ubuntu, dd-wrt, pfsense, clearOS, Untangle, you get the picture... [14:24] Hey guys. Currently i have a 30gb drive for my ubuntu server installation. Is it possible for me just to take an image of that drive and apply that image to a 120gb drive? [14:26] New bug: #681399 in pptpd (main) "Please merge pptpd 1.3.4-3 (main) from debian unstable (main)" [Wishlist,New] https://launchpad.net/bugs/681399 [14:43] Hello, Is there an option to list all apt packages with their NAME? [14:45] rotem925: sudo dpkg -l [14:45] hi zul, but it doesnt list the name [14:45] rotem925: 'name' ? [14:45] yea, the name of the package like when i get the package info [14:48] jpds: I mean the full package name [14:54] rotem925: you mean you want 'wireshark_1.2.11-2_i386.deb' instead of 'wireshark'? [14:54] I mean, When im apt for openssh, it should show openSSH (Im on the iPhone) [14:55] all the com.package. should be shown as the package name on the iphon [14:55] what is --showformat? [14:56] rotem925: sorry, i don't understand you ["When im apt for openssh, it should show openSSH (Im on the iPhone)"] [14:57] pmatulis: heh sorry, when im using dpkg -s the package name is different from what i see when im using the -l [14:57] pmatulis: the question is: can I list all the packages information? like running dpkg -s for all packages [14:58] with one command [14:59] pmatulis: something like this: dpkg --show * [15:06] rotem925: i don't think so. you'll need to pipe some commands together [15:06] rotem925: for all installed packages you mean? [15:07] pmatulis: yea it looks like you are right, can you give me a hand here? I need to pipe the dpkg -l with apt-cache show * [15:07] rotem925: for all installed packages you mean? [15:07] for all packages, not only installed [15:12] rotem925: that info is in file /var/lib/dpkg/available i think [15:12] pmatulis: hmmm, ill have a look, thanks!! [15:15] pmatulis: yep, you are right this file looks like it have all the packages info [15:42] New bug: #681427 in ipsec-tools (main) "Please merge ipsec-tools 1:0.7.3-12 (main) from debian unstable (main)" [Wishlist,New] https://launchpad.net/bugs/681427 === NG_ is now known as ng_ [16:57] Hey, Is there a file in ubuntu that has all the packages in apt? [16:57] not only the installed packages, all of them [17:03] rotem925: huh? [17:04] hello air^ : [17:04] ill explain what i need [17:04] I need to get all the packages for the apt, I mean all the packages information [17:04] Is there a file for that? [17:05] why would you need that? [17:06] if you want to find something, just use apt-cache search [17:06] I'm working on an application that need a list of all packages available [17:07] air^: any clue? [17:07] nope. [17:17] hey guys [17:17] how goes things? [18:09] It would appear that all/most of repositories are coming back failed when I "apt-get update" . Is there a command I run to fix the default repo's for 10.04 Server? I have not modified the sources.list file by hand, so I am not sure what happened. [18:17] can anyone give me any advice about a project dealing with ubuntu-server user management? [18:20] ehcah, that usually happens when your DNS is broken, or your connection is otherwise disrupted [18:20] also, check for proxy settings in apt [18:20] andylockran: just ask! [18:21] highvoltage: I'd consider myself a beginner programmer, with a bit of experience at administering OpenLDAP servers [18:21] evening [18:21] what would be the best project for me to look at in terms of being able to potentially contribute to user management on ubuntu-server. [18:22] i'm using 7 ubuntu servers, and i'm thinking about to use landscape [18:22] qman_: This box is providing DNS for the rest of my LAN? [18:22] but I don't get it :( is it completly commercial, or partial commercial? [18:22] andylockran: Gosa is used quite widely but is in a horrible state in Ubuntu atm. imho that would be a good place to contribute [18:22] Qman_ will check to see that proxy is off in apt. [18:23] Aison: the landscape client is free software, the server side isn't [18:23] but with the client alone I can't do anything, I guess ;) [18:23] Aison: indeed [18:24] Aison: except, if you have lots and lots of time, write your own server :) [18:24] well, maybe i'm going to buy it, that's not a problem ;) [18:24] but I don't know if it's the right solution for me [18:24] that would be the easier solution [18:24] Aison: you can sign up for a trial on the landscape site [18:24] highvoltage: thanks, I'll take a look [18:25] qman_: Shouldn't I be able to find proxy settings in apt.conf? [18:25] :) [18:28] can't find any prices for landscape?!? maybe i'm blind [18:29] its part of ubuntu advantage [18:29] base plan is £200 iirc [18:30] hey guys do we have any wordpress users or people using wordpress on their servers for a blog or otherwise? [18:31] ehcah, grep -R Proxy /etc/apt/ [18:32] also, just because you're providing DNS doesn't mean your local name resolution is working [18:32] check resolv.conf and nsswitch [18:32] err [18:32] ehcah, sudo grep -Ri proxy /etc/apt/ [18:33] eagles0513875: yep [18:33] meanwhile, I've run into trouble after upgrading my proxy server to lucid [18:33] squid is running, but upstart has no idea that it is [18:33] highvoltage: how are you imporving the number of page request served to a particular site [18:33] qman_ I had already added sudo to the first command. Neither it, or the second fixed the problem. I'll have a boo at the other two files you mentioned. [18:33] I can't figure out how it's being started and, as a result, how to stop/restart it [18:34] i have one site and according to ab highvoltage im doing about 8,95 requests per second are you using a wordpress caching plugin or squid proxy [18:34] eagles0513875: stgraber got some good performance (>1500 requests to the server a second) by (I think) using a reverse proxy [18:35] highvoltage: cuz i was considering setting up squid [18:35] on the site they boast performance gains of up to 75% [18:35] eagles0513875: yeah if you hang around a little bit he might be around and be able to give you some tips there [18:35] ill be on [18:36] soon have to relocate my bum to the couch for my weekly favorite tv show [18:36] ice road trucker but ill be on [18:38] qman_: Tried your suggestions. I added an externally hosted DNS entry into resolv.conf, restarted DNS and DHCP services and still not working. [18:39] ehcah, what does `nslookup us.archive.ubuntu.com` return (or your locality)? [18:40] highvoltage: just tell him to poke me please [18:40] and before anyone asks me "why nslookup", it's because dig doesn't use the system's resolution method [18:41] qman_: Came back with Non-authoritive answer: Name: us.archive.ubuntu.com (next line) Address: 91.189.92.170.... [18:42] qman_: SERVFAIL reply from 111.111.111.111, trying next server... [18:42] well, that looks like the problem [18:42] qman_: The 1's representing my IP for my server. I got its answer from my routers IP address instead. [18:42] apt isn't trying as hard as nslookup [18:43] solve that problem and your apt problem should go away [18:43] Ok. [18:47] hey guys quetsion anyone in here use squid and if so how much has it improved the number of page requests to apache per second [18:47] qman_: If you have an extra second. Can you have a look at: http://lani78.wordpress.com/2008/08/09/setting-up-a-dns-for-the-local-network/ This is how I configured my DNS and all the testing at the bottom works? [18:47] I use squid, but as a regular proxy, not a reverse proxy [18:49] ehcah, that's all fine, but your problem is with internet resolution [18:49] what's in your /etc/resolv.conf? [18:49] if it's just 127.0.0.1, is your server forwarding requests or does it use root hints? [18:50] 2 name server entries. First, my Server IP, Second, my Router IP. [18:50] qman__: what bout a caching proxy server [18:51] ehcah: i normally in my resolv.conf put the isps name server ips [18:51] eagles0513875, I use it with two purposes, an apt caching proxy, and an access control proxy for a couple machines [18:51] eagles0513875: When I was trying to fix it earlier, my 3rd line was my ISP's DNS. [18:51] far as apt caching, with the right tuning, it does what it's supposed to, faster upgrades [18:52] ehcah: remove yoru local server ip and router and put the ips of isp name servers [18:52] no [18:52] qman__: have you used apache with squid [18:52] leave 127.0.0.1 in there, otherwise local resolution won't work from that server [18:52] and if other machines are using it, those machines wouldn't get internet DNS either [18:52] as in : nameserver 127.0.0.1 ? [18:52] qman__: thats odd in my resolv.conf on my server i have just my isps name servers [18:52] yes [18:52] ahh ok [18:52] i see what ya doing [18:53] the local machine will be doing ns resolution for the network [18:53] I have nameserver localipaddress not 127.0.0.1 [18:53] then, attempt some name resolution, and see what /var/log/syslog looks like [18:53] that's where bind logs [18:53] the local IP is fine too [18:53] I just use 127.0.0.1 for aesthetic reasons [18:53] makes it obvious at first glance what's going on [18:54] no dice. [18:55] yes, but see what errors it gives in /var/log/syslog [18:56] is there a command in nano to get to the bottom of the log? I'll be paging down until Sunday? [18:56] I don't know nano [18:56] but try this [18:57] tail -n 100 /var/log/syslog | less [18:57] * RoyK points ehcah to vimtutor [18:58] Nov 25 14:45:06 myserver named[1985]: error (network unreachable) resolving 'mail/A/IN' : 2001:dc3::35#35 [18:58] That is the last error on the apge [18:59] *page. [18:59] Hey Roy [18:59] hi [19:00] try this, filter out the noise [19:00] grep named /var/log/syslog | tail -n 100 | less [19:00] heh, mail? people don't use fqdn anymore? [19:01] i need to setup my fqdn at some point PatrickDK [19:01] i have apache2 complaining bout that every restart of it [19:01] oh, apache complains on mine too [19:01] about the hostname or something [19:01] PatrickDK: how on earth do you fix that [19:02] ya, can't reliably determine the hostname [19:02] that's easily fixed with /etc/hosts [19:02] I ignore it cause I only use vhosts, and it's all set in the vhost configs [19:02] you need to put your FQDN in there, with your local bind address [19:02] so the default doesn't much matter [19:02] like so [19:02] 192.168.1.6 web.yournet.com web [19:02] and if the local bind address = 0.0.0.0? [19:02] qman_ same error. [19:03] qman__: internal ip or external public ip [19:03] your interface's address [19:03] ahh ok [19:03] it gets more complicated if you have more than one listening interface [19:04] qman__: i woudl need to change 127.0.1.1 eagle [19:04] ehcah, look for actual attempts at resolution there, e.g. us.archive.ubuntu.com [19:04] eagles0513875, no [19:04] where the loop back ip becomes the interface ip and eagle becomes my fqdn [19:04] leave that one alone, and add another line [19:04] i have a 2nd line thats like the one i pasted but localhost [19:05] my mouse's battery died, slowing me down [19:05] tyt qman__ [19:06] don't map two hosts to the same IP in /etc/hosts [19:06] your /etc/hosts should look something like this [19:06] 127.0.0.1 localhost [19:06] 192.168.1.6 web.yournet.com web [19:06] and then the ipv6 junk at the bottom [19:07] qman_: Way too much to type: http://pastebin.ubuntu.com/536408/ [19:08] ehcah, that clears things up [19:08] for some reason, bind is unable to contact those DNS servers [19:08] are you running a firewall of any kind? [19:08] Not deliberately! :) [19:08] Nothing that has changed anyway. [19:08] it just means it can't resolve it [19:08] test your DNS servers [19:09] no [19:09] his local server can't connect to those server IPs [19:09] This isn't a US - Canada thing is it? :) [19:09] network unreachable [19:09] We won that hockey game fair and square! [19:09] why would his DNS server by connecting to the repos ? [19:09] no, you should still be able to contact those servers [19:09] his DNS server is not connecting to the repos [19:10] it is attempting to look up the repos [19:10] and is failing, because it can't contact the root DNS servers [19:10] is the named.ca or root.hint file there [19:10] in bind? [19:10] is that zone even defined [19:10] yes, in bind [19:10] he's getting network unreachable [19:10] I assume it is defined, otherwise it wouldn't know to contact those servers [19:11] I wonder if this is on a home dsl/cable connection [19:11] what happens if you ping 192.5.5.241 ? [19:12] I'm reaching here, but I seem to remember having to generate a key of some sort when installing Bind. Could it have gone awry? [19:12] they should go through and come back [19:12] "network unreachable". [19:12] no, bind would not start [19:12] well, there you have it [19:12] you're not on the full internet [19:12] either your router/firewall is blocking you, or your ISP is [19:12] assuming you have any network connectivity at all [19:13] I definately have network connectivity. All other devices are functioning correctly. [19:13] pastebin the results of `ip a s` and `ip r s` [19:13] I'm going to try to "wget" something. [19:13] k. [19:13] and also try to ping your router or another local computer [19:14] ping'ing internally works fine. [19:15] how about pinging 209.85.225.99 [19:15] qman__: i bet if he were to put the ips of his isp's ns's that it woudl work [19:15] it works just fine for me like that [19:15] qman_: Commands not found for 'ip a s' and ... [19:15] eagles0513875, it would work, but that would not solve the problem [19:16] his DNS server would remain non-working [19:16] qman_ Host unreachable. [19:16] he'd simply stop using it [19:16] ok [19:16] ok [19:16] ehcah, that last IP is google [19:16] so your server is not able to reach the internet [19:16] it's not just a DNS blockage [19:16] routing problem thn? [19:16] then? [19:16] yes [19:16] ehcah: is your server using a static internal ip? [19:16] Static Internal IP - yes. [19:17] ok check your gateway ip [19:17] thats probably whats not set right [19:17] Why would my server have a routing issue, but all my devices including this laptop connect through it ok? [19:17] err what about a static external [19:17] if your external IP changes running a DNS server seems a bit pointless [19:17] yes, it's definitely a routing issue [19:17] if your DHCP server is setting correct routes, that's how [19:18] Any tips on which file in Bind to check? [19:18] or check'm all? [19:18] this is not a problem with bind [19:18] /etc/network/interfaces [19:18] ehcah: is your external ip a dynamic ip or static one [19:18] bind is not routing [19:22] guys: How much information should be included after "iface eth0 static" ? [19:22] address my .ip [19:22] netmask 255.255.255.0 [19:23] network my.ip.0 [19:23] Sorry, if there are any gals out there.... [19:24] ehcah: hold on ill pastebin ya mine [19:24] ehcah: network, netmask, broadcast and gateway [19:24] Is there a way to pastebin from terminal? [19:24] pastebinit [19:25] ehcah: http://pastebin.com/hUWVr7H3 [19:25] RoyK: yep [19:25] Royk: gateway isn't there. [19:25] pasting from commandline directly to pastebin.com [19:25] ehcah: copy what i have in the paste [19:25] ehcah: pastebinit /path/to/file [19:26] ehcah: you'd want a gateway on one of the interfaaces [19:27] * RoyK repeats that he hates winter temperatures [19:27] do I still need to add auto eth0 as a seperate line entry? [19:27] New bug: #681536 in bind9 (main) "/usr/share/bind9/bind9-default.md5sum should be in conffiles" [Undecided,New] https://launchpad.net/bugs/681536 [19:27] ehcah: if you want it to be enabled automatically, yes [19:28] Anyone feel somewhat confident about their knowledge in SSL/TLS, and can take a look at bug #/595415? [19:29] https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/595415 [19:29] Launchpad bug 595415 in openssl "Curl (openssl) fails to open some https URLs with "illegal parameter" error" [Undecided,Incomplete] [19:29] After making these changes, how can I restart eth0? I assume that restarting DHCP or Bind will not affect the changes... [19:29] is it ifconfig something or other? [19:30] has printing using Ubuntu Server 10.10 mostly failed short of printing text files and CUPS test page for anyone else? [19:30] started* [19:30] ehcah: ya its ifconfig [19:33] wow, I'm having all kinds of special today... ifdown/ifup: couldn't read interfaces file "/etc/network/interfaces" [19:33] might have been a recent CUPS update that did it, but printing from anywhere (local or over the Internet) and printing anything more complex that text files from lpr or the CUPS test page (such as PDFs and ODTs) causes the printer its sent to, to not print and crash [19:33] actually, this is 10.04 LTS >_> [19:45] RoyK/qman_/eagles0513875: I made those changes, rebooted and no longer have ssh access to my server IP. [19:45] "no route to host" [19:47] ehcah: pastebin /etc/network/interfaces, the output of ifconfig, and some details about your network infrastructure [19:47] ehcah: start with trying to ping default gateway [19:48] if that works, check netstat -rn to see if the gateway is the default router [19:48] et cetera [19:48] Not sure how long this connection will stay live. I can't surf the web anymore. I'm gonna go downstairs to the console BRB. [19:48] ehcah: pastebin netstat -rn as well [19:53] I need to install pastebinit in order to provide you the info you want. I can't get to apt though... :( [19:54] I #'d out the lines I changed in interfaces and I can now SSH again. [19:55] RoyK: I have always been able to ping anywhere within my LAN from the SSH console of that server. [19:56] ehcah: local network access should be quite trivial to setup [19:56] what did you do to break it? [19:56] RoyK: Destination: 192.168.2.0 Gateway: 0.0.0.0 Gemask: 255.255.255.0 Flags: U MSS Window: 0 0 irtt: 0 Iface: eth0 [19:57] I'm aware that ^ gateway is missing. [19:57] are the other machines on 192.168.2? [19:57] all machines. [19:57] if so, you have a l2 problem [19:57] I haven't dropped the VPN connection on my office laptop during this interuption either? [19:58] if network connectivity doesn't work on layer 2, meaning (usually) on the same IP network (or ARP et al), something is usually wrong with cabling or drivers [19:59] I'm going to type in Pastebin, what my interfaces file looks like. It's small. [20:01] can you reach the server over the lan? [20:03] http://pastebin.ubuntu.com/536421/ [20:03] RoyK: I am logged onto it via SSH [20:04] netmask 255.255.255. ? [20:04] missing a 0 there [20:04] 255.0, typo in pastebin not in file. [20:05] so you can access the box over the lan? [20:05] Just wanted to see if you were paying attention! ;) [20:05] yes. [20:05] then why haven't you tried adding a gateway? [20:06] My gateway 192.168.2.5 was there when I could no longer access the box via SSH and had to go to the physical console? [20:06] When I #'d it out, I can hit it again from SSH? [20:06] http://pastebin.ubuntu.com/536422/ [20:08] Is not what I had minus the "##" on 3 lines? [20:11] more or less, yes [20:11] RoyK: Connectivity failed, again. I #'d out auto eth0 and restarted the interface [20:12] It works now. [20:12] Why is auto eth0 causing me grief? [20:12] ehcah: I changed the auto lines [20:12] try rebooting [20:12] one interface per auto line [20:14] regardless, everything seems to be working now. [20:14] :) [20:15] Now all I have to do is find a good "router/firewall" like software to play with. [20:17] RoyK: Do you have any experience with pfsense, smoothwall or untangle? [20:17] also endian (sp.??) [20:18] ehcah: I've used pfsense - works well [20:19] untangle is a good appliance, but the firewall is nothing special [20:19] it's most useful part is the inline detection and removal of malware [20:19] I have to find one that is capable of something called 1483 via DHCP??? [20:20] qman_ I read that the kapersky subscription can be great also. [20:20] never heard of it [20:20] yes, I've been fairly impressed with kaspersky myself [20:20] it's what I recommend to people who are not satisfied with free antivirus [20:21] My ISP provides me a fiber connection. The fiber comes into my house and into some sort of lucent/alcatel gateway... then via ethernet to a traditional telco gateway/router. [20:21] I'm trying to get rid of the second device. [20:21] qman_ I've been running MS security essentials or whatever its called on my kids laptops. [20:21] I run ubuntu in that position [20:21] put my firewall together with an iptables script [20:21] We haven't found any virus's or anthing yet! ;) [20:21] LOL [20:22] microsoft security essentials is also surprisingly good [20:22] I was trying to be a bit funny, but yeah, not bad. [20:22] I'd still feel better having something to get rid of most problems before the kids have a chance to deal with them. [20:23] Have you tried Eindian or Smoothwall? From what I can tell, they are its competition? [20:23] I have not [20:23] I've heard good things about smoothwall, but I haven't used it myself [20:24] If I were smart enough, I'd compile the same dd-wrt files I was running on my linksys boxes into an x86 install. [20:24] hi guys how do i mae file server where situation is the server is hosted on a hosting company and all users are on remote location and they are windows client. [20:25] this is my firewall: http://pastebin.com/68cjsa3j [20:25] combined with a human-readable port forwarding list in /etc/portfile [20:26] Looks great! Is that latin? [20:26] bash, actually ;) [20:26] I wish I was there. [20:26] I'm barely, and I do mean barely competent without a GUI. [20:27] My delusions of grander and wants make choosing the right NAS or UTM solution problematic. [20:28] I just have a file server, raid6 array, with ssh/samba/nfs [20:29] That is exactly what I keep coming back to. Everyone and there do tells me ZFS and Raidz2 is the way to go. [20:29] All that does is confuse me. [20:29] some people say raid6 is paranoid, but losing two disks inside an hour changes your mind [20:29] God bless poor Roy and his patience with me this past weekend. [20:29] zfs is great in theory [20:29] but I'm not willing to run solaris [20:30] I'll wait for full linux support of it, or for btrfs to mature [20:30] I really, really hate solaris [20:30] IF and I do mean IF, I were more advanced, I wouldn't blink at OpenIndiana or Nexenta. Unfortunately, the compaq raid controller in my DL380G4 won't allow me to test it outside of a VM on my laptop. [20:31] Do you run ext3 or ext4? [20:31] ext3 [20:31] Is 4 immature or not necessary? [20:31] * RoyK is quite fond of zfs [20:31] I know my man! [20:31] 4 is considered stable by most, but I've been using ext3 since I started using linux [20:31] :) [20:31] it's always been there and I've never lost data [20:32] it meets my needs, so I use it [20:32] zfs is great [20:32] very cool system [20:32] but like I said, I'm not willing to run solaris [20:32] we're moving away from solaris at work === Mr_mist is now known as mrmist [20:32] that is, using it only for storage [20:32] for storage it's gold [20:33] My best technical friend here locally just lost a bunch of data on ZFS, not sure what happened, but that scares me because I consider him extremely advanced. [20:33] I'll wait for ZFS to come to linux, or for btrfs to mature [20:33] qman__: btrfs will probably reach the level of current zfs within 5 years or so - dream on :) [20:34] that's not so long [20:34] 5 years? [20:34] for now, ext3 + mdadm get the job done [20:34] And no regrets? [20:34] my needs aren't that great [20:34] but then, no checksumming of data [20:34] yep. it's still a fairly new filesystem. look how long it took for ext or ntfs, for example [20:34] You never look at FreeNas or OpenFIler or .... [20:34] I just need a big place to save files [20:35] the main thing about zfs is data checksumming [20:35] RoyK: Checksumming is verifying the data? [20:35] you'll know if you get silent errors [20:35] ehcah: yes [20:35] data checksumming is ok [20:35] versioning is nice, I like btrfs for that [20:35] PatrickDK: it's not ok, it's mandatory [20:35] the built in snapshot system is also very cool [20:35] reminds me of plan9 [20:36] PatrickDK: with a bunch of terabytes, you'll get silent errors (errors not detected by the drives) quite frequently [20:36] makes me think of netapp snapshots [20:36] snapshotting is also nice [20:36] I really liked plan9's system, it's a shame it didn't get more traction [20:36] it's not very useful because it's not widely supported [20:36] and real snapshotting, not like the copy-on-copy-on-copy..........-on-write stuff in lvm [20:37] royk, I think the fact of raid should deal with it for the most part [20:37] Do either OI or Nexenta support replication like OpenFIler is supposed to/ [20:37] ? [20:37] openfiler support replication? [20:37] ehcah: zfs send/receive [20:37] as far as I know. openfiler only does drbd [20:38] PatrickDK: most raid systems don't checksum at all [20:38] most raid cards are cheap also [20:38] PatrickDK: that is, they read a stripe and if nothing is reported from the disk, the block is delivered to user or kernel space [20:39] Well, I know this cat has to wait for his "Cheap" raid card to arrive before he can test on a box other than Virtual. [20:39] I've had a couple files get corrupt, but my data is also not that critical [20:39] important files have lots of backups [20:39] PatrickDK: if a silent error occurs, you get corrupt data, or if that error is in the metadata/filesystem, perhaps a panic occurs [20:39] not-so-important files can be recreated/redownloaded [20:40] royk, so turn on read checks [20:40] Family pictures, personal files and work backup's not so easy. [20:40] or if it doesn't support that, nightly verify's [20:40] don't forget the old mantra [20:40] RAID is not backup [20:40] PatrickDK: read checks are ok so far as the crc on the drive holds, which it doesn't with current storage amounts [20:40] the sector crc is useless [20:41] and it's going be more so with this 4k format thing [20:41] qman__: that's nonsense - if you have the possibility of checksumming your data, you do so. not doing it will result in downtime, which cost a lot [20:41] they are really dropping the amount of protection [20:41] PatrickDK: most modern raid systems relies on harddisk's CRCs [20:42] oh yes, I'm not saying you shouldn't checksum, if you can it's a great feature [20:42] I wouldn't call most modern raid systems, raid [20:42] I just mean, if there's something you don't want to lose, you still need backups [20:42] RAID is not a replacement for backups [20:43] qman__: of course, but reducing downtime is quite nice [20:44] qman__: you'll always need backup of sorts, but with more consistent raid systems, and snapshots, the backup may not be used that much [20:45] I can't afford a dedicated backup system, so my strategy is to keep copies of important files on several different computers [20:46] it works pretty well [20:47] even when I suffered total loss on my raid 5 array, I still had most of my data and all of the important stuff [20:47] i'm trying to copy some files from an ntfs disk to an ext4 disk, and i get the error "error splicing file value too large for defined data type". what's going wrong here? [20:48] guys any hel how should i setup my hosted server and have remote client in windows to create somehow like a file server.. [20:48] * PatrickDK will never use a raid5 ever [20:49] ruben23, two options I would consider are SFTP and WebDAV [20:50] SFTP being more secure, WebDAV being easier for windows users [20:50] yeah, I'm running raid 6 with a hot spare this time around [20:51] qman__: so i just install webdav..? straight..? [20:51] writes are slow but it's worth it [20:51] ruben23, no, webdav is fairly complicated [20:51] if you want easy to do, SFTP is it [20:53] qman__: but they are windows, can SFTP be accessible on web browser..? [20:53] no, you would need an SFTP client [20:53] such as winSCP or filezilla [20:54] the primary advantage of webDAV is that windows treats it basically like a regular windows file share [20:54] but it is much more complicated to set up [21:01] hello, i am trying to upgrade from 10.04 to 10.10 [21:02] and it tells me no new releases are available [21:03] cause you have lts only selected [21:04] alright, how do you deselect that [21:04] another strange thing is.. cpuinfo is only showing 800Mhz [21:04] sometimes it shows the stock speed 2800Mhz [21:05] it's CPU frequency scaling [21:05] intel speedstep, AMD powernow, etc [21:05] when the load is low, it slows down to save power [21:05] qman__: interesting [21:06] how do i disable this lts in ubuntu-server [21:07] a1fa: I'm able to disable in bios, I'd think this would be the best/easiest way. [21:07] Datz: i mean Ubuntu LTS releases [21:07] although, there really isn't a point to, unless you want to use more power [21:07] I'd lkike to go to 10.10 [21:08] oh.. well that I don't know. I'm sticking with 10.04 for as long as I can.. 5 years if the hardware lasts :P [21:08] PatrickDK: can you tell us what line to change in what file to "deselect lts only" ? [21:09] i guess there is no need to go higher then [21:09] i have issues with dev mapper and swap [21:09] yeah, I stick to LTS if I can [21:09] #/dev/mapper/smokinggun-swap_1 none swap sw 0 0 [21:09] there is a way but I have never done it [21:09] i have to disable it because it cant mount the swap partition [21:09] and there's no manual for do-release-upgrade [21:10] /etc/update-manager/release-upgrades [21:11] ah, etc/update-manager/release-upgrades [21:11] as documented here: https://help.ubuntu.com/community/Upgrades [21:11] qman, manuals are overrated [21:11] no one reads them :) [21:12] a1fa, what happens if you try to swapon manually? [21:12] i have not tried yet [21:12] doing a release-upgrade is unlikely to fix this problem [21:12] this is my zoneminder machine [21:12] and is quite likely to introduce more [21:14] works just fine [21:14] if i do swapon -0a [21:14] # swapon -s [21:14] Filename Type Size Used Priority [21:14] /dev/mapper/smokinggun-swap_1 partition 23248888 0 -1 [21:14] i guess that fixes it [21:15] it's possible that the mapper device is not ready when the system attempts to swapon [21:15] if that's the case you should file a bug [21:18] alright [21:19] i am going to try rebooting one more time with it enabled [21:19] my root is also mapped === Sorcier_FXK is now known as winniethepoo [21:46] New bug: #681598 in samba (main) "passwd doesn't work with pam_winbind" [Undecided,New] https://launchpad.net/bugs/681598 === winniethepoo is now known as Sorcier_FXK === ng_ is now known as NG_ [22:52] does anybody remember the name of that linux game with spacecrafts and MMOPG? [22:52] xstar or something like that [22:59] XShipWars [23:06] Do you know that if you compile samba manually from source itll actually work as opposed to what youve managed to do with Lucid and Maverik's versions ? [23:06] Whats wrong... ? [23:08] zul... ? [23:09] Because if you cant make a pckage out of perfectly working software id call you a loosely knit team of ... Politichians ? [23:10] Volvo: a committee [23:11] So thats why noone moves :P [23:11] Umm, samba doesnt work... umm ok... lets do nothing at all. [23:12] Do you get paid for this comittee stuff ? [23:12] Volvo: if you're having a problem, it helps to describe it instead of just bitching. [23:13] "nmbd" Dies directly after starting it on an fully updated Maverick. "testparm" sais the configuration is perfect. [23:14] twb: Politichinas arent garbage so im not bitching. [23:15] I see people not liking Ubuntu because SAMBA doesnt work and so i think it could be better if it did. [23:15] What do you think ? [23:16] Feel free to pitch in, all of you! === _TechAway_ is now known as _Techie_ [23:42] Volvo: it's thanksgiving in the US, so Americans are not around much, and in Europe it's night, so those are asleep [23:42] JanC: Im awake [23:42] :) [23:42] Thanks for telling me though. [23:42] well, most are not working at least [23:43] Volvo: maybe you can figure out why it doesn't work, that would be helpful to get it fixed... ;) [23:45] Volvo: does it work with a non-upgraded 10.10 ? [23:46] JanC: Doesnt seem to, no. [23:47] Check it for yourself. If it works for you then all bugreports are wrong. But if nmbd dies after starting samba or "nmbd" then the samba network cannot work and so samba doesnt work. [23:49] What is all involved in creating installing ftp on a ubuntu server and creating a new user for it? I made a new user, added them to the ftp group, and can connect and browse via ftp fine - but trying to upload any file via nautilus results in an 'invalid filename' error