[00:00] no .cfg in /etc/nagios-plugins/config/ [00:00] kirkland: squid can do multicast cooperation already, FWIW [00:00] lifeless: sounds nice; what does that mean? [00:02] http://eu.squid-cache.org/Features/MultiCast [00:03] kirkland: it means you can use a single config, across subnets (or even wans) and have squids autodiscover each other [00:05] hi [00:05] could u send me a tutorial for balancing servers pls? [00:07] tigreton: there are a lot of things to consider in load balancing [00:08] i want to create a simple balance, it isn't for a company or a real case, i will study a simple web with balance [00:09] tigreton: perhaps the simplest way to do it is with lvs .. http://www.austintek.com/LVS/LVS-HOWTO/ [00:09] and one more thing, 3 vps of 3$ eachone so... jeje [00:09] lvs i readed it before, ok [00:09] i see that tutorial [00:10] could spamamps resume what it does please? [00:10] An LVS is a group of servers that appear to the client as one large, fast, reliable (highly available) server. The core of the project is the ip_vs code, which runs on the LVS director... [00:14] i will try lvs and piranha spamaps [00:14] lvs tutorial is so large, so it isn't simply :( jaja [00:19] thanks everyone see you tomorrow! ;) [00:22] kirkland: for the ConsoleMonitor it is enough to examine time of last modification of /dev/ptmx and interrupts if any right? [00:22] RoAkSoAx: i think that's what it does now, right? [00:22] kirkland: mostly yes [00:23] kirkland: first it does a dev = commands.getoutput("ls -t /dev").split('\n') and then a for over that /dev [00:23] kirkland: but I don't think that's necessary, is it? [00:23] RoAkSoAx: the -t sorts by timestamp [00:24] RoAkSoAx: so the most recently touched files in /dev/ are listed first [00:24] RoAkSoAx: which makes the for loop faster [00:24] kirkland, yeah, but many times it shows /dev/shm.. which I don't think would be necessary [00:25] andreserl: interesting, yeah [00:25] andreserl: you're right [00:25] kirkland, ok then ;) [00:26] andreserl: are your changes pushed yet? [00:26] lol [00:26] andreserl: i'm going to grab a beer and hack the tcp monitor :-) [00:26] kirkland, Today's changes nope [00:26] i'll push them in a bit as soon as I finish this monitor [00:27] kirkland, ok :). I'll hack on TestDrive after this.. I';m finally gonna improve the use experience with VirtualBox [00:31] SpamapS, no sensors.cfg in /etc/nagios-plugins/config/ after installing nagios-plugins-extra [00:37] andreserl: sounds like a plan [00:42] kirkland, done! Just pushed todays changes. WoL Monitor and Console Monitor are added, supported, but not yet enabled in the config file === zul_ is now known as zul [01:00] is there a benchmark tool to figure out how many users my FreeRADIUS server can support? [01:04] jeeves_moss: not that I know of. [01:04] I don't think radius itself is a very resource-intensive protocol [01:05] What are your auth nodes? modems? [01:05] twb, it'll be an auth/payment server for hotspots. the auth nodes are MikroTik routers. [01:07] twb, the routers are doing the splash page serving, etc. the server is just the RADIUS box with a LAMP system on it [01:07] You don't need LAMP for RADIUS AFAIK [01:07] lamp could make pulling reports from radius easier :) [01:08] assuming he is using mysql backend for radius [01:08] If you say so [01:08] LAMP is to be used for the SugarCRM, and payment systems. [01:09] it's a dual PIII 1Ghz Xenon system, dual 36.6Gb 10K SCSI 320 drives (raid 1), and 2.5Gb of RAM [01:10] so probably 1000/s [01:11] patdk-lap: depends how broken the LAMP load is :P [01:11] heh, it all comes down to the drives :) [01:11] we're just looking to support ~2,000 users under peak load. We'll be paying attention to it, so if the load gets bigger, we'll put a bigger box in. right now, we can only afford a 1U space [01:12] 2,000 users isn't the issue [01:12] patdk-lap, they're 10K, 36.6Gb Ultra320 drives. [01:12] how aften your users change, does [01:12] radius won't give a shit about your drives [01:12] if they get botlenecked, I'll either put in 15K drives [01:12] twb, writing logging info [01:12] patdk-lap: meh [01:12] recording logins, bandwidth usage, logouts, .... [01:13] I use all that info for my radius setup, great for vpn usage tracking :) [01:13] patdk-lap: if it can't do that on any old PATA drive, it's badly written [01:13] so, it should be stable enough for some serious user load? (keep in mind, all of the login splash screens are served locally from the router/APs) [01:13] jeeves, the radius part will be fine, it can easily do 300-500 LOGIN's per second [01:13] it's the sugarcrm that could be slow [01:14] mainly cause of php, and slow cpu's [01:14] atleast I assume sugarcrm is php, dunno :) [01:16] sugar will ONLY be used by admin staff to update contact info, bill tracking, etc. the public will have NO access to it [01:17] then you should be fine [01:17] as long as you tune the backend for radius, reasonably [01:17] the only dynamic data I can see being used is if a user checks their account standing (usage, billing, etc) [01:17] the more info you get in it, the more the tuning will matter, or purging old info [01:18] true. [01:18] I'm look @ mid range 64bit servers with quad drives, and I think after we can afford it, we'll move to a "beast" to handle everything [01:19] I just don't want to get into a situation where it chokes [01:19] I just don't want to get into a situation where it chokes [01:19] intel motherboard? [01:20] I'm trying to throw as much "hardware" @ the problem as I can that we can afford right now so the programmers can have a little bit of time to tune it. We're close to going live with it. [01:20] yes, it's an IBM x330 [01:21] oh, it's like a little verson of my p3 systems [01:22] lol. [01:22] yea. [01:22] I only paied $20 for it [01:22] so, the price was right [01:22] 7k for mine [01:23] but that was 12years ago? or so [01:24] yea. well, I'm thinking that if she'll support what I need for now, then we'll be good [01:26] whoa, that motherboard doesn't use solid caps? [01:27] I would inspect it carefully, and make sure all the tops of the caps are flat, and none are pushing up [01:29] went over it with a mag glass. [01:29] (my background is electronic repair and engineering) [01:29] this one was the top pic out of a stack of ~12 [01:29] I have a stack of reject computers [01:29] replaced anywhere from 6 to 30 caps in each [01:30] all work fine now [01:30] all of them support wol too [01:30] so I use them to lab different things, all remote power on/off [01:31] cool. [01:32] I think one of the "scrap" servers has a IBM monitor card in it, so if there is a problem, it'll scream [01:33] i'll be worth the second IP untill I can get a better box [01:37] well, as I said, my biggest concern is to get the thing as stable as possible so the programmers can do their thing. [01:37] has anyone got the IBM RAID monitor to work on a CLI only server? [01:40] has anyone got the IBM RAID monitor to work on a CLI only server? [01:41] what kind of raid card is it? [01:41] I think it's the ServeRAID 3L [01:41] adaptec or megaraid? [01:41] I dunno ibm's naming [01:42] I followed the googled "howto", and it looks like it installs, the service is there, but I can't connect to it remotley from a windows box to admin it (ie. to set up e-mail alerts, fix defunc drives, etc). It's the Adaptec [01:42] that looks odd [01:42] know what kind of adaptec? [01:43] I would assume the old raidtool one [01:43] there is a tool that comes on the IBM ServeRAID setup disk [01:43] dpt-i2o-raidutils [01:43] that would be my guess [01:43] http://ubuntuforums.org/showthread.php?t=597256 [01:44] that page is all about sata, nothing at all to do with scsi [01:46] frack. one sec. brb [01:46] if i dont to use kvm for virtualization whats the next best option vmware? [01:47] first, that is a pointless question [01:47] you need to know what you want out of it [01:48] im looking to run another os [01:48] i want to run an asterisk server [01:49] I dunno about put asterisk in a vm as been very good [01:49] cause vm's screw with timing, ans asterisk is time sensitive [01:53] patdk-lap: ah... is there a "better" option or will i need to get another machine running [01:53] dunno, depending on what all you have asterisk doing, it might not matter [01:53] but if it's handling audio, it will [01:54] but then, that will also greatly be affected by whatelse the box is doing (or not doing) [01:55] ive got it running in virtualbox now, but virtualbox seems to get out of hand [01:56] patdk-lap, ok, I found the link. http://art.ubuntuforums.org/showthread.php?t=597256 [01:57] that is the same link [01:57] crap. grrr [01:58] patdk-lap, http://www.allquests.com/question/1801099/Monitoring-utility-for-IBM-ServeRAID.html [02:00] heh, same deal again :) [02:01] ugh [02:01] except for the guy asking about the x330 :) [02:01] yep [02:01] but all that info is for sata version [02:01] I dunno anything about the ibm rebrands [02:01] basically, I need to know how to use the control software so it will mark a replaced drive as good ans start the rebuild [02:02] I have a bunch of adaptec cards, and just manage them using one of two utilities, depending on if it's i2o based or not [02:03] hummmm, how can I found out, and what 2 utilities? my biggest issue is that I had one of the 36.6Gb drives in the mirror fail. so, I replaced it, and now the dumb card won't rebuild the set. And I'd like to set up auto mailing so it'll scream if something happens [02:05] patdk-lap, what programs do you use? [02:09] dpt-i2o-raidutils [02:09] I can't find the other one, but I haven't ever managed the newer one in linux before (aac based) [02:10] ahhh, well, I'm going to try to figure out what's going on with the IBM branded one first. [02:19] hello people [02:20] what kind of requirements would server need to run wordpress, phpbb and website [02:21] 200mhz? 128megs ram? a serial port [02:22] i got ubuntu on virtual [02:22] from system 3.2ghz single core 64bit , 1gb ram , and 40gbs hard drive in raid1 [02:22] thats just for server [02:23] wizardslovak: to run wordpress your computer should be disconnected from the network [02:23] twb, why ? [02:23] wizardslovak: because wordpress has a shitty security record [02:23] ohhh [02:24] twb, so whats good blogging software? [02:24] patdk-lap, it all depends on if he wants it to run well! [02:24] well yea id love it to run well [02:24] wizardslovak: I dunno... ikiwiki? [02:24] i mean it will be for my friends [02:24] run well is relative :) [02:24] wizardslovak: something that has a compile process and the HTTP emits static content [02:24] how much user load? [02:25] wizardslovak, is this a personal one or one you're going to put into production? [02:25] no more then 20-30 ppl [02:25] just personal [02:25] no more then 40 ppl [02:25] well, Asus makes a small embedded board with a 2Ghz atom on it that's smaller than a PSU [02:26] we've got one running as a NAS @ the house [02:26] i got quad machine as home server and on it i got vbox with ubuntu server [02:26] and thats how i run it [02:26] lol, then why are you asking? [02:27] I'm from the world of "broke as a Mo-Fo". [02:27] just curious if i need [02:27] more for it [02:27] lol, naaa [02:27] and now twb made me think twice about wordpress [02:27] yea man. what are you using it for? [02:28] just personal blogging for me and friends about fishing [02:28] i am curious if it will be good idea to run wordpress and phpbb on same server [02:29] what are the specs of your current box? [02:29] Did you know that every year in the past six years, PHP issues accounted for one quarter to one third of ALL security issues? [02:29] http://en.wikipedia.org/wiki/Php#cite_ref-45 [02:29] twb, is there any way i can secure it? [02:29] wizardslovak: don't run it [02:31] wizardslovak, I'll give you an idea. my little Asus board with a single P4 (3Ghz) on it with 1.5Gb RAM (266) runs 10 domains, e-mail, mysql, FTP, and has VMWare server running on it with 2 Windows VMs running [02:31] twb, no other way? [02:31] wizardslovak: IMO no [02:31] Jeepbeats, oh ok , my mainboard is asus [02:32] but thats for ps3 media server ;) [02:32] twb, so why people run it then ? [02:32] wizardslovak: because they don't care about security, or they don't know it's insecure. [02:32] wizardslovak: you might as well as "why do people get computer viruses?" [02:33] twb, so u dont run any php software? [02:34] Jeeves_moss, i tried email but gave it up [02:35] wizardslovak, lol, why? it only hurts once [02:35] Jeeves_moss, yea i couldnt figure out so i left it [02:36] and still i am getting used to apache settings [02:37] wizardslovak, we've all been there @ one point or another, and we still all run to google when we can't figure something out [02:38] well i run first here then to google [02:38] ;) [02:38] and still how many times i read iptables that many times i dont get it [02:38] twb: do you know much about the -virtual kernel package? [02:38] wizardslovak, do it the other way around. you piss fewer people off [02:38] if i can ask what kind of security u use? [02:40] for myself? [02:40] Jeeves_moss, yeap , with those services i am curious what security [02:40] a large guy named Vinny.... [02:41] ohhhh, you meant on my server. it's a Cisco PIX535 [02:42] only the required ports are open, and I VPN in @ 128bit encrypt [02:42] oh ok [02:42] i got ufw [02:42] with 3 ports open [02:42] thats all i need [02:42] RoAkSoAx: still around? [02:43] RoAkSoAx: tcp monitor done [02:43] RoAkSoAx: wol monitor not waking system up, though [02:43] open only as much as you need. and for everything you open, ask yourself, why am I opening them [02:43] one for apache second for ssh [02:43] thats it [02:44] well, do you have root login for SSH dissabled? [02:44] nope [02:44] might want to do that [02:44] good idea [02:44] also, might want to install fail2ban [02:45] whats that? [02:45] and set the failed logins low. [02:45] http://en.wikipedia.org/wiki/Fail2ban [02:45] ok looks good [02:45] then, as you open new ports.... enable the modules in fail2ban. [02:46] ok [02:46] sounds good [02:47] btw [02:47] and look @ the logs to see what's going on from time to time [02:47] if i dissable root login in ssh , [02:47] i wont be able to do maintenance from time to time usind my laptop [02:47] Datz: -virtual is just a .config with no real hardware in it [02:48] That is, with drivers disabled [02:48] wizardslovak, why won't you be able to do maint? [02:48] Datz: it's meant for use in domUs [02:48] well lets say install use apt-get [02:49] what about it? if you can SSH into it, then what's the problem? [02:49] if i loggin into system as user [02:49] i still will be able to use sudo command? [02:50] wizardslovak: Yes. PermitRootLogin: no means you cannot *log* *in* as root over ssh, not that you can't sudo once you log in as a normal user. [02:51] ok thank you [02:51] it makes sure that only a select set of users have root control. [02:51] i am only one user [02:52] and it's a lot harder to guess other non standard user names. Root is the defacto standard super user (hence why it's called root), dissable it, and you've taken an "easy shot" out of a hackers attack [02:52] ok dissabled [02:52] ;) [02:54] good [02:54] fail2ban installed? [02:54] nah getting into it now [02:54] installed [02:55] good. [02:55] now check your firewalls [02:55] http://www.t1shopper.com/tools/port-scan/ [02:57] what range of ports should i scan? [02:57] ops - reboot.. [02:58] got only one responding on port 80 [02:59] and ssh port [03:01] * RoyK wonders why he is at #ubuntu-server when all the people here are noobs [03:05] ok weird [03:06] after i installed fali2ban i cant loggind to my system [03:06] i am gettting no route to host [03:12] ok got it [03:15] lol, see,that was easy [03:17] yea but somehow i lost internet access for my ps3 now [03:23] lol!!! [03:59] hi there, I have a remote server using 10.04, today I update openssh and now I can't access the server, the last error msg I get while trying to start ssh was: "Failed to spawn ssh pre-start process: unable to set oom adjustment: Operation not permitted" any ideas on what may the problem be? [04:00] bcessa: are you running in openvz or xen or lxc? [04:00] bcessa: did you update to a post-.32 kernel? [04:01] yep, openvz, and no, I to update the kernel itself, I also try this but is not working so far https://secure.intovps.com/knowledgebase/16/How-to-Upgrade-from-Ubuntu-910-to-Ubuntu-1004-LTS.html [04:01] bcessa: OK, that's why [04:01] bcessa: your VE doesn't have permission to make ssh processes harder to OOM-kill (oom = out of memory) [04:02] bcessa: go into /etc/init/ssh.conf and comment out the oom line [04:05] ok, I try that but is still not working [04:09] bcessa: then I can't help you [04:09] bcessa: unless you can provide some new information about what's failing now? [04:11] ok, thnx anyway, information like what? I can provide with any details that will help to fix this, the thing is I don't really know what's the problem, I update 2 servers today and the one in AWS is still working without any problems [04:11] bcessa: I don't know [04:12] http://upstart.ubuntu.com/wiki/Debugging ? [04:20] kirkland: cool you mean WOLMonitor or the function within the powernapd daemon? [04:23] ok, thnx anyway, I'll keep looking at this [04:23] RoAkSoAx: hmm, well, i get: [04:23] 2011-01-24_20:44:11 DEBUG - data packet received [04:24] RoAkSoAx: but that does not exit the napping sequence [04:25] kirkland let me see [04:27] kirkland: what config are you using? [04:29] RoAkSoAx: good question ... [04:31] RoAkSoAx: hmm [04:31] RoAkSoAx: when i restart powernap, i get [04:31] 2011-01-24_22:30:42 ERROR - failed to config socket [e=[Errno 98] Address already in use] [04:31] RoAkSoAx: something funny going on [04:32] RoAkSoAx: hmm, cool, it resets the absent time [04:32] RoAkSoAx: while not sleeping [04:32] RoAkSoAx: that's good [04:32] kirkland: uhmmm UDPMonitor should not be 7 or 9 :) [04:33] RoAkSoAx: let's talk about that tomorrow :-) [04:33] RoAkSoAx: i think it should [04:33] RoAkSoAx: and should be set to that by default [04:33] RoAkSoAx: by the config file [04:33] kirkland: that's WOLMonitor(.py) [04:33] RoAkSoAx: and then we can disable the WoL monitor [04:33] RoAkSoAx: maybe, let's chat tomorrow [04:34] kirkland: the UDP monitor will only listen for *any* packet, while the WoLMonitor will compare that the data received matches the Network Interface [04:34] RoAkSoAx: ah, right [04:34] RoAkSoAx: good point [04:35] kirkland: but, yeah, that's still a bug, UDPMonitor shoulod not even try to bind 7 or 9 anyways. Will look it tomorrow [04:35] and yeah, let's review stuff tomorrow ;) [04:35] RoAkSoAx: k [04:35] RoAkSoAx: TCPMonitor is working well [04:35] RoAkSoAx: powernap not sleeping while i have an ssh connection open [04:35] RoAkSoAx: but it's not awaking when a new session comes [04:36] RoAkSoAx: doesn't look like the monitors are running when sleeping [04:36] kirkland: that's cool!! and yeah, will not awake till I rework the event based thingy [04:36] RoAkSoAx: okay, my changes are pushed [04:36] kirkland: they are not just yet. I'm gonna look into that tomorrow though [04:36] RoAkSoAx: cool [04:36] RoAkSoAx: i'm going write LoadMonitor tomorrow [04:37] kirkland: cool :) [04:37] RoAkSoAx: i gotta crash [04:37] RoAkSoAx: g'night [04:38] yeah me too. gnight too ;) [04:42] twb: I see. Should -virtual be used in a virtual machine? [04:43] Datz: -virtual show NOT be used on non-virtual machiens. [04:43] Datz: it doesn't matter if you use a different kernel on a VM [04:44] Ok, well I installed -virtual kernel package for my VM. When I purged other -server kernel packages, I got kernel panic [04:45] Shrug [04:45] seems like -server config was needed for -virtual to funtion [04:45] More likely you fucked up somehow [04:45] ok, just wondering.. [04:45] humm [04:45] Datz: like forgetting to update the bootloader [04:45] update-grub? [04:46] Shrug [04:46] It depends on your VM solution [04:46] VMware.. [04:47] Datz: was this maverick? It's claimed that bug 570542 has resurrected itself. [04:48] Launchpad bug 570542 in linux "linux-image-virtual does not include ahci module, prevents virtualbox from booting an Ubuntu guest" [Medium,Fix released] https://launchpad.net/bugs/570542 [04:48] 10.04 [04:48] interesting though [04:51] if I purge linux-image-2.6.32-27-server I'll get kernel panic: linux-image-2.6.32-27-server [04:53] so.. idk :P [04:54] er [04:54] http://pastebin.com/qHFY4gN8 [04:54] didn't mean to paste package twice === ecelis_ is now known as ecelis === windkids is now known as windAwy [05:51] New bug: #664529 in cloud-init (main) "cloud-init hangs with url error 'Network is unreachable'" [Wishlist,Confirmed] https://launchpad.net/bugs/664529 === Guest72970 is now known as vlad === windAwy is now known as windkids === windkids is now known as windAwy [06:54] Hello all [07:00] does anyone have any preferences for splunk over landscape? or visa-versa? === sresu is now known as sre-su [07:52] hello [07:52] a virtual server is where you run multiple websites or other services out of one box, right? [07:52] that tends to be vhosts or virtual hosts. [07:52] a virtual server tends to refer to virtualization specifically; having entire copies of the OS (or other OSes) running compartmentalized within one physical system [07:52] i see. [07:52] ah. [07:52] what scenario would aperson want to run several OSes on a headless server? [07:52] good question. I just find it nifty. [07:53] well, yes, i do too [07:53] but i read online about KVM [07:53] is that for running virtual servers or virutal hosts? [07:53] I know at work we have vmware hooked up to our UPSes management software, so we can migrate running (virtual) machines from one rack to another if one rack is going down [07:53] it does open up a whole bunch of options that physical machines don't have [07:54] kvm is for virtualization [07:54] virtuzliation of servers or hosts [07:54] heh [07:54] vhosts tend to be specific to server software (eg, the web server, the mailserver, etc) rather than the OS itself [07:55] right. well i'm asking because i have this old HP laptop i yanked out of its happy, dusty retirement [07:55] and its now running ubuntu server [07:55] and i've been playing with web apps and stuff [07:55] i wanted to know if i could have two websites coming out of the same server [07:55] ah; that'd be vhosts [07:56] do you know what web server it's running? (eg, apache, nginx, etc) [07:56] apache [07:57] i really didn't do much research about the options, is that worth looking into ? [07:57] if it's just something you're using at home, or for a small number of people, apache's a pretty sensible default [07:58] the difference between them tends to come into play a lot more when you're serving huge numbers of requests; you're more likely to hit the limitations of your old laptop first [07:59] sounds like apache will do fine then [07:59] does apache have some kind of builtin vhost function? [07:59] it does :) [08:00] https://help.ubuntu.com/8.04/serverguide/C/httpd.html has a small bit on it under 'basic settings', and a link to more docs at apache.org [08:01] is this as simple as telling ender.com to point at my IP address x.x.x.x and then having ender2.com point at x.x.x.x.:8080? [08:01] it can be even easier. the normal way to do it is with name-based hosts [08:02] telling vhost1 to pick up requests on port 80 and vhost2 on port 8080 [08:02] i see [08:02] i will read. thank you. [08:02] see http://httpd.apache.org/docs/2.0/vhosts/examples.html [08:03] the 'servername' lines let you have configuration that's specific to that name [08:04] hm, that's maybe not the best way to explain it, because they're putting them all in one file there [08:05] erm... [08:05] http://www.debian-administration.org/articles/412 is a pretty good crash course (and there's nothing there that isn't equally applicable on ubuntu-server) [08:06] do you know of any good free domain name sites? [08:07] I think dot.tk is the only one that springs to mind as being free. you may find dyndns.com as being more applicable if it's being run from home tho [08:08] they won't give you terribly 'pretty' domains (eg, you're not going to get a dotcom), but you get what you pay for [08:08]