[00:14] quizme, newer versions of applications. that is one [00:32] quizme: unless you need a specific feature in 10.10 I wouldn't upgrade because 10.04 is the long term support version and to me longer support is needed. I don't want to be upgrading my servers to the next version in 6 months time unless I need something specific from that newer version. [00:36] You shouldn't *ever* upgrade unless the new version provides something you need [00:36] Admittedly, that might be upstream security support, because the current version is EOLd :-) === duckydan_ is now known as duckydan [01:46] New bug: #710426 in mysql-5.1 (main) "package mysql-client-5.1 5.1.49-1ubuntu9 failed to install/upgrade: trying to overwrite '/usr/bin/my_print_defaults', which is also in package mysql-server-core-5.1 5.1.49-1ubuntu9" [Undecided,New] https://launchpad.net/bugs/710426 [03:02] New bug: #710439 in mysql-5.1 (main) "package mysql-client-5.1 5.1.49-1ubuntu9 failed to install/upgrade: trying to overwrite '/usr/share/man/man1/my_print_defaults.1.gz', which is also in package mysql-server-core-5.1 5.1.49-1ubuntu9" [Undecided,New] https://launchpad.net/bugs/710439 === windkids is now known as windGone [03:51] hi [03:52] my ubuntu server was hacked with some "floodsend" rootkit, it connected to some irc server [03:52] what can i do to hit back? [03:54] buy a copy of justin beibers new album [03:56] how is that going to help? [03:57] he'll serenade you to sleep, where you can dream about irc? [03:57] it's always worked for me.. [03:58] but sorry, I know you're serious, and I'm clearly drunk. :( [03:58] (almost) [03:58] anybody want to poke around, here is the irc server: 80.68.95.83 [04:03] a|3x: in many countries it is a civil or criminal offense to "hit back" [04:04] You may, however, wish to secure your system better in future, and to help educate others about doing so. [04:04] i meant to take them down [04:04] 15:03 a|3x: in many countries it is a civil or criminal offense to "hit back" [04:06] if their security sucks in this kit i could issue a command to remove the kit from all the infected servers connected to the server, right? [04:07] could be illegal but it would help a lot of people [04:07] I will not help you in such an activity. [04:08] never did ask [05:54] trying to get postfix work with TLS encryption but it seems that there are some problems anywhere :D [05:54] using dovecot-pop3 as pop-server and postfix as smtpd.. [05:57] Orfeous: what kind of problems? [05:58] my client computer seems not to allow me to send or recieve mail now. [05:59] relay access denied... [05:59] im trying to debug the problem with increasing tls debuglevel [06:02] Orfeous: that's for your protection! [06:03] if i try to send a mail i got a mail back telling me that its not relying the domain i sent to [06:04] Orfeous: did you follow the guide from ubuntu.com? [06:04] is it helping a little if i show the postfix main.cf? [06:04] Orfeous: there is really good howto [06:04] yes, i have read many guides and tutorials.. [06:04] the mailserver works if i disable all tls stuff [06:05] and not use tls encryption on my client [06:19] is the ubuntu pureftpd package compiled with --virtualchroot ? [06:28] http://mywiki.wooledge.org/FtpMustDie [06:31] Because that /really/ helps [06:46] I'm trying to globally deny all requests to my server from any IP except for 192.168.0.3. Which file in /etc/apache should be changed to make this happen? [06:47] New bug: #710505 in mysql-5.1 (main) "package mysql-client-5.1 5.1.49-1ubuntu9 failed to install/upgrade: trying to overwrite '/usr/share/man/man1/my_print_defaults.1.gz', which is also in package mysql-server-core-5.1 5.1.49-1ubuntu9" [Undecided,New] https://launchpad.net/bugs/710505 [06:48] mattalexx: Since some requests might not be for web services but for other things, you might do better to use iptables to add packet filtering? [06:48] jmarsden, There are exception (public requests allowed) for some of my virtualhosts [06:49] So that's a no-can-do. [06:53] mattalexx: Then your request should probably have said "web requests" :) Anyway, maybe /etc/apache2/conf.d/security is a sane place to add a global security restriction. [07:17] hi - anybody familiar with setting up a cronjob that will use X to display what it's doing in the terminal whilst it runs? [07:17] ubuntu 10.10 [07:50] palhmbs, not really server territory, but you could simply prefix the job with gnome-terminal [07:51] thanks [07:55] does this look right? -- 54 20 * * * gnome-terminal /home/palhmbs/myscript.sh [07:56] if it's in a user's crontab, yes [07:56] if it's a job in /etc/cron.d, you also need the user to run as [07:59] so cron.d runs system level stuffs? [07:59] as root.... [08:00] no, cron.d takes an additional argument [08:00] * * * * * username job [08:03] it can run jobs as root if you specify that [08:10] ok - so if I create my own file /etc/cron.d/myscript [08:12] where do the crontab -e file go? - is that embedded into a binary somewhere like visudo does? [08:12] I've been using crontab -e mainly [08:12] palhmbs: /var/spool/cron/crontabs/ [08:13] crontab -e calls your $EDITOR environment variable, which defaults to nano I think. [08:13] visudo edits /etc/sudoers [08:13] it also does some sanity checking to help keep you from breaking your sudo config. [08:13] jpds, thank you - I was looking for those :D [08:15] and using env variables in my script like DISPLAY=:0.0 will run a GUI from cron? [08:15] basically I want to be able to show the user what crontab is doing... [08:16] s/crontab/cron/ [08:17] palhmbs: apt-cache show beep ? [08:23] jpds, lol - I think my PC-speaker must be unplugged :D [08:28] I can use quotes in cron can't I? -- root "/usr/local/sbin/myscript.sh" ?? [08:33] yep === oubiwann is now known as oubiwann_ === oubiwann is now known as oubiwann_ === oubiwann is now known as oubiwann_ [09:33] hi there i got the bad idea to install kde4 in my server, somebody know how to unistall in a safe way it? === reisi_ is now known as reisi [09:37] Roxyhart08: take a look at /var/log/dpkg.log and try to extract all the package names that came with kde4 and purge them [09:40] thanks i couldnt find any things with kde in this file [09:44] anyone good with mod_perl? [10:05] anyone here? [10:05] I am looking for help with setting up a private cloud [10:06] is this a job ad? [10:11] adpaolucci: best you start with https://help.ubuntu.com/community/UEC [10:11] Already did [10:11] still reading over it [10:11] adpaolucci: and probably you want to join #ubuntu-cloud [10:11] Thank you TeTeT [10:12] adpaolucci: if you need a training, Canonical offers one: http://www.ubuntu.com/sites/default/files/active/Training%20-%20Deploying%20Ubuntu%20Enterprise%20Cloud%20overview.pdf [10:12] adpaolucci: np [10:13] I would do the training course but its not offered anywhere in the Toronto area up in Canada [10:14] Actually it looks like there is [10:14] Thanks TeTeT [10:15] adpaolucci: it's held virtually over spreed in April again, last class was last week === ogra_ is now known as ogra === ogra is now known as Guest94419 === Guest94419 is now known as ogra_ === floown is now known as pivoine === pivoine is now known as floown [10:57] no matter what I do I cannot seem to get cgi scripts to execute [10:57] the browser just says 'the connection was reset' and there is nothing in the logs! [12:01] New bug: #710604 in mysql-5.1 (main) "package mysql-client-5.1 5.1.49-1ubuntu9 failed to install/upgrade: trying to overwrite '/usr/bin/my_print_defaults', which is also in package mysql-server-core-5.1 5.1.49-1ubuntu9" [Undecided,New] https://launchpad.net/bugs/710604 === ogra_ is now known as ogra [12:12] New bug: #710610 in libpam-ldap (main) "Can't change password" [Undecided,New] https://launchpad.net/bugs/710610 [12:16] New bug: #710611 in mysql-5.1 (main) "package mysql-client-5.1 5.1.49-1ubuntu9 failed to install/upgrade: trying to overwrite '/usr/share/man/man1/my_print_defaults.1.gz', which is also in package mysql-server-core-5.1 5.1.49-1ubuntu9" [Undecided,New] https://launchpad.net/bugs/710611 [12:18] iclebyte-work, which webserver are you using ? [12:21] Apache2 [12:22] I've got it partially working but only via placing the cgi-scripts into /usr/lib/cgi-bin [12:22] which is an okay work around for the moment. [12:22] i'm struggling to install the DBI perl module now [12:33] iclebyte-work, it works in that dir because somewhere in the apache config , most likely in sites-available you have a line that says [12:33] ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/ [12:33] 17 [12:33] 18 AllowOverride None [12:33] 19 Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch [12:33] 20 Order allow,deny [12:33] 21 Allow from all [12:33] 22 [12:33] the Options +ExecCGI is what you where looking for [12:33] i've spotted that it's in the default vhost file [12:34] i am however desperatley struggling to install the perl DBI module via cpan [12:34] where did the certified hardware link go ? This doesn't work anymore : http://webapps.ubuntu.com/certification/list/?category=Server [12:34] it should work with cpan easily , not that I 'm a huge perl fan [12:59] nimrod10, could you take a look at this vhost entry for me? http://scsys.co.uk:8002/85950 [13:01] is the / path mirrored to a path in your filesystem ? [13:02] i don't understand you? [13:02] i assumed it would mean the / of the DocumentRoot ? [13:03] is / supposed to map to a location on your harddrive ? like maybe /var/www ? [13:04] if so try to use the Directory directive instead of Location === oubiwann is now known as oubiwann_ [14:07] New bug: #710672 in mysql-5.1 (main) "package mysql-client-5.1 5.1.49-1ubuntu9 failed to install/upgrade: trying to overwrite '/usr/bin/my_print_defaults', which is also in package mysql-server-core-5.1 5.1.49-1ubuntu9" [Undecided,New] https://launchpad.net/bugs/710672 [14:17] morning all [14:18] Hi all, i want to build a very easy own cloud with 3 vservers [14:18] is this possible [14:19] 1 load balancer, 2 servers with apache/php and mysql [14:19] i have seen that ubuntu-server is offering private cloud [14:19] but i didnt found some prices [14:20] prices for what? [14:20] ubuntu doesn't sell anything, other than support [14:21] <\sh> ubuntu doesn't sell even support...canonical does that [14:21] <\sh> SnApO: what you mean is "Ubuntu UEC" which is on the server cd... [14:21] <\sh> that's meant with "private cloud" you can setup your own eucalyptus cluster for your private cloud [14:24] \sh, i think he means the ubuntu one offers [14:25] which has not much to do with running a OS in a cloud, its just personal cloud space for your data [14:25] <\sh> could be....anyways my hp tech arrived *grmpf* [14:25] i mean the landscape thing [14:26] to manage my private cloud [14:26] ah [14:26] also if ubuntu enterprise cloud is free (its just for myself to test some things in the cloud) [14:27] UEC is free [14:27] SnApO: The software is free, yes. You run it on your own servers. [14:27] SnApO: so it's not like you're getting free resources or anything. [14:27] does it mater if its already a virtual machine? [14:28] because i have 3 vservers for testing [14:28] the vservers are running ubuntu server [14:28] (openvz) [14:28] http://www.canonical.com/enterprise-services/ubuntu-advantage/landscape/cloud-management [14:29] at the bottom you have some contact links [14:29] it shouldnt matter where or how you run your UEC instance as long as it is network connected [14:29] <_UsUrPeR_> gooood morning everyone [14:31] New bug: #710679 in mysql-5.1 (main) "packaged failed to install due to conflict with mysql-server-core" [Undecided,New] https://launchpad.net/bugs/710679 [14:31] <_UsUrPeR_> I have a question pertaining to "screen". I am using the following to start a half-life server in ubuntu 10.04 -- "screen -A -m -d -S tf2 /~/orangebox/srcds_run -game tf -autoupdate -ip -port + map , and I cannot seem to get my screens back by default. [14:33] ogra, i just want to setup a small private cloud, with a management interface (all should be free because its only for testing and i need it more then 30 days). do i need landscape? [14:33] you can indeed manage everything by hand [14:33] using puppet or some such [14:33] <_UsUrPeR_> When I attempt to run "screen -r tf2", I am getting the following error: "Cannot open your terminal '/dev/pts0' - please check. This is because the screen session opened /dev/pts/0 as another user, even though I started screen with the user I am trying to retrieve the screen with [14:43] How do I resolve this? I dont care about installing the JDK. http://pastie.org/1514818 [14:54] Has anybody ever utilized Zentyal on Ubuntu to configure a FreeRadius server? === jdstrand_ is now known as jdstrand [15:28] i have an interface connected to a replicated port from a cisco switch, the interface has no IP however I can see the traffic coming in on eth1 (currently 25gb) - I'm trying to monitor it with softflowd so we can generate netflow data, this worked using a bridge but doesnt seem to work using 1 interface in promiscuous mode, any ideas? [15:29] previously i used 2 interfaces bridged and place the monitoring box 'inline' [15:29] and that worked [15:40] well, what is it mirroring? [15:41] sounds like mirror-port [15:41] :) [15:42] Has anybody ever utilized Zentyal on Ubuntu to configure a FreeRadius server? [15:42] yes it's a mirror port [15:43] I'm just wondering if it's mirroring both tx and rx on the source port [15:43] if it doesn't mirror both, then you are only monitoring half the traffic [15:44] it's mirroring both, i can see the TX and RX levels rising on my interface stats [15:44] heh? [15:44] the tx on the mirror port should be equal to tx+rx on the source port, then [15:45] or maybe your talking of interface statis in software, dunno about that [15:46] anyone here an ace with SQL and regex? [15:49] must everyone ask a question before asking a question? [15:50] Please help, my server is taking 18 seconds to start the download with wget, it keeps "Resolving server..." [15:51] fix your dns :) [15:51] or their dns server [15:52] patdk-wk, what could be wrong with my dns? [15:52] I dunno, but why else would wget talk so long to do a dns lookup? [15:52] what is in your /etc/resolv.conf file? [15:52] and what are you attempting to resolve? [15:53] nameserver 127.0.0.1 [15:53] nameserver 213.186.33.99 [15:53] nameserver 208.67.222.222 [15:53] nameserver 208.67.220.220 [15:53] search ovh.net [15:53] do you have caching nameserver running? [15:53] patdk-wk, wget http://google.com or ANY server takes really long to resolve. [15:53] gobbe, I use bind9 [15:53] nslookup google.com 127.0.0.1 [15:54] ;; connection timed out; no servers could be reached [15:54] then you don't use bind9 for recursive on your box [15:54] Yeah. my bind is wrong.... [15:54] and should fix bind, or remove that line [15:54] patdk-wk, how can i change that? [15:54] change what? [15:54] "use bind9 for recursive" [15:54] man bind? :) [15:54] I dunno [15:55] * patdk-wk wouldn't touch bind with a 10' pole [15:55] patdk-wk, what do you use? [15:55] it's not about what I use [15:56] it's about what you understand, and what works best for the job you put it in [15:56] Fidelix: where do you use bind? [15:56] Fidelix: http://zytrax.com/books/dns/ch7/queries.html#recursion [15:56] gobbe, what do you mean with "where" ? [15:57] Fidelix: well, what is purpose of your bind? [15:57] gobbe, to serve my nameservers (ns1.mysite.com, ns2.mysite.com, etc...) [15:57] Fidelix: ok [15:58] so you might not want to even use localhost as recursive then [15:58] unless you don't trust your other dns servers [15:58] or you really need to use memory on your box for caching dns badly [15:58] patdk-wk, these servers are opendns [15:58] patdk-wk, isn't dns caching good? [15:59] like all things, caching is good and bad [15:59] yes, caching is normally good [15:59] every single server having it's own cache, bad [15:59] expecially when they don't use forwarders [16:00] and the second ns entry is ovh, not opendns [16:00] is there any way to convert PPP to IP ? [16:01] iclebyte-work, that is like saying, can I convert a freezer into an oven [16:01] well, I guess, mor like, convert a box into an oven [16:01] since ppp wraps other things [16:01] A box oven sounds like it would be most effective. [16:02] * patdk-wk was thinking cardboard box :) [16:04] well.. i just want to decapsulate the PPP [16:04] IP is inside it [16:04] patdk-wk: Quite. [16:05] iclebyte-work, wireshark should do it nicely [16:05] I'm trying to monitor a PPP network (adsl clients) using softflowd [16:06] no clue [16:28] how do I mount a file system with ownership to a user.. ? [16:28] mount /path/to/mount ; ls -ld /path/to/mount shows owend by root [16:28] i like it to be owened by a user [16:29] i added uid=1001 in fstab and that did not help [16:30] I get this [16:30] Unrecognized mount option "uid=1001" or missing value [16:31] cant you just change ownership of the /path/to/mount? [16:31] its an existing directory, no? [16:33] axisys: "uid=axisys,gid=axisys" works for me [16:36] compdoc: yes [16:36] compdoc: i changed the ownership to myself and then mounted and root took over [16:36] baggar11: let me try with name [16:37] '!\[color=(#[0-9a-f]{3}|#[0-9a-f]{6}|[a-z\-]+):$uid\](.*?)\[/color:$uid\]!is' matches [color=#FF8000][/color] , how can I make it *also* match [color="#FF8000"][/color] ? [16:38] baggar11: this one did not work for me [16:38] UUID=63333fb5-8457-45dc-9007-90638b8b4ca1 /opt/splunk ext4 uid=splunk 0 1 [16:41] http://pastebin.com/MAQ0pB5J [16:41] so the dir ownership changes after the mount [16:41] baggar11: is your one ext4 fs ? [16:43] does anyone have a box, not in production, on which they could test lucid kvm with 1.5Tb virtio drive? [16:44] I tried using a ("?) but that didn't work [16:44] neither did (\"?) [16:48] axisys: yeah [16:49] baggar11: mount -o uid=splunk /dev/sdc1 /opt/splunk did not work [16:50] baggar11: can you try unmount it and try it mount like this? [16:51] mount -v -t ext4 -o uid=splunk /dev/sdc1 /opt/splunk [16:51] ^ did not work [16:51] axisys: Error: "did" is not a valid command. [16:53] axisys: actually, mine is on a remote cifs share. so I'm throwing username and password along with it [16:53] but gid/uid are standard mount options [16:53] did you try it with gid too? [16:53] mount -v -t ext4 -o uid=splunk,gid=splunk /dev/sdc1 /opt/splunk [16:53] no go ^ [16:54] mount -v -t ext4 -o gid=splunk /dev/sdc1 /opt/splunk [16:54] no go either ^ [16:55] whats the error? [16:55] EXT4-fs (sdc1): Unrecognized mount option "uid=1001" or missing value [16:55] EXT4-fs (sdc1): Unrecognized mount option "gid=1002" or missing value [16:57] axisys: running with sudo? [16:58] baggar11: running as root [17:00] SpamapS: ping? [17:02] RoAkSoAx: pong, just logged in.. wassup [17:02] * SpamapS is seeing wobbly windows whenever he alt-tabs ... gah [17:03] baggar11: I tried with my own account and still failing [17:03] RoAkSoAx: the baby finallly let me sleep [17:04] SpamapS: hehe yeah i was wondering why u weren't online early this time lol!! [17:04] SpamapS: anyuways, where's the cobbler branch with the ubuntu packaging? [17:05] lp:~ubuntu-virt/cobbler/ubuntu [17:06] SpamapS: thanks! [17:06] New bug: #710757 in cobbler (universe) "Reposync dependency and permissions" [Undecided,New] https://launchpad.net/bugs/710757 [17:06] SpamapS: is that were you guys do active development or is it lp:cobbler? [17:07] RoAkSoAx: thats us. lp:cobbler is an auto import of cobbler's git tree [17:07] SpamapS: k cool thanks! [17:08] hrm.. you know.. I think its time to figure out how to get irrsi to stop telling me which windows have had joins/quits ... w/ 50 windows.. its not actually useful [17:09] lol [17:09] SpamapS: -> /ignore -channels #chan1,#chan2,#chan3 * JOINS PARTS QUITS NICKS [17:10] SpamapS: or something like /ignore -channels #chan1,#chan2,#chan3 -regexp -pattern (away|gone|back|playin|weg|wech|returned) * ACTIONS [17:11] I don't want to not see them in the window [17:11] I like seeing them in the window, I don't want to see them in the status bar [17:20] SpamapS: you mean the channel number changing color? or do you see actual notifications? [17:24] the channel number [17:25] hallyn: ^^ [17:28] SpamapS: yeah then lemme know when you figure it out :) [17:31] New bug: #710774 in mysql-5.1 (main) "package mysql-client-5.1 5.1.49-1ubuntu9 failed to install/upgrade: trying to overwrite '/usr/bin/my_print_defaults', which is also in package mysql-server-core-5.1 5.1.49-1ubuntu9" [Undecided,New] https://launchpad.net/bugs/710774 [17:42] How do I make a cron-job that runs every 20 minutes, but only between 10 am and 23 pm? [17:42] easily :) [17:42] did you do a man crontab [17:42] yep, crontab has really good man-page and tons of websites [17:43] tdn: */20 10-23 * * * [17:44] I think thats the right # of stars [17:44] yep [17:44] unless you shove it into a /etc/cron.* folder [17:44] * SpamapS knows that he just ruined the fishing lesson patdk as giving ;) [17:52] SpamapS, thanks. [18:02] hi [18:03] i'm trying to set up dnsmasq as a dhcp server [18:03] what do i need to put in /etc/networks/interfaces? [18:03] nothing? [18:05] well then it's not working [18:05] well what are you attempting to do? [18:05] serve an ip address to another system [18:05] patdk-wk: "set up dnsmasq as a dhcp server" [18:05] but the system itself doesnt even have an ip address on that interface [18:06] cause /etc/network/interfaces normally should have a static ip, if your running dnsmasq on it [18:06] i see. i figured, but none of the tutorials mention it [18:06] pmatulis, ya, confused what computers he was talking about, or only talking about one [18:07] I've setup pptp on server 10.04 and I'm able to connect from home just fine, but I can't access any of the windows shared drives...any ideas ??? [18:07] Where can I find the .ttf or .otf of the font used in the terminal window? [18:09] i need functions in php gd that are not in php5-gd on lucid. does anyone know of a compiled standalone gd library with all (or most) functions built-in, so i don't have to recompile php with gd support on my server? === oubiwann_ is now known as oubiwann [18:20] Hi, Im trying to use tar for my backup right now, but the performance seems to be quite bad. Im trying to tar a quite huge directory (my entire file server), but after a while, things are really slowing down, takes like an hour for 4 gig files. Any ideas? [18:20] disk to disk, not over network btw [18:26] bjaanes: are you using compression? [18:34] hey guys i have ubuntu 10.10 trying to use postfix to send email's anyone delt with the address verification issue [18:42] i'm trying to install a .deb from http://security.ubuntu.com/ubuntu/pool/main/p/php5/ - the latest php5-gd. i want to install it regardless of the fact that it depends on a later version of php5. but dpkg -i downloaded.deb --ignore-depends=php5-common doesn't work [18:42] dpkg: error processing --ignore-depends=php5-common (--install): [18:42] cannot access archive: No such file or directory [18:42] dpkg: dependency problems prevent configuration of php5-gd: [18:42] php5-gd depends on php5-common (= 5.3.3-7ubuntu1); however: [18:43] Version of php5-common on system is 5.3.2-1ubuntu4.7. [18:43] what can i do about this? [18:44] same thing if i --ignore-depends=php5-gd [18:45] got it, i have to pass the --ignore-depends option BEFORE the package. dug. [18:48] sigh, still no ImageAntiAlias() in the latest php5-gd. anybody know how i can get that function without compiling my own php? [19:23] hi [19:24] i have dnsmasq running as dhcp server on eth0 using 192.168.0.1/24 and the same machine is connected to a network where it gets an ip address in 192.168.2.x/24 which has an internet connection. how do i allow clients to connect to the internet throught eth0 [19:26] bug 486128 [19:26] Launchpad bug 486128 in ec2-init "euca2ools on Ubuntu AMIs should default to using API URLs for EC2/S3" [Wishlist,Won't fix] https://launchpad.net/bugs/486128 [19:32] sockPants: out of interest, why don't you just use ISC DHCP? it's very well tested and used by thousands or perhaps millions [19:33] RoyK: well it's only a temporary setup for booting and installing xubuntu to an old machine through pxe, so nothing matters as long as it works. the netboot installer wants to download the installation files from the internet [19:34] sockPants: still, setting up ISC DHCP daemon is done in something like 2-10 minutes [19:34] and it works [19:34] i've never heard of ic [19:34] *it [19:34] apt-get install dhcp3-server [19:34] that [19:35] how does that help me get internet on the client on eth0 through the internet connection on eth1 [19:35] right now i'm just using the built in dhcp server in dnsmasq because it's there [19:35] the two interfaces are on different subnets [19:35] something like '-A POSTROUTING -s 10.0.0.0/22 -o eth0 -j MASQUERADE [19:35] something like 'iptables -A POSTROUTING -s 10.0.0.0/22 -o eth0 -j MASQUERADE' [19:35] -o being the output interface [19:36] and add net.ipv4.ip_forward = 1 [19:36] to /etc/sysctl.conf and run sysctl -p [19:36] done [19:37] perhaps install bind9 if you need a local (caching) dns server - if not, use one on the internet [19:46] Has anybody ever utilized Zentyal on Ubuntu to configure a FreeRadius server? [19:46] !zentyal [19:46] zentyal was formerly known as ebox... [19:46] they changed the name 2 months ago [19:46] ah [19:46] ok [19:46] no, I just use the commandline [19:47] you've set up freeradius? [19:47] yeah [19:47] Is it painful to set up, or am I just over complicating it? [19:47] I am finding that all freeradius guides... suck. I've seen so little documentation that is relevant. Every guide I find is so different to the next, it just confuses me more on what to do. [19:48] any integration with ldap? or just static users/passwords? [19:48] LDAP integration eventually. Right now I'm trying to keep it simple in a small test environment with using local users/passwords. [19:49] I'm using a netgear access point that has radius support, along with Ubuntu 10.04.1 in a VM on VMWare. [19:49] Roasted_: ok [19:49] I have Zentyal (ebox) installed with the RADIUS module. It attempts to validate, but it just loops with validating identity and eventually times out at disconnected. [19:51] RoyK, is there a guide you used that you've had success with, or perhaps some sort of documentation you could point me to? While Zentyal looks promising, I feel lost otherwise. [19:51] Roasted_: to be honest, I didn't setup the system myself, only migrate it to ubuntu, which was rather easy. AFAICS it mostly comes down to the files clients.conf and users [19:51] well, Zentyal directly edits those files when I add users and whatnot. [19:51] I know that because it prompts me, saying these following files will be changed if you submit these changes, etc. [19:53] Roasted_: no offence, but mostly, asking for GUI-based tools in here is rarely much help. Also, radius isn't very much used these days, except those of us with equipment needing it... If you can pastebin some configs, that will help a lot, even though I can't promise I can help [19:54] RoyK, radius isn't used much anymore???? [19:54] I thought radius was the authenticated future of secure wireless? [19:54] for businesses at least. [19:55] Roasted_: for current and past and possibly the near future, but I doubt radius will survive very long [19:55] RoyK, what do you think will be the standard? Regular WPA2-Personal passkeys? [19:56] possibly AD [19:56] active directory? [19:56] seems AD is taking over a lot [19:56] yeah [19:56] as in, microsoft active directory? [19:56] yes [19:56] why am I suddenly in disbelief [19:57] well, I'm not a microsoft fan, just saying what I think [19:57] still, LDAP/kerberos might be better [19:57] that'll be compatible (or at least somewhat) to both unices and AD [19:58] well it's nothing against microsoft in particular, I just find that to be a stretch. [19:58] to rephrase that comment a little, I think perhaps ldap/kerberos might be better than radius [19:58] well [19:59] for right now, this is the project on the table I need to figure out. If it changes in the future, I'm certainly open to adapt accordingly. [19:59] radius is 20 years old, and lacks a few things [19:59] to me radius doesn't seem antiquated, when I consider the type of authentication and hardware authentication it handles. [19:59] If anything it seems very advanced, compared to WPA2 Personal alone. [19:59] especially X.500 compliance [20:00] well, it's way better than WPA personal [20:00] indeed === Kiall is now known as Kiall|AFK [20:01] if it's way better than WPA Personal, then what's the harm in using it? I'm getting the vibe that I'm trying to implement amish technology into our network, but if radius (despite being old) is still the "best" I'm failing to see the issue with integrating it. [20:01] and I personally try to setup an openwrt-based WIFI network at work based on radius, but it seems a PITA, since the RAIUS servers are win2k8r2-based, and the win2k8r2-implementation of radius is behaving rather badly [20:01] yeah [20:02] that's why I'm setting it up on linux, becasue of windows issues with it. [20:02] good afternoon, i'm mirroring dists/lucid, but the installer seems to pull only Packages files from it [20:02] and not the debs from pool/mail .. [20:02] after i preseeded the mirror'd archive [20:02] is this a common problem? [20:03] sparc: pastebin /etc/apt/sources.list or relevant files (/etc/apt/sources.list.d/*) [20:04] hmm ok [20:04]