/srv/irclogs.ubuntu.com/2011/02/07/#ubuntu-server.txt

benlakeanyone know of a channel for mdadm before I rattle off here?01:32
patdk-lapmy mdadm seems to love the /dev/sd* chanels01:33
patdk-lapchannels01:33
=== jfluhmann__ is now known as jfluhmann
uvirtbotNew bug: #714358 in openvpn (main) "update-resolv-conf doesn't support multiple dns search domains" [Undecided,New] https://launchpad.net/bugs/71435802:01
idleman!dlem@n02:36
ballThat was odd.02:37
PiciIndeed.02:38
=== _TechAway_ is now known as _Techie_
fluvvellping07:00
twbIs there *any* reason to use external sftp over internal-sftp?08:44
=== Guest14562 is now known as ogra
zephlitfirst time installation novice user... setting up a LAMP stack. need basic security tips. anyone?09:47
bicranialzephlit: public web server?09:48
zephlityes but trying to learn, not just get it running :D so i wanted to do everything "correctly"09:49
zephlitit will be hosting sites that i previously relied on a web-hosting service to do...09:49
bicranialphysical server or VPS?09:50
zephlitVPS... what would the difference be? (jw)09:50
bicranialwell if it were a local server in your home/office then you'd want it in a DMZ..09:53
zephlitahh i see. i misinterpreted the question... so "in a data center or in home/office" haha09:54
zephlitor physical server or VPS/dedicated09:54
zephlit:P09:54
bicranialsorry, I should've been clearer there...09:55
twbWhy break the habit of a lifetime09:56
bicranialhave you looked for tutorials/howtos?09:56
twbA basic security tip would be: don't run PHP09:57
zephlityeah i have... i've done a few steps already. creating a new user, disabling root for ssh (should i disable root for the OS?), iptables, seprate group for ssh login09:57
zephlittwb: what if I needed php for future applications? are you suggesting an alternative09:57
twb"The National Vulnerability Database maintains a list of vulnerabilities found in computer software. The overall proportion of PHP-related vulnerabilities on the database amounted to: 20% in 2004, 28% in 2005, 43% in 2006, 36% in 2007, 35% in 2008, and 30% in 2009."09:57
twbhttp://en.wikipedia.org/wiki/PHP#Security09:58
zephlitwow haha thats crazy-- but controversial to just say "don't run php"?...09:58
twbNo, controversial is advocating removing .com and all the assholes that are ruining my PERFECTLY GOOD military network09:59
zephlitLOL. kk i'm still in the basics of learning how to SET UP a web server hahaha09:59
zephlitthats a story for another day09:59
zephlitat least for me :P09:59
twbbusybox httpd -p 808010:00
twbDone.  You now have a webserver exporting the current working directory, with your current user's privileges, on port 8080.10:00
zephlitrofl i just googled what busybox was on my webserver... absorbing10:00
twbUnfortunately Ubuntu's always-installed busybox is a bit crippled compare to Debian's :-/10:01
zephlitsee would i be able to set up virtual hosts with that10:01
zephlitlmao i have multiple domains10:02
zephlityou're probably like 'ogm' ... intentionally misspelled.  ahhhhhhhhhh (cry)10:04
zephliti'm just looking to learn... =/ basics, security. ive done a bit of reading before coming here. someone spare me!10:05
bicranialhave a read through a few tutorials/guides like: http://www.andrewault.net/2010/05/17/securing-an-ubuntu-server/10:08
zephlitthanks :D10:09
bicranialI'd suggets setting up a test env in a VM on your PC/notebook10:10
twbThere was a good article somewhere by an OpenBSD-type weenie, whose main gist was "applying security updates is dumb... it is better to NOT RUN services you don't need, and pick security-oriented implementations of the services you DO need."10:10
twbzephlit: also #ubuntu-hardened10:11
zephlitic... is hardened about security?10:11
twbYes10:12
twb"hardening" means making a system more secure10:12
zephlitlol10:12
zephlitthx10:12
zephliti'm liking UFW because the readings i've had on iptables meant going back and reading them a few more times... lol10:16
twbTalk to #netfilter about it10:17
twbMost iptables documentation is utter crap10:17
twbufw is reasonably sensible, as long as you just need to whitelist/blacklist a few addresses/ports10:17
zephlit:D you're so rebellious against ... everything. its fun to hear10:18
twbI'm a grumpy old man10:18
zephlitha. i wanna be like you one day10:18
zephlitoops... locked myself out of my VPS. time to access the out-of-band console -.-10:20
zephlitout of the SSH*10:20
zephlitquestion : is read-only determined by chmod parameters or something else?10:23
twbbicranial: that URL advocates "nmap localhost", which is obviously flaky.  It'd be better to test from an endpoint outside the local network.  I'd also do SSH rate limiting and port scan detection directly in netfilter, but that's just me.  Other than that, a reasonable article.10:23
twbzephlit: that depends.10:23
zephliton?10:23
twbzephlit: on a default Ubuntu 10.04 server, it'll be governed by POSIX DACs (what you call "chmod"), and by apparmor for specific services (e.g. squid).10:24
twbApparmor being an LSM MAC.10:24
twbhttp://en.wikipedia.org/wiki/Discretionary_access_control, http://en.wikipedia.org/wiki/Mandatory_access_control10:24
zephlitnmap localhost... ill ignore that part then10:24
bicranialtwb: agreed10:27
zephlitokay so it was MAC is be dealin withs' :/10:28
zephliti's*10:28
twbUnlikely10:28
twbBut if so, there'll be a report in /var/log/klog with the string "audit"10:29
zephlitnope nvm :/ gonna go sleep. thx for the help twb -- i like the in depth-ness a lot :D10:31
=== FkCek is now known as FkCek|a
markitoxshello11:01
markitoxsi was wondering for a recommendation in doing HOT backups, without LVM, is it possible?11:02
RoyKmarkitoxs: what do you mean hot backup?11:26
patdk-laproyk, a backup where you don't shutdown the fs11:27
patdk-lapwhere everything is still running live on the system, while you back it up11:28
RoyKAnyone here using NIS? We're seeing wierd problem across a set of servers/workstations: Accessing files works well, but setting file rights, as with chgrp somegroup somefile, does _not_ work, even if the user is member of that group11:28
RoyKpatdk-lap, markitoxs: that should work well for most systems, except perhaps databases11:28
RoyKdatabase files shouldn't be backed up directly on most DBs11:29
RoyKmake a dump, then backup that11:29
andreasfmarkitoxs: R1Soft CDP is a nice (commercial) solution.11:29
patdk-laproyk, running nscd?11:30
markitoxssorry guys, was away from the screen11:30
markitoxsyeah, i have only found R1Soft, that seems quite good11:30
markitoxsi wish there was a simple way to migrate to LVM11:30
andreasfmarkitoxs: It has an addon for hot MySQL backups.11:30
RoyKpatdk-lap: nope - at least not on those I have installed11:30
RoyKmarkitoxs: just create a dump and back that up11:31
RoyKfor ordinary files, hot backup shouldn't be a problem11:31
RoyKit's not like M$ where files are locked11:31
markitoxswell, its an asterisk server11:32
RoyKthat shouldn't be a problem either11:32
RoyKasterisk is only text files11:32
patdk-lapthat would be even simpler11:32
RoyKplus perhaps a database11:32
patdk-lapand voice recordings :)11:32
markitoxsso, we have backups at the moment, dumping the whole FS11:32
RoyKyeah11:32
markitoxsinto a tar.gz file11:32
markitoxsbut seems there could be room for improvement11:32
RoyKmarkitoxs: why don't you use something like bacula?11:32
RoyKmarkitoxs: if you have a database in the asterisk setup, make a cron job to dump that with mysqldump/pg_dump and then back that up11:33
RoyKandreasf: should nscd help?11:34
markitoxsIm more interested in mirroring the system11:35
=== _Techie_ is now known as _TechAway_
markitoxsI have a DB replication setup11:35
patdk-lapmarkitoxs, well, use rsync11:35
markitoxsi just wanna know what your opinion is on that11:36
patdk-lapdon't use rsync on the database11:36
markitoxsoh yeah, learned that the hard way11:36
markitoxsBacula looks really good, btw11:37
markitoxsandreasf, did you say there is a plugin for MySQL for R1Soft CDP?11:38
andreasfmarkitoxs: Yes, it's nice. I used it for backup of a several hundred GB large DB for a large community.11:39
RoyKhttp://pastebin.com/kYPS0N0D <-- file rights look good, but chmod doesn't work11:42
RoyKany ideas?11:42
RoyKhttp://karlsbakk.net/nfs-probs.pcap11:43
patdk-lapheh? ls -ld .12:02
sorenRoyK: You are chgrp'ing, not chmod'ing.12:04
patdk-lapchmod?12:06
sorenchmod!12:07
RoyKsoren: yes, sorry, that's the problem12:07
sorenSorry, what's the question?12:07
RoyKchgrp should work12:07
sorenWhy?12:07
patdk-lapI don't get the why chmod :)12:07
sorenpatdk-lap: BEcause that's what he asked about.12:07
sorenpatdk-lap: 11:42 < RoyK> http://pastebin.com/kYPS0N0D <-- file rights look good, but chmod doesn't work12:07
RoyKpatdk-lap: chmod works, chgrp doesn't12:07
sorenRoyK: It's not expected to.12:07
RoyKsoren: it certainly is12:08
patdk-lapoh heh :)12:08
patdk-lapI didn't even notice anything after the url12:08
RoyKsoren: it works locally, but not if the filesystem is mounted over nfs12:08
sorenRoyK: orly?12:08
RoyKso long that the user is member of the target group, chown should work12:08
RoyKsoren: yes, really12:08
RoyKchown/chgrp12:08
RoyKchown :newgroup / chgrp newgroup12:09
* soren stares at the code again..12:09
RoyKsec - I'll pastebin another example12:09
sorenRoyK: Oh, right. I see it now.12:10
sorenI misread a && for a !!.12:10
sorenErr..12:10
sorenheh.12:10
sorenFor a ||, of course.12:10
RoyKhttp://pastebin.com/MAz02dmd12:11
RoyKthat shows local test and test over nfs12:11
sorenI'm not sure how that's meant to work over nfs, really.12:16
sorenGroup membership is a process attribute.12:16
uvirtbotNew bug: #714542 in net-snmp (main) "prTable reports running processes as NOT running on Ubuntu 8.04 LTS" [Undecided,New] https://launchpad.net/bugs/71454212:16
soren..and since the process trying to do the chgrp is on another host, it obviously can't check whether the group membership is valid.12:16
sorenRoyK: ^12:17
sorenRoyK: Which nfs version is this?12:19
RoyKsoren: 312:53
sorenRoyK: :(12:56
RoyKsoren: seems local groups (defined in /etc/group) works, but that's about it12:58
lieuwei'm trying to set a mailserver up on my server, but for some reason when mailing something to it, i get a "delivery delayed" message the next day, and a "delivery failed" message the day after that, what gives?12:58
patdk-wklieuwe, what gives? your lack of stating the problem :) logs?13:16
lieuwepatdk-wk: lol, http://codepad.org/R42mWHep13:17
patdk-wklooks pretty self explanitory to me: No route to host13:17
lieuwepatdk-wk: that doesnt mean anything to me tho, first time i'm setting a mailserver up.13:18
patdk-wkthat has nothing to do with mailservers13:18
patdk-wkit's an ip thing13:18
patdk-wkit looks like your attempting to run a mailserver at home13:19
patdk-wkand most isp's don't allow that13:19
patdk-wktherefor it doesn't work13:19
lieuwepatdk-wk: where could i check if my isp allows it?13:19
lieuwe(it's pretty lax with other stuff)13:20
greppyis 82.161.50.114 your current IP?13:20
lieuwegreppy: yeahs13:20
lieuwegreppy: static ip :-313:21
sorenRoyK: You're using the nfs3 server in the kernel, right?13:21
RoyKsoren: yes13:22
greppylieuwe: I think they are blocking inbound port 25, I can hit port 110, get dovecot response, but 25 gets no route to host.13:22
sorenRoyK: And you say it works for groups in /etc/group?13:22
RoyKsoren: yes13:22
sorenRoyK: On the server, you mean?13:22
sorenAh..13:22
patdk-wkya, but I'm getting a tcp reject13:23
sorenHmm..13:23
lieuwegreppy: lemme check mah firewall13:23
patdk-wkshouldn't that mean he isn't running a mailserver on his system13:23
RoyKsoren: writing a test program now...13:23
patdk-wkcause a firewall and stuff should do icmp rejects, not tcp13:23
greppypatdk-wk: could be stopped at the router.13:23
lieuwegreppy: lol, my port 25 is indeed closed, lemme try and open it up13:24
sorenRoyK: As far as I can see, only nfs4 makes any attempt at transfering group info.13:24
lieuwegreppy: could you try port 25 again?13:24
sorenRoyK: So for nfs versions lower than 4, it looks like only the current fsgid applies.13:24
greppylieuwe: that works :)13:24
sorenRoyK: I have a bit of a hard time following the code in some places, though.13:25
RoyKsoren: that sucks, but it makes somewhat sense to what I see13:25
lieuwegreppy: okay, then that probably was the problem13:25
sorenRoyK: nfs4 fixes a *lot* of these problems.13:25
patdk-wkconnection refused, now it's a firewall issue :)13:25
* patdk-wk loves getting refused13:26
patdk-wkreminds me of all the women13:26
lieuwenow it gives "Relay access denied", wtf did i do wrong this time?13:29
greppylieuwe: that's a postfix configuration issue.13:30
lieuwegreppy: well, fck13:31
lieuwegreppy: what config should i be looking at?13:31
greppyyou just want it answering for dikzak.dyndns.org?13:31
greppycan you paste the contents of your /etc/postfix/main.cf?13:32
lieuwegreppy: http://pastebin.com/qxd4bhbC13:34
greppylieuwe: mydestination = server.fritz.box, localhost.fritz.box, localhost13:35
greppythat's why, you need to put the hostname you want to recieve mail for there.13:35
lieuwegreppy: got it working now, thanks.13:40
RoyKsoren: that doesn't make sense - I can chgrp from root with no_root_squash - or will that bypass checking the GID?13:49
RoyKsoren: forget it...13:50
RoyKsoren: still, if the groups weren't sent, why can I change a file, but not it's group?13:53
sorenRoyK: "change a file" means what?13:58
RoyKecho wtf >> somefile13:58
sorenSo the contents?13:58
RoyKyes13:58
sorenDifferent types of checks.13:58
RoyKright - I can't chmod the file even if the group I'm in has rw13:58
RoyKthat is, not the primary group, one of the others13:59
sorenThe check for whether you can change ownership is quite a bit more complex than the one that checks if you can change the contents of the file.13:59
sorenThe logic is completely different.14:00
sorenYou can't chown at all if you're not root, for instance.14:00
sorenWell, you need to have CAP_CHOWN, relly.14:01
sorenreally.14:01
RoyKsoren: seems to be a linux problem on the client, really14:01
RoyKit works from a solaris client14:01
sorenSame uid/gid?14:02
RoyKyes14:02
RoyKsoren: same NIS domain14:02
sorenWow. NIS?14:02
RoyKI said that initially14:02
* soren checks his calender14:03
RoyKit takes some time to convert a truckload of servers/clients to something else14:03
RoyKand there's a lot of things more pressing than that...14:03
sorenIt's been a few years since NIS went out of style, to be honest :)14:03
RoyKwell, it's still a package14:04
uvirtbotNew bug: #438072 in exim4 (main) "package exim4-config 4.69-9ubuntu1 failed to install/upgrade: subproces post-installation script gaf een foutwaarde 2 terug" [Undecided,Won't fix] https://launchpad.net/bugs/43807214:04
sorenRoyK: We also have a gopher server in the archive... :)14:04
RoyKsoren: now, _that_ is ancient :)14:05
sorenRoyK: Just saying that being packaged doesn't say much about the technology's currency. :)14:05
lieuwei'm setting up my mailserver, but on receiving mail i get "mail_location not set and autodetection failed" from dovecot.14:06
=== oubiwann is now known as oubiwann_
uvirtbotNew bug: #333257 in exim4 (main) "Exim hangs on delivering mail, lack of entropy for TLS" [Low,Opinion] https://launchpad.net/bugs/33325714:11
uvirtbotNew bug: #480927 in exim4 (main) "karmic upgrade resurrected exim4 daemon" [Low,Incomplete] https://launchpad.net/bugs/48092714:11
uvirtbotNew bug: #638810 in exim4 (main) "exim4 config does not honour /etc/mailhelo" [Low,Incomplete] https://launchpad.net/bugs/63881014:24
=== jkakar_ is now known as jkakar
* soren has never heard of /etc/mailhelo14:28
patdk-wkmaybe he means /etc/mailhost14:29
patdk-wkoh, /etc/mailname is what I'm thinking of14:31
sorenScottK: Have you hear of /etc/mailhelo? (re bug 638810)14:36
uvirtbotLaunchpad bug 638810 in exim4 "exim4 config does not honour /etc/mailhelo" [Low,Incomplete] https://launchpad.net/bugs/63881014:36
soren*heard14:36
zuldannf: ping when you are around14:47
acidflashis is possible to mount 1 "folder" on several hdd's ?14:57
compdocI suppose you could have a folder on each drive and sync them15:00
acidflashcompdoc: how do i do that?15:01
compdocwell, rsync could do that, and be run from cron, or whatever service15:02
patdk-wkhmm, what is the definition of *mount one folder*15:03
patdk-wkrsync just makes a copy of one folder on several drives15:04
patdk-wkthe mount bind command actually mounts one drive in many places15:04
patdk-wksimpler than rsync would just be symlink15:04
acidflashpatdk-wk: what i want to do is the following, i have a HD which I would like to serve files from, and I will be caching thing on this folder, I have about 4 x 1TB HD and 1 x 1.5TB HD15:04
acidflashI want all those disks to cache in "one folder"15:04
acidflashthat I will tell my web server that your root dir is this folder15:04
acidflashi know that i can use raid15:04
acidflashbut I want to know if there is an easier way15:05
patdk-wkoh, so you want all the *files* in the one directory to be split over all the drives15:05
patdk-wkraid is the easy, and is the only way that will give you any real performance increase15:05
resnoacidflash: greyhole15:05
patdk-wkother ways would be lvm15:05
acidflashpat: yes15:05
resnocheck out greyhole15:06
acidflashresno: ok I will read about it!15:06
resnoi dont use it, but ive read about it. and it seems to match your needs15:06
resnoa friend uses it and hasnt had any problems15:06
acidflashyeah almost exactly15:07
smoserDaviey, had you seen bug 61544215:34
uvirtbotLaunchpad bug 615442 in eucalyptus "euca-describe-users fails with ImportError: No module named euca_admin.users" [High,Confirmed] https://launchpad.net/bugs/61544215:34
Davieysmoser, yeah...15:35
Davieysmoser, it was left with upstream making a change to their setup.py of their python module...15:36
smoserupstream who?15:36
Davieysmoser, there really needs to be a new binary package...15:36
Davieysmoser, euca.15:37
smoserthere is no setup.py for eucalyptus15:37
Davieysmoser, exactly.15:37
smoserwell, thats more than "a change" :)15:37
smoserso anyway, that really should be fixed.15:38
Davieyintroducing new files = change :)15:38
Davieysmoser, i really don't think it'll get fixed for maverick15:38
Davieynatty.. yes15:38
smoserwell, it should be fixed for natty, and then, i can't imagine the fix is intrusive15:38
smoserso it wouldn't be bad to get it back, but natty first.15:38
Davieysmoser, if the issue was in lucid.. i'd agree... but SRUing Maverick for that seems non-essential15:39
Davieysmoser, it would be nicer to find out why euca is FTBFS'ing in natty first :)15:40
smoseri didn't know that.15:40
smoseragreed.15:40
Davieyannnnndd...... dhcpd is broken aswell15:41
Davieyall in... it's a mess :)15:41
smoserso you've got some work to do then, my friend.15:42
smoser:)~15:42
uvirtbotNew bug: #714667 in libvirt (main) "Upstream to 0.8.7 for natty" [Undecided,New] https://launchpad.net/bugs/71466716:02
zul^^^ yes please :)16:05
uvirtbotzul: Error: "^^" is not a valid command.16:05
* SpamapS stretches16:36
RoAkSoAxSpamapS: /win 616:52
RoAkSoAxarrgh16:52
RoAkSoAxSpamapS: morning btw :P16:52
SpamapSRoAkSoAx: hah good morning :)16:54
RoAkSoAxSpamapS: btw.. do you know of any USB to VGA adapter to be able to connect another external Monitor?16:57
genii-aroundRoAkSoAx: I have one from StarTech that works under 8.0417:01
uvirtbotNew bug: #714702 in etckeeper (main) "Please merge etckeeper 0.52 (main) from Debian unstable (main)" [Wishlist,Confirmed] https://launchpad.net/bugs/71470217:02
SpamapSRoAkSoAx: no I'm an apple fanboi when it comes to hadware. ;)17:02
SpamapShardware too :)17:02
RoAkSoAxgenii-around: yeah I was looking at that one and seems to work well with Ubuntu17:02
RoAkSoAxSpamapS: yeah but I IIRC you mentioned something about one in Dallas...17:03
cocoa117is ubuntu-virt channel died?17:04
cocoa117should we all move over to ubuntu-server?17:04
SpamapSRoAkSoAx: no, the one I mentioned in Dallas is mini-DVI to DVI17:04
RoAkSoAxSpamapS:besides that, I think you mentioned that you saw someone... but anyawys, I can be mistaken :P17:05
SpamapSRoAkSoAx: quite possible.. I talk way too much17:08
=== SquishyNotHere is now known as squishy
RoAkSoAxlol17:08
=== skaet is now known as skaet_afk
ZacLnxNewbhi17:51
SpamapSZacLnxNewb: hi!17:55
ZacLnxNewbSpamapS: I'm looking for advice >.>17:55
ZacLnxNewbSpamapS:  I'm attempting to make an online store using mysql and php17:57
ZacLnxNewbSpamapS: However I have no experience doing this, and would like to know what to watch out for17:57
ZacLnxNewbSpamapS: I have little experience with mysql, I can handle php.17:58
RoyKZacLnxNewb: look for systems already made - it'll probably save you a lot of headache18:00
zuldannf: ping18:01
ZacLnxNewbRoyK: aye, that's no challenge. :p18:01
dannfzul: hey18:01
RoyKZacLnxNewb: no, but it'll save you a lot of work, and building online stores means you need to know a few things about PHP security18:02
zuldannf: i had a look at your multipath branch if you can clean that up a bit i will be happy to upload it for you18:02
ZacLnxNewbRoyK:  I'm sure I could do it, using php to interface with mysql for inventory and user logins.18:02
RoyKZacLnxNewb: sure, but an online store will be open to the internet - what do you do to prevent SQL injection? cross-site scripting?18:03
SpamapSZacLnxNewb: there's your advice. :)18:03
RoyKif you know these things, sure, but if you don't, it may be rather expensive to try yourself18:03
SpamapSZacLnxNewb: if you use a framework.. (in the right way) then you'll be better off too. I like Symfony and Zend.18:03
ZacLnxNewbRoyK:  how does sql injection work?18:04
RoyKlol18:04
RoyKhttp://xkcd.com/327/18:05
RoyKZacLnxNewb: ^ That's a good example18:06
RoyKthere are other less trivial examples, though18:06
ZacLnxNewbRoyK: I learned to watch out for that when I made comment scripts in the past.  Caught people inserting css code to add effects.18:06
ZacLnxNewbRoyK:  It's easy enough to strip all input of all un-needed characters, or store the characters in a nonthreatening form.18:07
RoyKZacLnxNewb: just use something that's proven to work - otherwise you'll spend three times the time, or more, and probably end up with something far less usable18:08
RoyKZacLnxNewb: there's a good reason there's only one linux kernel tree :P18:08
ZacLnxNewbRoyK:  how lazy. :p  using such short cuts18:09
RoyKZacLnxNewb: not really - just use a platform that works and add to that18:09
ZacLnxNewbRoyK:  apart from mysql injection and restricted access to php files, what else should I watch for?18:09
ZacLnxNewbRoyK:  I will take your suggestion, but I do want to know how it works18:10
RoyKcross site scripting can be quite bad18:10
RoyKlook it up18:10
SpamapSZacLnxNewb: if thats lazy, then so is using Ubuntu. You should be using LinuxFromScratch.18:12
RoyKZacLnxNewb: also, I really do understand that you want to write it from scratch, most newbies want that, just to do it, but with the current frameworks available, it's not really a good idea. It might have been a good idea ten years ago, but not really now18:12
ZacLnxNewbRoyK: SpamapS  Cross site scripting would involve cookies and client side storage, I was planning on doing everything server-side18:13
ZacLnxNewbRoyK: With very limited user input18:13
RoyKZacLnxNewb: I've just been in this game for 15 years - I'm only trying to give you some simple advice - but do as you please...18:14
ZacLnxNewbRoyK:  Oh, I'm listening, honestly, and I will take your advice, but I keep on because I want to know how it all works. :p18:14
RoyKI built a netshop in perl some 13 years ago, and beleive me, it was a very good thing we didn't accept credit cards on that one18:15
ZacLnxNewbRoyK: This store would only use paypal18:15
RoyKZacLnxNewb: you still need a secure API to interface with paypal18:15
RoyKotherwise that can be abused as well18:16
RoyKZacLnxNewb: http://www.dvwa.co.uk/ <-- this is worth a few hours18:19
RoyKZacLnxNewb: http://www.dvwa.co.uk/ <-- this is worth a few hours study, even18:19
ZacLnxNewbRoyK:  what programming languages do you know?18:19
RoyKcurrently, I mostly use php, C, some python, some fortran if I need to help others, C++ at gunpoint, javascript ...18:20
RoyKand perl, of course18:20
RoyKalways perl18:20
genii-aroundHeh, C++ at gunpoint...18:20
ZacLnxNewbRoyK: mwaha, C++ at gunpoint, is it really that bad?18:20
RoyKZacLnxNewb: no, but I like C better :P18:20
RoyKfor web stuff, I use php/javascript with some DB backend18:21
RoyKbut trying to learn more Python18:21
RoyKlooks like a good language for most use, and a little cleaner than perl18:22
RoyKnot that _that_ says a lot, most languages are :P18:22
genii-aroundIs there like a CPAN kind of idea for python?18:23
* RoyK currently doesn't do much coding, more operations, storage etc18:23
RoyKgenii-around: there is, but I can't remember the name of it...18:24
genii-aroundOK, cool18:24
RoyKtry asking on #python18:24
* RoyK hands pennyless a penny18:26
RoyKavis: wb18:26
avisthank you18:27
RoyKdid you get my email?18:27
avisi sure did18:27
avisi have not read it thoroughly though18:27
avisi will be getting comcast on friday so no more port 80 blocked18:27
RoyKah18:28
avisi really do not like at&t at all18:28
avisthank you for extending your help18:28
avisi really do appreciate it18:28
RoyKnp18:28
avishope your doing ok today18:28
avismy anxiety levels are up.  struggled with sleep last night.18:28
RoyKthat's not good...18:29
avisi'm ok now tho18:29
RoyKavis: go for a 1-2 hour walk18:29
RoyKthat helps18:29
avisi think i know how to manage one of my old medications to fix that18:29
=== NG_ is now known as ng_
avis]i'd really needs meds then if i were to do so :)18:29
avisthank you tho18:29
* RoyK has been taking some meds in his time, but there is little that helps better than going for a walk in the woods18:30
avisits very difficult to make a bowl of ramen appear before you without any effort, as simple as it is :)  anyway, i'll be pm topic from now on :)18:30
avisthat sounds pleasant18:31
RoyKhehe18:31
patdk-wk!fetch ramen18:31
avisi was in a car accident, major, caused neurological and physiological damage18:31
avisthanks :)18:31
patdk-wkI want to fetch lunch :918:31
patdk-wk:(18:31
RoyKavis: heh - I've been through a little myself - still, walking is my cure18:31
patdk-wkthe fridge is in the hr office, and they are having a meeting in there right now :(18:32
avisthat sounds very good.  i would not want to be upright for too too long due to my back18:32
RoyKavis: anyway - do you want a redirect before friday?18:32
ZacLnxNewbI somehow managed to burn all of my eggs18:39
greppythat's not that hard, just leave them on the stove too long.18:39
SpamapSZacLnxNewb: btw if you manage to build a web store without cookies and without a horrible user experience.. you should share that with the world.. otherwise.. XSS is always a danger.18:40
RoyKZacLnxNewb: apt-get install dragonegg18:40
ZacLnxNewbSpamapS:  here's my very first webpage effort.  http://beyondsight.sswgn.com/18:44
RoyKgenii-around: pypi should be similar to cpan18:45
ZacLnxNewbSpamapS:  I'm fairly certain I can accomplish intuitive user experiences :p18:48
lifelessSpamapS: zul: what was the conclusion on the right way forward with ssl cache distribution?18:50
ZacLnxNewbLols18:52
ZacLnxNewbhttp://i.imgur.com/em14R.jpg18:52
ZacLnxNewbthat's hilarious18:52
zullifeless: i packaged distcache this weekend it should be sitting in new18:53
zullifeless: waiting for an archive admin to review18:53
SpamapSlifeless: Given that there's no set release date for apache 2.3, I think distcache is the simpler approach.18:53
lifelesszul: SpamapS: wooo! \o/18:53
lifelessthat should be trivially backported to lucid, right ?18:54
zullifeless: yep18:54
* SpamapS wonders why we don't do more official backports for stuff like this18:55
zullifeless: i had nothing better to do this weekend ;)18:55
lifelessis there a ppa you could drop that into as a lucid build? would save some [precious] sysadmin time backporting it to CAT18:55
lifelesszul: I'm extremely happy18:55
zulSpamapS: because we dont have the man power18:55
SpamapSzul: maybe we should make backports take less man power.18:55
lifelessyou guys might like this - http://people.ubuntu.com/~lifeless/showtime.png18:55
lifelessits going to show for devs only18:55
lifelessat least to start with18:55
zulSpamapS: right but it takes man power to make things more automated18:56
zullifeless: cool!18:56
SpamapSlifeless: mmmmm metrics18:56
lifelessindeed18:57
SpamapSI also think PPA's have alleviated any real need for comprehensive backporting18:57
=== skaet_afk is now known as skaet
sidneilifeless, neat. we have something like that for landscape, except the javascript broken because it's not enabled by default.18:57
lifelesssidnei: nice. Thats what we already have in a comment in every page, just shoved up top via js after the page is received18:58
lifelesswe'll probably add browser overlay time etc to it18:58
lifelessbut server side is our -huge- weakness atm18:58
RoyKserver side is whose weakness_18:59
RoyKs/.$/\?/18:59
lifelesslaunchpads18:59
RoyKk18:59
lifelesszul: so I think this got lost in a burst of chatter - any chance you could upload it to a lucid series in a ppa ?19:00
zullifeless: consider it done19:00
lifelessfantastic! thank you,19:00
lifelesss/,/./19:00
SpamapSlifeless: note that another method of doing this (if, for some reason this doesn't work out) is to use ipvs and have it source-hash schedule connections... http://kb.linuxvirtualserver.org/wiki/Source_Hashing_Scheduling19:03
zullifeless: https://launchpad.net/~zulcss/+archive/distcache-lucid should be there in a couple of hours19:04
lifelesszul: \o/19:05
shadow42085I am getting this error Error opening Private Key smtpd19:07
shadow420851822:error:02001002:system library:fopen:No such file or directory:bss_file.c:356:fopen('smtpd','r')19:07
shadow420851822:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:358:19:07
shadow42085unable to load Private Key19:07
shadow42085any ideads?19:07
shadow42085I am following the help.ubuntu.com/community/Postfix19:08
pmatulisshadow42085: looks like the application (postfix) and the openssl tool disagree on where things are located19:10
shadow42085I maybe missing the saslauthd program19:11
shadow42085so how do I fix this issue19:15
shadow42085my smtpd.key is located at /home/shadow4208519:21
shadow42085is this the right foldler or does it belong somewhere else?19:22
shadow42085nevermind I found the issue19:24
shadow42085I missed the .key after smptd19:25
aheis it possible to make a lvm of a kvm host available to the guest such that the guest can create new logical volumes?19:26
DaBeasthi guys19:27
shadow42085hi19:27
DaBeasti just installed ubuntu server on my laptop, with the mind of creating a torrent seedbox19:28
DaBeastbut, during the installation i accedently selected irda0 as a network device19:28
DaBeastapperently it doesnt recognize eth0, and wlan0 is broken19:28
DaBeastso, how can i fix this?19:29
DaBeastthis is my first linux expierence heh19:33
DaBeastalso, when using a usb wifi dongle, it doesnt show up at ifconfig19:33
RoyKDaBeast: pastebin 'ifconfig -a'19:34
RoyK!pastebin19:34
ubottuFor posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic.19:34
shadow42085I am being asked for a pem pass what is that?19:35
shadow42085pem pass phrase**19:35
DaBeastRoyK: how am i supposed to pastebin it? :p19:36
DaBeasttype it over? its kind of a long list xD19:36
RoyKuse a serial console :)19:36
RoyKDaBeast: what interfaces does ifconfig -a list?19:37
DaBeasteth0, irda0, lo, wifi0,wlan0,wlan119:37
DaBeastmaybe more, its off screen19:37
DaBeastserial console = ssh?19:38
shadow42085DaBeast run Terminal19:38
DaBeastwell, its on my laptop :p19:38
DaBeasti'm entering commands on my laptop, hehe19:39
RoyKDaBeast: if you have eth0, does it have an IP address?19:39
shadow42085just open a Terminal from Accesories19:39
shadow42085the type in ipconfig -a list19:39
RoyKshadow42085: if he was able to run ifconfig -a, he certainly has a terminal open19:39
DaBeastshadow42085: i'm running the server edition of ubuntu :p19:39
DaBeastRoyK: nope, no ip19:40
RoyKDaBeast: have you set a static ip, or are you waiting for a dhcp reply?19:40
RoyKDaBeast: btw, serial console != ssh19:40
RoyKserial console means good-old serial port (perhaps over usb)19:41
DaBeastno idea, at installation it was trying to auto detect dhcp, then i manually tryd to set up a connection (but i selected irda0 lol, there was no eth0)19:41
RoyKDaBeast: edit /etc/network/interfaces19:42
DaBeasti went there, theres only lo and irda0 there19:42
DaBeastwith nano*19:42
RoyKDaBeast: http://pastebin.com/pBdi7CBU19:43
RoyKthat's an example19:43
RoyKtaken from this box19:43
DaBeastwhen i do edit /etc/network/interfaces it says unknown mine-type or something19:45
RoyKdollarbang: never mind that19:45
DaBeastat /etc/network/interfaces i only see the loopback interface and irda019:46
RoyKdollarbang: just add eth0 there19:46
RoyKas from what I pasted19:47
DaBeastah, i see, let me test that19:49
DaBeastwhats this broadcast?19:50
RoyKnever mind that19:50
RoyKit's the network xor netmask IIRC19:50
RoyKas in, if you have 192.168.0.0/24, the broadcast is 192.168.0.25519:50
RoyKor, if you have 192.168.0.0/23, the broadcast is 192.168.1.25519:51
RoyKet cetera19:51
RoyKbut it's not critical19:51
DaBeastk, thanks19:52
uvirtbotNew bug: #704264 in bacula (main) "package bacula-director-mysql 2.4.4-1ubuntu5 failed to install/upgrade: le sous-processus post-installation script a retourné une erreur de sortie d'état 1" [Undecided,Fix released] https://launchpad.net/bugs/70426419:52
DaBeasthmm, when i try to save the file it says unable to write file19:52
DaBeasti guess i should have used sudo nano? :p19:52
RoyKheh - yes19:52
RoyKa normal user can't write to /etc19:53
DaBeastdarn :p19:53
RoyKjust write the file to /tmp19:53
RoyKallowing all users to write to /etc would be - interesting......19:53
maedoxRoyK: You should try it :P19:54
RoyKmaedox: may you live in interesting times :)19:56
maedoxYepp, I'm sure it would bring some interesting startup issues at best. :D19:57
RoAkSoAxzul: symlinks s/win 1120:00
RoAkSoAxarrrggh20:00
RoAkSoAxsorry20:00
RoyKmaedox: http://en.wikipedia.org/wiki/May_you_live_in_interesting_times20:01
DaBeasthmm, seems irda0 stays active even after i restarted it, restarting server20:01
RoyKDaBeast: if it's activated in /etc/network/interfaces, it will20:02
RoyKDaBeast: but do you get online on eth0?20:02
maedoxRoyK: I see. I think we already do.20:02
RoyK:)20:04
DaBeastRoyK: restarted my laptop, yup20:05
DaBeastthanks man!20:05
smoserSpamapS, i would appreciate your input on bug 71480720:06
uvirtbotLaunchpad bug 714807 in cloud-init "install of cloud-init without eth0 will cause boot hang" [Medium,Confirmed] https://launchpad.net/bugs/71480720:06
RoyKDaBeast: np :)20:07
DaBeastwhy was irda0 in there anyways xD who would want to use that as a primary device, rofl20:08
SpamapSsmng20:09
DaBeastRoyK: about this serial console, do i "need" it?20:10
RoyKDaBeast: not really20:10
RoyKDaBeast: you need it if something goes really bad20:11
DaBeasti see20:11
DaBeastthx20:11
DaBeastnow, how do i shut this down safely? xD20:12
SpamapSsmoser: does cloud-init *have* to run before anything other than / is mounted?20:12
DaBeastsudo shutdown 1 gives me some kind of maintenance menu20:13
uvirtbotNew bug: #434076 in cloud-init (main) "if key exists in /root/.ssh/authorized_keys, disable_root setting has no effect" [Low,Won't fix] https://launchpad.net/bugs/43407620:13
=== oubiwann_ is now known as oubiwann
uvirtbotNew bug: #714807 in cloud-init "install of cloud-init without eth0 will cause boot hang" [Medium,Confirmed] https://launchpad.net/bugs/71480720:16
DaBeasti got it, it was halt :p20:18
shadow42085I am trying change postfix to use port 578 instead of port 25 since my blocks port 2520:23
shadow42085ISP**20:23
pmatulisshadow42085: nice20:24
shadow42085I meant to say 58720:29
giovanishadow42085: that's trivial to do -- I presume you mean for postfix to listen on port 587, and not to use that port for outbound SMTP connections for delivery?20:30
RoyKshadow42085: just google for it20:30
shadow42085yea20:30
shadow42085use port 587 for secure submissions20:31
uvirtbotNew bug: #714814 in bind9 (main) "Serious validation errors in Bind 9.7.0" [Undecided,New] https://launchpad.net/bugs/71481420:32
=== Kiall is now known as Kiall|AFK
=== Kiall|AFK is now known as Kiall
shadow42085I can't seam to get telnet to produce the results I need after telnel localhost 587 any ideas o fix it21:01
shadow42085root@ubuntu:/home/shadow42085# telnet localhost 58721:03
shadow42085Trying ::1...21:03
shadow42085Connected to localhost.21:03
shadow42085Escape character is '^]' is all I am getting21:03
guntbertshadow42085: what should listen on 587?21:03
shadow42085postfix21:03
guntbertshadow42085: did you try to talk to it?21:04
shadow42085I added the line 587 inet n - n - - smtpd21:04
shadow42085to /etc/postfix/master.cf21:05
guntbertshadow42085: no, you have to talk smpt with it21:05
shadow42085how do I do that21:05
SpamapSsmoser: commented on that upstart bug21:05
guntbertshadow42085: I'm too tired to teach you smtp, please look it up yourself (googling for smtp telnet  might be helpful)21:06
shadow42085I followed the help.ubuntu.com/community/postfix tutorial21:06
smoserdanke.21:07
b0otI have been trying to get a simple tftp sever running to back up my cisco configs for 4 hours. I have tried tftpd, atftpd, and tftp-hpa with no luck. Any ideas21:10
pmatulisb0ot: tftp-hpa is used a lot in ubuntu21:12
b0otpmatulis, do you have any recent documentation... all of the stuff I found was so outdated the files were different when I went to edit the config21:12
pmatulisb0ot: no, it should be straight forward. maybe look at /etc/default/tftpd-hpa ?21:13
=== ng_ is now known as NG_
RoAkSoAxargghhh21:34
* RoAkSoAx just erased all the work he has done today!! :(21:34
=== airtonix is now known as Guest45340
=== Guest45340 is now known as airtonix
=== FkCek|a is now known as FkCek
ZacLnxNewbRoyK: hey, I wanted to thank you for all of your help.21:44
ZacLnxNewbDoes anyone know anything about server programming in python?21:46
leniosyes21:47
leniosdo you want to know something?21:47
ZacLnxNewblenios:  say I have a large application with up to 2000 simultaneous users, and I need commands/data to be distributed as possible, what would be the best way to handle that?21:50
ZacLnxNewblenios: so far I've come up with using the select comamdn in python, to create read, write, and error lists used to process data21:51
ZacLnxNewblenios: however, having literally thousands of users, would it also be fast enough to use mysql as well, RAM ?21:51
ZacLnxNewblenios:  Because the user data/matrix would get quite large very quickly21:52
leniosyou're handling distribution by hand?21:53
leniosyou can use mysql, and put as much as you can in ram21:54
genii-aroundHm. If you make a ramdisk, them mv stuff into it and then rm the ramdisk, is it faster than recursively rm on say 2Gb of files?21:56
leniosZacLnxNewb, and 2000 simultaneous users is sure big, but it depends what they're doing21:56
RoyKZacLnxNewb: google it21:56
leniosi don't see why mv would be faster than rm21:56
RoyKZacLnxNewb: there's plenty of resources for python out there21:57
ZacLnxNewbRoyK:  :p you sound annoyed.21:58
ZacLnxNewbRoyK:  Also, symfony is giving me trouble because php symfony configure:database is not defined21:58
genii-aroundlenios: Try to mv a dir containing 2Gb of files, then try to rm -rf it :)21:58
RoyKZacLnxNewb: not annoyed - just asking you to google before asking here21:59
patdk-lapgenii-around, that all depends :)21:59
patdk-lap1 2gb file, rm is faster21:59
patdk-lap500 4k files, probably the same21:59
ZacLnxNewbRoyK:  I have thoroughly, and I've created multiple working examples, but speed is questionable.  I don't have the proper hardware to test the speeds.22:00
genii-aroundpatdk-lap: Just that I have video surveillance files which need purging now and then in chunks of up to around 200Gb but to rm-rf is way long. I'm thinking if i ramdisk-rm them in manageable chunks no larger than my actual free ram could be better22:01
patdk-lapall it's doing is caching the inodes22:01
RoyKZacLnxNewb: do as you please22:01
patdk-lapso the rm goes faster22:01
patdk-lapbut it shouldn't make a difference at all22:01
patdk-lapwhat would be better is writing those files with extents22:01
genii-aroundHmm22:02
patdk-lapinstead of lots of random block locations that take rm so long to clean22:02
ZacLnxNewb_RoyK: I'm just worried about being able to handle even 100 users effeciently22:02
ZacLnxNewb_RoyK:  flockdraw.com22:02
RoyKZacLnxNewb_: whn22:03
RoyKerm22:03
RoyKZacLnxNewb_: what sort of application?22:03
ZacLnxNewb_something similar to flockdraw.com22:03
RoyKwell, go on22:04
ZacLnxNewb_RoyK:  I managed to get myself involved with several programmers working on a moderation system and several modified clients.22:05
patdk-lapgenii-around, or you could use xfs, it's fast at deletes22:05
ZacLnxNewb_RoyK: The official project flockdraw.com is pretty much a dead end, and won't be going anywhere22:06
leniosZacLnxNewb_, 100 users shouldn't be a problem22:06
leniosdepends on hardware and how you code it though22:06
ZacLnxNewb_lenios: RoyK  Let's put it this way,  flockdraw.com seems to have open about 1500 rooms at a time, with up to 10 users per room.  On top of that the application uses a lot of bandwidth.22:08
ZacLnxNewb_RoyK: and I'm stuck in the instructions where you configure what database to use with the application, "configure:database is not defined"22:10
genii-aroundpatdk-lap: The xfs is a good lead, thanks22:10
patdk-lapgenii-around, if you want to read more, just google mythtv delete :)22:13
genii-aroundpatdk-lap: I'm using Zoneminder, but same idea, yeah  :)22:13
=== WinstonSmith_ is now known as WinstonSmith

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!