[00:35] RoAkSoAx: hrm.. " * debian/control: Switch to python-support; Add missing Dependencies." .. did you mean switch to dh_python2 ? [00:35] I thought dh_python picked either, and defaulted to -support [00:36] Yes unfortunately the default is support, but there is a migration underway to eliminte everything except dh_python2 [00:37] Actually in debian/control I don't think anything has to be done.. dh_python2 is in the python package [00:46] SpamapS: right but still it depends on python-support [00:47] hggdh_: is there a way someone can generate test data for http://iso.qa.ubuntu.com/qatracker/dllist [00:48] RoAkSoAx: I dont know -- stgraber or ara would be the best bets [00:48] hggdh_: ok cool :) [00:48] stgraber: still around? [00:50] RoAkSoAx: hrm? What from python-support are you depending on? [00:52] SpamapS: build-depends [00:52] SpamapS: is dh_python2 the recommended way by the debian-python policy? [00:53] twb: yes [00:53] Okey dokey. [00:53] dh --with python2 .. or dh_python2 if you're old school [00:53] I don't package python stuff for the main archive, but I'll try to remember that in future. [00:53] Its a transition that only started a few months ago [00:54] post-squeeze? [00:54] But its now policy in the DPMT that if you touch a package, you migrate it to dh_python2 [00:54] for squeeze it was optional [00:54] Shiny [00:54] wheezy I believe they plan to not have pysupport or pycentral anymore [00:54] SpamapS: that's why the changelog says switch to python support :P [00:54] And the win is that we end up with a single python support framework? [00:55] RoAkSoAx: but the point is, python-support will be *gone*. [00:55] twb: a single one, with all of the lessons learned over the last few years, yes. ;) [00:55] ;) [00:55] just in time for python 3 [00:56] SpamapS: it doesn't really matter in my package cause im installing in debian/tmp/usr/lib/python*/*/ [00:56] Yeah, I remember what it was like when debian-haskell were trying to get a working support structure. [00:57] While arch had a completely automated build whenever upstream made a new release :-P [01:00] RoAkSoAx: why doesn't that matter? you're breaking w/ policy by putting files directly there. They're supposed to go into /usr/share/pyshared [01:00] RoAkSoAx: which, dh_python2 handles [01:01] essentially as long as setup.py lists your modules.. you shouldn't need to do anything [01:02] SpamapS: do ytou hve a link to the policy for dh_python2 [01:04] Heh.. it would appear that this is all "mailing list policy" from the wiki's and web pages. How frustrating. Let me dig a little deeper. [01:04] SpamapS: cause dh_pysupport is "dh_pysupport is a debhelper program that will scan your package, detect public modules in /usr/lib/pythonX.Y/site-packages," [01:05] obviosly the manpage is outdated [01:05] but that's why I'm installing there [01:05] how embarassing. ;) [01:05] for me I mean. ;) [01:06] lol [01:06] SpamapS: anyways, first time trying testdrive? [01:07] RoAkSoAx: No I was looking at the changelog. I won't have time to try testdrive for a while.. the work is piling up [01:08] RoAkSoAx: http://wiki.debian.org/Python/Packaging is all I have.. a newbie guide which suggests only dh_python2 [01:08] k thanks for the link [01:08] RoAkSoAx: I'm quoting the mailing list for debian python modules team that they're working to replace all pysupport/pycentral w/ dh_python2 .. it seems they haven't quite made it canon law yet [01:09] SpamapS: and I personally use TestDrive for everything that involves downloading ISO's or quick tests as it is quick and simple [01:09] SpamapS: indeed [01:09] anyways, I gotta go check the mail [01:11] RoAkSoAx: cool. :) I know it will be useful for some things I need to do soon. :) [01:25] hey, how can I get into a root shell automatically on login? I tried putting sudo -s in my .bashrc but that made it impossible to exit [01:30] SoulPropagation1: uh, don't do that [01:31] SpamapS: why? I only log in for administrative stuff [01:32] yes, but linux has exploits from time to time [01:32] you don't care about security? ;) [01:32] No, not really [01:33] why not? [01:33] SoulPropagation1: you can do administrative stuff without root [01:33] I don't feel like spamming sudo [01:33] eh [01:33] because there's nothing on the box worth securing [01:33] sudo lovesto be spammed [01:33] SoulPropagation1: there's the other boxes it can connect to. ;) [01:34] nothing of value on there either [01:34] sudo is like a fat hawaiian surfer.. eats spam all day! [01:34] SoulPropagation1: so its not on the internet? [01:34] SoulPropagation1: well, hackers can still exploit your server to use it as a spamserver, botnet or even ddos server [01:35] SoulPropagation1: sudo's whole purpose of existence is to be spammed ;) [01:35] and if thats at home, your isp might disconnect you :p [01:35] right and if they could access it I don't think it would be that hard to forge my password twice [01:37] well, like i said, there are exploits too [01:40] yeah I'm pretty sure there are easier better targets [01:40] true [01:43] I mean.. I understand that most servers are relatively juicy targets, what with all sorts of backups on them and stuff and it's probably a good idea that you promote that level of security [01:45] but I don't exactly have much in the liquid assets department, nor do I have anything particularly useful worth taking from me. SO [01:45] can someone please tell me how to automatically go into interactive sudo when I log in without breaking bash? [01:46] sudo su - [01:46] in .bashrc? [01:48] SoulPropagation1: the most valuable asset of your server would be to install a spam mail server or a proxy on it behind your back, not whatever data is on it... [01:50] JanC: I'm sorry but that's just not a big concern of mine. if I notice any devious shenanigans then I'll reconsider. [01:50] juicy targets are easy targets [01:50] and doing something like that would make you an easy and therefore juicy target [01:51] SoulPropagation1: if you don't care, others will care (blacklist your and ask your ISP to disconnect you) [01:51] yep [01:51] Some spammers are smart too. You wouldn't even necessarily notice the missing bandwidth. [01:52] right, you'll only notice after being disconnected ;) [01:52] Yup, seen it happen before. [01:52] at which point fixing things gets difficult :P [01:52] heh indeed. [01:53] so you're saying that right now I can log into any server I want without needing to know a username or password? [01:53] if you knew a new 0day exploit [01:53] and they happen [01:54] see the not-so-random SSH key fiasco a few years back [01:54] May I pm you SoulPropagation1? [01:54] nandemonai: sure [02:14] nandemonai has teh hax D: [02:14] huh? [02:15] "so you're saying that right now I can log into any server I want without needing to know a username or password?" where you say a couple of lines further "may i pm you" xD [02:15] lol [02:15] Not quite. [02:15] i am jacks twicthing elbow [02:16] i know, it was a joke [02:16] i'm so funny hurrr [02:16] I'll say. [02:17] anyways, sorry =) [02:18] Na buddy all good. [02:18] k :p [02:41] humm - does anyone have a maverick system they can test something for me on (what does "invoke-rc.d plymouth status" output?) .. it *should* give output but i'm not getting any :/ === Kiall is now known as Kiall|AFK === Kiall|AFK is now known as Kiall [03:03] i just noticed [03:03] that my ubuntu-server is hacked [03:03] via ipv6 [03:03] i found this [03:03] root@Maverick:~# ls [03:03] f replay_arp-0119-010828.cap tmp [03:03] is it possible to be hacked ? [03:07] how did you find it ? [03:08] did this "server" have a complete hard drive format before being installed with maverick ? [03:11] yes [03:11] i typed w [03:11] so my username donvito [03:11] was loged in from ipv6 ip that i dont own [03:11] i saw in bash history the commands are wroted [03:11] i found sudo su - [03:11] so than i foudn this ls [03:11] f replay_arp-0119-010828.cap tmp [03:15] isn't that an ettercap capture file ? [03:15] or an aircrack capture [03:17] does your server have a wifi interface ? [03:20] yes [03:21] yes, google for 'ARP Request Replay Attack' [03:21] yeah its an aircrack replay capture [03:21] check if you have aircrack installed [03:21] and change the root password, *now* [03:23] all ports [03:23] are closed now [03:23] box is under NAT [03:29] donvito2: you should seriously consider re-installing [03:30] yep [03:30] doing that now [03:42] and install that thing that auto creates iptable drop rules on ip addresses which are the source of failed X number of logins within a certain time period [04:06] RoAkSoAx: I can't add any data there without sending an e-mail to everyone who's subscribed to these builds, sorry === _TechAway_ is now known as _Techie_ [04:25] SpamapS: around? [04:36] New bug: #716248 in sheepdog (universe) "lsb functions not being source in init script" [Undecided,New] https://launchpad.net/bugs/716248 [04:44] how can i know what root typed [04:44] what actually user loged as root did to my server [04:44] what kind of commands etc [04:46] donvito2: history [04:46] donvito2: but there are ways to clear that as well [04:48] just found [04:48] what he did [04:50] what for is command less [04:51] usually less is pipped to file so you scroll the file in the terminal example cat /var/log/auth.log | less [04:53] * twb hits thesheff17 with the UUOC bat [04:53] twb: what does that mean? [04:53] how can i get complete log [04:53] http://en.wikipedia.org/wiki/Useless_use_of_cat [04:53] what he did [04:54] i get only screen log [04:54] nothing more [04:54] i need more [04:57] twb: thx...I have used that command for years: less < /var/log/auth.log :) [04:58] donvito2: all I know is history...and what do you mean screen log? [04:58] well when i type history [04:58] i get just some commands [04:59] usually it is limited to 1000 commands...maybe he executed more commands under a different user? [04:59] thesheff17: UUO < [04:59] thesheff17: less can open a file [04:59] It can even open >1 file, and use :n and :p to move between them [04:59] twb: lol didn't know that either [05:35] i'm having problems getting nfs-kernel-server to start : http://pastebin.com/ZsLdVg4P [05:36] gah nvm === airtonix_ is now known as airtonix [05:38] actually... it still doesn't want to start, citing : Cannot register service: RPC: Unable to receive; errno = Connection refused [05:50] hi i'm trying to set up a samba share on my ubuntu server [05:51] does anybody have a recommended guide they can point me to? i've seen a few posts on the forums but they can't seem to agree on what parameters to set [05:51] Ender: the Ubuntu Server Guide covers it [05:52] kk [05:57] awesome! nfs-kernel-server won't start [06:01] airtonix: is it a VM or container? [06:01] twb: this is not a virtual-machine [06:01] Dunno then [06:03] http://pastebin.com/LLVZ6GsG [06:03] airtonix: Does your kernel have the nfsd.ko module available to it? "Won't start" is a bit generic... check logs for details? [06:03] jmarsden: i did : sudo apt-get install nfs-kernel-server [06:04] i expect a working nfs-server [06:04] airtonix: That does not answer the questions I asked, though. [06:04] A novice was trying to fix a broken Lisp machine by turning the power off and on. Knight, seeing what the student was doing, spoke sternly: “You cannot fix a machine by just power-cycling it with no understanding of what is going wrong.” Knight turned the machine off and on. The machine worked. [06:05] jmarsden: because i don't know how to work out if it does im going to say "don't know" [06:06] jmarsden: http://pastebin.com/xkJAqT9U [06:08] He went away? [06:08] airtonix?? [06:12] ok looks like something else is running on port 2049 [06:14] airtonix: sudo netstat -ntlp |grep :2049 # might tell you what that something is [06:14] jmarsden: rpcinfo -p [06:14] Or is that just for clients? [06:14] Obviously he'll also need an entry in exports(5) [06:15] Not sure... but yes, i was wondering if the issue he has is lack of RPC myself. [06:15] nfsd[14745]: nfssvc: Address already in use [06:15] nfsd[1707]: nfssvc: Setting version failed: errno 16 (Device or resource busy) [06:15] * airtonix rages [06:15] Ah, so you are running the userland nfs server and now trying to install the kernel one at the same time? This may not be wise. [06:16] Hear, hear [06:18] would i be better off, performance wise, running a virus-scanned nat through a VM on a windows vista computer with a core 2 duo processor or directly on a p4 system? [06:19] just anecdotally based on your experience or guesstimates is fine [06:20] i'm sorry, i meant virus-scanned NAS, not NAT [06:21] Ender: I wouldn't run VMs on Vista to start with :) Having said that: If you expect the bottleneck to be CPU, and the VM has enough RAM, then the modern dualcore would probably win. But if the bottleneck for your scanning is disk I/O... it'd be more even, I'd guess. Can you install on both and then do some performance measurements? :) [06:23] yes actually i can [06:23] and i will [06:23] eventually [06:23] haha [06:23] but right now i'm still learning the background on the task i have at hand [06:23] started with the ubuntu server samba guide, but i didn't understand some stuff - so now i'm all over wikipedia, learning about ldap [06:32] does anybody in here have any experience with or knowledge of openERP [06:39] jmarsden: ok assuming a fresh start, i removed all traces of nfs from my server that i was able to with apt-get === airtonix_ is now known as airtonix [06:45] if i'm preparing to create a samba nas on my school's network so that my co-workers can have a local networked storage location, i should NOT configure Samba to be a WinNT Domain Controller right? [06:53] Ender: Correct. Also, for the sake of your own reputation, test SAMBA in your home or on a test LAN first, and get familiar with it, before deployment in a production setting such as a school. [06:54] yeah that's what i'm trying to do [06:54] but naturally the brilliant researchers in my lab bought a 215k piece of equipment to analyze their data without thinking about how they're going to transfer files to their workstations [06:55] the euqipment is up and running but they all have to crowd around the damn thing like kids in a lunch line to use it for analysis [06:55] so i kinda need this running asap [06:55] but your point is very, very well taken. and i'm currently working on it at home and i'm using a vm at work to test. [06:57] The reason i ask about domain controllers is that the ubuntu server guide assumes you want to set it up as a domain controller and dives into setting up LDAP [06:57] since i'm doing this test on my home server, is it a good idea to go ahead and do that just so i know that procedure too [06:57] ? [06:58] Ender: if you've not played with ldap before then you're in for a learning curve [06:58] Ender: as a start, google for ubuntu bloke ldap samba [06:59] ok i'm on that. one of the pre-requisites is "An NFS server exporting the users' home direcories" [07:00] I don't think i have that. [07:00] i think the ubuntu bloke blog has a post on that too [07:00] but hey, i wouldn't know since i can't get nfs server to even run [07:01] lolll [07:01] blind leading blind [07:01] yeah so awesome hey [07:01] after removing nfs-kernel-server and restarting, there is still nfs-kernel-server files all over the place [07:01] so in order to set up a windows-readable network share i have to run an nfs server, ldap server, and samba server? [07:02] no [07:02] you just need a samba server [07:02] you only need ldap if you want centralised authentication [07:02] well i need the share to only be accessible to poeple in my lab [07:02] and you only need nfs if you want a network file share system that has less network traffic overhead than samba [07:03] but all the workstations are independent, they don't authenticate over the network at all [07:03] you only need samba then [07:03] why does the ubuntu server guide assume you need ldap? [07:04] it says ldap is a means of managing users; without it you need custom scripts or some other method fo rmanaging users. [07:04] so if not ldap, what then? [07:04] no [07:04] what are you reading by the way ? [07:04] https://help.ubuntu.com/10.10/serverguide/C/samba-ldap.html [07:05] https://help.ubuntu.com/10.10/serverguide/C/windows-networking.html [07:05] Ender: So you are reading a guide section that starts out "This section covers configuring Samba to use LDAP for user, group, and machine account information and authentication." -- and now asking why it needs LDAP ??? :) [07:06] Ender: https://help.ubuntu.com/10.10/serverguide/C/samba-fileserver.html [07:06] * Ender feels like an idiot [07:06] :) [07:06] reading slowly is required [07:07] well at least i learned a lot about ldap from wikipedia (: [07:07] Ender: if you do bother to do something with ldap, i recommend this first : http://tuxnetworks.blogspot.com/2010/07/howto-samba-ldap-on-1004-lucid-short.html [07:07] Ender: If possible, read all of Chapter 17 of the Server Guide, and then use the parts that are actually relevant to what you are trying to do. === pan1nx is now known as info [07:08] jmarsden: ok apparently removing nfs-kernel-server doesn't actually remove it === info is now known as pan1nx [07:09] airtonix: You can try sudo apt-get purge nfs-kernel-server [07:10] airtonix: Or you can rmmod the loaded kernel module, if that is your issue? [07:12] sudo /etc/init.d/samba stop is not working. how do i stop samba so i can alter the smb.conf file [07:12] oh nvm i figured it out [07:12] Ender: sudo service smbd stop [07:12] had to sotp the smbd instead [07:12] yeh thx [07:13] oh, service? [07:13] i just used sudo stop smbd [07:13] its a shortcut [07:13] doesn't work with all services [07:13] but sudo service stop will work with all services? [07:13] pretty much [07:13] Rather, service is a backwards compatbility layer for RHEL refugees [07:14] so the real way uto do it is use /etc/init.d/ stop [07:14] "real" * [07:14] ? [07:14] the no-i'm-not-a-RHEL-refugee way [07:15] sudo apt-get remove nfs-kernel-server && reboot, (some time later) , sudo apt-get update && sudo apt-get upgrade && sudo reboot, (some time later), sudo apt-get install nfs-kernel-server : http://pastebin.com/4MkrUfEd [07:15] yay for fail [07:15] :( [07:16] did you try the purge [07:16] yes [07:16] did you try to remove nfs-common [07:17] purge* nfs common [07:17] yes [07:17] try to just install nfs-common [07:18] how do you trigger the nfs-common configuration === oubiwann_ is now known as oubiwann [07:18] "dpkg --reconfigure nfs-common"?? [07:19] ok nfs-common isntalled and no errors yet [07:19] http://pastebin.com/xJTRzJh1 [07:20] kayyyyyy [07:20] and nfs-server??! [07:20] what's the vi command to start editing at the end of the current line [07:21] a(ppend)? [07:21] no dice, that's to add at the current cursor location [07:22] how's "a" different from "i" [07:22] i prefer pico or nano [07:22] less fluffing around [07:22] then you actually use the home and end keys for what they were intended for [07:22] my bad...not really comfortable with vi [07:22] yeah but all the cool kids use vi [07:22] lol [07:22] only the ones that like to cut themselves [07:22] =) [07:23] oh, it's A not a [07:23] on the right track to xampart [07:23] thx [07:23] \o [07:23] tho* [07:26] so installing nfs-kernel-server on ubuntu lucid is impossible [07:26] that makes me so happy [07:26] lol [07:26] what happened? it was fine after nfs-common wasn't it? [07:27] no [07:27] i still have the problem with rpc [07:28] impossible? [07:28] apparently [07:28] !impossible [07:28] what is that? [07:28] Sorry, I don't know anything about impossible [07:28] it's where it can't be done [07:28] * Ender experiences a segfault [07:28] does not compute [07:28] nah man it can be done [07:28] maybe not tonight [07:29] but it can and will be done [07:29] airtonix_: (a) What makes you think you need the nfs-kernel-server in the first place? What is so wrong about using a userspace nfsd ? [07:30] pardon ? [07:30] Either way should work fine... both at once probably won't. [07:30] i'm pretty sure i haven't install any kind of nfs prior to this [07:30] so why should somethin you call "user space nfs" be installed ? [07:31] I've set up NFS on Ubuntu 10.04 before, it worked then... but you are claiming it is "impossible"? [07:31] apparently it is [07:31] http://dpaste.com/401214/ [07:31] refuses to start [07:31] or rather refuses to install [07:31] jmarsden: the main thing wrong about it, is the speed [07:31] OK, I'll create a Ubuntu server VM and install it... just to check... [07:31] FWIW nfs-kernel-server works on lucid just fine [07:31] Also hardy. [07:32] That's what I thought too. [07:32] But if airtonix_ says it is impossible for him, he can use the userspace one... he call. [07:32] s/he/his/ [07:32] well why won't it install the lucid machine i have here ? [07:33] ok so you think i have the user space nfsd installed. how do i remove it [07:33] I'm not sure what you have and have not got installed, at this point :) [07:33] Do you have a working portmapper? [07:33] it restarts with out errors [07:35] airtonix_: if you haven't actually used this host for anything yet, it might be easiest to just reinstall from scratch, rather than us trying to work out how you screwed it [07:35] is a mask like some kind of permissions facade or is it just a term to descibe the process of assigning permissions? [07:35] twb: not an option [07:35] twb: and btw i didn't "screw it" [07:35] i just tried to install nfs-kernel-server [07:36] airtonix_: well it's screwed, and *I* didn't do it [07:36] so then apparently nfs-kernel-server is broken on lucid at the moment [07:36] Ender: in what context? [07:36] airtonix_: plonk. [07:37] smb.conf's [share] section parameters [07:37] i fear to install anything else from ubuntu now [07:37] Ender: do you mean a umask? [07:37] airtonix_: Failure to take responsiblity for your own actions => unlikely to get help here. [07:37] the serverguide says set the "create mask" parameter to 0755 [07:37] jmarsden: ? i admit i ran " sudo apt-get install nfs-kernel-server" [07:38] Ender: OK, that's not a umask. [07:38] Ender: what that's saying is, if you don't ask for specific permissions, by default they will be 0755, i.w. rwxr-xr-x. [07:39] A umask is basically the same except the bits are reversed, e.g. in your case they would be 022. [07:39] twb, right, so all files moved onto the smb share will be rwx by owner, rx by group, rx by everybody [07:39] Ender: unless the thing creating them further restricts it, yes [07:39] twb, where is a umask useful [07:39] Ender: umasks are how unix does the same thing [07:39] Ender: e.g. if you run "umask" in your shell, it'll tell you that shell's current umask [07:40] Ender: it defines the (maximum) default permissions of newly created files [07:40] twb, files created by the current user, i presume [07:40] Ender: in that shell, yes [07:41] umask is process-specific, and inherited from the parent process. Typically it's set from some default when you initially log in, e.g. in /etc/profile or ~/.bash_profile [07:41] why's the umask 0022 in a root-owned direcory like /etc the same as in my home directory [07:42] Ender: er, umask is PER PROCESS, not per directory. [07:43] process specific. [07:43] so if i run umask and it tells me 0022, that means what [07:44] "any process you run here will operate with 0022 permissions"? [07:44] ermmmm lemme do some reading on t his first [07:44] Any new file you create here will not have group write or other write permission bits set [07:44] Ender: I was about to suggest that [07:44] Ender: http://en.wikipedia.org/wiki/Umask [07:45] already there (: [07:45] Ender: if you don't already understand how binary and octal work, go learn those first. [07:45] well i generally understand what binary is [07:50] oh isee [07:51] yes actually i did know that, but i've never used binary to specify file permissions [07:51] airtonix_: http://paste.ubuntu.com/565266/ [07:52] Ugh [07:52] "# do not edit this file, it will be overwritten on update" [07:52] So how am I supposed to disable you, you darn udev persistent-net-generator.rules? [07:52] * twb tries a dpkg-divert [07:52] jmarsden: thats good [07:54] airtonix_: Exactly. So... you messed with your server such that it breaks, and then refused to take responsibility for doing so. Remember: " so then apparently nfs-kernel-server is broken on lucid at the moment" ? [07:54] jmarsden: um no? [07:54] jmarsden: i just tried to install an nfs server. [07:56] is it better to use upstart than init.d to manage services that have been converted to upstart jobs? [07:56] it keeps complaining when i use /etc/init.d to start/stop smbd [07:57] Hi [07:58] Uh.. not quite sure whats ahppened but my proxy "squid" service seems to have stopped and I cant figure out why or.. how to restart it [07:58]