[00:01] Quick question: Is there an easy way to make postfix read user:password lines from a passwd file? (but not /etc/passwd) [00:10] rinsmaster, postfix can't do that [00:10] but you can configure dovecot-auth to [00:10] patdk-lap, I've got dovecot working, it reads from its own passwd file. But I can't get postfix to read from that too [00:11] postfix doesn't do that at all [00:11] you have to configure postfix to use dovecot-auth [00:11] there are examples both on postfix and dovecots website, on how to do so [00:11] iirc sasl can be used for postfix [00:13] I'm actually using sasl right now: "smtpd_sasl_type = dovecot" In postfix's config [00:14] But it doesn't seem to work, and I can also not figure out how to debug it [00:14] http://www.postfix.org/SASL_README.html [00:15] http://wiki.dovecot.org/HowTo/PostfixAndDovecotSASL [00:15] first two google hits [00:15] I know, I've read through those a few times, but I can't get it working. Thanks anyway :) [00:15] then your going have to post your dovecot -n and postconf -n configs [00:17] Alright, I have to go now though, 2:17 AM already -.- [00:17] Thanks for the help, I'll probably be back soon though [00:25] utlemming: Just read the last server team minutes. Congrats on the new position. [00:26] utlemming: Are you working with smoser? The description wasn't clear. [00:44] Hey guys i'm running openvpn on an ubuntu server and every few days i have to clear the iptables because i can't hit any sites after i've connect to the vpn. i took a dump of the ip tables right before i reset and here is what is there http://pastebin.com/JhQSX79k . I'm not sure how to resolve the problem but someone mentioned removing ufw??? [00:44] how do i do that? [00:44] but still have iptables [00:53] man, I dunno how people can use firewalls like that anymore [00:54] mine are way too complex for that anymore atleast [00:54] with ufw? [00:54] ya [00:54] i just disabled it [00:54] ufw is nothing more than almost plain iptables [00:54] I find it odd resetting your firewall fixs the issue [00:54] most of my issues with openvpn are dropped routes === erichammond1 is now known as erichammond [01:06] anyone can help me with the error when i want to connect on ftpd. It says "421 Service not avalible, remote server has closec connection" [01:07] anybody know any service ala dyndns, that runs on your own dns servers? [01:16] whats the program that runs on login [01:16] I need to disable that [01:16] the sysinfo type program [01:16] cause it hangs for 5-10 mins on this embedded board [01:18] nm think I found it [01:35] nope [01:35] still can't find it === vDubG is now known as vDubG__Gone [03:12] flyback: what does the program do? Have you looked in /etc/init? [03:14] it was in update-mod something like that [03:14] I just -x all the programs [03:14] under that dir === IdleOne is now known as AcmeOne === AcmeOne is now known as IdleOne === Kor is now known as EvilPhoenix [08:49] i have added the following rule into iptables but nat is still not working iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE === mendel__ is now known as mendel_ [11:03] I take it putting ~/bin is dangerous [11:03] what's the proper way to install your own binary to the system? [11:04] (that is, so that I can just type its name instead of its absolute path) [11:06] my bad, ~/bin was already registered, but only got into #path because It didnt exist [11:15] rurufufuss: ~bin shouldn't be in $PATH by default, but then, there's no harm in doing so [11:56] is there any way to check outgoing mails in the past hour or so? [11:56] e.g ones that were invoked using the sendmail command etc [12:05] rurufufuss: try /var/log/mail.info and mail.err [12:27] how can i get ip forwarding to stay enabled after a reboot? [12:29] can ubuntu-server be installed from usb? it's not working for me, using http://www.pendrivelinux.com/universal-usb-installer-easy-as-1-2-3/ [12:30] hurp: there's a howto on how to copy the iso to a usb stick on the ubuntu download page - no need for other software [12:30] well thing is, i can boot from the usb stick [12:30] linux_newby: add it to /etc/sysct.conf [12:30] but when i click "install to hard drive" all i get is a *beep* sound [12:31] same if i try to run it from the usb stick [12:31] then something is fucked up [12:31] :\ [12:32] try with a CD if you have an optical drive [12:32] or another usb stick [12:32] well reason i use usb is because it's the only option.. [12:33] so i just add echo "1" > /proc/sys/net/ipv4/ip_forward on a new line in sysct.conf? [12:34] erm ... no [12:35] how would you do it? [12:35] in sysctl.conf (or preferably a new file under /etc/sysctl.d), add net.ipv4.ip_forward = 1 [12:35] preferred way is to use a new file under /etc/sysctl.d [12:35] so that an upgrade can update /etc/sysct.conf [12:35] so that an upgrade can update /etc/sysctl.conf [12:36] ok, what should i call the file? [12:36] doesn't matter, something descriptive [12:36] ahh, ok [12:36] here_I_turn_on_ip_forwarding.conf [12:36] :) [12:36] lol [12:41] man what was ubuntu server 10.04LTS compiled with? --with-buttplug? [12:41] seems they went with optimizations for newer cpu's that REALLY CRUSH older cpu's [12:41] not so bad for servers and desktops that are too damn old anyways but for embedded gear it's CAUNCKED [12:41] CANUCKED even [12:44] is there any ipv6 package mirror [12:44] ??? [12:46] ch.archive.ubuntu.com, gb.archive.ubuntu.com, se.archive.ubuntu.com probably some others [12:47] dob_: Of course. [12:48] ah just. de.archive.ubuntu.com did not work [12:49] what about security.ubuntu.com? [12:49] dob_: Try: http://ftp.uni-erlangen.de/pub/mirrors/ubuntu/ [12:49] dob_: No. [12:49] flyback: works for me... [12:49] security is v4 only and it's one of those things that's not mirrored (to avoid delays when pushing a security update) [12:50] stgraber: It is mirrored, all the -security repos are on all the mirrors. [12:52] jpds: Indeed -security is on all mirrors (as it's on archive.u.c) and packages usually get copied to -updates quite quickly to avoid killing security.u.c. I guess what I meant it that on a default install you won't be using a local mirror for security but you'll for everything else. [12:52] sudo iptables-save > /etc/firewall-rules gives me a permission denied error? [12:53] i am running it as sudo with 110% sure password [12:53] thank u guys, everything seems to work for me! [12:53] changed to ftp.uni-erlangen.de [12:53] I know cjwatson spoke to elmo at the sprint to get AAAA records added to archive.u.c (pointing to one of the mirrors that has bandwidth and v6 connectivity). The same should probably be done for security.u.c as well. [12:56] echo 1 > /proc/sys/net/ipv4/ip_forward gives same permission denied error [12:56] tried another usb stick same problem RoyK [12:56] >_> [12:57] no way i can check what's actually wrong? [13:10] why is mysql so extremly slow on my server?!? eg. restarting mysql takes minutes. but htop reports cpu usage almost 0% [13:16] btw, i have a windows server i want to change into linux, will my windows (ntfs) partitions, and raids still work under linux? [13:18] hurp, ntfs itself works, but I don't recommend it [13:18] why not? and how can i fix it [13:18] do you use hardware or software raid? [13:18] hw [13:18] I mean REAL hardware raid like some adaptec thing [13:19] areca 1880 and a sas expander [13:19] well, I guess this array still works [13:19] but ntfs should be changed to some linux file system [13:19] can you convert it on the go? [13:20] without formatting? [13:20] no idea, but I guess not :( [13:20] not like i have 30TB of space available for backup:\ [13:20] what's the cons with ntfs? [13:21] any performance issue, or just formal stuff [13:21] well, all the things with the rights [13:21] like permissions? [13:21] then writing to ntfs with linux maybe cause problems [13:21] yes [13:22] brb [13:22] alright [13:23] my idea was to have 2 seperate hdd's, 1 with my old windows install, another with linux, and being able to swap back and forth with the same file system for storage, sort of like dual boot, with 2 drives [13:24] so kind of need the file system to be windows compatible as well [13:31] linux_newby: add 'sudo' in front of that command [13:33] hi. is there a nice way to display the ip connections for a specific port constantly? [13:35] mcahornsirup: iptraf [13:38] Thanks! I hope this works on a vm too... [13:50] @RoyK ... just stumbled over iptstate ... like top for connections... [13:52] mcahornsirup: not really, it's an iptables wrapper, it won't show connections unless iptables is setup to manage them [13:59] hello i have a problem with wackamole " Conf_init: My proc id (127.0.1.1) is not in con$ Exit caused by Alarm(EXIT)" any one able to help? [14:01] goodnight... thanks everyone [14:03] ok. I understand... I stay with iptraf : ) [14:43] my iptables seem to revert back after only a few hours of me making changes... not sure what is modifying them to default. here is what i need them to stay as http://pastebin.com/09PavYP8 here is what i woke up to this morning http://pastebin.com/jEBMFXL0 [15:01] pr0zoid: check your cronjobs? [15:02] pr0zoid: iptables rules doesn't change unless you reboot [15:12] hurp, does it make sense to switch a server between operating systems? [15:13] hurp, if you need some special things from windows, maybe install windows server on a virtual box? [15:14] i want the opportunity to change back if i don't like it to start off with [15:15] i first tried installing ubuntu in vbox on the server, but performance was poor so trying with a full isntall [15:16] performance probably won't be very good with ntfs on linux [15:16] use ext4 [15:17] ext4 and samba should work fine [15:17] i am mounting exsisting volumes dude [15:17] i'm not creating new ones [15:17] then you won't get very good performance [15:18] ntfs3g uses fuse, meaning it runs in usermode [15:18] that adds a few layers of abstraction, and more code to be run for each request [15:19] well i'm sure it'll beat the 15 MB/s i got from vbox [15:19] lol [15:19] well, try [15:20] and monitor the system during testing [15:20] yeah i'm trying [15:20] with 'htop' or even old 'top' or something more fancy ;) [15:21] all the space on the partitions are showing up as "unknown" though [15:21] with what tool? [15:22] installed gnome and used the disk utility that comes with it [15:22] do you have ntfs-3g installed? [15:22] unless it comes with 11.04 by default, no [15:23] apt-get install ntfs-3g [15:23] and btw, for servers, it's usually recommended to stick to LTS releases, meaning 10.04 for now [15:23] yeah but 11.04 had native support for my raid controller [15:23] ok, ic [15:24] simplifies things a bit ;) [15:24] alamar: what should i be looking for in the cronjobs? [15:24] sure does [15:24] pr0zoid: if you haven't created a cron job that manipulates iptables, then never mind [15:24] RoyK: i did reboot but after the reboot i applied the rules i needed a few hours later everything was reverted.. will check the last reboot time [15:25] i already had ntfs-3g [15:25] then mount -t ntfs /dev/blah /mountpoint [15:25] hurp: make sure you have a backup [15:26] backup of the partition? [15:26] hurp: can you pastebin the contents of /proc/partitions? [15:26] !pastebin [15:26] For posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic. [15:26] royk: uptime is 7 hours.. changes were made 6 hours ago when i applied the new rules. [15:26] pr0zoid: that's strange indeed [15:26] never seen iptables 'lose' rules [15:27] is there a way of logging iptable changes [15:27] (getting an audit trail going) [15:27] dunno [15:28] RoyK https://pastee.org/5rkhq [15:30] what controller is this? [15:30] looks like linux sees each drive, not the array as a single disk [15:31] areca 1880 [15:31] it sees the full parititons, they show up as 10TB each in the gui utitily [15:31] utility [15:32] do you have three 10TB logical volumes? [15:33] no 2 [15:33] + some smaller [15:33] ok [15:33] try to mount /dev/sdb3 [15:33] mount -t ntfs /dev/sdb3 /somewhere [15:34] no workie [15:34] NTFS signature missing [15:34] they are GPT btw [15:35] GPT should be supported, but if those are 'dynamic' volumes, that may be the problem [15:35] they are dynamic yes [15:36] royk: i think my approach has been incorrect [15:36] to [15:36] fix issues i've been flush my iptables... but i think this command is only temporary [15:38] always run this fw.stop script -> http://pastebin.com/JkMTJHSE [15:38] hurp: hm... AFAICT that's LDM partitions, and that should be supported [15:39] hurp: why do you want to move this server to Linux? [15:39] stability issues with windows [15:39] and other stuff [15:39] ok [15:41] i'll have to do more research on this later, goto run now, if something hits your mind you can always q me, i'll idle here [15:41] later [15:42] hurp: is sde1 also an ntfs partition? [15:42] all are [15:42] cept for the OS one [15:42] try to mount sde1 [15:44] oh wiat, i have my OS on that one [15:44] so it's already mounted [15:44] it's the only one not NTFS [15:45] but i really goto run [15:45] hurp: the thing I don't understand is what those small partitions do [15:45] sdb[12] [15:45] for instance [15:45] storing RAID info [15:46] not likely - the raid controllers stores that on hidden sectors [15:46] well they are hidden in windows [15:46] I have areca controllers in some of my systems, and there are no such partitions there [15:46] I guess Windows might be using them [15:47] which windows version is this? === flyback- is now known as flyback [16:00] is the ubuntu dhcp3-server ipv6 compatible? [16:13] is there any isc-dhcp v4 package for lucid? [16:22] pr0zoid: for things that reset or modify your iptables? [16:23] dob_: dhcp server? what about dhcp3-server? [16:23] not ipv6 compatible [16:23] you asked forr ipv4 [16:24] alamar: no i asked for isc dhcp version 4 [16:24] and not isc dhcp version 3 [16:24] version 4 is ipv6 compatible [16:24] v4 reads to me like you want ipv4. sorry for that [16:25] no problem [16:25] i found a ppa [16:25] and ppa's are not ipv6 compatible YEAH :-( [16:35] dhcp in ipv6? I thought that was covered by SLAAC [17:06] alamar: yeah [17:12] New bug: #808053 in amavisd-new (main) "package amavisd-new-postfix 1:2.6.5-0ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/808053 [17:14] geany can work in lucid-server via ssh forwarding? [17:36] fixed it! added `X11UseLocalHost no` to sshd_config [17:37] ~/.Xauthority was no longer created when ssh'ing in [17:42] ChmEarl: didn't know that was needed - I use X forwarding on most of my servers... [17:43] RoyK, geany via ssh threw error: `cannot open display` without it [17:44] strange - works for me... [17:44] RoyK, its broke since june 20... not sure what happened. yes it worked before without that param [17:45] ChmEarl: I just tried to ssh into a server that was updated today, ran xeyes (my favourite test app) and it worked well [17:46] RoyK: no slaac is not something you always want [17:46] also you previously needed dhcpv6 in addition to slaac to provide a dns server [17:46] (rfc 5006 iirc changes this) [17:46] I thought slaac was the preferred one [17:47] no [17:47] preferredis whatever the usecase requires [17:47] when would you want dhcp over slaac or the other way around? [17:49] RoyK: you want slaac in your homelan for example. you want dhcpv6 prefix delegation to provide your different pops (and the home router that will do the ra) with prefixes [17:49] and you want dhcpv6 for everything you want to statically configure [17:49] you don't want different ips for a service if you change the network interface [17:49] (like mail or http or whatever) [17:50] for those I'd use static [17:50] static is easier managable with dhcp [17:51] that depends on whoever's the boss - my boss doesn't like that for some reason [17:51] your boss might be an idiot [17:51] but then - if I only need a few machines on static and the rest dynamic, would slaac be just as good as dhcp? [17:52] my boss isn't really an idiot, but there are several other idiots in the IT dept and he tries to keep a low profile and not move everything to new ideas at once, something I can understand [17:53] the elder ones are dying out soon anyway, so we can wait :P [17:56] New bug: #808067 in amavisd-new (main) "package amavisd-new-postfix 1:2.6.5-0ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/808067 [17:56] also in hosting environments you don't necessarily want to send out RAs [17:56] (and have everybody configure for v6 without them knowing) [17:57] true [18:02] but again, with non-static dhcp, will that be necessary with slaac? [18:02] talking about a private LAN with some 200 hosts or so [18:02] hm? [18:02] will what be neecessary? [18:02] what can dynamic DHCP do that SLAAC can't? [18:03] provide dns information? (and other stuff) at least until rfc 5006 will be implemented in both clients and routers [18:03] heh - better try dhcp, then... [18:04] we got some address blocks at work, and I'm trying to get that stuff implemented [18:04] problem is the company that setup the checkpoint firewall knows nada about ipv6 and in fact little about checkpoint :( [18:06] who wants firewalls anyway it's all about end to end connectivity again!!!!!! [18:06] ;) [18:06] upgraded the firewall recently and the consultant installed IDS on all interfaces, including the internal ones, and separated the two address blocks we use internally (one official, the other rfc1918) so that NFS mounts triggered IDS on internal systems [18:07] with some rather eldritch systems installed, you want a firewall [18:07] we have an old HP/UX system running, hasn't been patched for years [18:07] some windows 2000 machines, some win98, a win95 box, some VAX... [18:09] still solaris 8 in production - not fun === smw_ is now known as smw [18:13] well most of those don't speak v6 anyway ;)# [18:14] nah :) [18:52] hey. I dan't ping google.com [18:52] can't* [18:52] can you ping 4.2.2.1? [18:53] yea [18:53] how about yahoo.com? [18:53] or ubuntu.com [18:53] nope [18:53] sounds like DNS is failing then [18:53] ntoombs, can you resolve google.com? [18:53] ntoombs, dig google.com [18:53] try dig google.com [18:54] qman__: you were helping me with network problems like 2 weeks ago [18:54] and nope dig google.com doesn't work either [18:54] and ping times out with unknow host or something like that [18:54] ntoombs, that is a dns problem [18:54] do you have a dns server configured? [18:55] check yourb resolv.conf [18:55] my gateway is 192.168.1.1 and my nameserver is 192.168.1.10 [18:55] well it seems your nameserver does not resolve names correctly [18:55] ntoombs: try nameserver 8.8.8.8 [18:55] k [18:56] RoyK: That fixed it thanks [18:56] is 8.8.8.8 a public recursor? [18:57] alamar, run by google :-) [18:57] yes i know but i didnt know it was a public recursor [18:57] alamar, who else could afford such a great ip? :-) [18:57] that's the dns1 server for my isp [18:57] just thought authoratative for google domain or something likethat [18:58] good to know [19:07] New bug: #808090 in mcollective (universe) "mcollective dependencies and other misc things" [Undecided,New] https://launchpad.net/bugs/808090 [19:57] is it a bad idea to install 11.04 on a production server? if so, why? thanks [19:59] b0nghittr: You can if you want. [19:59] b0nghittr: It just won't be supported as long as an LTS release will be. [20:01] ok, cool ty [20:02] It's all about choice. [20:02] from a security standpoint, would 11 be safe? [20:03] Yes, it will receive security updates. [20:04] awesome. i hope there are PPA repos for 11.04 soon, i could really use FreeNX :p [20:04] Well, PPAs aren't officially supported by Ubuntu, so you use them at your own risk. [20:05] having a server with an OS life span of 18 months is a terrible idea in my view [20:05] ikonia: 'tis a long time. [20:05] adding unsupported software to it makes it worse [20:05] 18 months is the blink of an eye [20:05] I guess time is relative. [20:05] ikonia: yeah, i plan to stay on top of it though [20:06] b0nghittr: on top of it ? [20:06] updated [20:06] what's your plan for when support ends and all the security updates stop [20:06] in 1 years time [20:06] i figure there will be another release by then [20:07] and your sure you'll be able to upgrade more so using PPA's ? [20:08] good point [20:12] jpds: 18 months is nothing [20:12] alamar: It's 18 months. [20:12] enterprise distributions (rhel / sles) normally have support times between 5 and 7 years [20:12] 8 years for rhel [20:12] hoping every 18 months that everything still works after an upgrade and doing immediate fixes etc. really sucks [20:13] depends on the role of the server though [20:13] bedroom server - who cares, [20:13] production database server.....people care [20:13] alamar: thats why we have LTS as well :) [20:13] LTS is only 5 years [20:13] ikonia: depends on the DB type too ;> [20:14] ikonia: like, if you're running twitter or something, you're growing your cluster so fast, probably running your own build of the db engine etc [20:14] I think you've missed the point of what I was saying [20:18] if i was to have virtualboxrunning on my current OS, and had vbox using raw space on a 2nd empty hdd, could i install ubuntu 10.04 to that 2nd hdd and boot from it on the actual machine? or would i need to make some changes first? [20:18] I don't know if vbox supports partitions, I know kvm does [20:18] I think vbox doesn't [20:19] i have not used kvm by its self before [20:19] lifeless: i know. this is why i administrate a bunch of lucid servers ;) === vDubG__Gone is now known as vDubG [21:14] would it be possible to install ubuntu 10.04 to a 2nd hdd using KVM, and boot on that 2nd hdd on the actual machine? [21:15] i have to install 64bit though [21:16] the datacenter will swap hdd's for me [21:18] It sounds potentially feasible, but no promises [21:19] You can't manage to take the downtime of installing more traditionally? [21:32] New bug: #804211 in upstart (main) "package foo2zjs 20110210dfsg-1ubuntu2.1 failed to install/upgrade: problemas de dependencias - se deja sin configurar" [Undecided,New] https://launchpad.net/bugs/804211 [22:19] is there any one know any application for video confreing on LAMP server ruing on Ubuntu [22:20] runing* [22:20] my server isn't showing up in my routers attached devices. [22:20] my interfaces file is set to autorun eth1 [22:21] ntoombs: how does your server gain an IP address? [22:21] dhcp [22:21] hmmm. [22:21] ubuntu was newly installed a few minutes ago [22:22] i changed my resolv file to 8.8.8.8 [22:22] can the server talk to the internet? [22:22] well there's a problem with that... [22:22] my server is headless [22:22] so? [22:22] so i had to install it on a different machine [22:22] and it can connect to the internet there [22:22] but? [22:22] and the interfaces file is eth0 [22:22] but eth0 doesn't work in the server [22:23] ntoombs: ok. So really, what's actually the problem you're having? [22:23] so i had to change it to eth1 which has worked before [22:23] i have lots of problems but none that you would want to get into fixing [22:23] my problem at the moment is the one i mentioned first [22:23] my router can't see my server [22:23] ok. scan your local subnet with nmap [22:24] from another pc [22:24] nmap? [22:24] can any one look at on my problem ? [22:24] how about a unix based pc? [22:24] ntoombs: yes. [22:24] anything [22:24] i don't know how to do that [22:24] nmap -sP 192.168.1.0/24 or similar [22:25]