[01:02] New bug: #798844 in cloud-init "Chef integration" [Medium,Fix committed] https://launchpad.net/bugs/798844 === medberry is now known as med_out [01:43] QUESTION: when installing ubuntu server, if i select ssh server during the instalation can i then after it installs un-plug it from my monitor hook it up to my cat5 and when still on the network ssh into it? [01:44] If you install the network-console udeb such that you complete the installation over SSH, yes. [01:44] If you mean you're picking "SSH Server" at the tasksel prompt, I'm not 100% sure, but I think the behaviour will be the same. [01:45] i'd need to send the rsa cirtificts over the lan then after i finish twb [01:45] Uh, you mean ssh-copy-id? [01:46] yes, that [01:46] By default sshd will allow password-based auth, so that will work. [01:46] i can do that over ssh though [01:46] Assuming you either assigned a root password or created a user with a password during the install process. [01:47] i need to set up p.f. to still. need to think if 192.168.1.2 is good enough for the server [01:48] Linux doesn't use pf [01:48] port forwirding [01:49] Oh. [01:49] not packet filter [01:49] Well, you should never use 192.168.1/24, .0/24, or 10.0.0.0/24 [01:49] i had a bsd server once, not bad [01:49] i figured so, but why? [01:49] Because everyone ELSE does that, and if you ever need to join two such LANs (e.g. VPN from one to the other), you will cry. [01:50] Try echo 10.$((RANDOM%256)).$((RANDOM%256))/24 [01:50] i plan to use this server to connect to when i am at a college and their wirewalls are alloning me [01:50] haha [01:59] I don't know what "alloning" means. [02:00] 'allowing' [02:00] actually, that doesn't make sense either. [02:09] twb, I would say, 10 < x < 250 [02:09] with routers using 192.168.0-3 being common [02:09] also can't use 192.168.100, or 10.0.10 cause of modems [02:10] or was it 10.1.10 [02:10] patdk-lap: that seems reasonable [02:10] patdk-lap: wut? [02:10] wut language is that from? [02:11] twb, my keyboards messin with me. its allowing [02:11] it's from the "you-talking-nonsense-and-i-need-clarification" language [02:11] airtonix, go back to math class [02:12]

also can't use 192.168.100, or 10.0.10 cause of modems [02:12] you have never used a dsl or cable modem? [02:12] my modems must be awesome, because i have no problems using those networks [02:12] patdk-lap: probably he is sensible and puts them in bridge mode [02:13] can't put cable modem in bridge mode [02:13] My modem takes only precisely 192.168.100.1. [02:13] lol [02:13] ANd it doesn't need to be specifically reachable, if you don't care about the status pages. [02:13] patdk-lap: I guess [02:13] danag, nope, I didn't say you couldn't use it [02:13] 100.1 isn't routable, so the router passes it upstream, and the modem intercepts it. [02:14] DanaG: the power of faith is all you need? [02:14] I just said it's perferably if you didn't [02:14] if you ever care you check your status [02:14] DanaG: I *hate* that [02:14] Or what's worse: [02:14] Cable modems that have the status page actively DISABLED. [02:14] "bridge" doesn't mean "bridge except for frames you feel like hijacking", you damn appliance [02:14] By the ISP. [02:15] I hate ones that have status page accessable only via java [02:15] and have their snmp disabled [02:15] * patdk-lap notes comcast [02:15] Say, I've never checked snmp on my cable modem. [02:16] well, snmp only accessable via comcast tech's [02:16] oh, and my mom's OfficeJet Pro crashes any time I enable my employer's management tool's "probe" feature on a computer at home. [02:16] Mine is Charter, but a self-bought SB5100 or so. [02:16] Charter doesn't seem to touch the firmware on it, but since it's a Motorola SIMILAR to what they support, it works. [02:16] this is comcast business, you must use their supplied modem :( [02:17] For a while, we had a Linksys one... it crashed all the time. And Charter didn't offer the known-fixed firmware. [02:17] atleast I get 120mbit downloads though [02:17] They told ME to upgrade the firmware. [02:17] Sure, just let me log into your servers. [02:18] So anyway, Motorola modem + TomatoUSB router == rock-solid. Once they changed out the rusted-out cable run from the street, that is. [02:18] at home here, still don't have docsis2 :( my linksys modem has been reliable for the last 6 years though [02:18] ya same here, had a break in the cabletv, they ran a new cable, been great [02:19] We used to get 30% packet loss during rain, but they said, "oh, your signal is fine!" -- for years. [02:19] And then when we got Charter Telephone, they were legally obliged to fix it. [02:19] oh, mine went quickly [02:19] And well whaddaya' know? The cable running from the street was completely rusted out! [02:19] in <3months I went from once a week drop for a few min, to >3hour drops per day [02:32] Oh yeah, and our electrical boxes were below ground level, until a few months ago. [02:32] Even our phone lines got crosstalk with neighbors. [02:32] or so my parents say. [02:33] I'm living at home, but rarely use the landline, even in non-rainy weather. [02:33] So anyway, something slightly more on-topic: I gave the Broadcom 5723 another chance, and it seems reasonable after all. [02:34] Versus this Intel, it came to about the same in iperf: http://www.newegg.com/Product/Product.aspx?Item=N82E16833106033 [02:39] Can anyone tell me how I might discover for each of my installed packages whether it's main/restricted/universe/multiverse ? [02:40] jaith, why would you need to do that? [02:41] smw: I'm hardening my server, which came with universe enabled [02:41] smw: given that universe packages are assembled by the community, I'm a bit concerned about security [02:42] jaith, that is not going to protect you much... [02:42] it seems like a bad idea. [02:42] anyways, if it is a new install, it should have no universe packages, right? [02:42] smw: please elaborate. how could checking on my installed packages not protect me much? [02:42] smw: that is precisely what I'm trying to sort out [02:43] smw: the default install has universe enabled in sources.list [02:43] jaith, you know what is installed because you installed it, right? [02:43] anything installed by default you kind of need to trust... [02:43] smw: i have not installed anything yet. i instantiated a clean ubuntu 10.04 from an official ubuntu ami on amazon ec2 [02:43] or not trust the OS [02:44] smw: i tend to agree with you, but i need my server to be very secure. let's say it's an academic argument. [02:44] jaith, then checking what is installed in kind of pointless. [02:44] the same company that puts ubuntu together makes the ubuntu amis [02:45] smw: yes I understand, but I would like to know which are main and which are universe, if only to keep an eye on them [02:45] smw: if all you want to do is discourage me from searching, then you're wasting your time :D [02:45] smw: i do have another question you might be able to answer [02:45] jaith, you do realize it is very difficult to add packages to universe, correct? [02:45] fine, I will answer what I would od [02:46] do* [02:46] smw: that may well be true, but searching where your packages are from should be quite easy. [02:46] dpkg --get-selections for a list of packages [02:46] awk out the package names [02:46] loop over them with apt-cache policy [02:46] jaith, it is not that easy. Ubuntu does not care where a package came from [02:47] you need to work out where they are now and assume that is where they came from [02:48] smw: i'm hoping to avoid a package-by-package search when I have some 385 installed packages [02:49] jaith, that is why you script it [02:49] lol [02:49] * patdk-lap has all the packages he really needs, compiled himself in his own ppa [02:50] well here's a start [02:50] dpkg --get-selections | grep -oE '^[a-z\-]*\s' [02:50] * smw just trusts the people who put together the os [02:50] am i correct in thinking that will return installed packages? [02:50] smw, I'm using newer versions than what is in the os, normally [02:50] jaith, I would have just used awk... but whatever works for yo u :-) [02:51] patdk-lap, cool [02:51] get selections tells you nothing about where it came from, only what is installed [02:51] smw: i don't know the first thing about awk [02:51] awk is like regex meet bash [02:51] jaith, ok, it worked anyways :-) [02:51] yes so know i need to pipe that to some other command which tells me main/restricted/universe/multiverse [02:51] any hints most welcome :D [02:52] jaith, you are taking this way too far [02:52] lol [02:52] smw: i'm OCD like that [02:52] jaith, apt-cache policy [02:52] jaith, I would not recommend a bank be this crazy [02:52] lol [02:53] smw: that's the funny thing, the site i'm trying to secure processes credit cards. our sshd binary is compromised. [02:53] why is your binary compromised? [02:53] smw: ergo, paranoia [02:53] smw: hang on...i go get lovely ascii art for you [02:54] jaith, were you recently hacked or something? [02:54] heh, I doubt it was really sshd, sounds like you where rooted [02:54] smw: YES [02:54] smw: he's probably a rent-a-sysadmin [02:54] normally that comes from bad website programming [02:54] plus running non-patched software [02:54] twb: i'm php programmer. not sysadmin :( [02:55] smw: $bank was running, say, Fedora Core 3 or Gentoo because $some_guy set it up, and AFTER they're broken into, jaith is called in to fix it [02:55] patdk-lap: curious, how does bad php lead to rooting? [02:55] jaith, did I say that? [02:55] twb, nope, even better. He is a web programmer... [02:55] I said it lets one in, so that it can be rooted [02:55] smw: no, i wrote the code nearly 10 years ago when i knew almost nothing [02:55] if you don't update your system often enough [02:55] patdk-lap: better than running patched software, is not running any software at all [02:56] e.g. no inetd beats xinetd [02:56] twb, and better than that, is not running a server :) [02:56] this is a blast. show-offs purporting to help, trying to talk me out of well-justified paranoia. wheeee! [02:56] jaith, no [02:56] we are saying the system has been rooted [02:56] agreed [02:56] that is why new system being set up [02:57] there is no point for paranoia [02:57] cause you need a reinstall [02:57] twb, I was a kid in highschool who like to do jobs on odesk for fun. I fixed a small (but profitable) site that was having problems with uptime. I have a full time job now... [02:57] jaith: if you are paranoid you would not have any PHP there in the first place [02:57] then a code review of the website is probably in order [02:57] and that is why i'm trying to examine initial setup to make sure all the signatures check out and no funny stuff [02:57] new server is Ubuntu 10.04 instance running on EC2 [02:58] jaith, you are being beyond paranoid. [02:58] security currently locked down. only ssh port permitted, public cert auth required, and ssh access limited to my IP block [02:58] your going go that paranoid AND use ec2? [02:58] patdk-lap, ec2 is secure... [02:58] *sigh* [02:58] ahaha [02:59] jaith: "only ssh port" -- so http is currently blocked? [02:59] smw, I won't meantion my root issues with ec2 [02:59] <<>> [02:59] twb: yes until i get it set up :D [02:59] patdk-lap, I would like to hear them. :-) [02:59] Anyway, if the sshd binary is compromised, you might as well do a full reinstall. [02:59] check channel logs from november :) about the 18th [03:00] personally, i am wondering why it's so hard to sort my installed packages by main/universe/whatever [03:00] jaith: because Canonical don't want to make it obvious that their *supported* package list is fuck-all [03:00] patdk-lap, my entire company runs in amazon ec2 [03:00] jaith, cause if it was installed, it was assumed you already checked that [03:00] jaith: but you can check a specific package with "apt-cache policy foo" [03:00] twb: this is an entirely different machine, hosted on an entirely different network. i am no longer trying to do any sort of forensics on the old machine [03:00] patdk-lap, if used right, there are no security issues... [03:00] jaith: OK [03:00] twb: THANK YOU [03:01] smw, if used right, security patchs wouldn't accidentally be left out of the ec2 kernel :) [03:01] jaith: I run http://paste.debian.net/123601/ from cron.monthly on Lucid machines to check for unsupported packages [03:01] jaith: expect there to be half a dozen, even on a relatively small system :-/ [03:01] patdk-lap, is ubuntu bad at including security updates in their kernel? lol [03:02] smw only if it isn't a clean patch :) [03:03] this is a *brand spanking new compute instance* created from one of the "official" AMIs listed on the ubuntu site [03:03] i haven't installed a single thing myself yet [03:04] before i bother, want to check out existing installed packages (of which there are some 385) [03:04] seems like a lot of packages [03:04] i agree [03:04] but I always install minimal system though [03:05] smw: define "bad' [03:05] jaith, there are much more important places to use your security efforts. [03:05] most of them involve humans and access [03:06] humans and cgi's :) [03:06] smw: there is only one website running on this machine. i am the only developer. [03:06] no cgi access, etc. [03:06] php is cgi access [03:06] agreed that webstack and php files are probably least safe part [03:07] jaith: if you do an expert install, you can opt-out of restricted/universe/multiverse/backports being included in source.list to begin with. [03:07] twb, he did ec2 install [03:07] twb: i have no such choice with EC2 without creating my own AMI which, sadly, is beyond my skillset [03:07] Well, you might as well bend over and give amazon a free rein, then. [03:08] jaith, you are looking in the wrong places to deal with security concerns. [03:09] and yes... php can cause serious problems if setup wrong :-\ [03:09] there are new bugs for it way too often [03:11] let's assume, just for a moment, that this was an academic discussion and alllllll i wanted to do was determine the source of my installed packages. [03:11] like, let's make-believe and say i'm a security researcher or investigative blogger out to snitch on canonical, hm? [03:11] c'mon it'll be fun! [03:11] jaith, I would say that was pretty stupid. [03:12] smw: and I would say you are decidedly unhelpful [03:15] The ASCII art as promised: [03:15] _________________________ [03:16] || || || || [03:16] || ||, , ,|| || [03:16] || (||/|/(/||/ || Don`t [03:16] || ||| _'_`||| || Be [03:16] || || o o || || Mad [03:16] || (|| - `||) ||-------AAAAAAAAAAAAAAAAAAAA [03:16] || || = || || [03:16] MFU || ||(___)|| || [03:16] ||___||) , (||___|| UstupidMF ownz you! [03:16] (||---||-)_(-||---||) (say something,please talk to me [03:16] !ops [03:16] Help! Channel emergency! soren, lamont, mathiaz or tom [03:16] ( ||--_||_____||_--|| ) [03:16] (_(||)-| (%d) |-(||)_) [03:16] wtf? [03:17] smw: I think he's saying sshd emits that as motd or something [03:18] ah [03:18] twb, his "sshd binary was hacked" [03:18] twb, now I see how he came to that conclusion... [03:18] if you use 'strings' command on the sshd binary , it's in the binary somewhere [03:19] jaith, ok... [03:19] jaith: use a pastebin next time, please [03:20] additionally, a check of one's package checksums calls out ssh [03:20] twb: sorry [03:20] jaith, but you are still being unreasonably paranoid. You are acting like a programmer trying way too hard to optimize one line of addition that he does not realize he could index a column in a database and increase speed 1000 fold. [03:22] I don't understand what attack profile he's trying to guard against, nor how he's trying to go about it. [03:22] All I've heard so far is he's using a stock amazone base image, with a default-deny firewall. [03:23] twb, and he is afraid of the people who made the image (canonical) and not the people who will try to hack his server. [03:23] and you guys won't answer a simple question, preferring instead to wax philosophical about how I'm "doing it wrong" [03:24] believe me, i'd be happy to get advice on keeping the web stack safe when i get there [03:24] Well, I wouldn't trust foo.img to be a clean debootstrap of signed packages from archive.ubuntu.com [03:24] Certainly I think it's more productive to worry about his shitty PHP app [03:24] Since merely by being PHP means it's good odds that's how they got into the last system. [03:25] twb, that is not very constructive either ;-) [03:25] it's most definitely not constructive. he's stroking his e-peen [03:26] here's the other nifty part: if I can get a good, clean, baseline image, i can re-use it [03:26] the question is: how clean is it? [03:26] a fair question, wouldn't you agree? [03:26] EC2 makes it very easy to store a machine image and re-use it later [03:26] jaith, I am going to give up and just say you are trying to prevent the wrong type of attack. [03:27] smw: give up? you haven't even tried to answer my question. [03:27] smw: you've tried to tell me "i'm doing it wrong" [03:28] jaith, in the beginning I explained (in not much detail) how I would try to solve the problem you gave me (not the one you actually need to solve.) [03:28] smw: that's true. and i've made progress. [03:28] dpkg --get-selections | grep -oE '^[\.a-z0-9\-]+\s' | wc -l [03:28] returns exactly the same line count as dpkg --get-selections | wc -l [03:30] jaith, you need to trust something to start with. Canonical's image is a good choice. [03:30] I would also draw everyone's attention to this snippet from the ubuntu site: "The universe component is a snapshot of the free, open-source, and Linux world. It houses almost every piece of open-source software, all built from a range of public sources. Canonical does not provide a guarantee of regular security updates for software in the universe component, but will provide these where they... [03:30] ...are made available by the community. Users should understand the risk inherent in using these packages." [03:31] not guaranteeing security updates != untrusted packages from the "community" [03:32] yes but excluding *unnecessary* packages that may cease to be updated despite security holes is a valid concern [03:33] i can only think of two reasons why i'm not getting help here: 1) we are afraid of our faith in ubuntu being shaken or 2) we just don't know how [03:33] oh and possibly 3) disaffected griefers don't really have any interest in helping irritating noob [03:35] so maybe I'll try another question: will apt complain when a package or dependency package which is a) unsigned or b) signed by someone other than one of my very own apt keys? [03:37] I'm sorry, due to the lack of faith you have in this channel, I can no longer help you [03:37] Its bad form to insult people, and continue to ask for help [03:39] i apologize. i didn't mean to insult anyone. I was just hoping to get the answer to a specific question. smw has in fact helped some. i do believe it's fair to say my original question has gone unanswered. [03:39] thanks for your help anyway [03:57] fyi, this appears to be working approximately [03:57] dpkg --get-selections | grep -oE '^[+\.a-z0-9\-]+\s' | xargs apt-cache policy [03:58] some minor additional filtering results in 575 lines instead of the 383 i might expect -- this because the apt-cache policy command sometimes returns two lines for a given package [03:59] dpkg --get-selections | grep -oE '^[+\.a-z0-9\-]+\s' | xargs apt-cache policy | grep -E ' (lucid.*/[a-z]+)' [03:59] interestingly, not one line appears to reference 'universe' [03:59] dpkg --get-selections | grep -oE '^[+\.a-z0-9\-]+\s' | xargs apt-cache policy | grep -E ' (lucid.*/[a-z]+)' | grep universe | wc -l [04:04] jaith, I fail to see how that is surprising... [04:20] gday blokes [04:20] wikipedia runs on ubuntu server! [04:20] I can't fix that [04:55] good to see all ppl in this channel [05:01] bug 802464 [05:01] Launchpad bug 802464 in linux "linux: 2.6.38-10.46 -proposed tracker" [Medium,Fix released] https://launchpad.net/bugs/802464 [05:17] is there anyone who is using opensource inventory software for non-profit? [05:17] Sorry, I only turn a profit [05:18] Oh, sorry, misread [05:18] inventory software as in asset tracking? [05:19] twb: yes. it is for asset tracking but not tracking drivers or software .Just physical assets like toners or printer cartridges or CDs /DVDs in and out [05:19] Not sure [05:20] Tommy_nmw: I have not used it, but maybe http://asset-tracker.sourceforge.net/ will do what you need? [05:21] https://secure.wikimedia.org/wikipedia/en/wiki/Fixed_assets_management appears to be what you're thinking of [05:21] The ERP solutions I've dealt with were scary as all hell [05:22] jmarsden: I have checked it out. design is not cool. I am inspired by openERP. but it is linked with accouting and sales module. I just want stand alone inventory stock control module for nonprofit use. [05:23] Tommy_nmw: my gut tells me you aren't gonna get that [05:23] Tommy_nmw: If you know enough to criticize software design... write your own app to do what you need, then it will be designed perfectly for your needs :) [05:24] Tommy_nmw: that you'll either have to pick a crappy low-budget standalone implementation, or to delpoy a heavyweight do-everything one and just try to ignore the other modules [05:26] twb: no Free of charge solution ?? [05:26] twb: as we have no budget [05:27] Tommy_nmw: both those cases are assuming FOSS [05:28] Which isn't necessarily free-of-charge -- e.g. I'm assuming your time has value [05:30] twb: I can use only stock inventory only module. but they are linked with other accounting entries. so without entering those values, my records won't be complete to proceed [05:31] Tommy_nmw: bummer [05:32] twb: it depends on one's view [06:02] guys...i'm trying to change my default ssh port. I've changed it in /etc/ssh/sshd_config but when i try to restart the process is kicks out - could not load host key: for rsa and dsa keys [06:02] anything i can try before a restart? [06:11] ssh won't start if you don't have host keys [06:11] "sudo dpkg-reconfigure openssh-server" to create them if they are mising [06:16] *love [06:16] worked! [06:17] ^5'S TWB [06:17] lickalott: Error: "5'S" is not a valid command. [06:18] uvirtbot`: die [06:18] twb: Error: "die" is not a valid command. [06:20] lol [06:22] lickalott: btw, if this happened because you cloned an image, whoever built the image did that deliberately to prevent MITM attacks, and just forgot to tell you / automate the dpkg-reconfigure call [06:26] hi === smb` is now known as smb [07:21] ih [07:21] hi [07:22] does somebody know how to get proxy config screen during installation ? [07:24] http://dropbox.unl.edu/uploads/20110804/68422200eb6ca9d2/how%20to%20http%20proxy.png [07:28] Tommy_nmw: uh, it asks you when you configure the mirror to use [07:29] maybe you need priority=low; I don't normally do default priority installs [07:29] twb: now I am inside ubuntu server so how can I get that screen back to put some proxy settings to use internet [07:29] If you're installing hardy, ISTR it "helpfully" skipped the proxy step if it decided it could get out without asking [07:29] ? [07:30] Tommy_nmw: oh, right [07:30] Tommy_nmw: /etc/apt/apt.conf, and/or $http_proxy [07:30] acquire::http::Proxy "http://proxy:8080/"; IIRC === jibel__ is now known as jibel === greppy is now known as kc9uls === kc9uls is now known as greppy [09:12] I was just trying to upgrade to maverick, but got a couple of error messages regarding setting up procps; could anyone helpout? [09:23] Hi guys. Trying to sort out iptables but the server outputs "-bash: iptables: command not found - any thoughts/ [09:23] ? [09:26] SimpleAnecdote: check your path, iptables is usually in /usr/sbin [09:27] sorry, /sbin, not /usr/sbin [09:27] hi people [09:27] greppy - cheers. Apparently I didn't have iptables installed! === dark-sun is now known as dark-sun|lunch [09:28] path sorts out automatically on Ubuntu. It's CentOS and other REHL that have the path issue I think [09:28] I have not touched a command line in a while [09:29] it depends on your environment :) [09:30] greppy: I am over my head with these iptables. I wanted to access them because webmin did not respond via remote browser. But internally, it fetched index.html... Any ideas? [09:35] is webmin listening on the external interface? ( keep in mind webmin is pretty much app non grata on ubuntu ) [09:35] greppy: really? I didn't know that [09:35] I just hate CentOS so much... [09:36] What GUI control panel do people use on Ubuntu? cPanel only? [09:38] I don't know, I'm a cli junky :( [09:39] I use froxlor for webhosting, but the rest of the box is managed from the cli. [09:39] that's awesome. I fear I am not a savvy enough person to CLI my way through managing the box [09:39] I had to google VIM commands not 10 minutes ago! [09:40] :) [09:41] another option may be to use nano or joe, which can be a little easier to use, joe can use wordstar keybindings if you know them. [09:41] VIM is fine. I've used it in the past (but long long long ago). Once I have the cheatsheet open in the browser, it's pretty easy [09:42] I have no idea how to sort out this webmin crap [09:42] what are you trying to do with webmin? [09:43] get it to work ;P [09:43] trying to access it via browser results in 'Page not found' [09:44] hello everyone!! I have a question about installation step in phpMyadmin. can anyone help me? [09:45] however, wget https://localhost:10000 --no-check-certificate fetches index.html properly [09:45] just a remote browser problem [09:45] Tommy_nmw: what's the question [09:46] SimpleAnecdote: I am now being asked "configure database for phpmyadmin with dbconfigure-common? As I have no idea to create database now, Can I say NO ? and later , how can I get that screen back? [09:47] Tommy_nmw: Accept dbconfigure-common [09:47] SimpleAnecdote: http://dropbox.unl.edu/uploads/20110804/0b61b8c21d4405e0/IMG_0743.JPG [09:47] it will create it automatically for you [09:47] SimpleAnecdote: if the database name or configuration is not matched with the application I would use in future, what do I do? [09:47] SimpleAnecdote: I am not smart at DB related [09:49] Tommy_nmw: this is not a database for any application. This is a database for phpmyadmin to use for some operations. Just accept dbconfigure-common, and then (once you've configured apache to redirect to it) go to http://yourhostname.exi/phpmyadmin [09:49] you will be able to create as many DBs as you want [09:49] under any name [09:49] and manage them easily via phpmyadmin [09:49] SimpleAnecdote: check the config, wherever webmin sticks it, and make sure that it is setup to listen on your network interface. [09:50] SimpleAnecdote: another option would be to use ssh to port forward and get access that way. [09:50] greppy: I am on SSH right now... I have NO GUI at the moment for anything [09:51] I've been installing my machine via SSH [09:51] I've put this command in: iptables -I INPUT 1 -p tcp --dport 10000 -j ACCEPT [09:52] SimpleAnecdote: thanks bro. done [09:52] Tommy_nmw: no problems. If you have any other questions - just ask [09:53] you might want to try php channels though ;P [09:53] SimpleAnecdote: if you didn't have iptables installed before, that shouldn't be the problem. [09:53] what happens when you try to telnet to port 10000 from another machine? [09:54] greppy: I haven't tried [09:54] SimpleAnecdote: I am now chatting from Windows XP , ubuntuserver is by my side. in the same network.. I would like to know how can I log in to phpmyadmin from Windows XP browser === dark-sun|lunch is now known as dark-sun [09:55] Tommy_nmw: Put this "Include /etc/phpmyadmin/apache.conf" (without quotation marks) in /etc/apache2/apache2.conf (at the end of the file) [09:56] now I got it with IP address. but I dont know what is username for login [09:56] Tommy_nmw: Once you do that, from the XP machine - just open browser, type in ubuntu http://ip/phpmyadmin [09:57] google default phpmyadmin user/pass for your installation. I believe it should be your MySQL root user [09:57] SimpleAnecdote: I now can see log in page as you said. but I do not know what username it is. I was asked only for password during installation [09:57] Tommy_nmw: oh, try 'admin' or 'root [09:57] ' [09:57] I'm about to buy a server, is it a good idea to assemble it instead of buying from HP? [09:57] SimpleAnecdote: why are you so brilliant? It works now [09:58] Tommy_nmw: I am not. I have just done it loads of times before. [09:59] greppy: I don't really know what to do then. The connection is not getting through [09:59] SimpleAnecdote: btw, I would like to know how I can connect to that server with domain name instead of http://ipaddress/phpmyadmin. [09:59]