[01:07] <grendal-prime_> anybody use vlan?
[01:08] <grendal-prime_> im wondering if its possible to bridge kvm guests to a vlan interface
[01:08] <lifeless> sure
[01:08] <lifeless> make configure libvirt to use the vlan
[01:09] <grendal-prime_> im talking vlan as in the vlan created by the vlan_1.9 package on ubuntu
[01:09] <lifeless> one way to do that is to setup a bridge interface that has the vlan as a member and configure that bridge as the bridge to connect to in /etc/libvirt...
[01:09] <grendal-prime_> duuuuude...you and i need to powwow
[01:10] <grendal-prime_> thats exactly what i want to do...is it crazy that kvm does not support some sort of vlan that doenst much with your iptables rules or what!!
[01:10] <grendal-prime_> i mean   DUUUUUDE!
[01:11] <grendal-prime_> and i ment muck not much
[01:11] <grendal-prime_> so basically your confirming my question...doctor?
[01:12] <grendal-prime_> this is dooable right?
[01:12] <lifeless> yes, as far as I know. I have done similar, but not to a vlan.
[01:13] <grendal-prime_> bummer
[01:13] <grendal-prime_> ok sooo you did that with....what?
[01:14] <grendal-prime_> an aliased nic?
[01:14] <grendal-prime_> cause that didnt seem to work two well for m
[01:14] <grendal-prime_> e
[01:14] <lifeless> no, you definitely need a bridge
[01:14] <lifeless> the default one that libvirt uses is virbr0
[01:14] <lifeless> you can just configure that one manually if you want
[01:15] <twb> OK, so offtopic question.  In lucid gnome you have a "floppy" icon separate from the normal file:/// unix directory tree, and clicking on it makes it mount the floppy.
[01:15] <twb> Is there a gnome vfs URL that refers to that icon directly?
[01:16] <grendal-prime_> in media i think
[01:16] <twb> If I patch oo.org's XML to save to file:///media/disk, that's seperate from the floppy icon.
[01:16] <grendal-prime_> usually it mounts to /media/floppy0
[01:17] <twb> The issue isn't where it mounts it
[01:17] <KM0201> what command do i run, to see who all is a member of a particular group (samba)
[01:17] <twb> The issue is how to tell gvfs I mean "the floppy" as opposed to the mountpoint
[01:26] <twb> Apparently just guessing floppy:// didn't work
[03:46] <hallyn> stgraber: lp:~serge-hallyn/ubuntu/oneiric/lxc/ephemeral has the changes I was hoping you would roll into tomorrow's push.
[03:46] <hallyn> smoser: ^ that has *some* fixes for your problems, not 100%
[03:47] <hallyn> smoser: a new upstart job is symlinking /dev/ptmx to /dev/pts/ptmx, but some pecker is STILL removing that after the fact.
[04:51] <twb> On hardy, squid isn't starting.  It complains: WARNING: database_acl #2 (FD 13) exited [...]  Too few database_acl processes are running The database_acl helpers are crashing too rapidly, need help!
[04:51] <twb> How do I find out WHY the database_acl processes are dying?
[04:51] <twb> Hmm, come to think of it, ACL will be the horrible shit <coworker> wrote to fake it a hookup to unkerberized LDAP.
[04:52] <twb> Oh, brilliant, squid is one of those stupid daemons that does its own non-syslog(3) logging
[04:54] <twb> OK, ignore me, problem found.
[04:55] <Demosthenes> anyone on here currently supporting diskless workstations?
[04:59] <twb> Demosthenes: yes
[04:59] <twb> What is your REAL question?
[05:00] <pukeko> howdy - i want to change a users uid.guid to match their uid.guid on another server -- will they still be able to access their files or will there be probs ?
[05:01] <twb> pukeko: vipw, vigr, vipw -s, vigr -s, then something like "chown -R fred: /home/fred" and look for anything else with "find / -xdev '(' -nouser -o -nogroup ')' -ls"
[05:01] <twb> pukeko: may also need to reboot to clear out any UID-based files in /tmp and friends
[05:01] <lickalott> diskless as in cloud computing?
[05:01] <twb> pukeko: obviously you can solve this permanently by using some form of centralized authentication, e.g. krb, ldap, nis,
[05:01] <pukeko> twb: cool - was wondering if i would have to doa chown..
[05:02] <twb> pukeko: files remember a uid not a user name, so you will
[05:02] <pukeko> twb:sweet
[05:10] <Demosthenes> twb: really jsut if anyone had it working ;]
[05:10] <Demosthenes> twb: i know i'm close. i have created a /disklessroot using natty via debootstrap, updated it in chroot, created kernel/initrd/pxe image, and my clients boot successfully, but hang at the end of the initfs scripts
[05:11] <twb> Demosthenes: just use casper
[05:11] <twb> Or if you can switch to debian, use live-initramfs, which is actively maintained and MUCH nicer to work with
[05:13] <Demosthenes> i was aiming for xubuntu clients.
[05:13] <Demosthenes> casper eh
[05:14] <twb> casper can be made to work, it's just that it's really only there for the live CDs, and not intended for use by us end users making netboot farms.
[05:15] <Demosthenes> just a handful, my kids school machines. ;]
[05:41] <Demosthenes> twb: live-boot and friends are in aptitude, can't just isntall them?
[05:41] <twb> Maybe
[05:42] <twb> Last time I looked nobody was trying to support them
[06:16] <twb> Suppose I create an ext filesystem with 5% reserved for root
[06:16] <twb> *THEN* I resize it from 2G to 256G.  Is the reserved space increased to stay 5%, or does it stay at n blocks and become much less than 5%
[06:17] <Demosthenes> no idea.
[06:23] <Demosthenes> twb: fixed my issue
[06:24] <Demosthenes> i was booting, and it'd freeze. turns out network maanger was trying to restart the eth0 interface.
[06:24] <Demosthenes> i had to set that to manual in /etc/network/interfaces, and they boot fine now
[06:24] <twb> Demosthenes: NM is the biggest cause of network issues IME
[06:24] <Demosthenes> sucks eh
[07:13] <lng> hi! I have added new user and set password to it. then I restrict this user to SFTP with the following comands: `usermod -s /usr/lib/sftp-server username && echo '/usr/lib/stfp-server' >> /etc/shells`. As result I couldn't `su username` to it. what am I ddoing wrong?
[07:46] <lng> solved
[09:58] <progre55> hi guys. how do you bind a host alias to a domain name?
[09:59] <greppy> progre55: huh? what are you trying to do?
[10:00] <progre55> I'm using amazon ec2, and have an elastic ip, but cannot address the direct IP address, as I dont want to get charged for inter-server communications. So I need to connect to a domain name smth like ec2-49-21-76-234.eu-west-1.compute.amazonaws.com, but I'd like to have an alias for it
[10:01] <progre55> in my /etc/hosts I could bind my alias to an IP address, but how do I bind it to this long domain name?
[10:02] <greppy> you're still going to be addressing the direct IP
[10:03] <greppy> using /etc/hosts and dns just gives you an easier name to use instead of the ip address
[10:06] <progre55> greppy: it's just, when you query that domain from within amazon, it resolves to a private IP address, but from outside amazon, it resovles to a public IP, and when you connect to the private IP from within amazon, you dont pay for traffic, but if I bind it to the public IP address, then they charge for every connection.
[10:06] <progre55> and the private IP might change when you restart a server, but the public IP doesnt
[10:06] <greppy> ah
[10:07] <trapmax_> so you should check your ip on every restart and use that in hosts
[10:07] <greppy> or use dns and setup a CNAME to point to the dns name that amazon supplies.
[10:08] <progre55> yeah, that might work, greppy, thanks
[10:08] <progre55> I anyways use amazon route 53
[10:38] <trapmax_> i need to install windows to many eeePC clients. what program would you recommend for such a situation?
[12:32] <blahdeblah> What do i need to do with lucid server to enable .php extensions to be recognised by default?  I tried the steps noted in https://help.ubuntu.com/community/ApacheMySQLPHP and it's all fine.  libapache2-mod-php5 is installed, a2enmod php5 reports it is enabled, apache2 restarted, yet when i try to access http://server.example.com/~myuser/test.php, it downloads it (as a PDF document!) rather than displaying the page.  Where to n
[12:33] <blahdeblah> BTW, i've also checked that the file is readable by www-data.
[12:39] <patdk-wk> blahdeblah, have you bothered to read the comments in /etc/apache2/mods-enabled/php5.conf
[12:39] <patdk-wk> php is disabled in userdir's per default
[12:39] <blahdeblah> OK
[12:39] <RoyK> http://wimp.com/manchesterriots/
[12:41] <blahdeblah> thanks, patdk-wk
[12:41] <sfergut> hello
[12:41] <sfergut> there is a problem with ubuntu server 11.04 hardware detection ?
[12:42] <sfergut> it can not detect my network card and my disk
[12:42] <patdk-wk> what networkcard and disk controller are you using?
[12:42] <patdk-wk> and is this during install? or after install?
[12:43] <RoyK> not detecting the disk _after_ install? ;)
[12:44] <patdk-wk> royk, I have seen issues where the install works fine, but not when booting the system :)
[12:44] <patdk-wk> normally driver left out of initrd
[12:45] <sfergut> patdk-wk: it does not detect it during install
[12:45] <sfergut> i have an  Broadcom NetXtreme II BCM5708 1000Base-SX linux module bnx2
[12:46] <sfergut> and LSI pci express card with an ibm card
[12:46] <sfergut> linux module working on centos 5 is mptsas
[12:47] <sfergut> sorry ibm drive there not card
[12:47] <patdk-wk> hmm odd
[12:47] <patdk-wk> I haven't had an issue with mptsas here on 11.04
[12:48] <patdk-wk> you shouldn't with bnx2 also, but I haven't tested that here, only with 10.04
[12:48] <sfergut> i executed the shell and modprobe bnx2 and modprobe mptsas still nothing
[12:49] <patdk-wk> might be megaraid_sas name instead
[12:49] <sfergut> i tried that too without look
[12:49] <sfergut> luck
[12:51] <patdk-wk> what model lsi card?
[12:53] <sfergut>  LSI Logic / Symbios Logic SAS1064ET PCI-Express Fusion-MPT SAS
[12:54] <sfergut> also see this for the network card http://imageshack.us/photo/my-images/33/unledab.jpg/ after the modprobe bnx2
[13:11] <patdk-wk> hmm, firmware not running issue
[13:11] <patdk-wk> I know I had to change the firmware on my bnx2's when I installed linux on them
[13:15] <patdk-wk> I wonder if it's cause of the firmware split, of non-free
[13:16] <sfergut> i put know 10.04 and it works fine on hardware detection
[13:16] <sfergut> *now
[13:16] <sfergut> guess i will stick with 10.04 for now as i need it only for mono software testing
[13:17] <patdk-wk> probably if you install 11.04
[13:17] <patdk-wk> and manually install non-free firmware from apt first
[13:17] <patdk-wk> it would work
[13:24] <sfergut> well that will take more time as the network card is not working
[13:24] <tcsadmin> anyone here tried using centrify express to add an ubuntu 10.10 server to active directory?
[13:27] <patdk-wk> nope, I just do it using kerberos
[13:29] <tcsadmin> i'm trying to make my squid proxy use windows credentials for authentication. i'm goal is to get login names from SARG reports instead of ip
[13:32] <kim0> tcsadmin: check out https://help.ubuntu.com/community/DirectControl
[13:32] <hallyn> smoser: so I think I'm going to change the lxc ephemeral tree, to not put pts/0 into securetty, *and* to not start console.conf for libvirt
[13:32] <hallyn> smoser: have you had any more insight into wtf is going on with ptmx?
[13:34] <Dori922> hey dudes i have a server on a home network(with a private IP), it connects to my home router which has a public IP
[13:34] <Dori922> can i SSH into the server from outside my network
[13:34] <Dori922> i can do it from inside all right..
[13:34] <Pici> Dori922: You'll need to forward port 22 from your router to your server.
[13:35] <smoser> hallyn, no, not really looked at it todoay
[13:35] <tcsadmin> kim0 - got it.  i had to use the -u switch to specify a domain admin account! it worked! :)
[13:35] <patdk-wk> and if it can't, configure the dmz option instead, but make sure the firewall on the server is good
[13:35] <kim0> tcsadmin: woohoo :)
[13:35] <Dori922> Pici: how do i do that? i have port 22 authorized on the server and the PC im trying to SSH with
[13:35] <Dori922> the router i have is a bog standard belkins one
[13:36] <tcsadmin> kim0 - now i have to do some digging on how to setup ad stuff for students/staff and internet control. tks
[13:36] <kim0> cool
[13:37] <Pici> Dori922: This website might be able to help you forward that port: http://portforward.com
[13:39] <Dori922> Pici: ty <3
[14:05] <sfergut> patdk-wk thanks for your help have a good day
[14:11] <stgraber> hallyn: ok, got your branch.
[14:23] <hallyn> smoser: i'm going to try and figure out what's doin ghtat with the help of inotify
[14:23] <hallyn> once i'm re-bootstrapped
[14:24] <smoser> hallyn, i'm now seeing issues with libvirt
[14:24] <smoser> it doesn't seem to think cgroups is mounted
[14:24] <smoser> error: internal error The 'cpuacct', 'devices' & 'memory' cgroups controllers must be mounted
[14:25] <smoser> hallyn, ^
[14:26] <hallyn> smoser: then fix your broken system
[14:27] <smoser> your code set up my broken system
[14:27] <lynxman> hallyn: same happened to my broken system too
[14:27] <smoser> s/set up/broke/
[14:27] <hallyn> which code?
[14:27] <smoser> cgconfig i think
[14:29] <hallyn> besides not being my code, afaik that hasn't changed recnetly has it?
[14:29] <smoser> description "cgconfig"
[14:29] <smoser> author "Serge E. Hallyn <serge.hallyn@ubuntu.com>"
[14:29] <lynxman> smoser: that name looks pretty close to hallyn
[14:29] <hallyn> heh, that's the upstart job.
[14:30] <hallyn> anyway, i can't seem to debootstrap to give me a clean ifconfig right now
[14:31] <hallyn> smoser: can you give me /proc/mounts contents?  I'm really not seeing what could've broken since ysterday
[14:32] <smoser> http://paste.ubuntu.com/663441/
[14:33] <smoser> i think the difference is that i had not installed cgroups... maybe..
[14:33] <smoser> not really sure
[14:34] <hallyn> lxc depends on it, so if you had that installed it should've pulled cgroup-bin
[14:34] <hallyn> the cgroup mounts are there...  so is it now working for you?
[14:35] <smoser> maybe. maybe i didn't have lxc installed... i dont knwo. but one way or another, libvirt is not working for me.
[14:35] <smoser> it is not working
[14:36] <hallyn> just for kicks, try 'mv /etc/mtab /etc/mtab.no; ln -s /proc/mounts /etc/mtab'
[14:37] <smoser> no dice
[14:40] <smoser> just tried restarting libvirt-bin. no help there.
[14:40] <hallyn> cat /proc/`which libvirtd`/cgroups
[14:40] <smoser> ubuntu@ec2-174-129-59-115.compute-1.amazonaws.com if you're interested
[14:41] <smoser> you probably meant pidof ?
[14:42] <hallyn> yeah that one
[14:42] <smoser> http://paste.ubuntu.com/663451/
[14:43] <RoAkSoAx> Daviey: adam_g howdy!! so what's your status?
[14:44] <adam_g> RoAkSoAx: makin coffee. you?
[14:45]  * genii-around sips
[14:46] <zul> smb: im in the midle of pushing a new xen to the archive fyi
[14:46] <smb> zul, Cool, thanks. Will look at it when it gets through
[14:48] <Daviey> RoAkSoAx: otp atm
[14:58] <RoAkSoAx> adam_g: about to do the same
[14:59] <RoAkSoAx> adam_g Daviey what's your progress on deploying using oirchestra?
[14:59] <adam_g> RoAkSoAx: have been busy with other things, working on getting the devenv going now to work on it locally. don't have time/patience to wait for real servers to power cycle/install ATM
[15:02] <RoAkSoAx> adam_g: lol ok
[15:13] <smoser> zul, error: internal error The 'cpuacct', 'devices' & 'memory' cgroups controllers must be mounted
[15:14] <hallyn> smoser: dunno, i did 'stop libvirt-bin; start libvirt-bin' and now it works
[15:15] <smoser> hallyn, verified here.
[15:15] <smoser> restart seems not to restart
[15:16] <TeTeT> hallyn: hi, would you know of a way to determine if a kvm machine is dead from the hosts command line? the system reacts to ping, but ssh is impossible. kvm on UEC 11.04 is that
[15:18] <patdk-wk> tetet sounds like a memory/ulimit issue
[15:18] <patdk-wk> system is still running, but can't spawn a thread to run a new program anymore
[15:22] <TeTeT> patdk-wk: any way to check that from the host?
[15:23] <patdk-wk> I don't do kvm
[15:23] <TeTeT> ok, thanks
[15:23] <patdk-wk> but since it's a real vm
[15:23] <patdk-wk> all you can do is look at the console
[15:23] <patdk-wk> maybe attempt to read the log files if you can access the kvm guest disk
[15:24] <patdk-wk> but attempting to login to it won't work, till the problem is fixed
[15:24] <patdk-wk> normally I just wait 15-30min for it to fix itself, or reboot it
[15:26] <smoser> hallyn, i'm opening a bug on libvirtd-bin
[15:31] <hallyn> TeTeT: sorry, no, depending on what you mean by 'dead' i don't...
[15:32] <RoAkSoAx> smoser: any ideas? http://paste.ubuntu.com/663477/
[15:32] <hallyn> TeTeT: id' say open up a console...  restart kvm with -serial tcp::2222,server if you have to
[15:32] <hallyn> smoser: ok.  this started today?  i'm wondering whether the update for libnl3 did it
[15:33] <hallyn> haven't reproduced it though
[15:34] <hallyn> smoser: if possible please lay out inthe bug precisely how you bootstrapped the system... ie what order you installed packages in
[15:41] <TeTeT> lborda: ^^
[15:42] <TeTeT> hallyn: not sure if that's possible, as it's a UEC instance that's lost it's IP. but if we don't terminate it with euca-terminate-instances, then we can probably still inspect the image file that way?
[15:54] <hallyn> TeTeT: yeah
[15:54] <hallyn> (qemu-nbd or whatever)
[16:38] <jits1998> hi guys.. we have multiple labs running in different ip ranges, we would like all of them to access internet from the same gateway ... we tried putting vlan on gateway, but it seems to "block" all non-google sites.. is it possible to assign mulitple ips in different ranges to a single gateway without VLAN>
[16:40] <jits1998> anyone ?
[16:44] <kirkland> RoAkSoAx: http://paste.ubuntu.com/663536/
[16:45] <patdk-wk> jits1998, sure, with or without vlans
[16:45] <patdk-wk> it doesn't really matter
[16:45] <patdk-wk> but the vlan issue isn't causing your problem
[16:47] <jits1998> patdk-wk: thanks.. i am not able to figure out what else can .. i feel that vlan tag is leaking out and only google sites respond to vlan tagged ip requests ..
[16:47] <patdk-wk> vlan stuff can't *leak*
[16:47] <patdk-wk> cause if it did, it would be an invalid packet
[16:49] <jits1998> patdk-wk: ok.. any idea how this can be degugged ?
[16:49] <patdk-wk> tcpdump :)
[16:49] <jits1998> patdk-wk: don't see any error in iptables log ..
[16:50] <jits1998> tcpdump: no suitable device found :: :-/
[16:50] <patdk-wk> you have to actually know how to use the debugging tools, in order to debug
[16:51] <jits1998> patdk-wk: yeah ... :-| .. though i have another similar setup for backup connection .. which uses another ISP .. and proxy works fine..
[16:51] <jits1998> this one i tried with proxy as well .. but doesn't work :-(
[16:51] <jits1998> proxy = squid
[16:51] <jits1998> is there any guide/tutorial to help me debug this ? .. its been 3 weeks we are struggling with this issue ..
[16:55] <Olotila> Do you have book recommendations for using ubuntu or ubuntu server? Most comprehensive possible.
[16:55] <tcsadmin> jits1998 - have you tried #networking?
[16:55] <jits1998> tcsadmin: i thoguht this is related to ubuntu server which is our gateway .. will try there if its more relevant there ..
[16:56] <tcsadmin> jits1998 - sound more related to networking and it won't hurt either
[16:57] <tcsadmin> Olotila - you need to be more specific. e.g. i'm looking for a web server or a gui desktop
[16:57] <jits1998> tcsadmin: trying ...
[16:58] <tcsadmin> jits1998 - what are you trying to accomplish?
[17:02] <jits1998> hi guys.. we have multiple labs running in different ip ranges, we would like all of them to access internet from the same gateway ... we tried putting vlan on gateway, but it seems to "block" all non-google sites.. is it possible to assign mulitple ips in different ranges to a single gateway without VLAN>
[17:03] <jits1998> i feel that vlan tag is leaking out and only google sites respond to vlan tagged ip requests ..
[17:03] <Olotila> well, if there is a book that contains both aspects, that would be nice
[17:03] <jits1998> tcsadmin: that was a repost for you .. thanks.
[17:05] <tcsadmin> jits1998 - np. just make sure you leave your IRC client on 24x7 as folks are global
[17:06] <jits1998> tcsadmin: yeah .. will keep reposting as much as i can .. :-)
[17:07] <tcsadmin> jits1998 - repost every couple hours
[17:08] <patdk-wk> heh, I would say much more info is needed
[17:08] <patdk-wk> cause everything you said so far isn't the issue
[17:08] <patdk-wk> vlans, squid, ... are not the problem
[17:09] <patdk-wk> do you have a vlan enabled switch?
[17:10] <jits1998> patdk-wk: yes we have a smart switch that does the vlan-ing for us ..
[17:10] <patdk-wk> ok
[17:10] <patdk-wk> and the *test* lab computers, you assigned their default vlan as vlan x, on the switch, and told it to pass vlan x as untagged
[17:10] <patdk-wk> per port per test machine?
[17:10] <jits1998> everything else we wanted is working fine.. e.g. single dhcp server scoped out on vlan
[17:11] <jits1998> yes .. per port per room ..
[17:11] <patdk-wk> ok, and gateway has all the vlans set to tagged mode?
[17:13] <jits1998> yes .. dhcp system is the gateway ..
[17:13] <jits1998> actually let me explain the network fully ..
[17:14] <jits1998> we have n+1 vlans.. n for rooms, 1 for faculty  .. we have 3 connections .. 1 for labs, 1 for faculty and 1 backup for trainer systems in labs ...
[17:16] <patdk-wk> want to pastebin your /etc/network/interfaces and a iptables dump?
[17:16] <jits1998> everyone gets the ip from the same dhcp server (scoped on vlan) .. for rooms the gateway is the dhcp machine (no direct internet, only via proxy) ... for trainer the net is via a router in the same vlan without tagging (works fine)
[17:17] <jits1998> iptables -L ?
[17:18] <patdk-wk> at a min, iptables -nv -L, iptables -t nat -nv -L
[17:19] <jits1998> http://paste.ubuntu.com/663560/
[17:20] <jits1998> http://paste.ubuntu.com/663562/
[17:20] <jits1998> this server is added as tagged in all vlans ..
[17:20] <jits1998> there are some services like teamviewer/skype work perfectly :-)
[17:21] <patdk-wk> that is a very strange iptables for a gateway
[17:21] <patdk-wk> oh wait, ACCEPT
[17:21] <patdk-wk> it's a wide open relay
[17:22] <patdk-wk> missing iptables -t nat -L -nv
[17:23] <jits1998> http://paste.ubuntu.com/663563/
[17:24] <jits1998> its all screwed up right now.. we need only 22 open technically ..
[17:24] <patdk-wk> that is the same thing again
[17:24] <patdk-wk> missing iptables -t nat -L -nv
[17:24] <jits1998> oh sorry .
[17:25] <patdk-wk> jits, no, you have 5 ports open on the gateway
[17:25] <patdk-wk> but WORLD is open for forwarded connections
[17:25] <jits1998> http://paste.ubuntu.com/663565/
[17:25] <patdk-wk> so if I ping 10.1.21.100, I could get to that box directly
[17:25] <patdk-wk> atleast if I was your isp, or close enough
[17:26] <jits1998> patdk-wk: :-o .. is it ?
[17:26] <patdk-wk> FORWARD (default ACCEPT)
[17:26] <patdk-wk> same things if you care, vlan to vlan can talk to each other, unrestricted
[17:26] <jits1998> yeah .. drop is there as commented out for now..
[17:27] <jits1998> patdk-wk: no problem with talking to each other. idea was to keep the network smaller for each lab ..
[17:28] <jits1998> track anti-virus updates, proxy (in future) etc ..
[17:29] <patdk-wk> I would change that masq rule to
[17:29] <patdk-wk> hell
[17:29] <patdk-wk> what is the internet facing interface?
[17:29] <jits1998> hell :-|
[17:30] <patdk-wk> oh eth1
[17:30] <patdk-wk> add an -o eth1 do it's line
[17:30] <jits1998> it was eth0 .. but trying around with having eth1 as untagged in the gateway's mini-vlan ..
[17:30] <patdk-wk> and you might need to exclude 10.1.0.x from it
[17:31] <patdk-wk> maybe before it add an -s 10.1.0.0/24 -j ACCEPT
[17:31] <jits1998> can you give me full line ..
[17:31] <patdk-wk> nope
[17:31] <patdk-wk> this would probably be better
[17:32] <patdk-wk> iptables-save | pastebinit
[17:32] <patdk-wk> not used to working on iptables configs with <1000 lines
[17:33] <jits1998> http://paste.ubuntu.com/663572/
[17:34] <jits1998> less than 1000 lines :-P .. never gone past 100 lines.. (on three systems put together) :-P
[17:34] <patdk-wk> my home system, doing 4 vlans is 1145 lines
[17:34] <patdk-wk> work one is around 3k
[17:35] <jits1998> whoops .. *bow*
[17:35] <patdk-wk> na, I don't use iptables directly to make it, that would be impossible
[17:36] <jits1998> tried some tools .. could not "control" them .. like doing things by hand :-)
[17:36] <patdk-wk> I use shorewall
[17:36] <jits1998> too many options for me in that :-P
[17:37] <cloakable> I use pfsense >.>
[17:39] <jits1998> i don't know if firewall has anything to do with it..
[17:40] <jits1998> it = blocking/slowing down non-google sites .. some other sites partially load ..
[17:41] <patdk-wk> do all your switchs say they support vlans and handle mtu of 1504?
[17:41] <patdk-wk> normally they do
[17:42] <RoyK> MTU 1500 or 1504 is the ethernet basis
[17:42] <RoyK> anything supports that
[17:45] <patdk-wk> well, some switchs wont do 1504
[17:45] <jits1998> we have only 2 main switches where vlans are configured .. both connected via a fibre .. problem is same on both sides ..
[17:45] <patdk-wk> and so won't pass vlans
[17:45] <patdk-wk> but if the switch does vlans, shouldn't be the issue
[17:46] <patdk-wk> well, to fix the masq rule, use iptables -A POSTROUTING -o eth1 -j MASQUERADE
[17:46] <patdk-wk> but I don't see anything else to cause an issue
[17:46] <patdk-wk> are you on dsl?
[17:46] <jits1998> vlans are okay .. dhcps are distributed fine, the gateway sees the ips all fine...
[17:47] <patdk-wk> dhcp would never send a packet >1500 bytes :)
[17:47] <jits1998> the problematic one is a leased line..
[17:47] <patdk-wk> what mtu is on it?
[17:47] <jits1998> no idea.. how do i check ?
[17:47] <patdk-wk> ifconfig
[17:47] <patdk-wk> and after that, probably a tracepath
[17:48] <jits1998> right now its configured on the router.. ..
[17:48] <RoyK> probably 1500 unless it's changed
[17:48] <patdk-wk> well, if it's dhcp configured :)
[17:48] <patdk-wk> if it's static, ya 1500 will be default
[17:48] <RoyK> 1514 is the ethernet default with headers and all
[17:48] <jits1998> set to 1500 .. can change it if needed..
[17:49] <patdk-wk> do a, tracepath 66.36.239.66
[17:49] <patdk-wk> just kill it when it says no replay
[17:49] <patdk-wk> reply
[17:49] <jits1998> tracepath work fine from all systems .. :-)
[17:49] <patdk-wk> yes, but what mtu does it say?
[17:50] <jits1998> http://paste.ubuntu.com/663583/
[17:50] <jits1998> its a field in router config.. set to 1500 currently..
[17:50] <patdk-wk> hmm
[17:51] <patdk-wk> dunno, doesn't seem to be a network or firewall issue
[17:51] <patdk-wk> dns server?
[17:52] <jits1998> everything is looked up fine.. browser keeps "waiting for xxx.com..." ..
[17:52] <jits1998> funny thing .. once i installed proxy it worked fine.. then again went down .. :-|
[17:52] <patdk-wk> can you load patdk.us?
[17:52] <jits1998> i don't have access to any problematic system right now..
[17:53] <patdk-wk> going be hard to find the issue then
[17:53] <jits1998> another thing that might help .. if i have a system in 10.1.0.x range.. where vlan is not used.. this gateway works like a charm .. that makes me think its the vlan that is the issue ..
[17:54] <patdk-wk> 90% of my systems use vlans, never had an issue
[17:54] <patdk-wk> I have had a vlan switch that would leak broadcast traffic across vlans though, causing issues
[17:54] <patdk-wk> firmware upgrade fixed it though
[17:55] <jits1998> there are three gateways on the same vlan.. two work fine. this one cries all over :-| .. could the problem be with a particular port on switch ?
[17:55] <patdk-wk> only if the vlan config is set wrong on it
[17:56] <jits1998> the dhcp and this one are completely same config all over . except dhcp server doesn't act as internet gateway .. just default gateway and passes on the traffic to proxy server ..
[17:57] <patdk-wk> that line makes no sense to me
[17:59] <jits1998> all classrooms get the dhcp server ip (in their range) as default gateway .. .. the access to internet is via a squid proxy set on 10.1.0.x system ..
[18:00] <jits1998> only difference in this problematic system which Acts as gateway configured manually on selected systems is that this has router instead of proxy acting as gateway ..
[18:03] <patdk-wk> in my setups, I normally do isp -> server (with vlans, dhcp, dns) -> vlans for each user group
[18:03] <patdk-wk> where I have a public vlan, secure vlan, and maybe a few dmz vlans
[18:04] <patdk-wk> now I will say, dhcp acts funny on vlans, but seems to work ok though
[18:04] <patdk-wk> but otherwise everything works like it should
[18:05] <patdk-wk> dhcp sees dups cause it sees the vlan tagged packet and the untagged packet both, so it responds to both the raw interface and the vlan interface
[18:05] <patdk-wk> doesn't cause a problem in real usage though
[18:05] <jits1998> patdk-wk: dhcp works fine for me .. these problematic systems have static ips as their gateway is going to be different from the others
[18:05] <patdk-wk> a different gateway wouldn't cause issues
[18:06] <patdk-wk> and we can't even begin to guess what is going on without a problem workstation to test with
[18:06] <patdk-wk> so far everything looks fine
[18:07] <jits1998> where are you located ? i can get access to a system in about 10 hours from now . .
[18:08] <jits1998> then i can share the access to any system you need ..
[18:09] <jits1998> right now i can only access servers.. which all work fine.. :-|
[18:09] <patdk-wk> heh, 10hours from now is 12am for me :)
[18:10] <patdk-wk> I might be around
[18:10] <jits1998> okay .. found one :-)
[18:11] <jits1998> can you access via team-viewer ?
[18:11] <patdk-wk> what is team-viewer?
[18:11] <jits1998> its a windows system
[18:11] <jits1998> www.teamviewer.com .. nice remote access app ..
[18:12] <patdk-wk> I can do pcoip, rdp, vnc, nx, x, ...
[18:13] <jits1998> i know only rdp and vnc .. both difficult behind firewall..
[18:13] <jits1998> see if u can download teamviewer.. should be a quick install ..
[18:16] <patdk-wk> well, I have no windows workstations
[18:16] <patdk-wk> oh they do linux
[18:17] <jits1998> yeah they do .. good guys ..:-)
[18:17] <tcsadmin> even got an iphone app for teamviewer! :)
[18:18] <jits1998> android as welll .. this thing just works... true german quality :-)
[18:22] <patdk-wk> ok, seems to be installed
[18:22] <jits1998> will msg u the id and password..
[18:31] <patdk-wk> yep, you have an mtu issue
[18:31] <patdk-wk> changed my server to 1400 mtu, and the page loads fine
[18:32] <patdk-wk> using 1500 mtu, and I send packets but never get a response
[18:32] <patdk-wk> someone is blocking icmp
[18:34] <jits1998> icmp ?
[18:34] <jits1998> i am able to ping the ip from outside ..
[18:35] <patdk-wk> ping a 1460byte packet?
[18:35] <jits1998> how do i do that ?
[18:35] <jits1998> works ..
[18:36] <patdk-wk> ping -M do -s 1472 xxxx
[18:37] <patdk-wk> from windows, ping -f -l 1472 xxxx
[18:37] <jits1998> "Packet needs to be fragmented but DF set."
[18:37] <patdk-wk> yep
[18:37] <jits1998> this is the error i get .. i am pinging from outside the network ..
[18:37] <patdk-wk> your mtu goes <1500 somewhere
[18:37] <patdk-wk> and at that point icmp is getting rejected
[18:38] <patdk-wk> on outside you won't get the icmp too large reply, so you won't see that message
[18:38] <jits1998> okay. should i ssh on the gateway and give you access .. will that help ?
[18:38] <patdk-wk> I doubt the gateway is the issue
[18:38] <patdk-wk> it has 1500 on both sides
[18:38] <patdk-wk> it's whatever the gateway is using for internet, or the isp
[18:39] <patdk-wk> let me see
[18:39] <jits1998> it is connected ..thanks ..
[18:40] <patdk-wk> ya, everything is getting blocked so I can't even do a proper test
[18:40] <patdk-wk> http://paste.ubuntu.com/663629/
[18:40] <jits1998> i can open the router as well .. if u need ..
[18:40] <patdk-wk> what machine is that console at?
[18:41] <jits1998> on the gateway ..
[18:41] <jamespage> adam_g: still around?
[18:41] <jits1998> thats another issue.. most commands would just hang like that :|
[18:42] <patdk-wk> not good
[18:42] <jits1998> yeah .. :-(
[18:42] <patdk-wk> oh, then mtu issue is inside then
[18:42] <patdk-wk> cause a command like that would generate a 1500byte packet, causing the issue
[18:43] <jits1998> ok ..  is it network cable issue ?
[18:43] <jits1998> from the switch to  system ?
[18:44] <patdk-wk> don't do any commands
[18:44] <jits1998> ok
[18:44] <jits1998> :|
[18:44] <wpl_> Hi, when I connect my server from inside the network i my login credentials are accepted, but when i connect from outside, i get a "password failure". Why?
[18:44] <jits1998> if u are waiting for it then don't .. it will stay hung forever :| .. well almsot forever :-)
[18:44] <patdk-wk> what ip address are we connecting to that server *from*
[18:45] <jits1998> u mean the ip of the system we are connected to ?
[18:45] <patdk-wk> ya
[18:45] <jits1998> that shd be 10.1.23.9 gateway 10.1.23.1
[18:45] <patdk-wk> so coming in on vlan23
[18:46] <jits1998> yeah
[18:46] <patdk-wk> open a new window, but don't type any commands
[18:47] <jits1998> done
[18:47] <patdk-wk> that says from 10.1.0.5?
[18:47] <patdk-wk> oh last :)
[18:47] <jits1998> yeah .. thats the standard gateway/dhcp server for all other systems ..
[18:47] <patdk-wk> pass
[18:49] <patdk-wk> stupid hell
[18:49] <patdk-wk> that switch doesn't do vlans very good
[18:49] <jits1998> :-|
[18:49] <patdk-wk> it has a 1514 byte limit
[18:49] <patdk-wk> for vlans it should have atleast 1518
[18:49] <jits1998> :-o
[18:49] <patdk-wk> so it can handle the extra 4 bytes for the vlan header
[18:49] <patdk-wk> maybe check the switch config
[18:49] <jits1998> i have the manual somewhere..
[18:49] <patdk-wk> mtu might just need to be changed to 1518
[18:49] <jits1998> let me look it up ..
[18:50] <patdk-wk> ANY port that has tagged vlans will need to be atleast 1518
[18:50] <jits1998> LINKSYS_26870
[18:50] <Demosthenes> drop your mtu ;]
[18:50] <patdk-wk> could do that, can be a royal pain sometimes :)
[18:51] <patdk-wk> if anything doesn't use dhcp :)
[18:51] <wpl_> Why does the ssh server refuses my passwords when i connect from outside, but accepts them when i connect from inside the network? Intrestingly connecting the iPhone ssh client works.
[18:51] <jits1998> patdk-wk: dhcp works fine.. other networks work fine.. only this port/server has issue .
[18:52] <jits1998> is mtu config port based ?
[18:52] <patdk-wk> well, this is only one using vlans
[18:52] <patdk-wk> and the switch doesn't support the extra bytes for vlan
[18:52] <jits1998> nah . .there is one more .. 10.1.0.5 also has as many vlans..
[18:52] <jits1998> see the new console.. .. all .254 are there.. its the gateway
[18:53] <patdk-wk> well, that one is fine
[18:53] <patdk-wk> both plugged into same switch?
[18:53] <jits1998> yes .. side by side ports
[18:54] <patdk-wk> hmm, probably network card then
[18:54] <patdk-wk> been a long time since I saw a network card with that issue
[18:54] <jits1998> :-|
[18:54] <patdk-wk> one min
[18:55] <patdk-wk> don't even know what that is
[18:55] <patdk-wk> :)
[18:55] <jits1998> hehe :-)
[18:55] <patdk-wk> swap it :)
[18:55] <jits1998> network card ?
[18:55] <patdk-wk> ya
[18:55] <patdk-wk> for a different model
[18:56] <patdk-wk> or use mtu 1496 everywhere
[18:56] <jits1998> i think this is inbuilt one .. have another one plugged in .. wish i could get it changed right now :|
[18:56] <patdk-wk> but network card will be quicker and much more sane on yourself
[18:56] <patdk-wk> well, lets test the other one
[18:56] <jits1998> yeah .. thats easy to do ..
[18:56] <jits1998> other one isn't plugged in i think ..
[18:57] <jits1998> its installed but no network cable going in ..
[18:57] <patdk-wk> ya, doesn't looks like it
[18:57] <patdk-wk> must be the marvell
[18:57] <Demosthenes> *sigh* i was so disappointed. i bought a set of new gigabit switches, but none will talk gig through my site wiring :P
[18:57] <patdk-wk> heh?
[18:58] <patdk-wk> only 2pair?
[18:58] <jits1998> the other came back ?
[18:59] <jits1998> it is working :|
[18:59] <patdk-wk> since I told it not to transmit too large a packet anymore :)
[18:59] <Demosthenes> no, 100meg full i can do, just not gig. its got all pairs.
[18:59] <Demosthenes> just not shielded i suppose
[18:59] <patdk-wk> by definition, pairs don't need shielding
[18:59] <patdk-wk> why they are pair'd :)
[18:59] <patdk-wk> must be cat3 then, instead of cat5e
[19:00] <qman__> 10/100 only needs two pair
[19:00] <qman__> gigabit uses all four
[19:00] <patdk-wk> he just said it had all pairs :)
[19:01] <qman__> and it's more sensitive to EMI
[19:01] <qman__> I read that as 100 meg worked, implying all four pairs
[19:02] <qman__> which would not be the case
[19:02] <patdk-wk> ya, 100meg 2pair, 1000meg, 4pair
[19:04] <qman__> I haven't run into that problem yet myself, but I've only done it with cat5 and better
[19:04] <qman__> 5e is the requirement but 5 usually works too
[19:04] <patdk-wk> I had some runs of cat3, from before cat5 existed
[19:05] <patdk-wk> 100mbit mostly worked on them
[19:05] <patdk-wk> but not gigabit at all
[19:05] <RoyK> qman__: IIRC 5e _was_ the requirement, CAT 5 will do now
[19:06] <RoyK> patdk-wk: with cat5, gigabit will work unless you strech the cable too long
[19:06] <RoyK> meaning >50m or so
[19:06] <patdk-wk> yes, but this was cat3 :)
[19:06] <patdk-wk> at about 40'
[19:06] <RoyK> cat3 belongs to the ninetees
[19:07] <patdk-wk> it was the 90's :)
[19:08] <RoyK> patdk-wk: and back then, we didn't worry about gigabit, we thought 100Mbps was cool
[19:12]  * patdk-wk wonders if jits1998 died
[19:13] <jits1998> nah here.. just restarted the system . . after cleaning up udev/rules/net.rules
[19:13] <patdk-wk> wrong method :)
[19:13] <patdk-wk> should of just edited interfaces, replace eth1 with eth0
[19:13] <jits1998> that had some of old stuff when we used multiple nic .. now with 11 rooms thats impossible :-)
[19:14] <patdk-wk> bunch of quad nic cards? :)
[19:14] <patdk-wk> and ethernet->usb adaptors :)
[19:14] <tcsadmin> jits1998 - so your problem is resolved?
[19:15] <patdk-wk> well, it's *known* now :)
[19:15] <jits1998> tcsadmin: we have nailed it down likely..
[19:16] <jits1998> need physical access to fix it ..
[19:16] <tcsadmin> awesome
[19:16] <patdk-wk> nic doesn't support 1518 byte packets, only 1514
[19:17] <jits1998> patdk-wk: that may be true.. coz in the other machine the config is different as in the in-built card is not used .. let me double check ..
[19:21] <jits1998> doesn't seem to be the case..
[19:21] <patdk-wk> hmm?
[19:21] <jits1998> then network card fault it must be ..
[19:21] <patdk-wk> oh, other one isn't using onboard?
[19:22] <jits1998> it is using onboard one.. as far as i can tell ..
[19:22] <patdk-wk> what is the lspci lines for it?
[19:23] <patdk-wk> but it has to be nic or switch
[19:24] <jits1998> one has marvell/intel .. other has marvel / hangzhou
[19:25] <patdk-wk> ya, the hangzhou is the issue
[19:25] <patdk-wk> intel should be excellent :)
[19:25] <patdk-wk> onboard is probably the marvel
[19:25] <patdk-wk> I think your not using the onboard o nthat gateway :)
[19:26] <jits1998> yeah .. currently hangzhou is in use..
[19:26] <jits1998> intel with same config is working fine.. marvell being common is likely onboard one..
[19:26] <patdk-wk> intel's are excelent, normally supporting 16k packets
[19:27] <patdk-wk> marvell are normally good
[19:27] <patdk-wk> atleast recent ones, dunno how old those are
[19:27] <jits1998> just over a year i think ..
[19:27] <jits1998> thanks so much for all your help :-)
[19:27] <patdk-wk> should be fine, if they didn't install the most crap marvell they could
[19:28] <jits1998> which part of us are you from ?
[19:28] <patdk-wk> d.c.
[19:29] <jits1998> me in india
[19:29] <patdk-wk> saw, when I was tracing the ip
[19:30] <jits1998> patrickdk.com is just filler :-)
[19:30] <patdk-wk> yep :)
[19:30] <patdk-wk> hate webpages
[19:30] <patdk-wk> I used to have the ie can't locate server page, as the home page there
[19:30] <jits1998> hehe .. you know too much for them to excite you :-)
[19:30] <jits1998> twitter ?
[19:31] <patdk-wk> nope
[19:31] <patdk-wk> no facebook, no google+
[19:31] <jits1998> where can i "bookmark" you then :-)
[19:31] <patdk-wk> use whois :)
[19:32] <patdk-wk> well, irc 24/7 :)
[19:32] <patdk-wk> aim/xmpp also
[19:32] <jits1998> no friend list here.. is it ? ..
[19:32] <jits1998> or a fan list .. if i may :-)
[19:32] <patdk-wk> on irc? not really
[19:33] <jits1998> what do u do .. i mean company, working, consulting ?
[19:33] <patdk-wk> consulting mostly
[19:34] <jits1998> ok .. in networking or general computing .. web i think is ruled out..
[19:35] <patdk-wk> heh? everything
[19:35] <patdk-wk> networking, routing, vmware, programming, ...
[19:35] <shennyg> I'm on karmic and want to upgrade to php5.3 what sources do I need to add?
[19:35] <patdk-wk> lucid
[19:36] <shennyg> I tried http://www.robsearles.com/2010/03/17/installing-php5-3-on-ubuntu-karmic/ but I got 'failed to fetch' errors
[19:37] <shennyg> patdk-wk: are you saying just to upgrade to lucid?
[19:37] <patdk-wk> shennyg, no, but that is where the php 5.3 lives
[19:38] <patdk-wk> but technically yes
[19:38] <patdk-wk> as karmic has been unsupported for a while, and doesn't get any security updates
[19:38] <shennyg> Yes, best case scenario I would create new servers...
[19:39] <shennyg> but for a quick win I would add the sources that lucid has?
[19:39] <patdk-wk> well, your best source right now would be to download the source form lucid, and recompile for karmic
[19:39] <jits1998> patdk-wk: anything on windows ? or asterisk ? need a couple of things done on these ..
[19:39] <patdk-wk> windows sure, asterisk I used to be heavy into, but haven't touched for a few years now
[19:40] <shennyg> where/how do I find those sources?
[19:40] <jits1998> i need windows task to be automated .. asterisk having serious trouble with echo cause of our hardware ..
[19:40] <patdk-wk> shennyg, I just edit sources.list to lucid, and apt-get source ....
[19:41] <patdk-wk> echo is not an issue of hardware, it's an issue of using analog and digital mixed lines
[19:41] <jits1998> no lines.. all soft phones.. connected "differently" .. no echo in headphones.. only in my hardware :-)
[19:42] <patdk-wk> how do you mean only in my hardware?
[19:42] <patdk-wk> echo can only be *created* when using analog lines
[19:43] <shennyg> patdk-wk: do I just replace all instances of karmic with lucid?
[19:44] <patdk-wk> yep
[19:44] <patdk-wk> get all sources you need
[19:44] <patdk-wk> and recompile them
[19:44] <patdk-wk> not much fun
[19:44] <patdk-wk> or you could just attempt to upgrade just php using the lucid binaries
[19:44] <patdk-wk> really ugly, but normally works
[19:45] <shennyg> ok, the other option would be to upgrade ubuntu.
[19:45] <patdk-wk> yep
[19:45] <shennyg> and 9.10 to 10.4 should be straightforward?
[19:45]  * shennyg doing on a dev server first :)
[19:45] <jits1998> patdk-wk: there ?
[19:46] <patdk-wk> ya
[19:46] <jits1998> pinged you my id .. can you add me ?
[19:46] <patdk-wk> I did
[19:47] <jits1998> did not get it :-s .. give me yours ..
[19:47] <patdk-wk> it tells me your offline
[19:51] <shennyg> thanks for your help patdk-wk
[19:53] <Psi-Jack> Anyone know if the QLogic 2562 FC-HBA is supported in Ubuntu 10.04 LTS?
[19:58] <Psi-Jack> OKay. Looks like it is just fine. ;)
[20:00] <patdk-wk> ya, it is :)
[20:35] <josePhoenix> Hmm.. I'm trying to change the hostname of a server, and it doesn't seem to be sticking
[20:36] <josePhoenix> I changed /etc/hosts and I thought I'd changed /etc/hostname.. but it's back to the old value
[20:37] <josePhoenix> hmm I guess I'll know if it shows up again. survived this reboot.
[21:24] <josePhoenix> Hello all
[21:25] <josePhoenix> I have added some @reboot lines in a user crontab, but they don't seem to be running
[21:25] <josePhoenix> How can I fix that?
[21:40] <Demosthenes> ok, so i've got a remotely booting diskless workstation setup now, nice. root's read only, so i can run many workstations...
[21:40] <Demosthenes> i've got home directories setup in samba shares, anyone know how i can mount those up (need a username/pass) for the CURRENT user logged in on them?
[21:41] <RyanP> Demosthenes: I'm doing something similar, but am using NFS to export the home.. don't care for that idea?
[21:41] <Demosthenes> export ALL home's via exporting /home?
[21:42] <RyanP> Demosthenes: yes
[21:42] <Demosthenes> i considered that, but then NFS doesn't do share security... i may have to
[21:42] <Demosthenes> but i was hoping there was a way to limit it
[21:42] <Demosthenes> otherwise i'd have to open /home to any IP on the local subnet.
[21:42] <Demosthenes> and of course, you can lie about your UID if you control an NFS capable box...
[21:43] <RyanP> Demosthenes: Yes there is a drawback there.
[21:43] <Demosthenes> i was thinking maybe autofs had a way, but it looks like it wants to put the smb user/pass in a file, that doesn't help for per-user security
[21:45] <patdk-lap> demosthenes, pam_mount :)
[21:47] <Demosthenes> patdk-lap: NICE
[22:10] <nutcase_> hi guys... 1 quick ? is it posible to read ufs formatted HHD in ubuntu
[22:10] <patdk-lap> as in freebsd ufs?
[22:10] <nutcase_> yes
[22:10] <patdk-lap> sure
[22:11] <nutcase_> do i need to install any app for that or could just mount the drives and read the files
[22:12] <patdk-lap> don't need to install anything
[22:12] <nutcase_> sweet
[22:12] <nutcase_> thanks
[22:12] <patdk-lap> now mounting it isn't easy though :(
[22:12] <nutcase_> well i got my work cut out then
[22:13] <patdk-lap> http://www.sysadmindiary.com/2008/03/mounting-freebsd-ufs2-file-system-on-ubuntu-linux/
[22:13] <patdk-lap> well, you just have to specify what type of ufs manually
[22:13] <nutcase_> well you read my mind
[22:13] <nutcase_> thank you
[22:28] <Corey> Hence the "U" in UFS. :-)
[23:18] <KM0201> where can i find instructions on setting up a FTP server?
[23:19] <Psi-Jack> KM0201, Why do you want to install an insecure FTP Server?
[23:20] <KM0201> dunno really.. just thought it'd be handy to let people downlload stuff from my server
[23:20] <KM0201> i can simply block its port in my router when i don't want people using it.
[23:21] <KM0201> but security wasn't necessarily my concern anyway
[23:21] <Psi-Jack> KM0201: Why not sftp?
[23:21] <Psi-Jack> Most FTP clients these days also support SSH's SFTP
[23:21] <patdk-lap> why not use ftps? :)
[23:21] <KM0201> 1. if sftp will work, thats fine.. my main concern, would be that people who download from me, would be able to access it witht heir client (i'm guessing most use filezilla)
[23:21] <KM0201> but that doesn't change the fact, i'm looking for info on it.
[23:22] <patdk-lap> if it's just downloads, why not http/https?
[23:22] <Psi-Jack> FileZilla supports sftp.
[23:22] <KM0201> patdk-lap: if it's not.. why not.. we mcan do that all day.
[23:22] <KM0201> why not.. just see if you can answer my question.
[23:22] <Psi-Jack> KM0201: So basically, you already have sftp support likely right now. :)
[23:22] <patdk-lap> I can't even understand your question
[23:23] <KM0201> patdk-lap: you know what ftp is don't you?
[23:23] <Psi-Jack> KM0201: If not, you just install openssh-server, or equivalent for your distro, add a user, if you don't want them with shell access, set their shell to /bin/true
[23:23] <patdk-lap> yes, but why anyone uses it, is beyond me
[23:23] <KM0201> hmm
[23:24] <Psi-Jack> hehe
[23:24] <Psi-Jack> I just switched to using Fedora 15 with Gnome 3 on my main desktop.
[23:24] <KM0201> so how exactly would they download something from me....?
[23:24] <patdk-lap> using http :)
[23:24] <patdk-lap> http is good for downloads, not so much for uploads
[23:24] <patdk-lap> and everyone has http support and knows how to use it :)
[23:25] <KM0201> patdk-lap: thus my point, i want upload support as well.
[23:25] <patdk-lap> you didn'tsay that at all :)
[23:25] <KM0201> i think i'm just gonna put you on ignore.
[23:25] <patdk-lap> :)
[23:25] <patdk-lap> dunno, that is the first time you said upload support, everything else was download only
[23:26] <KM0201> Psi-Jack: wouldn't they have to use putty to use ssh?
[23:26] <Psi-Jack> Noi