| === lifeless_ is now known as lifeless | ||
| uvirtbot | New bug: #882878 in openssh (main) "With IPv6 disable openssh will on forward X connections" [Undecided,New] https://launchpad.net/bugs/882878 | 02:06 |
|---|---|---|
| allowoverride | hi | 06:43 |
| === jason is now known as jasef | ||
| === jason is now known as Guest19714 | ||
| === Guest19714 is now known as jasef | ||
| Bilge | Is there some way to reinstall not only an app but all of its dependencies too? | 07:41 |
| iclebyte | Bilge, remove the app and use --purge to remove everything | 07:53 |
| iclebyte | then install it again | 07:53 |
| iclebyte | (with aptitute instead of apt-get) | 07:54 |
| iclebyte | infact, i'm wrong. http://askubuntu.com/questions/443/how-to-remove-an-uninstalled-packages-dependencies | 07:55 |
| Bilge | I want to just reinstall in place with --reinstall | 07:59 |
| Bilge | Not remove first | 07:59 |
| iclebyte | do you just want to run the menus to reconfigure the app again? | 08:01 |
| SilfenX | I have set up and connected a VPN client session on Ubuntu server but eth0 is used directly to communicate over WAN rather than the ppp0 interface. What am I doing wrong? | 08:05 |
| ersi | SilfenX: Routes, man. Routes. | 08:09 |
| lxyu | hello, I want to set up two or three servers in different places to improve the visit speed of clients all over the country. | 08:09 |
| ersi | Routes are like Spice, essential to networking traveling | 08:09 |
| lxyu | but I'm new to this field, and any suggestions on how/where to learn the related things? or any article to read? I just don't even know the keyword to google. | 08:09 |
| ersi | lxyu: "Content distribution" "Anycast" "Round robin" are a few keyword that might be worth while | 08:11 |
| ersi | lxyu: It's a bit tricky though, if you want it setup properly though. | 08:11 |
| lxyu | ersi: to be particular, the problem I'm facing now is how to serve single website across different servers locate in different place.. any recommend book or articles? | 08:16 |
| ersi | I'd say you'd have to build up your general experiance in server administration, network management and domain name systems. So, no unfortunally there's no "one shot" book. | 08:18 |
| ersi | Like most things fun one would want to do. | 08:18 |
| iclebyte | is anyone aware of a server which uses solid state drives? | 08:19 |
| ersi | You could add the keywords "Load balancing" as well to the above keyword list by the way | 08:19 |
| iclebyte | we have an unsual use case where we have very low disk latency requirements | 08:19 |
| lxyu | ersi: ok, I'll google that first | 08:25 |
| SilfenX | my routes are http://pastebin.com/SPVMUyKV | 08:27 |
| soren | Daviey: Looking at https://blueprints.launchpad.net/ubuntu/+spec/servercloud-p-paas-cf-next-steps it says "build cloudfoundry from source"... What's it built from now? | 08:28 |
| Daviey | soren: That is something the Systems Integration team have been doing, i've not been too close to it. I guess from upstream binary :). lynxman might know more. | 08:29 |
| ersi | SilfenX: So you want *all* of your traffic to be routed over ppp0 instead of eth0? (beside the VPN connection traffic of course) | 08:35 |
| soren | Daviey: Oh, ok. In fact, I don't even see it in the regular repo's? | 08:39 |
| soren | Daviey: Am I not looking hard enough? | 08:39 |
| Daviey | soren: it's not in the archive. | 08:42 |
| Daviey | (which is why i haven't been too close to it.) | 08:42 |
| soren | Is it in the partner archive? | 08:44 |
| SilfenX | ersi: yes, all network traffic destined to and from the WAN on the server should use the ppp0 interface - if that makes sense? | 08:44 |
| soren | Hm... Nope, not in Partner. | 08:44 |
| Daviey | soren: I *think* it's just a juju charm. | 08:45 |
| soren | Daviey: Oh, I see. Ok. | 08:50 |
| soren | Daviey: I guess I still have a lot to learn about reading press releases that say that something "is now available in Ubuntu". :) | 08:50 |
| nigelb | heh | 08:51 |
| Daviey | soren: You'll gain experience one day, and be a real asset :) | 08:52 |
| soren | We'll see. | 08:53 |
| Daviey | heh | 08:53 |
| ersi | SilfenX: If I'm not mistaken, I might be (a bit busy) - you should delete the default gateways and have your 192.168.0.0/24 have 192.168.0.1 as it's gateway, and make a default gateway that'll go through dev ppp0 | 08:54 |
| jamespage | soren, Daviey: I think the cloudfoundry client is in the archive - but not cloudfoundry itself | 08:58 |
| soren | jamespage: Yeah, the client is there. | 08:59 |
| Daviey | ah | 09:00 |
| Daviey | <- NFI | 09:00 |
| SilfenX | ersi: Ok. I ve ben reading around and it s getting deep really fast ^^ - I use webmin to set this thing up and heres what it looks like at the moment http://i54.photobucket.com/albums/g98/spiggot_2006/WebminPPTPSetup.jpg | 09:05 |
| ersi | SilfenX: Yeah, I get whacked in the head learning routing everyday at my day job :) | 09:06 |
| jamespage | Daviey, soren: PPA by the looks of it - ppa:cloudfoundry/ppa | 09:06 |
| ersi | SilfenX: Totally know the pain :) | 09:06 |
| ersi | SilfenX: Hm, try ticking in "Delete old default route?" to "YES" | 09:07 |
| ersi | SilfenX: I have to warn you that doing anything I suggest may cripple the networking on said device, and that you're doing it "on your own risk" etc etc yada yada, JFYI | 09:07 |
| ersi | So if it's in a remote location, it might.. be nasty to do. Like adding firewall rules from a remote place.. can quickly turn bad :P | 09:08 |
| ersi | Oh, homesrv:10000/.. then it's probably near you :) | 09:08 |
| SilfenX | ersi: yes, I have physical access to the machine also so it wont be a disaster - and the instllation CD s are always at hand next to me ^^ | 09:08 |
| ersi | Great great :) | 09:08 |
| Daviey | jamespage: ah! | 09:12 |
| koolhead17 | hey all | 09:13 |
| koolhead17 | soren: finally got chance to have word with devcarmer and we have dashboard tag for cactus!! :) | 09:14 |
| Daviey | nice | 09:15 |
| Daviey | koolhead17: why do we care about cactus? | 09:15 |
| lynxman | morning o/ | 09:15 |
| Daviey | lynxman: afternoon, right? | 09:16 |
| koolhead17 | hey lynxman | 09:16 |
| lynxman | koolhead17: hey ;) | 09:17 |
| lynxman | Daviey: hm.. *looks at clock* not yet? :) | 09:18 |
| koolhead17 | Daviey: because on the doc there been around 20 comments where ppl were pointing out the mistake of missing launchpad path. I just want to correct the path in doc and leave it for peace | 09:18 |
| koolhead17 | RIP cactus :D | 09:18 |
| Daviey | ah! | 09:18 |
| koolhead17 | we cannot keep cactus documentation with wrong paths/resources :D | 09:18 |
| lynxman | soren: We have a cloudfoundry package in a ppa and a juju charm as well | 09:19 |
| lynxman | soren: it works quite well I must say | 09:19 |
| koolhead17 | juju juju juju | 09:20 |
| * koolhead17 sings | 09:20 | |
| koolhead17 | Daviey: am still nower with that bug :( | 09:21 |
| mika | kirkland: thanks for http://cloud.ubuntu.com/2011/10/getting-started-with-ubuntu-orchestra-servers-in-concert/ - i'm wondering whether it would make any sense to also support FAI, what do you think? | 09:22 |
| Daviey | koolhead17: oh dear | 09:27 |
| Daviey | mika: We evaulated the different options, and decided that cobbler best matched what we wanted. Having said that, I certianly would not block better FAI integration. | 09:28 |
| mika | Daviey: ok | 09:28 |
| koolhead17 | jamespage: ping | 09:32 |
| jamespage | hey koolhead17 | 09:33 |
| koolhead17 | jamespage: how are you? still occupied? :) | 09:34 |
| jamespage | koolhead17: good thanks - always occupied... | 09:34 |
| jamespage | did you still need a hand with the dbconfig related package/juju charm issue you had? | 09:34 |
| koolhead17 | yes sir!! | 09:35 |
| koolhead17 | you said you had some magic reciepe to handle it. :D | 09:35 |
| jamespage | lemme just finish up what I'm working on (should not take to long) | 09:37 |
| koolhead17 | thanks!! | 09:37 |
| SilfenX | ersi: tried deleting old default route - reconnected but no luck | 09:41 |
| SilfenX | ersi: I m all good now - made some random clicking in the webmin UI for the PPTP connetion and all of a sudden it wroked \o/ | 09:43 |
| alex88 | hi guys, just upgraded to 11.10, now postfix auth not works, "warning: SASL: Connect to private/auth-client failed: No such file or directory" seems that the file providing auth to postfix isn't there anymore | 09:46 |
| SilfenX | ersi: this is the new settings that made it work http://i54.photobucket.com/albums/g98/spiggot_2006/WebminPPTPSetupWorking.jpg | 09:46 |
| alex88 | it's set in dovecot config, anyone had this problem? | 09:46 |
| patdk-lap | hmm, fix your dovecot config? | 09:49 |
| SilfenX | oh boy thats what you get for becoming carried away ^^ (account info not deleted) | 09:49 |
| ersi | SilfenX: Awesome! :) | 09:49 |
| SilfenX | is it correct to assume that if the PPTP connection becomes unresponsive/drops w/e, server will lose connection to the internet and not just default straight out of eth0 to internet ? | 09:52 |
| ersi | I'd assume that, yes. But you *could* add another route for fallback | 09:53 |
| ersi | that's the beuty with routing | 09:53 |
| ersi | You could test by firewalling the vpn connecting :) | 09:53 |
| jamespage | alex88: yep - bug 874135 | 09:53 |
| uvirtbot | Launchpad bug 874135 in dovecot "mail-stack-delivery does not install postfix->dovecot sasl authentication with dovecot 2.x" [High,Fix committed] https://launchpad.net/bugs/874135 | 09:53 |
| jamespage | I am of course assuming that you are using mail-stack-delivery | 09:54 |
| alex88 | jamespage: it wasn't available on 11.04 right? cause i've installed and configured postfix+dovecot manually | 09:55 |
| jamespage | alex88: mail-stack-delivery was | 09:55 |
| jamespage | so sounds like its the same issue; but in you manual configuration | 09:55 |
| jamespage | same fix might work :-) | 09:56 |
| alex88 | update dovecot package? | 09:56 |
| SilfenX | ersi: yes - also, a 1 minute cron job which checks ppp0 up/down which performs a reconnect if down? | 09:56 |
| alex88 | jamespage: should i add oneiric-proposed for now? | 09:58 |
| jamespage | alex88: sorry - not clear - unless you are using mail-stack-delivery this won't fix your issue | 09:58 |
| ersi | SilfenX: Would be unnecessary if you configure the routing ;) | 09:58 |
| alex88 | jamespage: so i should install mail-stack-delivery | 09:58 |
| jamespage | but its likely the same fix for that configuration will resolve your manual configuration | 09:58 |
| alex88 | jamespage: it's just a configuration edit? the files that provides auth are missing | 09:59 |
| SilfenX | ersi: thanks for feedback! bbl | 09:59 |
| jamespage | alex88: the way auth gets configured in dovecot 2.0.x changed | 10:00 |
| jamespage | see http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL | 10:01 |
| ersi | SilfenX: you're welcome! | 10:01 |
| jamespage | alex88: mail-stack-delivery installs a specific postfix/dovecot configuration | 10:01 |
| alex88 | jamespage: oh totally different..ok let me give it a try | 10:01 |
| jamespage | koolhead17: the package was moodle right? | 10:06 |
| alex88 | jamespage: dovecot when upgrading asked me if install the package config, how can i get the package default config? reconfigure? | 10:06 |
| koolhead17 | jamespage: yes | 10:07 |
| alex88 | nm got it | 10:09 |
| jamespage | alex88: quicker than me - could not remember exactly what dovecot does | 10:09 |
| jamespage | koolhead17, sudo debconf-show moodle | pastebinit -> http://paste.ubuntu.com/721413/ | 10:10 |
| alex88 | jamespage: doveconf -n -c dovecot-1.conf > dovecot-2.conf | 10:10 |
| alex88 | dovecot utility to convert config | 10:11 |
| jamespage | always handy that one | 10:11 |
| koolhead17 | * moodle/dbconfig-install: false <:D> | 10:11 |
| alex88 | jamespage: ok, config seems fine now, the problem is that it doesn't create the listener for auth | 10:15 |
| jamespage | koolhead17: yeah - I just wanted a dump of options | 10:15 |
| jamespage | alex88: what does dovecot -n -c /etc/dovecot/dovecot.conf say? | 10:16 |
| alex88 | sorry, my fault, it was set executable to /usr/lib/dovecot/dovecot-auth instead of /usr/lib/dovecot/auth | 10:19 |
| alex88 | seems working now..thank you very much jamespage | 10:20 |
| jamespage | alex88, np | 10:21 |
| jamespage | koolhead17: just fiddling with debconf options to remind myseld | 10:25 |
| koolhead17 | jamespage: i wanted to know the same. :P | 10:26 |
| koolhead17 | http://pastebin.com/pWHNEQWe This is how the file /etc/moodle/config.php looks like. | 10:28 |
| jamespage | koolhead17: looking at that package all moodle uses dbconfig for is to setup the user and configure the file | 10:42 |
| jamespage | as the mysql juju charm is going to setup the database user for you I think I would disable dbconfig configuration | 10:42 |
| jamespage | and template/generate the moodle configuration file mysql once the relation between moodle and mysql/pgsql has been setup | 10:43 |
| jamespage | make sense? | 10:43 |
| koolhead17 | hmm | 10:57 |
| koolhead17 | jamespage: yes. i think i can create a custom preseed file for moodle and pass [moodle/dbconfig-install: false ] to handle rest by passing other auth & info via mysql juju charms | 11:01 |
| jamespage | koolhead17: yep - you prob need to set the www conf for moodle as well | 11:01 |
| jamespage | but thats about it | 11:01 |
| koolhead17 | cool. | 11:05 |
| jamespage | koolhead17: good luck - lemme know how it goes | 11:08 |
| SpamapS | koolhead17: still fighting with dbconfig ? ;) | 11:12 |
| koolhead17 | SpamapS: yes sir. :( | 11:21 |
| koolhead17 | jamespage: thanks. will keep you posted | 11:22 |
| SpamapS | koolhead17: I agree with jamespage that trying to bend dbconfig to your will is quite unnecessary. | 11:22 |
| koolhead17 | SpamapS: hmm. making it mute will solve everything. all this while i was feeding him values it wanted via preseed. | 11:29 |
| koolhead17 | *it | 11:30 |
| znow | drwxrwxrwx 4 znow znow 4096 2011-10-28 13:27 yc/ - full permissions, but I cannot upload files to this folder? I get permission denied? | 13:49 |
| alex88 | znow: maybe parent folders denies you access? | 13:53 |
| znow | alex88: hhmm yeah could be | 13:53 |
| alex88 | znow: uploading as www-data? | 13:54 |
| znow | alex88: hmm user? | 13:54 |
| znow | no | 13:54 |
| alex88 | znow: you mean uploading via web or how? | 13:54 |
| znow | ftp | 13:54 |
| znow | drwxr-xr-x 13 root root 4096 2011-10-17 08:26 var | 13:55 |
| alex88 | mmhh..you can usually access via sheel? | 13:55 |
| alex88 | *shell | 13:55 |
| soren | The ftp server might impose restrictions in addition to DAC. | 13:55 |
| znow | I can access with ftp aswell | 13:55 |
| znow | but I need my user to be able to upload via ftp to /var/www | 13:55 |
| alex88 | maybe all file uploads are denied..try upload to /tmp | 13:56 |
| znow | alex88: well I need to overwrite an file in /var/www/apps/yc | 13:56 |
| alex88 | owned by you? | 13:57 |
| znow | ofc, its my server | 13:57 |
| alex88 | i mean the file.. btw you've uploaded the files with fpt before? | 13:57 |
| znow | alex88: hmm, it looks like it doesnt allowed me earlier, or now | 13:59 |
| alex88 | try to upload somewhere else, to see if a ftp problem or a filesystem problem | 14:00 |
| znow | sec | 14:00 |
| alex88 | like /tmp | 14:00 |
| znow | same | 14:00 |
| znow | Respons: 550 Permission denied. | 14:00 |
| alex88 | so it's a server problem... proftpd? | 14:00 |
| znow | no vsftpd I think | 14:00 |
| alex88 | check connection banner | 14:01 |
| alex88 | when client connects | 14:01 |
| znow | alex88: how | 14:01 |
| znow | in filezilla or? | 14:01 |
| alex88 | yeah | 14:01 |
| alex88 | go up in the connection log | 14:01 |
| alex88 | check what it says after connecting | 14:02 |
| znow | alex88: Kommando: OPTS UTF8 ON | 14:03 |
| znow | Respons: 200 Always in UTF8 mode. | 14:03 |
| znow | Status: Tilsluttet | 14:03 |
| znow | Status: Henter mappeliste... | 14:03 |
| znow | Kommando: PWD | 14:03 |
| znow | Respons: 257 "/home/znow" | 14:03 |
| znow | Status: Mappeindhold vist | 14:03 |
| alex88 | before that? | 14:03 |
| alex88 | it should be something like 220-Welcome to Pure-FTPd | 14:04 |
| znow | Respons: 220 (vsFTPd 2.3.2) | 14:04 |
| znow | Kommando: USER znow | 14:04 |
| znow | Respons: 331 Please specify the password. | 14:04 |
| znow | Kommando: PASS ******* | 14:04 |
| znow | Respons: 230 Login successful. | 14:04 |
| alex88 | sec | 14:05 |
| alex88 | edit /etc/vsftpd.conf and uncomment line #write_enable=YES then do sudo /etc/init.d/vsftpd start | 14:06 |
| alex88 | riconnect and try uploading | 14:06 |
| hggdh | s/start/restart/ | 14:08 |
| znow | alex88: im using my user "znow" for ftp access,, so when I do ls -all it should say: drwxrwxrw- 4 znow root 4096 2011-10-28 13:27 yc yeah? it still says permission denied | 14:09 |
| alex88 | hggdh: yup, thanks | 14:09 |
| alex88 | znow: after enabling and restarting vsftpd? | 14:09 |
| znow | sec | 14:09 |
| alex88 | *enabling uploads | 14:10 |
| znow | there we go, now it works, thanks man | 14:10 |
| alex88 | np, glad to help | 14:10 |
| znow | alex88: appreciate it! <3 | 14:10 |
| znow | now, time for soup | 14:10 |
| znow | :) | 14:10 |
| alex88 | have fun :D | 14:11 |
| === smb` is now known as smb | ||
| === claude_ is now known as claude2 | ||
| nijaba | smoser, utlemming: just created https://wiki.ubuntu.com/UsingCloudGuestImages to streamline the process of informing cloud providers on how to best use our cloud guest images. Updates very welcome | 16:26 |
| smoser | mfdiff does pull changelog entries | 16:28 |
| smoser | for you | 16:28 |
| smoser | and picks the bits that are different | 16:28 |
| nijaba | smoser: ah cool. Can you update the wiki page? | 16:30 |
| smoser | sure. | 16:32 |
| nijaba | smoser: will ensure that it is correct, thanks :) | 16:32 |
| smoser | but it fails sometimes :-( | 16:33 |
| smoser | nijaba, http://paste.ubuntu.com/721693/ is example output. that shows changes from last lucid release to recent daily build | 16:36 |
| nijaba | smoser: yep, all that we need is there | 16:40 |
| smoser | nijaba, updated. | 16:45 |
| nijaba | smoser: cool. Once we get a better solution for mirrors, we should update this wiki page too :) | 16:49 |
| smoser | yeah. | 16:51 |
| smoser | that idea for the image-data was from alex | 16:51 |
| smoser | bligh | 16:51 |
| smoser | and i think it is pretty good really. | 16:51 |
| smoser | but requires infrastructure changes to implement. | 16:52 |
| nijaba | smoser: I think rackspace cloud already has this possibility for it's managed servers and I remember seing a functionality for this in openstack already | 16:52 |
| nijaba | smoser: something like mounting a fake usb disk that contains provider info into the image iirc | 16:53 |
| zul | hehe | 16:53 |
| zul | smoser loves that idea | 16:53 |
| smoser | nijaba, "config-drive" is that, but that doesn't solve this problem. | 16:54 |
| smoser | as the config drive is still then really limited to user-data and meta-data | 16:54 |
| smoser | or at least it really should have been. | 16:54 |
| smoser | its silly/wrong to implement 2 different metadata formats on the same cloud | 16:54 |
| nijaba | smoser: ah? ok... I thought you could push provider data in there as well | 16:54 |
| smoser | you can probably do that, yes. but i'm not sure how welll its formed. | 16:55 |
| nijaba | smoser: in any case, that's something to propose on the openstack ml | 16:55 |
| smoser | and then we'd need something in cloud-init to acutally read that stuff. | 16:55 |
| nijaba | smoser: yeah, another blueprint ;) | 16:59 |
| smoser | i had in one of them to support config drive. | 17:00 |
| zul | especially when it was vfat? | 17:01 |
| mtaylor | SpamapS: ping | 17:28 |
| cjs226 | if i want to disable upstart shutting down rsyslog can i just comment out the stop line in /etc/init/rsyslog.conf? | 17:29 |
| uvirtbot | New bug: #883201 in openssh (main) "Several second hang on ssh login" [Undecided,New] https://launchpad.net/bugs/883201 | 17:45 |
| tm0 | Hi everyone, hoping you can help me. I've made a muck of my var/lib/ folder by messing up MySQL, does anyone have a list of default MySQL files in var/lib? | 18:35 |
| tm0 | Can anyone please link me to what would be in the basic installation of var/lib ? | 18:40 |
| Demosthenes | i appear to be having some form of performance issue, often things seem to "pause" for up to a minute. the only two services on the system are samba and squid. i check dns, thats ok. i'm currently looking to see if i have high i/o waits (iostat -x). any other suggestions? | 19:22 |
| chronos | where I can configure default LANG and LC_ALL in ubuntu ? | 19:26 |
| Demosthenes | /etc/environment ? /etc/profile? /etc/bash.bashrc ? | 19:26 |
| chronos | system wide, something that set before anything | 19:27 |
| chronos | environment hm | 19:27 |
| chronos | where ubuntu set it when install? | 19:27 |
| Demosthenes | hrm, it appears my raid6 array of 2 TB drives w/ lvm2 & encryption is scoring an average of 13 milliseconds for i/o, which is good. the OS on raid1 usb sticks with lvm2 is scoring 40-50 ms on i/o, but that should be slower... | 19:28 |
| chronos | ahhh, /etc/default/locale ! | 19:29 |
| Demosthenes | cool | 19:29 |
| === TheEvilPhoenix is now known as core-9 | ||
| === core-9 is now known as TheEvilPhoenix | ||
| uvirtbot | New bug: #345034 in eucalyptus/1.5 "Further constrain the max memory used per download" [Medium,Fix released] https://launchpad.net/bugs/345034 | 20:26 |
| uvirtbot | New bug: #345028 in eucalyptus/1.5 "When EBS is enabled, if a prerequisite is not installed, storage should refuse to start" [Medium,Fix released] https://launchpad.net/bugs/345028 | 20:33 |
| uvirtbot | New bug: #358595 in eucalyptus/1.5 "Introduce more logging to Walrus to show progress during image decryption" [Low,Fix released] https://launchpad.net/bugs/358595 | 20:56 |
| TheEvilPhoenix | i'm trying to create a CSR for a Maverick server, following this guide: https://help.ubuntu.com/10.10/serverguide/C/certificates-and-security.html. But I can't get past verification of the private key. It keeps returning this: 30233:error:0906906F:PEM routines:PEM_ASN1_write_bio:read key:pem_lib.c:334: | 21:13 |
| TheEvilPhoenix | anyone able to help? | 21:25 |
| Takyoji | Checking | 21:42 |
| Takyoji | I'm juggling several things right now; considered the documentation from your certificate signer (just because their documentation usually seems better) | 21:47 |
| TheEvilPhoenix | what documentation | 21:48 |
| TheEvilPhoenix | the documentation says to generate the CSR | 21:48 |
| TheEvilPhoenix | and then submit it to them | 21:48 |
| TheEvilPhoenix | the problem is i cant *generate* the CSR because of the aforementioned issue | 21:48 |
| TheEvilPhoenix | Takyoji: i guess my question now becomes... | 21:53 |
| TheEvilPhoenix | Takyoji: can I generate the CSR on another system and use that on the server i need the cert on? | 21:53 |
| Takyoji | The process is: you generate a private key, and from that private key you generate a CSR which includes the private key, you give the CSR to the CA, and they sign the public key while associating identification (such as domain, or who the owner is, etc) and from there we call it a certifIcate. | 21:54 |
| TheEvilPhoenix | i'm aware | 21:54 |
| Takyoji | So to generate the CSR, you need your private key | 21:54 |
| TheEvilPhoenix | ... | 21:54 |
| Takyoji | The private key isn't specific to a system | 21:54 |
| TheEvilPhoenix | ... | 21:55 |
| TheEvilPhoenix | let me try this another way | 21:55 |
| TheEvilPhoenix | THIS DOCUMENT OUTLINES THE PROCESS OF (A) CREATING A KEY AND (B) USING THAT FOR THE CSR | 21:55 |
| TheEvilPhoenix | https://help.ubuntu.com/10.10/serverguide/C/certificates-and-security.html | 21:55 |
| TheEvilPhoenix | THAT | 21:55 |
| TheEvilPhoenix | i cant GENERATE the key | 21:55 |
| Takyoji | ahh | 21:55 |
| TheEvilPhoenix | because it generate the aforementioned error line | 21:55 |
| TheEvilPhoenix | THEREFORE, either the issue is in PEM... | 21:56 |
| TheEvilPhoenix | or in openssl | 21:56 |
| TheEvilPhoenix | or i'mi missing certain libs, which makes no sense | 21:56 |
| TheEvilPhoenix | this is why i'm here - to diagnose the issue and rectify it | 21:57 |
| Takyoji | http://adamyoung.net/OpenSSL-unable-to-write-random-state | 21:57 |
| Takyoji | does it also say 'unable to write random state' in the error as well? | 21:57 |
| TheEvilPhoenix | this is everything: http://pastebin.com/DgWm7QCY | 21:59 |
| Takyoji | Are you using just a-z, A-Z, 0-9 for the password, or are you including special characters? | 22:01 |
| TheEvilPhoenix | alphanumeric only, mixed case | 22:01 |
| TheEvilPhoenix | no symbols or spaces | 22:01 |
| Takyoji | Are you sure you have the password correct? :P | 22:03 |
| TheEvilPhoenix | just tried with 12345 | 22:03 |
| TheEvilPhoenix | and it generates a smiliar | 22:03 |
| TheEvilPhoenix | similar* | 22:03 |
| Takyoji | http://www.howtoforge.com/forums/showthread.php?t=12237 | 22:03 |
| TheEvilPhoenix | wait a sec | 22:03 |
| TheEvilPhoenix | it just worked with 12345 | 22:03 |
| TheEvilPhoenix | wtf? | 22:03 |
| Takyoji | with generating a private key, and generating the CSR? | 22:03 |
| TheEvilPhoenix | private key | 22:03 |
| TheEvilPhoenix | i havent hit the CSR part yet | 22:03 |
| Takyoji | :P | 22:04 |
| Takyoji | It would be nice if OpenSSL would make the errors a little user friendly. :P | 22:04 |
| Takyoji | I think there's also a limit to password length as well by the way | 22:04 |
| Takyoji | but I'm not sure how long | 22:04 |
| Takyoji | 32 character max it sounds like | 22:05 |
| TheEvilPhoenix | well it worked | 22:14 |
| TheEvilPhoenix | not sure how, but it worked | 22:14 |
| TheEvilPhoenix | thanks | 22:14 |
| p1ruj3 | Can somone please pastebin me the outcome of running this command: lsb_release -a ? If you are not familiar with what this command does it will display the version details of your ubuntu installation. | 22:48 |
| p1ruj3 | 10.04 or 11.10 please. | 22:48 |
| p1ruj3 | my /etc/lsb-release somehow disappeared.... and my other machines are plain ubuntu.. I am sure there is a difference. | 22:49 |
| cloakable | p1ruj3: http://pastebin.com/kUqDZSRs | 22:52 |
| cloakable | hope that helped | 22:52 |
| p1ruj3 | cloakable you are running ubuntu-server ? | 22:53 |
| cloakable | p1ruj3: yup | 22:53 |
| p1ruj3 | Just asking because it looks identical to my Straight ubuntu 11.10 | 22:53 |
| p1ruj3 | What is the difference with Ubuntu-server and regular Ubuntu ? | 22:54 |
| cloakable | The kernel and the default packages installed. | 22:54 |
| p1ruj3 | oh | 22:54 |
| p1ruj3 | so uname -a... | 22:54 |
| medberry | probably no difference as far as lsb is concerned. | 22:54 |
| cloakable | Yeah | 22:54 |
| cloakable | p1ruj3: why? | 22:55 |
| cloakable | p1ruj3: Plus, all uname -a will show is the current kernel running... and you can install the desktop kernel on a server, and the server kernel on a desktop. | 22:55 |
| p1ruj3 | inherited a machine running 10.04, I figured it would show in the lsb-release what it was running... | 22:55 |
| cloakable | Ubuntu, basically | 22:55 |
| p1ruj3 | so how can i tell what is installed on this machine? | 22:56 |
| cloakable | Ubuntu! | 22:56 |
| cloakable | Or do you mean software wise? | 22:56 |
| medberry | dpkg -l | 22:57 |
| cloakable | Because the answer there is whatever the previous owner wanted | 22:57 |
| cloakable | You can even install ubuntu-desktop on a server system | 22:57 |
| medberry | dpkg --get-selections >file | 22:57 |
| p1ruj3 | okay, so I think that answered my question... just different core set of package for ubuntu-server vs ubuntu.. | 22:58 |
| p1ruj3 | I assumed the kernel would have been compiled a littler lighter... | 22:59 |
| cloakable | Why? | 22:59 |
| p1ruj3 | but i'm more familiar with freebsd so that my explain my extreme ignorance here | 22:59 |
| cloakable | There's a -lot- of hardware people install ubuntu server on | 22:59 |
| cloakable | Mine is installed on an Intel Atom board, for example. | 23:00 |
| p1ruj3 | 3.0.0-12-generic #20 Ubuntu SMP is that kernel an ubuntu-server kernel? (11.10 machine) 2.6.32-generic #62 ubuntu SMP is the 10.04 | 23:02 |
| p1ruj3 | sorry i am sure i can research this on my own, just figured it might be simple knowledge to a trained eye... | 23:04 |
| maxb | p1ruj3: https://launchpad.net/ubuntu/+source/linux (and scroll down a lot) | 23:06 |
| p1ruj3 | everything im finding points to just packages... | 23:06 |
| maxb | your point? | 23:06 |
| maxb | Ubuntu kernels are *in* packages, so that is relevant information | 23:07 |
| p1ruj3 | maxb you lost me there | 23:08 |
| cloakable | p1ruj3: You can install new kernels via apt-get | 23:08 |
| maxb | I believe my link answered your question. You seem to be suggesting otherwise. You need to explain what further information you're looking for | 23:09 |
| p1ruj3 | So my Improper assumption would be the ubuntu-server kernel would have less driver support compiled into it vs the desktop etc... | 23:09 |
| cloakable | Yes | 23:09 |
| cloakable | server kernel enables stuff like pae | 23:10 |
| p1ruj3 | maxb it helped. | 23:10 |
| p1ruj3 | ah yes pae... brings back memories of the p-pro dual 200 | 23:11 |
| cloakable | p1ruj3: And the kernel on the machine you're on is an 11.10 desktop kernel (no PAE) | 23:11 |
| p1ruj3 | cloakable can you help me understand "how | 23:11 |
| p1ruj3 | " you determined that | 23:11 |
| cloakable | p1ruj3: if it were server, it would be -generic-pae | 23:12 |
| p1ruj3 | ok | 23:12 |
| p1ruj3 | Nice. | 23:12 |
| cloakable | p1ruj3: Unless the person installed the -generic kernel on the server | 23:12 |
| p1ruj3 | so I can just apt-get the generic-pae kernel if I so desired... thats neat... | 23:13 |
| cloakable | Yes | 23:13 |
| p1ruj3 | can I transition to the new kernel without rebooting? | 23:13 |
| cloakable | No | 23:13 |
| maxb | It's not strictly true to say that generic-pae is the server kernel | 23:16 |
| p1ruj3 | just out of curiosity can you do so with any flav of linux? | 23:16 |
| p1ruj3 | maxb I figured that... | 23:16 |
| maxb | First, the generic flavour really is pretty generic, and should be fine on servers too | 23:16 |
| maxb | generic-pae is available only for the 32-bit x86 | 23:17 |
| cloakable | true | 23:17 |
| maxb | Whereas, Ubuntu also ships a "server" flavour for x86_64 | 23:17 |
| p1ruj3 | maxb you wouldn't have a link handy listing the mainline kernels would you? | 23:18 |
| p1ruj3 | NM | 23:19 |
| p1ruj3 | found it | 23:19 |
| maxb | Then there's the "virtual" flavour which is just one of the other flavours with less modules included, intended to conserve disk space in virtualized images | 23:19 |
| p1ruj3 | http://kernel.ubuntu.com/~kernel-ppa/mainline/ | 23:19 |
| p1ruj3 | ack, actually all of those are generic it seems... | 23:19 |
| cloakable | Oh wow. It's been a while since I've done a kernel cleanup >.> | 23:22 |
| * cloakable uninstalls 700Mb worth of kernels. | 23:22 | |
| p1ruj3 | haha | 23:23 |
| p1ruj3 | just have two on this one... | 23:25 |
| p1ruj3 | alight, thank you guys for the education.... feeling more chatty than research'y | 23:26 |
| p1ruj3 | just about that time to get the magnum pi costume soiled with unsanitary, illegal, and immoral products... | 23:27 |
| p1ruj3 | sorry max, now looking at your link is making a lot more sense... | 23:28 |
| qman__ | yeah, wish it was smarter about updating kernels | 23:57 |
| qman__ | keep the one you're running and the latest, remove the rest | 23:57 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!
