[00:08] <jbondhus> Hi.
[00:08] <jbondhus> I'm having a problem with nfs on my server.
[00:10] <jbondhus> Is anyone here familiar with nfs?
[00:11] <jbondhus> Hello?
[00:11] <EvilResistance> you should usually explain the problem :/
[00:11] <EvilResistance> in order to get help
[00:11] <EvilResistance> then if anyone has experience they'll respond
[00:11] <jbondhus> Ok, sorry I was waiting to see if there was anyone here.
[00:11] <EvilResistance> alternatively, #ubuntu
[00:13] <jbondhus> The server is running Ubuntu 11.04 server. The client, which is running Mac OS X is not recognizing the files and folders on the NFS mount. Here are the settings on the server and client.
[00:13] <jbondhus> SERVER SETTINGS:
[00:13] <jbondhus> Export Folder:
[00:13] <jbondhus> Export Folder Owner:
[00:13] <jbondhus> jon:80 (me and admin group)
[00:13] <jbondhus> Export Folder Permissions:
[00:13] <jbondhus> -rwxrwxrwx
[00:13] <jbondhus> Export Options:
[00:13] <jbondhus> CLIENT SETTINGS:
[00:13] <jbondhus> Remote NFS URL
[00:13] <jbondhus> nfs://10.0.1.100/jbondhus
[00:13] <jbondhus> Mount Location
[00:13] <jbondhus> Advanced Mount Parameters
[00:13] <jbondhus> None
[00:13] <EvilResistance> stop
[00:13] <EvilResistance> pastebin
[00:13] <EvilResistance> !pastebin
[00:14] <jbondhus> Ok, here's the URL, sorry, i'm new to IRC.
[00:14] <jbondhus> http://paste.ubuntu.com/730553/
[00:16] <RoyK> jbondhus: the OS X NFS stack is somewhat sloppy, using netatalk works better
[00:17] <jbondhus> How do I use that?
[00:18] <jbondhus> The reason I'm using NFS is because it's the fastest protocol.
[00:23] <jbondhus> I have to make NFS work.
[00:26] <RoyK> jbondhus: apt-get install netatalk
[00:26] <jbondhus> On the server?
[00:26] <RoyK> NFS might be a bit faster, but you won't notice the difference in most circumstances
[00:26] <RoyK> yes
[00:27] <jbondhus> You know what, does ubuntu use afp?
[00:27] <jbondhus> Can it support it as a client?
[00:27] <RoyK> ubuntu supports AFP
[00:28] <RoyK> I really doubt using AFP as a client from ubuntu will be the best choice
[00:28] <jbondhus> My other laptop uses ubuntu and my main one uses Mac OS X, and the Server runs Ubuntu server. It has to be compatible with them all.
[00:28] <RoyK> but the file ownership will be in sync whether you use afp or nfs or smb or whatever
[00:29] <jbondhus> But smb is slower, and AFP is more compatible with mac os x.
[00:30] <RoyK> I use AFP for my mac and NFS for unices and SMB for windoze
[00:30] <twb> For a heterogeneous environment Samba will be the least painful
[00:30] <twb> MAYBE NFS if you have OS X and Linux, but I wouldn't want to bet on it
[00:30] <jbondhus> Well I have to have it shared. I found a great article on how to set up AFP on ubuntu.
[00:31] <RoyK> twb: mixing AFP and NFS works well
[00:31] <RoyK> it's just file ownership and modes after all
[00:31] <jbondhus> NFS had permissions problems. Check that, HAS permissions problems. I'm just going to purge the nfs packages and rm -rf the export. That way I can start with a clean slate instead of having a junk folder that's chowned to nobody.
[00:31] <twb> RoyK: I was assuming you didn't want the hassle or maintaining two whole network fs stacks
[00:31] <jbondhus> I think I'm going to go with AFP. It sounds the most painless.
[00:31] <twb> jbondhus: well, unless you're going to run kerberized CIFS, NFSv4 or AFS, you are going to have permissions issues.
[00:32] <twb> Unkerberized network filesystems simply do not enforce access restrictions.
[00:32] <jbondhus> What do you mean by unkerberized? I haven't heard that term before?
[00:32] <ersi> Meaning you don't have kerberos authentication setup
[00:32] <RoyK> without Kerberos
[00:32] <jbondhus> Ok, that makes more sense.
[00:35] <jbondhus> Is AFS the same thing as AFP?
[00:36] <RoyK> !afs
[00:36] <jbondhus> What?
[00:36] <RoyK> afs is andrew file system, not really compatible with AFP, which is apple file protocol
[00:36] <RoyK> !afp
[00:37] <RoyK> this bot is too stupid
[00:37] <jbondhus> Ok, nevermind then.
[00:40] <jbondhus> Bye.
[00:40] <twb> Indeed; not compatible at all, completely separate protocol :P
[00:41] <twb> I only mentioned AFS because it's kerberized; I wouldn't recommend it for anyone that isn't a university
[00:41] <ersi> He just logged off.
[00:41] <twb> ersi: I was speaking for the benefit of lurkers :P
[00:42] <ersi> 'k. :-)
[01:19] <yaboo> stupid issue got two data four port pci-e cards, and when I boot the disks connected to them change address, can I lock in the address
[01:21] <twb> yaboo: sorry, are these ethernet cards or sata cards?
[01:21] <yaboo> twb sata cards
[01:21] <twb> So what address is changing, the pseudo-SCSI bus address?
[01:21] <yaboo> four port, both cards have disks connected to them
[01:22] <yaboo> two, e.g. on one boot disk is /dev/sdc, next boot it is /dev/sdg
[01:22] <yaboo> and boot after that its back to /dev/sdc
[01:22] <yaboo> trying to do software raid
[01:23] <twb> yaboo: that is how disks work.  It is only chance that you have never had this problem until now
[01:23] <twb> yaboo: to use software raid, just refer to the array by its UUID rather than by the device names of its array nodes
[01:24] <yaboo> twb so disks will change address during boot
[01:24] <twb> Yes
[01:24] <yaboo> twb, sort of stupid even using the disks  normally means I cannot put them in stab, because next boot its changed id
[01:25] <twb> yaboo: fstab also supports UUIDs
[01:25] <yaboo> two I understand, can I just lock the disks down
[01:25] <twb> I doubt it
[01:25] <yaboo> ok
[01:25] <twb> If I had to guess I would say its because you have two identical cards, so they are more likely to race
[01:26] <yaboo> two yes they are the same cards
[01:26] <twb> But in theory it could happen on any hardware, and the Right Thing is to use UUIDs
[01:26] <yaboo> ok
[01:26] <twb> If you're installing Ubuntu it usually should use UUIDs by default
[01:27] <yaboo> twb, thats cool, but when I reboot the array now comes as /dev/md127 and fails to mount, even using uuid
[01:28] <twb> I do not know why that is.
[01:28] <yaboo> that is???
[01:28] <twb> Did you update /etc/fstab and /etc/mdadm.conf and run update-initramfs -u -k all?
[01:28] <yaboo> no
[01:28] <twb> Do so.
[01:29] <yaboo> so update /etc/fstab with the uuid and the /etc/mdadm/mdadm.conf then run update-initramfs -u -k all?
[01:29] <twb> OK, pastebin your current fstab and mdadm.conf
[01:29] <yaboo> ok
[01:30] <qman__> yeah, UUID by default was nailed down years ago
[01:30] <qman__> I remember dealing with it in 5.10
[01:30] <twb> When was the sg transition?
[01:30] <twb> qman__: ^^
[01:30] <qman__> well, dealing with this problem
[01:30] <twb> qman__: I'd have said more like 2007, but whatever.
[01:31] <qman__> in any case, long enough
[01:31] <twb> qman__: I expect he's just following an ancient howto or something
[01:32] <yaboo> twb http://pastebin.com/DSgqZ4xh
[01:33] <twb> yaboo: you have no arrays in mdadm.conf
[01:33] <twb> yaboo: you need something along the lines of this:
[01:33] <twb> A
[01:33] <twb> ARRAY /dev/md0 level=raid1 num-devices=3 UUID=aaebe741:68a1b213:7234de3b:cd66fef8
[01:34] <yaboo> two ok, seems I am following a old how to then
[01:34] <twb> You can get the UUID by doing mdadm --detail /dev/md127 or so
[01:34] <yaboo> change raid=6 for me I guess
[01:34] <qman__> also, my fstab doesn't use that UUID format for the array
[01:34] <qman__> it uses the same format as the rest of the disks
[01:35] <twb> Yes, in fstab it would look like this:
[01:35] <twb> UUID=58d2c859-912a-4937-bbb4-d9f9edd16232 /boot ext2 noatime,nodev,nosuid,noexec,ro,sync 0 2
[01:35] <twb> Note the UUIDs will be different -- mdadm takes the *array* UUID; fstab takes the *filesystem* UUID.
[01:35] <twb> The filesystem UUID can be gained with "blkid /dev/md127" or "tune2fs -l /dev/md127"
[01:36] <twb> yaboo: also you seem to have the root filesystem in fstab defined twice
[01:36] <yaboo> ok
[01:36] <qman__> yeah, that's a big problem
[01:36] <twb> In future, you should check the date on the howto before you follow it :-)
[01:37] <qman__> while the concepts haven't changed much, the little things have
[01:40] <yaboo> two change my line to RRAY /dev/md0 level=raid6 num-devices=6 UUID 8c4113cd:9dee4f90:bc191129:c5bc8b2a       /home/storage   ext4    errors=remount-ro       0       1
[01:40] <yaboo> RRAY /dev/md0 level=raid6 num-devices=6 UUID 8c4113cd:9dee4f90:bc191129:c5bc8b2a       /home/storage   ext4    errors=remount-ro       0       1
[01:40] <yaboo> two changed my line too ARRAY /dev/md0 level=raid6 num-devices=6 UUID 8c4113cd:9dee4f90:bc191129:c5bc8b2a	/home/storage	ext4	errors=remount-ro	0	1
[01:40] <yaboo> is this correct
[01:41] <twb> My name is "twb" not "two"
[01:45] <yaboo> sorry twb
[01:46] <yaboo> is this correct syntax or not
[01:47] <qman__> that is not correct
[01:48] <qman__> the ARRAY bit goes in mdadm.conf, the /home/storage blah blah belongs in fstab
[01:51] <yaboo> ok have to wait till server reboots
[02:32] <KoolaidJunkie> Hello Everyone.
[02:32] <KoolaidJunkie> I was wondering if there was someone that could help me with a External Harddrive mounting issue
[02:36] <twb> !ask
[03:42] <keithclark> I have my router, a speedtouch 516, and a router, a DLink DIR-615.  I am having a problem with port forwarding.  It is now working.  I seem to be having an issue with the modem.  It sees my router as 192.168.1.64, where my router's address is actually 192.168.0.1.  Not sure what the issue is here.
[03:45] <twb> Unless your router or modem is running Ubuntu, that sounds like a problem for your router/modem vendor, not us
[04:06] <keithclark> Maybe a bad modem?
[04:18] <twb> All modems are bad modems
[04:31] <keithclark> Bridge mode versus PPP mode maybe the issue with the modem?
[07:50] <chenbing> have installed debian squeeze xfce4,seems no kernal source ,I mean there is no /usr/local/linux directory.how to apt-get it ?
[07:53]  * greppy looks at the channel name
[11:19] <runasand> hey, I downloaded ubuntu-10.04-server-cloudimg-i386.tar.gz and SHA256SUMS.gpg from https://uec-images.ubuntu.com/releases/10.04/release/, but I get a bad signature when I try to verify. Any idea what's up?
[11:23] <ikonia> runasand: sounds like a corrupt source or corruption in transit
[11:23] <ikonia> runasand: (or the image has been updated and the signature hasn't)
[11:24] <runasand> ikonia: ok, so it's not just me doing it wrong. The checksum in SHA256SUMS matches, so that's something.
[11:24] <runasand> ikonia: any idea who I should poke to have the signature updated?
[11:25] <ikonia> a good question,
[11:25] <ikonia> I don't know who maintains that stuff, at one point I didn't even think it was official
[11:26] <runasand> https://bugs.launchpad.net/ubuntu-on-ec2 seems like the best place
[11:26] <runasand> ikonia: hah, ok, the FAQ actually points users to this IRC channel :)
[11:26] <ikonia> I'm sure that is correct, I just don't use those image, so have never really got involved
[11:29] <runasand> ikonia: heh, figured it out, seems like I was just doing it wrong :)
[11:30] <ikonia> explain ?
[11:31] <runasand> basically, you fetch the sha256sum, sha256sum.gpg and the tarball, verify sha256sum with sha256sum.gpg and then check that the sha256sum for the tarball matches what's in the sha256sum file
[11:41] <air_> howdy.
[11:42] <air_> what's the use of the "backup" user autoamtically created on an ubuntu install?
[11:42] <air_> Is there any harm done if I make use of it to setup an rsync from a remote server?
[11:42] <air_> (ubuntu server, 10.04 lts)
[11:43] <air_> I was planning on doing keybased login, just wondering if I should create a new user or reuse the existing backup user.
[11:43] <air_> RoyK: you alive? :)
[12:53] <yann2> hello! Is the maitainer of puppet/facter around? I think the last upgrade in maverick broke it
[12:55] <yann2> I get this: http://pastealacon.com/29045  (worked last friday) i guess it might be because of https://launchpad.net/ubuntu/maverick/+source/facter/1.5.7-1ubuntu1.2
[12:59] <yann2> if I use the version from main instead of proposed, it works.... (sudo apt-get install facter=1.5.7-1ubuntu1)
[13:14] <soren> yann2: Can you file a bug that real quick, please?
[13:15] <yann2> will do. nice to see you around here soren :)
[13:15] <soren> cjwatson: Looks like an SRU regression ^  I forget what the exact steps are from here :-/
[13:17] <yann2> https://bugs.launchpad.net/ubuntu/+source/facter/+bug/885998  actually already reported
[13:17] <yann2> seems I was pointing at the wrong commit
[13:19] <yann2> too bad the package got pushed i -updates despite having this bug reported against it a few days ago :(
[13:21] <soren> yann2: Yes, that is quite unfortunate. :(
[13:37] <cjwatson> soren: https://wiki.ubuntu.com/StableReleaseUpdates#Regressions
[13:38] <cjwatson> adam_g: ^- regression in your facter upload to at least lucid and maverick
[13:38]  * cjwatson bumps bug 885998 to critical, though somebody who actually knows their way around facter will need to investigate
[14:09] <soren> cjwatson: Ok, thanks, I'll save that for another time (I don't suppose it'll help much at this point?).
[14:14] <cjwatson> soren: probably not, no
[15:51] <cwillu_at_work> you know how device letters start at sda, and go up through sdb, sdc, etc?
[15:51] <cwillu_at_work> I'm up to /dev/sdik :/
[15:51] <cwillu_at_work> (not a typo)
[15:51] <cwillu_at_work> (not useful either)
[16:16] <SpamapS> cwillu_at_work: indeed, its important to have something to make logical sense of those arbitrary device names
[16:16] <cwillu_at_work> SpamapS, there's a grand total of 2 drives in this system :p
[16:17] <SpamapS> cwillu_at_work: lots of hot swapping?
[16:17] <cwillu_at_work> the usb adapter I use to write out images to new drives loses its mind on a regular basis
[16:17] <cwillu_at_work> but this is new behaviour as of 3.0
[16:18] <cwillu_at_work> hmm, or is it
[16:18]  * cwillu_at_work pokes btrfs with a stickl
[16:31] <nineteen67comet> Morning all, I've been running my web server since around 2002 (most recent server since 2008). I have been given an updated machine and would like to migrate my sites over slowly. How can I tell Apache or my router (Tomato Linux WRT54GL) which site to which machine?
[16:32] <nineteen67comet> I would like to move one site at a time as I learn how to get things like I need (also moving from Wordpress to Drupal)
[16:32] <nineteen67comet> maybe Joomla?
[16:33] <xranby> nineteen67comet: if you have the sites on different subdomains then you can vome them over one by one by changing your dns entrys
[16:33] <xranby> like  joomla.mydomain.com
[16:34] <xranby> if you have the different sites as subfolders   like www.mydomain.com/joomla
[16:34] <xranby> then you need to tell the old apache to forward all requests to each subfolder to the new server
[16:34] <xranby> you could use apache mod_proxy to do this
[16:35] <nineteen67comet> Okay .. they are all base URLS (www.domainname1.com www.domainname2.com etc etc) .. so Apache can hand a site off to another machine on my network?
[16:35] <nineteen67comet> my folders are all /var/www/domain1 /var/www/domain2 /var/www/domain3 etc etc
[16:36] <xranby> by using apache mod proxy you can add      ProxyPass       /app1/  http://internal1.example.com/app1/
[16:36] <xranby> to your apache configuration configureation
[16:36] <SpamapS> nineteen67comet: right, so you probably have www.domainname1.com pointed to the IP of your old server, you should point it to the IP of your new server.
[16:36] <SpamapS> proxy is not really necessary
[16:36] <nineteen67comet> aha .. unkay .. I'll jump on mod_proxy ..
[16:36] <xranby> nineteen67comet: there are usually several ways to solve this task
[16:37] <nineteen67comet> All my URLs once they go to afraid.org they hit my router and are sent to my web server (current/old one)...
[16:37] <xranby> if each site have its own domain
[16:37] <nineteen67comet> yes
[16:37] <xranby> simply update the dns entrys
[16:37] <xranby> to make each domains ip point to the new server
[16:37] <nineteen67comet> all domains are in the same box; my ip (external) is not static so I use afraid.org as my DNS .
[16:38] <SpamapS> You can probably just copy the old configs to the new server and then just move each DNS pointer one by one.
[16:38] <SpamapS> nineteen67comet: oh you only have one real IP ?
[16:38] <nineteen67comet> SpamapS: yes ..
[16:38] <SpamapS> well thats different then!
[16:39] <nineteen67comet> my router hands off all port 80, 81, 8080, 8081 to the web server (and 21,22 etc) .. the IP is a dynamic typical home user IP ..
[16:39] <SpamapS> nineteen67comet: for that you probably want to use mod_proxy from the old server to the new.
[16:39] <nineteen67comet> okay .. I'll jump on mod_proxy ..
[16:39] <SpamapS> nineteen67comet: inside each <virtualhost> you can define a ProxyPass and ProxyPassReverse that will send all the traffic to the new server.
[16:40] <SpamapS> nineteen67comet: theres' an option you'll need so you can use your old configs on the new server...
[16:40] <nineteen67comet> Okay ..
[16:40] <SpamapS> nineteen67comet: what version of apache do you have on your old server?
[16:41] <nineteen67comet> Looking' now .. it's running Ubuntu Server 10.04.1 .. with Apache .. 2.2.14 ..
[16:42] <SpamapS> nineteen67comet: ok good
[16:42] <nineteen67comet> I put 11.10 with apache 2.2.20 on board (was going to stick with LTS but new stuff is just so shinny) ..
[16:43] <nineteen67comet> the new one has 11.10
[16:44] <SpamapS> nineteen67comet: yeah, on the 10.04 box you'll want to set ProxyPreserveHost On ...
[16:44] <nineteen67comet> K .. in there now looking ..
[16:44] <SpamapS> nineteen67comet: that way the new server will get the same Host: header so the <virtualhost> sections will work
[16:50] <nineteen67comet> For the Allow from portion of ProxyRequests .. do I put the URL that I want forwarded to? in my case www.justinsteiger.com .. seems like this one I found is for incoming Proxy control ..
[16:51] <nineteen67comet> http://httpd.apache.org/docs/2.0/mod/mod_proxy.html is the site I found on Apache .. I'm looking at the basic examples .. SpamapS
[16:52] <cemc> hi. is there any tool in ubuntu for notifying admins (by mail) when a servers gets rebooted without proper shutdown (like a power outage or reset/power switch etc) ?
[16:54] <nineteen67comet> SpamapS: and xranby thank you for the direction .. I'm going to go tinker with it all a bit and see if I can't make it work ..
[17:13] <roaksoax> SpamapS: ping
[17:15] <SpamapS> roaksoax: pong, sup!
[17:19] <roaksoax> SpamapS: just asked pitti to reject a package from oneiric's -proposed... unless you can beat him to it so I can upload a new one
[17:21] <SpamapS> roaksoax: ecryptfs-utils ?
[17:22] <roaksoax> SpamapS: redhat-cluster
[17:24] <SpamapS> roaksoax: guess pitti got it first
[17:26] <roaksoax> SpamapS: ok, thanks though ;)
[17:44] <roaksoax> zul: ping
[17:44] <roaksoax> zul: do you have the list of patches you are forwarding to cobbler?
[17:44] <zul> roaksoax: yo whats up?
[17:45] <zul> roaksoax: not handy
[17:45] <zul> actually handy
[17:45] <zul> roaksoax: https://github.com/zulcss/cobbler-oneiric
[17:45] <roaksoax> zul: may I take a look? so I can work on re-writting those that can be made less Ubuntu specific
[17:45] <zul> roaksoax: please
[17:45] <roaksoax> zul: cool thanks
[17:45] <zul> roaksoax: 2.2.2 should be coming out soon so ill rebase and upload
[17:46] <roaksoax> zul: awesome!
[17:46] <zul> roaksoax: im going to suggest we move away from the git snapshots
[17:47] <roaksoax> zul: agreed
[17:52] <roaksoax> zul: https://github.com/zulcss/cobbler-oneiric/commit/71ba77b0578c751804643695a71849fdd739da2b this commit should be separated in two commits
[17:53] <zul> roaksoax: k
[17:53] <roaksoax> zul: other than that, it looks good to me
[17:53] <roaksoax> zul: I thnk you can forward those, then rebase 2.2 to manage better the delta
[17:54] <zul> roaksoax: ack
[17:54] <roaksoax> zul: cause otherwise it might become a mess :)
[17:57] <zul> SpamapS:  you did miss something: https://github.com/zulcss/cobbler-oneiric (they are still pending)
[17:57] <SpamapS> zul: alright cool!
[18:17] <roaksoax> zul: so are we gonna propose upstream cobbler to work with us on adding ITSM concepts to cobbler systems?
[18:18] <zul> roaksoax: i dunno i havent thought about it
[18:18] <roaksoax> zul: I'll contact upstream and dig into that
[18:19] <zul> roaksoax: k
[18:22] <zetui> hello there
[18:22] <zetui> this is what i got on my ubuntu server
[18:22] <zetui> http://pastebin.com/tDS02ine
[18:23] <zetui> what i have to do ?
[20:03] <azert> hello
[20:03] <azert> there
[20:03] <azert> i got HP DL380 Proliant server G7
[20:04] <azert> from this morning i got something like this error :
[20:04] <azert> http://ubuntuforums.org/showthread.php?p=11425367
[20:05] <azert> [1131516.069427] ACPI Error: SMBus or IPMI write requires Buffer of length 66, found length 32 (20110112/exfield-285 )
[20:05] <azert> [1131516.069433] ACPI Error: Method parse/execution failed [\_SB_.PMI0._PMM] (Node ffff880ea888e7f8 ), AE_AML_BUFFER_LIMIT (20110112/psparse-536 )
[20:08] <pmatulis> azert: does it have an addon ipmi card or does it just use onboard ilo?
[20:11] <azert> onboard ilo
[20:11] <azert> just only
[20:12] <azert> pmatulis:
[20:13] <pmatulis> azert: i would check what acpi settings are to be found on your box, bios and os level
[20:13] <pmatulis> azert: tinker around with that for a while...
[20:14] <pmatulis> azert: and study bug #578506
[20:22] <azert> is it enough to get out the battery and replace. ?
[20:26] <azert> pmatulis:
[21:01] <randomcake> Hi, I'm running Ubuntu Server 11.10 and I'm struggling to SSH into the server, I've disabled the firewall, and still nothing, SSHd is on and listening (connecting to user@localhost works fine), but remote connections won't connect, what can I try to get it to connect?
[21:04] <hallyn> zul, hey, do you see any problems with http://people.canonical.com/~serge/l.debdiff (libvirt debdiff for precise)  - the logrotate stuff is new to me, but it does the right thing in my tests.
[21:11] <pmatulis> randomcake: see if the client can sense the open port on the server (telnet, nc, nmap)
[21:12] <pmatulis> randomcake: look at server logs (/var/log/syslog)
[21:13] <randomcake> I don't see the port as being open, and nothing is logged in syslog
[21:18] <randomcake> what should I try next pmatulis?
[21:29] <Matrix3000> how do i perm remove dhcp3
[21:31] <Matrix3000> when i do an apt-get remove dhcp3-client it wants to remove ubuntu-minimal as well
[21:50] <randomcake> pmatulis, I'm getting 'no route to host' now I'm doing SSH from another linux box (was using a Windows laptop before)
[21:50] <randomcake> Matrix3000, why do you want to remove DHCP?
[21:51] <dork> randomcake: is this ssh server behind a router?
[21:52] <dork> or are you doing a local to local connection? what does your networking look like
[21:53] <randomcake> all 3 computers are inside the same local network, it's a WiFi router, and a switch (the server and my laptop are connected by WiFi)
[21:54] <randomcake> all are able to use the internet, the server is able to connect to my Linux NAS via SSH, but the NAS and laptop are unable to connect to the server
[21:55] <dork> pastebin the output ot /sbin/iptables -L
[21:55] <dork> please
[21:56] <dork> on your server w/ sshd
[22:02] <dork> randomcake: you doing that or no? i gotta go soon
[22:03] <randomcake> the internet connection seems to have gone a little odd, I can't get to the pastebin, it's empty
[22:03]  * hallyn out
[22:04] <dork> pastebin is used for you to paste the data in, apply, give me the link so i can read the output of the command i asked without you flooding the channel
[22:04] <dork> so just do /sbin/iptables -L
[22:04] <dork> cut, go to pastebin.com
[22:04] <dork> paste it in
[22:04] <dork> submit
[22:04] <dork> give me the url
[22:04] <dork> think of it as notepad or something
[22:05] <randomcake> no rules, but iptables-save does give the following: *filter\n:INPUT ACCEPT [3091:2105891]\n:FORWARD ACCEPT [0:0]\n:OUTPUT ACCEPT [2928:277972]\nCOMMIT
[22:06] <dork> it's network related whatever it is, are these both linux boxes?
[22:07] <randomcake> I'm familiar with pastebin, but I'm having trouble with new network connections
[22:07] <dork> no ip conflicts?
[22:08] <randomcake> yes, both linux boxes, I don't believe so, the IPs are all allocated by the router (with the server specifically given an IP of my choosing, but still DHCP)
[22:10] <dork> can you do a telnet to the box port 22
[22:10] <dork> see if it picks up
[22:10] <dork> if it's no route you're getting i doubt the telnet will have any different results
[22:10] <dork> what kind of router is this
[22:10] <randomcake> nope, gives 'ssh: connect to host 192.... port 22: No route to host'
[22:11] <randomcake> it's a BT HomeHub (I think the manufacturer is Thompson)
[22:11] <dork> can you pastebin ifconfig results as well as your routing table please
[22:11] <dork> can you ping the host?
[22:11] <randomcake> nope
[22:12] <dork> and the machine w/ the sshd can send and receive internet data?
[22:12] <dork> can you ping the other box from the problematic server?
[22:16] <randomcake> sorry, I'm not used to Xfce (not sure Xfce is the part I'm struggling with), I'm struggling to copy and paste from terminal :S
[22:17] <dork> hilight, copy, paste bud
[22:18] <dork> i gotta jet though, look at your router, see if you can install nmap on a working linux server and do nmap -sT ip.address.x.x and see if it sees ssh open
[22:18] <dork> it's something routing related
[22:19] <randomcake> maybe the Wifi dongle is rubbish, highly, fine, copy, fine, paste, within the same terminal seems fine, but paste elsewhere, and nothing
[22:20] <air_> well, if he get's a no route to host error, it's not very likely nmap would show any open ports.
[23:07] <CantWinn> Hello
[23:07] <RoyK> .... . .-.. .-.. ---
[23:10] <CantWinn> I work for a small company that does a lot of file share. Currently we use a program called DropBox and can be found at DropBox.com. I am looking to expand my Ubuntu knowledge by setting up a server with Ubuntu and creating a file share with permissions and user folders etc. Does Ubuntu-server handle this well?
[23:11] <randomcake> CantWinn, yes, Ubuntu Server is ideal for this
[23:12] <randomcake> CantWinn, https://help.ubuntu.com/11.04/serverguide/C/samba-fileserver.html should help you get started. You can have your logins based on a Windows server's accounts, but that would be more complicated.
[23:12] <RoyK> CantWinn: ubuntu can do all of that, but dropbox is specialized for it, using ubuntu, you can use tools like rsync to do the same
[23:13] <randomcake> it depends, are you using dropbox within a single office? or are your staff spread out?
[23:13] <CantWinn> Ok, Yeah i know DP is specialized but, when we have a lot of PDF's etc, every time someone moves computers it takes them about an hour to D/L and sync the files
[23:14] <RoyK> your average rsync -za will probably work if it's in-house
[23:14] <CantWinn> They are mostly located in the main building with a couple of very small satellite offices consisting about 5ppl ea
[23:15] <RoyK> CantWinn: what amount of data?
[23:15] <randomcake> RoyK, if it's a small company, and small office, why not a Samba share? CantWinn, is there a VPN or other tunnel connecting the offices?
[23:15] <CantWinn> VPN
[23:15] <RoyK> randomcake: depends if they're using windows or not
[23:16] <randomcake> and what sort of existing servers do you have CantWinn?
[23:16] <RoyK> CantWinn: doesn't say anything about bandwidth
[23:16] <CantWinn> We have a couple of servers that are running Windows 2008 R2 virtual servers on them.
[23:16] <randomcake> a server per site?
[23:16] <RoyK> CantWinn: samba in AD mode?
[23:16] <CantWinn> RoyK, they have a 10Mbps fiber line
[23:17] <CantWinn> RoyK, Yes
[23:17] <RoyK> ok
[23:17] <CantWinn> The clients work stations have Win7 on them
[23:17] <RoyK> CantWinn: why not bacula?
[23:17] <CantWinn> We have an older Dell PowerEdge R200 server not being used, I thought about trying to set that up and experiment
[23:17] <air_> dropbox checks the checksums of files, and avoids overloading your upstream if the file already exists at dropbox. (part of their deduplication).
[23:18] <air_> personally, i don't like the idea to share my files with the world, but it does save lots of upstream performance.
[23:19] <CantWinn> They want to get out of drop box for 2 reasons.. 1 not as secure as they like because we are a medical facility handling patient data. Number 2 is because if the internet or DP goes down we can't transfer files to where they need to go
[23:19] <CantWinn> RoyK, .. bacula?
[23:19] <air_> seriously.
[23:19] <RoyK> CantWinn: setup a backup box with some 2TB drives in RAID, sw raid should suffice well, and use bacula to back them up
[23:19] <RoyK> !bacul
[23:19] <RoyK> !bacula
[23:19] <air_> you throw patient data on dropbox?
[23:20] <RoyK> CantWinn: see bacula.org
[23:20] <CantWinn> air_, I just started here about 5 days ago.. believe me I am on this REAL fast
[23:20] <randomcake> air_, any better than rsync does? I'd consider, a server per site, rsync to each site, and at the sites access the files using Samba, letting the windows users have mounted drives
[23:21] <randomcake> or (hope this isn't against the rules!) consider the options your existing servers provide, such as Distributed File Systems in Server 2008 R2...
[23:22] <CantWinn> I think what they want and what i would like to do, is set up a file share because this is what happens: (bare with me while I type)
[23:22] <air_> randomcake: if you mean to compare dropbox to rsync, sure, you could probably get the same behavior, but you'd have to care about hard links and yourself finding duplicate files.
[23:23] <air_> randomcake: but then again, I'm against putting anything of value on to dropbox. :)
[23:23] <randomcake> yeah air_, handing anything of serious value to a 3rd party isn't something to be done lightly...
[23:24] <randomcake> no problem CantWinn, understanding your use case is our best way to give decent advice :)
[23:24] <CantWinn> Nurse scans chart, that chart gets sent to a program running RDP on the clients computer to the server, after which the file is then uploaded to DP where another person will take the scanned PDF's and import them to a splitting program, when she is done those splits go to another DP folder where some are picked up by a records person and the other if there is a RX goes to the pharmacy who has a DP for RX's
[23:25] <air_> I'd sue you for this.
[23:25] <air_> :P
[23:25] <RoyK> CantWinn: then use bacula or some other backup system which keeps the data private
[23:26] <CantWinn> RoyK, we want to.. I wanted to implement a system so they can share files into folders that users are granted permission that they can access via inhouse or VPN, then have a SQL backup offsite.. wich they currently do NOT have >:(
[23:28] <RoyK> CantWinn: for medical data, you'll need  to setup a VPN solution to make the data available off-site
[23:28] <CantWinn> *believe me when I say this is only scratching the surface of things wrong..* I haven't even gotten into: No redundant switches, No redundant DB Servers.. list grows
[23:28] <RoyK> anything else is bogus
[23:28] <randomcake> doesn't sound like any compelling reason to be using Dropbox CantWinn, was it lack of technical skills to implement a better solution that caused them to choose DB? Rather than any specific features of DropBox?
[23:29] <CantWinn> RoyK, Yeah, that's why I was wondering how Ubuntu server will handle it.. I use Desktop myself and have always enjoyed many flavours of Linux, but I have never worked with server side.
[23:29] <CantWinn> Well except RH virtual
[23:29] <RoyK> CantWinn: try bacula
[23:29] <RoyK> CantWinn: bacula can backup most OSes
[23:30] <CantWinn> randomcake, I will give you the reason.. it all boils down to $$ Management sees $600 / mon for secure online backup and freaks out apparently..
[23:30] <CantWinn> RoyK, I saved the link
[23:30] <RoyK> CantWinn: apt-get install ......
[23:31] <air_> CantWinn: explain to management what it will cost when the first patient sues you for loosing their information on dropbox.
[23:31] <CantWinn> So what would my best solution be roughly with out causing you detail grief? Old server running Ubuntu, setup for file permission shares and VPN, then implementing backula?
[23:31] <RoyK> CantWinn: bacula is a PITA for starters, the installation can be a bithard, but once it's up and running, it's rock stable
[23:31] <CantWinn> RoyK, so Backula is standalone then?
[23:32] <air_> if you are in an AD environment with access to running an extra virtual windows, why not consider running just another w2k8 for the file shares?
[23:32] <RoyK> CantWinn: can be, but it can run on any linux or unix machine
[23:32] <air_> then back it up to anything.
[23:33] <CantWinn> air_, I was wondring that too, but when I asked there was groaning's about the extra $$ for W2K8 keys.
[23:33] <CantWinn> *wondering
[23:33] <RoyK> CantWinn: bacula is a backup service, it can run on most things, with a database backend of preferabably postgresql
[23:34] <air_> CantWinn: again, just compare the costs to the damage done with current way of working.
[23:34] <CantWinn> RoyK, Ok, so bacula does sound like a good option to solve for my backup issues (which is currently a HD plugged into an external mount device) but in a quick expl how does backula help with the file share?
[23:35] <CantWinn> air_, I know that, and you know that.. remember, the rich get their by being greedy
[23:35] <CantWinn> grr *there
[23:35] <RoyK> CantWinn: bacula is a backup system, not a file sharing system
[23:35] <CantWinn> << Too many things on the go at once
[23:35] <CantWinn> RoyK,
[23:36] <CantWinn> RoyK, ok, I thought so, I have been jumping back and forth to the site
[23:36] <air_> CantWinn: the rich understand when you tell them they are fucked. I tried that on my last workplace, they told me they where insured against all things that could happen.
[23:36] <RoyK> CantWinn: for file sharing, use samba or whatever appropriate
[23:36] <air_> I gave them some nice scenarios where they would still be fscked no matter what they where insured against. :D
[23:36] <CantWinn> air_, Yeah, insurance is the blanket that most companies are hiding behind...
[23:37] <RoyK> CantWinn: whatever insurance, it won't hold your data......
[23:37] <CantWinn> Well the good news i hope is I got hired by a new director of IT here, and he's more a people person than tech, so when I told him the issues he told me he's going to get them to realize what kinda d00 d00 they are in
[23:37] <air_> and it wont hold your reputation.
[23:39] <CantWinn> air_, nope.. that's why I'm working late right now trying to come up with something I can work on.. I just need to make sure that when people update a file in the share, that it's updated so all people can use it
[23:39] <air_> if you loose customer data, get sued, got insurances to cover the legal fees, you will still make the news prime time and get a big bad reputation about being careless.
[23:39] <CantWinn> yup
[23:39] <air_> explain this to the big bosses.
[23:39] <CantWinn> My director is
[23:39] <air_> they don't want to be on the news for loosing patient data.
[23:40] <RoyK> CantWinn: what are you trying to setup? a file server or a backup server?
[23:40] <CantWinn> RoyK, I NEED both
[23:40] <RoyK> CantWinn: those are two different services
[23:40] <air_> RoyK: summary. they share patient data through shared dropbox.com folders.
[23:40] <CantWinn> I'm trying to set up a local file server so they can stop using DP
[23:41] <air_> and they don't do backups.
[23:41] <air_> :D
[23:41] <CantWinn> air_, BINGO
[23:41] <air_> well, at least you have lots of things to improve here :D
[23:41] <RoyK> CantWinn: for windows, samba should do well, preferably in AD mode if you have AD at thesite
[23:41] <CantWinn> we are running AD on the main domain controller server
[23:42] <RoyK> CantWinn: for backup, bacula or something, bacula is cheap (i.e free) and can backup any unices and win2k3/winxp and forward without issues
[23:43] <CantWinn> RoyK, so with bakula running the backups I would just need to find an off site secure upload solutions then?
[23:43] <RoyK> CantWinn: with bacula, you backup things on-site, and then, you can replicate that off-site if needed
[23:44] <RoyK> CantWinn: how much data is this?
[23:44] <RoyK> a few gigs? a few terabytes?
[23:45] <CantWinn> ok, because I told them with data that they are supposed to keep until death, there needs to be an off site solution to copy to as well. because if there was ever a fire in the server room that has no A/C *groan* then they need to be able to get backups back
[23:45] <CantWinn> Not much.. rightnow about 400GB MAX.. the DB is showing about 230gb use
[23:45] <RoyK> CantWinn: tape backup, then, and an offsite storage for those
[23:46] <CantWinn> RoyK, that would require them to have a tape backup drive
[23:46] <RoyK> CantWinn: I know people doing bacula backups on tape for the full backups and disk for the differential/incremential backups
[23:46] <CantWinn> Right now I have a server running symnaptic backup to an external drive that has an internal HD loaded in it like a tape.
[23:47] <randomcake> a server room without A/C? :| tape backup can't be fully automated, surely a network backup, which is then synced offsite
[23:47] <CantWinn> connected via USB.. lol
[23:47] <randomcake> better than connected via Dropbox :P
[23:47] <CantWinn> randomcake, that's why I'm looking at uploading to secure site.. and yes you read that right.. NO A/C..
[23:47] <CantWinn> randomcake, LOL
[23:48] <RoyK> CantWinn: just setup a remote machin with some large drives as the bacula SD
[23:49] <CantWinn> RoyK, I told them to utilize their small off site offices now and put in a small server that is direct VPN to us here, that way we have our OWN off site location.. still waiting on THAT idea for a yes or no
[23:49] <RoyK> or then, just tape backup, with remote storage of the tapes
[23:50] <RoyK> CantWinn: you still would want a backup solution where you can restore from earlier backups in case someone overwrites a file and wants the old one back a week later
[23:51] <CantWinn> My ideal solution I gave them was this: On site secure version of a DP, then a dedicated backup server with VPN to off site server for backup.
[23:52] <RoyK> CantWinn: the ideal solution is to have local snapshotting and then some backup off-site
[23:52] <RoyK> CantWinn: setting up a zfs storage system will help the first part, such as openindiana
[23:53] <RoyK> the latter is simple, just a bacula server somewhere else
[23:54] <CantWinn> sorry zfs? (getting tired)
[23:54] <RoyK> CantWinn: you won't beleive how many hours we have saved by moving to ZFS storage with snapshots instead of restoring from backups......
[23:54] <RoyK> !zfs
[23:55] <RoyK> CantWinn: zfs on ubuntu is slow and not what I'd recommend - using OpenIndiana is better, but then, it's anoter OS, with other things, so it's up to you
[23:57] <air_> what about nexentastor, openfiler, etc?
[23:57] <air_> how do they stand up compared to openindiana?
[23:57] <CantWinn> So far it sounds pretty damn impressive
[23:57] <RoyK> air_: nexentastor is expensive, openfiler I don't know, but I think it's not updated as frequently as openindiana
[23:58] <air_> RoyK: IIRC nexentastor community is free up to some 18TB storage.
[23:58] <RoyK> air_: and the open nexenta isn't updated very frequently, hardly at all, according to my nexenta contact in .no
[23:59] <air_> well, yeah, that seems to be the case actually.
[23:59] <CantWinn> So instead of using ubuntu you guys think I should use AD for the file share?
[23:59] <patdk-lap> I haven't liked openfiler
[23:59] <patdk-lap> how did openfiler get zfs? last I saw it was centos based