[00:03] <bfreis> l0n, did you manage to reproduce the problem?
[00:06] <l0n> just trying it now, not sure if this is going to work, I am just to run a VM inside a VM
[00:06] <l0n> just = trying
[00:08] <l0n> well that's sort of good, I've got the same problem
[00:09] <bfreis> Oh, I don't feel alone anymore
[00:09] <bfreis> lol
[00:09] <bfreis> :)
[00:10] <bfreis> You got the same message from the kernel?
[00:10] <l0n> yep
[00:11] <bfreis> did you use Eucalyptus or something else?
[00:12] <wmp> hello
[00:12] <wmp> i have server with only ipv6, what repository can connect with my server?
[00:12] <l0n> I just used plain old kvm with the cmd line that you pasted a while ago
[00:12] <bfreis> l0n, hmm ok
[00:20] <l0n> bfreis when you registered the image with Eucalyptus did you specify a kernel e.g. --kernel <eki-somethinghere> ?
[00:21] <bfreis> l0n this was done automatically by the uec-publish-tarball script
[00:21] <l0n> hmm, ok
[00:21] <bfreis> doing euca-describe-images I see that the kernel is correctly published, and the image is correctly configured to use the kernel
[00:24] <l0n> does it have the kernel filename?
[00:24] <bfreis> i don't understand
[00:24] <bfreis> where?
[00:24] <l0n> when you do a euca-describe-images, is the filename shown?
[00:25] <bfreis> IMAGE   emi-95C322B8    ebah-ubuntu-11.10-java-tomcat-amd64-20111126-1909/oneiric-server-cloudimg-amd64.img.manifest.xml        admin   available       public          x86_64machine eki-7A4827A0
[00:25] <bfreis> IMAGE   eki-7A4827A0    ebah-ubuntu-11.10-java-tomcat-amd64-20111126-1909/oneiric-server-cloudimg-amd64-vmlinuz-generic.manifest.xml    admin   available       public       x86_64   kernel
[00:25] <bfreis> well, that's not the original image
[00:25] <bfreis> IMAGE   emi-DB271F35    oneiric-server-cloudimg-amd64/oneiric-server-cloudimg-amd64.img.manifest.xml    admin   available       public          x86_64  machine eki-94B4240C
[00:25] <bfreis> IMAGE   eki-94B4240C    oneiric-server-cloudimg-amd64/oneiric-server-cloudimg-amd64-vmlinuz-generic.manifest.xml        admin   available       public          x86_64  kernel
[00:25] <bfreis> this is the original image
[00:25] <bfreis> you see, it references the kernel by "kernel id"
[00:25] <bfreis> eki-blah
[00:27] <l0n> hmm looks like the xml filename is derived from the kernel name - oneiric-server-cloudimg-amd64-vmlinuz-generic.manifest.xml
[00:27] <bfreis> certainly
[00:28] <l0n> not sure that is the right kernel, in the tar.gz that you download, you also get a oneiric-server-cloudimg-amd64-loader, have you got that ?
[00:28] <bfreis> yes, that is inside the tarball
[00:28] <bfreis> the tarball structure is exactly the same for natty and oneiric
[00:28] <l0n> and natty works?
[00:28] <bfreis> and I used the very same uec-publish-tarball to publish it
[00:28] <bfreis> yes
[00:28] <l0n> ah ok
[00:29] <bfreis> the problem is specific to oneiric
[00:30] <bfreis> actually, the *-loader files are exactly the same
[00:30] <bfreis> (well, more precisely, they have the same md5 hash)
[00:30] <bfreis> don't know if it is good or bad though
[00:30] <l0n> right, well I am now gonna give natty a go to make sure that does work
[00:30] <l0n> if it doesn't then our problems might be different
[00:31] <bfreis> great
[00:35] <bfreis> it looks like it is not an issue with Eucalyptus, but something specific to Ubuntu
[00:35] <bfreis> and now, if natty works for you, I'd say it is an issue specific to Ubuntu Oneiric's cloud image
[00:36] <l0n> natty isn't working for me so looks like I haven't yet managed to reproduce it
[00:36] <bfreis> oh damn
[00:36] <bfreis> what did it say?
[00:37] <l0n> natty also says it can't mount sda1
[00:37] <bfreis> holy crap!
[00:39] <l0n> don't worry, I am just doing something silly ;)
[00:39] <wmp> lol: http://wklej.org/id/635463
[00:40] <nebajoth> why are you using eucalyptus and not openstack?
[00:42] <bfreis> nebajoth, because it is a PITA to install openstack
[00:43] <bfreis> (before you ask, I don't own lots of boxes, just 4, so no orchestra+juju)
[00:43] <nebajoth> but you lose all future compatability and support
[00:44] <bfreis> nebajoth, the boxes serve only as VM hosts, I don't mind if they are not up to date, if they serve their purpose
[00:45] <bfreis> if you know an easy way to install openstack on 4 servers, I'd be glad to know how!
[00:49] <gllera> can i work with a vm on my pc and later put it on ec2??
[00:49] <l0n> bfreis can you start up a natty VM and paste me the output from ps (prob best in a PM) to show the command line?
[00:50] <bfreis> l0n, sure, just a sec
[00:50] <bfreis> l0n, I think it's almost the same thing
[00:50] <nebajoth> define easy :P
[00:51] <bfreis> nebajoth, as easy as Ubuntu Enterprise Cloud installation on Natty 11.04
[00:51] <bfreis> Shouldn't take more than 2-3 hours for someone who has never done it before
[00:51] <adam_g> utlemming: you around by chance?
[00:52] <bfreis> l0n, just sent you the kvm command line of one of my instances running a Natty image (not the original one, I tweaked it, but only slightly: installed some packages, etc)
[00:54] <bfreis> nebajoth, well, I already lost lots and lots of hours searching for a way to install it on 4 boxes with 1 nic each, but let's ignore this part :)
[00:54] <l0n> ok, shouldn't be a problem, I wouldn't have thought any packages would make a diff
[00:54] <bfreis> l0n, I can launch an original natty as well, but that shouldn't change the kvm command line
[00:54] <bfreis> eucalyptus won't know that it is an original or a modified image
[01:10] <afeijo> hi guys, what would be the better adduser parameters to create one user? I created one for me in a new linode server, but when I access it, it isn't reading the .bashrc file nor any file
[01:29] <l0n> afeijo how do you know it's not reading the .bashrc file or others?
[01:30] <afeijo> l0n, when I log in, the prompt has only "$", and no autocomplete thru tab, no aliases, etc.
[01:30] <afeijo> pretty naked
[01:30] <l0n> yeah I know what you mean, delete the user and try this.... (me looks through notes)
[01:31] <l0n> useradd -m USERNAME
[01:31] <l0n> you may also need to change bin/sh in /etc/pass to /bin/bash
[01:31] <l0n> for that new user
[01:32] <l0n> sorry /etc/passwd
[01:33] <afeijo> thanks!!
[01:34] <uvirtbot> New bug: #896737 in openldap (main) "package slapd 2.4.21-0ubuntu5.6 failed to install/upgrade:" [Undecided,New] https://launchpad.net/bugs/896737
[01:34] <afeijo> l0n, now it is perfect
[01:34] <l0n> np :)
[01:34] <l0n> btw, the reason the files don't exist is because you didn't have any .bashrc etc files, the -m creates a home directory for the new user and copies /etc/skel into it
[01:36] <l0n> ok that was a bit of a broken statement but you get my meaning ;)
[01:36] <afeijo> yeah, I found that, I did try the -m yesterday, I saw a few files in /home/feijo, but the /bin/sh was the issue
[01:37] <l0n> aahh ok
[01:48] <afeijo> l0n, do you know how to install maria db?
[01:49] <l0n> nope never heard of it
[01:49] <afeijo> l0n, it is the new mysqldb after oracle bought it, the community got the available source and made mariadb, hehe
[01:50] <l0n> oh right cool
[01:51] <afeijo> too bad we do not have an apt-get install out of the box
[01:55] <l0n> they've got debs for Ubuntu on their site so shouldn't be too difficult
[01:56] <afeijo> I'll try again to add their deb lines into my source.list
[01:57] <l0n> or just download the debs and do: dpkg -i deb.dev
[02:15] <afeijo> got it thru apt-key :)
[03:26] <bfreis> Well, if there are people interested, l0n helped me track down the problem. Actually, Oneiric's x64 cloud image looks totally buggy. The kernel is wrong, /etc/fstab is totally broken (eg, the line that should mount the root file system lacks a mount point...), the file /etc/network/interfaces is buggy (does not configure eth0). I might be wrong, but I guess /etc/fstab and /etc/network/itnerfaces must be correctly set up for the image to work.
[03:26] <bfreis> let's file a bug...
[03:28] <bfreis> Well, where should I go to file a bug against the image?!
[03:29] <bfreis> OH YEAH, after I fixed the network, it looks like it is working!
[03:31] <bfreis> the instance booted properly, I can ssh into it
[03:31] <bfreis> I have no idea if everything is fine though...
[03:32] <bfreis> looks like Canonical uploaded the first crap they could put together to their servers, I cannot be sure that this image is correct now...
[03:34] <pmatulis> bfreis: if you found a bug then let people know, there's no need to get vulgar
[03:34] <bfreis> After all, it had nothing to do with Eucalyptus...
[03:34] <bfreis> Where should I report it?
[03:34] <bfreis> It is not a bug on any package, it is on the image file
[03:37] <bfreis> pmatulis, do you know where should I report this bug?
[03:37] <pmatulis> bfreis: against the ubuntu project
[03:37] <bfreis> do you know where exactly?
[03:37] <pmatulis> https://bugs.launchpad.net/ubuntu/+filebug
[03:38] <jakupl> nebajoth, SpamapS: I installed dnsmasq on the server
[03:38] <jakupl> nebajoth, SpamapS: and it seems to work, when I try to use "dig www.webpage.com"
[03:39] <jakupl> nebajoth, SpamapS: But I don't quite understand... It just uses the dns server that the computer has used all the time right?
[03:39] <jakupl> nebajoth, SpamapS: and all it does is to cache the queries?
[03:40] <bfreis> Wow, it is REALLY hard to help...
[03:40] <bfreis> I'm trying to file the bug
[03:40] <bfreis> But I simply can't find how to do it
[03:41] <bfreis> https://bugs.launchpad.net/ubuntu/+filebug redirects me to a huge page, with lots of texts, I just want a textarea to fill with all the information and what I did to solve the problem
[03:41] <bfreis> Isn't there any such form?!
[03:42] <pmatulis> bfreis: i have no idea what you're talking about.  the link i provided gives the most simle way to file a bug
[03:42] <pmatulis> *simple
[03:42] <jakupl> Does anyone feel like helping me understand dnsmasq?
[03:43] <bfreis> pmatulis, the link you provided me redirects me to https://help.ubuntu.com/community/ReportingBugs
[03:43] <pmatulis> bfreis: it doesn't for me (?)
[03:43] <bfreis> if I take out the +filebug part, there's a page with a "Report a bug" link, but this is the same as the other link, and redirects me to the same wiki page
[03:44] <bfreis> Well, looks like I have a new bug to report then, now against Launchpad, hehe
[03:45] <pmatulis> bfreis: maybe inquire in #launchpad
[03:45] <bfreis> You see what I mean when I say that it is hard to help?
[03:45] <pmatulis> bfreis: i seem to remember such a redirection
[03:45] <pmatulis> bfreis: looks like it, yes
[03:49] <bfreis> pmatulis, https://bugs.launchpad.net/ubuntu/+filebug/?no-redirect
[03:49] <bfreis> That is the trick
[03:49] <bfreis> people at #launchpad doesn't seem to be very helpful... it is a shame.
[03:51] <pmatulis> bfreis: i wonder why i don't get redirected
[03:51] <bfreis> Maybe because your account is "special". You work at Canonical, don't you?
[03:52] <bfreis> At "launchpad", I'm no one. I've once reported a bug against eucalyptus, that's all. Maybe I'm not trusted, so they redirect me to a page with loooooots of useless information :/
[03:53] <pmatulis> bfreis: it doesn't work that way
[03:55] <bfreis> Very strange
[03:55] <bfreis> a guy at #launchpad said: Ubuntu requested that people be forced to read the page first, because otherwise a lot of people file them improperly.
[04:24] <bfreis> pmatulis, I've finished writing the bug report, but it won't accept "ubuntu" as the package. What should I use instead?
[04:25] <bfreis> It is really a bug on the packaging of the image, it is not an specific package
[04:25] <bfreis> The other option is "i don't know the package", which is not actually the case
[04:26] <bfreis> well, damn it, I've lost too much time on it already. I will select "i don't know the package"
[04:30] <bfreis> https://bugs.launchpad.net/ubuntu/+bug/896772
[04:30] <uvirtbot> Launchpad bug 896772 in ubuntu "Oneiric's x64 cloud image [20111124] won't boot (wrong kernel, buggy /etc/fstab, buggy /etc/network/interfaces)" [Undecided,New]
[04:41]  * SpamapS subscribes smoser and utlemming to that bug
[04:43] <SpamapS> bfreis: utlemming and/or smoser will likely be the best resources to help fix that.
[04:43] <SpamapS> bfreis: can you try the precise images?
[04:43] <SpamapS> bfreis: http://cloud-images.ubuntu.com/precise/current/
[05:18] <bfreis> SpamapS, I just tested it
[05:18] <bfreis> SpamapS, apparently the kernel is ok (it finds /dev/sda1), but the /etc/fstab is broken
[05:18] <bfreis> SpamapS, it says "mount: mount point ext4 does not exist", exactly as it did with Oneiric when before I fixed /etc/fstab
[05:28] <SpamapS> bfreis: that would be a nice data point for the bug comments. :)
[05:28]  * SpamapS disappears
[08:18] <koolhead17> hi all
[10:41] <uvirtbot> New bug: #896818 in samba (main) "smbd crashed with SIGABRT in dump_core()" [Undecided,New] https://launchpad.net/bugs/896818
[15:13] <koolhead17> hi all
[16:51] <uvirtbot> New bug: #896723 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: ErrorMessage: package samba is not ready for configuration  cannot configure (current status `half-installed')" [Undecided,New] https://launchpad.net/bugs/896723
[17:05] <Nelis> I'm having a problem booting from a raid1 array. During boot it drops to initramfs saying the boot device does not exist. I have no problems booting from a degraded array.
[17:27] <Nelis> looks like /dev/disk/by-uuid does not exist, which would explain why it can't boot. No partitions showing in /dev whatsoever.
[17:28] <tero> has anyone tried to install webmin on ubuntu server? any "hiccups" ?
[17:30] <qman__> !webmin | tero
[17:30] <ubottu> tero: webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system.
[17:30] <dork> other than security no
[17:30] <dork> there's a huge negative connotation associated with webmin though
[17:30] <dork> has existed for over a decade
[17:31] <tero> crap :\
[17:31] <tero> client demands webmin
[17:31] <qman__> you can do it, but it isn't supported here
[17:31] <tero> this sux
[17:31] <dork> tero: if they're paying you to make themselves vulnerable, it just means future revenue for them
[17:31] <qman__> you will have to seek webmin-specific support
[17:31] <dork> so if they demand it, hook them up
[17:31] <dork> profit
[17:31] <dork> s/them/you
[17:31] <tero> well they really don't care about the OS
[17:31] <dork> i mean future revenue for you
[17:32] <tero> i guess i will have to use centos
[17:32] <dork> i've used webmin over centos
[17:32] <dork> i can't imagine it being any different than webmin over debian based oss
[17:33] <tero> ok thanx
[17:33] <dork> also 'isn't supported here' is stated in every irc channel on freenode
[17:33] <dork> so don't worry about 'support'
[17:33] <tero> we will see what can I do
[17:33] <tero> :)
[17:33] <dork> just make sure you lock it down
[17:33] <dork> it's a huge vulnerability
[17:35] <qman__> isn't supported here means just that, we can't help you if you broke your system by installing webmin
[17:36] <dork> which is in the topic of every channel on this network
[17:36] <dork>  i hear what you're saying though
[17:37] <qman__> we also can't help you if something else broke, but you have webmin installed
[17:37] <dork> it basically means 'we choose to not help you and then ridicule you when that time occurs'
[17:37] <qman__> no, it means we do not help you because webmin breaks things
[17:38] <dork> which can be said about anything
[17:38] <dork> it's selective prejudice
[17:38] <qman__> no, it isn't
[17:38] <dork> yes
[17:38] <dork> it is
[17:38] <dork> sorry.
[17:38] <dork> i don't mean to be inconvenient for you but that's pretty much what it is
[17:38] <qman__> there's a reason webmin is singled out
[17:38] <dork> if you don't want to help someone with webmin just shut up and don't say anything
[17:38] <qman__> it breaks things in weird ways that are difficult to troubleshoot
[17:38] <dork> no i realize that
[17:39] <dork> the same way someone might single out dovecot because it doesn't like it's pop3s implementation
[17:39] <dork> it's selective, it's freenode horse sht
[17:39] <dork> that's just how it s.
[17:39] <dork> man  need t oclean this keyboard out
[17:40] <qman__> dovecot is supported here, it's actually the default
[17:40] <dork> witty rebuttal
[17:41] <dork> who are you to determne what is and isn't supported
[17:41] <dork> is my point
[17:41] <qman__> I am not; the ubuntu devs are
[17:41] <qman__> packages in 'main' are supported officially
[17:41] <dork> nobody comes here or any other irc channel asking 'what are your thoughts on me using *'
[17:41] <dork> you should define that criteria then
[17:41] <dork> instead of dismissing people
[17:41] <qman__> packages in 'universe' are also generally supported here, but not officially
[17:41] <qman__> webmin is neither
[17:42] <dork> the best policy is to just stop running your mouth if you plan to not support something because you choose not to
[17:42] <dork> instead of this 'x is not supported'
[17:42] <qman__> sorry if it's not posted clearly enough, but that policy _is_ defined
[17:42] <dork> qman__: people like you ruin irc
[17:43] <dork> :)
[17:43] <qman__> you're giving bad advice by telling people to use packages that are not supported, in the support channel
[17:43] <dork> i answered his question
[17:43] <dork> which you did not
[17:43] <dork> you gave no advice.
[17:43] <dork> yet i'm villafied?
[17:43] <qman__> no advice is better than bad advice
[17:43] <dork> haha
[17:43] <qman__> because when he comes back here after webmin breaks his system, we can't help
[17:43] <dork> that's fucking stupid.
[17:44] <dork> he was made well aware of the negativity behind webmin
[17:44] <dork> not sure if you just missed that part
[17:44] <dork> or overlooked it
[17:44] <qman__> it's not about negativity, it's simple fact, webmin is not supported here, we don't help people with webmin here
[17:45] <dork> you don't support webmin
[17:45] <qman__> if he needs help with webmin, he needs to seek a webmin support channel
[17:45] <oCean> dork: control your language here, please
[17:45] <dork> he didn't ask for help regarding webmin on ubuntu
[17:45] <dork> he asked for input on webmin itself
[17:45] <qman__> that is exactly what he asked for
[17:45] <dork> oCean: will do.
[17:46] <dork> qman__: so you'd rather tell someone that webmin isn't supported versus webmin is a horrible idea?
[17:46] <qman__> I said both, and usually do
[17:46] <dork> wah wah.
[17:46] <qman__> if they stick around, I also usually advise on what they should do, but he was dead set on webmin
[17:46] <qman__> so I told him to seek a webmin channel
[17:49] <dork> understandable
[19:03] <swharper> hm - trying to connect to a media share ive setup on server.  mac is giving me the following error:  The operation can’t be completed because the original item for “media” can’t be found.
[19:03] <swharper> it sees the machine and the share
[19:11] <wolflkoder> hallo
[19:11] <wolflkoder> habe ein Problem bei der installation vom mt-daapd
[19:21] <cloakable> swharper: what server software?
[19:21] <swharper> 11.10
[19:22] <swharper> it is most likely a basic network issue
[19:22] <swharper> i am able to connect to my mac from the server via afp but not vice verca
[19:22] <swharper> id like to set up a samba share that is accessible to the rest of my network
[19:23] <cloakable> -are you using Samba or netatalk?-
[19:24] <cloakable> And if you're using a modern version of Mac OS, you can just use Samba.
[19:24] <Nelis> When trying to boot from raid1 my system drops to initramfs saying it can't find the boot device, which makes sense since the /dev/disk/by-uuid path does not exist and no partitions are available in /dev. Any ideas on how I can solve this?
[19:24] <swharper> well i installed ubuntu desktop - when i go to "sharing options" and check that box, I assume that is samba?
[19:25] <swharper> yeah i am...
[19:25] <cloakable> Yes
[19:25] <swharper> it is odd because it isnt recognizing the root or admin username/password combos
[19:25] <swharper> and guest access throws up an error
[19:26] <cloakable> Does the user 'nobody' have read access to the shared directory?
[19:26] <cloakable> And you can't connect to Samba as Root for security reasons iirc.
[19:27] <swharper> ah i see
[19:27] <swharper> well as my user account, the same applies
[19:27] <swharper> when i check the media properties, it shows my user account as the owner, and i have folder access set to "create and delete files" but it won't let me change the file access
[19:28] <swharper> well i guess thats only for files
[19:28] <swharper> not folders
[19:28] <swharper> group is my user name
[19:28] <swharper> could be the issue there
[19:29] <cloakable> Yeah. All that means is samba will let the guest account change stuff. Doesn't mean the underlying unix permissions will allow that.
[19:29] <swharper> what should the group be then?
[19:29] <swharper> nobody isnt an option in the dropdown
[19:30] <swharper> i should probably just go back to the cli
[19:30] <cloakable> Check the permissions on the folder. Is it something like rwxrwx---, or rwx------?
[19:30] <cloakable> swharper: The guest account on samba, by default, is the 'nobody' unix user.
[19:31] <swharper> permission is drwxrwxrwx
[19:31] <cloakable> Hmmmm.
[19:32] <cloakable> Underlying permissions are good then.
[19:32] <swharper> yeah…
[19:32] <cloakable> And you have allowed the guest account access?
[19:32] <swharper> id prefer to not have guest allowed
[19:32] <cloakable> Aha.
[19:32] <swharper> but my user isnt being granted access either
[19:32] <swharper> so i tried guest
[19:33] <swharper> im about 80% sure this is related to group permissions
[19:34] <swharper> since my user isnt being granted access
[19:34] <swharper> and im the creator
[19:34] <cloakable> You can't get more permissive than rwxrwxrwx
[19:35] <swharper> right…ok so how does it work from the client side?  the server doesnt show up at all when i browse the network
[19:35] <swharper> from the client
[19:36] <swharper> on the other hand, the server sees afp shares i have set up
[19:36] <cloakable> That -sounds- like a samba problem, honestly.
[19:37] <swharper> yeah
[19:37] <cloakable> Is samba running?
[19:37] <cloakable> Can you browse to smb://127.0.0.1 on the desktop?
[19:38] <swharper> christ i hope its not that basic…checking
[19:41] <swharper> hm
[19:42] <swharper> i had samba install when i installed the server
[19:42] <swharper> OS
[19:45] <swharper> yes i can
[19:45] <swharper> shows the media share
[19:45] <swharper> now when i try to open the media share the same issue arises
[19:45] <swharper> my username/password combo doesnt work
[19:45] <swharper> this is locally
[19:59] <Nelis> When trying to boot from raid1 my system drops to initramfs saying it can't find the boot device, which makes sense since the /dev/disk/by-uuid path does not exist and no partitions are available in /dev. Any ideas on how I can solve this?
=== micahg_ is now known as micahg
[20:47] <stiv2k> hi
[20:47] <stiv2k> for some reason i cannot write to all of my samba shares other than the homes share
[20:48] <stiv2k> all my shares have guest ok = yes and
[20:48] <patdk-lap> guest ok = yes != writable
[20:48] <patdk-lap> you have to make sure the linux guest user that guest gets mapped to, has write permissions
[20:48] <stiv2k> writbale = yes
[20:49] <patdk-lap> and that in samba, the guest user also has write permission
[20:49] <stiv2k> that sounds unnecessarily complex
[20:49] <stiv2k> ok let me see the guest user info
[20:51] <stiv2k> hm my config file must not have all the params in it
[20:51] <stiv2k> patdk-lap: do you know what parts of smb.conf are for the guest user
[20:53] <qman__> guest write is usually a really bad idea so it's difficult to enable
[20:56] <qman__> do you actually want guest write, or do you just want users to be able to write?
[20:59] <RoyK> stiv2k: it's NOT unnecessary complex, it's how unix is built. If you want to break security etc, just chmod 777 /whatever/dir/is/shared/with/samba
[21:00]  * guntbert whistles a warning tune
[21:13] <stiv2k> RoyK: qman__: well, samba is not accessible outside my LAN, so how is it so dangerous?
[21:14] <qman__> it's dangerous because of anyone or anything that can get inside your LAN
[21:14] <stiv2k> hmm ok
[21:14] <qman__> common vectors include wireless access points, or especially if it's a laptop
[21:15] <stiv2k> so ill just stick with guest read and user write
[21:15] <stiv2k> but i think i am actually already logged in
[21:15] <stiv2k> since i see my home directory share
[21:15] <qman__> less common but equally possible are viruses and similar attacks
[21:15] <stiv2k> i still cannot write to other shares
[21:15] <swharper> what is the advantage of configuring ldap with samba as opposed to simply setting up users/permissions within samba?
[21:15] <qman__> in order to write to the other shares, your user needs to have local write access to the shared folder locations
[21:16] <qman__> you can fix that by changing the permissions or owner/group-owner of the directory
[21:16] <stiv2k> okay let me check that
[21:16] <stiv2k> one sec
[21:16] <stiv2k> yeah that must be it
[21:16] <stiv2k> the shares are owned by debian-transmission:debian-transmission
[21:17] <qman__> in this particular case, I suggest one of two solutions
[21:17] <stiv2k> group which i am not a part of
[21:17] <qman__> either change the group-owner of all the files to your user's group, or add your user to the debian-transmission group
[21:17] <qman__> the latter is preferable for usability since new files are probably going to be created with those permissions
[21:17] <stiv2k> ok
[21:18] <stiv2k> thanks for the tip :)
[21:18] <qman__> you may have to log out/log back in for the change to take effect
[21:18] <qman__> in the case of samba, that'd mean disconnecting from the server and reconnecting with it asking for login
[21:20] <stiv2k> qman__: in this case do you think a file permission of 660 is safe
[21:20] <qman__> swharper, the advantages of ldap include one set of users/passwords, eliminating smbpasswd, and being able to use the same users and passwords across the network on multiple servers and clients, single-sign-on
[21:20] <qman__> yes
[21:20] <stiv2k> and directory permission of 770
[21:20] <swharper> hm
[21:20] <swharper> thx
[21:20] <qman__> yes
[21:21] <qman__> to be reasonably secure, you just want to make sure guests can't write, and can't get to private data
[21:21] <qman__> and that system accounts like debian-transmission can't log in over the network
[21:21] <qman__> which they can't by default
[21:22] <stiv2k> cool
[21:22] <stiv2k> here is how i set up the shares http://fpaste.org/mVRo/
[21:22] <qman__> looks good, one trick you may want to use is the 'force group' option
[21:23] <qman__> if you have more than one user using files, that causes new files to be created with a specific group owner, so other users can then read and possibly write to files and folders created that way
[21:24] <stiv2k> where can i read more about this
[21:24] <qman__> IIRC the samba manual explains it pretty well
[21:24] <stiv2k> i wonder if i need to end my screen session to make the group add to take effect
[21:25] <qman__> http://www.samba.org/samba/docs/man/manpages-3/smb.conf.5.html#FORCEGROUP
[21:27] <stiv2k> brb
[21:29] <stiv2k> ok that worked, now to log out from the windows session
[21:38] <stiv2k> wtf
[21:39] <stiv2k> qman__: either i cant terminate the windows connection or... i still cant write
[21:40] <qman__> stiv2k, have you restarted samba?
[21:42] <stiv2k> i guess thats a good way to do it
[21:50] <stiv2k> qman__: it works :)
[21:50] <stiv2k> thank you
[21:51] <srk9> Why doesn't ubuntu-10.04.3-server-i386.manifest exist?
[22:03] <stiv2k> qman__: i noticed a share called 'homes' showed up
[22:04] <stiv2k> can i make this not show up, as there is already a share with my user name that is my home directory
[22:04] <qman__> probably a mistake in your configuration file, it doesn't normally show
[22:05] <qman__> if you pastebin the whole thing I can probably find it
[22:17] <stiv2k> it just appeared i think
[22:19] <stiv2k> http://fpaste.org/2fU8/
[22:20] <stiv2k> is it the browseable = yes of the home directories share?
[22:57] <lwizardl> Hello
[23:02] <Nelis> I can't seem to boot from my software raid1 array unless it's degraded. When being dropped to initramfs blkid only lists sda:"promise_fasttrack_raid_member" and /dev/disk/by-uuid/ does not exist. Any ideas on how to solve this?
[23:47] <chronos> hello.
[23:47] <chronos> how I can set my ubuntu server to use a wireless connection?