[00:00] Hi [00:00] !ops | excess flooder! [00:00] excess flooder!: Help! Channel emergency! soren, lamont, mathiaz, Pici, Daviey, Tm_T or pmatulis [00:00] HELP About PPTP Server on Ubuntu 10.04 !!! [00:01] is there a way to know a specific server got unresponsive for some wierd reason and there is no option left except for reboot ? [00:01] kaushal: you need to reboot machine ? [00:01] yeah [00:02] since its not responsive [00:02] from terminal or SSH ? [00:02] can i know the reason for being unresponsive ness ? [00:02] you try with sudo reboot ? [00:02] i mean what caused the server to crash or not responsive [00:04] okay, i think i got jcastro's user dealt with by contacting that user another method ;P [00:04] HELP About PPTP Server on Ubuntu 10.04 !!! [00:05] Don't use PPTP, it's weakly encrypted. [00:05] twb: what to use better ? [00:05] ipsec/l2tp or openvpn [00:06] do you know any tutorial [00:06] ? [00:06] twb: hi [00:06] how to install and configure [00:06] Xelmep: not off the top of my head. Have you checked the Ubuntu Server Guide? [00:06] https://en.wikipedia.org/wiki/PPTP#Security_of_the_PPTP_protocol [00:06] is there a way to check "what caused the server to crash or not responsive" ? [00:06] not [00:07] i checked for pptp [00:07] Technically you could use EAP-TLS with PPTP, in which case it's no worse than using EAP-TLS for 802.11 WPA2-Enterprise, but I have never seen that in the wild [00:08] aha [00:08] ok [00:08] what is better openvpn or ipsex [00:08] ipsec [00:08] :) [00:08] But at that point you're rolling out an TLS cert hierarchy anyway, so you're better off using something else. [00:08] ok [00:08] thanks [00:08] Xelmep: well, ipsec is a standard part of IPv6, so IMO it's a better thing to learn long-term [00:09] i will try to install openvpn [00:09] Xelmep: for a simple point-to-point connection openvpn is very easy, for a hub-and-spoke layout it requires you to understand how TLS/x.509 work [00:10] ok [00:10] thank you, now i will try to install and configure [00:38] RoAkSoAx: How is it going? [00:48] Daviey: good good [00:48] Daviey: you? [00:48] lol === Ursinha_ is now known as Ursinha [00:54] RoAkSoAx: tired :) [00:54] RoAkSoAx: Were you able to look at ipxe? [00:55] Daviey: looking at it now [00:56] Daviey: though for what I'm reading in the documentation, it might be easier to use koan cause eoither way, we ould have to 1. flash the rom of the NIC, 2. chainload, and chainload means telling the DHCP to use the ipxe rom [00:57] RoAkSoAx: great, i'd love to hear what you think.. But i need to go afk now. Can you let me know when you are done, and i'll see it in scrollback? [00:57] RoAkSoAx: wait, flash to nic? [00:57] Nooo [00:57] You /can/ do that.. but it's a pure option. [00:58] Daviey: right, that's why I'm saying option 1: Flash NIC, option 2: PXE chainloading with ipxe [00:58] Currently, grub-ipxe plugs into grub like another kernel [00:58] So we chainload from grub. [00:58] Daviey: right, let me look at grub-ipxe then and we can catch up later or tomorrow morning [00:59] RoAkSoAx: Yeah, if you apt-get install grub-ipxe, you'll see the option in grub menu. [00:59] It'll give you a menu, but you can embed a script which hard codes (or other stuff) options [01:00] So we can gather from avahi where cobbler is, and inject it into the binary. [01:00] meaning that we are not dependant on dhcpd options. [01:01] The problem is, it's not clear to me if we can embed the script file without re-compiling. [01:03] Daviey: right, if this is only for reinstallations maybe koan is better option [01:03] Daviey: if this was for the cases on which we have a system without a OS yet, then is more useful [01:05] Daviey: koan (before the avahi stuff was removed from cobbler) was supposed to be able to automatically discover where the cobbler server is and boot from there [01:06] RoAkSoAx: noooo [01:06] How is it more useful with systems with no OS? [01:07] If the system has no OS, it has no grub - and therefore no grub-ipxe. [01:07] Daviey: exaclty [01:07] Daviey: that' was my point :) why do something that is already done by koan :) [01:07] uh? [01:08] Daviey: so, I install grub-ipxe, reboot, and the grub allows me to PXE boot, right? [01:08] RoAkSoAx: Right, that requires we ssh into the client.. and run the command? [01:08] RoAkSoAx: yup [01:09] Daviey: that means we need to install grub-ipxe and reboot whenever we want to reinstall [01:09] Daviey: so in a way, ssh into the client, and run the command, correct? [01:09] RoAkSoAx: Perhaps a phone call would help explain the point? This seems to be circular. [01:10] Daviey: yeah I think that would be best. But we can take it tomorrow if that's better for you since you were on your way out :) === pfibiger` is now known as pfibiger === twb` is now known as twb === bladernr_afk is now known as bladernr_ === bfreis_ is now known as bfreis [05:07] #dovecot is asleep [05:07] Anyone care to sanity check my dovecot change to enable a virtual (i.e. non-PAM) account? [05:07] http://paste.debian.net/147395/ [05:08] I'm a little bit scared to try it on the production system without any testing or peer review -- also I don't know offhand how to generate an SSHA [05:12] reading [05:13] twb: my dovecot is weak.. but it looks sane enough. [05:13] OK, thanks === bladernr_ is now known as bladernr_afk [05:47] hi all, i have a handful of vms that will be running apache2 and various websites, i want to put an accelerator "in front" to point to machines based on requested url -- is squid the way to go or is something like varnish "better" what else is there ? [05:48] pukeko: main problem with varnish is you need to install cc [05:49] I'd use squid always, but then I'm a *tad* biased [05:49] Also I wanted to do LDAP-backed HTTP auth to lock down access to most of my http backends, so I ended up using apache's mod_proxy :-/ [05:49] lifeless: squid's a pretty traditional (read: old fuddy-duddy) choice :-) [05:50] twb: heh [05:51] ..ok then squid is fine.. all i want it to do is direct traffic via url request, can i config it not to cache ? [05:53] or do i just tell it to not cache anything over some tiny kb ? [05:54] either of the abve [06:02] I also looked at nginx but the fact it has other baroque stuff like a pop3 proxy built in, that kinda spooked me [06:07] ok thanks for the help.. bbl [06:23] Hi [06:25] Does anyone here can help me on the Ubuntu server? I'm very new to Ubuntu. [06:34] auston: just ask :) [06:37] I have just installed Ubuntu server 11.10 and has configured 2 NIC. Going to use for DHCP and Firewall purpose. [06:38] But I wish to know step by step how to setup for DHCP first. [06:48] auston: https://help.ubuntu.com/10.04/serverguide/C/ [06:56] I just installed dhcp3-server but when accessing the .conf file it stated New File. Is that the correct way? [07:02] auston: even better, https://help.ubuntu.com/11.10/serverguide/C/ (updated for 11.10 changes) [07:02] I believe 11.10 uses isc-dhcp-server [07:13] I try to install using isc-dhcp-server for 11.10. [07:24] auston: what's the problem ? [07:37] having problem downloading isc-dhcp-server [08:00] hi all [08:05] auston: can you explain beyond " a problem" [08:11] Having difficulty with /etc/security/groups.conf not autoassigning certain groups (i.e. plugdev) to LDAP users on the client system, thoughts? [08:11] I have pam_group.so included just fine for PAM and everything, yet it does not work. [08:15] Now, I'm able to download and installed the isc-dhcp-server. Just now was due to the internet connection problem. [08:19] I got error msg when restart isc-dhcp-server. It says, "Configuration file errors encountered -- exiting. [08:21] I found the problem with the line missing ";" at the end of file === huats_ is now known as huats [08:40] is this ok for an quick and dirty /etc/hosts file 192.168.0.77 www.example.com,support.example.com,ftp.example.com ? [08:40] i mean are the commas allowed ? [08:42] why i always got problem to ifup with my eth1? It says, R.. file already exist! when I editting the network interface conf file. [08:53] Berge: ikke ISDN dialup, med andre ord? [08:53] return -OWRONGWINDOW; [08:54] hi all === smb` is now known as smb [08:56] !virt-manager [08:59] RoyK: Never realised you were Danish. [08:59] RoyK: Or is that also valid Norwegian? [09:01] hey guys i need some help [09:01] how can i get virt-manager to connect to the local host for xen [09:02] virt-manager -c xen:/// [09:02] I think. [09:02] * soren never really used Xen. [09:02] im setting that up via the GUI yet its saying it cannot connect [09:03] Er.. [09:03] Did you try the command I just gave you? [09:03] yes that worked but for some reason its not seeing the hypervisor [09:03] Ok. [09:03] which is already installed [09:03] IIRC, you need to enable... [09:03] er... [09:03] the http endpoint? [09:03] xend has been started [09:04] ? not understanding what you mean [09:04] Can you pastebin your xend config? Maybe that'll job my memory. [09:04] jog my memory, even. [09:05] soren: http://paste.ubuntu.com/753444/ [09:05] Ah, yes, there we go. [09:05] ADd this: [09:05] humm i did ifconfig [09:05] i have 2 bridges [09:05] (xend-unix-server yes) [09:05] ...and you should be golden. [09:05] (well, restart xend afterwards) [09:06] The xen:/// driver in libvirt talks to Xen through that interface. [09:07] which interface [09:07] the virbr [09:07] and do i need to have the bridge scripts uncommented still [09:07] guess not im connected :D [09:08] soren: is the a gui front end to create the vm's [09:08] No, not network interface. [09:08] I don't understand your last comment? [09:09] do i use the command line to create the guests or is there some gui based application to create virtual machines [09:09] I don't know what people do nowadays. [09:09] ok ty [09:10] soren: how is the xen libvirt intergration these days ? [09:10] ikonia: No clue. I don't use Xen if I can avoid it. [09:10] Which I can. [09:10] ha ha, same as me then [09:10] whats everyones aversion to xen what advantages does kvm have over xen [09:10] thats why I didn't know how the xen/libvirt intergration was [09:11] eagles0513875: make up your own mind, if you like xen, use it [09:12] ikonia: i know im just wondering what advantage for instance does kvm have over it [09:12] personal preference [09:12] ok [09:12] read the tech spec pages, they do things differently [09:16] eagles0513875: I find kvm to be much more architecturally sound than Xen. [09:16] eagles0513875: I also prefer its security model. [09:17] eagles0513875: And the fact that it doesn't require a non-Linux kernel to work. [09:17] humm will have to do some research into it :) [09:17] soren: what do you mean by non linux kernel? you mean one that has it compiled into it like xen used to need [09:17] soren, the last point is sort of mood since 3.x ;) [09:18] smb: exactly lol [09:18] smb: No, it's not. [09:18] yes it is soren [09:18] No. It. Is. Not. [09:19] I'm not talking about the patched Linux kernel. [09:19] ahh ok [09:19] but I would agree that it takes longer to get it working. it has a lot of knobs and twiddles all of which one can get wrong [09:19] I'm talking about the Xen hypervisor kernel. Which is entirely different. [09:19] The Xen hypervisor is an operating system kernel. It's based off of a microkernel called Nemesis. [09:19] soren, Ok, that is true [09:20] On top of that, you run your dom0. [09:20] I've got a virtual 10.4LTS Server running. After a reboot (a new kernel had previouly been installed) this morning it's unable to start. It doesn't matter which kernel I select. The only thing I see on a normal boot is a black screen and a _ . If I boot in recovery I can see it detect the disks attached but after running "Begin: Running /scripts/init-bottom ..." and returning "Done." [09:20] the machine freezes and does not seem to be alive. [09:20] And all of your domU's. [09:20] I having problem to bring up eth1 [09:26] auston: Go on.. [09:40] i managed to installed and configured isc-dhcp-server and able to obtain the ip from eth0 but unable to access internet. [09:41] dhcp/internet access are two totally different things [09:41] auston: what gateway and dns servers did you setup in your dhcp server to give to the clients [09:43] the local network ip is 192.168.76.0 gateway 192.168.76.23 [09:43] not what I asked [09:43] re-read what I asked [09:44] eth0 ip: 192.168.76.245, eth1 ip: 192.168.76.5 [09:44] again, not what I asked [09:44] gateway to the router, dns server to local server. [09:45] ok, so test each component [09:45] 1.) can you client do a dns lookup [09:45] your [09:47] managed to get local dns server ip [09:47] no [09:47] what is the point of that [09:48] you can't get to the internet [09:48] can you lookup internet addresses [09:49] the ubuntu server itself is able to access internet [09:49] again, not what I'm asking [09:49] why are you not answering the questions I am asking [09:50] I'm not too sure where to look for [09:51] right, so if you don't know say "I don't know how to do that" rather than just providing random information [09:51] on the client type "nslookup www.google.com" [09:52] ok, i got response from client: **** Can't find address for server... [09:53] ok, so there is your problem [09:53] or at least the start of your problems [09:55] I have setup 2 NICs on the ubuntu dhcp server. Eth0 connected to the router and eth1 connected to client. [09:55] <_ruben> and both in the same subnet at first glance, which tends to be asking for trouble [09:56] agreeed [09:56] But the client managed to get ip from dhcp server but not able to connected to the internet. Only the server itself can do. [09:56] Both server and client configured using the same subnet mask [09:57] auston: DNS !!! [09:58] auston: your client can't resolve addresses, that is reason 1 it can't connect to the internet - fix that [10:00] But can't even ping to local dns server using ip. [10:00] I give in [10:00] pinging a dns server does not mean it can use it as a name resolver [10:00] auston: your client cannot use the DNS server you have set as a resolver, fix that [10:01] Do I need to change the DNS setting from dhcp? [10:01] no [10:02] I'll say it again - the DNS server you have set the client to use, is not responding to public internet zone lookups from your client [10:02] you need to FIX the DNS server you have set to accept connections from your client and do public lookups [10:02] soren: norwegian :) [10:02] RoyK: Ok :) [10:03] auston: Why are both your interfaces on the same subnet? [10:05] As I'm not sure how to do that for both interfaces. Thought it can route the traffic from eth1 to eth0 interface. [10:06] Why would you want to route from one interface to the other if they're connected to the same network? [10:07] Because client conneted to eth1 interface needed to get ip from the server and this server will be acting as a firewall once the internet connection is done. [10:12] * RoyK somewhat guessed soren was danish by the name [10:13] auston: So both interfaces are in fact connected to the same network right now? [10:13] RoyK: I'm not very good at being under cover :) [10:13] hehe [10:27] question, /etc/hosts ... whats the syntax for "cnames" ? are they comma separated or can i put them on a new line ? [10:27] ie [10:28] No commas. [10:28] 192.168.0.7 www.example.com [10:28] Just put multiple names on the same line. [10:28] 192.168.0.7 www.example2.com [10:28] Separated by whitespace [10:28] No. [10:28] 192.168.0.7 www.example.com www.example2.com [10:28] thanks [10:28] Sure. [10:33] is it ok to stick a squid reverse in front of a CalDav server ? [11:12] i have downloaded image http://uec-images.ubuntu.com/oneiric/20111110/oneiric-server-cloudimg-amd64.tar.gz [11:12] what is default username/passwd for this to login ? [11:12] or is it restricted to login via key-pair [11:17] * koolhead11 pokes smoser [11:31] koolhead11, hello [11:31] use your key and log in with ubuntu@ [11:37] koolhead11: smoser is sleeping ;) [11:37] koolhead11: it's normally ubuntu/ubuntu afaik [11:39] koolhead11: if it's juju deployed then just your ssh id will suffice with ubuntu@ as uksysadmin said [11:41] New bug: #897632 in postfix (main) "package postfix 2.8.5-2~build0.11.04 failed to install/upgrade: подпроцесс установлен сценарий post-installation возвратил код ошибки 75" [Undecided,New] https://launchpad.net/bugs/897632 [11:51] Hi. What do I need to do in my firewall or ftp server to get active mode ftp working behind nat? [11:57] hola uksysadmin lynxman [11:58] I'm trying to create my own .deb package of nginx using checkinstall but it don't work, I'm using the sources of 'apt-get source nginx' and downloading the two new modules manually. It configure, using the ./configure with the same parameters of the official package plus new modules, compile (make) but the .deb generated (by the checkinstall) don't work. Anyone knows what I'm doing wrong? [11:59] capeta: try #ubuntu-motu better place with l33ts :D [12:00] lynxman: uksysadmin i remember yesterday able to login the instance with ubuntu/password [12:00] ok [12:01] koolhead11, I've never logged in using a password to the uec images - ubuntu/ubuntu ? [12:01] uksysadmin: i have curious issue with mine, juju needs zookeeper installed as 1st pkg once it gets started/initilized [12:01] then only juju ststus will work [12:02] does bootstrap not do that for you? [12:06] uksysadmin: bootstrap will do only if my network/nova has direct internet access [12:06] which i dont have [12:07] ah - yeah I'm battling with that since I've been playing [12:07] could do with being able to set proxies in the process [12:08] uksysadmin: you mean during bootstarp [12:08] ? [12:08] yeah - is that possible? [12:08] juju bootstrap --proxy= ? [12:08] :D [12:08] * uksysadmin is a n00b [12:08] ;-) [12:09] uksysadmin: me too [12:09] * uksysadmin is attending charm school on Friday [12:09] come to #juju am troubling hazmat there, and talking on same issue [12:09] uksysadmin: me2 :D [12:09] I noticed ... I'm there [12:15] New bug: #855711 in bacula (main) "Bacula director not listening " [Undecided,New] https://launchpad.net/bugs/855711 [12:20] http://uec-images.ubuntu.com/oneiric/20111110/oneiric-server-cloudimg-amd64.tar.gz this is the image i am using [12:21] the euca-get-console-log says this :- [12:22] http://paste.ubuntu.com/753592/ [12:26] lynxman: i can confirm that you cannot book cloud-images with any password, I am building an image from a Oneiric ISO and doing modifications :P [12:27] *log [12:43] koolhead11: aww shucks [12:44] lynxman: am happy, finally learning how to play with bundling my own ubuntu image :D [12:45] hola Daviey :) [13:06] lynxman: i see your tweet :P [13:09] koolhead11: wha? [13:10] lynxman: :D [13:10] beer [13:18] New bug: #897663 in image-store-proxy (universe) "don't connect to imagestore.canonical.com" [Undecided,New] https://launchpad.net/bugs/897663 [13:19] Anyone ever have an issue building cuda on 11.04? [13:22] koolhead11, there is no username and password combination [13:22] there is a user 'ubuntu', but you cannot login via password unless modificatoin is done. [13:22] please read https://help.ubuntu.com/community/UEC/Images#Ubuntu_Cloud_Guest_images_on_Local_Hypervisor_Natty_onward [13:24] lynxman, just for your info [13:24] ^ [13:29] smoser: thanks sir. creating one image for myself because i need to add proxy-info for apt before uploading to bucket [13:30] and will ahve to add cloud-init pkg too inside it [13:30] lynxman: i spent like good time trying hit and trial :P [13:30] koolhead11, so you're just wanting to add apt-proxy config ? [13:30] smoser: oh cool, ty :) [13:31] smoser: yes because my nova is running via proxy [13:31] i'm paticularly interested in this as I'm trying to make that "just work" and use local proxy or mirror if available. [13:31] and when am staring juju-bootstrap, 1st thing it does is tries to install zookeeper [13:32] koolhead11, i wonder, would it be acceptable to you to set up a dns name "ubuntu-proxy" in the default domain ? [13:32] this is not working yet, but that is one way i'm considering allowing that to "just work" [13:32] smoser: i doubt :( [13:32] no? [13:32] i will simply add /etc/apt proxy file [13:32] can you think of some other way that it could "just work" ? [13:33] and add the proxy server detail [13:33] koolhead11, right. and that will work fine. [13:33] smoser: :) [13:33] but you're not the only person that will hit this [13:33] and i want to make it easy for it to "jsut work" without modification of the images. [13:33] smoser: hehe. :D [13:34] so i'm looking for input from you [13:34] why wouldn't you be able to add a dns name ? [13:35] smoser: because that proxy server is my desktop machine running different subnet :( [13:36] btw hazmat has filled a bug on same [13:36] do you have a number? i dont see anything like that [13:36] i really dont think juju should do proxy configuration [13:37] smoser: 1 sec [13:37] smoser: https://launchpad.net/bugs/897645 [13:37] Launchpad bug 897645 in juju "juju should support an apt proxy for private clouds" [Undecided,Confirmed] [13:38] smoser: also wondering why z00keeper is also not installed on cloud image :P [13:39] koolhead11, the most immediate answer is "its not in main" [13:40] the second would be, that it is probably at this point still an unlikely package to be installed. [13:41] smoser: http://paste.ubuntu.com/753662/ [13:41] first thing juju does once i run juju status [13:41] :D [13:41] the only other issue with zookeeper is that it depends on java and thus its probably a 50M additional footprint installed (complete guess) [13:42] koolhead11, can you get the rest of that ... [13:42] i'm interested in "Need to get" and "After this operation, XXXX will be used" [13:43] smoser: pasting it [13:43] wait [13:43] :D [13:44] smoser: http://paste.ubuntu.com/753667/ [13:45] koolhead11, you shorted me... [13:45] there should be a line like "After this operation" ? [13:45] i can figure it out myself easily enoug, though. [13:46] good morning [13:46] smoser: http://paste.ubuntu.com/753480/ euca-get-console-output :P [13:46] hola zul [13:47] hi koolhead11 [13:53] zul: good moaning :) [13:55] koolhead11, i thought i had a bug for this. [13:55] but just opened one, bug 897688 [13:55] Launchpad bug 897688 in cloud-init "cloud-init should support apt-proxy and hostname based mirror selection" [Undecided,New] https://launchpad.net/bugs/897688 [13:57] smoser: apt.conf is what i used simply added proxy server and port [13:57] koolhead11, above, regarding zookeeper, "127 MB of additional disk space" [13:57] smoser: 127 0.o [13:57] so we'd grow the images from ~ 600M to 725, which is a 20% growth [13:57] yeah. [13:57] smoser: better leave it [13:57] so its not an easy thing. [13:57] let juju handle it :P [13:58] smoser: the cloud image is 205 MB i think :P [13:58] 205 compressed download. [13:58] 600~ filled filesystem. [13:58] smoser: o00h [13:59] the disk image you get is a qcow compressed sparse disk === bladernr_afk is now known as bladernr_ [13:59] cloud-publish-image takes good time :P [13:59] the cloud-init 'make-iso' stuff that i pointed you at is the start at making scripted modifications to the images easy to do. [13:59] ie, you could easily [14:00] * download image [14:00] * boot image with cdrom attached with userdata that did: [14:00] * install zookeeper and other juju stuff [14:00] * change local mirror [14:00] * shutdown [14:00] * publish modified image [14:01] i guess other things to do there would be something like: 'apt-get clean' and some other "clean up my mess" stuff, but the point being local modification is easy without having to even be root. [14:01] smoser: i used KVM and did exactly same, am now at last step :D [14:01] you did it via user-data ? [14:02] juju could easily publish doc on how to do that before uploading your own cloud image, and could do it all via one program wrapper. [14:03] smoser: i booted the machine via KVM and then used VNC viewer to connect it and do needed modification [14:05] yeah... i just don't like having to have you interact with it. [14:05] as then its un-reproducible [14:05] clearly here its fine, but a fully reproducible solution is much nicer. [14:06] thanks for your input by the way. this has been helpful. [14:07] !user-data [14:07] smoser: would you please point me to the user-data doc/method doc i should look into [14:08] https://help.ubuntu.com/community/UEC/Images#Ubuntu_Cloud_Guest_images_on_Local_Hypervisor_Natty_onward [14:08] you can probably figure it out from there. [14:08] do the bzr brandch of cloud-init as shown, then look at 'user-data' in cloud-init/doc/ovf [14:08] it is just cloud-init userdata. [14:09] just put a '#!/bin/sh' script there that does everything you want, then cleans up, then shuts down. [14:10] smoser: thanks again. [14:10] if you have questions, please let me know. this is somethign that "should work" but is very admitteldly not documented well. [14:33] Help please ~ [14:34]