/srv/irclogs.ubuntu.com/2011/12/23/#ubuntu-server.txt

yaksterheres the line //192.168.1.129/GoFlex\ Home\ Public/ /media/GoFlex cifs username=matthew,password=4546413,iocharset=utf8,file_mode=0777,dir_mode=0777 0 0  whats wrong with it00:02
Smaughey all00:04
Smaugi am on ubuntu 8.0400:04
Smaugit has OpenSSH 4.700:04
Smaugi want to use a newer version of OpenSSH.         how bad/okay an idea would it be to use a package intended for a later version?00:04
ikoniavery bad00:04
Smaugikonia: ok00:05
Smaughow difficult is it to upgrade a server?00:05
Smaugthe wiki makes it seem easy, a single command.  surely there are things that can go wrong that i must be aware of?00:06
ikoniathings can go wrong, like if you have external software sources enabled, or software outside the package manager, however the guides covers it well00:06
ikonia!upgrade00:06
ubottuFor upgrading, see the instructions at https://help.ubuntu.com/community/UpgradeNotes - see also http://www.ubuntu.com/desktop/get-ubuntu/upgrade00:06
ikoniatime to go00:06
Smaugi have to go, thanks for your help ikonia.  one more thing.   if i choose to upgrade, what process can I use to compile a list for myself of items to check to make sure that everything is running properly after an upgrade?00:10
=== arosales is now known as antonio_afk
=== michael is now known as Guest77618
Guest77618can some one remote desktop me and help me do this? https://help.ubuntu.com/community/PXEInstallMultiDistro00:42
Smaugif i choose to upgrade ubuntu, what thought process can I use to compile a list for myself of items to check to make sure that everything is running properly after an upgrade?02:17
qman__not sure what you're asking, either your software works or it doesn't02:19
qman__you would know best what needs to work02:19
dorkSmaug: make a tarball of your /etc dir and maybe an output of dpkg -l &> installedpackages.txt02:24
dorkor something02:24
dorkthough like qman said02:24
dorkyou typically know when stuff is broken02:24
dorkthe tarball of /etc and the package output is just to help mitigate downtime02:25
qman__yeah, backups are always a good idea02:25
qman__but my point is, it's your server, you should know what services you need running on it, check those02:25
qman__not much else to it02:26
Smaugqman__: yeah okay02:30
Smaugdork: qman__: thanks for the input02:30
dorknp02:30
twbdork: if it's etckeeper just git clone the /etc repo to somewhere else :P02:31
twbdpkg --get-selections for the package list02:31
dorkah cool02:32
Smaugqman__: i know what's running, but how do I know if I really know what's running? /paranoia, my server is 3 yrs old, btw02:32
qman__well, if you don't know it's running, and you don't notice if it stops running, you must not need it that much02:33
dorkSmaug: check your processes, check services that are set to auto start at default level02:34
qman__and in some cases it'd be better if it did stop running, one less attack vector02:34
Smaugdork: thanks, will do.   qman__: a good point02:34
patdk-lapheh, easy solution02:35
patdk-lapturn it off02:35
patdk-lapof no one bitchs after a week, scrap :)02:35
patdk-lapreally too soon though02:36
patdk-lapif it's an accounting system, it could go a few months without them knowing it's gone02:36
patdk-lapmy accounting people are the worst02:36
dorkit'll be that one user who still uses their 5gb samba share for storing their 128k limewire mp3s02:36
patdk-lapI still have to keep the 3 times legacy systems functioning, for when they need to access that old old old data02:36
dorkhad to do that with ISPBilling for a few years but put a stop to it by just not dealing with it02:37
dorkthat was a nightmare migration heh02:38
patdk-lapdunno about you02:38
patdk-lapbut we have to keep records going back x years, for contracts, and goverment crap :(02:38
dorkwhat industry02:38
dorkISP/Telco?02:39
patdk-lapgoverment contractor02:39
dorkah02:39
patdk-lapneither02:39
dorkyeah that didn't exist until recently in ISP land02:39
dorknow you have to retain dhcp records for certain retention lengths02:39
dorkthat's new as of this year02:39
patdk-lapwhat country?02:39
dorkUS02:39
dorkwhich is a huge pain in the ass, and absolutely useless to anyone except the government02:40
patdk-lapoh, that law only covers isp's02:40
dorkyep02:40
patdk-lapprobably why I do't know much about it :)02:41
dorkyou're better off02:41
dorkbest experience one could ask for in IT but at management level it can take years off your life02:41
patdk-lapoh, that is the childporn crap law02:41
qman__to top it off, it doesn't even do them any good, because an IP is not a person02:41
patdk-lapqman, so far :(02:42
qman__any lawyer worth his salt will shoot that down as evidence02:42
patdk-lapand any of our elected crap will make it a law somehow02:42
dorkqman__: if your dhcp gets served up to the CPE equipment and not the customers router, it's easy to ID once they subpeana (sp) you02:44
dorkeven if it is bount to a customers router/whatever they terminate with it's not that hard02:44
dorkmacs don't change that often02:44
dorkit's just a bitch harvesting that much dhcp data for that long02:44
dorkso much nonsense for no reward for the carrier02:44
patdk-lapheh, that law only and specifically says to hold dhcp only info?02:45
patdk-laphow odd02:45
dorkno there's more to it, and specific criteria02:45
dorki've been out of the ISP industry for 5 whole months now :P went into software dev02:45
dorkthat shit was getting enacted as soon as i was leaving02:45
dorkyeah02:48
dorkthe protect our children act02:48
patdk-laphmm02:52
patdk-lapit's strictly to isp bandwidth providers02:52
patdk-lapso guess webhosting and email is in the clear02:53
patdk-lapI remember them attempting to require ftp logs for years02:53
patdk-lapfor the same purpose02:53
dorkwe've never had to do that02:53
dorks/we've/they02:53
patdk-lapno, it didn't become law02:53
dorkoh attempting02:54
dorksorry02:54
patdk-lapI was worried, cause I was already doing 500gigs of ftp logs a day, compressed02:54
patdk-lapnew logging method is nice, but also inaccurate, can compress them much much better02:54
dorkyeah we just outputted syslog to remote traps for analyses and log-rolling02:55
dorkfor all services02:56
dorks/rolling/rotating/02:56
patdk-laphmm, logs are 350gigs now a day, without any compression02:59
patdk-lapI should try turning the dup detection back on, but it's hightly cpu intensive02:59
patdk-lapmaybe I should adjust the dup detection to after the fact, so it can just run once a day to dedup02:59
=== bkerensa is now known as bkerensa|AFK
pythonirc1011we are looking to build a reliable email system with backup (at least as reliable as gmail). We want to run ubuntu-server. Any recommendations for hardware?03:12
dorki like dell personally03:13
dorkor are you asking for hardware insight for your specific use03:14
pythonirc1011dork: I'm more interested in building the whole system? I want at least 3-way reliability, with 3 systems as fall back...one after the other...and mirroring03:14
dorkwhat do you mean 3 way reliability03:15
dorklike 5 9's of availability?03:15
pythonirc1011something like that03:16
pythonirc1011at least as good as what google's gmail system has03:16
pythonirc1011preferably better03:16
dorki like dell poweredge, specifically the R410's with xeon 5600 gulftowns03:16
pythonirc1011probably they run some form of linux on their email system03:16
dorkhaha03:16
pythonirc1011lets say i buy 3 of those...put them in 3 different locations...then how do i configure them so that one is a fallback compared to the other...and all 3 have up2date emails for all the users03:17
dorkgo google drbd/heartbeat/ldirectord/pacemaker03:17
dorkmight want to learn how to run LAMP stacks before you approach that though03:18
dorknot assuming you don't already but it sounded like you might need to start a few steps earlier03:18
pythonirc1011dork: have you built an ha ever?03:19
pythonirc1011thanks for the pointers03:22
qman__FYI, google uses commodity hardware03:22
qman__their redundancy is done in software03:22
twbpatdk-lap: are you still using FTP?  If so, *why*?03:23
* twb is an anti-FTP bigot03:23
qman__the only reason I ever used FTP is that I was unaware that better things existed03:23
twbpythonirc1011: HA is a huge PITA03:24
twbpythonirc1011: unless you're a national- or multinational-size company I advise you not to bother03:24
pythonirc1011twb: can i get a 2TB HA hard drive online to backup my emails for cheap?03:25
twbpythonirc1011: I don' know; I don't approve of offshoring data storage03:25
twbpythonirc1011: I suppose that's what amazon S2 is03:25
pythonirc1011twb: then what choice do i have ? I have moving anything online...but i cant build a HA email system...03:26
twbIf you want DR for existing emails I advise you to buy half a dozen 2TB disks in external USB drives, and use them as rotatin backups, such that at least one is always offsite03:26
* ball uses FTP at work every day.03:26
qman__many of the outfits I do work for use Windows SBS and the pop3 connector, they only get mail every 15 minutes03:26
pythonirc1011twb: We need something automated...manual wont do03:26
twbpythonirc1011: if you're on a stock business ADSL plan, your internet connection will go down more often than a normal, non-HA linux mailserver03:27
qman__yeah, you don't need high availability to satisfy the needs of the 99%03:27
qman__you just need an automated backup system03:27
pythonirc1011twb: I'm on 100GBit network. this is for a college.03:28
qman__which is not that hard to set up, get a couple boxes in different places on the net, and rsync03:28
twbIf you absolutely must have automated backups, then I recommend using rsnapshot to push incremental backups to a remoet host03:28
pythonirc1011I want something where i have 3 machines...if one fails, i get an email--replace the machine...the other 2 are still working...03:28
twbpythonirc1011: college as in where the students sleep, college as in the one university campus, or college as in one entire university (multiple campuses)?03:28
dorkHA is pretty simple03:29
dorkbtw03:29
twbHow many users are we talking?03:29
pythonirc1011just one building -- where internet is fast03:29
dorknot sure what twb's experience is but my HA stuff is flawless03:29
pythonirc1011connectivity is not an issue..and our speeds are awesome.03:29
twbdork: I've been having exciting fun with corosync and drbd lately, it's nontrivial03:29
pythonirc1011600 users03:29
pythonirc1011dork: what did you use to build ha?03:29
qman__that's way beyond the scope of anything there was at my college, we had 10MB mailboxes on a single sun server03:30
qman__not even worth using, I just had it forwarded03:30
dorkpythonirc1011: heartbeat and ldirector for load balancing routing and balancing DBS and JBOSS app servers03:30
dorkldirectord03:31
pythonirc1011qman__: Exactly what we have now. Want to change03:31
twbdork: I'm probably smaller time than you03:31
twbdork: usually I am ~20 seats, a couple ~10003:31
dorktwb: we're a 15 man shop and i'm the only sys engineer, software company though so very small footprint for me to manage03:31
twbMaybe you just are more tolerant of fugly bloated flaky code then ;-)03:32
pythonirc1011I'm not sure we should actually try ha -- if it misfires...we have too many people complaining... :)03:32
twbYeah IME if you try to do HA you are more likely to make it worse than better unless you have some practice and are lucky03:32
dorktwb: i inherited it, i will say that i would rather throw up a few monster xen dom0's and rely on their availability options than have to deal with software clustering03:32
dorkbut for routing it's sort of neutral03:33
pythonirc1011so, is there an easy way to build a reliable email system03:33
twbYou can probably scale up to 600 users on a single grunty mailserver box with simple RAID1 (or 5, if you insist) array of 2TB disks03:33
qman__yeah03:33
qman__a standard mail server is very robust03:33
pythonirc1011twb: its not one machine thats the problem -- its just that we want robust03:33
pythonirc1011realible03:34
twbAs soon as you have >1 box you need to deal with giving them a consistent backend and so you have a SAN plus two/three mailservers plus two load balancing servers in front of them03:34
pythonirc1011and at least 3 systems parallely running for fallback03:34
qman__just get good hardware and good backups, you can be back up from catastrophic failure in a few minutes03:34
twbThe other thing we do which kinda sorta works is to have a second machine sitting there ready to go, with its disks synced from the active server nightly03:34
twbSo in theory if the main host goes tits up even an idiot NOC monkey can just go power it down, move the cables to the backup and reboot the backup off its HDD instead of the "i'm a backup" usb key03:35
pythonirc1011all of this sounds like manual labor... I want something completely automated...which lets me sleep at night, when 2 machines die...and the power is down...03:35
twbpythonirc1011: I can't give you that03:35
qman__IME, not worth the effort setting it up in the first place03:36
dorkpythonirc1011: if you want automated hire a sys admin03:36
pythonirc1011will exchange be better for this requirement? What do medium size companies use?03:36
twbThat's like asking for to have sex with a unicorn, or for secure single sign-on03:36
qman__ten minutes of doing work when the stuff blows up is cheaper than weeks of developing and testing an automated system03:36
twbpythonirc1011: large companies use exchange or domino IME and they are both a fucking pain03:36
twbqman__: hear, hear03:36
dorkpythonirc1011: you either need a sys admin or you need an exchange box and a cheap consultant for emergencies imo03:37
qman__exchange is enough of a nightmare on its own03:37
qman__I'm with twb on the backup server regularly rsynced ready to go03:37
twbI get the impression that apart from being plain stupid in some of its behaviour, exchange is one of Microsoft's more reliable products03:37
qman__swap cables and reboot03:37
qman__I've spent way too much time fixing broken exchange servers to agree with that03:38
=== sixstringsg is now known as sixstringsg|away
twbpythonirc1011: if you like i can even sell you the failover machine as a solution :-)03:38
twbqman__: I'm only comparing it to other MS crap, not e.g. postfix03:38
dorki've never ran an exchange box, but i've known a lot of stupid people who have03:39
qman__though to be fair, I haven't done it on an enterprise level, where there's actually a dedicated box03:39
dorks/people/consultants/03:39
pythonirc1011so after 30 years - email is still an unsolved problem :)03:39
dorkpythonirc1011: not for IT people03:39
twbI haven't had to deal with exchang, tho, only postfix/dovecot (good) and byari, scalix, sogo, zimbra (all fugly evil crap)03:39
qman__but the absurd licensing costs, plus the tens of thousands in hardware is just too much for any customer I've worked with03:39
twbpythonirc1011: the PROBLEM is users' sense of entitlement03:39
dorkcourier-imap and exim are decent too03:39
twbpythonirc1011: they should be GRATEFUL that their mail usually arrives the same day it was sent03:40
dorkbut yeah dovecot/postfix03:40
pythonirc1011twb: entitlement?03:40
twbdork: I'm not a fan of either but I concede exim has a non-negligible user base ;-)03:40
qman__exchange 2010 is supposed to run on a dedicated server with three raids, 11GB of RAM just for exchange, plus 100MB RAM per mailbox03:40
twbWhat I hate is seeing boxes set up as postfix/dovecot using cyrus' sasl because it was calld "sasl-bin" :-//03:41
dorkwow03:41
pythonirc1011twb: With a 100GBit internet switch in the building, they better be grateful if the email arrives in a second...not a day? :)03:41
twbqman__: wow03:41
pythonirc1011qman__: wow! 100MB RAM / mailbox! wth?03:41
qman__those numbers straight from microsoft03:41
pythonirc1011I guess they are hoping -- all exchange users -- please pay $5/year to MS :)03:41
qman__it actually costs more than that03:42
twbpythonirc1011: no they are thinking "we have a captive market of MAPI users"03:42
dorki'm surprised they're not taking the google apps approach yet03:42
twbBecause all the FOSS-flavoured mail systems have proprietary MAPI plugins03:42
dorkor maybe they are? dunno03:42
twbdork: OWA03:42
qman__the only cost effective way to run exchange is with small business server where it's all included, and runs on one box03:43
dorkahh03:43
twbdork: it was actually pretty impressive when I saw it in 2003, looked exactly like outlook03:43
qman__but even then it's a mess03:43
twbqman__: does SBS have per-seat CALs?03:43
qman__yes03:43
twbThey don't say something like "first five seats are free with the SBS" ?03:44
dorkoh it's old eh03:44
qman__yeah, I think they include 10 these days03:44
twbOK03:44
pythonirc1011thanks for illuminating me with the pain of email systems :)03:45
qman__but yeah, the whole reason anyone uses it at all is outlook03:45
qman__and calendars03:45
ballqman__: Ten seats would probably cover us. Not going to invest in Windows Server though.03:45
qman__otherwise postfix / dovecot / roundcube would do the job03:46
dorkalpine!03:46
qman__we still have some customers running nitix03:46
qman__and by how well it works I'm surprised they're not still around03:47
qman__must have priced themselves way out of proportion03:47
twbball: the cost of licensing isn't the licenses, it's enforcement03:48
twbball: like if you have 100 seats and 3 visio licenses and you shuffle the license to a different desk every few months, that hassle is where the cost is03:48
twbNot that, say, Skilled Engineering did that...03:48
twbqman__: I rolld out prayer instead of roundcube/squirrel (because I boycott PHP), and so far the users have been OK with it, for all it's simple03:49
twbqman__: the main thing is to set it to "cambridge" theme instead of "default", so it looks like it's from 2001 instead of 199603:49
qman__heh03:50
dorknever heard of prayer but it's the most annoying thing i've searched for in a while03:50
twbOh and there's some weird problem with attachments when using ldap-backed apache reverse-proxy03:50
twbdork: apt-cache show prayer | grep Homepad03:50
twbdork: apt-cache show prayer | grep Homepage03:51
phosphenehaha, ditto dork03:52
dorklol03:52
phospheneI think I just signed myself up for 10 prayer-a-day emails03:52
dorkhaha03:52
twbKids these days...03:53
ballI find myself wondering whether Ubuntu Server would do the job. Admin costs might be steep though.03:54
twbball: if you're going to babysit a box you need to understand it03:54
twbball: that applies to all OSs03:55
twbball: either learn, deploy something else, or hire a babysitter03:55
qman__windows always requires more work, it's just cheaper to hire people who know it03:55
twbRight03:55
qman__you can trust me on that one, I'm an MCSA03:55
qman__and I manage more exchange/AD environments than I know what to do with03:56
dorkslacker03:56
twbA clueful sysadmin is expense, for either, but a clueful unix sysadmin can babysit 10 times the boxes a clueful windows sysadmin can03:56
twbIt's just that a clueless MCSA is dirt cheap, highly available and can get it right just enough you won't sack him03:57
qman__yeah03:57
qman__a windows server is nearly a full time job03:57
twbI babysit some prisons03:57
dorkBraindump03:57
qman__a well set unixy server barely requires yearly maintenance03:57
dorkor whatever the site is called03:57
twbThey used to run Windows on prisoner desktops03:57
qman__example above, the customers running nitix03:57
dorkwhere people go in to memorize microsoft test questions03:58
twbThey had a *full time* guy whose whole job was to take apart a prisoner desktop, search for contraband, then reflash it with windows03:58
qman__never have to do anything for them03:58
twbHe only managed about 1.75 machines per day03:58
qman__windows servers though, I'm constantly on them fixing things03:58
twbqman__: yeah that's why I get called in to unfuck unix systems that are running FC3 or etch or whatever03:58
twbqman__: because they were deployed 10 years ago and worked ever since03:59
ballqman__: I have two jobs. For one I help babysit hundreds of Windows servers. For the other we have one little BSD box.03:59
ballThe smaller site is a non-profit.03:59
twbball: you use puppet or something for them?04:00
qman__the last time I had to do anything for a nitix using customer, they had saved like 30GB of junk on their desktop, so their computer was taking forever to log on04:00
qman__trying to sync 30GB over 10/10004:00
twband pst files are pathological to rsync, and you can't tell outlook not to make any04:02
balltwb: What is "puppet"?04:02
twbconfiguration management04:03
ballNever heard of it.04:03
twbHave you heard of cfengine04:03
balltwb: No.04:04
twbWow04:04
twbYou babysit 100s of windows boxen and you haven't heard of configuration management.  You poor bastard.04:05
qman__I only handle a few dozen, and they're all for different customers, in different environments04:07
qman__so such a system is impractical04:07
qman__but yeah, most of my job is fixing SBS when it breaks itself04:07
qman__pop3 connectors backing up, SQL databases growing enormous and choking04:08
balltwb: The admins use something to push out updates to the servers but I don't remember what it's called.  Not something I mess with.04:08
qman__WSUS, what a mess that is when it breaks04:08
ballI think it's a third-party thing.04:08
ballMight begin with S.04:08
twbqman__: that rings a bell04:09
qman__I spent the better part of a week trying to fix (read: remove and reinstall) WSUS on a customer's server04:09
qman__it's just cryptic error after cryptic error04:09
twbJust stealth-deploy lucid04:10
qman__I got it working, but the reporting still doesn't work04:10
qman__and, straight from microsoft, only way to fix that is format and reinstall04:10
ballSo I'd like to find a Linux that can serve up some file space (to a few Windows desktops) and perhaps support LTSP for a thin-client trial.04:11
twbquotmstr over on #emacs works for MS in their nomadic "find broken crap and fix it" team04:11
twbHe has some awesome rants as he's wading through the code04:12
ball...if it can host email too, that's a win but if not then I may just pay Google US$ 50/user/year04:12
qman__LTSP is not so easy04:12
qman__but the rest of that is04:12
qman__samba, postfix04:12
twbLike instead of syslog everything emits binary log data that can only be turned into text by the app that generated the data04:12
qman__LTSP is one of those things best left on a box by itself solely for that purpose04:12
qman__because it's big and complicated04:12
twbLast time I looked at LTSP is was turnkey04:12
twbProvided you let it take control of the network, that is04:12
qman__it is04:12
qman__but only in its own context04:13
twbLike if you have your own DHCP server already then you need to deal with that04:13
qman__making that box do more things or changing it to suit your needs is not so easy04:13
qman__doable, just takes some effort04:13
twbeh; I rolled my own solution before LTSP existed, back when knoppix was the only live CD04:13
twbAnd I've been working on that ever since, so LTSP looks straightforwad to me :-)04:13
twbMy stuff has way more rice, tho04:14
qman__still going to recommend you do it with two servers though04:15
qman__one for LTSP, one for the mail and file shares04:15
qman__just keeps things simpler, and helps performance wise04:16
balltwb: I'd let it control the network that the terminals live on.04:16
ball...but not the one that's connected to the Internet04:16
twbFair enough04:16
twbLTSP5+ you can just tell it to boot off network and run locally, as opposed to netbooting an XDMCP client04:17
twbIn that case you don't need a beefy ltsp server, it's basically just a NAS04:17
qman__nice04:17
qman__I haven't used it that new04:17
twbThat's how we do it in prisons (only not LTSP)04:17
twbThe nearest windows equivalent requires you to have disk for each desktop stored on the SMB server04:18
twbSo for example if you have a 2GB rootfs image you would need 2GB ร— no desktops on the server04:18
qman__we've got one customer that uses microsoft terminal services04:18
qman__five users04:18
twbTS is thin client, that's different04:18
qman__and it works pretty well except for the licensing mess04:19
twbI meant the boot-and-forget approach04:19
qman__they can't install their version of office because that's not licensed for it04:19
qman__yeah04:19
twbWe have a TS server here just to run bloody quickbooks04:19
twbstupid ato04:19
twbThe amount of hassle I had getting vmware server 1.x VMs for TS2k3, XP and 98 ports over to a modern system...04:20
qman__quickbooks is another racket, they want you to upgrade every year for software that really doesn't improve at all04:21
qman__my dad still uses quickbooks 99, because it does everything that's needed04:21
twbThat's because the lawyer mill changes the laws every year04:21
qman__runs in windows 7 64-bit, too04:22
twbI would LIKE to use thingo instead, the gtk on, but apparently that "won't work with the ATO"04:22
ballWhat software could I use to manage Samba and Postfix?04:22
twbball: vi04:22
* ball chuckles04:22
qman__yeah, I don't know what you mean by manage04:22
qman__configure and forget04:22
ballqman__: Well I configured our existing Samba instance with some help and because it's been "hands off" for years I wasn't able to replicate the configuration on another server when I tried.04:23
ball...I have a book on Samba but it's about three inches thick and probably quite out of date.04:23
qman__ copy and paste smb.conf04:23
twbyeah exactly04:24
twbsmb.conf isn't exactly rocket science04:24
qman__only time it gets even a little bit complicated is with authentication04:24
twbfucking machine accounts04:24
qman__but that's more on your LDAP/NT server04:24
ballIt may have just been down to the underlying OS then.04:25
twbAs if I'm giving smbldaptools rootbindpw to ldap04:25
ballI could try again with a Linux box.04:25
twbhaha, you were running samba on QNX?04:25
ballNetBSD04:25
qman__well, there's your problem04:25
twbheh04:25
qman__netBSD isn't meant to be used by people04:25
* ball nods04:26
twbqman__: come on, just because you live in your mom's basement and strain soup through your beard doesn't mean you aren't a person04:26
ballIt used to be pretty solid.04:26
qman__not that there's anything wrong with it in terms of performing a service04:26
twbBSD can FOAD, I'm not prefixing everything with /usr/gnu/bin to get useful userland tools04:26
qman__it's just so far down the minimalism line, it's nearly impossible to use04:27
qman__you have to be the type who knows the system like the back of your hand to do anything with it04:27
ballI've lived in NetBSD for so many years that I'm fairly comfortable with it.04:27
ball...but I don't have the time or energy to learn Samba and Postfix to the same extent.04:28
twbpostfix is way easier than samba04:28
twbpostfix you would have to bite of your own hands to have trouble with04:28
ball...and I honestly think NetBSD is why Samba didn't work last time I tried it.04:28
ballbrb04:28
twbI'm bored, just not quite bored enough to work on this stupid fw04:29
twbtoo hot to cycle home04:34
qman__yeah, postfix is pretty simple even without a nice preconfigured package04:35
qman__I've set it up on freeBSD and sun from source before04:35
ballI set up a mail server experimentally once... just the once.04:51
ballIt worked.04:51
twbExcept it was an open relay04:53
balltwb: No, it wasn't.04:53
ballWell, I should probably sleep on it and phone the boss in the morning if he's around.05:00
Tm_Tmorning05:49
uvirtbotNew bug: #908038 in postfix (main) "package postfix 2.7.0-1ubuntu0.2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/90803807:45
zastaphif I want to install ubuntu for kvm, should I install 10.04 LTS as Normal or minimal system (for virtual machine) ?13:06
uvirtbotNew bug: #908112 in ipmitool (universe) "#110992 still happens (modules are not loaded)" [Undecided,New] https://launchpad.net/bugs/90811213:11
_rubenzastaph: depends on your goal(s)13:17
zastaphto virtualize 3 ubuntu servers on a hp microserver13:17
_rubenthe vm part doesn't really matter here13:17
uvirtbotNew bug: #908114 in samba (main) "upgrading from 11.04 to 11.10" [Undecided,New] https://launchpad.net/bugs/90811413:20
zastaphwhat matters13:28
=== Lcawte|Away is now known as Lcawte
=== scubes13 is now known as BEZ|Kevin
=== mendel__ is now known as mendel_
overriderSo strange - i want to setup pptpd, and have remotetip 192.168.30.1-100 as a line in my pptpd.conf. Trouble is, when i connect to that pptpd server, it gives me an ip of 192.168.1.1 instead of 30.1 . Any clues?15:27
=== sixstringsg|away is now known as sixstringsg
uvirtbotNew bug: #908154 in php5 (main) "PHP session garbage collection measured in minutes instead of seconds" [Undecided,New] https://launchpad.net/bugs/90815415:41
=== sixstrin- is now known as sixstringsg
=== Lcawte is now known as Lcawte|Away
gondoianyone here have experience with creating a repo for their own custom packages?18:42
gondoiaka not wanting to mirror, create a new unique repo18:43
adam_ggondoi: yeah, use reprepro18:44
gondoinot apt-ftparchive?18:45
adam_ggondoi: i think reprepro uses apt-ftparchive to update the repository.18:47
adam_gtheres a number of good howtos on reprepro out there. i was working on a juju charm that deploys reprepo + buildd to the cloud for a personal, private PPA + builder. maybe ill get it working over the holiday18:48
gondoiadam_g: i'll dig into that then18:48
gondoithanks18:48
swebis there any solution for bind file creator ?18:53
StevenRsweb: what do you want to do? Write named.conf file?19:07
swebStevenR: yeah i'm newbie on bind and dns. any standrad script can help me. is there any one /19:07
sweb?19:07
StevenRsweb: I would just start with the basics and there's some good examples online. It's pretty well documented19:08
swebStevenR: where ? on ubuntu wiki ?19:08
StevenRpossibly. google knows more. I'm afraid I don't have any examples19:09
dorksweb: you should really be creating them by hand so you understand the structure of a zone and config file, bind comes with tools that allows you to check the sanity of you config and zone files so you can start out with a skeleton, make your records, run named-checkzone domain.tld zone.file and it'll tell you if it's syntaxually 'good' or not19:20
dork'newbies' shouldn't be running name servers19:20
swebdork:ty, i want to starnt learning19:21
swebstart*19:21
dorkcool19:21
dorkit's pretty easy19:21
sweb dork, syntax of db file is so different19:21
dorkjust focus on basic named.conf and a basic zone file, start with one domain, learn how serials and ttl's work, start with basic records like A and C-NAMEs19:22
dorksweb: the records are pretty simple, the metadata, the other stuff is a little more complicated but there's plenty of well written documentation19:22
swebdork: i see somthing about security. it's interest bind have a security sides19:22
dorkyes of course19:23
dorkDNS is easily exploitable because of newbies running dns servers with bad configurations19:23
swebdork: it better to use public domain name service like opendns ? for security ?19:24
dorkif you are unwilling to learn bind and dns then yes, you and everyone else will benefit from it19:26
swebi'm expert on PHP and Zend Framework. I'm nerd but time is a major problem :(19:27
dorkif you can read the horse dung that is called PHP you can read and interpret a zone file19:28
dork:P19:29
=== Resistance is now known as EvilResistance
xubuntuhey21:42
zastaphwhere is authorized_keys stored when installing openSSH during the software selection screen during ubuntu install? if I manually install openSSH after then its in ~/.ssh21:43
xubuntuno idea i wish i could help21:44
xubuntuare you good with ssh?21:44
xubuntui need some help21:44
RoyKzastaph: there isn't an authorized_keys file by default21:44
xubuntuhas to be created?21:44
RoyKzastaph: create it under $HOME/.ssh21:44
zastaphok, but where should I put it? I put it in my ownmade ~/.ssh like i usually do but putty wont connect21:44
RoyKzastaph: you may want to chmod -R go-rwx $HOME/.ssh21:45
xubuntuyou could just re install ssh now21:45
RoyKxubuntu: ??21:45
* RoyK installs win95 on xubuntu's machine21:45
xubuntulol21:45
xubuntuthanks?21:45
zastaphRoyK, that rings a bell.. i think I saved the solution for that ;)21:45
xubuntubut i want windows ME21:45
* RoyK slaps xubuntu around21:46
xubuntusudo apt-get purge ssh and then re install it sudo apt-get install ssh idk if that helps you at all21:46
RoyKxubuntu: stop it21:46
xubuntuwhat am i doing?21:46
RoyKxubuntu: reinstalling stuff isn't a good idea unless you're a true windoze idiot and beleives restarting your car may fix the engine21:46
xubuntuooh haha i guess i'm a noob lol i'm sorry thanks for the heads up21:47
zastaphah yes here is the solution http://www.openssh.org/faq.html#3.1421:47
RoyKyou don't just reinstall a package - you fix the problem. in quite a few cases, reinstalling the package won't help at all21:47
xubuntumakes sense21:48
RoyKzastaph: in the faq ;)21:48
xubuntuRoyK i have a question about tunneling and SSH21:48
RoyK!ask21:48
ubottuPlease don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience21:48
xubuntu!ask how do i tunnel port 563 with putty it doesn't seem to work when i set source port to 563 still seems to use port 563 from my local machine not my ssh server thanks for any help21:49
ubottuxubuntu: I am only a bot, please don't think I'm intelligent :)21:49
EvilResistancexubuntu:  dont use !ask to ask the question21:50
RoyKxubuntu: that seems to be a putty question to me, and last I checked, putty doesn't run on linux :P21:51
EvilResistanceRoyK:  actually...21:51
EvilResistanceit does... :P21:51
EvilResistancebut its designed to run from Windows21:51
* RoyK was waiting for that21:51
RoyKEvilResistance: STILL! most people DON'T use putty on linux21:51
xubuntutrue!21:51
EvilResistanceRoyK:  not disputing that ;P21:51
RoyKfor good reason....21:52
xubuntulol21:52
xubuntui can see why now21:52
xubuntuanyone know i could tunnel that port 563 to my ssh server?21:52
RoyKwhat do you meant tunnel to your ssh server?21:53
EvilResistancedefine "tunnel that port" to your ssh  server21:53
EvilResistanceyou mean have 563 direct itself to your SSH server as an SSH listening port?21:53
EvilResistanceif so, are you on a NAT?21:53
EvilResistance;P21:53
* RoyK wonders if xubuntu knows at all21:54
xubuntuyes i think that's what i mean i'm a newb and no NAT21:54
xubuntuwell I guess I do have a NAT21:54
xubuntusorry21:54
EvilResistancexubuntu:  are you behind a router on a home network or something?21:57
EvilResistanceRoyK:  that's how you find out ^21:57
xubuntuyes I am on a home router but I am only trying to do it from comp to comp on my home network just to test it out21:57
RoyKEvilResistance: sometimes I'm not really in the mood of digging that deep to try to find out what people are asking for, before even trying to answer their questions22:02
EvilResistance:P22:04
EvilResistancexubuntu:  you'd need to modify the sshd_config file22:04
EvilResistanceand add a listener on port 56322:04
EvilResistanceRoyK:  'tis a habit i picked up as a server technician ;P22:05
xubuntui wouldn't add the listener via putty?22:06
EvilResistancexubuntu:  you'll need to open /etc/ssh/sshd_config via sudo on the ssh server machine, and either change 'listen 22' to 'listen 563', or add a listen line after 'listen 22' saying 'listen 563'22:06
EvilResistanceno, PuTTY is just the client, not the server22:06
EvilResistanceyou have to tell the SSH server to listen on the given port22:06
EvilResistanceif you want to forward 563 to port 22 within that box, it can be done, but its not something i recommend22:07
EvilResistanceesp. if its only within your internal network22:07
xubuntuahh i see i'm not trying to change 22 to 563 i'm trying to have my usenet on the comp i'm on now use the proxy of my ssh via port 563 if that makes any sense?22:07
RoyKEvilResistance: I know the habit, but I have found the off switch22:14
EvilResistancexubuntu:  now i dont follow you22:16
EvilResistanceperhaps RoyK will22:16
RoyKxubuntu: I don't think it makes much sense, no :P22:18
RoyKxubuntu: please explain exactly what you're trying to do22:19
xubuntuok this is hard to explain since i'm a newb i have sabnzbd+ installed on my computer i want to be able to have it used my ssh server as a proxy via ssl port 56322:23
SpamapSxubuntu: what is sabnzbd+ ?22:24
xubuntuusenet program22:24
SpamapSxubuntu: so you want to tunnel NNTP via SSH so that it looks like you are connecting via the remote server's address?22:26
xubuntuexactly!22:27
xubuntui knew there was a better way to explain it then what i was saying, thanks22:27
xubuntuis it even possible?22:28
RoyKso something like ssh -L 10563:nntphost:536 localhost22:32
xubuntu10563?22:32
kschapIs there a distro that'll run on a 32-bit computer?22:32
RoyKthat'll make ssh listen to 10563/tcp and connect to nntphost port 53622:33
RoyKkschap: yeah, things like ubuntu runs on 32bit machines too ;)22:33
kschapServer RoyK?22:33
RoyKxubuntu: just avoiding port 536 since it's <1024 and ports <1024 are reserved for root22:33
RoyKkschap: yes22:33
EvilResistancekschap:  you can download 32bit server if you want22:33
EvilResistancei think it exists....22:33
EvilResistance*checks*22:34
kschapReally?22:34
RoyKit certainly does22:34
kschapDid not know that.22:34
* RoyK has several 32bit servers around22:34
EvilResistanceyep its available22:34
kschapIt's on the main Ubuntu website?22:34
EvilResistancekschap:  yes22:34
EvilResistancekschap:22:34
EvilResistancehttp://www.ubuntu.com/download/server/download22:34
EvilResistancewhoops forgot that link ;P22:34
kschapCool thanks!22:34
xubuntuoooh maybe that is why it is not working i can't use 563 since it's reserved for root thanks! i'll try that22:34
EvilResistancekschap:  just choose "32-bit" when you choose the architecture22:34
kschapOK22:34
kschapThanks!22:34
* RoyK just setup a pandaboard with ubuntu :D22:35
xubuntuand what does nntphost do?22:35
RoyKxubuntu: that's your nntp server22:35
* pmatulis got a pandaboard but neglected to get a power supply for it22:35
RoyKpmatulis: any 5V thing will do22:35
RoyKor most22:35
xubuntuRoyK thank you22:35
pmatulisRoyK: yeah, i don't like taking chances with voltage, ordered a proper p/s22:36
RoyKxubuntu: man ssh and read about the flags -n -f and -N...22:36
RoyKpmatulis: 5V is 5V :รพ22:36
RoyKxubuntu: I've added -o ExitOnForwardFailure yes -o ServerAliveInterval 5 -o ServerAliveCountMax 3 to my tunnels22:37
RoyKpmatulis: normal pandaboad or ES?22:38
xubuntuthanks again! will definitely try it out22:38
RoyKpmatulis: btw, most of those SD cards are SLOOOOOW22:38
KumarHi every one22:39
Kumari need some help22:39
RoyKrunning off a sandisk 32GB card here that's supposed to give me 20MB/s, but can't get >10MB/s, which is rather on the low side....22:39
RoyK!ask22:40
ubottuPlease don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience22:40
KumarI am had installed Ubuntu Server 11.10. I wanted to know if there is a way to install the GUI22:40
RoyKkschap: apt-get install ubuntu-desktop22:40
kschapWhat's that?22:41
RoyKerj22:41
RoyKerm...22:41
RoyKKumar: apt-get install ubuntu-desktop22:41
RoyKkschap: never mind :P22:41
KumarThank q so much22:41
kschapOh OK.22:41
Kumar:-)22:41
xubuntuRoyK is nntphost:563 a command for ssh?23:04
_Neytiri_I am having a issue with my system, my old install of 10.4 crashed on me and when i reinstalled i  my raid array didnt come back online, i copied the fstab file and rebooted and still no luck, all my drives came back but my raided drives, it was a software raid consisting of 2 phisical 2 tb disks, 3 drives created off of them 1 4gb driv (raid 0) and 2 998 gig drives (raid 1).  Under the23:09
_Neytiri_Disk utility (yes i installed a gui) i try to start the raid and get the error: not enough componunts to start the raid array23:09
wmphello, how to disable this logs: TCP: Peer 62.20.205.29:55814/51753 unexpectedly shrunk window 429997799:429999424 (repaired)23:19
yann2hello! I know there has been quite an issue with sun's java lately - but I'm getting it as proposed for removal on my ubuntu 10.10 servers? Is that normal?23:22
arrrghhhhello.  has anyone setup a PXE provisioning server before?  it seems this is possible, i'd like to be able to send linux and windows images over the network.23:24
arrrghhhi've done linux images over PXE before, but i'm struggling sending windows images.  i found a few guides, but i quickly get lost.  anyone done this before?23:24
EvilResistancearrrghhh:  ##windows might be more useful for your windows needs23:26
EvilResistanceor ##windows-server23:26
arrrghhhEvilResistance, well the problem is i want the provisioning server to be linux...23:27
EvilResistanceah23:27
EvilResistancenevermind then :P23:27
arrrghhhi already have a linux server, so this *should* be simple.23:27
arrrghhhhttps://help.ubuntu.com/community/PXEInstallMultiDistro23:28
arrrghhhthat seems freakin awesome23:29
arrrghhhi just don't know how to fit win7 or even xp into that...23:29
LcawteHi, I've finally got into my server install, but I have to go through another disks grub... I have to go into commadn line and set the configfile to the server disk, any reason why its not working from the server disk?23:36
LcawteAnd how I can fix it?23:36
arrrghhhso GRUB is on the wrong hdd...?23:36
arrrghhhis that the problem?23:37
Lcawteno... I have a copy on both hard drives (with different config files), but only one of them will load after post, disk a (a desktop) requires me to go into command line and reset configfile to get into disk b's grub. Disk b doesn't let me into its own grub when I boot up...23:38
arrrghhhwhy not just set your BIOS to boot from disk b instead of disk a?23:39
LcawteI do, but it won't let me boot into disk b's grub even when I do that23:40
arrrghhhi'm confused...23:41
arrrghhhdisk b is where server is installed23:41
Lcawteyes23:41
arrrghhhbut disk b's grub is completely not functional?23:41
LcawteI can not boot into the grub on disk b, unless I have disk a set in bios at the bootable device and I boot through its command line23:42
arrrghhhso grub works on disk b, assuming you don't boot from disk b23:42
arrrghhhthat makes no sense23:42
arrrghhhhave you tried re-installing grub on disk b?23:42
arrrghhhyou'll have to do it from a live environment, or when booted into disk a.23:42
Lcawtehmm, ok, I'll try that23:43
Lcawte"/usr/sbin/grub-setup: warn: Sector 32 is already in use by FlexNet; avoiding it. This software may cause boot or other problems in future. Please ask its author not to store data in the boot track."23:44
LcawteHmm, what the?23:44
arrrghhhnever heard of that before23:44
arrrghhhFlexNet...?23:44
LcawteYeah, me neither23:45
arrrghhhhttp://askubuntu.com/questions/31289/dual-booting-on-separate-hard-drives23:47
LcawteYeah, I just found that... so, I read something about if grub wasn't there, it'd boot to the partition makrked as "boot" partition23:51
zastaphis the CAP_NET_ADMIN capability still required to do KVM in Ubuntu lucid? https://help.ubuntu.com/community/KVM/Networking23:53

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!