[00:11] <zastaph> Maybe https://help.ubuntu.com/community/KVM/Networking needs to be updated .. because the CAP_NET_ADMIN section refers to Sep 2006
[00:58] <sw0rdfish> hey
[00:58] <pmatulis> zastaph: please proceed
[00:59] <zastaph> I'm just a user of KVM
[00:59] <njacinto> quit
[01:04] <qman__> that's where ubuntu community docs come from, users
[01:05] <zastaph> yep and then I'm a kvm n00b too :)
[03:34] <deviantgeek> Ok, is there any guides to getting ftp working on oneric?
[03:35] <TJRana> Um...
[03:35] <TJRana> What's oneric?
[03:35] <deviantgeek> 11.10
[03:35] <deviantgeek> ubuntu server
[03:36] <TJRana> Oh Ubuntu 11.10 Oneiric Ocelot
[03:36] <deviantgeek> yeah
[03:36] <TJRana> These names… geez
[03:37] <TJRana> I'm no expert, but I managed to set up ftp for my server, which I then got rid of and had to start all over.
[03:37] <TJRana> I'll try to help.
[03:37] <TJRana> I don't think there's a guide, but do you use a program to access your server? Like Dreamweaver or something?
[03:38] <deviantgeek> well, its currently running on ESXi (virtulization)
[03:38] <qman__> FTP should never be used
[03:38] <deviantgeek> if that matters
[03:38] <qman__> SFTP is superior in all ways
[03:38] <deviantgeek> qman__: then how do I get sftp working
[03:38] <deviantgeek> does it come with openssh?
[03:38] <qman__> apt-get install openssh-server
[03:39] <qman__> the default sshd configuration allows all users standard SFTP access to anywhere on the system they have permission
[03:39] <TJRana> yeah, go and log onto your server
[03:39] <TJRana> type in "sudo apt-get install openssh-server"
[03:39] <qman__> if you need more control, you can configure chroots in the config
[03:39] <TJRana> what qman__ said
[03:41] <deviantgeek> what is the default sftp port?
[03:41] <qman__> 22
[03:41] <patdk-lap> it' basically kindof ftp tunneled over ssh
[03:41] <qman__> it's actually nothing like FTP on a technical level
[03:41] <patdk-lap> ya
[03:41] <qman__> the command syntax and general purpose are the only similarities
[03:41] <patdk-lap> but only way to explain it easily
[03:42] <patdk-lap> it's unlike scp though, that works at the command/shell level
[03:42] <qman__> and for good reason, FTP is, was, and always will be a stupid protocol
[03:43] <deviantgeek> I currently am using root to login to the SSH, I need full filesystem access though, any way I can do that without root?
[03:43] <deviantgeek> *make ssh sftp
[03:43] <qman__> why do you need full access?
[03:44] <qman__> it's much easier to solve that problem than safely allow full access
[03:44] <deviantgeek> well, so I can edit every aspect of the server from sftp
[03:44] <qman__> use ssh for that
[03:44] <deviantgeek> ok
[03:44] <qman__> shell in, do your editing directly on the server
[03:44] <qman__> SFTP is for transferring files
[03:45] <deviantgeek> qman__: ok
[03:45] <deviantgeek> what about getting xfce installed?
[03:46] <qman__> don't know why you'd want to do that
[03:46] <qman__> but you'd do it with apt-get
[03:46] <deviantgeek> (just makes moving files around easier, I dislike doing everything through ssh)
[03:47] <qman__> just FYI, as a general rule GUIs and the associated packages aren't supported in this channel, since this is the server channel
[03:47] <TJRana> deviantgeek, so you want some type of GUI instead of looking at lines of code?
[03:47] <qman__> you'll get more help on that subject in the desktop channels
[03:47] <deviantgeek> well, I do use ssh, but if I need to move lots of files, the gui helps
[03:47] <deviantgeek> (Probably because I need to learn more linux commands)
[03:48] <qman__> this
[03:48] <patdk-lap> heh, I normally drop to a shell to move files around
[03:48] <TJRana> deviantgeek, not when you have some type of FTP or SFTP and a program
[03:48] <patdk-lap> gui is so ugly at it
[03:48] <qman__> same
[03:48] <qman__> file operations are easier from the shell
[03:48] <deviantgeek> sftp works too.
[03:48] <deviantgeek> qman__: I download everything from shell
[03:48] <TJRana> deviantgeek, you can use Dreamweaver, and it's great for moving lots of files
[03:48] <deviantgeek> wget is awesome
[03:48] <qman__> I do most of my work in the shell, only reason I have a GUI is for easier web browsing and such
[03:49] <patdk-lap> I use gui to manage my xterms :)
[03:49] <TJRana> deviantgeek, I use Dreamweaver all the time and it's a great and powerful tool
[03:49] <deviantgeek> Dreamweaver looks good
[03:49] <TJRana> deviantgeek, do you have dreamweaver?
[03:49] <deviantgeek> yeah
[03:49] <TJRana> deviantgeek, then use it! lol
[03:49] <deviantgeek> I use filezilla for all my sftp
[03:49] <deviantgeek> too lazy to set up dreamweaver
[03:50] <qman__> I usually use scp
[03:50] <patdk-lap> I normally use rsync
[03:50] <TJRana> same difference
[03:51] <TJRana> it doesn't really matter, you still get the point
[03:51] <patdk-lap> unison?
[03:51] <TJRana> deviantgeek, what's the point of putting a GUI on the server when you have something like filezilla?
[03:51] <qman__> precisely, GUIs belong on desktops, not servers
[03:52] <qman__> with the exception of LTSP and similar
[03:52] <TJRana> yeah, putting a GUI just slows the server down
[03:52] <TJRana> uses more memory and whatnot
[03:53] <Resistance> anyone able to help me diagnose fcgiwrap / spawn-fcgi when trying to run the apcupsd cgi scripts (for internet monitoring of the apcupsd status data): https://pastebin.com/tBTPSeSg
[03:54] <patdk-lap> hmm? cgi isn't fcgi compatable
[03:55] <Resistance> patdk-lap:  give me a working nginx & cgi setup then
[03:55] <patdk-lap> heh?
[03:55] <patdk-lap> cgi is so straight forward, there really isn't any setup needed
[03:56] <Resistance> patdk-lap:  okay, you're no help...
[03:56] <Resistance> patdk-lap:  nginx has no ootb support for serving CGI content
[03:56] <patdk-lap> nope, I don't do nginx
[03:56] <Resistance> their examples and their wiki said to use fastcgi / fcgiwrap to serve cgi content
[03:56] <Resistance> *grumbles something about downsides to nginx*
[03:56] <patdk-lap> well, why not use a webserver that supports what you mean?
[03:57] <patdk-lap> I don't get why people attempt to shove square box's though round holes
[03:57] <Resistance> system resources are the issue
[03:57] <Resistance> apache's too mem-intensive
[03:57] <patdk-lap> that is 2, out of atleast 100 webservers
[03:58] <Resistance> *yawn* cba to try *all* of them
[03:58] <Resistance> *goes back to testing package backports*
[03:59] <qman__> you have to be dealing with a huge volume for that to matter
[03:59] <qman__> I've been using apache for years and never had a problem with its resource usage
[04:01] <Resistance> qman__:  did i mention this is a 128MB RAM VM?
[04:01] <Resistance> :/
[04:01] <patdk-lap> unless you really messup the apache config, it should only need 20megs of ram, or so
[04:02] <qman__> yeah
[04:02] <patdk-lap> much more than nginx at 3megs or whatever it is
[04:02] <Resistance> there's not even 10 megs available atm :/
[04:02] <Resistance> anyway its not super important, i've got other things to be fixing/testing anyways
[04:02] <patdk-lap> I would say, install lighttpd
[04:04] <qman__> personally I'd just get more RAM
[04:05] <qman__> not worth the hassle
[04:05] <TJRana> I'm going to leave now. I might be back later. Bye everyone. And Merry Christmas!!!!!
[04:05] <qman__> don't get me wrong, I appreciate efficient software
[04:05] <qman__> but time spent working on it is valuable too
[04:06] <patdk-lap> heh
[04:06] <patdk-lap> dunno, I've been running lighttpd since 2006
[04:06] <patdk-lap> switch off between it and apache often, depending on needs
[04:07] <qman__> I've just been using apache since forever, and I don't know anything else
[04:08] <qman__> even if it was a couple bucks a month on a hosted VPS, I'd pay it, not worth the time learning a whole new package to solve a problem I already know how to solve
[04:08] <patdk-lap> for me, defently a performance issue
[04:08] <patdk-lap> atleast one place I switched it too
[04:09] <qman__> on the other hand, if it's a genuine performance problem, it'd be worth looking into
[04:09] <patdk-lap> something in apache kept going nuts and using 400mb ram, randomly
[04:09] <patdk-lap> but normally unless there is something I specifically need apache for, I use lighttpd instead
[07:04] <TJRana> Hello, now I am stuck setting up ubuntu. I wanted to make a DNS Server so I am using the following website for a step-by-step tutorial: http://www.server-world.info/en/note?os=Ubuntu_11.04&p=dns&f=1 The only problem is I don't know what my global IP address is in brackets. I do know my global IP adress but not the one in brackets. And what is my private IP adress? and what would it look like in brackets?
[07:04] <TJRana>  Thank you.
[07:04] <twb> Are you using 11.04?
[07:04] <TJRana> no I'm using 11.10
[07:05] <twb> Then why are you reading documentation for 11.04?
[07:05] <TJRana> I had to compromise, and I was hoping the code would be similar so there would be little to no difference
[07:05] <twb> Have you tried the 11.10 server guide?
[07:05] <TJRana> and there aren't many tutorials out there… the server guide?
[07:06] <twb> https://help.ubuntu.com/11.10/serverguide/C/
[07:06] <twb> It's mentioned in the /topic
[07:06] <twb> (That's the thing at the top of the screen, that you're supposed to read before commenting)
[07:06] <TJRana> oh that… one…
[07:07] <TJRana> I'll take another look and see what I can do.
[07:07] <twb> Of course if you have read that and are still having problems, then we can talk abut it
[07:22] <TJRana> Hi um, I have a question. How do I find the IP Address of my ISP's DNS servers?
[07:22] <TJRana> *IP addresses
[07:22] <twb> Call your ISP's tech support
[07:23] <twb> If you have working internet elsewhere, google for "<ISP name> nameserver" or something
[07:23] <TJRana> okay
[07:23] <twb> There's no form of in-band discover of nameservers out on the internet
[07:24] <twb> (DNSSD/MDNS, but that doesn't normally propagate across routers.)
[07:29] <TJRana> okay so I got more information
[07:29] <TJRana> ISP : Optimum Online
[07:29] <TJRana> Host : ool-44c5ee43.dyn.optonline.net
[07:29] <TJRana> That's all I know
[07:30] <twb> 18:22 <twb> Call your ISP's tech support
[07:32] <TJRana> I have another question
[07:32] <TJRana> See on the following page: https://help.ubuntu.com/11.10/serverguide/C/dns-configuration.html it says that
[07:32] <TJRana> "The DNS configuration files are stored in the /etc/bind directory. The primary configuration file is /etc/bind/named.conf."
[07:33] <TJRana> Now, there are probably changes made to those configuration files… so how do I restore the default files?
[07:34] <twb> purge and install the package
[07:34] <twb> And learn etckeeper and git so you can avoid that next time
[07:35] <TJRana> okay
[07:36] <twb> Why do you want a DNS server
[07:37] <TJRana> um……..............
[07:37] <TJRana> wait, what does a DNS server do again?
[07:38] <twb> Serves a zone to DNS clients.
[07:39] <TJRana> um… Okay, so I used to use a free hosting server and I thought it would be more efficient if I had my own server, so I wouldn't have limitations to a bunch of stuff
[07:39] <twb> If it's an authoritative nameserver.  If it's a caching resolver, then it basically acts as a proxy for name resolution requests between clients and authoritative servers (or other resolvers).
[07:40] <twb> Typically a home network will have a caching resolver in the router, and at the ISP, and that will talk to the various authoritative servers out on the internet.
[07:40] <TJRana> so I thought maybe I needed to do a bunch of stuff to the server… like NTP, SSH, DNS, DHCP, Virtualization, NFS, NIS, LDAP, WEB, database, FTP, MAIL, Samba, Proxy, Desktop env to the server
[07:41] <twb> Unless you own a domain like dick.head.name or example.net, you do not need an authoritative nameserver.
[07:41] <TJRana> oh
[07:41] <TJRana> so a dns server is unnecessary?
[07:41] <twb> A network should have at least one caching resolver, but your ISP typically provides this for you.
[07:41] <TJRana> I own a domain. It's tjrana.com
[07:44] <TJRana> So since I own a domain, it's necessary?
[07:49] <twb> Or you could just pay someone like zoneedit to host it for ou
[07:49] <twb> Which for one domain will be $0/mo
[07:51] <TJRana> okay I went onto zoneedit.com and signed up
[07:53] <TJRana> what do I do next?
[07:55] <TJRana> What is a zone name?
[08:03] <TJRana> I keep on getting the same error, I got it before.
[08:04] <TJRana> http://paste.ubuntu.com/783147/
[08:06] <TJRana> http://pastebin.com/TFSL4tsz
[08:11] <TJRana> Hello?
[08:11] <TJRana> twb are you there?
[08:21] <arooni-mobile> for some reason i'm kinda locked out of my server... i could ssh into before rebooting... now i see: https://gist.github.com/1520745 ... when i try to connect.  i didnt change ssh or anything as far as i know
[09:14] <lalagirl> is anyone there?
[13:16] <linxeh> Is there a recommended RADIUS server package to use on Ubuntu LTS? Is FreeRADIUS the way to go?
[15:18] <arooni-mobile> hi folks; for some stupid reason i can't ssh into my server; so the server support people gave me access to KVM.  how can i use KVM in orerder to recover my server and be able to SSH into it again?  running ubuntu 11.10.  i have an admin account and a root account but I believe i have disabled root login via ssh
[15:19] <raubvogel> arooni-mobile: can you vpn into your server's console?
[15:21] <arooni-mobile> raubvogel, this is what i have access to now: http://global.avocent.com/us/olh/dsr/v_3.7.1/global/en/index.html
[15:21] <arooni-mobile> not sur eif thats different than kvm
[15:21] <raubvogel> Oh
[15:22] <raubvogel> so by KVM you mean the switch, not the emulator :)
[15:22] <StevenR> arooni-mobile: can you login to the server using the KVM ?
[15:23] <arooni-mobile> im not sure how to use the switch software i have now to connect ot the server
[15:23] <arooni-mobile> any suggestions?
[15:23] <raubvogel> arooni-mobile: Take a look under "The Video Viewer->Launching a KVM Session"
[15:26] <raubvogel> In http://manpages.ubuntu.com/manpages/oneiric/man5/nss_ldap.5.html they mention some features require schema  mapping  support. How to find out if the libnss-ldap package has that?
[16:11] <arooni-mobile> hi folks; for some stupid reason i cant ssh to my server:  https://gist.github.com/1521495 ... no idea what to do now.
[16:22] <SpamapS> arooni-mobile: your key may be in the wrong format, ssh-keygen can convert it
[16:23] <SpamapS> arooni-mobile: man ssh-keygen
[16:25] <arooni-mobile> SpamapS, key on the side trying to connect?
[16:32] <qman__> you're not supposed to include the ----BEGIN---- -----END---- lines
[16:32] <qman__> but yeah, it could be totally wrong
[16:34] <qman__> take that back, id_rsa does have those
[16:34] <qman__> thinking of authorized_keys, which has a one key per line format
[16:39] <raubvogel> arooni-mobile did you try to ssh -vvv and watch the messages?
[16:47] <arooni-mobile> i have done that yes
[16:47] <arooni-mobile> this is sooo weird
[16:47] <arooni-mobile> everything was setup on the server
[16:47] <arooni-mobile> and alli did was reboot it to test it
[16:47] <arooni-mobile> waiting on a kvm recovery session
[16:47] <arooni-mobile> dedicated server support people claim they can ssh with same creds
[17:20] <arooni-mobile__> hi folks;  i'm trying to ssh into my server; but when i use the correct username
[17:20] <arooni-mobile__> nothing happens
[17:33] <arooni-mobile> re-setting up my ssh config.  is there any problem with putting the SSH port at 22222 ?
[19:03] <JoshuaP> How do I keep the SSH MOTD from updating itself?
[19:04] <smw> JoshuaP, I think it is a cron job.
[19:04] <smw> JoshuaP, it uses /etc/motd.d or something like that, let me check
[19:05] <JoshuaP> k
[19:06] <smw> /etc/update-motd.d/ controls it
[19:06] <smw> you may want to leave it and just change the footer
[19:06] <smw> that is what I do
[19:08] <JoshuaP> Okay
[19:10] <JoshuaP> Does that make the MOTD not update?
[19:21] <rbasak> I think /etc/motd is a symlink and if you replace it with a normal file then it won't auto-update. IIRC. I may be wrong.
[19:25] <JoshuaP> When I put my own text in there, it earases.
[19:29] <rbasak> Have you replaced the symlink with a normal file?
[19:44] <JoshuaP> How do I set write permissions of a file to a user?
[23:15] <koolhead17> hi all
[23:17] <Warp4> hi
[23:18] <koolhead17> supp Warp4
[23:18] <Warp4> not much
[23:18] <Warp4> just sitting on the channel in case i or anyone else needs help :)
[23:19] <koolhead17> Warp4, great. ^^