[00:12] Hey guys. Don't know if this is off-topic but alis couldn't help me find a more on topic room so I was hoping someone could help me with sudo-ldap. I have some rules that I tested on my server in the local sudoers file and one rule was giving members of the admin access to everything except a cmnd_alias for su and shells and I'm not sure how I should do that via sudo-ldap [00:14] jetole: alis questions go to #freenode [00:14] Oh, misread [00:15] guys i ahve a folder/directory with many files on it- dir1 and dir2 are teh same in fromat but dir2 have some few added updates of file in it how do i copy dir2 to dir1 by just ovewriting existing but copy the file whihc dir dont have.>? any idea..? [00:15] I don't know what you mean by cmnd_alias [00:16] ``Cmnd_Aliases are not really required either since it is possible to have multiple users listed in a sudoRole. Instead of defining a Cmnd_Alias that is referenced by multiple users, one can create a sudoRole that contains the commands and assign multiple users to it.'' [00:16] That's what sudoers_ldap says [00:16] Er, sudoers.ldap(5) [00:16] guys i have a folder/directory with many files on it- dir1 and dir2 are the same in fromat but dir2 have some few added updates of file in it how do i copy dir2 to dir1 by just ovewriting existing but copy the file which dir dont have.>? any idea..? [00:17] jetole: Here are my sudo objects: http://paste.debian.net/158251/ [00:18] ruben23: rsync -aui ? [00:18] ruben23: perhaps with --dry-run [00:21] twb: rsync -aui /home/dir2 /var/dir1...? [00:22] ruben23: I expect you to use some initiative and investigate the meaning of those rsync options. [00:53] twb: Thanks. [00:53] * jetole looks [01:21] I'm trying to install ubuntu server 10.04 lts on a laptop with a broken screen. However, past the menu which prompts me to choose a language/what action to perform, once I select "Install ubuntu server", it stops giving output via VGA [01:22] I know that you can specify the vga kernel option, but I've forgotten how [01:22] Firebolt: do a network install instead [01:23] Firebolt: does the laptop have wired ethernet? [01:23] twb, yes [01:23] Yeah just set it to boot from network, and load up the netboot installer. Write a preseed script to get it to the point where you can SSH into the installer and finish the install [01:24] no idea how to do that [01:24] It's documented in the installation-guide-i386 (or -amd64) package [01:24] Alternatively you could try fiddling with vga=false nomodeset and stuff at the start of the installer, where you hit F6 to add extra boot options [01:25] ah [01:25] what would I specify vga= as then? [01:25] I dunno [01:26] I don't know how your screen is buggered either [01:27] The backlight doesn't work [01:29] clumsy friend [01:30] If you can get video working enough, you can start SSH from the normal installer [01:31] You pick "expert install" (priority=low) and when prompted for udebs (modules) to install, you make sure to tick "network-console". [01:31] Passing theme=dark is also good for getting rid of that fugly magenta [01:35] the minute the installer starts, I loose the vga [01:35] I tried using vga=XXX, but it doesn't display correctly [01:36] Oh, wait, this is lucid? [01:36] Lucid installer has a bug where you *can't* stop it loading the framebuffer, no matter what, until the install is finished and you boot off the HDD [01:36] awww [01:36] it drove me apeshit trying to do it until I RTFS and found it was not possible [01:37] So I should use a newer version instead? [01:37] What's really stupid is it's hard-code to load vga16fb which only provides 80x30 instead of 80x25 [01:37] For 5 damn lines they broke it for me (and you, I guess) [01:37] Firebolt: well AFAIK it's fixed in 10.10 and up, but I don't know if you want LTS or not [01:38] I'd prefer lts, but anything will do at this point [01:39] I guess i'll download 11.04 server [01:39] er, 11.10 [01:39] 12.04 will be LTS yes? [01:39] Yes [01:39] Hang on, I'll find you the small ISO URL [01:40] http://archive.ubuntu.com/ubuntu/dists/precise/main/installer-amd64/current/images/netboot/mini.iso [01:40] no need [01:40] Well, OK [01:40] already downloading the full [01:41] I just hate people downloading 700MB when 20MB will do [01:41] I often work with computers with no internet connection at install time [01:41] Fair enough [01:41] Usually I install them *then* ship them out [01:42] shipping, eh? [01:42] I just help out friends who want to try linux [01:42] You poor poor bastard [01:42] but normally i end up installing at school [01:42] where we're locked from using the school wifi/ethernet [01:44] figures, though, that the one installer I try is borked [01:44] Normally it would merely be annoying, not a show-stopper [01:45] If the screen goes completely blank that's probably because the screen is lying about its resolution over EDID or something [01:46] there's a bit of random colours on the screen [01:47] Like snow? [01:47] I mean: like an out-of-tune telly? [01:47] Maybe you're too young to remember FM TV tuners... [01:49] oh no [01:49] I do [01:50] I may be only 15, but I've seen my share of devices [01:52] I remember building one from a kit [01:52] back before the electonics hobby market died [01:54] (Firebolt here, connecting from a spare laptop) [01:55] I have too many of these === sixstringsg|away is now known as sixstringsg [02:00] Evening .. I just did a fresh oneiric install , and am having the " dhclient: can't create /var/lib/dhcp3/dhclient.eth0.leases: No such file or directory" issue.. [02:00] what is the good way to fix it? [02:00] mess with ifup [02:00] create a simlink ? [02:00] create a dir ? [02:01] y [02:02] Ptoenk: sounds like your system is damaged. [02:02] lol [02:02] no it's not [02:03] it's a well documented bug [02:03] Then fix it yourself, I guess. [02:03] whats the bug number ? [02:03] twb: now now [02:03] set me find it again , sec [02:05] Ptoenk: try ifdown --force eth0; ifup eth0 [02:05] Bug #900234 [02:05] Launchpad bug 900234 in isc-dhcp "dhclient: can't create /var/lib/dhcp3/dhclient.eth0.leases in syslog again on Precise" [Undecided,Confirmed] https://launchpad.net/bugs/900234 [02:07] Ptoenk: sudo ln -s dhcp /var/lib/dhcp3 as a workaround, according to that ticket [02:07] yes [02:07] i can also mess with ifup [02:07] i can do lots of things [02:07] * twb grumbles, why is ifupdown 0.7 still using noweb [02:07] the question i have , if any , is there a set resolution , albeit temporaty [02:08] that will not give issues once a real fix is introdced [02:08] Ptoenk: all I know is what's on that bug ticket. [02:08] others might know [02:08] creating a link is a plaster on a wooden leg [04:35] hey all OK I've got a ubuntu server up on EC2 .. with a web server running on it .. the web servers config is set to serve out at port 3000 ... however: http://ec2-23-20-139-29.compute-1.amazonaws.com:3000/ is giving me nothing [04:38] delinquentme: on the server, can you connect to 127.0.0.1 3000 ? [04:39] twb, how do I check that?? ping? === Yann2 is now known as Guest66586 [04:41] nc 127.0.0.1 3000 [04:41] If it doesn't hang up, speak some HTTP to it [04:41] New bug: #944546 in libcommons-cli-java (main) "StringIndexOutOfBoundsException in HelpFormatter.findWrapPos" [Undecided,New] https://launchpad.net/bugs/944546 [04:41] If you can't speak HTTP, you should not be setting up a web server. [04:44] Hmmm nc .. what kind of tool is this? [04:45] nc 127.0.0.1 3000 <<< did nothing with this twb === sixstringsg is now known as sixstringsg|away [04:45] Then clearly your httpd is not running, or not bound wherey you thought it was [04:45] cf. netstat -nlp [04:47] https://gist.github.com/1955759 << output [04:47] now this is also not an apache server [04:48] delinquentme: perhaps you haven't configured EC2 to allow incoming traffic to port 3000? By default all incoming ports are closed on EC2. [04:48] SpamapS: should still allow it on lo, surely [04:48] yeah, but nc would "do nothing" to the untrained eye [04:49] Oh I see what you mean. Sigh. [04:49] Also his netstat (btw people, use ss, not netstat) shows it listening. [04:49] ss does the wrong thing in a specific case, I forget which [04:49] SpamapS, AH! [04:49] twb: good, you can actually *fix* it [04:50] twb: whereas netstat is basically dead [04:50] IIRC it wouldn't list UDP listening ports by default [04:50] so what ss comand should i use to replace the netstat one? [04:51] Also its stupid huge padding is really annoying [04:51] So you always have to |cat to stop it [04:52] twb: it just fills the available columns [04:52] SpamapS: yes but I have full-screen ttys so I end up with like 100 spaces between each column [04:53] Oh, and by default it puts -p on a second line [04:53] twb: perhaps submit a bug report that it should stop at 120 ;) [04:53] IMO it should be more or less like column -t, where it puts about four space between each column [04:53] ok so do I need to make both a rule for TCP and UDP? [04:54] delinquentme: no, HTTP runs over TCP [04:54] Which you should also already know. [04:54] and then the source should be the internal IP of the web server [04:54] twb: ultimately though, netstat is deprecated, so you should gripe about ss to the ss maintainers.. because.. it actually has maintainers. ;) [04:54] twb, totally =] [04:54] http://paste.debian.net/158263/ [04:54] Also ss was installed into sbin by default until recently [04:55] SpamapS: I complained to them directly a few years back [04:55] SpamapS: I was using ss for a while but that gotcha where it didn't list... whatever it was, fucked me over, so I have put off migrating to it for a while [04:55] I do use ip everywhere, though. [04:57] hello all, I updated my Ubuntu 10 server with webmin and it broke php. Files were downloading instead being appropriately handled. I then went to Troubleshooting PHP https://help.ubuntu.com/community/ApacheMySQLPHP#Troubleshooting_PHP_5 and ran sudo a2enmod php5 which returned "Enabling module php5." instead of returning module not found. However upon restarting apache I got an error "Syntax error on line 204 of [04:57] /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/php5.load: Cannot load /usr/lib/apache2/modules/libphp5.so into server: /usr/lib/apache2/modules/libphp5.so: cannot open shared object file: No such file or directory" [04:58] you guys have any idea if I need to restart my EC2 servers for the security group changes to take effect? [04:58] !webmin [04:58] webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. [04:58] I removed php5-common with apt-get, re-installed, restarted apache and now I get a 500 server error instead of a download, however HTML renders fine [04:59] DyeA: this is why we don't support webmin, because it causes problems like this. [04:59] arghhh! it seemed like a good idea at the time [04:59] You were probably high [05:00] definite possibility [05:00] SpamapS: can't find my ss whinging in debbugs bts :-/ [05:00] twb, so what am i looking for in "netstat -nlp" to ensure that the connections I want are functional? [05:00] should I have done a purge instead of a remove of php? [05:00] AWWW YEAHHH [05:01] http://ec2-23-20-139-29.compute-1.amazonaws.com:3000/ <3 u guys [05:01] http://paste.debian.net/158264/ [05:01] delinquentme: that shows a server with a listening apache on 80 [05:02] how can you tell this? [05:02] also I didn't install apache on this .. are you sure thats not the routing server? [05:02] delinquentme: sorry, you've exceeded your stupidity allowance. Please wait patiently for someone else to help you. [05:03] delinquentme: hey don't feel bad, I exceeded my stupidity allowance before even arriving here [05:04] lol [05:04] twb im learning :D [05:04] its cool though [05:05] twb is drunk and watching glee right now but his knowledge still vastly exceeds ours even in his current state [05:05] Isn't glee about gays in a high school musical / drama? [05:05] twb: close enough [05:06] twb, do you have any suggestions besides webmin? [05:06] that are similar? [05:06] LOL [05:06] delinquentme: whateve you don't install webmin [05:06] twb i dont judge you [05:06] I'd rather rewatch the first two seasons of _Skins_ [05:06] DyeA, check. [05:06] Oh, sorry, this is #ubuntu-server not #emacs. I'll get back on topic. [05:06] apt-get check? [05:06] twb, have you ever used youtube> [05:06] :D [05:07] (I've only ever used webmin when forced) [05:07] Firebolt: we recommend learning to use the CLI like a proper sysadmin [05:07] yeah i felt vaguely dirty ever time i used it [05:08] twb, but for my friends who are gifted with IQs of -4 or use Macs? [05:08] Firebolt: they do not get to be sysadmins [05:08] They can hire someone like me to babysit their VPS [05:08] lol [05:09] they just get to randomly fire up slow loris and get jacked [05:09] twb, dont sysadmins just play wow? [05:10] no [05:10] I don't play wow [05:11] The LAST thing a sysadmin wants to do when she goes home, is to babysit another computer [05:12] http://lemonnier.se/erwan/talks/pix/BoredSysadmin.jpg [05:12] lik dat? [05:12] i tried to find a screenie of a WoW char named sysadmind [05:12] I prefer to fool with others' servers by "sudo rm -rf /" [05:13] http://www.reddit.com/r/networking/comments/qbi4f/help_me_explain_to_my_wife_that_our_network_isnt/ [05:14] delinquentme: please take it to #overflow or whatever [05:15] twb, trying to lighten your levels [05:17] I need to get myself a better ISP [05:18] rather, I need to get my parents to get me a better ISP [05:21] soo whats up with the apache [05:21] oh wait apache tomcat [05:22] yeah idk trinidad is some interface between those === sixstringsg|away is now known as sixstringsg [06:23] hello? [06:26] bnemec: ahoy! [06:27] cool someone else in here. [06:28] I'm running 10.04 LTS on Dell PE2600 [06:28] you? [06:28] I run 11.10 in EC2 ;) [06:29] and precise on my laptops. :) [06:29] but then.. I'm a developer, so I find it helpful to run precise for testing. :) [06:31] SpamapS: howdy :-) [06:32] kirkland: avast! [06:32] SpamapS: nice post today, btw [06:32] SpamapS: long live Eddard Stark! [06:42] kirkland: not too long.. ;) [06:42] SpamapS: he dies???? :-) [06:43] kirkland: I'm on book 4. Had to swear it off for a couple weeks tho.. tore through the first 3 books so fast. [06:43] SpamapS: I'm about 20% through book 5 [06:43] SpamapS: book 3 was *great* [06:50] kirkland: yeah I feel like book 4 is a result of him being tired of writing about Tyrion. ;) [06:59] SpamapS: heh, yeah [06:59] SpamapS: i missed most of my favorite characters in book 4 [07:00] SpamapS: do you happen to have osx running anywhere any more? [07:00] SpamapS: I want to do some byobu verification/testing/development on osx [07:00] SpamapS: and I'm wondering if I need to just but a crappy mac mini or something [07:01] SpamapS: it's so weird not just being able to fire up the OS I need in EC2 and pay a few pennies :-) === sixstringsg is now known as sixstringsg|away [07:27] kirkland: you can run OS X in a VM on a Mac without buying another license. ;) [07:28] kirkland: I don't hardly ever run it except to update the OS on my iphone anymore. [07:37] so can anyone tell me why i can't login to my ec nodes? [07:38] someone must be testing this also. [07:39] kirkland: btw, speaking of byobu issues.. using it on precise right now and its flickering a lot.. [07:41] gnome: ec2 ? [07:50] yup ec2 [07:52] sons up back in a few [07:55] gnome: You most likely need to define a key pair and make sure a) you're specifying it when launching the instnaces, and b) you're using it when ssh'ing to the instances [07:56] k [07:56] but [07:56] when I go to send key to instance.. I fail. [07:56] so you are saying make the key then boot the instance? [07:57] when i try to ssh to an instance i am met with a password [07:57] i can't even login to the nodes if I am standing in front of them. [07:57] i just don't get it. perfect pxe cobbler install 10 machines. [07:57] and how did it not send my creds during that install? [07:58] sorry for silly questions. :( [07:58] i have done manual clusters with ease. [07:59] gnome: you have to inform *amazon* of the key [07:59] k.. [07:59] I 'HAVE' to inform them? [07:59] gnome: *or* you have to store your key some other way such as through cloud-init metadata [07:59] that amazon thing, like really i registerd my personal cloud. with them? [08:00] gnome: you can use your own keys if you want. Its just not built into the EC2 api.. but it is built into Ubuntu. [08:00] repeating a question answered... shows my inability to not understand why we have to register with them for our 'own' personal systems. [08:00] so how will that make me able to login to the nodes? [08:01] gnome: they have console access to your systems. Don't be naive. ;) [08:01] behind a proxy alsO? [08:01] * gnome me is being paranoid. [08:02] gnome: anyway, if you want to SSH to the systems you have two options. Add a keypair using euca-add-keypair (or ec2-add-keypair if you prefer the original slower amazon tools) ... [08:02] gnome: or you can learn to use cloud-init to put your keys on the systems. [08:03] i have read the ub cloud info back to back many a times. there was nothing about cloud-init. [08:03] gnome: ub cloud info ? [08:03] it it just that 11.10 is lacking documation assuming we have run their soft before? [08:03] spamaps ... ub clound info..? [08:03] i not sure what you mean sir. [08:05] gnome: you said "ub cloud info" .. I don't know what that means [08:06] oh, the posted manual on the ubuntu site [08:06] on covering install and setup [08:08] so i went with ubuntu because of ... easability, well >.. :( [08:08] it's not been so easy that's for sure [08:11] gnome: "the ubuntu site" ? [08:11] gnome: do you mean www.ubuntu.com , cloud.ubuntu.com, help.ubuntu.com, wiki.ubuntu.com, or somethingelse.ubuntu.com ? [08:11] gnome: it would help me if you could point me to the same material you are reading so I can help get it fixed, or explain something that might not be clear. [08:12] gnome: the cloud is not actually very easy.. we've been working on making it easier w/ juju (http://juju.ubuntu.com/) [08:12] k ya i been playing with juju also [08:12] it's nearly making me crazy at how nice it susposed to work [08:12] but doesn't do as intended. [08:13] i pxe booted all nodes to oneiric - arc - juju [08:13] try to login with my primary user name from main server to any node. [08:13] denied... [08:13] now if this part was streamlined also.. i'd be a happy camper === smb` is now known as smb [08:14] i could deploy mpi work i do in a ub environment over massive ammounts of pc's quickly [08:14] instead it feels like my head going to explode. [08:14] glances back over at the deb dvd's... :) [08:15] help.ubuntu.com [08:15] is side. [08:15] site the server guide. [08:15] gnome: pxe boot? so you tried the orchestra provider with juju? [08:15] yup [08:16] it works beautifull but no node access... [08:16] gnome: that is a really, really specialized and frankly bad use case for juju right now. Its going to be *MUCH* better in 12.04 [08:16] like does the head node need a gui front end.. [08:16] oh it's fine spamaps i like to work with ... anything [08:16] gnome: for EC2.. juju is *very* smooth [08:16] my other cluster is a huge mixture of every distro. [08:17] did it just cause :) lol but I want to do a solid system like what ub development is leaning at with 11.10 [08:17] gnome: give juju+EC2 a try [08:17] gnome: I think you'll like it [08:17] ya i installed ec2 [08:17] then juju [08:18] and .. am lost why don't nodes get any info. [08:18] only thing I can possibly think of is in cobbler interface i have user set as [08:18] admin [08:18] that's the conclusion i have come to after... oh 10 netboots of each machine. [08:19] i actually installed the server front end 7 times to get it ... [08:19] the way i wanted. [08:19] gnome: *ec2* does not need cobbler [08:19] but isn't cobbler the deploy for pxe? [08:19] doesn't it setup the boot imgs? [08:20] gnome: yes, but why would you PXE on a public cloud? [08:20] ? public? [08:20] k private and public clouds.. i just dont' under stand the terminology this way [08:20] to me private would be something running at home behind multi firewalls. [08:21] public would be like a High availability server running on a public ip. [08:21] sorr if this sounds stupid [08:21] gnome: public means another company hosts the hardware [08:21] gnome: private means you host it and do not sell it to anyone else. [08:21] I am running a private cloud [08:21] then. [08:21] gnome: eucalyptus? openstack? [08:21] yup [08:22] both? [08:22] eucalyptus [08:22] ah ok [08:22] We've had some issues w/ juju + eucalyptus [08:22] like when i get the main server running I install eucalyptus [08:22] because of the way euca sets up their "S3" [08:22] then after I login to cobbler [08:22] add the nodes [08:22] and boot them [08:22] its fundamentally broken unfortunately. [08:22] they install. [08:22] @!%%%%%%%%%%%%% [08:22] 5 days I been working with.. fundamentally broken.. [08:22] no wonder my head hurts [08:22] gnome: you may have noticed, the buzz around euca has died down a lot... for a reason [08:23] well if it would just deploy user creds with the pxe boot img properly [08:23] gnome: openstack is a bit harder to deploy, but will scale quite a bit more. [08:23] omg I'd be still installing systems to it. [08:24] gnome: if you're using juju + orchestra, juju should be installing your key to let you login as the 'ubuntu' user with it. [08:24] gnome: I'd recommend hanging out in #juju and asking there [08:24] gnome: note though that one reason there's very little documentation on orchestra is that it is changing so rapidly in 12.04 [08:25] Unknown id: ubuntu [08:25] :( [08:26] if i could just get into my nodes... I'd be so happy.. short of login brute force then set keys after [08:26] so do I wait for 12.04 or do i go back to 10.? [08:26] gnome: if something went wrong during the install then you won't be able to login.. its one of the problems that needs solving. :) [08:27] right but you can continue to re-image. then netboot the nodes till they work right [08:27] only thing I can think of is i am using user name admin [08:28] and i noticed in cobber logs it says user [?] on machine [ub1] [08:28] gnome: the juju orchestra system profile creates a user named 'ubuntu' and puts your ssh key in for the 'ubuntu' user [08:28] so it doesn't seem to know user for odd reason, i going to look into it further at this point it seems to me there must be a simple reason for why it failing . [08:28] well i tried sudo su ubuntu [08:28] on the master it said.. no user. [08:29] however there is a eucalyptus user [08:29] gnome: then you didn't use juju+orchestra to install that machine. [08:29] and course the user name I set during server install [08:29] odd.. because it was the latest and only 11.10 i could download [08:29] gnome: wait, I keep forgetting that you're doing eucalyptus. So you created a eucalyptus cloud.. and you're trying to talk to it w/ juju? [08:30] i am trying to figure out how to talk to it to send creds to the nodes so i can access them [08:30] or was euc not intended to allow us to use the nodes directly? [08:30] gnome: and by nodes, you mean the nodes *running* eucalyptus, or the VMs running *inside eucalyptus* ? [08:30] node = terminals . pc's [08:31] slaves! [08:31] sry [08:31] master and 9 slaves [08:31] can't access or login to the slave machines what so ever [08:31] gnome: ok, well if you just used cobbler and the default oneiric install profile, then you probably don't have a user. You need to add one to the kickstart/pre-seed [08:32] gnome: and by slaves, you mean *physical* machines, not virtual machines? [08:32] yup physical [08:33] gnome: ok, so yeah, you just need to define a way to login to them in the pre-seed [08:33] k so do that in cobbler web interface? [08:33] gnome: did you try 'ubuntu/ubuntu' for user/pass ? [08:33] or just console edit the kick? [08:33] on a node? [08:33] yeah [08:33] try it [08:33] k i got 4 flights of stairs [08:34] going to take a minute [08:34] brb [08:34] wait no [08:34] no no on [08:34] no no [08:34] k [08:34] gnome: they're not running SSH? [08:34] yup they are [08:34] ssh ubuntu@thenode [08:34] BAZINGA! [08:35] now if that small instructino was added on the page. [08:35] omgosh would that help like 1000 ppl have same question as me [08:36] gnome: well its a security problem and is going to be removed actually. ;) [08:36] is in shock 4 days.. [08:36] gnome: default passwords == bad [08:36] yes they do [08:36] but k so how do I tell it to just do it auto from pxe.. or should I just not do that? and behapp this way/ [08:37] gnome: But, alas, there's so much else that is changing. Glad we could move you forward. :) [08:37] gnome: if you look in the pre-seed, there is a password value (a hash I think, so it look slike gibberish) set... you can change it. [08:37] gnome: in cobbler pre-seeds are called kickstarts (because it came from redhat) [08:37] anyway [08:38]