[02:17] Does anybody have a recommendation as to a DMS? Most docs would be scanned document images. we want to move a large collection of client records online and provide some sort of search capability. Linux based a must. Webdav compatibility/capability would be desirable. Remote access also a must. === leo-nel is now known as leonel [04:20] New bug: #986011 in clamav (main) "Package amavisd-new" [Undecided,New] https://launchpad.net/bugs/986011 === jtv1 is now known as jtv [06:24] does anyone know any good weather terminal apps? [06:26] I am new to using irc, is there a rule i missed? [06:31] is anyone around? [07:15] New bug: #986034 in samba (main) "package winbind 2:3.6.3-2ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/986034 [07:16] http://pastie.textmate.org/private/wl6gh6on5zz00n9b4hhkq [07:16] what's that mean? [07:16] trying to create a csr [07:19] :( === almaisan-away is now known as al-maisan [08:28] hi all [08:28] anyone here? [08:28] anyone from germany? === al-maisan is now known as almaisan-away [08:31] what divided east and west germany? how to call that poland area? [08:33] <_ruben> go do your homework yourself [08:43] Pretty sure a wall divided the [08:43] Pretty sure a wall divided them [08:44] twb, :P [08:44] blendedbychris: IME gnutls program is MUCH easier to use than openssl's [08:46] meh i dont know what it was but it works now [08:52] blendedbychris: it has args like this: certtool --generate-privkey --outfile /etc/ssl/private/fred.pem [08:52] blendedbychris: whereas in ssl that is some bullshit like ssl rsa gen > foo.pem; [08:53] wait what? [08:53] remove the private key? [08:53] an pem should have a private key included [08:53] Sorry [08:54] remove the passphrase [08:54] I'm a bit drunk [08:54] you don't have to remove the passphrase? [08:54] certtool doesn't add a passphrase unless you tell it to [08:54] neither does openssl... [08:54] Well none of the docs I could find seemed to know that [08:55] certtool was straightforward and obvious for the four or five typical workflows that I actually care about [08:55] And they were spelled out at length in info [08:55] openssl genrsa -out /etc/csync2_ssl_key.pem 2048 just craps out a key afaik [08:56] should be called .key [08:56] if you say so [08:56] (just ran it [08:56] The extension is irrelevant [08:56] well ya… [08:56] when i see pem i always think a key + a public but i'm probably mistaken [08:57] if you do genrsa des -out … it will try to encrpyt it with a passphrase [08:57] -des rather [08:58] pem is just the format [08:58] like uuencode or base 64 [08:58] hrm [09:00] gpg --export --armour fred@example.net is also PEM format afaik [09:00] i always see folk doing -des3 -out … and then rerunning it through the thing to remove the passphrase [09:00] Yeah it is stupid cargo-cult shit [09:00] But you look at the list of subcommands and it's a bit overwhelming because there's no ordering [09:01] http://paste.debian.net/163925/ [09:03] But whatever, I've made my salespitch [09:04] heh i actually don't understand enough about the crap to consider your option viable… i just fumble my way through [09:04] and forget it about every 365 days [09:04] I strongly recommend reading the gnutls info page [09:06] http://paste.debian.net/163926/ also here are my notes on SSL/x509 theory [09:06] "info gnutls | less" if you don't like the default info reader [09:09] I should probably rewrite those notes, since I understand x509 a little better now [09:19] Hello everyone. [09:20] hello [09:21] New bug: #986085 in mysql-5.1 (main) "package mysql-server-5.1 5.1.61-0ubuntu0.11.04.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 100" [Undecided,New] https://launchpad.net/bugs/986085 [09:23] Anyone here using tomcat? [09:27] !anyone [09:27] A high percentage of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? See also !details, !gq, and !poll. [09:30] My apologies. [09:32] No problem [09:34] I am struggling to get tomcat (6.0.35) to work well on an Ubuntu Server currently testing on 12.04 but got same result on 11.04 and 11.10). The same application is running on a hosted solution with much better performance. I notice that the CPU does not appear to be being used (top shows %us to range between 5 and 15%) as much as the hosted solution (top show %us to be between 80 and 90%). How do I go about trouble shooting why the cpu is not being us [09:36] NFI, sorry [09:37] Thanks twb ;) [10:36] How can I get Ubuntu to allow certain processes to use more resources than others? In this case I need tomcat and its database connections to be allowed more processing power. [10:38] man nice [10:39] But that's really just prioritizing [10:40] Thanks Jeeves_. I tried that but the %us still does not go above 15%. It usually hovers around 10%. [10:41] andrewhiggs, and you have idle% >0? [10:42] Yip. That is normally around 80 - 90%. [10:42] then the program is to blame [10:42] it's has the option of using more, but isn't [10:42] or you have more than one cpu, and it's single threaded [10:42] But the program run properly on another system? [10:47] If I have a processor with two cores and one is being used by the tomcat process almost fully would top show %us as 50%? [10:51] yep [10:51] assuming two cores and no hyperthreading [10:52] I have not done anything with hyperthreading. Would this be something likely to be set by default? [10:52] depends on if your cpu support it, but normally enabled if it does [10:52] just cat /proc/cpuinfo to see how many cpu's it sees [10:53] processor: xx [10:53] It does see both. Both are running at 2.4Ghz. [10:54] andrewhiggs: You can press '1' in top to see all cpus individually [10:54] Also, look at iowaiy [10:54] iowait [10:54] if that's high [10:54] Your processes are just waiting for your disks [10:55] %wa is usually quite low. I have only seen it spike once or twice. [10:55] top [10:55] Sorry. :-) [10:57] If I press 1 as suggested I see that both processors seem to be being used roughly half half. [10:58] Cpu0 is usually just a few percentage points above cpu1. Which I would think is normal. [11:02] <_ruben> perhaps it just doesn't have any more work to do :) [11:03] But the tomcat application runs very slowly. The %us on another server is 80 - 90%. :-) [11:05] nothing is worse than locking issues [11:56] How do you think I can try to trouble shhot why this process is not using more resources than it does? [12:02] hi there! [12:02] Whats the default iscsi target in Ubuntu 12.04? [12:03] I understand it is tgt? === lionel__ is now known as lionel [12:22] hello, i have recently updated to the latest packages (on 18th of april), before that I was running for quite a long time with the packages of 2 weeks old. Now my test vms with windows7 are extremely slow w/o the changes to the underlying hardware. === matsubara-afk is now known as matsubara [12:24] no dmesg messages, no syslog messages to pinpoint what's happening. I see elevated disk usage at times but it does not look like it was too different earlier [12:25] Madkiss, hey [12:37] hello koolhead17 [12:40] Madkiss, trying to figure out what am doing wrong to get vnc running and other distro instances tested [12:42] hi does anyone know an easy distribution to set up a small ftp server with web interface? [12:43] !ftp [12:43] FTP clients: Nautilus (Places -> Connect to server), gFTP, FileZilla (for !GNOME); Konqueror, Kasablanca, KFTPGrabber (for !KDE); FireFTP (for Firefox); ftp, lftp (for !cli) - See also !FTPd [12:43] !ftpserver [12:44] <_ruben> !ftpd [12:44] FTP servers: ftpd, proftpd, pure-ftpd, twoftpd, vsftpd, MuddleFTPd, wzdftpd - Graphical front-ends: PureAdmin, GProftpd (for GNOME), KcmPureftpd (for !KDE) - See also !FTP [12:46] New bug: #986159 in squid3 (main) "squid3 open file descriptors limit is set incorrectly" [Undecided,New] https://launchpad.net/bugs/986159 === almaisan-away is now known as al-maisan === al-maisan is now known as almaisan-away === almaisan-away is now known as al-maisan === al-maisan is now known as almaisan-away [14:16] New bug: #975450 in txlongpoll "bind all services not required by the nodes to the loopback interface or add ingress firewall rules for these services" [Undecided,Confirmed] https://launchpad.net/bugs/975450 [14:24] Any comments on the impact of bug 986159? The default number of file descriptors is 1024, is it? Would this bug cause issues in production? [14:24] Launchpad bug 986159 in squid3 "squid3 open file descriptors limit is set incorrectly" [Undecided,New] https://launchpad.net/bugs/986159 [14:28] hallyn: ^^, can I get your opinion on this? Is this important for precise? Everyone else is at ODS it seem! [14:28] seems! [14:29] checking [14:29] ods? [14:30] opentack devel conf [14:30] c [14:30] k [14:30] rbasak: ah, the bug makes sense. [14:30] rbasak: i'd say, dput the fix and ask on #ubuntu-release what they think [14:31] hallyn: I can't upload [14:31] cause I have no idea (a) how important squid is to us or (b) how important the fd limit is to squid [14:31] yeah that's what I'm thinking, too [14:31] oh. not sure i can either come to think of it :) [14:31] I can ask in #ubuntu-release though [14:31] i'll go peek in too [14:32] Hmm [14:32] Looks like squid got demoted to universe in precise [14:34] rbasak: actually the ulimit part may be important [14:34] ah it's squid3 and that is in main [14:34] eh i guess not :) [14:36] rbasak: well, tbh, i think that bug would be fine to SRU [14:36] yes [14:36] rbasak: it's not something that prevents it from rnning out of the box [14:36] no [14:42] over ldap authentication, is there a way to keep a workstation user with root access from 'su'ing into any other user account and bypassing authentication? [14:42] thebwt: no. Root access is root access. Root can bypass anything. [14:43] thebwt: note that root on one system isn't necessarily root on another, though. [14:44] right, the issue is that a user could then su to other users and manipulate their home directories [14:44] not so much root access [14:44] Don't give the user root then. [14:44] what about a machine booted into single user mode? [14:44] Or put the home directories on a different machine [14:44] they are mounted over nfs [14:45] NFS trusts what the machine claims in general. [14:45] The latest NFS stuff might fix that though, but I'm not up to date with it. [14:50] so then on an ldap authentication with nfs mounts for the home dir. A standard machine booted in 'single' mode can create a massive breach in the network? That seems a bit silly, surely other people have run into the problem before. [15:01] anyone experienced w/ mdadm/software raid and has had arrays assemble with strange hardware addresses like md127 and have it in auto-read-only? === Lcawte|Away is now known as Lcawte === almaisan-away is now known as al-maisan === xnavor_ is now known as xnavor [17:56] New bug: #986314 in squid3 (main) "squid3 missing pie and bind-now hardening options" [Undecided,New] https://launchpad.net/bugs/986314 === koolhead11|away is now known as koolhead11 === fenris is now known as Guest89753 === Guest89753 is now known as ejat [18:19] Hi. :) [18:19] hi [18:21] Hello I have a problem, hdparm -tT displays BOTH drives as running reaaaally slow, Ive switched raid controllers and now I dont know what to do [18:21] I need local name resolution, so that my users can connect to corporate intranet site. [18:21] dnsmasq the way to go? [18:33] Daviey, are you really around? :P === matsubara is now known as matsubara-lunch === al-maisan is now known as almaisan-away [19:07] Hello I have a problem, hdparm -tT displays BOTH drives as running reaaaally slow, Ive switched raid controllers and now I dont know what to do, Its 3.0.0-12-server #20-Ubuntu SMP, I dont have the problem with 10.X though [19:08] MrWobz: You may want to try asking in ##linux as well, since I've noticed you're not getting (m)any answers here. [19:09] roger, its just I dont know whats different in terms of hdd management kernel level from 11.x and 10.x [19:11] MrWobz: 11.10 was the first release to use linux 3.0, prior releases were 2.6 [19:14] It could mean in 3.0 a driver was dropped somewhere [19:18] Its possible, but I'd be surprised if it wasn't noticed. === matsubara-lunch is now known as matsubara [19:43] On op-panel, where are the passwords for voicemail defined? Are they the ones in /etc/asterisk/voicemail.conf? [19:53] raubvogel: You may want to ask in #asterisk === cloakable_ is now known as cloakable [21:16] New bug: #986385 in lxc (universe) "lxc.mount.entry fails into mnt/subdir" [Medium,Confirmed] https://launchpad.net/bugs/986385 [22:25] <^Mike> I created a directory in /var/run to hold some sockets and pidfiles for several daemons. After rebooting, the directory is gone - why? [22:38] Because /var/run is a tmpfs; a ramdisk [22:52] ^Mike: its guaranteed to be *empty* at boot time :) [22:52] SpamapS: Error: "Mike:" is not a valid command. [22:55] * ^Mike patpat uvirtbot [22:56] <^Mike> SpamapS: thanks, I'll have my scripts create the directory if it doesn't exist then :\ [23:02] Hello, asking for who to choose between ubuntu-server or debian 6 [23:07] <^Mike> pardon? O.o [23:09] jveu installer un OS sur un server proliant, ki serait le mieu, ubuntu-server ou debian 6 [23:12] <^Mike> it's fairly likely that the people in here are going to prefer ubuntu :) [23:13] just askin :P [23:14] pacsman: ubuntu server has versions too. :) [23:14] pacsman: maybe people like ubuntu 10.04 > debian 6 > ubuntu 8.04 [23:18] k ty === Lcawte is now known as Lcawte|Away