/srv/irclogs.ubuntu.com/2012/08/24/#ubuntu-server.txt

=== nick is now known as Guest90392
=== tuv0k is now known as darthanubis
=== cpg|away is now known as cpg
=== n0ts_off is now known as n0ts
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== n0ts is now known as n0ts_off
=== dendrobates is now known as dendro-afk
=== dendro-afk is now known as dendrobates
=== n0ts_off is now known as n0ts
=== n0ts is now known as n0ts_off
=== chilicui1 is now known as chilicuil
=== n0ts_off is now known as n0ts
paradizelosthey all, i'm trying to get x11vnc running on :0 through xinetd, any recommendations?03:29
paradizelosteverything i'm finding wants me to install lightdm or gdm03:30
paradizelost!x11vnc03:31
lickalottGents, trying to mount an NFS share from my ubuntu server to a windows 7 laptop.  Installed the M$ NFS client add-on but can't seem to get it to mount. Anyone have any experience with this?  google is failing me.03:41
=== cpg is now known as cpg|away
lickalottbtw: i get "Error connecting to NFS WMI provider" when trying to use the NFS interface that comes with MS03:44
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== n0ts is now known as n0ts_off
brianp1992how do i use swat to config samba so i can share my /media/share as a windows share i can acess anywhere on my network04:22
=== cpg|away is now known as cpg
Portaljackerhi, i need some help with apache and ftp04:55
Portaljackeri installed lamp using task-sel when root was my only user, now i have a user in the admin group and when i use ftp and navigate to /var/www i can't add files or change the permissions04:55
ffunengaroot was your only user? are you using ubuntu server 12.04?04:57
Portaljackeryes04:57
Portaljackeri have a vps04:58
Portaljackernot only user04:58
Portaljackerit had the other default ones04:58
Portaljackeri made the user portaljacker and put it in the admin group pretty quickly04:58
Portaljackerhad to create the admin group then enable sudo priviledges04:59
Portaljackerbut i did it04:59
ffunengahave you tried adding portaljacker to the sudo group?05:01
Portaljackerit is05:01
Portaljackeri sudo often :P05:01
Portaljackerroot seems to be the owner of www05:02
KM0201well, sudo'ing when not necessary is just as bad as running everything as root05:02
=== n0ts_off is now known as n0ts
Portaljackeri know05:03
Portaljackerbut when i go in on ftp i can't upload to the www folder05:03
Portaljackerwhich i sort of need to do to edit a website05:03
Portaljackeror even put one up05:03
Portaljackeri was told in #ubuntu that www-data becomes the owner when it runs and accesses www?05:04
Portaljackerdoes that mean i need to add the user i log in to ftp with into the www-data group?05:04
ffunengaI dont think thats the right way... how are the permissions in the "ls -l /var/www"05:05
Portaljacker-rw-r--r-- 1 root root 237 Aug 24 02:40 index.html05:07
Portaljackerbut i had to create that file with sudo05:07
Portaljackerno other way05:07
ffunengaactualy, I think I would try something like "chown -R portaljacker:portaljacker /var/www" and then from there give permissions to the group05:08
Portaljackerportaljacker@yuki:~$ ls -l /var | grep www drwxr-xr-x  2 root root  4096 Aug 24 03:24 www05:08
Portaljackerportaljacker@yuki:~$ ls -l /var | grep wwwdrwxr-xr-x  2 root root  4096 Aug 24 03:24 www05:08
Portaljackerportaljacker@yuki:~$ ls -l /var | grep wwwdrwxr-xr-x2 root root  4096 Aug 24 03:24 www05:08
Portaljackerderp05:08
Portaljackerportaljacker@yuki:~$ ls -l /var | grep www drwxr-xr-x05:08
Portaljacker2 root root  4096 Aug 24 03:24 www05:09
Portaljackerwhoops05:09
Portaljackerthe line split is after grep www05:09
=== n0ts is now known as n0ts_off
ffunengamaybe something like: "chown -R portaljacker:admin /var/www ; chmod g+rxw /var/www"05:13
Portaljackerwhat does the first part do exactly? i know the second part sets the permissions of the group to rxw05:14
ffunengathe first part changes the owner and group of the directory . maybe you should try the second command, then try the ftp upload, then the first command05:18
Portaljackerthe group in the second command is the group of the current user? or the owner of the directory?05:20
Portaljackerdid the second command then logged in on ftp and could not create a directory05:21
ffunengaok wait05:22
ffunenganow you have "ls -l /var/www" ->  drwxrwxr-x05:22
Portaljackeryes, shows that in the ftp client05:23
Portaljackerthat command doesn't give that output05:24
Portaljackerit shows the permissions of the files in www05:24
Portaljackerbut not of www05:24
ffunengaI'm not sure about this but, try "sudo useradd -G www-data portaljacker"05:24
Portaljackerthat adds portaljacker to www-data?05:24
ffunengayes, that adds your user to that group05:24
ffunengawich is the group any webserver uses to access /var/www05:25
Portaljackeruseradd: user 'portaljacker' already exists05:25
Portaljackeri think i'll just use webmin to add portaljacker to the group05:26
Portaljackernope05:27
Portaljackercouldn't create the directory with ftp05:27
Portaljackerso now what?05:29
ffunengamaybe you should create a folder in your home folder05:30
ffunengaand tell apache to publish from folder05:31
ffunenga(that apache's config  is made at /etc/apache2/...)05:31
ffunengabtw, do not forget to reverse the permissions "chmod g-w /var/www"05:32
=== n0ts_off is now known as n0ts
Portaljackeri guess i could just do that first part05:32
Portaljackermaking my user the owner of the folder?05:33
=== user is now known as anotheruser
Portaljackeror i could log into ftp as root, what's the worst that could...i can't finish that sentence without imagining my server as a pile of ashes05:34
anotheruser+1 for ffunenga solution05:34
Portaljackerya but there should be a way for it to work from www05:34
Portaljackerthat's how it's made to work in the first place05:34
Portaljackeri'm not the first to ever do this05:35
Portaljackerit's not exactly extraordinary to put your website in /var/www05:35
anotheruseri missed the beginning of the question, but as soon as you want to host several websites, for several users, better to put them in the home folder of said users05:36
Portaljackerwhich is why i'm wondering why it's so damned hard to upload a file into that folder via ftp05:36
ffunengahave you thought about using ssh?05:37
Portaljackeri do05:37
anotherusersftp?05:37
Portaljackerthis doesn't eliminate the root issue05:37
Portaljackerroot owns that folder05:37
Portaljackerwhich is apparently good05:37
anotheruserif you just give the whole var/www folder to www-data, and log in as www-data, should work probably05:37
Portaljackerbut that means i can't edit files without root access05:38
Portaljackerit should05:38
Portaljackerbut i've heard that it's bad :P05:38
Portaljackerone sec05:38
Portaljackerhttp://serverfault.com/questions/69685/what-user-should-own-var-www-on-ubuntu-9-04-server05:38
anotheruserwell05:39
anotheruserthat's true05:39
anotheruserbut then , you can just give the folder to *any* user you create05:39
anotheruseras long as it's not root, it won't be a security issue05:39
Portaljackerthat answer says to make the owner root:newgroup05:40
Portaljackerand add the users that need access to that group05:40
anotheruseri still prefer ffunenga solution, anyway :p05:41
Portaljackerof making a whole different folder?05:41
anotheruserPortaljacker, if you make root::newgroup05:41
anotheruseryou have to change permissions too05:41
=== n0ts is now known as n0ts_off
anotheruser(what are the current permissions on your /var/www ?)05:42
Portaljacker75505:42
anotheruserso of course you can't create anything as the group05:42
anotheruser(5 is rx, you need the write too)05:43
Portaljackerso only the direct owner can write unless it's 77505:43
anotheruseryes05:43
Portaljackerso i guess i should make portaljacker:admin the owner and get it over with :P05:44
ffunengayes. "chmod 775 /var/www ; chown -R root:newgroup /var/www"05:44
Portaljackerthough i guess there's no downside to 775 over 755?05:44
anotheruserit just means that the group can write05:44
anotheruserif you trust all the users in the group, no problem05:45
Portaljackerand if i limit the group to one user (+root of course) it's not much of an issue?05:45
anotheruseryes, no problem at all then05:45
Portaljackerok05:45
Portaljackerwell, now i can finally set up wordpress XD05:45
Portaljackerroot is always in every group right?05:46
ffunengano05:48
Portaljackerwoot, blog subfolder successfully created!05:48
Portaljacker?05:48
ffunengacheck "id root"05:49
ffunenganice ! :) lol05:49
Portaljackerso root is part of only root05:49
Portaljacker?05:49
Portaljackerbut then why can i say root:newgroup without adding root to the group?05:49
anotheruserbtw, since you weretalking about the effects of potential security flaws05:51
anotheruserone additional advantage of using custom folders for your website is that an attacker can't predict the path of your files on the server05:51
ffunengaGood question... I guess the owner and the group of the files are independent. I'm checking that hypothesis now05:52
anotheruseri mean, if for some reason the attacker gets the possibility to read a file (as it happened to my server yesterday thanks to phpmyadmin)05:52
anotheruserthen he just has to open /var/www/config.php or some other sensible file and it's over05:52
Portaljackerhow did he get to the point of being able to see the file?05:53
anotheruserif the file is in /home/myuser132424/my_strange_var_www_folder/config.php, it's harder to get05:53
anotheruserwell, 4 security flaws in phpmyadmin that aren't fixed in ubuntu 10.04 LTS package...05:54
Portaljackerlovely05:56
Portaljackerso he could see your filesystem?05:57
=== lifeless_ is now known as lifeless
Portaljackercouldn't he just search your file tree at that point for config.php?05:58
anotheruserjust search05:59
anotheruserhe couldn't see the filesystem05:59
anotheruserit's actually funny to see in the logs all the files that he tried to read at random05:59
Portaljackerso he basically had to guess your filesystem06:01
Portaljackerlol06:01
Portaljackeri get the point06:01
Portaljackeri could always be crazy and make my www folder a git repo06:02
Portaljackerthen i could just blow away the whole thing with a reclone06:02
anotheruseri'm not sure what exactly a git repo involves06:04
Portaljackerit saves all the changes you've made since the last commit06:05
anotheruserbut don't do anything that leaves files such as CVS folder or .svn files in your website folder06:05
Portaljackeroh ya06:05
Portaljacker....06:05
Portaljackersame idea06:05
anotheruserthat would be a huge security issue :p06:05
Portaljackerit would06:05
Portaljackerbut then again06:05
Portaljackerthey need my rsa password to affect the remote repo06:06
anotheruseri don't know how it works for git, but for cvs i think, i once saw a website that could be hacked in a few seconds because of that....06:06
Portaljackerwell apparently the .cvs and .svn folders hold passwords06:07
Portaljackerbut in git i always set it to use an rsa key to authenticate06:07
anotheruserstill i don't think it's a good idea06:08
Portaljackerprobably not06:08
anotheruseruse a git repo for your website, and then do a checkout or whatever to get the working copy of the website06:08
Portaljackerya06:09
Portaljackerlike have the reop elsewhere06:09
Portaljackerand copy it into www06:09
Portaljackerrepo06:09
Portaljackerand just copy everything but the .git folder06:09
Portaljackerheck i could do it over ftp06:09
Portaljackerthough it would be slower06:09
anotheruseryeah something like that06:09
Portaljackeranyway, it's a bit late and i'm getting tired06:10
Portaljackeri guess i'll be installing wordpress later :P06:10
anotherusercareful with wordpress too06:11
anotheruserespecially custom themes etc.06:11
anotheruserkeep it well up to date and only use trusted sources06:11
Portaljackeri intend to do so06:14
Portaljackerthanks06:14
=== n0ts_off is now known as n0ts
=== n0ts is now known as n0ts_off
=== Guest83481 is now known as jussi
=== dendrobates is now known as dendro-afk
=== n0ts_off is now known as n0ts
=== n0ts is now known as n0ts_off
StapperHi I have some Questions regarding NFS... I now use samba to share, but i only have *nix machines is it better to switch to NFS?08:02
dax_rocMorning all08:23
dax_rocWhat would cause an upgrade from 11.10 to 12.04 to become unresponsive, it continues to run just all tasks seem to freeze for about 30 - 40 seconds at times ?08:24
dax_rocIt's not a hardware issue as it's the same symptoms on 3 different servers.08:25
progre55hi guys. I was doing and apt-get update on one of my servers, and getting "invoke-rc.d: initscript resolvconf, action "start" failed. dpkg: error processing resolvconf (--configure): subprocess installed post-installation script returned error exit status 1"09:12
progre55doing a google search shows some bugs with the same errors, but a bit unrelated09:12
uvirtbotNew bug: #973243 in keystone "deleting tenants or users does not clean up metadata" [Undecided,Confirmed] https://launchpad.net/bugs/97324309:19
uvirtbotNew bug: #974199 in keystone "deleting a tenant does not cleanup its user associations" [Undecided,Confirmed] https://launchpad.net/bugs/97419909:19
uvirtbotNew bug: #978130 in glance "multiprocess glance-api failed to exit when stopped by ctrl+c" [Undecided,Confirmed] https://launchpad.net/bugs/97813009:19
uvirtbotNew bug: #978610 in glance "/usr/bin/glance's built-in pager breaks redirection" [Undecided,Confirmed] https://launchpad.net/bugs/97861009:19
uvirtbotNew bug: #983800 in keystone "TokenNotFound not raised in testsuite because of timezone issues" [Undecided,Confirmed] https://launchpad.net/bugs/98380009:19
uvirtbotNew bug: #988920 in keystone "Token authentication for a user in a disabled tenant does not raise Unauthorized error" [Undecided,Confirmed] https://launchpad.net/bugs/98892009:19
uvirtbotNew bug: #994936 in keystone "export_legacy_catalog doesn't convert url names correctly" [Undecided,Confirmed] https://launchpad.net/bugs/99493609:19
uvirtbotNew bug: #996595 in keystone "Following a password compromise and subsequent password change, tokens remain valid." [Undecided,Confirmed] https://launchpad.net/bugs/99659509:19
uvirtbotNew bug: #997194 in keystone "Tokens remain valid after a user account is disabled" [Undecided,Confirmed] https://launchpad.net/bugs/99719409:19
uvirtbotNew bug: #997565 in glance "glance add command - incorrect help text" [Undecided,Confirmed] https://launchpad.net/bugs/99756509:19
uvirtbotNew bug: #997669 in horizon "When adding ICMP rule, the type/code is being validated as from/to ports" [Undecided,Confirmed] https://launchpad.net/bugs/99766909:19
uvirtbotNew bug: #1007093 in glance "glance add uploads a double image if using ssl and images is smaller the 4k" [Undecided,Confirmed] https://launchpad.net/bugs/100709309:19
uvirtbotNew bug: #1010560 in glance "response.environ is None; instance fails to spawn" [Undecided,Confirmed] https://launchpad.net/bugs/101056009:19
uvirtbotNew bug: #1012268 in glance "exception.BadStoreUri exposes sensitive information to end users" [Undecided,Confirmed] https://launchpad.net/bugs/101226809:19
uvirtbotNew bug: #1012381 in keystone "Memcache token backend eventually stops working" [Undecided,Confirmed] https://launchpad.net/bugs/101238109:20
uvirtbotNew bug: #1012752 in glance "glance-cache.conf needs metadata encryption key" [Undecided,Confirmed] https://launchpad.net/bugs/101275209:20
uvirtbotNew bug: #1016056 in keystone "EC2 credentials not migrated from legacy (diablo) database" [Undecided,Confirmed] https://launchpad.net/bugs/101605609:20
uvirtbotNew bug: #1022369 in glance "Glance scrubber date formatting fails w/ Postgres" [Undecided,Confirmed] https://launchpad.net/bugs/102236909:20
uvirtbotNew bug: #1041070 in bridge-utils (main) "802.3ad bond interface have show high RX dropped packets" [Undecided,New] https://launchpad.net/bugs/104107009:20
uvirtbotNew bug: #992447 in juju "Communication with store.juju.ubuntu.com is not authenticated" [Critical,In progress] https://launchpad.net/bugs/99244709:20
uvirtbotNew bug: #1018246 in glance "image.upload notification doesn't report size" [Undecided,Confirmed] https://launchpad.net/bugs/101824609:20
uvirtbotNew bug: #1021054 in glance "Admins should be able to share image regardless of ownership" [Undecided,Confirmed] https://launchpad.net/bugs/102105409:20
uvirtbotNew bug: #1025353 in glance "Support zero-size image creation" [Undecided,Confirmed] https://launchpad.net/bugs/102535309:20
uvirtbotNew bug: #1028433 in glance "Image id not contained in swift chunk debug message" [Undecided,Confirmed] https://launchpad.net/bugs/102843309:20
uvirtbotNew bug: #1032314 in glance "qpid_heartbeat setting in ineffective" [Undecided,Confirmed] https://launchpad.net/bugs/103231409:21
uvirtbotNew bug: #1040800 in asterisk (universe) "res_config_sqlite should be ported to sqlite3" [Wishlist,Confirmed] https://launchpad.net/bugs/104080009:21
uvirtbotNew bug: #1040846 in autofs5 (main) "Missing content in /etc/nsswitch.conf causes failure" [Undecided,New] https://launchpad.net/bugs/104084609:21
uvirtbotNew bug: #995079 in nova (main) "Internal server error when accessing nova/instances_and_volumes/ via horizon" [Undecided,Confirmed] https://launchpad.net/bugs/99507909:21
uvirtbotNew bug: #1040586 in whois (main) "Cyrillic characters shown with wrong encoding" [Undecided,New] https://launchpad.net/bugs/104058609:22
uvirtbotNew bug: #1040682 in ipmitool (universe) "[MIR] ipmitool" [Undecided,New] https://launchpad.net/bugs/104068209:22
uvirtbotNew bug: #1006815 in keystone/essex "Admin API /v2.0/tenants/{tenant_id}/users/{user_id}/roles doesn't validate token" [Critical,Fix released] https://launchpad.net/bugs/100681509:23
uvirtbotNew bug: #1040212 in php5 "PHP CGI configuration fundamentally changed" [Undecided,Fix released] https://launchpad.net/bugs/104021209:23
uvirtbotNew bug: #1040475 in maas (main) "maas depends on a broken version of python-tx-tftp" [Undecided,New] https://launchpad.net/bugs/104047509:23
uvirtbotNew bug: #1040588 in squid3 (main) "squid3.HEAD (20120823-r12295) "WARNING: ICAP Max-Connections limit exceeded" bug" [Undecided,New] https://launchpad.net/bugs/104058809:23
uvirtbotNew bug: #1039456 in quota (main) "Can't turn quotas on" [Undecided,Invalid] https://launchpad.net/bugs/103945609:24
uvirtbotNew bug: #1039871 in Ubuntu Quantal "[needs-packaging] oprofile 0.9.7" [High,Confirmed] https://launchpad.net/bugs/103987109:24
uvirtbotNew bug: #1040274 in spamassassin (main) "Merge spamassassin 3.3.2-4 (main) from Debian unstable (main)" [Undecided,New] https://launchpad.net/bugs/104027409:24
uvirtbotNew bug: #1023412 in python3-chardet (main) "[MIR] python3-chardet" [Undecided,Fix released] https://launchpad.net/bugs/102341209:25
uvirtbotNew bug: #1040177 in openldap (main) "slapd install fails when requesting to 'Omit OpenLDAP server configuration"" [Undecided,New] https://launchpad.net/bugs/104017709:25
uvirtbotNew bug: #1014235 in mysql-5.5 (main) "package mysql-server-5.5 5.5.24-0ubuntu0.12.04.1 failed to install/upgrade: подпроцесс установлен сценарий post-installation возвратил код ошибки 1" [Undecided,Expired] https://launchpad.net/bugs/101423509:26
uvirtbotNew bug: #1031747 in python-django-openstack-auth (main) "[MIR] python-django-openstack-auth" [Undecided,Fix released] https://launchpad.net/bugs/103174709:26
uvirtbotNew bug: #1039554 in cyrus-sasl2 (main) "Please re-enable PIE" [High,Fix released] https://launchpad.net/bugs/103955409:26
uvirtbotNew bug: #1039597 in openbsd-inetd (main) "Please re-enable PIE and BIND_NOW" [High,Fix released] https://launchpad.net/bugs/103959709:26
uvirtbotNew bug: #1040139 in keystone (main) "keystone upgrade fails due to mysql not being available" [Undecided,New] https://launchpad.net/bugs/104013909:26
eutheriai think i need a quick and dirty imap server to send test emails to, which would you guys recommend to use?09:26
uvirtbotNew bug: #1028453 in ubuntu-meta (main) "Quantal Ubuntu Server minimal install oversized" [High,Confirmed] https://launchpad.net/bugs/102845309:28
uvirtbotNew bug: #1039542 in asterisk (universe) "Please re-enable PIE and BIND_NOW" [High,Triaged] https://launchpad.net/bugs/103954209:28
uvirtbotNew bug: #1039593 in squid3 (main) "squid3 lost compiler hardening options in last update, but shouldn't have" [Undecided,Invalid] https://launchpad.net/bugs/103959309:28
uvirtbotNew bug: #1039627 in etckeeper (main) "etckeeper init with git gives error" [Undecided,New] https://launchpad.net/bugs/103962709:28
uvirtbotNew bug: #1039470 in openssh (main) "'man sftp' shows a wrong creation date" [Undecided,New] https://launchpad.net/bugs/103947009:29
uvirtbotNew bug: #977007 in nova/essex "instance live migration should create virtual_size disk image" [Low,Fix released] https://launchpad.net/bugs/97700709:30
uvirtbotNew bug: #1017418 in nova "NoMoreFloatingIps: Zero floating ips available after repeatedly creating and destroying instances over time" [Undecided,Confirmed] https://launchpad.net/bugs/101741809:30
uvirtbotNew bug: #1018586 in nova "cleanup_file_locks does not remove stale sentinel files" [Undecided,Confirmed] https://launchpad.net/bugs/101858609:30
uvirtbotNew bug: #1018721 in nova "Launching with source groups under load produces lazy load error" [Undecided,Confirmed] https://launchpad.net/bugs/101872109:31
uvirtbotNew bug: #1021340 in nova "Race condition in network/deallocate_for_instance() leads to security issue" [Undecided,Confirmed] https://launchpad.net/bugs/102134009:31
uvirtbotNew bug: #1021352 in nova "Deallocation of fixed IP occurs before security group refresh – leading to potential security issue in error / race conditions" [Undecided,Confirmed] https://launchpad.net/bugs/102135209:31
uvirtbotNew bug: #1021373 in nova "[nova][volumes] Exceeding volumes, gigabytes and floating_ips  quotas returns general uninformative HTTP 500 error" [Undecided,Confirmed] https://launchpad.net/bugs/102137309:31
uvirtbotNew bug: #1027105 in nova "Restarting nova-compute removes ip packet filters" [Undecided,Confirmed] https://launchpad.net/bugs/102710509:31
uvirtbotNew bug: #1027984 in nova "nova testsuite errors on newer versions of python-boto (e.g. 2.5.2)" [Undecided,Confirmed] https://launchpad.net/bugs/102798409:31
uvirtbotNew bug: #1029463 in nova "Libvirt driver reports incorrect error when volume-detach fails" [Undecided,Confirmed] https://launchpad.net/bugs/102946309:31
uvirtbotNew bug: #1030430 in nova "qpid_heartbeat setting in ineffective" [Undecided,Confirmed] https://launchpad.net/bugs/103043009:31
uvirtbotNew bug: #1031311 in nova "CVE-2012-3361 not fully addressed" [Undecided,Confirmed] https://launchpad.net/bugs/103131109:31
uvirtbotNew bug: #1033178 in nova "pycrypto is unused and the existing code is potentially insecure to use" [Undecided,Confirmed] https://launchpad.net/bugs/103317809:31
uvirtbotNew bug: #1036902 in nova "Block storage connections are NOT restored on system reboot" [Undecided,Confirmed] https://launchpad.net/bugs/103690209:31
uvirtbotNew bug: #1039420 in ntp (main) "NTP security vulnerability because not using authentication by default" [Undecided,New] https://launchpad.net/bugs/103942009:31
uvirtbotNew bug: #956096 in nova "Listing flavors with marker set returns 400" [Undecided,Confirmed] https://launchpad.net/bugs/95609609:32
uvirtbotNew bug: #971621 in nova "nova delete lxc-instance umounts the wrong rootfs" [Undecided,Confirmed] https://launchpad.net/bugs/97162109:32
uvirtbotNew bug: #994935 in nova "Deleting Flavor currently in use by instance creates error" [Undecided,Confirmed] https://launchpad.net/bugs/99493509:32
uvirtbotNew bug: #1013689 in nova "cannot umount guestfs " [Undecided,Confirmed] https://launchpad.net/bugs/101368909:32
uvirtbotNew bug: #1016273 in nova "ram_allocation_ratio does not work" [Undecided,Confirmed] https://launchpad.net/bugs/101627309:32
uvirtbotNew bug: #1017795 in nova "scheduler hang (DOS) possible with DifferentHostFilter/SameHostFilter " [Undecided,Confirmed] https://launchpad.net/bugs/101779509:32
uvirtbotNew bug: #1020634 in nova "[nova][volumes] Exceeding volumes quotas logs "VolumeSizeTooLarge" instead of "VolumeLimitExceeded" " [Undecided,Confirmed] https://launchpad.net/bugs/102063409:32
uvirtbotNew bug: #1022036 in nova "metadata injection is broken in xen" [Undecided,Confirmed] https://launchpad.net/bugs/102203609:32
uvirtbotNew bug: #1006664 in nova "euca-describe-keypair NonExistent returns 200" [Undecided,Confirmed] https://launchpad.net/bugs/100666409:33
uvirtbotNew bug: #1007573 in nova "affinity filters don't work if scheduler_hints is None" [Undecided,Confirmed] https://launchpad.net/bugs/100757309:33
uvirtbotNew bug: #1012374 in nova "impl_qpid doesn't ACK messages" [Undecided,Confirmed] https://launchpad.net/bugs/101237409:33
uvirtbotNew bug: #1013147 in nova "nova-rootwrap hardcodes paths instead of using /sbin:/usr/sbin:/usr/bin:/bin" [Wishlist,Confirmed] https://launchpad.net/bugs/101314709:33
uvirtbotNew bug: #1014769 in nova "NoMoreFixedIps: Zero fixed ips available. Nova seems leaking them." [Undecided,Confirmed] https://launchpad.net/bugs/101476909:33
uvirtbotNew bug: #1015531 in nova "Remote arbitrary file corruption / creation flaw via injected files" [Undecided,Confirmed] https://launchpad.net/bugs/101553109:33
uvirtbotNew bug: #986922 in nova "Call to network_get_all_by_uuids missing 'db'" [Undecided,Confirmed] https://launchpad.net/bugs/98692209:34
uvirtbotNew bug: #992805 in nova "test_get_console_output_file requires sudo NOPASSWD" [Undecided,Confirmed] https://launchpad.net/bugs/99280509:34
uvirtbotNew bug: #997763 in nova "floating ips are not disassociated from instances on deletion" [Undecided,Confirmed] https://launchpad.net/bugs/99776309:34
uvirtbotNew bug: #999698 in nova "qpid timeout causing compute service to crash" [Undecided,Confirmed] https://launchpad.net/bugs/99969809:34
uvirtbotNew bug: #1000853 in nova "Restarting nova-network removes ip packet filters " [Undecided,Confirmed] https://launchpad.net/bugs/100085309:34
uvirtbotNew bug: #1004298 in nova "not able to get host total memory in xen with libvirt" [Undecided,Confirmed] https://launchpad.net/bugs/100429809:34
uvirtbotNew bug: #985162 in nova "Firewall rules from nova-compute are not refreshed after host reboot" [Undecided,Confirmed] https://launchpad.net/bugs/98516209:35
uvirtbotNew bug: #985184 in nova "Security groups fail to be set correctly if incorrect case is used for protocol specification" [Undecided,Confirmed] https://launchpad.net/bugs/98518409:35
* _ruben slaps uvirtbot 09:35
sorenYikes!09:36
sorenThat's a lot of new bugs :)09:36
_rubenI propose we just ditch nova, it's bug-ridden apparently! :)09:37
* soren admits the mail host backing uvirtbot may have had a couple of rough days and is catching up.09:37
progre55so guys, any advice with resolvconf, please? I'm getting getting "invoke-rc.d: initscript resolvconf, action "start" failed. dpkg: error processing resolvconf (--configure): subprocess installed post-installation script returned error exit status 1" while doing an apt-get update09:47
_rubeni'm guessing apt-get upgrade instead of apt-get update?09:50
progre55oh yeah, upgrade09:51
progre55and now the packages resolvconf is marked as crashed, and doing "apt-get -f install" throws the same error09:52
progre55here http://pastie.org/457958909:53
uvirtbotNew bug: #1041120 in nova (main) "Meta bug for tracking Openstack Stable Updates" [Undecided,New] https://launchpad.net/bugs/104112009:56
=== n0ts_off is now known as n0ts
=== cpg is now known as cpg|away
=== mcclurmc_away is now known as mcclurmc
uvirtbotNew bug: #997700 in keystone "LDAP should not check username on "sn" field" [Undecided,Confirmed] https://launchpad.net/bugs/99770010:51
uvirtbotNew bug: #1035428 in keystone "authenticate in ldap backend doesn't return a list of roles" [Medium,In progress] https://launchpad.net/bugs/103542810:51
woozlyguys, how to change language for console info and other?11:25
woozlyError messages, Info messages..11:25
reisiwoozly: see LANG, LC_ALL etc variables, locale (1)11:28
woozlyreisi: thank you!11:28
reisiwoozly: also there are language-pack-* packages11:29
woozlyreisi: great! Thank you man!11:29
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
patdk-lapI can't believe how many people install stuff from my ppa, then email complaints11:44
xnoxpatdk-lap: i named my ppa "Danger do not use" and the email spam dropped off11:45
greppyxnox: did usage drop off as well?11:46
xnoxgreppy: that is irrelevant, I'm not paying the bandwidth =)11:46
woozlyguys, where iptables config? I need to add rule to it11:58
woozly:/11:58
=== n0ts is now known as n0ts_off
woozlyor it disabled by default?11:59
patdk-lapit doesn't exist by default12:00
patdk-lapufw exists, but disabled12:00
woozlyoh... okay thanks!12:01
=== n0ts_off is now known as n0ts
=== dendro-afk is now known as dendrobates
=== irvie is now known as irv
=== n0ts is now known as n0ts_off
KrizTmarKhello any1 familiar to vpn13:09
rbasak!anyone | KrizTmarK13:13
ubottuKrizTmarK: A high percentage of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? See also !details, !gq, and !poll.13:13
KrizTmarKdoes any1 know the folder which the kernel on ubuntu is stored13:38
genii-aroundKrizTmarK: Usually in /boot13:40
uvirtbotNew bug: #1006822 in keystone "API(v2.0/OS-KSADM/services,v2.0/OS-KSADM/services/{service_id})doesn't validate token" [Undecided,Confirmed] https://launchpad.net/bugs/100682213:42
banyantreeHey Guys =)13:46
banyantreei want to set up an email server. i need to set the ptr entry13:47
banyantreemx entry is already set13:47
banyantreedoes anybody know how to do this?13:47
aheuI maybe totally wrong but banyantree is this what you need -https://help.ubuntu.com/community/BIND9ServerHowto#Reverse_Zone_File13:50
banyantreethx i will read it now13:50
banyantreehope its the right thing =)13:51
=== mcclurmc is now known as mcclurmc_away
=== garyposter is now known as gary_poster
=== sanderj is now known as Sander^work
Davieyzul: Hey, nova, keystone, horizon and glance are all in the -proposed queue.14:16
Davieyzul: All bugs have a Precise task against them14:16
zulokies cool14:17
njinHallo, I've got a machine running maas, then i create another one, run the cd, select install maas, setting everythings till it present the window where specify manually the name or the address, and another entry with maas (ip ddress) , but whatever i choose it request the name for this server (if blank maas assign it) and when hit enter it send sigkill or sigter and system poweroff. is this a bug ??(quantal) or I get wrong ?14:24
tinyhippoI've configured and tested ActiveDirectory authentication for my Ubuntu server, however, when I attempt to use sudo -i for an account which only exists on the server, and not in activedirectory - I get a message warning me that my password was incorrect (presumably, it tried to Auth against AD first) and then I become root (presumably when it auths against /etc/passwd /etc/shadow - any idea how to avoid getting thie Wrong Password ...14:51
tinyhippo... message?14:51
=== gema_ is now known as gema
ninjaihow can I disable syslog?15:23
DavieySpamapS: Hey, are you alive for the day?16:18
=== n0ts_off is now known as n0ts
SpamapSDaviey: I am , whats up?16:32
DavieySpamapS: hey, would you be able to sru review a few packages? :)16:43
DavieySpamapS: One gotcha.. please can you not post the spammy comment from sru-accept into each bug please?16:44
SpamapSDaviey: Sure. I think slangasek is on shift today, but I can look too. :)16:44
SpamapSDaviey: spammy? Its informative, and, luscious.16:45
DavieySpamapS: and mostly offtopic :)16:45
DavieyDear Reporter who reported an upstream bug, please test our ubuntu packages kkthnx16:45
DavieyPrecise, nova - keystone - horizon - glance. :)16:46
DavieySpamapS: bug 1041120 is the meta-bug16:47
uvirtbotLaunchpad bug 1041120 in nova "Meta bug for tracking Openstack Stable Updates" [Undecided,Confirmed] https://launchpad.net/bugs/104112016:47
SpamapSDaviey: the reference to the reporter is just because we aren't sure who else to ask :) The rest is fairly important as it identifies the way we expect the packages to be tested. And the script that does that also maeks sure bug tasks are set right and such.. dunno if I feel like seaparating those two16:54
DavieySpamapS: i can happily set the bug taks if you prefer?16:55
DavieySpamapS: I just don't want to hijack bug reports TOO much16:55
hallynstgraber: for lxc-start -d, i'm trying to decide how far to go.  i'ts trivial to just wait for 'running' state or 5 second timeout17:03
hallynbut if it immediately fails, we could catch that with a starting->aborting->stopping->stopped transtion,17:03
hallynexcept that it's possible that the daemonized task starts after the container has already done all of those17:04
hallynunlikely, but possible17:04
hallynbut i don't want to introduce a new api to have the container task wait to start starting until the daemonized task is ready for it.17:04
hallyni suppose i can just declare it nigh-upon-impossible to have the container hit all those states before the daemonized task checks, and only handle the other cases17:05
SpamapSDaviey: how is that hijacking?17:06
SpamapSDaviey: also our report specifically looks for the comment to know when responses have come in.17:07
DavieySpamapS: ok, do as you need.  It was just a request.17:09
SpamapSDaviey: noted that the comments are considered "spammy hijacking". You are the first to bring that to my attention. :p17:11
DavieySpamapS: well, i could see why an upstream project might be sensitive to lotta downstream comments.17:15
Davieyand the downstream having the audacity to ask the reporter to test it, even if tey don't give two hoots about Ubuntu17:16
hallynstgraber: well, the simple 'wait for running or timeout' is in lp:~serge-hallyn/ubuntu/quantal/lxc/lxc-start-d-wait17:17
SpamapSDaviey: thats a fair concern. Perhaps we can just leave off the "Dear reporter" one17:17
=== n0ts is now known as n0ts_off
DavieySpamapS: ok, thanks17:25
hallynstgraber: hm, looks like my subsequent pushes went to ubuntu:lxc17:27
SpamapSDaviey: also it just ocurred to me that we're not doing full verification on at least nova. Right? We're just doing regression tests and the CI lab?17:27
DavieySpamapS: a little more than that, but yes.. not complete coverage.  For example, in the last one.. we included fixes for SUSE that doesn't impact us.17:32
DavieyThere was scope for regression, but this is exactly why we are so involved with the upstream stable tree, to avoid these issues.17:32
DavieyAs a testament, the last time we did this.. It was regression free.17:33
stgraberhallyn: change looks reasonable (looked at ubuntu:lxc)17:33
SpamapSDaviey: I'm just thinking its not so important to set all the bug statuses and tags if we're really just going to track the one master bug's status17:33
DavieySpamapS: Note, the whole idea of doing this at upstream, rather than at pure distro level.. is something we conceived for upstream.17:33
SpamapSDaviey: you're preaching to the choir you don't have to convince me. :) I'm just thinking about the logistics17:34
DavieySpamapS: right.. I'd be much happier to just set it Fix Committed.17:34
Daviey(which i have tooling to do already, if that is easier for you)17:34
SpamapSDaviey: it also needs verification-needed to help us know when its ok to send to -updates17:34
DavieySpamapS: right, i can do that aswell if you prefer17:34
LoTwhat's the latest kernel for Precise servers?17:49
Psi-JackLoT: 3.2.0 as it will be for the next 6 years17:54
LoTPsi-Jack:  do patches for bugs get applied to the kernel over time?18:15
Psi-JackSecurity fixes and bugs, yes, there are patchlevels to the kernel Ubuntu provides.18:16
LoTalso, would the Quantal kernel (after its released "stable") work on Precise (if I were to backport it)18:16
Psi-Jacki don't use backported kernels, ever.18:16
DavieySpamapS: any traction on those SRU's?18:43
SpamapSDaviey: I just now cleared my table to look at them :-/18:45
SpamapSDaviey: I assume that this is high enough priority that its worthy of jumping in front of all the other SRU's waiting?18:45
SpamapSDaviey: so how about I jus spam bug 1041120 for all of them?18:47
uvirtbotLaunchpad bug 1041120 in nova "Meta bug for tracking Openstack Stable Updates" [Undecided,Confirmed] https://launchpad.net/bugs/104112018:47
DavieySpamapS: Well, there is a significant calling for this SRU.18:47
DavieySpamapS: spamming that one meta bug would be better IMO :)18:48
SpamapSThats the only one that really will control the packages' progression into -updates18:48
DavieySpamapS: i will keep close eye on that, and the others.. just incase.18:48
SpamapSDaviey: where is the testing plan for these bugs?18:49
g0bl1nhi, I installed nginx-full then removed it and deleted the /etc/nginx directory. Now doing an apt-get install nginx-full won't put the default configuration files there. Any hint ?18:49
SpamapSDaviey: err, s/bugs/updates/ ?18:49
SpamapSg0bl1n: thats intentional18:50
SpamapSg0bl1n: dpkg consideres a removed config file as something the administrator likely wanted18:50
SpamapSg0bl1n: apt-get purge nginx-full18:50
g0bl1nSpamapS: ahh, let me try ;-)18:50
SpamapSg0bl1n: that will reset dpkg's tracking of the config files (and remove ALL data and configs)18:50
g0bl1nSpamapS: I was doing a remove and autoremove. Not enough, ok18:51
DavieySpamapS: So.. We will be doing a full burn in a lab.  I will put out a call for testing on upstream mailing list, and we've also had at least one partner offer to help test aswell18:51
DavieySo.. more coverage than the previous SRU had.18:51
SpamapSDaviey: isn't that written down somewhere?18:51
SpamapSsomewhere I can link to.. :P18:52
DavieySpamapS: yes18:52
Davieyhmm18:52
Davieythat might an isue for this moment18:52
SpamapSpoor users will just have to trust good ol' Daviey's word ;)18:53
SpamapSWell as long as the results are documented I don't mind.18:53
Davieyfools!18:53
Davieyadam_g: do you know where that doc is?18:53
SpamapSugh19:02
SpamapSthe SRU queuediff script nearly crashed my browser opening all the nova bugs19:02
SpamapSDaviey: accepted all. UNLEASHE THE HOUNDS19:04
g0bl1nSpamapS:19:06
g0bl1nSpamapS:  still getting errors after the purge19:06
SpamapSg0bl1n: you may need to purge *all* of the packages that own files in /etc/nginx .. 'dpkg -S /etc/nginx'19:06
LoTSpamapS:  was 12.04.1 released?19:06
* LoT seems to have missed 3 days fo announce emails, so....19:06
dormitoI have a question about configure ssl certs for  a samba/ldap setup on an ubuntu server, is this the correct channel to ask it?19:07
g0bl1nSpamapS:  ah, nginx-common appeared. Purged. Now retrying19:07
g0bl1nSpamapS: well done thankyou. Worked19:08
=== LordOfTime is now known as TheLordOfTime
DavieySpamapS: thanks!19:14
* SpamapS sometimes wonders if dpkg's conffile handling is really worth it19:20
SpamapSTheLordOfTime: yes, 12.04.1 was released yesterday19:21
SpamapSTheLordOfTime: and your PHP SRU is awaiting approval19:21
TheLordOfTimeSpamapS:  ah, wonderful.  Thanks.19:21
=== dendrobates is now known as dendro-afk
DavieySpamapS: Houston, we have a problem20:52
DavieySpamapS: nova FTBFS, due to a debuild problem.20:52
adam_gDaviey: i think i know what it is20:52
adam_gdid the others build okay?20:53
Davieyadam_g: yes20:56
Davieyadam_g: missing HCnageLog.. I am assuming you did a sdist from a tar checkout, rather than git tree?20:57
adam_gDaviey: no, in fact i didn't use sdist20:58
adam_gDaviey: but yea, that would have been autogen'd20:58
Davieyadam_g: Oh, then that is the error21:00
DavieyHow come you didn't sdist?21:00
adam_gDaviey: wasn't sure how zul was cutting the previous tarballs, and whether upstream has merged any of the newer magic into sdist that makes the endproduct something much different than what we were shipping at 12.0421:03
Davieyadam_g: Ah, ok21:04
adam_gDaviey: but actually, sdist'ing it doesn't produce a ChangeLog either it seems21:05
Davieyadam_g: from tar or git co?21:06
adam_gDaviey: git21:06
Davieyoo-er21:06
adam_gDaviey: oh jeez, nvm. it does have it. my bad21:08
adam_gDaviey: whats best? adjust packaging on the current upload to exlude it, or upload a new tarball for proposed21:09
DavieyI'd think uploading a new orig.  SpamapS, what do you think?21:10
Davieyadam_g: I'd like to squeeze one more commit in aswell.. if you don't mind :)21:13
=== lool- is now known as lool
=== cpg|away is now known as cpg
=== arosales1 is now known as arosales
adam_gDaviey: what commit?21:52
adam_gDaviey: that'd make it easier, current versioning scheme makes it hard to bump the version21:52
Portaljackerdo i need to install phpmyadmin for my website? or is it enough to have webmin for my server?21:54
Portaljackerlamp stack and going to install wordpress21:55
Portaljackeri'm stuck at the part to make the mysql database for wordpress21:56
Portaljackerand the interface of webmin is not making it obvious how to set it up correctly21:57
=== dendro-afk is now known as dendrobates
Davieyadam_g: I just landed two upstream21:59
Davieyhttps://review.openstack.org/#/c/11813/21:59
Davieyhttps://review.openstack.org/#/c/11597/ <-- needed21:59
adam_gk22:00
anotheruserPortaljacker, don't install the 10.04 phpmyadmin anyway, it's full of holes22:06
Portaljackerok then22:06
Portaljackerwell i assumed i could set up the mysql database in the webmin mysql module22:06
anotheruseri don't know webmin... i've used phpmyadmin, and the mysql command line22:07
anotheruserif you really want phpmyadmin, at least install the last version, and change its default path (then you should be ok)22:07
Portaljackercommand line can work22:07
Portaljackeris the comand line tool easy enough to setup a new database?22:08
anotheruserit's reasonable22:08
anotheruserbasically, you just run a CREATE DATABASE command22:09
anotheruserif you want user rights management, it's a bit more tricky22:09
anotheruser(then you need to read about the "grant" commands22:09
Portaljackerapparently this is sufficient :P22:11
Portaljackerhttp://www.debuntu.org/how-to-create-a-mysql-database-and-set-privileges-to-a-user22:11
anotheruseryeah that's good enough22:11
Portaljackerthis line seems odd to me22:11
Portaljackergrant usage on *.* to amarokuser@localhost identified by 'amarokpasswd';22:11
anotheruserit means amazokuser can connect, from localhost, with that password22:12
Portaljackeroh, and he can only connect to a db he's assigned to22:12
anotheruserusage is the most basic privilege22:13
anotheruserso yeah he can do nothing with it22:14
anotheruserThe USAGE privilege specifier stands for “no privileges.”22:15
anotheruserhere :p22:15
Portaljackerthanks22:18
=== nxvl_ is now known as nxvl
=== cpg is now known as cpg|away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!