/srv/irclogs.ubuntu.com/2012/11/02/#ubuntu-server.txt

=== n0ts_off is now known as n0ts
Nolarx/quit02:47
Titomeni need some adivse on instaling ubuntu 12.04 on raid 1 boot and rest on raid5 +lvm03:00
=== shantorn_ is now known as shantorn
BaldFat|2just setup a server what is the best way to install a hp laserjet 1006p?04:34
BaldFat|2is it lpadmin?04:35
syntroPii am trying to install ubuntu server from an usb stick onto an internal uSDHC card which should be accessible via sdhci_pci module. Undortunately this module is missing from the installer iso :-/  Any ideas how i could get it into the installer kernel to access my installation target?04:39
BaldFat|2I am without X how can I use hplip without x on the server. Is there anyway to just forward ssh -X ip?04:46
syntroPiis mmc core and sdhci even supported on the server kernels? where can i check which modules are available?04:55
BaldFat|2answer is sudo apt-get install hplip    then    sudo hp-setup -i05:10
=== Err404NotFound is now known as Error404NotFound
syntroPiok i have got the kernel modules loaded and a shiny new /dev/mmcblk0 for my usdhc card. Now how can I get the dumb installer to use that? All it would display me is iSCSI and nothing else???05:36
syntroPiAny ideas how i should invoke the partitioner part of the installer to use  /dev/mmcblk0?05:41
=== n0ts is now known as n0ts_off
=== n0ts_off is now known as n0ts
=== th0mz_ is now known as th0mz
=== mcclurmc_away is now known as mcclurmc
kodapaHello09:40
kodapaJust got this error on ubuntu 12.04.1 KVM host with OpenStack Essex: INFO: task kvm:2771 blocked for more than 120 seconds.09:40
kodapaThe VM got shutoff09:41
kodapahttp://paste.ubuntu.com/1325976/09:41
=== n0ts is now known as n0ts_off
=== Ursinha-afk is now known as Ursinha
haojie_1990ubuntu 怎么配置才能使温度降下来,性能也不降低10:46
=== mcclurmc is now known as mcclurmc_away
=== mcclurmc_away is now known as mcclurmc
=== Ursinha is now known as Ursinha-afk
=== cpg is now known as cpg|away
Titomeni need some help installing ubuntu 12.04 on raid..some help --guidence12:09
uvirtbotNew bug: #1074330 in nagios3 (main) "the nagios user home directory name is incorrect" [Undecided,New] https://launchpad.net/bugs/107433012:31
AdvoWorkis there a way I can test what happens with updates before actually doing them at all?12:58
qman__AdvoWork, clone your system and install them there13:10
qman__unfortunately there's no easy way to roll back an update, either13:10
qman__have to manually remove the packages and install the old versions13:10
=== remix_auei is now known as remix_tj
uvirtbotNew bug: #1074357 in elinks (universe) "Merge elinks (0.12~pre5-9) (universe) from Debian Unstable (main)" [Undecided,New] https://launchpad.net/bugs/107435713:45
uvirtbotNew bug: #1074359 in nova (main) "[SRU] Meta bug for tracking Nova stable update" [Undecided,New] https://launchpad.net/bugs/107435913:51
=== n0ts_off is now known as n0ts
=== n0ts is now known as n0ts_off
Sander^workIs doing an apt-get upgrade always painless when it comes to if any package can break?15:00
leniospackages are not supposed to break15:06
leniosif they do, they can break also with a simple upgrade15:06
leniosdist-upgrade should be used for packages that need to add or remove packages, upgrade otherwise15:08
acidflashhello all15:48
acidflashhow can I make a program execute with root privelages, where it doesnt need to type sudo to do everything (in ubuntu 12.04)15:48
patdk-wkacidflash, sticky user flag15:53
patdk-wkbut that is normally not something you want to do15:53
acidflashpatdk-wk: sticky user flag? how and where do I put that? I really dont ahve a choice, its a flaw in the system design, but its closed source software so no way to fix, its a radius software15:53
patdk-wkwell, sticky user flag means ANY flaw in the program, can be used to root your server15:54
patdk-wkman chmod15:54
acidflashcan i describe a little more whats happening, maybe i am misunderstanding my problem?15:55
acidflashi am using a softwre called freeradius, this software, what its doing is calling another software called rmauth and rmpoller, etc15:56
acidflashwhen it tries to call that software, the following message is returned15:56
acidflashExec-Program output: Exec-Program: FAILED to execute /usr/local/bin/rmauth: No such file or directory15:56
acidflashExec-Program-Wait: plaintext: Exec-Program: FAILED to execute /usr/local/bin/rmauth: No such file or directory15:56
acidflashExec-Program: returned: 115:56
acidflashbut the thing is, it does exist, permission are 755,15:57
acidflashif you can that program from the shell, it gives hte same thing15:57
acidflashBUT, if you call it using "sudo /usr/local/bin/rmauth"15:57
acidflashworks fine15:57
patdk-wkthat is defently not a permission issue15:57
patdk-wkI'll bet rmauth is a script, not a program15:57
acidflashits compiled15:58
patdk-wkoh?15:58
acidflashexecutable15:58
acidflashyes15:58
patdk-wkno shell/perl/...15:58
acidflashno, its binary15:58
patdk-wkfreeradius isn't chroot is it?15:58
patdk-wkor, the other option, apparmor issue15:59
acidflashfreeradius is in /usr/local/sbin15:59
patdk-wkthat has nothing to do with anything15:59
acidflashwhat i figure, is that its not working right, because its being called /usr/local/bin/rmauth, INSTEAD of "sudo /usr/local/bin/rmauth"15:59
=== kInOzAwA is now known as Guest68299
patdk-wk"No such file or directory" != "Permission Denied"16:02
patdk-wkyou can *figure* all you want16:02
acidflashpatdk-wk: when i call it from bash, it gives me the same thing if i call it without root16:04
acidflashwithout sudo*16:04
qman__actually, that does happen under a certain condition16:06
qman__if your file which you assume to be executable is not, and you call it from the shell, it will say no such file or directory16:06
acidflashqman__: and if you call it "sudo /my/file/name"16:07
acidflashand it executes it?16:08
qman__no16:08
acidflashits executing it!!16:08
acidflashthis is ubuntu 12.04, logged in as root16:08
patdk-wkstill something going on, probably apparmor16:11
acidflashpatdk-wk: could be, what should i do to test apparmor?16:12
qman__I wouldn't think so, apparmor usually logs very distinct messages16:12
patdk-wkqman, thought that logging wasn't enabled by default though16:12
qman__I mean, I wouldn't doubt it causing a problem like that, but you'd normally be able to tell16:12
patdk-wkuse dmesg to start16:13
acidflashdmesg doesnt show anythign out of the ordinary16:16
acidflashubuntu 12.04 no longer allows you to run things as root, you can login as root, yes, but you need to pass sudo to every single command that requires root, this software is not doing that, am I going in the wrong direction with my thinking here?16:16
acidflashis the problem not in the fact that its not being called like "sudo /usr/local/bin/rmauth" ?16:17
qman__that's not correct at all16:19
qman__there is a problem with the way your shell is calling the program, as opposed to the way sudo is calling it16:19
qman__apparmor could cause that kind of issue, but it's not easy to troubleshoot16:19
FunnyLookinHatThe 12.10 ruby1.9.3 package installs a bunch of ruby1.9.1 stuff - but those are all really 1.9.3 right?  I recall that the name never changed for some reason with packaging16:19
acidflashqman__: can i temporarily disable apparmor in order to test it?16:20
=== Ursinha is now known as Ursinha-afk
thebwtso maas keeps wanting me to run "maas-import-isos script", but the command runs just fine.16:28
patdk-wkservice apparmor stop16:32
=== Ursinha-afk is now known as Ursinha
blizzowI have a couple 12.04 servers running.  I installed gcp and am unable to use it.  I get some DBUSexception errors.  I wanted to see if anyone else was having the problem or might know a solution before I file a bug report.16:40
blizzowhttp://pastebin.com/Vd564Ctk16:41
=== mcclurmc is now known as mcclurmc_away
BaldFatSorry to say but I am trying to make my IP static and the offical guide says to edit the /etc/network/interfaces and well there isn't do I create the file?17:15
BaldFatUbuntu 12.1017:15
=== Ursinha is now known as Ursinha-afk
BaldFat^ idiot I exited out my ssh :P ^17:17
uvirtbotBaldFat: Error: "idiot" is not a valid command.17:17
BaldFat^ "idiot" I exited out my ssh :P ^17:17
uvirtbotBaldFat: Error: "idiot" is not a valid command.17:17
BaldFat"^" I exited out my ssh :P ^17:17
RoyKBaldFat: there should be a file there17:29
RoyKBaldFat: but if this is setup as a desktop installation, networkmanager should manage networking17:29
BaldFatNo I was an idiot and I am remoting into the server. I exited out of my ssh and was looking at my local laptop in arch :(17:34
RoyK:)17:34
BaldFatreally banging my head with lpadmin and installing the ppd for my hp p100617:34
RoyKcan't you do that with the cups web gui?17:35
* RoyK doesn't quite remember...17:35
BaldFatNot if I am headless and don't have x installed. I wonder if I could use lynks or wm317:37
RoyKBaldFat: you might have a PC from which you can access that web ui17:50
RoyKBaldFat: you'll need to configure it to accept connections from other than localhost, but that's about it17:50
RoyKBaldFat: or - install firefox and run it with remote X17:51
* RoyK has firefox installed on a few servers without X just to do stuff like that17:51
BaldFatThat's what I should do. Never tried that one of x forwarding firefox from a headless17:51
RoyKBaldFat: are you on a linux client?17:51
RoyKif so, ssh -y servername will forward everything automatically through ssh17:52
RoyKor just set "ForwardX11 yes" and "ForwardX11Trusted yes" in $HOME/.ssh/config17:52
BaldFatwell I just do the ssh -X ip17:53
RoyKI meant -Y17:53
BaldFatyes I am remoting in from my arch netbook17:53
RoyKtrusted17:53
BaldFatfirefox has 33 packages to install :(17:53
RoyKbut -X will work too, only it'll time out the X connectivity quicker17:53
RoyKBaldFat: you need a truckload of libs for ff to work17:54
RoyKbut they won't eat cpu, just a piece of disk space17:54
BaldFatwould lynks or w3m work?17:54
RoyK!w3m17:54
RoyKwhat's w3m?17:54
BaldFattexted based browser17:55
RoyKlinks2 works well with framebuffer, if that's what you mean17:55
RoyKwell, the cups stuff is pretty simple17:55
RoyKI guess even lynx should do17:55
RoyKanyway - a few megs to ff and its libs won't hurt ;)17:56
RoyKunless you have a very small root partition, that is17:56
BaldFatI just want to try and keep this server as small as possible. I have a friend going to try and hack into my system. I swear he will get in in 1 minute right now17:56
BaldFatsince he does pen testing as a living17:57
qman__w3m is a lot better than lynx/links217:57
qman__it doesn't choke as hard on most sites17:57
BaldFatw3m working like a charm17:59
RoyKqman__: ok17:59
RoyKBaldFat: if he does, please tell how ;)18:00
BaldFatI find text browsers a supper handy tool for quicka nd dirty hacking18:00
RoyKBaldFat: using 12.10 on a server?18:00
BaldFatyes18:00
RoyKBaldFat: I'd recommend using LTS for servers, that's what I do - less hassle18:00
BaldFatOh I have to be sneaky with him. I have changed every port to non-standard different size passwords and smoothwall18:00
RoyKno reason really to change ports18:01
RoyKjust make sure you use key authentication with ssh, or perhaps denyhosts if you want to use password auth18:01
RoyKand make sure nothing that runs as root listens to a public ip18:01
BaldFatlast time he got into my debian server and fedora server on differnt explots. This time I have a seperate firewall and a different router18:02
RoyKthat alone should take you far18:02
RoyKBaldFat: I guess last time I had a server exploited was in 2001 or so...18:02
BaldFatyeah just trying to learn some security stuff. I stopped being a bad hacker in the 80s :) Geez I am old18:02
RoyK:)18:03
* RoyK is almost 40, not a youngster anymore myself either...18:03
BaldFatback then you could get into half the servers by typing ? or just ?help18:03
RoyKthings have gotten a wee bit more secure these days ;)18:04
RoyKbut there are still holes, always...18:04
=== yofel_ is now known as yofel
patdk-wkheh, I had my ubuntu server hacked last year, from a known exploit that was a few months old :(18:06
patdk-wkthe patch didn't make it into the xen/ec2 kernel, only the others18:06
BaldFatif someone wants to get into your server you can never guarentee that they won't but you can make it not worth their effort18:07
patdk-wksure, but this made it extreemly easy18:08
patdk-wkthe effort required, and the person doing it, was a off the lot, scriptkiddie18:08
patdk-wkthe script used, was the one posted in the CVE report, exactly18:08
qman__that is unfortunate18:08
qman__reminds me of the fun SMB2 exploit a few years back18:09
qman__blue screen any windows system with file sharing turned on, only way to prevent it for weeks was to disable file sharing18:09
patdk-wkafter I was exploited, it was easy to locate the missing cve, and get that corrected18:10
patdk-wkI have completely moved off ec2, so I'm not actively watching to see if new stuff is missing18:11
RoyKpatdk-wk: which bug was this?18:12
=== udsslayer is now known as shadeslayer
thebwtmass question: trying to start a node for the first time, it isn't able to connect to the ubuntu mirror for some reason. network is configured right, we can ping sites in other terms, it seems like the maas installer itself is borking up.18:12
RoyKMAAS?18:13
thebwtRoyK: Metal as a service, found my problem on https://wiki.ubuntu.com/ServerTeam/MAAS/Troubleshooting18:14
BaldFatwait am I "wanting" to use samba to share my printer?18:16
uvirtbotNew bug: #1074443 in ipmitool (universe) "Please upgrade ipmitool to 1.8.12 for 13.04" [Undecided,New] https://launchpad.net/bugs/107444318:16
RoyKthebwt: I know - he was saying mass...18:18
arlo_hello are there a nice people some can help me to open port 80 on my router, we can use teamwiewer to remote.18:18
RoyKBaldFat: pretty easy - there are commented-out config parts in smb.conf to show you how18:18
thebwtRoyK: oops18:19
BaldFatRoyK: Yes I know how. It is the question of am I buildign a less secure server using samba as oppose to ipp?18:19
BaldFatarlo_: can you surf the internet? That's port 8018:20
BaldFator 808018:20
patdk-wkroyk, found it18:26
patdk-wkhttp://www.ubuntu.com/usn/usn-1186-1/18:31
patdk-wkIf I remember right18:31
patdk-wkCVE-2010-407318:31
uvirtbotpatdk-wk: The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3) compat_sys_shmctl functions in ipc/compat.c; and the (4) compat_sys_mq_open and (5) compat_sys_mq_getsetattr functions in ipc/compat_mq.c. (http://cve.mitre.org/cgi-bin/18:31
patdk-wkthat didn't apply to the xen/ec2 source tree cleanly, and never ended up getting fixed, till december18:31
patdk-wkI got rooted over thanksgiving18:32
patdk-wkI do remember it was 64bit specific issue though18:32
patdk-wkoh, close, but not that one18:33
patdk-wkbug 64039018:33
uvirtbotLaunchpad bug 640390 in linux "Security bug related to CVE-2010-3301" [High,Fix released] https://launchpad.net/bugs/64039018:33
uvirtbotNew bug: #1074460 in qemu-kvm (main) "kvm: windows xp installation hangs after "Setup is inspecting your computer's hardware configuration"" [Undecided,New] https://launchpad.net/bugs/107446018:56
* RoyK mutters something about using 10YO proprietary operating systems18:59
protoCall7Hi All, I've been fighting with a preseed configuration for 12.04 server for weeks now, and can't seem to make any progress.  Does anyone know how to pressed out the question "Write the changes to the storage devices and configure RAID?"19:49
protoCall7I want to auto answer "Yes" on that one19:50
=== Guest68299 is now known as kInOzAwA
=== cpg|away is now known as cpg
dj_corncobI want to play around with writing client-server sockets.  What should I use in ubuntu to simulate a server on my machine?21:32
erichammonddj_corncob: Elaborate on "simulate a server"21:34
dj_corncobyeah sorry i don't have the vocabulary for this sort of thing21:35
guntbert!crosspost | dj_corncob21:35
ubottudj_corncob: Please don't ask the same question in multiple Ubuntu channels at the same time. Many helpers are in more than one channel and it's not fair to them or the other people seeking support.21:35
FunnyLookinHatdj_corncob, FWIW - If you want to write really simple stupid client / server "socket" communication, you can use Socket.IO with Node.JS - however, a more thorough understanding of sockets ( or even programming for that matter ) might be a better place to start.21:36
FunnyLookinHatIf you're looking to write true client/server socket communication from the ground up ( more or less ) - check out Boost::ASIO21:37
FunnyLookinHatBut that will require you to have a fairly strong understanding of C++.21:37
=== cpg is now known as cpg|away
=== shantorn_ is now known as shantorn
=== yofel_ is now known as yofel
=== cpg|away is now known as cpg
submanI've never setup a raid system before.  Is it possible to set one up on an already running system?  For example, Ubuntu is already installed on sda and I just installed a blank drive in sdb.23:43
Troy^subman: no it is not.23:44
Troy^subman: in a raid setup all drives are formatted.23:44
submanThanks Troy^23:45
Troy^subman: i have a small home linux server that i have 2 x 80gb ide drives as raid 1. I didn't do it for the purpose to have Raid 1 but just to expierment really.23:46
erichammond1Couldn't you do it with LVM by setting up one disk with LVM, copying data there, then converting the other disk to LVM and adding it?23:46
submanTroy^, that is what I'm doing here.  Experimentation only.  This server has two ide slots and a built in raid but it is not Linux friendly.23:46
Troy^subman: my raid is mdadm (software raid)23:47
erichammond1Oh, not real hardware RAID, no.23:47
submanYes, that is what I thought I'd try on the two ide slots.23:47
submanDoes the Ubuntu installation do a software raid installation?23:49
Troy^subman: yes it has the option23:49
Troy^https://help.ubuntu.com/12.04/serverguide/advanced-installation.html#software-raid23:50
submanTroy^, I guess that is my only option then, reinstall.  Nothing on this server yet anyways!23:50
Troy^pretty much yea, just follow the step by step guide in that link.23:51
submanExcellent, thanks!23:51

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!