/srv/irclogs.ubuntu.com/2012/11/24/#ubuntu-server.txt

MrTorque:)00:00
MrTorquegn800:01
sarnoldMrTorque: 'night :)00:01
=== chilicuil is now known as chilicuil_away
myhrlinsarnold: could you help me understand this crypt(3)02:25
myhrlinoh woops, he's probably gone by now02:25
myhrlinbut if someone else could help me understand please; is the man page saying that salt is automatically used?02:26
myhrlinI guess there's not a method for just char *crypt(const char *key) so it requires a salt02:26
xnoxmyhrlin: the way I interpret the manpages is that: you should supply salt, which must be a two-character string from [a-zA-Z0-9./]02:28
myhrlinah ok02:28
myhrlinthen my next question is where do I do that? hehe.  I'm trying to modify pam so that passwords are hashed with a salt02:29
myhrlinI've also got pam_unix opened up02:29
=== cpg is now known as cpg|away
lvmerWhat software would you guys use for a NAS? Unraid? or Ubuntu Server?03:07
lvmerI'm leaning toward Ubuntu, because that is what I am comfortable with atm. & I don't see the server edition use much RAM or CPU time. My only worry, is scaling the processor with the # of drives and software RAID 5 or 6. I'm not sure how to predict the hardware requirements.03:11
sarnoldmyhrlin: you supply the salt; if you install the manpages-posix-dev package, you can see an example program via 'man 3posix crypt'03:24
sarnold(I strongly recommend installing the posix and posix-dev manpages, having The Standard at your fingertips is awesome.)03:25
myhrlinsarnold: ok, so I have that installed and I see the program, but now I'm understanding that to add a salt goes beyond making a modifcation in /etc/pam.d/common-password and /etc/login.defs03:32
sarnoldmyhrlin: if you're developing your own PAM module, you get to do what you wish, really.. ;)03:33
myhrlinexactly what I didn't expect to have to do, but I wont complain, at least I get that option :)03:34
sarnoldmyhrlin: what's your end goal, anyhow? :)03:34
myhrlinoh just adding the salt is what I want to achieve03:35
sarnoldif it's to find out how pam works, this is one awesome way to do it, but there may be easier ways to do what you're aiming for if you just want something to work. :)03:35
myhrlinat one point I thought to do both blowfish and sha512 hashing but that would be overkill I guess03:35
myhrlinplus a salt ^03:35
sarnoldmyhrlin: .. and require _both_ hashes to log in?03:35
myhrlinI mean to apply both hashes to the password, not to have a two hashes of the password03:36
myhrlinso do a sha512 on the password, then blowfish with salt03:37
sarnoldmyhrlin: take a look at your /etc/shadow file; you'll probably notice entries like this: sarnold:$6$HMjuZ0yq$Q....03:39
sarnoldmyhrlin: that HMjuZ0yq there is the salt03:40
sarnoldmyhrlin: and the '6' asks for sha-51203:40
myhrlinoh03:41
myhrlinso it's actually in there03:41
sarnoldmyhrlin: yeah03:41
myhrlinI guess I can live with that :)03:42
sarnoldif you want to fiddle with something, the /etc/login.defs SHA_CRYPT_MIN_ROUNDS value is probably the one to change; maybe you want to raise that to 10000 or more, to try to make guessing passwords that much harder03:42
myhrlinsarnold: sure, I might just do that instead.  I'll play a bit with john and see how it fares on what I have right now though03:44
=== n0ts_off is now known as n0ts
sarnoldmyhrlin: woo. :)03:46
=== n0ts is now known as n0ts_off
=== cpg|away is now known as cpg
=== cpg is now known as cpg|away
TrixboxerHi, why does default 12.04 ubuntu 64bit kernel keeps big reserved space12:45
TrixboxerMy ubuntu VM has12:45
TrixboxerMemory: 298196k/5767168k available (6561k kernel code, 448k absent, 5468524k reserved, 6642k data, 924k init)12:45
Trixboxermy CentOS VM has12:45
TrixboxerMemory: 2001680k/2097152k available (5085k kernel code, 388k absent, 95084k reserved, 7228k data, 1244k init)12:45
=== acidflash_ is now known as acidflash
=== chilicuil_away is now known as chilicui
=== chilicui is now known as chilicuil
=== schmidtm_ is now known as schmidtm
seljeHi! I'm trying to setup a server for my company. The following things is what I want: Own place for user files, and a group file server. DHCP server, VPN server to access the files from all around. What packages do i need?15:38
seljeAnd ofcourse a webpage that can only be access through vpn(intranet page), but i think LAMP takes care of that with a CMS system15:40
Seveasselje, isc-dhcp-server, apache2, openvpn, samba15:44
seljeThank you Seveas15:44
seljeis there any gui for openvpn server manager?15:45
Seveason a server you don't want a gui :)15:45
* FauxFaux would suggest considering sftp over vpn+samba for file access, if it's intermittent and not home-drive style access.15:52
seljeSeveas: I want a gui :-)15:55
jpdsselje: You don't want a GUI on a server.15:55
seljeit's much easier when i don't know all the commands...and much easier to configure15:56
jpdsselje: Then, you'll never have a proper understanding of what's going on.15:56
jpdsselje: And when things break...15:56
seljehmmm jpds: this is going to be a hard night i understand15:57
jpdsselje: We all were beginners at some point.15:57
seljeyeah jpds :-)15:57
jpdsselje: If you would like a systems management GUI, then there's http://www.ubuntu.com/business/landscape15:59
=== yofel_ is now known as yofel
seljehi! I need some help with installing ubuntu server 12.1016:52
seljeI'm coming to the part of partitioning my system, and last time i tried to install it, it came up as guided, but now i have to choose. When I choose and install, i just get up an error16:53
seljewhat is the right way to do? I'm using a server with 2 RAID discs..16:53
seljenobody have any idea about partitioning the system?17:21
=== Gallomimia_ is now known as Gallomimia
uvirtbotNew bug: #1082699 in samba (main) "cannot copy to samba share" [Undecided,New] https://launchpad.net/bugs/108269917:50
=== illuminatis^^ is now known as illuminatis
FauxFauxselje: Please give actual information about the problem instead of saying "an error".17:54
seljeFauxFaux: I got a boot message...not sure what it said, but i wouldn't boot17:54
FauxFauxKnowing what the problem is is an important stage of the diagnosis process.17:55
seljeyeah FauxFaux.. But I think the whole problem is that i don't understand the manual partitioning system17:55
seljeand then the boot process fail17:56
FauxFauxI can't help you if you don't give actual error messages instead of saying "it failed", maybe someone else can mindread.17:58
seljeok.. Thanks for your time FauxFaux17:58
samba35how to reinstall some package to get that package repair18:06
uvirtbotNew bug: #1082707 in php5 (main) "package php5-common 5.4.6-1ubuntu1.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 2" [Undecided,New] https://launchpad.net/bugs/108270718:26
pretorianMalehi18:48
pretorianMalehi18:50
=== jiboumans_ is now known as jiboumans
=== n000 is now known as koolhead17
IohnizerAny virtualization guru around?20:26
=== cpg|away is now known as cpg
seljeanyone have a good tutorial for setting up my vpn server?21:58
TJ-openvpn?21:59
seljeyes22:00
TJ-Have you looked at https://help.ubuntu.com/community/OpenVPN22:00
TJ-Or how about https://help.ubuntu.com/12.04/serverguide/openvpn.html22:01
seljeThanks TJ, sorry, my bad22:02
TJ-I use openvpn routed  tun UDP with TLS auth22:03
* cwillu huggles openvpn22:07
=== Jack_ is now known as Guest95624
=== cpg is now known as cpg|away
mikeeyCould a "nf_conntrack: table full, dropping packet." error being spammed in my syslog be a sign of a DDoS? The server dropped from the internet when it happened aswell23:21
=== cpg|away is now known as cpg
=== stijnaway is now known as stijndg
* stijndg is away (Stijn is out BNC logging messages)23:53
=== stijndg is now known as stijnaway
=== stijnaway is now known as stijndg

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!