/srv/irclogs.ubuntu.com/2013/02/02/#ubuntu-server.txt

=== slank is now known as slank_away
dougbis there a way to copy a complete directory? i tried cp -r dir1 dir2 but I get the error "target 'dir2' is not a directory"00:58
dougbnvm, got it working!01:02
kirklandhallyn: done!01:07
kirklandhallyn: pushed to lp:ubuntu/spice and uploaded to raring!  enjoy ;-)01:08
hallynkirkland: thanks!  good night.02:27
reilighaHi. I was trying to change my ssh settings to not permit root login, but I did not find the line PermitRootLogin yes in my ssh_config file. I'm using 12.04 LTS03:50
qman__reiligha, the file is /etc/ssh/sshd_config03:51
cfhowlett!cookie|qman__,03:52
ubottuqman__,: Wow! You're such a great helper, you deserve a cookie!03:52
ae86-drifter_could somebody please help me troubleshoot my internet connection? here's my ifconfig output here: http://pastebin.com/6FmcVxyn  I cannot ping any public IPs or hosts... I am running ubuntu server 12.10, the machine has two physical nics, i've followed all guides on the ubuntu website and still not working. I have set static addresses and other machines on the same subnet are working fine, just not this ubuntu-server...a03:52
reilighaqman__ I didn't find that under etc/ssh, is it somewhere else?03:52
cfhowlettqman__, now THAT is some impressive cli-fu!03:52
qman__reiligha, no, that's where it is03:53
qman__ssh_config contains client settings, sshd_config contains server settings03:53
ae86-drifter_#networking03:54
reilighaqman__ I definately do not see it there. I only have two items in etc/ssh03:55
qman__reiligha, if you installed the ubuntu openssh-server package you would have many more than two, it stores the host keys there as well03:55
qman__more than likely it's not installed, or the config was removed somehow03:55
qman__ssh server is not installed by default03:56
reilighaqman__ Thank you. I thought it was installed by default.03:56
qman__ae86-drifter_, your networking configuration is incredibly complex, but please check to make sure you have one and only one default gateway, and have DNS servers configured03:58
qman__as of 12.04 ubuntu uses resolvconf out of the box03:58
qman__so you have to configure your DNS servers in /etc/network/interfaces03:58
ae86-drifter_qman__: I cannot even ping DNS servers by IP address03:58
qman__ae86-drifter_, I've never seen a macvtap interface, what are you running it on?03:59
qman__also, what is vibr0 bridging to?04:00
ae86-drifter_qman__: it's for VMs running on KVM, it's weird because they work fine04:00
qman__sounds like your default gateway is missing then, what's the output of route -n?04:01
qman__sorry, "route -n"04:01
ae86-drifter_i am actually connected to wifi through a virtualized firewall which is the gateway for all my machines, however the KVM host has no internet, lol, everything else does..04:01
qman__the behavior is as though the KVM host does not have a default gateway configured, or its default gateway is otherwise incorrec04:02
qman__t04:02
qman__which makes sense, since the guests need only be bridged to the LAN04:03
qman__and that doesn't require the host to be able to contact anything but the LAN04:03
ae86-drifter_the PPPoE connection is bridged on my modem, through to the kvm host, through to a VM running pfSense which has the public IP04:03
ae86-drifter_my default gateway reported by route is correct04:03
ae86-drifter_the VM on itself is the default gateway04:04
qman__well, that probably won't work04:04
ae86-drifter_qman__: it does04:04
qman__the KVM host is going to need a default gateway not dependent on its guests04:04
ae86-drifter_qman__: once the VM is up, it will be fine04:05
ae86-drifter_and it's set to auto-start04:05
qman__that that it isn't theoretically possible, but I can see lots of trouble with packets going both ways across the same bridges04:05
qman__could be one of the many layers of virtual networking going wrong04:06
ae86-drifter_qman__: i don't understand what you mean04:06
ae86-drifter_qman__: the gateway is functioning correctly04:06
qman__not if you can't ping hosts on the internet, it isn't04:07
qman__that's what the gateway does, and if the gateway routes traffic fine for other hosts, it's not the gateway's fault04:07
ae86-drifter_qman__: I am using it now on my laptop.04:07
qman__it's that this host can't use it04:07
ae86-drifter_for my internet04:07
ae86-drifter_yeah, it's just this one ubuntu server host that i need help with that's all04:08
qman__another question, what sort of wifi are you connected to?04:08
qman__some kinds of firewalls that universities and corporations use can cause this to not work right04:09
ae86-drifter_that's totally irrelevant, but the VM is providing an access point (PCI redirection in AP mode)04:09
ae86-drifter_(the gateway)04:10
qman__what?04:10
ae86-drifter_qman__: it's quite complex04:10
qman__clearly04:10
ae86-drifter_but the wifi works fine okay, liek i said, i'm using it on my laptop04:11
qman__that's not what I mean04:11
qman__do you own/control the access point/the whole network?04:11
qman__no weird firewalls?04:11
ae86-drifter_yes.. it's in my home, it's mine lol04:11
qman__ok04:11
ae86-drifter_qman__: the "gateway" is a virtualized firewall, "pfSense"04:12
ae86-drifter_which is running on the physical KVM host (ubuntu server) with 3 NICs (2x wired & 1x Wifi)04:12
qman__well, there are a couple things pfsense can do that could break this but I'm guessing you don't have those configured04:12
ae86-drifter_one NIC connected to my modem and one connected to a switch and the wifi acting as an AP (by having the PCI slot redirected to the pfSense firewall and being controlled by that)04:13
qman__ok04:14
qman__so, new question, your internet connection, does the KVM host have an IP on that interface, or is it also PCI redirected?04:14
ae86-drifter_qman__: please imagine that the gateway is doing it's job correctly04:14
ae86-drifter_qman__: it's bridged04:14
qman__I can't do that because the problem being described is that the gateway is not working04:14
qman__ok04:14
ae86-drifter_but no IP configured on the KVM host, i am letting pfSense have the public IP04:15
qman__I understand the configuration now, but unfortunately all the problems I can think of as the cause are not the case04:16
qman__the only way I could continue is with a packet capture04:16
ae86-drifter_qman__: how would you go about the packet capture?04:17
qman__I would run a capture on pfsense, and then try to ping an internet host from the kvm host04:18
qman__and see what happens on both sides of pfsense04:18
qman__see if traffic makes it to, through, and gets translated correctly04:18
ae86-drifter_tcpdump | grep 10.13.37.2  ?04:18
qman__mm, might be easier if you did a ping specific filter so you can see the whole picture04:19
qman__I can't remember how to do that off the top of my head04:19
qman__but I'd capture icmp on all interfaces04:20
qman__or at least the two relevant ones04:20
ae86-drifter_qman__: I'm not sure what you mean, i'm pretty noob04:21
qman__ping traffic is icmp protocol, and no real traffic is04:21
ae86-drifter_oh i see what you mean now04:21
qman__so you'd want to capture all icmp on the interface KVM connects to, and the WAN interface04:21
qman__then do a ping and watch how the flow happens04:22
ae86-drifter_ok i'll try04:22
qman__where it stops04:22
ae86-drifter_it's not capturing any packets from that address04:24
ae86-drifter_i dont think it's even getting there04:24
qman__ok04:25
ae86-drifter_i'm getting random packets from other hosts on the same network, just not this one04:25
qman__maybe the IP is assigned to the wrong interface then, or not bridged correctly?04:25
ae86-drifter_i'm gonna disable ipv604:25
qman__on the KVM host04:25
ae86-drifter_qman__: if that were the case, then my other machines wouldn't get an IP and my firewall would get a public IP either04:26
qman__not exactly04:26
qman__if the right interface is bridged correctly, they could still work, even if the host has no IP on that interface04:26
qman__though with all those interfaces it's quite a bear to try and figure out04:27
ae86-drifter_wouldn't get a public IP either*04:27
qman__if the right interfaces are bridged correctly*04:27
qman__the guests only care about the bridge being done and the interfaces being up, not the host's IP config04:28
ae86-drifter_okay.. just not sure how i would confirm that / fix it04:31
qman__well, it's a bit complicated04:31
qman__you could run packet captures on the KVM host, on each interface, until you see the traffic in the network you expect04:31
qman__but the bridging may throw that off04:31
qman__unfortunately with all the virtual bridging and the wireless, the config isn't all in /etc/network/interfaces, so it's harder to see the whole picture04:32
ae86-drifter_the bridges definately work to all VMs (whether they work properly or not, i don't know..), just the internet on the VM host doesn't.. it's really strange because i can plug a physical machine into it's physical interface, get an IP and internet works fine (static or DHCP)04:33
ae86-drifter_qman__: but the KVM host only really has one IP on the LAN on interface p4p104:34
ae86-drifter_so where else would it go?04:34
ae86-drifter_i'm a little confused04:35
qman__what all is p4p1 bridged to?04:35
qman__also, out of the box04:35
qman__an interface will not accept traffic that originated from it04:35
qman__and likewise it will not forward traffic it received back out the same interface04:35
nmgscHello ppl noob here04:36
ae86-drifter_the routing table is very simple - only three lines: http://pastebin.com/ny823BCS04:36
ae86-drifter_qman__: okay..04:37
nmgscneed help I just install ubuntu 12.10 and I get the shell instead of the graphis asking me for a log in ?¿?04:37
qman__so, if your traffic goes out p4p1, does it have to come back in the same interface to get to pfsense?04:37
qman__it may depending on how the bridges are set up04:37
ae86-drifter_nmgsc: did you install the server version?04:38
ae86-drifter_qman__: i need to thin kabout that04:38
nmgschmmmm yep yep04:38
qman__nmgsc, ubuntu server does not have a GUI04:38
nmgscyes i did04:38
qman__it's command-line only04:38
ae86-drifter_ae86-drifter_: no, it goes to a virtual nic04:38
nmgsclooks like Im learning the right way He He He04:38
ae86-drifter_pfsense's BOTH wired NIC's are virtual.04:39
nmgsccan you give me a link to the one that is not a server plz04:39
ae86-drifter_i really think i just need a small config tweak on the ubuntu server/kvm host04:40
qman__that's likely, it may need an adjustment to the firewall or routing settings, or it may need to be set on a different interface04:40
qman__trouble is pinpointing it, due to the complexity04:41
nmgscthanks ae86-drifter_ :}04:41
ae86-drifter_qman: maybe i should create a "management" virtual network...04:41
qman__just one thing to consider04:42
ae86-drifter_nmgsc: http://www.ubuntu.com/download/desktop04:42
qman__you said the VMs bridge to p4p1 in order to hit pfsense?04:42
qman__or do they bridge to virbr0?04:42
nmgscae86-drifter_ tk bud04:43
ae86-drifter_yep04:43
qman__or rather04:43
qman__that you plug into p4p1 on the LAN and get internet?04:43
ae86-drifter_p4p104:43
ae86-drifter_yep, correct04:43
qman__and that's on the same IP range as you're using on the KVM host?04:43
* nmgsc hands ae86-drifter_ a Pepsi .PEPSI.04:43
ae86-drifter_well, it's a switch but yeah, hosts on the switch seem fine04:44
ae86-drifter_yeah04:44
qman__yes, but they use the same 10.13.37.x?04:44
ae86-drifter_well, i can ssh to the kvm host fine from my lan using it's LAN ip on that network04:45
qman__ok04:45
qman__I have one thing to try, but I need to put the rules together04:45
qman__hmm, maybe these rules won't work04:46
qman__here's what I think is happening04:47
qman__kvm host sends ping out, it goes out p4p1 to the switch04:47
ae86-drifter_i cant ping the gateway from the kvm host04:47
qman__switch points it back to pfsense, which sends it back to p4p1, which then gets dropped04:47
ae86-drifter_but every other machine can..04:47
ae86-drifter_okay04:48
qman__the vms can because the vms are bridged on the same virtual switch as pfsense, but the kvm host is using the physical interface04:48
qman__this is just a guess, but a packet capture on p4p1 during a ping may reveal the answer04:48
ae86-drifter_oaky i'll try, i see what you mean04:50
qman__if this is the case, I'm not sure how to correct it04:50
qman__I know how to fix the opposite problem, but not this one04:50
qman__even if that's wrong I still think that for some reason kvm host's packets are not getting to the virtual switch04:55
=== stooj_ is now known as stooj
nn0101hi08:20
nn0101setup=> encrypted lvm 12.10 (fresh install). booting now just hangs. it looks like it's trying to boot off my encrypted lvm but unable to do so.08:21
nn0101any help?08:21
nn0101thanks08:21
nn0101not encrypted => /boot is 250mb08:22
nn0101leme livecd it and mount the encrypted lvm08:23
nn0101but this is 12.10! i don't understand why the option exists on the installation if its not supposed to work!08:24
nn0101why the option exists in the debian install process if its not supposed to work straight off08:24
decciHow can I build Ubuntu 12.04.1 inserting a new Intel driver igb version10:43
=== IdleOne is now known as CancelOne
=== CancelOne is now known as IdleOne
zatrickyHey all. Headless server (currently has a monitor attached) not booting but also not giving any error message other than the standard message regarding sparse files not being supported with btrfs.11:43
zatrickyHow can I get more output about what's really going on?11:43
Diegonathi guys12:03
Diegonatguys I created a script for udev that seems to work but RUM+="" which does not execute the command, why? RUN+="/bin/echo a > /opt/nearline.pid"12:04
Diegonatwhat can it be???12:04
zatrickyRUM/RUN ?12:04
zatrickytypo?12:04
Diegonatzatricky12:07
Diegonatwhat do you mean?12:07
DiegonatRUN sorry I meant12:08
zatricky(14:04:02) Diegonat: guys I ... but RUM+="" which ... why? RUN+="/...12:08
DiegonatI paste the command12:08
Diegonatit does not execute anything12:08
Diegonatwhy?12:08
Diegonatit should work12:08
Diegonatzatricky12:09
Diegonatany idea?12:09
zatrickynot really - hopefully someone else has more experience with udev12:11
Diegonatcan it be apparmor that stops udev form executing commands?12:12
Diegonatno its not12:13
Diegonatghghghhg so annoyed12:13
=== diego_ is now known as Diegonat
DiegonatI need help with udev12:19
RoyKwith /proc/sys/... there's /etc/sysctl.conf etc - is there a similar thing for things like /sys/block/sdh/device/timeout ?12:22
koolhead17Daviey, who else is at FOSDEM :)13:10
ShogootHi. Ive been foollowing this guide for settting up a ubuntu server with webmin.. Guide from ---> ://woodel.com/ Ive tried to connect to ftp but its not letting me, and i have followed the guide to the letter. Any of you that can help me out find why my ftp is not working as intended?13:14
RoyK!webmin13:18
ubottuwebmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system.13:18
Shogootargh...13:21
Shogootso waht do you people recomend as interface?13:21
RoyKwell, the commandline?13:22
RoyKit's not too hard13:22
Shogootit is for a linux newbie ;)13:22
RoyKyou'll probably learn quickly13:22
Shogootprobably..... not :P      Anyways you have some minutes to spare to help me understand why i cant acess my server from another computer on the same network?13:23
RoyKcan you ping it?13:23
Shogootyes13:24
Shogooti can access the website from the apachebit13:24
Shogootcmd pong successfull13:26
Shogoottypos all over the place13:26
Shogootim on  awin7 machine13:26
Shogootand when i use explorer and ftp://myserverip i get the dialog box asking for user and pass, but it dont recognize eighter the suer or the password.13:27
Shogootand im 100% sure on the user and the password13:27
ShogootIf you have a good guide for setting up a ubuntu server i would apreciate the help :)13:28
ShogootEbox. is recomended....13:39
RoyK!ebox13:41
ubottuzentyal is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/Zentyal (Project formally known as eBox - including in Lucid/10.04).13:41
RoyKShogoot: really, what I would recommend is learning linux - it doesn't take too long to learn the basics, and doing it manually, gives you full control13:42
RoyKnot just asking a fancy gui to please do this or that13:42
Shogootthanks for your help13:49
bcbrown19Anyone know a good guide for setting up ubuntu server with a static ip? note: i am running it on a virtual machine.15:09
RoyK!guide | bcbrown1915:11
ubottubcbrown19: The Ubuntu server guide may be found at http://help.ubuntu.com/12.04/serverguide/C/15:11
bcbrown19RoyK: Thanks. I'll check it out.15:11
mcdanielshi folks15:19
mcdanielsis ubuntu server in the factory setting (after install) capable of using Smtp auth + Tls?15:22
patdk-lapheh?15:26
patdk-lapno, cause no smtp client/server would be installed15:27
patdk-lapmaybe you should define, capable15:27
patdk-lapcapable of server smtp auth? client smtp auth? php smtp auth? perl smtp auth?15:27
mcdanielsok my mistake sorry ;)15:28
mcdanielsi am trying to set up a postfix server + dovecot + smtp auth (TLS)15:28
mcdanielsI am talking server smtp auth15:29
patdk-lapyou will need to configure dovecot and then postfix to do that15:29
mcdanielsok so I ll try this again ... it is not that easy to find a suitable how to for this cause every how to (also the help.ubuntu.com how tos) are different from what happens in ubuntu server 12.04 ;)15:31
patdk-lapheh?15:31
patdk-lapI dunno about that15:31
patdk-lapcause how you do that in dovecot/postfix hasn't changed in 8years?15:32
patdk-lapso every howto, including both dovecot and postfix MANUALS will be correct15:32
mcdanielsthe dovecot configs for example are split in many conffiles15:32
patdk-lapso?15:33
patdk-lapthat doesn't change the way it works, only the file you edit, if you even bother with that15:33
mcdanielsno problem for a pro, but for a postfixbeginner ... ;)15:34
patdk-lapthere is no beginner email admin though15:34
patdk-lapemail is a pretty complex and can be very evil if not done right15:35
mcdanielsbeginner in "the postfix linux" case15:35
mcdanielsespecially postfix15:35
mcdanielscoming from evil windowsservers ... ;)15:35
patdk-lapthat is your issue then :)15:36
patdk-lapstuff in unix land isn't build solutions like windows15:36
patdk-lapyou have to layer15:36
mcdanielsbtw the postfix is in vm for testing (not in the wild)15:36
patdk-lapmakes for annoying setup15:36
patdk-lapbut easy diagnostics15:36
mcdanielsyesterday I made it that smtp auth + tls for imap login worked15:38
mcdanielsnot smtp auth15:38
mcdanielstls for imap i ment15:38
mcdanielsbut no chance to get smtp out + tls working15:39
mcdanielsauth sorry15:39
patdk-laphttp://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL15:39
patdk-lapdunno why not read the manual, it's very very simple15:39
mcdanielsThe SASL is  for auth as far as i  understood15:41
mcdanielsand TLS is for encrypting the connection15:41
mcdanielsso sasl can send plain text passwords15:42
patdk-lapthe whole point of sasl, is it can send ANYTHING15:42
patdk-lapencrypted, plain, hashed, challenge, ....15:42
mcdanielsok15:42
patdk-lapnormally, doing anything more complex than plain is not recommended15:43
patdk-lapcause then it's required you store the password plain on the server15:43
patdk-lapif you want to not use plain text passwords on the server, then you have to use plain text passwords for logins (sasl)15:43
patdk-lapthat is why TLS is needed15:44
mcdanielsok so far I understood it15:44
patdk-lapto protect those plain passwords, so you can save the passwords encrypted on the server15:44
patdk-lapwell, encrypted/hashed15:44
mcdanielsbtw. if installing ubuntu server you may tag "Mailserver"15:48
patdk-lapno idea what it does, I never tag anything other than ssh15:49
mcdanielsok15:49
mcdanielsso I ll try to do it from scratch15:49
mcdanielsjust did a fresh install of postfix... there are TLS Parameters already with smtpd_tls_cert_file and key file15:57
mcdaniels:q!15:58
patdk-lapya, but those tls are generic and untrusted16:00
patdk-lapthey are enough to make a secure connection16:00
patdk-lapbut not enough for you to know you are connecting to *your* mailserver16:00
mcdanielsfor testing its ok16:01
mcdanielsbut what is postfix encrypting at this part of the install...?16:04
patdk-lapwhatever the client asks for it to do16:06
patdk-lapnothing is encrypted till the client asks for it, then everything after that is encrypted16:06
mcdanielsok i see so smtp connectons MAY be encrypted if the mailclient asks for16:09
mcdanielsin this standardconfiguration16:09
SpinningWheels1I have recently set up a ubuntu server box with a mdadm raid 5. For whatever reason the raid is degraded. It boots up and says the raid is degraded and asks if i want to continue to boot anyways and it wont let me type yes or no even though i can type before and after that in the rescue shell it provides.16:20
mcdanielsthe service auth  says  unix_listener  auth-userdb in 10-master.conf16:44
mcdanielsso i have to change it  in unix_listener /var/spool/postfix/private auth ?16:44
mcdanielstalking of dovecot16:44
xiaoyÌû17:49
SpinningWheelsI have recently set up a ubuntu server box with a mdadm raid 5. For whatever reason the raid is degraded. It boots up and says the raid is degraded and asks if i want to continue to boot anyways and it wont let me type yes or no even though i can type before and after that in the rescue shell it provides.17:49
xiaoyÌû18:17
=== aarcane_ is now known as aarcane
luminoushi! i am trying to see if i can get opensmtpd running on ubuntu. my cuurent stumbling block is that it seems ubuntu does mail aliasing differently / i can't quite figure out how ubuntu does this19:31
=== nicekiwi__ is now known as nicekiwi
=== virusuy_ is now known as virusuy

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!