[00:52] <adam_g> Daviey, 2012.2.4 + 2013.1.1 updates in their respective ubuntu release upload queue  and cloud-archive stagings, waiting for approval
[06:15] <nicekiwi> can someone help me restart my server?
[06:16] <sarnold> nicekiwi: normally that's just "sudo shutdown -r now" -- is there something more to it? :)
[06:16] <sarnold> nicekiwi: .. are you worried that e.g. sshd might not come back up and you'll have to drive to a datacenter?
[06:17] <nicekiwi> well, the apache server in particular. It keeps saying "Fail" when i restart it
[06:17] <sarnold> ah :)
[06:17] <nicekiwi> the error log does not seem to contain useful information
[06:17] <sarnold> nicekiwi: check /var/log/apache* directories... might be something useful there?
[06:17] <nicekiwi> unfortunatly not
[06:18] <sarnold> nicekiwi: can you pastebin how you're trying to restart it, what output you get, and any log messages that might be generated at the same time?
[06:19] <nicekiwi> the only real error im getting is "[Thu May 16 10:16:11 2013] [error] Server should be SSL-aware but has no certificate configured [Hint: SSLCertificateFile] ((null):0)"
[06:20] <sarnold> aha :) well, it does say 'error' rather than 'warning', might as well assume that's the problem..
[06:20] <sarnold> nicekiwi: do you expect this server to serve SSL/TLS?
[06:20] <nicekiwi> yes
[06:20] <sarnold> nicekiwi: do you have a SSLCertificateFile directive somewhere in the configuration?
[06:21] <nicekiwi> yes
[06:22] <sarnold> nicekiwi: does ls -l on that filename look right?
[06:22] <sarnold> nicekiwi: also check ls -ld on all directories above the file.. perhaps permissions are incorrect on a directory (it can be easy to overlook these..)
[06:23] <nicekiwi> what should the permissions be?
[06:23] <nicekiwi> for /etc/ssl/certs/
[06:24] <sarnold> nicekiwi: for /etc/ssl/certs, root:root 755
[06:24] <nicekiwi> i mean everything appears correct
[06:24] <nicekiwi> drwx-xr-x
[06:24] <sarnold> okay, good
[06:26] <nicekiwi> sarnold, http://paste.ubuntu.com/5669904/
[06:27] <sarnold> heh, you're right, not very useful :)
[06:27] <nicekiwi> yeah :/
[06:32] <sarnold> nicekiwi: the last two comments here look useful: http://forums.freebsd.org/archive/index.php/t-6561.html
[06:35] <nicekiwi> hmm.. in both of those they upgraded apche, I havnt changed anything :/.
[06:36] <sarnold> nicekiwi: it did seem like grasping at straws
[06:37] <nicekiwi> sarnold, fixed it! :D See point #3 http://imranbhullar.blogspot.co.nz/2012/07/server-should-be-ssl-aware-but-has-no.html
[06:37] <sarnold> nicekiwi: woah.
[06:37] <sarnold> nicekiwi: I saw that page and figured the dude couldn't possibly be right...
[06:38] <sarnold> nicekiwi: thanks :) now I can go to bed happy.
[06:38] <nicekiwi> lol.. i just opened heaps of sites and that happend to be the first one :P
[06:38] <nicekiwi> sarnold, yes you can. thanks for your help :)
[06:38] <sarnold> I wonder how it came that the error message is -so- vastly wrong compared to the cause..
[06:39] <nicekiwi> yeah :/ not really sure eh
[07:12] <Daviey> rbasak: thanks for kicking off the thread.
[07:12] <rbasak> np
[07:24] <mah454> Hello
[07:25] <mah454> /etc/shadow is sha-512 or sha-256 ?
[07:26] <mah454> find ...
[07:31] <rbasak> mah454: see the crypt(3) manpage, and look up the id in the hash in your shadow file against the table in the manpage. /etc/shadow supports multiple schemes at once.
[07:46] <Daviey> rbasak: regarding bug 1180094, zul yesterday planned to discuss it with slangasek.. If we need to switch for support in LTS, it would be better to do this cycle IMO.
[07:46] <uvirtbot`> Launchpad bug 1180094 in samba "Update to 4.0" [Undecided,Invalid] https://launchpad.net/bugs/1180094
[07:46] <rbasak> Daviey: oh, OK. I didn't realise it was remotely near the cards.
[07:47] <Daviey> rbasak: Would "Wishlist, Incomplete" make more sense?
[07:47] <rbasak> Daviey, zul: what's the need to go ahead of Debian here?
[07:47] <Daviey> rbasak: Well, zul raised it yesterday - and broadly, *might* make sense?
[07:48] <Daviey> rbasak: I agree about desktop needing to be involved.  At base, it would be good for smb4 to get more exposure *IF* it needs to be standard for the next cycle.
[07:48] <Daviey> But then, smb3 might still be ok for LTS.. so i don't know.
[07:49] <rbasak> AIUI, samba4 is useful for server people wanting to emulate AD. For this use case, the samba4 packages are available.
[07:49] <rbasak> AIUI, samba3 is fine for everyone else, but perhaps I'm mistaken.
[07:50] <rbasak> Oh. Upstream list 4.x as current stable.
[07:51] <Senor> what is the relation between ubuntu and debian ?
[07:53] <rbasak> Senor: good question! http://askubuntu.com/questions/1336/how-is-ubuntu-different-from-debian has some answers if that helps you.
[07:53] <rbasak> SpamapS: ^^ some nostalgia for you perhaps? :)
[07:54] <Senor> rbasak:I am trying to implement one game server on linux , which distro is the best ?
[07:54] <rbasak> Senor: Ubuntu Server, of course. What a silly question! :)
[07:55]  * rbasak notes that this is the #ubuntu-server channel, so answers here might be a bit biased.
[07:56] <Senor> is ubuntu distro open source ?
[08:09] <rbasak> Senor: essentially yes, with the exception of restricted and multiverse (like non-free in Debian). See: http://people.canonical.com/~cjwatson/ubuntu-policy/policy.html/ch-archive.html#s-ulp for details.
[08:21] <RoyK> Senor: yes
[08:21] <RoyK> Senor: or what rbasak said
[08:59] <Alina-malina> Hello all! Is there any mail caching server. For example the office has a very low  internet connection, but the workers sending e-mails so e-mails go very slow and the most of the time workers have to wait for the process rather then typing e-mails. How it is possible to make work with yahoo, gmal and other e-mail services? So the workers submit their e-mails to that server, and server during 5-6 hours login to their accounts an
[08:59] <Alina-malina> d send
[09:00] <Alina-malina> those messages?
[09:05] <Alina-malina> anyone?
[09:10] <Alina-malina> Do i need a separate caching computer to chache the stuff there and execute with queue?
[09:19] <caribou> Daviey: Hi, just saw your update of the rsyslog SRU being blocked by another inflight SRU (from stokachu)
[09:19] <caribou> Daviey: anything that must be done ?
[09:19] <Alina-malina> do i need a proxy caching serve?R How it works?
[09:21] <Senor> RoyK: I have installed ubuntu 10.4.2 server ,but why no step for password root?
[09:21] <Senor> and no root account
[09:22] <RoyK> Senor: because root normally don't have a password, login as your own user and run sudo -i
[09:23] <Daviey> caribou: Well the other SRU needs verification, that would help unblock it :)
[09:23] <caribou> Daviey: ok, I'll coordinate with Adam
[09:24] <Daviey> caribou: Thanks muchly
[09:24] <Senor> RoyK:That is ok!
[09:24] <Senor> RoyK:Is ubuntu server the best for deploying my gameserver?
[09:25] <RoyK> any linux distro should work
[09:25] <RoyK> up to you
[09:26] <Senor> which kernel version ubuntu server 10.4.2 is using ?
[09:27] <RoyK> Senor: 10.04.4 runs 2.6.32-38-server - you should upgrade to at least 10.04.4 (apt-get dist-upgrade), or perhaps to 12.04
[09:29] <Alina-malina> Hello all! Is there any mail caching server. For example the office has a very low  internet connection, but the workers sending e-mails so e-mails go very slow and the most of the time workers have to wait for the process rather then typing e-mails. How it is possible to make work with yahoo, gmal and other e-mail services? So the workers submit their e-mails to that server, and server during 5-6 hours login to their accounts an
[09:29] <Alina-malina> d send messages? Or do i need some webcaching proxy server? Are those secure? What is the secure webcaching server if any exist that can handle my request?
[09:30] <Daviey> Alina-malina: If the user wants to use gmail, yahoo or other WEB UI - it is not a good idea to interfere.
[09:31] <Daviey> Alina-malina: if they are using a local mail client, such as thunderbird or outlook - you can help.
[09:31] <Alina-malina> Daviey, maybe i should put a separate computer and route the traffic to it and that machine queue the requests and send during some hours like?
[09:32] <Daviey> caribou: If you can get Adam's verified today - we can get yours in to proposed today
[09:32] <Daviey> Alina-malina: right, that is something you can do.  But only smart for IMAP or Pop3 and smtp
[09:33] <caribou> Daviey: won't both fixes interfere ? I suppose that my SRU don't have Adam's patch
[09:34] <Alina-malina> Daviey, how i can do that? Is there any manuals? i never did anything like that before, i just have imagination:)
[09:37] <Senor> RoyK:  Does debian branch  from ubuntu ?
[09:48] <RoyK> Senor: no, it started with debian
[09:56] <Senor> RoyK: where can I get the distro's source code ? include login relevent programes .
[09:59] <Daviey> caribou: Your update does include Adam
[09:59] <Daviey> 's, no?
[09:59] <caribou> Daviey: lemme check
[10:00] <Daviey> caribou: The idea is that Adam's can be released to updates, and yours can then enter proposed.  Currently proposed is blocked with Adam's
[10:00] <Daviey> Alina-malina: I'm sorry, I am unable to spend the time helping atm
[10:00] <caribou> Daviey: yeah, but if mine doesn't have Adam's patch, there's no point into getting it into proposed. I should rework mine
[10:00]  * caribou goes to check his
[10:01] <rbasak> Senor: I suggest you ask in #ubuntu for questions that aren't server-specific. I think there are more people there who will be able to help you.
[10:02] <Daviey> caribou: http://pb.daviey.com/zCDO/
[10:02] <Alina-malina> Daviey, what is atm?
[10:02] <Daviey> Alina-malina: At The Moment
[10:03] <Senor> rbasak:oh,yes
[10:03] <caribou> Daviey: yep, the Raring one does. I don't know if Adam's patch applies to Precise but I think it does
[10:04] <Daviey> caribou: Ah, i only looked at the Raring candidate so far
[10:05] <caribou> Daviey: ah, ok.
[10:07] <RoyK> Senor: apt/get source packagename
[10:07] <Senor> RoyK:qpt-get source ubuntu?
[10:13] <RoyK> Senor: no, linux distros consist of thousands of packages, each for a program or set of programs. those you can apt-get source
[10:18] <Senor> how canI config my source get  mirror   ?
[10:31] <Daviey> Senor: There is a bit of an expectation that you do some searching yourself for answers, and using this channel to help fill in the gaps.
[13:11] <yolanda> Daviey, is ok that i start packaging testlib to reuse that on our dep-8-tests?
[13:31] <Daviey> yolanda: super idea
[14:36] <Daviey> adam_g: I accepted your openstack uploads, but at least one will be superseeded today - so you'll need to rebase
[14:37] <adam_g> Daviey, i only saw the quantal-proposed get accepted. did the raring-proposed go in as well?
[14:38] <Daviey> adam_g: will be shortly
[15:59] <BlueShark> Hi,
[15:59] <BlueShark> I'm trying to set up OpenVPN on my Debian VPS. I followed the instructions on http://aahank.com/2013/debian-ubuntu-vpn-server/ . But when I try to do "/etc/init.d/openvpn start", it's giving the error "Starting virtual private network daemon: filmygirl failed!". What could be wrong?
[15:59] <BlueShark> This is what I found when I did "grep ovpn /var/log/syslog" : http://pastie.org/private/i7ljwz8qidykztwai2nkuq . But I can't figure out what's wrong. Could someone help?
[16:02] <rbasak> BlueShark: 503 Service Unavailable when I look at that pastebin. Try another one - eg. paste.ubuntu.com?
[16:09] <megha> do vmware, kvm, qemu works flawlessly with ubuntu ?
[16:10] <megha> because in arch linux i am fed up of config things after each kernel upgrade.. :(
[16:10] <megha> is that the case with ubuntu too ?
[16:11] <yolanda> jdstrand, i verified SRU this morning, and updated the related bugs
[16:13] <rbasak> megha: KVM Just Works for me. I can't speak for VMware.
[16:13] <megha> rbasak: kvm works flawlessly ?
[16:13] <rbasak> megha: for me, yes.
[16:14] <megha> it good than...
[16:14] <jacobw> Nothing works flawlessly
[16:15] <megha> rbasak: what should be my ideal choice ubuntu server or ubuntu-desktop..
[16:15] <megha> jacobw: yeah you are right...
[16:15] <jacobw> It depends what issues you have with Arch that you don't want to have with Ubuntu
[16:15] <megha> but frequent probs is not a good sign...
[16:15] <jacobw> What's your use case?
[16:16] <megha> i am coding for Freebsd, so i need to run it in KVM  and qemu. as i would be testing for different platforms..
[16:17] <megha> jacobw: in arch linux a new kernel version in 15 days, and i have to config and install modules again. that's waste of time, when you have limited time left in your hand..
[16:17] <jacobw> OK, then you'll want to run a VM on your desktop
[16:17] <rbasak> For coding, I'd use desktop with libvirt and virt-manager. Though virt-manager doesn't anything close to the snapshot UI that VirtualBox has.
[16:18] <jacobw> Arch is rolling release whereas Ubuntu isn't, the breakages with Arch are a consequence of the rolling release scheme
[16:19] <jacobw> Lot's of developers use Vagrant
[16:19] <jacobw> * Lots
[16:20] <jacobw> https://github.com/xironix/freebsd-vagrant/blob/master/README.md
[16:24] <megha> jacobw: that link is really cool..
[16:24] <megha> should i switch to virtualbox from vmware.... as i never have used virtualbox before..
[16:29] <jcastro> ubuntu will still rebuild the kernel modules on upgrade
[16:29] <jcastro> it's automatic though
[16:29] <jcastro> it's about an extra minute when the package is upgraded on my machine
[16:33] <megha> jcastro: :)
[16:33] <jacobw> megha: Vagrant is pretty awesome
[16:34] <megha> yeah..
[16:35] <jdstrand> adam_g: arg, bug #1179626
[16:35] <jdstrand> adam_g: I'm trying to get keystone and nova out
[16:35] <adam_g> jdstrand, go for it. ill rebase on you, those were just accepted to proposed today
[16:37] <jdstrand> adam_g: ok, keystone already has it: 1166670
[16:37] <jdstrand> so that will only be nova
[16:38] <jdstrand> adam_g: you could get ahead of it and just apply https://github.com/openstack/nova/commit/a4fc0c800502338e4530cad910efb64a5483e1ea
[16:40] <adam_g> jdstrand, you're planning on releasing them as security updates based on whats in -updates currently, right?
[16:41] <jdstrand> adam_g: for raring, it is based on 1:2013.1-0ubuntu2
[16:42] <jdstrand> adam_g: for precise, I based keystone and nova on -proposed and am waiting on the packages to migrate since they are now verification-done
[16:43] <jdstrand> adam_g: so I'm suggesting you just apply https://github.com/openstack/nova/commit/a4fc0c800502338e4530cad910efb64a5483e1ea to 1:2013.1.1-0ubuntu1 and reupload
[16:44] <adam_g> jdstrand, right, we will. but that patch is going to go out as a security update in the meantime based on 1:2013.1-0ubuntu2?
[16:45] <jdstrand> adam_g: that was my plan, yes
[16:46] <jdstrand> adam_g: so I do my thing, you cherrypick that patch for -proposed and we're both good
[16:46] <adam_g> jdstrand, okay. ill rebase on your update when its out, to preserve changelog history and patch references
[16:46] <jdstrand> that'll work too
[16:46] <adam_g> jdstrand, thanks for keeping us posted (yesterday, too)
[16:50] <jdstrand> adam_g: np
[17:19] <jdstrand> adam_g: well, some goes for quantal: https://bugs.launchpad.net/ubuntu/+source/nova/+bug/1179707/comments/7
[17:20] <jdstrand> adam_g: (but it is both nova and keystone that need updates)
[17:22] <adam_g> jdstrand, k thanks
[17:24] <jdstrand> adam_g: yesterday I thought it was implied that me trying to get an update out for precise meant that quantal and raring were needed to. I'll try to be more explicit next time
[17:24] <jdstrand> (sorry)
[17:39] <Daviey> jdstrand: Don't worry, i already briefed adam_g with the expectation we'd need to rebase these recent ones
[17:39] <jdstrand> :)
[17:40] <Daviey> At least i thought i did..
[17:51] <mdeslaur> So, what's the status of md in precise...is it working ok now? I have two mirrored sata disks running 10.04, and was holding off upgrading...
[18:45] <K4k> Is there a way, perhaps through editing isolinux/gfxboot.cfg to remove the language prompt and install/try screen from the install CD?
[18:45] <sarnold> K4k: investigate preseed files
[18:54] <K4k> sarnold: That's what I'm working on now, I've created a preseed that automates _everything_ but the language select prompt before I select the preseed boot option for install
[18:55] <K4k> none of the locale or language d-i settings seem to affect it, only thing I've found so far is something mentioning hacking up gfxboot.inc but I'm not building this on an ubuntu or debian system so I don't have access to that tool.
[19:06] <mojtaba> Hi, Does anybody know how can I make a full backup of my server with rsnapshot? (I mean databases, files, emails, ...)
[19:08] <RoyK> mojtaba: I don't use rsnapshot, never had, but if it does an rdiff/rsync backup, it should work. but what database(s)?
[19:09] <mojtaba> RoyK: mysqls
[19:10] <mojtaba> RoyK: The problem with rsync is that I must use sudo
[19:10] <RoyK> mysql should be dumped regularly - backing up mysql data files may lead to inconcistency
[19:10] <RoyK> so if you dump the mysql dbs and backup the dumps, it shouldn't be much of an issue
[19:11] <RoyK> postgresql is better in most ways (tm)
[19:11] <mojtaba> RoyK: Actually I am pretty new to linux and this is my first time I am going to backup in this way.
[19:11] <mojtaba> Can you help me to figure it up.
[19:12] <RoyK> mojtaba: see mysqldump - dump the mysql databases somewhere and backup the dump files
[19:12] <RoyK> as in
[19:13] <RoyK> mysqldump --all-databases -uUSER -pPASSWORD > /var/backup/mysql-`date -I`.sql
[19:13] <RoyK> or something
[19:13] <RoyK> add that to cron
[19:16] <mojtaba> what does dump do exactly?
[19:16] <mojtaba> RoyK:
[19:17] <RoyK> mojtaba: it dumps the whole database(s) to SQL code so that it can be recreated easily - try it on a test db
[19:17] <K4k> meh, setting the isolinux.cfg timeout to 1 works well enough. I still get the prompt but it skips it faster than someone can react in order to change it.
[19:17] <mojtaba> RoyK: ok, thanks.
[19:17] <Black_Knight> roger
[19:18] <resno> RoyK: do you have to stop mysql or can you dump  and keep moving?
[19:19] <RoyK> no, it needs to be running
[19:19] <resno> lol
[19:20] <resno> wow, i asked that question
[19:20] <resno> thats not how i meant it
[19:20] <resno> ill justleave it there though
[19:21] <RoyK> you can't dump a mysql db without the DBMS running :P
[19:21] <resno> maybe i can the db binaries?
[19:21] <RoyK> no reason
[19:21] <RoyK> just dump the db while it's running
[19:21] <resno> no, im just being silly
[20:11] <bcessa> hi, just a doubt, can you recommend an available open source alternative to the landscape service? thnx
[21:29] <hallyn> stgraber: heh, you know, I *do* have an error_string in the lxc_container struct since day 1.  just never got around to using it yet :)
[21:31] <stgraber> hallyn: ;)
[21:32] <hallyn> anyway got shutdown and stop converted, will do destroy and create and send off
[21:34] <Rick28> Hey. I want to mount one folder from server A at server B. There should be read/write access just like a usual folder. What is the best protocol / FS for this? Are there better options than WebDAV?
[21:35] <sarnold> Rick28: investigate nfs and cifs
[21:35] <Rick28> Thanks sarnold.
[21:39] <Rick28> sarnold, What would you prefer? nfs or WebDAV for non sensitive big data transfer.
[21:40] <Rick28> over the net
[21:42] <sarnold> Rick28: I'd prefer NFS, it does a better job of providing posix-style filesystem gaurantees
[21:42] <Rick28> thanks
[21:42] <sarnold> Rick28: cifs if I had to work with windows-like systems too
[22:28] <dewdrop> Hi I am root, can I login to a user who doesn't have shell access?
[22:30] <dewdrop> sudo su username says shell access is not enabled for the user. There must  be a way root can login into a suer right
[22:30] <sarnold> dewdrop: if 'sudo -u name -s' doesn't work, 'sudo -u name bash' should work..
[22:31] <ScottK> sudo -i then su name should work too.
[22:31] <dewdrop> sarnold: thanks, 'sudo -u name -s' works
[22:56]  * fortmac is away: I'm busy
[22:58] <nsahoo> hi. /boot ran out of space. I tried to remove the old kernels using dpkg directly. However, now I am getting some dependency error and can't fix it.
[22:59] <nsahoo> it's asking me to run apt-get -f install, which fails saying, "dpkg: dependency problems prevent configuration of linux-server"
[23:00] <sarnold> nsahoo: when /boot is full, I think removing one or two kernels by hand _before_ removing them by dpkg is the best approach..
[23:01] <nsahoo> sarnold: after removing using dpkg, i freed some space. Now it's failing because of some dependency issues. Let me post a paste bin link
[23:02] <nsahoo> here is the paste bin link
[23:02] <nsahoo> http://pastebin.com/LRQ2QNwt
[23:03] <nsahoo> some more information : http://pastebin.com/Nn2ELaMP
[23:06] <jdstrand> adam_g: fyi, nova and keystone published for precise-raring
[23:06]  * jdstrand -> out
[23:48] <GrueMaster> nsahoo: Have you tried running "sudo dpkg --configure -a" ?  It might help to fix this.