[00:05] ahs3: awesome, thanks [00:49] adam_g: fyi, https://launchpad.net/ubuntu/+source/nova/2012.2.3-0ubuntu2.2 [00:57] jdstrand, great, thank you [00:57] sure thing [01:46] Hey. Does anyone know how I can tell UFW to always allow anything that comes from localhost? [01:47] monokrome: try 'ufw allow from 127.0.0.1 to 127.0.0.1' [01:48] will [01:48] ufw allow 127.0.0.0 [01:48] allow the entire 127.0.0 network? [01:48] Technically those are all localhost, so that'd be best [01:49] 127.0.0.0/8 perhaps [01:50] rarely a need to deny anything from localhost [01:51] I'm not even sure if ufw blocks localhost [01:51] monokrome: try iptables -vnL [01:51] it shouldn't [01:51] RoyK: Everything is on 0.0.0.0 [01:52] So, unless localhost doesn't hit iptables then it does [01:52] I don't think localhost goes through iptables [01:53] okay [01:53] Thanks :) [01:53] the input chain is usually bound to a nic [01:53] and lo isn't really one [01:56] hmm [01:58] that is, ufw has an accept for all -i lo and -o lo [01:58] my bad [01:58] :} [01:58] I was pretty sure that lo was a virtual interface [01:58] so it looked like a devikce [01:58] device* [01:59] IE, `ip addr` shows it [02:01] it's virtual, but somewhat real [02:02] right... [02:02] There isn't a piece of hardware on your computer that it's using to make the connection is what I'ms aying [02:03] There's a virtual device in /dev/ that acts like it's a piece of hardware [02:03] but probably just funnels things through unix sockets or something similar === dannf` is now known as dannf [02:17] monokrome: network devices aren't in /dev [02:18] for som odd reason [04:03] When implementing an OpenLDAP server in an existing server infrastructure, is the general expectation that you will migrate existing local users to LDAP inetorgperson entries? [05:22] If I am configuring OpenLDAP on my already established server, ought I consider migrating local accounts to LDAP accounts? If so, what is the migration process? [05:46] Daviey, there's a new nova in queue for quantal-proposed (nova 2012.2.4-0ubuntu3) which is another rebase to include a new security update (which is a fix for a regression introduced in the last security update we rebased on) [05:47] * sarnold grabs a whiteboard to diagram that sentence.. [05:47] Daviey, that should trump whats in quantal-proposed for nova currently (ubuntu2). also, verification done on bug #1179626 [05:47] Launchpad bug 1179626 in quantum "Meta bug for tracking Openstack 2013.1.1 Stable Update" [Undecided,Fix committed] https://launchpad.net/bugs/1179626 [05:49] If I am implementing an OpenLDAP server into an existing single-server infrastructure, ought I consider migrating local user accounts to LDAP? There are only ~5 or so I care about, but I am uncertain how to cleanly migrate these, as each of these users have home directories and own files outside of their home, have certain server rights, etc. [05:49] (by "certain server rights" I really mean they are members of local groups conferring privileges such as access to sudo or ability to ssh in) [05:53] tohuw: find can help you find files owned by some userid, -exec chown to change the owner.. [05:54] tohuw: (a) the inconsistency would annoy me :) (b) I've heard it is sometimes useful to have local users in case the server goes down.. [05:54] sarnold: So, just remove the old user, create the new user in LDAP, and chown as needed? That feels too simple... [05:54] tohuw: you could probably keep the old user around until after chowned.. [05:54] Yeah, I'd definitely keep a local user in case slapd went banannas. [05:55] sarnold: even if they have the same name? [05:55] tohuw: heh, I spent a very confused few hours to find out that an ldap "sarnold" had a different userid than a local account "sarnold", and nfs didn't care about names... [05:57] sarnold: really? I was aware the uids would be different (I just finished reading about that), but the system lets you dupe usernames? That seems somewhat insane [05:57] Do new ldap accounts get a home directory and follow other useradd procedures when they are created? [05:58] tohuw: well, it was a decade back. perhaps things have improved. :) [06:01] sarnold: fair enough! :P I guess I could try it on my dev server... what's the worst that could happen? (famous last words) [06:01] tohuw: hehe [06:02] * tohuw has parted: all local accounts purged. Executing rm -rf /... [06:03] hehehe [06:05] Somewhat related: http://qntm.org/suicide [06:05] Okay, more tinkering with LDAP tomorrow. Bed time [06:05] thanks for the input, sarnold. [06:06] goood night, good luck tohuw :) sorry I didn't have concrete answers.. === smb` is now known as smb === airtonix_ is now known as airtonix === wedgwood_away is now known as wedgwood [08:27] hallyn_: smsoer, jamespage and myself are re-reviewing them all today [08:30] Daviey, morning [08:31] Daviey, post lunch review? [08:32] mornin' jamespage === histo_ is now known as histo [11:50] zul, I think we may need to upgrade ovs to 1.10.0 [11:50] backporting fixes for the 3.9 kernel to 1.9.0 is proving awkward (lots of code changes in the newer version) [11:50] giving it a test now. === wedgwood is now known as wedgwood_away [12:00] jamespage: ack [12:01] jamespage: im having problems with this can you have a look please http://10.189.74.7:8080/job/backport_package/118/console [12:02] zul, you can't backport twice [12:02] zul, as the checksum changed and reprepro rejects the inclusion [12:03] jamespage: yeah the problem is i already blew away the deb [12:03] same is happening in the PPA on upload [12:03] zul, how? [12:03] rm'ed it [12:07] zul, please 'man reprepro' in future [12:07] jamespage: yeah sorry about this [12:07] you have removed the deb but not the entries from the packages lists [12:15] zul, ok fixed [12:15] jamespage: cool thanks === himcesjf_ is now known as himcesjf [12:47] i have a binary program which uses a library that is in a different path [12:47] but when i use ldd i see the missing library but not the current path [12:48] how to see the path? [13:27] How am I supposed to disable the KDE Wallet service for a user if one doesn't exist in the Account Details page? http://i.imgur.com/Cdqm4N6.png I don't see anything about disabling the service via cli either. [13:30] * ogra_ wonders how that is server related [13:30] GH0, try asking in a kubuntu channel instead [13:31] hello, is here the right place to solve specific problems? in my case a crashed system/boot problem? [13:33] ogra_, I am on ubuntu-server and installed a slim-down copy of kde, but unfortunately that installed along with it. Which is why I thought to ask in here. I can ask there though. [13:33] after a fsck-repair-operation where some blocks and nodes changed wasnt my system able to boot. [13:33] GH0, i think your chances to get support for a GUI app are better over there, yes :) [13:33] before the grub-screen I got a short message "error: invalid environment block", then comes the grub-screen. [13:34] if I choose my default entry the boot process hangs up, if i choose recovery-mode the console says "Kernel panic - not syncing: Attempted to kill init!" [13:35] hm, seems to be the wrong place...sry, I'll ask in #ubuntu [13:35] jamespage: do you have some time to review heat/heatclient changes later this week? [13:36] zul, either today or next week [13:36] jamespage: next week it is then (i havent started it yet) === wedgwood_away is now known as wedgwood [14:17] zul, OK - I have a ovs 1.10.0 upload prepped and tested OK; I've pinged upstream for some verification that this is the best way forwards [14:18] zul, fwiw 1.10 drops support for the brcompat module - I think its a good thing todo this now rather than right on the LTS release next cycle [14:18] * jamespage goes for coffee [14:18] jamespage: cool [14:46] rbasak, hey - remind me again where your patch for mongodb 2.4.x is again [14:46] * jamespage <- brain fell out last week again [14:46] hm... in my zfs days, I learned a typical 7200rpm disk can deliver something like 120iops, but when I monitor my raid disks with iostat, I see far higher tps numbers than that [14:46] RoyK, read caching maybe? [14:47] or NCQ... [14:47] not much read caching on rebuilding a raid, last I checked [14:49] <_ruben> 120iops is max fully random .. linear max is much higher [14:49] <_ruben> less seeking, less latency, more stuff done in same amount of time [14:50] jamespage: did your brain get slippery when it fell out? [14:50] hello there! Is there a way to see actual cloudinit errors; all I get to see now is: http://paste.openstack.org/show/37866/ and that does not help :( [16:29] someone using bitcoin? [16:34] hi :) [16:37] I have a little question: I use apache2 and created a subdomain via virtual hosts. after this i put some content to the subdomain. after this I uploaded a .htacces file. now i cant access die subdomain anymore. have i to configure the apache service? [16:37] die = the [16:48] BlackBoxCoder: did you reload the apache configuration? [16:49] ohhh i dont think so [16:49] one second please [16:52] apache config shouldn't matter for an .htaccess file (two s-es). but you could check the apache error log [16:53] RoyK: .. but if the config with the new subdomain was never loaded, it'll never even bother lookin for the .htmlaccess ... [16:53] err. yes. [16:53] me tip gud. [16:55] hi, in my server using dpkg --get-selections i see some x11proto-* packages, do i really need them? or how can i see if some daemon is using those dependences? [16:57] thanks for your help, i will have a look :) *thumbs up* [16:57] hXm: you can just apt-get purge those packages, it will complain if something else requires them [16:58] im scared, i wont break anything [16:59] i'll take a coke for this [16:59] hXm: .. of course, you might have installed something that requires them outside of the packaging system.. [16:59] hXm: (for example, I don't have any *x11*proto* packages installed on my laptop.) === dosaboy_ is now known as dosaboy [17:00] yes, i understand what you mean [17:00] i just unnistalled some packages and now i am not sure if thats related or not [17:00] i will just try [17:37] zul, http://people.canonical.com/~agandelman/ca/folsom/2012.2.4_rebase/nova_2012.2.4-0ubuntu3~cloud0/ [17:38] adam_g: +1 [17:48] zul, http://status.qa.ubuntu.com/reports/ubuntu-server/cloud-archive/havana_versions.html [17:48] zul, the CA pockets will remain empty till the ca havana pockets show up at http://ubuntu-cloud.archive.canonical.com/ubuntu/dists/precise-proposed/ and precise-updates [17:49] adam_g: cool thanks [17:49] zul, wait a minute, that report is wrong [17:50] ? [17:51] zul, wait, nevermind. its right, kinda. havan-staging is just mostly a snapshot of the grizzly staging PPA, so it looks wonky atm [17:51] heh ok === e_t__ is now known as e_t_ [17:59] adam_g/yolanda/jamespage/Daviey: always happy to share the pain https://code.launchpad.net/~zulcss/heat/heat-refresh-ubuntu-style/+merge/166337 === danjared_ is now known as danjared === wedgwood is now known as wedgwood_away [18:10] adam_g: python-keystoneclient 0.2.4 just got released can you have a look please? https://code.launchpad.net/~zulcss/python-keystoneclient/0.2.4/+merge/166343 [18:10] i have disabled ipv6 in sysctl.conf and ran sysctl -p, but there are still some tcp6 sockets alive [18:11] i did restart networking too [18:14] hXm: if you kill all the tasks with those sockets open, probably you can get to 0 open ipv6 sockets again, and stay that way [18:51] adam_g: ping https://code.launchpad.net/~zulcss/python-keystoneclient/0.2.4/+merge/166343 [18:51] zul, gettin there [18:51] k [19:05] Daviey, if you're still around, what was the motivation behind dropping the markdown dependency to begin with. re: https://bugs.launchpad.net/ubuntu/+source/cheetah/+bug/1183634 [19:05] Launchpad bug 1183634 in cheetah "cheetah pkg does not depend on markdown, but egg requires.txt does" [High,Triaged] [19:06] adam_g: I think it was just that during that cycle we were overwhelmed by MIR's, and at that time we didn't need MD support [19:08] adam_g: but now, removing the delta with Debian seems smarter.. i think. [19:09] Daviey, okay, i guess we can work around it in the meantime with an openstack patch [19:09] are ubuntu sharing options secure? [19:09] (while MIRs are in-flight) [19:09] like on ubuntu desktop [19:09] adam_g: yeah, interim patches sound smart TBH [19:09] Being able to get H-1 out is more pressing IMO === hXm is now known as HackeMate === HackeMate is now known as hxm === mikehale_ is now known as mikehale === FUF_ is now known as FUF