[04:37] What is the best way to align partitions across multiple disks? Is there a way to do it that doesn't involve creating partitions on the other disks just as spacers? My problem is, I'll have a raid array but not everything on this systeam can be in a raid array (the uefi system partition for instance). I still want the partitions in the raid array to lign up on the physical platters across all disks though. [04:53] I guess you can copy the partition of the disk you want to be the source to the other targets, assuming they are exactly the same [04:54] and only add to the raid the ones you need, excluding those that can't be RAIDed [04:55] you can use "sfdisk -d /dev/sda | sfdisk /dev/sdb" to copy the partition form sda to sdb [04:56] ClientAlive: hope this helps [04:57] thx man [04:57] it does :) [04:57] Anyone aware of an encryption algorithm stronger than ECDSA [05:01] Anyone aware of an encryption algorithm stronger than Elliptic Curve Digital Signature Algorithm? [05:02] Specifically ECDSA 521 [05:15] I am attempting to deploy Jabber has anyone done it on Ubuntu 12.04? [06:10] hi, I was wondering what the justifications for forking apache are [06:12] some folks at httpd seem to be appalled by this [06:23] madprops: what fork are you refering to? [06:26] andol, http://wiki.apache.org/httpd/DebianDeb0rkification [06:28] Wouldn't call that so much a fork, as providing a different set of default configuration. [06:31] My personal opinion is that I do appreciate this split into include files, but agree with the wiki page on some not-optimal default. From what I have understood that is at least partly done in regards to backward compability, not breaking upgrades for packages which depend on Apache2, etc [07:13] Hi, I am installing postfix as a mailserver on a vps and it is working with ufw disabled. But when I enable it it blocks port 587 even when in the status it allows udp and tcp from Anywhere [07:16] balachmar: can you pastebin your ufw status output somewhere? [07:16] balachmar: have you manually added any rules that would prevent it from working? [07:17] balachmar: does netstat -tnlp | grep :587 show it listening? is it listening on the interfaces you expect? [07:17] s/interfaces/addresses/ [07:18] @sarnold: http://pastebin.com/uwV47Dr6 for ufw status verbose [07:18] balachmar: hrm, I see an explicit DENY on 25; how are you testing that 587 doesn't work? [07:19] sarnold: I am using thunderbird. and it works fine with ufw disabled [07:20] sarnold: iptables output: http://pastebin.com/BKSjcCzd [07:20] oof, I'm once again reminded that I need to study iptables more. :) [07:21] sarnold: and netstat: http://pastebin.com/rZNyT7yx [07:21] balachmar: and you're confident thunderbird isnt using 25? [07:21] sarnold: yes, that was what I was thinking as well, with all that chaining, I am a bit abffled [07:22] sarnold: well, it is telling me it uses 587 with STARTTLS [07:22] But I can allow 25 for now [07:22] balachmar: can you try something like openssl s_client -connect mailserver.foo.example.com:587 ? I think that should work.. [07:23] sarnold: even with 25 open (according to ufw) no luck [07:24] openssl s_client -connect mail.wligtenberg.nl:587 [07:24] CONNECTED(00000003) [07:24] mmm, I could have ubfoscated the server name there :) [07:24] CONNECTED is actually encouraging.. [07:24] 16 2272 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:587 [07:25] that shows some 16 packets accepted through to port 587, right? [07:25] (line 73) [07:26] sarnold: http://pastebin.com/695FdJc7 full thing from openssl [07:26] balachmar: can you check the postfix logs? thjere might be something else oging on.. [07:28] balachmar: aha, add a -starttls smtp to that openssl command line; I just got a nice SMTP session with your server [07:29] @sarnold: you were able to send mail? [07:36] @sarnold: I don't know :) [07:37] balachmar: hehe :) [07:37] @sarnold: aah I know why it whines about that [07:37] balachmar: well, there's lots of reasons why it might fail to relay.. hopefully the logs say _why_ [07:37] @sarnold: you need to login to do that [07:37] @sarnold: do you know how I can login using the openssl command? === mlocher_ is now known as mlocher === irv_ is now known as irv [07:38] balachmar: oh man, it looks complicated :) http://tools.ietf.org/html/rfc2554 [07:38] maybe I can use this: http://www.ndchost.com/wiki/mail/test-smtp-auth-telnet [07:39] balachmar: ooh. worth a shot. [07:44] @sarnold: ok, authenticated :) [07:46] @sarnold: and seemingly able to send an e-mail [07:46] balachmar: nice :) can you send... [07:46] woo. [07:46] @sarnold: but it didn't arrive yet... [07:48] @sarnold: mmm, it didn't work [07:49] So, as soon as I turn off ufw, I can send e-mail [07:49] sarnold: I think it is actually about sending it, not receiving the task of sending mail [07:50] sarnold: yes, it is unable to resolve google.com hostname [07:50] sarnold: I can't ping on that machine either when I turn on ufw [07:52] sarnold: I just don't know which ports are required for that [07:52] balachmar: ping is different, that uses icmp rather than tcp or udp [07:53] @sarnold, ok and which port is used for DNS? [07:53] balachmar: resolving google.com would require probably allowing input from port 53 back to your server on any ephemeral port... [07:53] balachmar: (the request is probably made from an ephemeral port rather than a well-known port..) [07:54] balachmar: .. is there a connection tracking module required / available for dns? [07:54] sarnold: don't know [07:55] sarnold: I know that ping google.com doesn't work as soon as I enable ufw and that postfix also complains about not knowing where to send the mail [07:55] balachmar: hrm, I don't see one on my system anyway.. [07:56] balachmar: 'ufw allow proto icmp' would probably fix that... [07:56] (fix ping, that is. dunno about the rest. :) [07:57] sarnold: ERROR: Need 'to' or 'from' clause ... (I forgot to mention this thing is running 8.04...) [07:57] balachmar: aha, my shiny 13.04 laptop has them both optional :) [07:58] .. though maybe that's just a shotrhand in the manpage. [07:58] sarnold: and since it is a vps on openvz upgrading I cannot upgrade it [07:58] balachmar: maybe 'to 0.0.0.0'? [08:00] sarnold:ERROR: Unsupported protocol 'icmp' [08:01] balachmar: try 'proto 1' ? (I found it via grep icmp /etc/protocols) [08:03] sarnold:ERROR: Unsupported protocol '1' [08:03] :) [08:07] sarnold: Aah, there seem to be issues with ufw using non stock ubuntu kernels (which vps companies do) [08:07] sarnold: so, fixing that first [08:28] balachmar: oooof. :/ it's bedtime for me, I hope you get something working to your liking. :) [08:28] balachmar: if you wind up fixing it, I'd be curious to know what the end result is. :) good luck [08:42] sarnold: I will let you know via a pm === acrocity_ is now known as acrocity [10:27] <_dreamer> Hello, I am installing a webserver with apache mysql and php. I ran into some trouble while trying to connect to my mysql server (from a local machine that's not the server). I get the Can't connect to [local] MySQL server error and I do not understand how to fix it even after reading this, http://dev.mysql.com/doc/refman/5.6/en/can-not-connect-to-server.html. Can anyone help me? [10:32] <_dreamer> Hello, I am installing a webserver with apache mysql and php. I ran into some trouble while trying to connect to my mysql server (from a local machine that's not the server). I get the Can't connect to [local] MySQL server error and I do not understand how to fix it even after reading this, http://dev.mysql.com/doc/refman/5.6/en/can-not-connect-to-server.html. Can anyone help me? [10:36] <_dreamer> nvm, gonna use phpmyadmin... [11:57] Hi, I'm installing my own mail server, and I can send mail, and connect to imap. But I don't receive mails that I send from my gmail account to my new mail address. [11:57] I am not sure how I can check that [12:06] balachmar: do you have an MX record pointing to the mail server you set up? [12:07] e_t_: yes, I now found this website that allowed me to check to which server it is pointing [12:07] e_t_: http://mxtoolbox.com/SuperTool.aspx and that was fine [12:07] e_t_: however when I did an smtp check, it failed. Now I allow port 25 as well, I didn't know if that was required [12:08] e_t_: and that seemed to fix it :) I didn't really want to open 25, because I am sending over ssl, but apparently I also need it to receive mails :D [12:09] Port 25 has to be open on a mail server. Otherwise, it's like welding your mailbox shut. [12:09] e_t_: yep, kind of got that now :D [13:39] hey guys [13:40] I've got an Ubuntu natty server, where all of my repositories are configured to use us.archive.ubuntu.com. When I issue an apt-get update, I get 404 Not Found on many of the configured repositories. [13:42] Should I fix up the repositories configuration some how or should I just go about doing a dist-upgrade? [13:45] personally I would upgrade, otherwise, look for a mirror that still holds that ancient release. [13:46] yeah I think I found a way [13:46] just convert the source.list file from us.archive.ubuntu.com to old-releases.ubuntu.com [13:46] should do it for the basic stuff [13:46] thanks though === highvolt1ge is now known as highvoltage [17:22] Greetings! I just upgraded my server from 10.04 LTS to 12.04 LTS and the newly-installed kernels will not boot. Specifically, I get dumped to a busybox shell. If I boot a kernel from 10.04, everything comes up fine. The funny thing is that if I am in the busybody shell, the root volume isn't mounted, but "mount /dev/md0 /root" works just fine. Any thoughts? [17:44] garrettkajmowicz, try creating/recreating /etc/mdadm/mdadm.conf [17:44] backing up any existing files of course [17:45] the 10.04 kernel may be doing autodetection that the 12.04 kernel isn't doing [17:48] qman__: I can buy that (working on the file now). However, simply running "mount /dev/md0 /root" works flawlessly once I'm in busybox - the RAID set has been automatically assembled. [17:52] qman__: I've checked the mdadm.conf file and updated it with a few bits. Next reboot (which will disable this connection) I will see if anything works better. [17:52] ok, just an idea [17:54] one other thing, check to make sure /boot didn't fill up [17:55] if it did you may have gotten partial/broken files on your new kernels or new initramfs files [18:19] Hello this may be the wrong place for this question so I am sorry in advanced. I have set up my own server and have configured the DNS to point to it when I arrive at the page the page displays webpagename.com but when I go to any link it shows my server name. Is doing a mod rewrite the best way to handle this or is their a better way to do this? [18:19] sorrry server IP not name [18:25] lenny__, that means you need to reconfigure your web application's settings [18:26] most web applications have a configuration file which has a setting for your site URL - where it is will depend on that application [18:30] ok so for instance this is a wordpress install I should be looking their? [18:31] I am trying to install roundcube, installed package form repos, but server/roundcube/installer/ doesn't exist [18:31] yes, wordpress should have a configuration file with a setting that is currently set to your server's IP, and that should be changed to your site name [18:31] ok thank you very much qman__ [18:32] Seem to recall that wordpress has that setting in the database? (Commonly modified from /wp-admin/) [18:33] I think wp-config.php should have it if not ill check the database. myserver is locked down to only allow shell access from my network though so I will check in an hour when I get back. === diplo_ is now known as diplo === yofel_ is now known as yofel === Ursinha is now known as Ursinha-afk === Ursinha-afk is now known as Ursinha === Ursinha is now known as Ursinha-afk === Ursinha-afk is now known as Ursinha === daker_ is now known as daker [23:31] anyone using vagrant / puppet / chef here? [23:31] I was thinking of provisioning using bash, and was wondering if someone had any luck with that? === unreal_ is now known as unreal [23:49] is there much difference between CentOS and Ubuntu Server when it comes to security? [23:52] yes, the two take different approaches on a number of issues [23:53] if you're really asking if one is more secure than the other though, the answer is no [23:56] security isn't about selecting one product over another, it's about strategy and behavior, you're only as strong as your weakest link