[00:44] Is it true that LXC containers don't have separate users? [00:46] monokrome: somewhat true; the kernel provides a /proc/pid/... file that the namespace owner can use to remap UIDs 'inside' the container to UIDs 'outside' the container [00:47] monokrome: here's a patch series for the shadow suite of utilities to make this mapping operation easier for users: http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/2013-January/009552.html [00:47] Has there been a policy change in samba for server 12.04, I am finding that samba users who are members of a group are creating folders with group write permission turned off. This was not the case in 10.04 [00:51] sarnold: Thanks [00:55] fluvvell, that's set with the create mask setting [00:55] not sure if it has changed, but all you need to do is set it [00:56] qman__, I've only upgraded from 10.04 to 12.04, it was already set. Samba is not obeying [01:01] fluvvell, that's odd, I haven't run into that problem, have you validated the config file with testparm? [01:02] this might also be helpful: http://lists.samba.org/archive/samba/2010-August/157630.html [01:23] qman__, yes validated. Thanks but the link points to unix extensions and force modes which are not present in my smb.conf. I've been using samba in servers since about 2001 but its always good to talk to someone else who uses it. [01:24] fluvvell, unix extensions may be on by default, running you into this problem (and may not have been in 10.04) [01:24] I don't know for sure and I can't find good info with a quick search, but it's worth a test [01:25] that's really my only idea on the matter, nothing else really fits [01:26] if that isn't it, maybe strace or ltrace samba when a client creates a directory [01:26] just to get an idea of the steps it is taking.. [01:26] if you can do the same on 10.04 LTS also, all the better [01:28] fluvvell: was your 10.04 LTS install relying upon the bsdgroups mount option and matching directory permissions? [01:38] sarnold, awesome thanks thats something I can do. [01:39] qman__, thanks - Its a good point, as I always carry over my old smb.conf file, I've not looked at what is in the default one (usually contains doc references) [02:50] I have setup sshd_config with publickey / private key setup and have authorized keys in remote linux terminal which is able to login. But when I connect using putty in windows, I am able to login to linux via ssh without passphrase [02:51] Looks like somewhere either I have stored keys for windows putty or public/private key auth is not working as expected, some configuration seems to be missing [02:53] you haven't stated which is not working [02:55] qman_: From my linux terminal to remote system I am able to work but why is it working from putty in windows as I think I haven't stored keys in windows (its been long time, I might have stored but I don't recollect. Any way to confirm that?). [02:56] that depends on what software you have installed on windows; pageant is putty's key manager [02:56] qman__: if pub/pri keys are used for ssh, how can I confirm it? [02:57] you can tail /var/log/auth.log to see who authenticated and when, and whether they used key or password authentication [02:57] qman__: pagent doesn't have keys as I checked just now [02:57] example from one of my servers: Jun 18 22:44:37 yoko sshd[3307]: Accepted publickey for ryan from 66.188.36.22 port 51807 ssh2 [02:59] qman__:debug1: PAM: password authentication accepted for user1 [02:59] qman__: debug1: PAM: password authentication accepted for tiger [02:59] so it's accepting password logins [03:00] qman__: that means I need to say "no" to pam authentication in sshd_config ? [03:00] no [03:00] Ahoy. [03:01] it means you didn't present a key, so it asked you for a password, and you entered one [03:01] sshd is configured out of the box to support both key and password authentication [03:01] all you have to do is set up the key files [03:01] qman__: I want login based on keys not password [03:02] qman__: I have keys setup [03:02] to present the key from windows, you need a key manager such as pageant with your private key loaded [03:03] to present the key from linux, you need to have your key in ~/.ssh/id_rsa or to specify it with the -i option [03:04] if it's accepting passwordless SSH connections without your key, you probably broke pam [03:05] YIKES, scary. [03:05] which is a Very Bad Thing (tm) [03:07] qman__: I had just updated 10.04 LTS to 12.04 LTS [03:20] Is there a way to use ufw to route requests between IP addresses [03:20] IE, if I receive a request on 127.0.0.1 on port 22, I want it to go to 127.0.10.4 on port 2396 [03:21] I can do this with iptables, but ufw is probably the right way to do it if it's a supported usecase [03:22] it's not as far as I know, ufw only supports the more basic functionality required by most users [03:22] you can safely add a script to add that iptables rule post-ufw [03:22] since ufw is just an iptables wrapper [03:29] okay thanks :} [03:35] qman__: I find no difference when I make "UsePAM" to "no" from "yes" . [03:36] vedic, you should not change that setting [03:36] qman__: ok [03:36] it has nothing to do with setting up key authentication [03:36] qman__: ok [03:36] you do not need to make any changes at all to the default sshd_config to use key authentication [03:38] you only need to create the keys, put them in the right places, and have the permissions set correctly [03:38] ssh-copy-id is a tool designed specifically to make that very easy [03:38] hi, tomcat clustering on ubuntu 10.04 using mod_jk connector. pls help on this. [03:39] qman__: ok [03:56] qman__: yea, I have disabled password authentication. I only want the valid private key holders should login [03:57] qman__: I think its much safer and will stand against brute force attacks [03:57] that's a fine configuration, just making sure it's what you intended [05:45] hi all [05:46] what is the opensource software on sourceforge to check bill payment which is paid or unpaid or due date or underprocess or something like that [05:46] ? === Jikai is now known as Jikan === marlinc|away is now known as marlinc === DaIRCKing is now known as GTAXL === marlinc is now known as marlinc|away === smb` is now known as smb [08:02] jamespage: hey, have you seen [openstack-dev] openvswitch induced kernel panic ? [08:39] Daviey, looking now === exekias_ is now known as exekias [10:46] I'm trying to install exim4 on my Ubuntu 12 server so I can use PHP's mail() but when I do 'dpkg -s exim4' the shell replies with 'Package `exim4' is not installed and no info is available.' even though I just performed 'sudo apt-get update' [10:46] apt-cache search -n exim [10:47] any result? [10:47] 'exim4 - metapackage to ease Exim MTA (v4) installation' [10:47] among others [10:47] apt-get install exim4 --simulate [10:47] is that like a pretend? [10:47] kinda [10:47] I normally run gentoo and not ubuntu :s [10:47] simulate/dry/noop [10:48] eh me too, but at work it's debian/ubuntu stuff :D [10:48] I'm more of an Arch user [10:49] ok, looks like I can install exim4 just fine, but.. then why did dpkg say it doesn't exist? don't they share the same package list? [10:49] I might be wrong [10:50] Hi guys [10:50] but dpkg might only search the installed packages index [10:50] Trying to set up amazon SES on sendmail as a relay [10:50] you'll probably see it with dpkg -s after you installed it [10:50] ah ok [10:50] works for 95% of addresses but I sometimes get "DSN: Service unavailable [10:50] " [10:51] does anyone know how I can further diagnose what is causing that? [10:51] or what even DSN refers to? [10:51] 'delivery status notification'? [10:55] I assume DNS means Domain Name System [10:56] its DSN [10:56] not DNS [10:56] oh, my mistake [10:56] maybe the programmer who wrote the message was dyslectic? ;D [10:56] it's sendmail [10:57] it's nearly 30 years old! [10:57] i would of guessed someone would of fixed it in that space of time [10:57] possibly === Will_ is now known as Guest92410 [12:07] thanks again spidernik84, seems I got it working [12:07] nilli, anytime :) [12:28] Anyone experienced with unattended-upgrades? I'm having troubles with a fresh ubuntu 12.04 server install and unattended-upgrades in that email results come as a .dat file rather than text in the body: http://paste.ubuntu.com/5780235/ I followed steps in https://help.ubuntu.com/12.04/serverguide/automatic-updates.html [12:44] Any ideas how to get a report of 404s on my server? awstats seems a pain to set up. [12:50] hi guys I just want to know how I would be able to set 50mb of web space for each customer while they are in home directory? === wedgwood_away is now known as wedgwood [13:05] Pupeno: check the logs [13:11] i'm looking to setup a dns server for routing our domains and the like. are there any considerations i should make in setting this up? [13:27] RoyK: what? [13:28] RoyK: yeah, I'll be analyzing the logs, but I'd like to re-use some tool instead of writing my own for that. === HappyLoaf-AFK is now known as HappyLoaf [13:31] Pupeno: like syslog-ng? [13:31] greylog? [13:32] resno: no, I'm looking for something like awstats, that can give us reports of what's going on. [13:33] specially web stats? [13:33] or just logs in genral? [13:33] just web. [13:33] ah ok [13:40] Anyone experienced with unattended-upgrades? I'm having troubles with a fresh ubuntu 12.04 server install and unattended-upgrades in that email results come as a .dat file rather than text in the body: http://paste.ubuntu.com/5780235/ I followed steps in https://help.ubuntu.com/12.04/serverguide/automatic-updates.html [13:54] jamespage: https://code.launchpad.net/~zulcss/ceilometer/ceilometer-fbfs-jun17/+merge/170367 [14:04] zul, still alot of test failure in ceilometer - are we going to fix those up? [14:05] jamespage: we have to [14:05] jamespage: ill look after i get quantum working in the ppas [14:05] zul, thanks [14:05] zul, hopefully will have a bit more time in the rest of the week to help with this stuff [14:05] zul, call me review monkey at least for the next three days! [14:05] jamespage: no worries [14:06] does anybody know what I can do [14:06] TimRe, use disk quota [14:06] ok [14:08] TimRe, I can't see any official docs but this is linked from askubuntu.com: http://www.thegeekstuff.com/2010/07/disk-quota/ [15:24] zul, jamespage - what is the current status of Havana in Saucy? [15:25] Daivey: havana1 is in saucy, quantum ftbfs in the staging for the CA due to udev issues which i have fixed locally and will be uploading a new version of quantum that fixes the testsuite shortly [15:25] zul: today? [15:25] today [15:28] zul: super, thanks [15:28] zul: Are you preparing a UCA set of uploads? [15:30] Daivey: uploads are pending testing and quantum building [15:33] zul: In staging? [15:33] yeah [15:33] well no in the ppa [15:33] so staging yes [15:33] gah === marlinc|away is now known as marlinc [15:59] howdy. I have an ubuntu desktop and server both running precise. I have set both eth0 on the machines, linked via an ethernet cable, to 10.42.0.x, and can access samba shares on the server (my primary use for it) and ssh into it. However, I cannot get the internet fully on the said server; while I can ping 8.8.8.8 I *cannot* apt-get update on it. I believe I need to set up the dns server right, but do not know how to do it via [16:02] I *can*, however, telnet into my router from within a ssh session to the server. [16:12] ah, nevermind. by editing /etc/network/interfaces I was able to set it up properly :D [17:05] zul, jamespage http://people.canonical.com/~agandelman/ca/grizzly/2013.1.2/ [17:05] Daviey, ^ [17:07] adam_g_: +1 [17:08] adam_g_: https://code.launchpad.net/~zulcss/quantum/quantum-b1-ubuntu2/+merge/170403 [17:10] zul, why so many skipped tests? [17:10] adam_g_: udev issues in the ppas and they just dont build properly while in a pbuilder/schroot [17:10] zul, need these for stuff to work on precise cloud archive: https://code.launchpad.net/~gandelman-a/ubuntu/saucy/cinder/stevedore/+merge/170364 + https://code.launchpad.net/~gandelman-a/ubuntu/saucy/nova/pbr_d2to1_versions/+merge/170365 [17:12] adam_g_: you have a merge conflict in the debian/changelog [17:12] zul, can you add something to the changelog stating thats why there are more being skipped? [17:12] zul, ya, updating that now [17:12] adam_g_: Sure [17:14] adam_g_: without those fixes does the stuff in the CA work? [17:14] adam_g_: updated changelog [17:14] zul, no, it pulls in versions of those dependencies from the main archive [17:14] zul, or i should say, fails if it has done that [17:15] adam_g_: ok im going to upload those then as well with quantum to saucy and then to the ppa [17:15] if that sounds kosher to you [17:26] zul, http://people.canonical.com/~agandelman/ca/havana/python-pbr_0.5.16-0ubuntu1~cloud0/ [17:26] adam_g_: +1 [17:26] zul, http://status.qa.ubuntu.com/reports/ubuntu-server/cloud-archive/havana_versions.html we need to get -staging there green. there are probably other dependencies need updating or they'll cause FTFBS. [17:28] adam_g_: k ill do it [17:29] adam_g_: did you push nova yet? [17:29] zul, no [17:29] adam_g_: can you? [17:31] zul, sure, ill push your 1 branch if you push my 2 branches :) [17:31] adam_g_: i already pushed my branches [17:33] zul, done [17:33] adam_g_: thanks === niemeyer__ is now known as niemeyer [17:57] adam_g_: https://code.launchpad.net/~zulcss/nova/nova-b1-ubuntu2/+merge/170413 and https://code.launchpad.net/~zulcss/cinder/cinder-b1-ubuntu2/+merge/170412 [17:59] zul, nova (1:2013.2~b1-0ubuntu1) [17:59] zul, did you not 'dch -i' ? === Tzunamii_ is now known as Tzunamii [18:00] adam_g_: doh good catch fixed now === LordOfTime is now known as LordOfTime|EC2 [18:25] Daviey, jamespage 2013.1.2 built in grizzly-staging ready to be synced out to grizzly-proposed === robawt is now known as stabby_fortuna === stabby_fortuna is now known as robawt [19:07] adam_g_: super, thanks [19:16] does anybody here ever tried drupal 7 === kees_ is now known as kees [19:35] adam_g_: http://people.canonical.com/~chucks/ca/ [19:45] zul, that all looks good with the exception of python-wsme [19:45] adam_g_: whats wrong with wsme? [19:47] zul, the precise rebuild in havana-staging is python-wsme - 0.5b2-2ubuntu2. you bumped the $ubuntu_version + 1 when it was uploaded instead of $ubuntu_vers~cloud0 [19:48] adam_g_: ok gimme a sec [19:49] zul, since it hasn't moved out of staging, it would be cool if we could wipe it entirely from the PPA and upload an correctly older versioned package (the python-wsme_0.5b2-2ubuntu1~cloud0 you're proposing). but i dont know if thats possible [19:49] adam_g_: should be [19:50] zul, i dont know. the stuff you deleted from the trunk PPA were hanging around in a deleted state and causing uploads to get rejected [19:50] (because what i was uploading was <= what is in PPA but deleted) [19:52] adam_g_ / zul: PPA's allow you to delete and upload a lower version, or higher.. just not identical .. (which is why we increment the ~cloudX) [19:52] ok cool [19:53] zul, if we can delete whats in the PPA and replace with your new package, should be good [19:53] adam_g_: Things get more complicated if they hit the UCA [19:53] Daviey, yeah.. we should be good tho, it hasn't synced out [19:54] super [19:55] adam_g_: ill add cinder, nova, and keystone as well === Gasseus is now known as Rallias === yofel_ is now known as yofel [20:26] adam_g_: http://people.canonical.com/~chucks/ca/{nova,cinder,quantum} as well [20:30] zul, lgtm [20:30] adam_g_: thanks still just waiting for wsme to build [20:31] zul, where? [20:31] adam_g_: in saucy [20:32] zul, i dont understand. you did a new saucy upload into ubuntu? [20:33] adam_g_: did a new python-wsme upload into ubuntu [20:33] zul, what version? [20:33] ubuntu2 [20:33] zul, what for? [20:34] erm.... [20:34] Question: I have RAID1 on a server with Ubuntu 12.04 LTS. Just checked `cat /proc/mdstat` and got `md1 : active raid1 sda2[0] sdb2[1](F) 975653696 blocks super 1.2 [2/1] [U_]`. It means I lost 1 disk in my RAID. How can I repair it? [20:34] now im seriously confused [20:34] zul, i thought 0.5b2-2ubuntu1~cloud0 is proposed to into the CA as a precise rebuild from saucy? 0.5b2-2ubuntu1 is what is in saucy atm [20:35] 0.5b2-2ubuntu2 is in cloud archive as a mistake [20:35] adam_g_: damn [20:35] eg, it should have never gotten 0.5b2-2ubuntu2. it should have been 0.5b2-2ubuntu1~cloud0 when it was uploaded there may 30th [20:36] yeah [20:36] wait [20:36] what did you upload to ubuntu? [20:37] http://paste.ubuntu.com/5781635/ [20:37] oh jeez [20:37] zul, you might want to get someone to reject whats in saucy-proposed [20:37] im going to upload ubuntu3 because there isnt any testsuite in there as well [20:38] zul, ok [20:38] also its missing deps on six and webob as well [20:38] zul, sorry i thought the ubuntu2 in saucy-proposed was the cloud archive rebuild [20:38] adam_g_: nope [20:39] adam_g_: are you going to be around later tonight? [20:39] zul, if you have TODOs that would get python-wsme bumped higher than 2ubuntu2, cool. the havana-staging pocket is okay as-is until then, the bad versioning just screws with the report [20:39] zul, ya [20:39] adam_g_: ok ill need a +1 fro it later then [20:40] zul, once the 0ubuntu2 moves from saucy-proposed the report will show green, but it'll be lying [20:40] yeah ill fix it up [21:11] Is there a command that would show me the brand and memory info of the RAM modules installed in my machine? lshw and cat /proc/meminfo? [21:12] GH0: dmidecode [21:15] sarnold, dmidecode doesn't appear to list the product brand of the meemory modules. [21:15] GH0: aw nuts :( it got mine, but I'm on bog-standard consumer gear.. === Ursinha is now known as Ursinha-afk [21:18] Well, this is an older motherboard (Crosshair II) === Ursinha-afk is now known as Ursinha [21:21] GH0: or lshw [21:21] I tried lshw too, it doesn't list the memory brand. [21:22] It just shows this under the description for all four banks: description: DIMM DDR2 800 MHz (1.2 ns) [21:24] Under product and vendor, it lists "None" [21:25] well there you go, it wasn't made and it wasn't sold :) [21:25] GH0: sorry, I'm afraid you're just goign to have to open it up :( [21:26] :( [21:26] So much of a pain to do that [21:40] Or, I can just go back and look through order records. :P [21:41] you must have better organization than me :) [21:41] granted, I just buy all my memory from crucial because "it worked last time" [21:41] Nope, considering it took me this much time to find it. [21:41] :D [21:46] Question: What brand do you recommend for 1TB server SATA drive? [21:47] sarnold: +1 for Crucial. [21:49] ScottK: nice to hear others have the same experience :) [21:49] Both for quality products and customer service. [22:00] * keithzg hates, hates, hates Windows and the damn "Master Browser" election nonsense. No matter how high "os level" is set in smb.conf, still announced as OS version 4 minor 9, which loses to Windows 7 hosts and their version 6. Arghhh. === justizin_ is now known as justizin === Ursinha is now known as Ursinha-afk === Ursinha-afk is now known as Ursinha === PriceChild is now known as Pricey === wedgwood is now known as wedgwood_away [23:19] Is there a way to see if a box is ubuntu server or desktop easily? [23:19] Something with uname, I'd think [23:20] try cat /etc/issue [23:20] tried that [23:20] Ubuntu 12.04.2 LTS \n \l [23:21] uname -a shows kernel info [23:21] Linux ubuntu 3.5.0-23-generic #35~precise1-Ubuntu SMP Fri Jan 25 17:13:26 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux [23:21] Doesn't seem to show anything server-specific here [23:22] you accessing the box via ssh or something? [23:22] yep [23:22] My shell script needs to do something different when server instead of desktop [23:23] ubuntu server does not provide GUI, so maybe search for installed packages that use a GUI and come by default with ubuntu desktop? [23:23] I mean, I can do `which xinit` or something [23:23] like unity or firefox [23:23] but I was hoping for something more concrete [23:23] If X is isntalled, it's not a server. [23:23] By definition. [23:24] ScottK: Yes, but this script also needs to support Arch [23:24] where that isn't true [23:24] I think my best thing is just to specify in the command line what role the box is [23:24] until 10.04 kernels where separate so you could do uname-a and get 2.6.X-server, but now they all use the same kernel [23:24] Yeah, I had thought it worked like that [23:25] well you can check for running services also [23:25] servers usually don't have dhcp [23:25] * ScottK doesn't know what a *nix server is that has X. It's a bit of a non-sequitor. [23:25] some do, of course, but if the address is assigned via dhcp, it's more likely a workstation [23:25] if you don't like/want the package search approach [23:25] sarnold: or a cloud instance [23:25] ScottK: Well, some have x libs [23:26] lifeless: hrm, good point. [23:26] Yes, some libs, but not the actual X server. [23:26] ScottK: edubuntu servers :> [23:26] network-manager then? :) [23:26] either way, I understand that point - but this script runs before the server is configured. It configures it. [23:26] ScottK: e.g. Xvnc [23:26] So, on Arch a desktop doesn't have X at that time either [23:26] lifeless: I suppose. [23:26] I thought maybe there was somewhere where Linux conventionally said server vs desktop, but now realize that makes no sense :} === MasterZuFu|away is now known as MasterZuFu [23:27] sarnold: so network-manager on servers makes me very nervous ;) [23:27] But there is a CLI U/I for it, so it could be done. [23:27] network-manager on anything makes me nervous :( [23:27] lifeless: there we go :) hehe [23:28] ifupdown 4 eva. [23:28] * ScottK wishes you could tell by if it had dbus, but we've crossed that bridge. [23:28] if you want to be decadant about it, sure :) [23:28] to me 'workstation' is 'thing users sit in front of to do their productivity' [23:28] and 'server' is 'thing that offers services over the network for users to use' [23:28] these are not mutually exclusive [23:30] right [23:31] I tend to think in terms of, there's a GUI if I want one or not, but that's not correct either. [23:31] why I got kicked ? G55321 has quit (Excess Flood) [23:32] Excess flood is automatic. No one here will know. [23:33] the only reason to have a GUI on a server its if you don't know how to do it from command line [23:33] or you have admin tools that fail to work over the network, which is rare but I've fun into it [23:33] G55321: excess flood represents the size of the server's send queue to you, it can often happen when freenode loses a server and a few thousand people in your channels all quit at once... you can get dinged for having too-high a send queue as a result. [23:34] G55321: but I didn't see that huge pile of quits, so I'm not sure what happened to you :) [23:34] thanks, was just curious, tought I did something wrong that I wasn't aware of [23:35] G55321: you might have, if you ran a series of commands that generated too much output... but there's usually enough rate-limiting in place these days to keep that from happening easily. [23:36] adam_g_: python-wsme updated in http://people.canonical.com/~chucks/ca/python-wsme [23:38] zul, looks okay but lets wait till it gets promoted out of saucy-proposed [23:38] adam_g_: ack