/srv/irclogs.ubuntu.com/2013/07/03/#ubuntu-server.txt

=== stoner is now known as Guest30554
=== three18t- is now known as three18ti
=== LordOfTime is now known as LordOfTime|EC2
=== daker_ is now known as daker
roastedhello friends01:46
roastedQuestion - using mysql as an example, when I install it, I get a password prompt. If I uninstall and reinstall, I get nothing. How do I 100% reinstall the package so I get a password prompt like the initial install?01:46
sarnoldroasted: try apt-get purge mysql-whatever before installing it01:46
sarnoldroasted: dpkg --remove removes most of the files, but leaves configuration files around. dpkg --purge removes the configuration files, too. apt-get purge uses the more forceful of the two methods..01:47
stevePage129for some reason my brand new VPS in which i havent installed or setup anything hands everytime apt-get install anything on UNPACKING. disk IO write times included in post (but they seem like they check out...) http://askubuntu.com/questions/315672/ubuntu-vps-hangs-constantly-when-unpacking-anything-apt-get-or-dpkg-hangs01:55
stevePage129any help would be greatly apprecaited01:55
stevePage129hangs*01:56
roastedsarnold: I did do a purge... but reinstalling and dpkg-reconfigure does nothing :/02:01
sarnoldstevePage129: your diskspeed test file is way too small, it might not have even hit disk yet...02:02
sarnoldstevePage129: also, the upacking and man-db operations work on thousands of small files, not one huge file -- perhaps the filesystem is mounted strictatime, and every little access dirties inodes...02:03
sarnoldroasted: oh. Maybe I mis-understood which password prompt. I assumed it was something specific to mysql's configuration .. is it the sudo password prompt?02:04
roastedsarnold: it's where it asks for the root mysql password 2x.02:04
sarnoldroasted: aw nuts, then I did understand :) but now I don't know.02:04
roastedsarnold: I nuked mysql thinking I'd want to use sqlite for owncloud, but then I found my mysql config I used before, so... I wanted to use that instead.02:05
sarnoldhehe02:05
roastedbut now when I try to fire up mysql-server it doesn't ask me for a password02:05
roastedtried apt-get remove, apt-get purge, apt-get autoremove, then reinstalled02:12
roastedno dice02:12
stevePage129sarnold: any suggestion as to a command, or a method of which i could use to, say, test the NFS which my VPS host is using, in order to test for issues and or bottle necks? im seriously having issues just getting the initial software (lamp, webmin, etc) setup for using my new VPS. the idea was to move from shared hosting to VPS to get better performance, not worse. this isnt normal for VPSs is it?02:13
sarnoldroasted: does /etc/mysql/my.cnf survive the apt-get purge mysql-whatever ?02:13
sarnoldroasted: note that /etc/mysql/my.cnf is owned by mysql-common, are you purging that package, too?02:13
sarnoldstevePage129: it depends heavily upon a -lot- of factors. amazon's micro tier has severely penalized IO; bursts go quickly, but sustained IO is heavily penalized. installing an OS on a micro instance can take forever.02:14
roastedsarnold: trying that now02:16
roastedsarnold: my.cnf isn't around after the purge02:17
roastedI assume at this point I should expect an install to work?02:17
sarnoldroasted: I'd hope so :)02:17
roastedah bingo!02:17
roastedyou rock02:17
sarnoldsorry it took me ages to notice the -common package.02:18
roastedha, all good02:18
roastedit's done :P02:18
sarnold:D02:18
sarnoldstevePage129: maybe soe cheap tests like timing: for i in `seq -w 1 10000` ; do echo $i > foo_${i} ; done   ... that'll generate a huge pile of tiny files...02:19
roastedsarnold: out of curiosity, how did you catch that -common was relevant?02:20
stevePage129sarnold: i suppose this is a little specific.. but have you ever heard of cinfu.com? i originally moved from GoDaddy's shared hosting becaused they were dropping my connections all the time when transferring files over 25 mb. now i have purchased a VPS, i am having trouble simply setting up the host operating systems software (IO issues?). i really dont have to get a dedicated server just to get something that responds grac02:20
stevePage129sarnold: trying that now02:20
stevePage129well, will look into those commands some02:20
sarnoldroasted: I ran 'apt-file search my.cnf" to find the full path to the file, and noticed then that the mysql-common package owned it02:21
roastedsarnold: next question would be how you knew my.cnf was relevant?02:21
sarnoldroasted: I figured that mysql probably stored the root password there..02:21
sarnoldstevePage129: irc has line length limits; you were cut off at "responds grac"02:21
sarnold.. which isn't a very graceful way for irc to respond. hehe. :)02:22
stevePage129sarnold: sorry about that, using some cheapskate client02:22
sarnoldstevePage129: hehehe02:22
stevePage129sarnold:  really dont have to get a dedicated server just to get something that responds gracefully do i? (you dont have to answer that ^.^)02:22
sarnoldstevePage129: I'd really hope vps is sufficient, it is the direction industry is headed..02:24
stevePage129sarnold: indeed. like for example, i ran sudo apt-get update/upgrade to satisfy several updates which SSH and ubuntu were complaining about. this took almost 2 hours, and i still do not know if it ever finished (machine went to sleep while i was napping connection was lost...)02:26
sarnoldstevePage129: oh jeeeeeeze02:26
sarnoldstevePage129: I'd say to install screen or tmux, but I'm afraid how long that would take02:26
stevePage129sarnold: will read more up on those now02:27
stevePage129host wanted to try moving me to another node, but i wanted to make sure there was nothing i could do first02:27
stevePage129if i cant get this working, im going to have to go crawling back to godaddy... lol02:28
sarnoldstevePage129: take them up on that offer. it ought to be quick..02:28
sarnoldstevePage129: okay, I signed back into my amazon control panel, created a new micro instance, installed 12.04.2 LTS onto it, and I'm timing an upgrade now...02:38
sarnoldstevePage129: real1m49.057s02:39
stevePage129sarnold: thank you, thank you02:39
stevePage129sarnold: ...02:39
sarnoldstevePage129: that was for 71 megabytes of downloads, 48 upgraded, 3 newly installed02:40
stevePage129yeah, something isnt right02:40
sarnoldstevePage129: that's an amazon US micro instance. (it went faster than I expected)02:40
sarnoldstevePage129: so make sure what you're paying for can come close.02:40
sarnoldtime for dinner :)02:40
stevePage129sarnold: paying for a VPS with dual core 2ghz, 1 gb ram02:40
stevePage129100 mbit connection02:41
stevePage129and no bandiwtdh monitoring :@02:41
stevePage129ty very much tho02:41
=== NotAww is now known as Aww
centaur5I want to setup my 1st HA cluster. Anybody have an opinion on best storage options? GlusterFS, corosync, or pacemaker?03:10
roastedhi03:32
sarnolday04:05
roastedhi04:27
roastedI have a really, raelly dumb question04:27
roastedwww-data is the "webserver user" of apache, no?04:27
roastedI'm getting an error from owncloud saying the webserver user needs write access to the apps dir within owncloud, and www-data has rwx perms but I still get the error.04:27
roastedfailing to see what it's crapping itself over.04:27
sarnoldroasted: how about the containing directories?04:29
roastedthe dir above apps?04:29
sarnoldyeah04:29
roastedrwx04:29
roastedah wait04:30
roastedI just spotted something in their config that's still pointing to /var/www04:30
roastedI changed that04:30
sarnoldaha :)04:30
roastednice, now I have a blank white screen04:31
roastedquick, stab me04:31
shaunodr. plum, in the dining room, with the error.log04:31
roastedNO WORRIES. WE GOT THIS.04:33
roastedI guess I shouldn't have jumped the gun and also changed the sqlite3 entry to mysql04:33
roastedI'm using mysql, so, no idea why that is04:33
roastedbut changing back to sqlite3 worked04:33
roastedty shauno. picked that up in the error.log04:34
roastedI really need to not do this crap when I'm in a tired coma...04:34
shaunoif it's any consolation, you've got me wondering if I ever moved mine off sqlite too04:35
roastedwith owncloud?04:35
shaunoyeah04:36
roastedyeah if I swithced mine to mysql it crapped itself04:39
roastedbut back on sqlite3 it's fine04:39
roastedyet I'm actually using mysql AS my db....04:39
roastedmaybe I'm not understanding something, but whatever. It works, so...04:39
RustyShacklefordso I installed noip2 from noip's website05:00
RustyShacklefordhow do I set it to run at boot?05:00
RustyShackleford(ubuntu server 13.04)05:00
sarnoldRustyShackleford: you've got a few options..05:03
sarnoldRustyShackleford: if they provided a sysv initscript, you can drop the file into /etc/init.d/ and make the /etc/rc*.d/ symlinks05:03
sarnoldRustyShackleford: or you can call a program from /etc/rc.local05:03
sarnoldRustyShackleford: or you can use the @reboot cron specifier if you want to run it as a user accout..05:04
RustyShacklefordthe other thing that's nagging me: can I force comcast to renew my IP05:13
RustyShacklefordi'd like to test and make sure this works05:13
sarnoldRustyShackleford: I've had the same comcast IP for years.. I'm pretty sure I've 'release' on the router with no effect05:14
RustyShacklefordinteresting. I haven't really paid attention, so I can't say05:15
RustyShacklefordsarnold, does it matter what I name the initscript?05:17
sarnoldRustyShackleford: no05:17
RustyShacklefordthe readme made it seem like it was important05:18
sarnoldthe name matters a lot in the /etc/rc?.d/ directories05:18
sarnoldSxxwhatever and Kxxwhatever, where xx are digits..05:18
RustyShacklefordsarnold, could you explain or tell me what to google?05:21
sarnoldRustyShackleford: well...05:23
RustyShacklefordit seems like the numbers correspond to runtime levels?05:23
RustyShacklefordidk, i"m just guessing05:24
sarnoldRustyShackleford: you could also write an upstart conf file. that might be a bit more work if the project supplied a sysvinit script, but it'll be much less work if they didn't..05:24
sarnoldRustyShackleford: .. and upstart is significantly easier to configure than the sysv initscripts05:24
RustyShacklefordan initscript is written in bash?05:24
sarnoldRustyShackleford: more usually, sh05:24
RustyShacklefordthey did provide something which I can place in /etc/init.d/rcX.d05:25
RustyShacklefordwhat is X?05:25
RustyShacklefordor how do I find out05:25
sarnoldRustyShackleford: here's some information writing an upstart configuration: http://upstart.ubuntu.com/cookbook/#concepts-and-terminology05:25
RustyShacklefordfrom the readme: "Where the 'X' in rcX.d is the value obtained by running the05:26
RustyShacklefordfollowing command05:26
RustyShackleford        grep initdefault /etc/inittab | awk -F: '{print $2}'05:26
RustyShackleford"05:26
RustyShacklefordsorry, forgot about the newlines05:26
sarnoldRustyShackleford: in those cases, X -is- runlevel; back in the old days, it was 1 for single user, 3 for multiuser, 5 for multiuser with graphics, 0 for rebooting...05:26
sarnoldwow, I'm forgetting the levels. acheivement unlocked! :)05:27
RustyShacklefordi've never had to deal with runlevels05:27
RustyShacklefordi started with ubuntu 7.1005:27
sarnoldRustyShackleford: so you'd put symlinks into whichever directories you wanted the service to start and stop on -- in case you wanted it running only when graphics were up, and shut down when going down to 2 ...05:27
sarnoldRustyShackleford: update-rc.d can help manage all those scripts. but I detest it's manpage. :)05:28
RustyShacklefordit's a headless server05:29
sarnoldRustyShackleford: ooh, check out the sysv-rc-conf package. it looks nicer than update-rc.d05:29
RustyShacklefordi had to install this package manually ("make install")05:31
RustyShacklefordso I'm not usre this will work05:32
sarnoldRustyShackleford: try: update-rc.d -n defaults <name of the file in /etc/init.d/>05:32
sarnoldRustyShackleford: if the output looks good, leave off the -n and re-run..05:33
RustyShacklefordso just drop it in /etc/init.d/ and not /etc/init.d/rcX.d/05:33
sarnoldRustyShackleford: right; the /etc/rcX.d/ directories are for the S and K symlinks05:34
RustyShacklefordoutput looks good05:36
RustyShacklefordrestarting the server and crossing my fingers05:36
sarnoldRustyShackleford: did you re-run without the -n ? :)05:37
RustyShacklefordoh I saw a command on stackoverflow05:37
RustyShacklefordit didn't include the -n flag05:37
sarnoldaha, good05:37
RustyShackleforddid I need to run with -n first?05:38
sarnoldno05:38
sarnoldmany commands include an -n or --dry-run option to show you what they will do05:38
sarnoldI'm paranoid and like to see what will happen before running it :)05:39
RustyShackleforddidn't know that. it does seem useful05:39
RustyShacklefordunfortunately it doesn't seem to work05:39
sarnoldRustyShackleford: any error messages in the log files?05:42
sarnoldRustyShackleford: what permissions are on the script file in /etc/init.d/ ?05:43
RustyShacklefordyeah I think it might have been permissions05:43
RustyShacklefordif I start the script manually it works05:44
RustyShacklefordafter setting permissions to 75505:44
RustyShacklefordsarnold, yep it works05:46
RustyShacklefordthank you so much05:46
sarnoldRustyShackleford: woo :)05:46
RustyShacklefordplaying around with servers is fun05:47
RustyShacklefordbut a major timesink05:47
sarnoldRustyShackleford: too true05:47
sarnoldit'll get more fun05:47
sarnoldand ... well, always a timesink :)05:47
RustyShackleforddoes ubuntu server upgrade from version to version well?05:47
ScottKYes.05:48
RustyShacklefordthe desktop version seems less reliable. I usually just wipe and start clean05:48
ScottKI run Kubuntu for desktop, so I don't know.05:48
ScottKThat's reliable enough on upgrade.05:49
arooni-mobilemy dns resolutoin was messed up on ubuntu; so i edited /etc/resolv.con and put in name severs. but at top of file says: "# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)"  so was i not supposed to fix it that way?05:49
ScottKI've got a server that's been upgraded since gutsy.05:49
sarnoldRustyShackleford: I've upgraded machines half-dozen times.. on the desktop side, worst was that unity forgot focus-follows-mouse and auto-raise settings -- but a few releases ago, it did that once every few weeks anyway05:50
sarnoldRustyShackleford: I'd done machines through seven or eight years of debian, before ubuntu, without troubles..05:50
RustyShacklefordi chose ubuntu because I'm more familiar with packages etc.05:51
sarnoldarooni-mobile: depends. :) If you knew what you were doing, that might be the perfect solution...05:51
RustyShacklefordSeems like debian is more popular for servers. #linux didn't care much for my choice of server OS05:51
ScottKIIRC, the only time I've had a server upgrade problem was once when I knew I was trying something studip.05:51
sarnoldarooni-mobile: but it'll be overwritten next time dhcp brings an interface up or down, so it might not last long05:51
sarnoldScottK: hehe :)05:52
ScottKOne of the main reasons to run Ubuntu over Debian is the security hardening features built into Ubuntu.05:52
sarnoldarooni-mobile: so perhaps your edits shold be made to /etc/network/interfaces, or /etc/resolvconf/resolv.conf.d/head05:52
ScottKThe gap narrowed significantly with the release of Wheezy, but Ubuntu is still ahead.05:52
RustyShacklefordI just like that there is a Java ppa05:53
RustyShacklefordetc.05:53
arooni-mobilemy name resolution on my server got royally messed up05:53
arooni-mobileso i want to make theses resolutions permenent05:54
RustyShacklefordcertain proprietary things are hard to install on debian. I dislike "make install"05:54
ScottKarooni-mobile: /etc/network/interfaces is where I'd put it.05:54
=== rvba` is now known as rvba
arooni-mobileScottK, so i jsut drop in exactly whati put in /etc/resolv.conf?05:54
arooni-mobilethere05:54
arooni-mobile?05:54
ScottKWhat did you put in resolv.conf?05:55
sarnoldarooni-mobile: no, the format is different, it'd be best to read the interfaces(5) manpage for full details05:55
ScottKsarnold: Thanks.05:57
arooni-mobilejust nameserver stuff05:57
* ScottK has never messed with resolv.conf directly.05:57
* ScottK can't figure out why it's even installed on a server with static IP?05:59
arooni-mobilehow else would domain names get resolved06:02
arooni-mobilei mean when you need to dl updates etc06:02
ScottKI always just put the information in /etc/network/interfaces.06:06
=== koolhead11|away is now known as koolhead17
=== mld_ is now known as mld
jamespagemorning folks!08:06
feisar_morning08:06
cariboupeople: is Memory leaks in rabbitmq-server a thing of common knowledge ?08:18
caribouI was able to fill up memory of a Raring 2Gb vm overnight with a simple message passing program08:19
caribouit seems to be even more severe on Precise08:19
=== yofel_ is now known as yofel
jamespageDaviey, smb: iscsitarget dkms fixed up for 3.1008:49
smbjamespage, cool08:50
koolhead17hi all08:51
jamespageDaviey, did you get anywhere with go in backports yesterday?09:34
Davieyjamespage: Sort of.09:43
jamespageDaviey, fyi I'm looking at the 1.1.1 version thats currently in debian NEW09:44
Davieyjamespage: We do need to dig out specific reasons why the juju-core team need a newer golang toolchain09:45
jamespageDaviey, they don't need it - the 1.0.x series should be sufficient09:46
jamespagebut thats not in precise which is the challenge09:46
jamespage1.1.1 is preferred and has ARM support unlike 1.0.x which is probably a valid reason to support it09:46
Davieyjamespage: 2:1-5 is in precise.. Do we know why that is no good?09:49
Davieyalso.. they were pretty keen to bump the epoch :/09:50
jamespageDaviey, hmm10:32
jamespageDaviey, I can't help but think that requested a MRE for a point release on a series no longer supported upstream is stupid10:38
Davieyjamespage: Hmm, can you give more details?10:52
Davieyjamespage: We need to write all this up..10:52
jamespagezul, adam_g, roaksoax_: so - zul has been working on getting the newer version of kombu into the archive12:33
zuljamespage:  so amqp got uploaded yesterday im in the middle of doing the MIR12:33
jamespagefollow on question is really around rabbitmq - should we provide a CA backport for havana on 3.1.x as in saucy?12:34
jamespagespecifically to support non-shared storage active/active deployments12:34
jamespageDaviey, still comtemplating12:35
jamespagecontemplating rather12:35
zuljamespage:  do we need to backport erlang as well?12:35
jamespageno idea12:35
zul+1 if we dont have to backport erlang for it, -1 if we do12:36
jamespagetbh the erlang backport is probably zero cost12:36
jamespageI've done the merges for the last few cycles and its pretty much no-op12:37
zulsure merges can be different from backports though (subunit comes to mind)12:38
zuljamespage/roaksoax/Daviey: https://bugs.launchpad.net/ubuntu/+source/python-amqp/+bug/119739012:39
zulamqp MIR12:39
jamespagezul, I think erlang in 12.04 is probably still OK12:43
zuljamespage:  +1 from me then12:43
zuljamespage:  did you +1 swift for the CA yesterday/12:57
jamespagezul, probably - lemme +1 it again  - URL?12:57
zulhttp://people.canonical.com/~chucks/ca/12:57
=== wedgwood_away is now known as wedgwood
jamespagezul: +113:29
zuljamespage:  thanks13:29
DuologicI have a Ubuntu server "precise" with Samba 3.6.3 running, is it safe to add quantal repositories to apt sources to upgrade to Samba 3.6.6? or at least, will it work?13:32
sadiq_No such process quotaon: Quota format not supported in kernel.  ? any idea ubuntu 12.04.114:11
sadiq_Quota format not supported in kernel.  ? any idea ubuntu 12.04.114:13
geniisadiq_: You could try loading the modules quota_v2 and quota_v114:15
sadiq_how to load them14:17
sadiq_thanks for your reply14:17
geniisadiq_: sudo modprobe quota_v2 && sudo modprobe quota_v1   ...for instance14:18
sadiq_hi14:20
ndeehi there, I created a jail for a user and want to mount --bind a directory into his home. How can achieve that the mount will be available after a reboot?14:44
feisar_ndee: I haven't created a chroot jail before but assuming it's the same as any other mount then you need to put it in /etc/fstab14:45
ndeefeisar_, ok14:45
feisar_the syntax is a little different from mounting on the command line so check out the fstab man14:46
ndeefeisar_, I checked the man mount and there was the entry too, but thanks :)14:46
feisar_so you have an entry in /etc/fstab but it isn't working?14:47
ndeefeisar_, I can't test it since I don't want to reboot the server ;)14:48
ndeebut I added the entry and I will check the next time the server reboots, hope that will be some years from now ;)14:48
feisar_you can $ sudo mount -a to test14:49
feisar_$sudo mount -a14:49
ndeesweetness, it works. Thanks feisar_ !14:49
feisar_no probs : )14:50
feisar_there's always a way to do it on Linux without rebooting ; )14:50
ndeefeisar_, true :) it's just about finding the way :)14:50
=== freeflyi1g is now known as freeflying
=== wedgwood is now known as wedgwood_away
=== wedgwood_away is now known as wedgwood
psivaahello, i have been having an issue with most of our server smoke tests today: Unable to ping the VMs from the host15:14
psivaadhclient: execve (/sbin/dhclient-script, ...): Permission denied is shown in syslog15:15
psivaahttp://pastebin.ubuntu.com/5840606/ contains more logs.15:15
psivaahallyn: jamespage: would you be able to shed some light pls?15:15
=== Ursinha is now known as Ursinha-afk
hallynpsivaa: can you ping the vms from the host by ip addrses?15:35
psivaahallyn: there is no ipv4 address allocated to the concerned VMs15:38
psivaahallyn: everything works ok until installation and the issue comes up only when the VM's gets rebooted after the install15:38
hallynpsivaa: oh, i see.  so dnsmasq is broken on the host.  what does ps -ef | grep dnsmasq show?15:42
psivaahallyn: http://pastebin.ubuntu.com/5840697/ on the host15:43
hallynpsivaa: ls -l /sbin/dhclient-script15:49
psivaahallyn: -rwxr-xr-x 1 root root 13005 Nov  7  2012 /sbin/dhclient-script15:49
psivaahallyn: the file has the same permissions in the VMs as well15:51
=== _ffio_ is now known as bsd_freak
hallynpsivaa: head -3 /sbin/dhclient-script15:58
psivaahally:16:01
psivaa#!/bin/bash16:01
psivaa# Explicitly set the PATH to that of ENV_SUPATH in /etc/login.defs and unset16:01
psivaa# various other variables. We need to do this so /sbin/dhclient cannot abuse16:01
psivaa# the environment to escape AppArmor confinement via this script16:01
psivaa# (LP: #1045986). This can be removed once AppArmor supports environment16:01
psivaa# filtering (LP: #1045985)16:01
psivaahallyn: ^ sorry for the typo :)16:01
hallynpsivaa: do you have auditd running on the host?16:03
hallynpsivaa: I'm wondering whether there are any apparmor denial messages hidden anywhere16:03
hallynpsivaa: please try running "strace -f -ooutout /sbin/dhclient-script" (as root) and pastebin the resulting outout file?16:03
psivaahallyn: auditd does not seem to be running  and the above strace command returns nothing16:05
hallynoutout is empty?16:05
psivaahallyn: yes16:06
=== wedgwood is now known as wedgwood_away
=== wedgwood_away is now known as wedgwood
hallynpsivaa: which host?16:17
psivaahallyn: aldebaran16:17
=== bsd_freak is now known as babaji
zulDaviey:  can you seed python-amqp please https://bugs.launchpad.net/ubuntu/+source/python-amqp/+bug/119739016:31
uvirtbotLaunchpad bug 1197390 in python-amqp "[MIR] python-amqp" [High,Fix committed]16:31
=== Ursinha-afk is now known as Ursinha
hallynpsivaa: grep 'DENIED' /var/log/kern.log ?16:33
psivaahallyn: that too ouputs empty16:34
psivaahallyn: i see Jul  3 16:29:56 aldebaran snmpd[3717]: error on subcontainer 'ia_addr' insert (-1) in syslog but i hear that's not too harmful16:35
psivaahallyn: also this issue does not happen always, it's intermittent16:39
psivaahallyn: there is output for grep 'DENIED' /var/log/kern.log in the client VM though,16:46
psivaakernel: [    6.185870] type=1400 audit(1372862341.310:8): apparmor="DENIED" operation="file_perm" parent=509 profile="/sbin/dhclient" name="/bin/bash" pid=517 comm="dhclient" requested_mask="r" denied_mask="r" fsuid=0 ouid=016:46
hallynpsivaa: can you ask sarnold to take a look?  it sounds to me like dhclient isn't allowed to run /bin/bash - it has special allowance for running /sbin/dhclient-script (see /etc/apparmor.d/sbin.dhclient), so i'd expect...16:51
hallyn(or jjohansen )16:52
hallynyou might just add /bin/bash rx to /etc/apparmor.d/local/sbin.dhclient and see if that fixes it...16:52
sarnoldpsivaa, hallyn, how interesting, my sbin.dhclient has a /etc/dhcp/dhclient-script Uxr, permission -- that script can do anything is wishes..16:58
hallynsarnold: so does his16:58
hallyn(at least on the host)16:58
hallynI see, I looked up the Ux semantics, caught the 'cleaned up', but missed the unconfined.  got it16:59
hallynsarnold: but it's /sbin/dhclient-script being run, not /etc/dhcp/dhclient-script,16:59
hallynhm, ahs same thing16:59
hallyn*has17:00
jjohansenpsivaa: do we have a bug to track this?17:02
psivaajjohansen: no i have not open one yet, i could do it in a little while17:03
theazmanHey all, quick question. On server 12.04, how do I give a domain account local logon rights?17:47
psivaajjohansen: sarnold: hallyn: reported bug #1197484 for the above issue.17:49
uvirtbotLaunchpad bug 1197484 in isc-dhcp "Connection requests to saucy server VMs from a precise host fail after fresh VM installs" [Undecided,New] https://launchpad.net/bugs/119748417:49
sarnoldpsivaa: thanks17:49
jjohansenpsivaa: okay, thanks17:49
theazman_If I try to add the user, it says the user already exists17:50
psivaathank you for your time :)17:51
theazman_Anyone?17:59
wxltheazman_: ?18:00
theazman_How do I give an account local login rights to a 12.04 server18:00
shollingserm18:01
shollingshave you googled that?18:01
shollingsit's elementary shit, a quick google result would tell you18:01
theazmanSorry, some reason my smuxi keeps losing connection to this room. How do I give a domain account login permissions to a 12.04 server without changing the password?18:04
sarnoldshollings: please don't.18:05
shollingssarnold: try and stop me.18:05
shollings:)18:05
Tm_Tshollings: please be helpful when help18:07
shollingsoh I am. i'm teaching him how to do things himself.  that's the most helpful thing you can do.18:07
Tm_Tshollings: that's not ubuntu way18:08
shollingsubuntu doesn't use google?18:08
theazman_Anyone able to help me?18:08
Tm_Tshollings: we don't tell people to google it, if you don't like to help then just don't18:08
shollingsPlease, feel free to help him.18:10
theazmanSo I think I fixed my ping so I won't keep getting kicked off, how do I give a user login access to a 12.04 server?18:15
tsimpsontheazman_: unless you lock the account a user can already login, ps your connection is _not_ fixed18:31
theazman_tsimpson, yea, I noticed my connection isn't fixed, still working on that. The account is a domain account, but not a local account. I cannot su account name, when I try that it just gives me a prompt again18:32
Davieyzul: How about you seed it, and I promote it? :)18:33
zulwell we dont want it on the cd do we?18:34
Davieyzul: Yes, but why do you want it in main?18:34
=== wedgwood is now known as wedgwood_away
zulDaviey:  its a dependency for kombu18:34
Davieyzul: Dependency for kombu...18:34
DavieyRight, so - can you upload a kombu that depends on it?18:35
zulDaviey:  already did18:35
DavieyOh18:35
=== wedgwood_away is now known as wedgwood
tsimpsontheazman_: then I guess you have to configure PAM to allow logins over the domain then, I have no idea how to do that18:35
theazmantsimpson, I'm back for now18:35
Davieyzul: ah, so yu did - an hr ago. :)18:36
zulDaviey:  https://launchpad.net/ubuntu/+source/kombu/2.5.12-0ubuntu1/+build/476735218:36
Davieyyou*18:36
Davieyzul: Not yet showing on the mismtach list.18:36
zulDaviey:  okies18:36
tsimpsontheazman: there's a bunch of PAM modules for different authentication mechanisms, search for "libpam" and see what's available to start18:38
Davieyzul: done, thanks18:39
zulDaviey:  thanks18:39
MAbeeTThi!, We have recently aquired a clone computer for being used as server (AMD FX8120 8 cores, 16G RAM, 2x1Tb HDD)18:42
MAbeeTTWe want virtualize there, deployment and production tomcat+mysql+tcp-adhoc-protocol, and some future similar scenarios.18:44
MAbeeTTI would like to full virtualization and containers inside one (or more) of the VMs.18:44
MAbeeTTIs there some gui-like solution for ubuntu server 12.02 LTS?18:45
=== roaksoax_ is now known as roaksaox
=== roaksaox is now known as roaksoax
MAbeeTTI have seen openstack, juju, but seems bein some for a "farm18:45
MAbeeTT"18:45
MAbeeTTthanks.18:45
sarnoldMAbeeTT: perhaps using virt-manager with kvm is about what you're after18:47
MAbeeTTcould I make virtual nets also? I mean virtuals NICs "plugged"tu a virtual Switch.18:48
sarnoldMAbeeTT: juju is pretty slick, you could use it with lxc containers on the host; the nice part is you could scale that out to running services on VMs with a private openstack cloud or maas setup or something, but it wouldn't easily move to just having a second computer with lxc containers in the future...18:48
sarnoldMAbeeTT: linux provides bridge functionality easily, switches require other tools, last I looked at them I wasn't very impressed with what I saw. I hope they've improved..18:49
MAbeeTTok, via bridges, I know them.18:49
MAbeeTTok. The "impression" I have about juju is that is for huge developments. We are a small  Research group in a university. Now  we use some old computers (Pentium 4, 256/512M).18:52
MAbeeTTso, the idea is move, and generate new VMs, but as you can imagine this are not stressed services.18:53
theazman_Hey, sorry, no idea what is going on with my connection. In any case, I gave a domain account logon rights to a ubuntu server. When I try to ssh in, the session closes right after it authenticates. What could be causing this?19:06
sarnoldtheazman_: out of curiosity, what is a 'domain account'?19:07
theazman_sarnold, an account created on the domain, Windows AD account19:08
theazman_Sorry, should have said AD account19:08
sarnoldtheazman_: you can probably find more detailed reasons for the session closing in the log files, /var/log/auth.log would be my first guess..19:08
theazman_sarnold, it wasn't showing up in th elogs, I'll look again19:08
sarnoldtheazman_: aha :) which pam modules are you using to do the integration?19:08
theazman_sarnold, possibly krb5.so19:09
theazman_sarnold, its denying me access to the log19:10
sarnoldtheazman_: can you use sudo or su?19:10
theazman_I'm in as root19:10
theazman_sarnold, and it shows up blank, and when I do sudo from the admin account, says permission denied19:11
sarnoldtheazman_: .. and you're getting permission denied trying to read the file?19:11
mnathanitheazman_: have you been rooted?19:11
theazman_mnathani, I am under root19:11
theazman_sarnold, under root, the log shows up empty19:11
sarnoldtheazman_: mnathani is thinking your system may have a root kit installed19:11
mnathanitheazman_: I meant is there a virus / malware / rootkit installed on the box19:11
theazman_ah, I see19:11
theazman_Let me check19:11
sarnoldtheazman_: -crazy-. how about other log files in /var/log ?19:12
mnathanicompare md5 files for common binaries like ls19:12
mnathani*files = sums19:12
theazman_sarnold, so auth.log.1 shows up19:13
theazman_sarnold, but auth.log shows blank19:13
sarnoldtheazman_: check filesystem free space.19:13
theazman_sarnold, the box might need to be rebooted, but that can't be done at this time19:13
theazman_sarnold, where do I check that19:13
sarnoldtheazman_: df19:13
theazman_mnathani, where do I see the md5 files?19:13
theazman_sarnold, the most used is 30% which is /dev/sdal19:14
theazman_sarnold, so the logs that show up, the dates stop on Jun 2919:15
theazman_sarnold, I think I did an apt-get update and upgrade on that day which might have broken it19:16
theazman_sarnold, you still there?19:17
sarnoldtheazman_: hrm. check the .1 log file then, perhaps it's still being used ...19:18
sarnold(I'd have expected sshd would close/reopen the log file at log rotate time..)19:18
theazman_sarnold, so the auth.log.1 stops on june 2919:18
sarnoldoh right. sigh.19:18
theazman_sarnold, I'm not sure if log rotate is setup19:19
theazman_checking on that now19:19
theazman_sarnold, it is setup to rotate weekly19:20
theazman_sarnold, and syslog is empty, last log in .1 is jun 29 around the same time19:21
sarnoldtheazman_: I wonder if /var was full on jun 29?19:22
theazman_sarnold, how do I check that19:23
theazman_sarnold, /var doesn't have its own filesystem on here19:23
sarnoldtheazman_: looking through those logs from jun 29 is your best bet, but .. not a very good one.19:23
sarnoldtheazman_: lets try service rsyslog restart -- just a blind, restart the logging service..19:24
theazman_sarnold, I had tried that already a bit ago19:24
theazman_sarnold, that didn't fix it, I am thinking of doing a restart19:28
adam_gzul, any chance at a peak of https://code.launchpad.net/~gandelman-a/ubuntu/saucy/nova/drop_requests_cap/+merge/172709 + https://code.launchpad.net/~gandelman-a/ubuntu/saucy/nova/pyparsing_min/+merge/172639 ?19:30
zuladam_g:  done19:32
adam_gzul, thanks. i had one for kombu requirement but dropped since thats all together already. nice job19:33
zuladam_g:  thanks19:33
zuli should have one for ceilometer tomorrow19:33
adam_gzul, im going to poke dolph and see if he can cut a new keystoneclient release so cinder and ceilometer arent version capped on their requirement19:33
theazman_sarnold, any other ideas?19:34
zuladam_g:  cool19:34
adam_gzul, also, whats the plan for the neutron rename?19:34
zuladam_g:  when its done upstream i already have a branch ready for quantum quantum client not yet19:35
zuladam_g: https://code.launchpad.net/~zulcss/neutron/neutron-rename19:36
adam_gcool19:37
theazman_sarnold, I think I found the problem as to why it wasn't logging19:38
theazman_sarnold, apparently I accidently changed the owner of the log to a different user account, I changed it back but it still isn't writing to it19:41
theazman_sarnold, got the logs working, so now about getting the account to login?19:45
sy_I have a 3TB drive where I have created a raid1 set with disk missing to be added in later however mdadm is reporting 2.1TB, any ideas?19:47
sy_There is a single partition on the drive containing the full disk19:48
theazman_Anyone able to help me figure out why a user can't ssh into the server?19:54
sarnoldtheazman_: hey, glad to hear you've got the logging sorted out. :) are there any instructive errors in hte logs, now that they work?19:56
=== Aww is now known as [[Aww]]
theazman_sarnold, not really19:57
theazman_sarnold, just session opened and then session closed at the same second19:58
sarnoldtheazman_: how about the user's shell? shell startup files?19:58
theazman_sarnold, adding those now19:59
sarnoldtheazman_: off to lunch, good luck :)20:00
theazman_sarnold, thanks for your help20:00
theazman_Anyone able to tell me why an ssh session closes as soon as I authenticate? There is nothing descriptive in the logs.20:28
anepanaliptostheazman_: how about scp?20:29
anepanaliptosmaybe there is something in your bash/login script?20:29
theazman_Well, it also doesn't let me su username when I try to su username from root20:30
theazman_anepanaliptos, ^20:30
anepanaliptos(yeah it seems like it's just me and you here)20:30
anepanaliptosgot another linux machine someplace?20:31
anepanaliptossee if you can scp a file into your home dir, so do..20:31
theazman_I have a bunch, its 12.04 server20:31
anepanaliptosscp file.ext username@host.ip.whatever:~20:31
theazman_Do I do that from terminal?20:32
anepanaliptosyeap20:32
theazman_What does that do?20:32
theazman_I'm also guessing I need to find a valid file?20:33
anepanaliptosit copies a file of your choice from the computer you're sitting at to the home directory of the other host20:33
anepanaliptosyeah.20:33
anepanaliptosjust cd into your desktop and send something from there. do you use terminal often? did you know you can use tab for autocomplete?20:33
theazman_What account do I want to try that from, root?20:34
theazman_Yea, I know about autocomplete20:34
theazman_But I'm not by another linux machine atm20:35
anepanaliptosdoesnt matter. just see if you can send a file itno that persons home dir20:35
theazman_k, sec20:35
anepanaliptosif that's the case, there is something wrong with bash20:35
theazman_Um, that didn't error20:36
theazman_let me check the dir20:36
theazman_there is nothing in the home directory of the user20:36
theazman_What makes you think it is the bash?20:37
theazman_anepanaliptos, not sure what's going on here.20:38
theazman_anepanaliptos: You still here?20:45
tdnWill software raid1 give me a performance increase in reads?20:51
theazman_Anyone able to help me figure out why when I try to ssh as users except the admin the session closes instantly after authenticating. There's nothing descriptive in the logs... Thanks20:58
anepanaliptostheazman_: sorry afk21:00
anepanaliptoshang on.21:00
anepanaliptosok21:00
anepanaliptosso you sent it to userwithproblem@hostwithproblem:~21:00
anepanaliptosand then you checked the home dir and it wasnt ehre?21:00
anepanaliptosi think its bash because it's a "safty feature" from ssh that there is a shell or _Somthing_ running when you log in21:01
anepanaliptosif it doesnt start, or your bash exits abnoramally, that kills teh ssh session21:02
raubI know you can do that by limiting which commands you can run when you ssh21:02
raubex: in authorized_keys21:03
raubI also think you could setup the shell you are allowed to run21:03
raubsay, to /bin/fals21:03
raubfalse21:03
theazman_YEa, anepanaliptos, it wasn't in the home dir21:03
theazman_raub, it doesn't do local logins either21:04
theazman_anepanaliptos, ^21:04
=== algesten` is now known as algesten
theazman_Everyone disappear?21:08
theazman_Anyone able to help me figure out why when I try to ssh as users except the admin the session closes instantly after authenticating. There's nothing descriptive in the logs... Thanks21:18
theazman_Anyone able to help me figure out why when I try to ssh as users except the admin the session closes instantly after authenticating. There's nothing descriptive in the logs... Thanks21:37
=== wizonesolutions_ is now known as wizonesolutions
=== smw__ is now known as smw_

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!