[00:26] Hey all, having an issue booting into my 12.04 LTS server install. Used the server media to partition an LVM onto a boot drive, now booting from that drive gives me "Reboot and select proper boot media" [00:40] hello, can anyone suggest a dns server that has a java api to editing a zone? [00:44] eutheria, google knows some http://www.xbill.org/dnsjava/ [00:45] i was after first hand experience ;) [00:45] sorry then =) === peter is now known as Guest42116 === SJrX is now known as SJr [02:27] so.. Ive broken the SSH server on my 'server'.. so i cant use SSH and I cant start it. Help? [02:27] i can access the console, but i cant figure out why ssh wont start [02:33] sudo start ssh; tail -n25 /var/log/syslog [02:36] nvm, my sshd_config was currupted. Resinalled ssh server [02:39] qman__, thanks anyway :) [03:14] i have two servers. one is open to public, the other is behind a firewall/nat (ports cannot be opened) what is a way i can push notications to the firewall/nat server so it can trigger actions to take? [03:15] do it manually [03:15] that wont scale for the project. [03:15] depends on what sort of notifications [03:16] you could have the firewalled server connect with SSH and read a file on a regular basis [03:16] outbound ports works by session handles if the iptables rueles are configured correctly [03:16] or if you are syncing files, you could use btsync [03:16] return ports as well [03:16] RoyK: i have no clue what you are talking about. [03:17] funkster: what are you trying to do_ [03:17] ? [03:17] qman__: someone would perform an action on the public server and that needs to instantly trigger an action on the firewalled server. [03:18] what kind of action, at both ends? [03:18] funkster: if you don't know what I'm talking about, you might not know what *you* are talking about [03:19] i need to run a shell script on the firewalled server once the public server tells it to. in a nut shell [03:20] well, the first step is deciding on what method you want the action performed with, there are literally a million ways to do it [03:20] setup ssh keys and run thos jobs with ssh [03:20] if it's management tasks, you might look into salt stack [03:20] if it's a simple set of custom actions, reverse SSH or a cron job to check might be best [03:21] cronjob isnt fast enough [03:21] id have to loop a script every 1-2 seconds to check the public server. [03:21] then use a shellscript [03:21] make a loop in it [03:21] while true ; do something ; sleep 2 ; done [03:21] didnt i just say that? [03:22] you could set up autossh on the firewalled server providing a reverse SSH tunnel [03:22] then have your script on the public server run an SSH command over that tunnel [03:22] downtime can exist though, I find that in practice you might lose connection for as much as five minutes [03:22] if you need something with higher reliability you might have to write it yourself [03:23] openVPN is also a possibility, though probably overkill for this task [03:24] right! [03:30] Hi, I just installed an ubuntu zentyal email server. I am using afraid.org for dns. I can send emails just fine but cannot receive them. Please advise, and thanks in advance! [03:33] a static IP is required to run an internet email server [03:33] additionally, most residential internet connections and dynamic business connections block incoming SMTP traffic at the ISP level [03:34] qman_: Really? If that is true then that is my issue. But I find that very hard to believe [03:34] believe it, it's a fact [03:34] while there is no technical reason you can't accept mail using a dynamic IP, no one will actually send it to you [03:34] SMTP is open from my isp [03:35] spam is a huge problem and in order to combat it, mail providers are extremely picky about who they will and will not accept mail from and send it to [03:35] simply using a dynamic IP at all puts you in many RBLs [03:36] you can check a lot of public ones yourself by going to mxtoolbox.com [03:37] Wow, that is too bad. I am not understanding why other mail providers need be involved if I host my own email server [03:38] in order for you to send email to other people, and for other people to send email to you [03:38] if you only care about sending email to yourself, it doesn't matter [03:38] OK, let me try sending email to myself and see if that goes through [03:38] but I assume that you want to actually send email to other people on the internet [03:38] as most do [03:39] I can send just fine, it is receive that gets broke [03:39] ah, it worked to myself [03:40] what's your internet IP and domain name? I can check if it lines up from here and if the port is open [03:41] So if I send an email from yahoo to my server, it won't go through because yahoo sees my server as too small and therefore a potential danger? [03:41] Isn't there a better way to send you my IP and domain? [03:41] not exactly, but if things aren't all set up the way they need to be, they might interpret it as virus activity or not be able to confirm your MX records match up [03:42] what do you mean by a better way? [03:42] I don't want the world to see it [03:42] your DNS is published to the world already, and your IP is available to anyone who looks [03:43] you're probably already getting hit by bots from china [03:43] Is there a way to PM on here? [03:44] my point is, the world already sees it, you're not protecting yourself in anyway by not posting it here [03:45] I'm just not willing to go through the effort of port scanning you and doing reverse DNS lookups [03:47] neither does anyone else, which is what protects me. There has to be a better way, as I would really like your help seeing if it is matched up correctly. [03:48] I have issued a dig command and it appears correct [03:48] did you run dig mx? [03:48] yes [03:49] did you ask anyone else's nameserver, such as dig ns @8.8.8.8 yoursite.com [03:49] canyouseeme.org shows port 25 open so I assume I am good there [03:49] nope let me try that [03:50] err [03:50] dig mx @8.8.8.8 yoursite.com [03:50] not ns [03:51] ok what am I lookin for? [03:52] http://paste.ubuntu.com/5972253/ [03:52] look at ANSWER SECTION [03:52] should look something like that [03:52] and then, you should be able to dig the answer to an A record [03:53] in this case, mail.deadface.org resolves to my server's IP [03:53] ok, just going through it now. stand by [03:54] yep, mine looks EXACTLY like that [03:54] silly question, did you purchase a domain name or are you using one of their free subdomains? [03:55] yahoo may automatically block sending to all their freebie subdomains to prevent abuse [03:55] No, I purchase from godaddy, then pointed to afraid.org because I don't understand dns yet [03:55] ok [03:56] If I do a pastebin of my domain and give a small TTL do you think you could take a look? [03:56] well, the basic requirements for other servers to send you email are having an A record that points to your server, and having an MX record for your domain which points to that A record [03:56] sure [03:57] ok stand by [03:58] http://pastebin.com/DTBueKGE [03:59] I think it is a setting in postfix or zentyal that isn't talking to that MX correctly [03:59] ok, port 25 is not responding [04:00] the DNS lines up correctly, assuming that IP is right [04:00] do you have other ports open on the same server? [04:00] just to make sure it matches [04:00] yes [04:01] 83 [04:01] when I GET on port 80 (http) I see a page like this: "Free domain sharing - Site not yet configured" [04:01] Yes, I am blocking 80 on my router [04:01] well, it's going to a site [04:02] a site which says free domain sharing is not configured [04:02] are you connected here on the same internet connection as your server? [04:02] yes [04:02] ok, then your A record is pointing to the wrong IP [04:03] Really? [04:03] yes [04:03] try port 8084 and see if that comes up with a website [04:03] nope, nothing [04:04] your A record should be pointing to the internet IP of your server, which can be gathered by running "curl ifconfig.me" on the server [04:04] OK, very interesting [04:04] stand by, typing that in [04:05] you might have to apt-get install curl [04:05] yea, installing [04:08] Ok, curl gives me exactly what I thought my IP was [04:08] ok, the IP I get ends in 179 [04:09] OK, that is wrong [04:09] how long ago did you set up your DNS? [04:09] Is there a way to see exactly what you are seeing? [04:10] http://pastebin.com/ADuPAtFc [04:10] It was like a year ago, I am checking my account on afraid.org right now to verify the IP. But it has to be right because all other webtraffic comes in correctly [04:10] I set it to 10 minutes [04:11] I appreciate it [04:12] I am getting different nameservers with the same command [04:13] when I ask google I get the same IP but the NS is ns1.afraid.org. [04:14] I am stumped :( [04:14] But I am sure this is my problem [04:14] well, it would definitely prevent mail from getting there [04:14] log into your afraid.org and check what it's set to [04:15] also, it's advisable to add more NS records to your domain, at least two is normal [04:16] Do you mean more NS records from afraid.org? There are 4 [04:16] yes [04:19] Ok, just typing in mail.mydomain.com into the browser gets to my webmail (A record), but it looks like the MX version doesn't make it. How is that possible? [04:20] I get an SSL protocol error [04:20] Is MX on a specific port that I need to forward? [04:20] but it redirects to a different subdomain [04:20] a. [04:21] so unless your ubuntu server is doing that, you have something else in the way [04:21] a.mydomain.com is masked to my ip [04:21] afraid.org is doing that [04:21] I see [04:21] How would I go about changing the default group on a newly created file so that it is set for the parent folder, or for the users default group? [04:21] in that case, your MX record is pointing to the wrong name [04:22] the MX record _has_ to point _directly_ to your mail exchanger [04:22] so it should point to a.yoursite.com [04:22] ahhhh, you are right!!! [04:22] Let me try that [04:23] GH0, setgid on the parent directory, or change filesystem mount options [04:23] Hey qman, I personally tried using ACL's, but for whatever reason the program I am using is not wanting to follow rules of the acl. [04:24] Okay, and if that fails, what would be the easiest way for the file to inherit permissions of the parent folder? [04:24] Because right now, every new file in the directory is created with rw------- which is not helping me. [04:25] the umask of the application [04:26] So... what if that application is firefox/chrome? [04:26] Hold on, before you answer that let me google how to do that. [04:26] firefox and chrome will abide your user's umask setting for downloaded files [04:27] Isn't changing the default umask for a user somewhat risky? [04:27] setting world read/write bits by default might be depending on your use case [04:27] but the default umask is 0022 [04:27] which would have files created 644 and directories / executables 755 [04:28] Because while I would love for the ability of the newly created files to be read globally, I also don't want the home folder to be read by every single user in this case. [04:29] Because the files are being downloaded to /home/user/Downloads, I am trying to make it so that only that folder is able to read, write, and execute versus /home/user/Documents. [04:29] qman_ How long will it take to propagate that new ip on afraid .org? [04:29] Which is what I was trying to do with the ACL thing, but that failed. [04:29] fbdystang, depends on the TTL you set [04:30] qman_: on my server or on afraid.org? [04:30] it should only take a few minutes for your settings to apply in afraid.org's system, but for those settings to propogate to the servers, it can take up to the whole TTL length [04:30] dang [04:30] the TTL setting in your DNS zone on afraid.org [04:32] qman, what is the third sticky bit? Is it o+s or something else? [04:32] GH0, you could create a script which runs "umask 0022; chromium-browser" to start it with [04:32] there isn't one [04:33] or 0000 depending on what yo uwant [04:38] OK, dig still lists the wrong ip, but I just received an email I sent to myself hours ago [04:39] So I expect dig will straighten out with propagation time [04:41] it's looking sane from here. yourdomain still points to .179, but now has mx pointed to mx.yourdomain, which ends .231 (none of my business, but I thought I'd take a look since I don't have it cached) [04:45] much appreciated shauno [04:47] qman__, is there no other way then writing a script that initiates the function for the application? [04:48] not unless the application has a feature to set file permissions upon download [04:48] possibly a browser extension [04:56] I don't understand this then. Why if I set a umask for the user of 0057 the program doesn't follow that umask in the first place? Why does the program follow it's own umask? [05:05] qman_: shauno: It looks to be working perfect now. Thanks for the help, I really appreciate it. It is awesome people like you that promote open source and helping others that make a huge difference in the ubuntu community. Well done. [05:06] MX records are now pointing to the right IP :) === SJrX is now known as SJr === DenBeiren is now known as zz_DenBeiren === zz_DenBeiren is now known as DenBeiren === DenBeiren is now known as zz_DenBeiren === zz_DenBeiren is now known as DenBeiren [09:46] how do i enable ftp in my server , am am trying to put filles to it , ssh seems to work just fine after download openssh-server [09:47] ideally, use sftp, part of openssh [09:47] otherwise, install an ftp client like vsftp [09:47] er, ftp server, like vsftp. [09:48] you can also use scp if you have ssh working fine. [09:49] if you want a nice gui client that does sftp, try filezilla [09:51] am trying to ftp from a windowss client [09:52] if you are not willing to use a client that supports sftp, then you have to install and configure an ftp server like vsftpd [09:52] (filezilla works on windows, btw) [09:53] lol didnt think of that thanks === DenBeiren is now known as zz_DenBeiren === zz_DenBeiren is now known as DenBeiren === DenBeiren is now known as zz_DenBeiren === SJrX is now known as SJr === zz_DenBeiren is now known as DenBeiren === SJrX is now known as SJr [12:08] Hi im trying to setup a local server which serves a welcome page with apache2. This is working fine. Now i have setup a AP and would like when connected to it and asking for any adress (etc. test.com ) go to my localhost instead. I have tried googling around and looked and iptables, but without success. [12:08] Just saw this in ubuntu, what is your AP (access point?) setup with? [12:09] Atm it is just setup with the ubuntu create wireless. But i could set it up with airbase or etc. [12:09] *airbase-ng [12:11] Ok, what IP range do your client receive? and what is the IP of the server? [12:11] its 10.0.42.1 [12:12] and clients? [12:12] For the server IP. For the clients i am unsure, how do i check this? [12:13] The assigned IP when connected to the AP? [12:13] Yeah [12:13] Moment, i will just have to jump of the network and check. [12:13] Hang on. bbiab [12:13] Thanks for the help and effort btw [12:13] I assume it will be the DHCP of the same network, np [12:19] Rapid2214, it was assigned 169.254.157.125 [12:19] Ok, it's not getting a DHCP address then, can you do anything on that device? [12:20] QuackQuacker: that's a self-assigned address [12:20] Ok [12:20] No not really, it does not seem even to connect to the localhost via the ip [12:21] Maybe i should use airmon-ng instead? [12:21] wheps airbase [12:21] perhaps you should set a valid ip-address for that box first [12:22] I mean, on the same ip network as the other machines in that place [12:23] RoyK, that is a wireless device he is connecting to a AP created on his server of 10.0.42.1 [12:24] Quack, that will be fine, we will just have to use IP tables to make it work nicely [12:24] Did you use the graphical network manager? or file based? [12:25] I would love to use a gui network manager, so far ive tried different "sudo iptables ... " [12:25] What did you use to setup your wireless? [12:26] atm it is set up via. ubuntu "create new wirelesss network" [12:27] Ok, not entirely sure how that works but I can give it an educated guess, do you have internet on that machine to give a pastebin output? [12:27] QuackQuacker: a server with a gui? [12:28] RoyK, yes, i can just disconnect from the current connection, set it up, copy, and come back here again. [12:28] QuackQuacker: anyway - if you "create new wireless network" it'll be a peer-to-peer thing, and not part of your wireless network (if you have one) [12:29] RoyK, i would like any peer connecting to my directed to my localhost nomatter what adress they put in... [12:29] RoyK, I have bridged to access the internet in the past, so it's possible [12:30] Point being, i do not want anyone that connect to my AP to be connect with the net, just be redirected to my localhost page. [12:31] Quack, can you access your 42.1 from your current PC? does the svr has ssh installed? [12:32] Im using this machine im at as access point, so i would have to switch off the current connection, start the ap, go to another computer, connect to app. Check. And yes i have ssh on this server. [12:32] Let me just test. if you hold on. [12:33] I will only work in command line so if you can ssh to that machine it would make things quicker :) [12:48] Back. Well no Rapid2214, it was no succes. I can connect to the AP fine. But when browsing to 10.42. it does not connect to that machine localhost [12:49] Maybe i should use a proper program for the ap instead of the ubuntu gui [12:50] Yeah might as well [12:51] Im just creating a vid tutorial so might be slow to respond [12:52] Yea, thanks for the effort. I will try something like hostapd and return when i know more [13:16] is there a way to view the packets which have been sent to the NIC for TCP checksum offloading like there is in Windows? [13:16] or do I have to rely on ethtool -K being correct? [13:24] how would it be incorrect? [13:29] mikeey: wireshark? [13:30] RoyK, I'll give that a go, thanks [13:30] mardraum, Windows likes enabling things but not really enabling it, I was under the assumption that Ubuntu could do that aswell [13:34] can you give me some evidence about this "windows fact"? [13:48] mardraum, what I ment was that I never get it to work properly in Windows, netsh int tcp show global tells me chimney offloading is enabled, while netstat -nt claims all connections are InHost [13:48] aka, not offloaded [13:49] hence I want to make sure they are actually getting offloaded in ubuntu [13:56] heh? tcp checksum is just one of many things windows chimney offload does [13:57] and the checksum only part won't show up in netstat [13:57] atleast according to microsoft [13:58] do you have a real server grade nic in that machine? that supports scatter-gather, tso, gso, gro? [13:58] probably lro also [13:59] it's an Intel Pro/1000MT PCIe Server adapter [14:05] ya, it only has sending optimizations, nthing for receive [14:05] it's just too old [14:06] not that linux or windows isn't using it, but windows can't push the whole thing into the nic to be handled, cause it doesn't support the whole thing [14:06] ah [14:06] so I'm out of luck? [14:06] dunno, what kind of luck did you want? [14:07] it supports tcp checksum offloading [14:07] that is what I want [14:07] and that is very very easy to test with wireshark, it will complain all outgoing packets have bad checksums [14:07] mikeey: is there a performance issue with your system, or are you just curious? [14:07] I'm just curious [14:08] ok [14:08] imho if there isn't an issue, why bother :P [14:08] because it's fun to fiddle with it haha [14:08] :) [14:11] Patrickdk, so if Wireshark complains about all the outgoing packets having bad checksums the tcp offloading part works? [14:11] if other computers receive the packets? yes [14:12] cause something outside of linux, is adding proper checksums [14:12] * Patrickdk notes, this is a common xen issue [14:13] alright [14:13] thanks for the help/explanations [14:23] well, wireshark tells me that almost all my packets have invalid checksums - is that what I was looking for? [14:24] ouch [14:24] can you post a trace somewhere? [14:25] tshark -i ethX -w blah.pcap [14:25] it does say "May be caused by TCP checksum offloading" [14:27] http://wiki.wireshark.org/CaptureSetup/Offloading [14:28] then try to disable it and see if it works better [15:26] Why does my fstab: http://paste.ubuntu.com/5973972/ produces this dir layout: http://paste.ubuntu.com/5973978/ [15:28] ^ I mean -> why is junk_1tb is 755, while others are 777 with identical fstab entries? [15:28] ddsss: Error: "I" is not a valid command. [15:28] I mean -> why is junk_1tb is 755, while others are 777 with identical fstab entries? [15:35] Because of the permissions set on the filesystems. [15:35] bekks, directories created automatically during boot. I don't create them manually. [15:35] Thats not what I am talking about. [15:36] In the past, you did set the permissions on A to 755 while you set them to 777 on B. [15:37] bekks, emm. im not sur if I'm following.... [15:37] bekks, how would I go aboutt fixing it? [15:38] bekks, when I unmount them and remove /mnt/* adn reboot - they get recreated during boot with junk_1tb being 755 and others 777... [15:43] bekks, got it sorted. just chmodded 777 and it stays like that after reboot. thank! [15:49] ddsss: Also, are you sure that 777 is the right solution to whatever permission situation you are having? [15:52] andol, this is a nas server. those 3 drives should be visible and browserable by anyone on the network, ie guest access (it's a home nas). [15:52] andol, so I'm just mounting these 3 drievs to be used by samba basically. [16:17] Rapid2214, still around. Ive setup a new test box. Atm its running an AP with airbase. I can connect but do not get an proper IP. [16:18] Im in doubt on how to couple the ap thats running "mon0" with a dhcp server. === SJrX is now known as SJr === stan is now known as Guest50882 === JanC_ is now known as JanC === sieb is now known as sieb_away [21:52] Hello [21:53] it may be a stupid question, but how can I check if a system is ubuntu desktop or ubuntu server? :> [21:54] I'm not sure if deployed image is gui-less ubuntu, or ubuntu server [21:54] lsb_release -a says it's ubuntu 13.04 [21:54] Do you only have SSH access atm then? [21:55] yup [21:55] dpkg --get-selections | grep network-manager [21:55] that is a graphical package [21:55] not sure of another way, never come accross the need :) [21:56] well, there's no output :> [21:56] sources.list has just raring repos [21:57] dpkg --get-selections | less [21:57] then you can check what packages are installed, pastebin the pages if you are unsure [21:58] well, no Xorg :> [21:59] I'm new to Ubuntu as a server OS, not sure if Ubuntu is mostly a desktop 'remix' with GUI parts hacked out [21:59] or more of a standalone project [21:59] The GUI pats are no hack. [21:59] its neither, really. [22:01] I much prefer using ubuntu as a server, gui just pisses me off :P [22:02] hmm, I do have alndscape installed :> [22:02] landscape* [22:04] isnt that just an update webui management thing? What more does it do? [22:04] kinda, allows for batch server management, etc [22:04] AFAIK, ofcourse [22:06] humm, and it's pay for i think :( Puppet opensource ftw :P [22:09] heh? puppet isn't opensource [22:09] It has a opensource branch [22:10] https://puppetlabs.com/puppet/puppet-open-source/ [22:11] oh, I wrote it off, since it's so limited in what I would want it to do [22:13] I really like it, just finished a class to setup to vm cluster nodes [22:19] hallyn: so is there some way to turn off the subvolume stuff for lxc w/btrfs? [22:20] hallyn: it interferes with --one-filesystem backups :< [22:33] Hello, I have a server and I wanted to know what the best way to combine drives is? My host doesn [22:33] doesn't offer RAID0, so I wanted to do something like that [23:33] hi. any known issue on 13.04 64 mini not recognizing kb and mouse? [23:35] it«s a TX200 S2 - XEON 3.2Ghz DUAL CORE. tested other OSs and do fine. [23:37] ... and i did try other kb & mouse... [23:38] not recognizing, as in, they don't work? or? [23:38] could be a usb thing. [23:38] like it's not recognizing your usb hub [23:38] which would be *really* weird. [23:39] I'm trying to do an installation and I can't pass installer boot menu due to kb and mouse not functioning [23:39] jkitchen: but it recognizes in debian, win server... [23:39] no, I mean a driver issue with 13.04 [23:39] not blaming your hardware [23:39] oh :) [23:40] :( [23:40] are you using usb or ps2 keyboard? [23:40] usb jkitchen [23:40] is there a ps2 keyboard available you can use? [23:40] assuming the machine has ps2 ports. [23:41] not saying that's the solution. I mean, it's *a* solution, but we can use the ps2 keyboard to troubleshoot [23:41] or if you have a ps2/usb adapter [23:41] i have to find one. yes i have but not near by. that's a sollution indeed [23:41] solution i men [23:41] you can also look into your machine's bios to see if it has legacy usb keyboard support enabled [23:42] I've had that cause wonkiness depending on how it was set [23:42] tks jkitchen . i'll install tomorrow [23:42] tks a lot [23:52] so weve got a two servers on is the web .. other the database. [23:53] I'm just assuming that we've got some SSH keys for connections between the two ... and I'm root on the web server [23:53] How can I 1) check to see what SSH permissions are between these machines 2) attempt to use that key for connection purposes