/srv/irclogs.ubuntu.com/2013/10/22/#ubuntu-server.txt

gdoshitsujiTMO: (sorry had dinner) here ya go - http://pastebin.ubuntu.com/6280144/00:22
hitsujiTMOhmm, so conf.d is ignored00:43
hitsujiTMOgdos: can you paste /etc/apache2/conf-available/dwww.conf   and /etc/apache2/conf-available/dhelp.conf   and the output of: ls -l /etc/apache2/conf-enabled00:45
gdoshitsujiTMO: (sorry had dinner) here ya go - http://pastebin.ubuntu.com/6280144/02:11
gdosi'm thinking this broken package is causing my apache2 headaches - http://pastebin.ubuntu.com/6280144/ - how do i remove it?02:39
soahcccIs it possible to get an unused device in /proc/mdstat? I've installed a fresh copy, installed mdadm and there is no raid and no unused device :(03:37
RoyKsarnold: haven't written much, but I can answer if you have questions05:46
=== freeflying_away is now known as freeflying
Gletob I'm trying to set up a basic samba print server and need to add the drivers.  When I use the command "net rpc rights grant Everyone SePrintOperatorPrivilege -U root" I get: Could not connect to server 127.0.0.1 Connection failed: NT_STATUS_ACCESS_DENIED06:08
babinlonstonHi all How to setup a VPN server ?07:12
jkitchenbabinlonston: https://help.ubuntu.com/community/OpenVPN07:25
jkitchenit's a good number of steps, but it's pretty straightforward07:26
mac_nibbletDoes anyone know how a crontab can be executed 10 minutes late ?07:26
babinlonstonjkitchen: configured there are some issue troubleshooting it i used this like to setup it https://www.digitalocean.com/community/articles/how-to-setup-your-own-vpn-with-pptp07:27
=== freeflying is now known as freeflying_away
jkitchenmac_nibblet: if the clock changes, cron tries to be smart and catch anything it missed07:29
mac_nibbletjkitchen: it has not changed07:29
mac_nibbleti scheduled something for 19:54 it was executed 20:0607:29
jkitchenby what clock did you record that it ran at 20:06?07:30
mac_nibbletThe records where updated in mysql at that time07:30
mac_nibbleton the same machine07:30
mac_nibbletso it's not a clock missmatch07:30
jkitchenis it possible that something held up the mysql update?07:31
mac_nibbletjkitchen: nopp07:31
jkitchenweird07:31
jkitchenyou said the records were updated in mysql at that time, how were you checking this?07:31
mac_nibbletCLI07:31
jkitchenjust up-entering on a query until it gave you the updated record?07:31
jkitchenwhat does syslog say regarding this cron job?07:32
mac_nibbletlet me check07:32
jkitchenbabinlonston: let me try to understand. You used https://www.digitalocean.com/community/articles/how-to-setup-your-own-vpn-with-pptp to set up a vpn and you're having trouble?07:33
mac_nibbletjkitchen: interesting....07:33
jkitchenif that's the case, then I'm sorry, I've only ever worked with openvpn on the server end of things (and to be honest, I don't see why I would want to use anything different :)07:34
mac_nibbletjkitchen: the command is being run at 19:54:0107:34
jkitchenmac_nibblet: it's possible there's some caching going on? you should also see when the cron started and when it stopped07:34
mac_nibbletjkitchen: http://caps.pmg.se/caps/e8122b.png07:35
jkitchen(by looking at the cron:session entries in /var/log/auth.log, that is)07:35
mac_nibbletoh07:36
mac_nibblet:p07:36
jkitchenwhy would you screenshot text? :)07:36
mac_nibbletuh, it's not a screenshot ^_^07:36
mac_nibbletwell it is, but gtkgrab07:36
jkitchenmac_nibblet: screenshot of text :)07:37
jkitchenanywho07:37
jkitchenlook in auth.log to see when that cron started, and when it stopped07:37
mac_nibbletjkitchen: http://caps.pmg.se/caps/e34cd6.png07:40
mac_nibbletthat does not make any sense07:40
mac_nibbletbecause the crontab took around 7 seconds to complete07:40
jkitchenI'm guessing caching on the mysql server.07:42
jkitchenor that your clocks are off by about 10 minutes :)07:42
jkitchenanywho, good luck! I must acquire sleep.07:44
=== psivaa-afk is now known as psivaa
=== zz_Gurkenmaster is now known as Gurkenmaster
littlebithello people, when you are in a hotel or in an airport, there is always a wifi hotspot that offers you to gain access to the internet, but only when you pay a fee, you will be given a username and password in order to gain access to the internet. Is there a similar solution in ubuntu?13:14
=== freeflying_away is now known as freeflying
tarvidhow do I get a remote server to use static dns addresses without ifdown ifup?13:38
busconhi14:05
busconi'm trying to install samba4 on the latest ubuntu server 3.1014:06
buscon13.10 i mean14:06
busconbut i get an error14:06
hitsujiTMOwhats the error buscon?14:08
busconhitsujiTMO: just a second, maybe i've found the error14:09
buscon:)14:09
=== freeflying is now known as freeflying_away
soahcccIs it possible to get an unused device in /proc/mdstat? I've installed a fresh copy, installed mdadm and there is no raid and no unused device :(15:01
irvhow easy is it to expand an encrypted partition?15:17
irvi've managed to fill mine up so i'd like to expand it quite a bit15:18
irvi've already expanded the VHDx15:18
GletobWhenever I try to run "sudo net rpc rights grant Everyone SePrintOperatorPrivilege" I get: "Could not connect to server 127.0.0.116:50
GletobConnection failed: NT_STATUS_ACCESS_DENIED16:50
Gletob"16:50
GletobI'm trying to set up printer drivers with Samba16:51
sarnoldRoyK: cool, thanks :) I'm thinking of buying a handful of 3tb drives and wondering if you'd recommend a raidz1 or raidz2 configuration for commodity consumer hardware or mirrors of raidz1 or raidz1s of mirrors or ... there's just so many different ways to get there. :)16:59
sarnoldRoyK: I'm thinking it'd be nice to keep it under $1000 for the storage and it'd be nice to have enough space to not think about it for a few years :)16:59
sarnoldRoyK: I was thinking of using a 500-gig ssd for slog and l2arc, would that be overkill or underkill? :)17:00
jdstrandadam_g: fyi, I am doing raring cinder, keystone and nova security updates17:21
jdstrandadam_g: cinder is a no change rebuild for -security over what was there before, so you don't have to do anything for your proposed package17:22
jdstrandadam_g: nova is to fix bug #1212179 which is in your proposed update already17:23
uvirtbotLaunchpad bug 1212179 in nova/folsom "[OSSA 2013-024] nova should check the is_public of flavor when creating an instance" [Critical,Fix committed] https://launchpad.net/bugs/121217917:23
jdstrandadam_g: keystone is to fix bug #1179955 (part of your update) and bug #1202952 (doesn't seem to be part of your update)17:23
uvirtbotLaunchpad bug 1179955 in keystone/folsom "Disabling a tenant would not disable a user token" [High,Fix committed] https://launchpad.net/bugs/117995517:24
uvirtbotLaunchpad bug 1202952 in keystone/folsom "[OSSA 2013-025] PKI tokens are never revoked using memcache token backend (CVE-2013-4294)" [High,Fix committed] https://launchpad.net/bugs/120295217:24
ivoksCVE-2013-442817:40
uvirtbotivoks: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4428)17:40
ivoks\o/17:40
jdstrandadam_g: also, I'm fixing glance bug #1235378, which is part of your proposed update as well17:40
uvirtbotLaunchpad bug 1235378 in glance/folsom "[OSSA 2013-027] 'image_download' role in v2 causes traceback" [Undecided,Fix committed] https://launchpad.net/bugs/123537817:40
sarnoldivoks: looks like uvirtbot queries something like launchpad or NVD or MITRE for cve information; the ubuntu UCT database or the debian CVE database may have newer information, as they do in this case.17:48
sarnoldivoks: see e.g. http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-4428.html or https://security-tracker.debian.org/tracker/CVE-2013-442817:48
uvirtbotsarnold: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4428)17:49
uvirtbotsarnold: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4428)17:49
sarnoldquiet you silly bot17:50
TheLordOfTimeheh17:53
lotiahi all. When using software raid, is it possibly to define a scheduler for the 'mdX' device or only on the underlying disk?18:02
Daniel12Hey, Propably a newbie question, but it was hard for me to find an answer to this online: Do apache2 logfiles really show the full traffic stats? Let's say I have a 1GB file, as soon as someone starts the download it shows 1GB traffic, right? If yes, is there a tool to measure the real traffic?18:25
sarnoldDaniel12: this looks useful: http://httpd.apache.org/docs/2.2/mod/mod_logio.html18:28
sarnold(change the 2.2 in the url to reflect whatever version you have available, apache is good about making urls work as you expect :)18:28
Daniel12sarnold: great! Thank you! Will look into this.18:29
sarnoldDaniel12: thanks for asking the question, I've never looked into it before, but you made me wonder. hehe. :)18:31
patdk-wkheh?18:32
patdk-wkapache doesn't log how much was downloaded, till the download completes and is over18:32
patdk-wkand that download size does not include headers by default18:32
Daniel12patdk-wk: oh. So an aborted download will show the (real) traffic it caused?18:34
patdk-wkas long as real, doesn't mean, http headers, yes18:34
Daniel12patdk-wk: thanks!18:34
sarnoldpatdk-wk: that's what made me wonder -- surely apache wouldn't wait to log until the request was over, what if you had a few hundred thousand connections drawing a byte per second or something? the log files would never report anything... so of course it'd log immediately..18:36
patdk-wkit never logs immediantly :)18:37
sarnold.. but then I figured admins would need -some- way to realize that no one ever finishes downloading their 50megabyte background image, but how would they.... -> MUST GO FIND OUT :) hehe18:37
sarnoldno?18:37
patdk-wkI have log entries happen a good day later18:37
patdk-wkonly way to know is by loading the status pages18:38
sarnold"status pages"?18:40
RoyKsarnold: ping19:40
=== bitnumus is now known as Guest57978
nsh001Hello all,I need some help,I was installed ubuntu server 13.10 and default installed LAMP pkg,when i was installed phpmyadmin,and login it ,The phpmyadmin tell me it need mcrypt,how to make it?thanks20:15
MavKenapt-get install php5-mcrypt20:16
nsh001the system auto installed it20:17
nsh001but php.ini is auto config20:17
nsh001i can't find the php5-mcrypt path20:18
nsh001php.ini mcrypt.modes_dir= and mcrypt.algorithms_dir= I don't know the path20:19
TheLordOfTimensh001: did you install php5-mcrypt?20:19
TheLordOfTimewhoopsies, yes, you did20:19
nsh001Mavken Thanks for you20:19
nsh001@TheLordOfTime php5-mcrypt is auto installed20:20
TheLordOfTimensh001: if you're looking for the mcrypt configuration it gets installed to /etc/php5/conf.d/mcrypt.ini20:21
MavKennsh001, no prob...sorry...in another chat, having some network issues20:21
TheLordOfTime(just an FYI)20:21
TheLordOfTimensh001: the .so for it is somewhere in /usr/lib/php5/ but i'd need to dig around in the 13.10 packages20:21
TheLordOfTimensh001: i'd say refer to the mcrypt.ini file it might already have those?20:22
TheLordOfTimensh001: also, known issue with php5, sometimes those plugins don't refresh after install, so doing a restart of your php5 instance might not hurt20:22
nsh001i finding it20:22
nsh001TheLordOfTime thanks for help and sorry for my english20:23
TheLordOfTimeyour english is fine compared to some of the people i've worked with :)20:23
nsh001let's me try20:23
TheLordOfTime(not joking, it's actually pretty decent)20:23
nsh001TheLordOfTime thanks for you,I can't find it.I need to sleep my time zone is +8 4:26am see you next time20:27
nsh001Have a good time for all!bye20:27
TheLordOfTimesee ya20:28
TheLordOfTimeooo too late :/20:28
TheLordOfTimeoh well, was on the phone :/20:28
sarnoldRoyK: pong :)20:29
sarnoldRoyK: a few more questions :D do you use de-dup ever? do you use copies=2 ever? do you pick-and-choose which datasets you use compression on? which compression algorithm?20:29
RoyKI've used dedup, but without sufficient memory20:30
RoyKdedup is *very* memory hungry20:30
RoyKI haven't been using zfs in prod for a couple of years, but back then I used lzjb compression by default20:30
RoyKsome datasets gzip, some without20:31
RoyKjz4 is probably what I'd used as default today20:31
RoyKI haven't used copies=2 for anything except testing so far20:31
Beatstreethow come no ~/.bash_profile in ubuntu?20:32
RoyKsarnold: before choosing zfs, keep in mind that it's not as flexible as mdraid20:32
RoyKyou can't just add a drive to a raidzN set and have the raidzN grow with another drive20:32
RoyKBeatstreet: .bashrc20:32
Beatstreetsame thing?20:33
RoyKBeatstreet: it's run on login20:33
sarnoldRoyK: oh, you moved away from zfs?20:33
RoyKso is .profile20:33
RoyKsarnold: I switched jobs20:34
sarnoldRoyK: oh!20:34
RoyKsarnold: had some 350TiB on zfs in the last job20:34
sarnoldRoyK: congratulations :) how far out of date am I? hehe20:34
BeatstreetRoyK - I dont see a .profile20:34
RoyKsarnold: only 15 months ;)20:34
sarnoldRoyK: hunh :)20:34
RoyKsarnold: working for hioa.no now20:34
RoyKBeatstreet: just add it to .bashrc20:35
RoyKwill work20:35
Beatstreetadd what?20:35
sarnoldRoyK: ah, I thought you used zfs for hioa .. (not that I ever could have recalled the name..)20:35
RoyKBeatstreet: whatever you want it to run at login20:35
RoyKsarnold: no, I used to work for nilu.no and they have a few zfs installs20:36
sarnoldoooo20:36
sarnoldRoyK: would mdraid let you just add another drive and have it grow?20:37
RoyKsarnold: yes20:37
sarnoldRoyK: the ability to grow over time is one of the reasons why I've considered a handful of mirrored drives instead of raidz levels..20:37
sarnoldobviously I need to re-read more about mdraid :) I just liked how simple zfs looked.20:37
sarnoldRoyK: what filesystems do you use now?20:37
RoyKsarnold: you can add raidz or mirror VDEVs in zfs too20:37
RoyKsarnold: but it won't rebalance the data across the drives, so writes won't be as quick as you'd want them (and reads, perhaps to a less extent)20:38
RoyKsarnold: mostly ext4/xfs on a dell equallogic nas - *not* my choice20:38
RoyKbut then - it mostly work20:38
sarnoldRoyK: I've thought I owed xfs a look too... there's a general "eww" factor to nearly everything oracle-related, but zfs just looked so simple. :) hehe20:39
sarnoldRoyK: did you use different 'pool' styles on a single machine for different datasets? or is it best to just pick a level of redundancy and speed you're willing to live with and use that for everything?20:40
RoyKsarnold: zfs isn't very simple, really, but if you plan it well, it's very good indeed20:40
RoyKsarnold: but I chose not to use zfs for my home server - just using mdraid now20:40
sarnoldRoyK: did you rely much on the smb exports or nfs exports?20:41
RoyKand some filesystem on top of that20:41
RoyKmostly using samba/netatalk20:41
sarnoldRoyK: do you miss the resilvering?20:41
RoyKno20:41
RoyKbut I miss real scrubbing ;)20:41
RoyKchecksumming would be nice20:41
sarnoldyeah, the checksumming feels pretty awesome20:41
RoyKit's got a cost too, though20:42
sarnoldoh?20:42
RoyKzfs will never be as fast as ext4 or xfs on mdraid20:42
sarnoldI figured CPUs were quick enough these days..20:42
RoyKit adds a tiny bit of latency20:42
RoyKso effectively, it's slower20:42
RoyKimho it's fast enought, though20:43
RoyKusually, for a home server, the network's the bottleneck anyway :P20:43
MavKenany of you running ubuntu server on digitalocean?20:43
sarnoldyeah, as I expect mine will be. cheapo-switches...20:44
sarnoldRoyK: all the guides suggest weekly scrubbing.. will that run a risk of driving hardware to premature extinction?20:45
sarnoldRoyK: would you recommend an ssd slog or just let the slog happen on the spindles?20:46
RoyKsarnold: not really a danger20:52
RoyKsarnold: slog or not (or l2arc or not) depends on i/o use pattern20:53
RoyKfor general purpose (your movies, porn, pics blah) slog/l2arc won't be worth much20:53
RoyKfor virtualization slog should be considered20:53
RoyKet cetera et cetera20:54
sarnoldRoyK: aha, I was thinking a giant pile of the thing would go towards having a local ubuntu archive for the times I want to grep -r the world :)20:57
sarnoldRoyK: and I figured l2arc wouldn't help there much, aside from unpack-then-grep, but that might happen better on local machine memory..20:58
sarnoldRoyK: did you do much ARC tuning to make more memory available to applications?20:58
sarnoldRoyK: does the arc duplicate efforts of the linux caching mechanisms?20:59
sarnoldRoyK: ooh ooh is the atime handling affected by the linux relatime mount option?21:00
RoyKsarnold: if you want to grep -r whatever's there, perhaps solr would be better? ;)21:01
RoyKsarnold: not really any ARC tuning - I was running this on openindiana (now not very active, illomos-based opensolaris fork)21:02
sarnoldRoyK: maybe? :) as it is I don't have a copy of it anyhow.. the debian codesearch is awesome though, it covers 90% of my questions easily...21:02
sarnoldRoyK: oh, I thought you used the zfs-on-linux... boy learning a lot today :) hehe21:02
RoyKsarnold: otherwise - try #zfsonlinux - I've been running zfs on linux too, but not in large scale production21:03
RoyK(not production at all)21:03
sarnoldRoyK: thanks for answering my pile of questions! :D21:05
RoyK:)21:05
=== Gurkenmaster is now known as zz_Gurkenmaster
=== Guest37141 is now known as Monotoko
philip550cDoes anyone know what all is needed to create a classroom style domain controller? Essentially I would like to have a group of desktops where a user can sit down at any computer and login and have access to all their files and settings. Unlike a thin client I would like to leverage the power of the desktop not the server and remote connection needs to be available as well. I think this can be done with samba/ldap but I w22:43
philip550could also like to pxe boot the os. So that I can just plug in a new computer and boot from ethernet and its ready to go. Remote connections should not be pxe booted however but something similar to rdp would be nice. thank you22:43
philip550calso single sign on to all the services available to that user account would be needed as well. So all the user has to do is signin to ubuntu and thats it22:44
sarnoldphilip550c: I don't know if anything is ready-made for your situation.. investigate LTSP and MAAS. MAAS is mostly intended for server uses, but might be applicable to your case..22:47
philip550cim messing with MAAS right now but it seems to be more about provisioning, I see that I can make it provision desktops but it doesnt act as a domain controller. Thanks for the suggestion, Ill look into ltsp more, I thought that was for thin clients but I might not have understood that correctly22:49
sarnoldno, you'd need to go to the effort of configuring samba or whatever for that end of things yourself22:49
sarnoldif you combine juju with maas, you just might be able to do something like "juju deploy -n 20 terminals"  -- the end result _might_ be awesome :D but it'd probably be a fair amount of work on your part to get there.22:50
philip550cim experimenting with maas/juju and servers, ill see what I can do with it for desktops22:52
sarnoldcool! if you don't mind, please report back, this sounds fun. :)22:52
philip550cyeah, I will. Are you always on here? this is actually my first time messing with irc. Are some of you on here all day everyday?22:54
philip550ci run my own xmpp server but i see that irc has a different use case now22:55
sarnoldphilip550c: I'd wager 80-90% of the people here just leave an irc client connected all the time. /lastlog -hilight is just too useful..22:55
TheLordOfTimesarnold: or they're on bouncers, i know for a fact that's what i do :P22:56
philip550cok how does /lastlog -hilight work? I just entered it and nothing happened as far as I can tell. Sorry irc newb22:57
philip550coh i see nm22:58
sarnoldphilip550c: hrm, in most clients it'll select just the bits of conversation aimed at you, referencing you, or mentioning any of the words that you might have put highlights / alerts on...22:58
sarnold(and /lastlog -clear ought to get rid of it)22:59
philip550cok thanks22:59
sarnoldTheLordOfTime: hunh, I figured you for a screen+irssi user :)22:59
TheLordOfTimeheh22:59
TheLordOfTimesarnold: need the bouncer so i can access IRC from the phone22:59
philip550cso is it proper etiquette to address people by username before speaking?22:59
sarnoldTheLordOfTime: ah, makes sense...22:59
TheLordOfTimecan't ssh+screen+irssi from that very well ;)22:59
TheLordOfTimesarnold: even then, i have the ZNC actively save the logfiles so I never actually miss anything, even if my buffer playback doesn't show everything23:00
sarnoldphilip550c: it's more important the busier a channel is. when it's mostly quiet it doesn't matter much, but if it is quiet enough that your other party has wandered off, then the nicknames are useful again. :) hehe23:00
TheLordOfTimelike here, it's not super useful to always highlight someone's name, but when it's a tad busier it never hurts to identify who you're tlaking to :)23:00
sarnoldexactly23:01
TheLordOfTimei usually always identify who at the first line in a string of lines.23:01
TheLordOfTimenow, #ubuntu, on the other hand, you prepend your destination's name on everything because that moves that much more rapidly23:01
philip550cthanks guys23:01
philip550cmy project is actually more in depth than what I explained before but if I can pull it all off ill report back to here so you can hear about it23:02
sarnoldphilip550c: cool! thanks. :D23:03
rbasakjamespage: please can you subscribe ~ubuntu-server to php-json?23:34
jamespagerbasak,23:35
jamespageyes23:35
jamespagerbasak, done23:36
rbasakThank you!23:39
oscalationhey, i just installed userver on a vm and forgot my username to login with, what are my options?23:45
sarnoldoscalation: if you can boot with "single" on the kernel command line (grub or whatever..) you can get a root prompt pretty easy, that you can then use to inspect the system to find username, authorized_keys, password hashes, etc23:45
oscalationsarnold, luckely i got it by guessing23:50
oscalationthank you for the suggestion23:50
MavKenwhat is the easiest way to get php mail working without having a full blown mail server?23:54
MavKenit is used for sending out e-mail confirms and password resets23:54
sarnoldMavKen: I think PHP PEAR offers an inprocess mail() mechanism that doesn't rely on local host MTA support...23:56
MavKenok thanks, will check it out23:56

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!