| === SPeedY is now known as SPeedYdr | ||
| === thumper-otp is now known as thumper | ||
| === Lcawte is now known as Lcawte|Away | ||
| === zz_swebb is now known as swebb | ||
| === EzeQL is now known as Guest57139 | ||
| ruben23 | How do I remove a specific extension from a directory..? sample directory have 10K wav file adn 5K .mp3 files i want to remove the .wav files only..? any idea..? | 02:22 |
|---|---|---|
| jyfe | rm /dir/*.wav \OR\ cd dir && rm *.wav ? | 02:27 |
| Pici | find /path/ -iname "*.wav" -delete (will do it recursively) | 02:28 |
| === _Jeepbeats is now known as Jeepbeats | ||
| === EzeQL is now known as Guest64591 | ||
| Tohsh | Having an issue with a fresh install of 14.04 server. Boot will freeze during adding swap. Will boot fine with "nomodeset" on kernel in grub. Verified UUID's match in /etc/fstab and blkid. Have not experienced this issue with any builds in the last few years. Any idea? | 04:48 |
| jonascj | Hi all. What is the difference between the php5-mysql and php5-mysqlnd package? Both claim to provide the php mysql bindings? | 05:05 |
| OpenTokix | jonascj: The mysqlnd library is highly optimized for and tightly integrated into PHP. The MySQL Client Library cannot offer the same optimizations because it is a general-purpose client library. | 05:09 |
| dw1 | http://dev.mysql.com/downloads/connector/php-mysqlnd/ | 05:11 |
| jonascj | OpenTokix: thanks, but I do not understand. All references indicate that mysql-server and mysql-client should be installed alongside both php5-mysql and php5-mysqlnd. So they both rely on anothe rinstallation of the mysql server and client, don't they? | 05:13 |
| jonascj | *another installation | 05:14 |
| OpenTokix | jonascj: "all references" beeing howtos on random webpages that you copy and paste from? | 05:14 |
| jonascj | OpenTokix: no, I am actually stopping and thinking, otherwise I would have installed both. I wonder why some suggest one package and others the other package | 05:16 |
| OpenTokix | jonascj: the thing is the mysqlnd is pretty new, so I am guessing the bulk of guides talking about php and mysql is pretty old. | 05:16 |
| jonascj | 2http://packages.ubuntu.com/precise/php/php5-mysqlnd | 05:17 |
| jonascj | vs http://packages.ubuntu.com/precise/php5-mysql | 05:17 |
| OpenTokix | jonascj: I would go with the native driver, since it is recommended from the mysql docs | 05:17 |
| jonascj | more or less the only thing setting those two pages apart is "native" | 05:19 |
| jonascj | but why a native driver? I thought the idea was to go cleanly through well defined sql interfaces. | 05:19 |
| jonascj | OpenTokix: thanks, I'll read mysql's own statement | 05:19 |
| === Ursinha-afk is now known as Ursinha | ||
| Gaba1 | hello, can someone please lend a hand? I am having issues post installation | 07:43 |
| sarnold | Gaba1: hello ;irc tends to work best if uou jst ask questions :) | 07:44 |
| Gaba1 | ok thanks | 07:44 |
| cfhowlett | !details | 07:44 |
| ubottu | Please elaborate; your question or issue may not seem clear or detailed enough for people to help you. Please give more detailed information, errors, steps, and possibly configuration files (use the !pastebin to avoid flooding the channel) | 07:44 |
| Gaba1 | I used yumi to put ubuntu server onto a flash drive and then installed (completely) onto my PC and once I rebooted I just get a little white curser blinking at me | 07:47 |
| Gaba1 | then I repeated the process and the same thing happened again | 07:48 |
| Gaba1 | I then tried to use the check for errors function and I just got a screan that blinked white and black and I decided to turn my computer off before I began to seize | 07:48 |
| Gaba1 | !I am now running Ubuntu 12.04 off of another flash drive. memory is 7.8Gig. | 08:17 |
| ubottu | Gaba1: I am only a bot, please don't think I'm intelligent :) | 08:17 |
| Gaba1 | !processor is AMD phenom 8750. OS is 64 bit | 08:17 |
| sarnold | Gaba1: so a 'live image' works okay but installing it doesn't work? | 08:18 |
| Gaba1 | I am running a live version of ubuntu 12.04, but I am attempting to instal ubuntu server | 08:18 |
| Gaba1 | my ultimate goal is to run a minecraft server on that computer, but it was lagging using windows | 08:20 |
| Gaba1 | I am now installing ubuntu 12.04.3 LTS and it recognizes that I have installed ubuntu 14.04 LTS (which I assume is the server I was trying to instal). I am splitting my partition in half for both to be installed at the same time | 08:26 |
| === EzeQL is now known as Guest21061 | ||
| LeMike | Hello. How can I see how much physical space is given on the drive and how much is mounted? Like "Disk Size: 200G, /dev/sda1 begin 1024M end 150G" or something like that | 10:10 |
| sarnold | LeMike: 'df' will show you which filesystems are mounted and how much space they have; fdisk -l will show you partition table information | 10:12 |
| LeMike | oh yee. `fdisk -l` ... i need coffee. sorry! but thanks sarnold :) | 10:14 |
| sarnold | LeMike: have fun :) | 10:14 |
| stetho | Hi all. Is there a correct/clever way to install packages from one release in to a lower numbered release - trusty and precise to be exact? | 10:15 |
| sarnold | stetho: check out 'package pinning', that might do what you want | 10:15 |
| stetho | sarnold: I always thought pinning was the other direction (new releases, old packages) but after reading PinningHowTo it looks exactly what I need - thanks | 10:31 |
| sarnold | stetho: with the usual caveat that the packages weren't tested for that and wreen't intended for that :) | 10:32 |
| === Ursinha is now known as Ursinha-afk | ||
| === Lcawte|Away is now known as Lcawte | ||
| === Ursinha-afk is now known as Ursinha | ||
| === EzeQL is now known as Guest16666 | ||
| sarnold | jamespage: we'd like to demote chkrootkit from main; any comments? https://bugs.launchpad.net/ubuntu/+source/chkrootkit/+bug/1324111 thanks | 12:52 |
| uvirtbot | Launchpad bug 1324111 in chkrootkit "please remove chkrootkit from main" [Undecided,New] | 12:52 |
| smoser | Daviey, didn't you enable nested virt in 12.04 ? | 13:07 |
| phunyguy | \o/ | 13:42 |
| === alexisb_bbl is now known as alexisb | ||
| === medberry is now known as Guest77682 | ||
| === swebb is now known as zz_swebb | ||
| sync0pate | anyone in here know much about UK data protection? | 14:52 |
| sarnold | sync0pate: I have this url :) http://www.ico.org.uk/news/latest_news/2013/~/media/documents/library/Data_Protection/Detailed_specialist_guides/p | 14:53 |
| sarnold | rivacy-in-mobile-apps-dp-guidance.pdf | 14:53 |
| TJ- | sync0pate: There is none; apply to GCHQ for everything you need :p | 14:54 |
| sync0pate | I've got a client who is convinced that: | 14:54 |
| sync0pate | a) shared hosting or vps is not secure enough to meet their data protection requirements | 14:55 |
| sync0pate | b) they do not have the expertise or budget to host anything in-house | 14:55 |
| sync0pate | I don't know what other options they could possibly have | 14:55 |
| sync0pate | and I'm not convinced they're right on either count | 14:55 |
| TJ- | sync0pate: Depending on the confidentiality of the data, then yes, a) makes perfect sense | 14:56 |
| sync0pate | but what options does it leave them with? | 14:57 |
| Meerkat | get out of the UK. | 14:57 |
| TJ- | sync0pate: Depending on how it is operated and protected physically, dedicated servers might be a solution | 14:57 |
| sync0pate | well they're not legally allowed to transfer the data out of the UK either | 14:57 |
| sarnold | amazon may have proper certifications to placate "cloud isn't safe enough" | 14:58 |
| sync0pate | and they've said they can't afford a dedi :\ | 14:58 |
| sync0pate | they're already e-mailing this data back and forth without any security :\ | 14:58 |
| rbasak | Sounds like you have a sales or customer service issue there. | 14:58 |
| TJ- | sync0pate: advise then withdraw, it sounds like the typical scenario where the consultant gets the blame later | 14:59 |
| sync0pate | TJ-, yeah | 14:59 |
| sync0pate | that's what I'm leaning towards | 14:59 |
| TJ- | sync0pate: my experience has been the cheapest clients cause the most agro | 14:59 |
| sync0pate | it's just I've been brought into this by a friend, so I'm keen to help if I can | 14:59 |
| sync0pate | but | 14:59 |
| sync0pate | yeah you know | 15:00 |
| sync0pate | you're right | 15:00 |
| sync0pate | if they can't afford a dedi, how are they affording my invoice? | 15:00 |
| dasjoe | sync0pate: there are encrypted cloud solutions, maybe something like that'd work? | 15:00 |
| TJ- | sync0pate: So, honour your intentions by providing them a 'no liability' free report, then explain why you have to withdraw if your advice is ignored | 15:00 |
| sync0pate | thanks, I appreciate the advice | 15:00 |
| TJ- | dasjoe: Even with encrypted cloud, once the data is in memory it's rarely encrypted and out of control of the customer | 15:01 |
| sync0pate | I'm not even allowed to mention the word "cloud" | 15:01 |
| sync0pate | the irony is this is a system intended to share information... | 15:01 |
| sync0pate | with other organisations | 15:02 |
| dasjoe | TJ-: the idea is to never transfer unencrypted data into the "cloud" and for encryption keys to stay on the clients' computers | 15:02 |
| TJ- | sync0pate: I hate that euphemism, but it seems to have taken over. It's simply using someone else's servers to run your core operations in most cases | 15:02 |
| sync0pate | dasjoe .. that's an interesting idea.. | 15:02 |
| sync0pate | I didn't even think of that | 15:02 |
| TJ- | dasjoe: But I think sync0pate point is, they need to process the data 'in the cloud', too, not just store it. | 15:02 |
| sync0pate | well.. TJ- , yeah.. to an extent | 15:03 |
| sync0pate | but | 15:03 |
| sync0pate | hmm | 15:03 |
| sync0pate | it might be part of the solution | 15:03 |
| sync0pate | I could maybe convince them to do the data-processing in-house | 15:03 |
| sync0pate | and then anything that needs to be shared can be end-to-end encrypted | 15:03 |
| dasjoe | TJ-: Well, it wouldn't be possible to process data "in the cloud", no. That's why I like it so much ;) | 15:04 |
| TJ- | sync0pate: In which case it'd be cheaper to store it in-house too, surely, only sharing on an as-required basis and encrypting any shared data to the recipients public key | 15:04 |
| sync0pate | TJ-, yeah, that makes more sense to me too | 15:04 |
| sync0pate | but they don't want incoming connections to their network | 15:04 |
| sync0pate | so maybe it could be in-house and locked off | 15:05 |
| sync0pate | and then upload the data that needs sharing | 15:05 |
| sync0pate | encrypted with the recipient key, like you say | 15:05 |
| TJ- | sync0pate: What *do* they want? access by 'client's to a sub-set of their data ? | 15:05 |
| sync0pate | yeah | 15:05 |
| sync0pate | exactly that | 15:05 |
| TJ- | sync0pate: If the 'client' requests are not high-volume then why not a mail auto-responder that simply takes well-formatted emailed requests to a named@domain.tld mailbox, uses the locally pre-shared public key of that client together with the locally stored pre-shared return email address, encrypts the requested data, and uses 'sendmail' to send it ? | 15:07 |
| TJ- | sync0pate: Those well-formatted emails could be generated by a shared-hosting web-form | 15:07 |
| sync0pate | it's even simpler than that | 15:09 |
| sync0pate | the client doesn't even request the information | 15:09 |
| sync0pate | they are sent it | 15:09 |
| TJ- | sync0pate: sorted then... provided they use the pre-shared keys and email addresses | 15:12 |
| sync0pate | well | 15:12 |
| sync0pate | it's still a battle to convince them to host in-house | 15:12 |
| sync0pate | they already have an in-house network, that is already secured | 15:13 |
| sync0pate | does adding another server add any security risk? | 15:13 |
| sync0pate | if it's a fully-internal server? | 15:13 |
| TJ- | Maybe point out how insecure their secured network is, by emailing (unencrypted) from the secure side | 15:13 |
| sync0pate | well that's why I'm getting annoyed | 15:14 |
| sync0pate | I can understand the security requirements | 15:14 |
| sync0pate | but everything they do now is nowhere near secure | 15:14 |
| dasjoe | hah, sounds like a job from hell, I don't think I'd do it | 15:14 |
| sync0pate | and this is only a small part of their business | 15:14 |
| TJ- | sync0pate: Maybe you need to provide a quick "security 101" lesson | 15:14 |
| sync0pate | am I wrong about that part though | 15:16 |
| sync0pate | if they have an already secured network | 15:16 |
| sync0pate | adding an internal server to it, assuming that is also secured and patched and etc | 15:16 |
| sync0pate | isn't introducing a security risk, is it? | 15:16 |
| TJ- | sync0pate: Well, technically, any addition expands the exposure risk, but in practice, you're correct | 15:18 |
| TJ- | sync0pate: It sounds to me like they don't even need a new server, just an additional service on an existing system | 15:19 |
| sync0pate | well exactly | 15:19 |
| sync0pate | they just need a DB | 15:19 |
| sync0pate | internally | 15:19 |
| sync0pate | that occasionally sends out encrypted data "somehow" | 15:19 |
| sync0pate | anyway, cheers for that | 15:20 |
| sync0pate | I've got a meeting with them next week | 15:20 |
| sync0pate | I think I need to stress to them that there are lots of other ways to achieve what they want without security issues | 15:21 |
| sync0pate | and more importantly | 15:21 |
| sync0pate | everything they do currently is insecure | 15:21 |
| TJ- | sync0pate: And make sure to bracket each potential solution with its capital and ongoing costs | 15:22 |
| sync0pate | absolutely | 15:22 |
| sync0pate | the whole thing is a fucking mess for a ton of other reasons | 15:22 |
| sync0pate | the person I'm dealing with, who is in charge of procuring the solution.. | 15:23 |
| sync0pate | doesn't actually know the ongoing budget | 15:23 |
| sync0pate | so all this "that won't be affordable" is utterly speculative | 15:23 |
| sync0pate | I need to stop accepting work leads from friends | 15:24 |
| === zz_swebb is now known as swebb | ||
| === psivaa-sprint is now known as psivaa | ||
| Overand | Anyone have any ideas of a 'web interface for web hosting' - not designed for 'end users' but for fairly tech sasavy people - that will handle making apache virtual hosts, perhaps mySQL databases, etc- but is fairly integrated, and also does *not* conflict with creating or editing your config files yourself? | 16:00 |
| Overand | Something a bit like ISPConfig or t hat sort of thing? | 16:00 |
| Overand | (WHich I don't know if lets us edit config files manually as well) | 16:00 |
| [lutchy] | Overand, Webmin ? | 16:05 |
| rbasak | !webmin | 16:06 |
| ubottu | webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. | 16:06 |
| * rbasak knows no more about it. | 16:06 | |
| [lutchy] | You can install it independently | 16:06 |
| sarnold | I hear webmin is a good worm vector | 16:06 |
| rbasak | I think the general issue is that a large number of tech savvy people who could write such a thing would choose not to use it, so it doesn't happen. | 16:07 |
| rbasak | For a paid equivalent, there's cpanel. | 16:07 |
| [lutchy] | I have it installed here on all my Ubuntu installations using Webmin repo. My public servers have Webmin blocked for security reasons | 16:07 |
| sarnold | also a good worm vector.. | 16:07 |
| [lutchy] | Well, use whatever you like that works for you... You can even go ahead and create you 'Web Interface System' or OPT for Server Appliance that has integrated 'Web Interface' | 16:09 |
| * patdk-wk created his own | 16:10 | |
| patdk-wk | too many crappy php stuff, with horrible md5 passwords | 16:10 |
| * [lutchy] plan to create a Web Interface of his own (huge project) | 16:11 | |
| === Ursinha is now known as Ursinha-afk | ||
| jbwiv | guys, when you log into an ubuntu server, it tells you the number of packages which can be upgraded and how many of these are security upgrades. anyone know how to manually do this at the command line? | 18:07 |
| hadifarnoud | I installed mongodb with apt-get install mongodb | 18:09 |
| hadifarnoud | it did install something. but composer still complains | 18:09 |
| dasjoe | jbwiv: /usr/lib/update-notifier/update-motd-updates-available | 18:15 |
| dasjoe | jbwiv: Actually, that file calls "/usr/lib/update-notifier/apt-check --human-readable" | 18:22 |
| === EzeQL is now known as Guest53265 | ||
| jbwiv | dasjoe: great...thanks! | 18:44 |
| pakcjo | Hello, I just upgrade to 12 and I think I got into this https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1003854 | 19:32 |
| uvirtbot | Launchpad bug 1003854 in openldap "Database upgrade/migration fails with nested db directories (lucid to precise)" [Medium,Confirmed] | 19:32 |
| pakcjo | i have no idea how to recover | 19:32 |
| pakcjo | how can I test slapd??? | 19:38 |
| pakcjo | can someone help me? | 19:41 |
| pakcjo | I added accesslog to /var/lib/ldap/ | 19:42 |
| pakcjo | slapd started but it doesn't seem to have anything | 19:42 |
| pakcjo | how can I recover? | 19:42 |
| cwillu_at_work | what package is responsible for generating /etc/nsswitch.conf? | 19:45 |
| cwillu_at_work | dpkg-query -S /etc/nsswitch.conf doesn't list anything | 19:45 |
| pakcjo | I really could use some help right now... | 19:46 |
| Pici | cwillu_at_work: I'd guess either libc-bin or base-files. Both contain an nsswitch.conf file, and could be likely candidates. | 19:46 |
| cwillu_at_work | Pici, thanks | 19:46 |
| sarnold | pakcjo: check #ubuntu-server channel logs, I think I saw someone else mention this before, no idea if I ever saw a resolution. | 19:47 |
| cwillu_at_work | Pici, where do you see that they contain that? dpkg -L doesn't show that, but maybe it's generated in a post-install script or some such? | 19:48 |
| Pici | cwillu_at_work: I did: dpkg -S nsswitch.conf, and also looked at the nsswitch.conf manpage. | 19:49 |
| cwillu_at_work | ah, yes, there's a psotinst | 19:49 |
| pakcjo | sarnold: where are the logs? | 19:49 |
| sarnold | pakcjo: irclogs.ubuntu.com | 19:50 |
| pakcjo | sarnold: thanks | 19:50 |
| sarnold | pakcjo: good luck, sleep time here | 19:50 |
| pakcjo | oh no search... dan | 19:50 |
| RobCWDudley | Hey folks, is it possible to configure an FTPd (say VSFTPd) to allow multiple users to access the same directory (/var/www) and have file ownership sorted so web server can read and users can modify / delete? | 19:50 |
| Patrickdk | it's called, group permissions | 19:53 |
| Patrickdk | or, go crazy nuts, and use acl's | 19:53 |
| Patrickdk | but ftp doesn't do acl's | 19:53 |
| RobCWDudley | Patrickdk: ok so owner remains as user that uploads, group it www-data and that should just work? | 19:54 |
| pakcjo | I'm going crazy, I need ldap running | 19:55 |
| pakcjo | that bug was reported on 2012 and it still present... WTF guys | 19:56 |
| pmatulis_ | pakcjo: how big is your data/database? possibly install a test 12.04 vm and import the db to see if that works | 20:14 |
| === pmatulis_ is now known as pmatulis | ||
| pakcjo | pmatulis: shouldn't be that big... | 20:15 |
| pakcjo | pmatulis: but that's not the case, I upgrade and ended up in this state... | 20:15 |
| pmatulis | pakcjo: sure but it can help you get back the original install by comparing | 20:16 |
| pmatulis | pakcjo: what errors do you see in the logs? | 20:16 |
| pakcjo | slapd shows as iF ... So, there's what seems to be my bug in that page https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1003854 but how can I recover? | 20:16 |
| uvirtbot | Launchpad bug 1003854 in openldap "Database upgrade/migration fails with nested db directories (lucid to precise)" [Medium,Confirmed] | 20:16 |
| pakcjo | it was the same as the log, what I did was to create /var/lib/ldap/accesslog and it started | 20:16 |
| pakcjo | but doesn't seem to be stable and package is still in iF state... how can I resolve that? | 20:17 |
| pmatulis | pakcjo: ah, so slapd is up again? | 20:17 |
| pakcjo | comment #5 suggested something but after modifying it, I don't know what else to do | 20:17 |
| pakcjo | pmatulis: yes, but not in a good state, kerberos can't connect to it | 20:18 |
| pakcjo | iF slapd 2.4.28-1.1ubuntu4.4 OpenLDAP server (slapd) | 20:19 |
| pakcjo | how can I fix that... it's in iF state... | 20:19 |
| pakcjo | i need like to reinstall it but using the modified scripts and not the ones from the package (which seems to be broken since 2012) | 20:19 |
| pmatulis | pakcjo: not sure what 'iF' is. not 'if'? | 20:19 |
| pakcjo | dpkg -l | grep slapd | 20:20 |
| pakcjo | shows "iF" | 20:20 |
| pmatulis | ok, i see the output | 20:20 |
| pakcjo | I tried to ask about this in #debian but they are sure that slapd upgrade is not broken there... | 20:21 |
| pakcjo | so I have a half installed slapd or whatever, and the data is (probably) all wrong | 20:21 |
| pakcjo | so, what can I do? | 20:22 |
| === thesheff17_ is now known as thesheff17 | ||
| pmatulis | pakcjo: it would be great to know what 'iF' means. everywhere i look does not mention 'F' | 20:23 |
| pmatulis | pakcjo: did you check the dist-upgrade logs? | 20:23 |
| pakcjo | pmatulis: where can I find them? | 20:24 |
| pmatulis | pakcjo: /var/log/apt/dist-upgrade , something like that | 20:24 |
| pakcjo | 2014-05-28 20:43:04 status half-configured slapd 2.4.28-1.1ubuntu4. | 20:24 |
| pmatulis | it's normal to have lines like that. keep looking. /var/log/dist-upgrade | 20:25 |
| pakcjo | screenlog.0: Backing up /etc/ldap/slapd.d in /var/backups/slapd-2.4.21-0ubuntu5.5... done. | 20:26 |
| pakcjo | screenlog.0: Loading from /var/backups/slapd-2.4.21-0ubuntu5.5: | 20:26 |
| pakcjo | screenlog.0:dpkg: error processing slapd (--configure): | 20:26 |
| pakcjo | screenlog.0: slapd | 20:26 |
| pmatulis | pakcjo: were you using the old-style config system with slapd.conf? | 20:27 |
| pakcjo | screenlog.0:Installing new version of config file /etc/init.d/slapd ... | 20:27 |
| pakcjo | screenlog.0: Backing up /etc/ldap/slapd.d in /var/backups/slapd-2.4.21-0ubuntu5.5... done. | 20:27 |
| pakcjo | screenlog.0: Loading from /var/backups/slapd-2.4.21-0ubuntu5.5: | 20:27 |
| pakcjo | screenlog.0:dpkg: error processing slapd (--configure): | 20:27 |
| pakcjo | screenlog.0: slapd | 20:27 |
| pakcjo | pmatulis: no that I know, but it sounds to me that this is the same as https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1003854 | 20:28 |
| uvirtbot | Launchpad bug 1003854 in openldap "Database upgrade/migration fails with nested db directories (lucid to precise)" [Medium,Confirmed] | 20:28 |
| pmatulis | it looks like you were (/etc/ldap/slapd.d) but can you confirm you were not using slapd.conf? | 20:28 |
| pmatulis | (if it's running now what does 'ps ax | grep slapd' show?) | 20:29 |
| pakcjo | pmatulis: yes | 20:29 |
| pakcjo | /usr/sbin/slapd -h ldap:/// ldapi:/// -g openldap -u openldap -F /etc/ldap/slapd.d | 20:29 |
| pmatulis | ok | 20:29 |
| pakcjo | # dpkg-reconfigure slapd /usr/sbin/dpkg-reconfigure: slapd is broken or not fully installed | 20:31 |
| pakcjo | should I force it? | 20:31 |
| pmatulis | pakcjo: and you were indeed using nested databases? | 20:31 |
| pakcjo | pmatulis: yes | 20:31 |
| pakcjo | pmatulis: I didn't set it up, so I'm not 100% sure, actually I know nothing about ldap | 20:31 |
| pakcjo | just that before the upgrade it was working fine, now it doesn't | 20:32 |
| pakcjo | at least I need to get that package out of iF state | 20:32 |
| pakcjo | half installed or whatever... | 20:33 |
| pmatulis | pakcjo: accesslog is not necessary for running. you can take the simplification approach and remove it from the config until everything is stable | 20:33 |
| TJ- | pakcjo: F = Half-configured | 20:33 |
| pmatulis | TJ-: same as 'if' ? | 20:34 |
| pakcjo | TJ-: so I need to do: dpkg-reconfigure --force slapd | 20:34 |
| TJ- | The "i" means installed | 20:34 |
| pmatulis | yeah, but the 'f' and 'F' | 20:35 |
| pakcjo | ok, I'll take what's on /var/backup back into /var/lib/ldap, modify the scripts in /var/lib/dpkg/info/slapd.* according to the bug report, and then run dpkg-reconfigure --force right? | 20:36 |
| TJ- | dpkg reports "iF", two flags, first means installed, second means Half-configured see "man dpkg-query" | 20:37 |
| pmatulis | ok, looks like 'f' has now become 'F' | 20:38 |
| pakcjo | ok, now I'm getting a prompt when it says if I want to omit openldap server configuration ??? what is this | 20:40 |
| pmatulis | pakcjo: it wants to know if you want to include the config database into the reconfigure command. i would say 'no' | 20:41 |
| pmatulis | pakcjo: the configuration of slapd is itself a database within slapd | 20:41 |
| pakcjo | ok so I would say no | 20:43 |
| pakcjo | but i don't want an initial configuration, i want to migrade the old one... | 20:43 |
| pmatulis | saying 'y' shouldn't hurt | 20:44 |
| pakcjo | already said no... it asked about values with the old ones, but now it's asking about password... i don't have that | 20:44 |
| pakcjo | empty will use the same? | 20:44 |
| pmatulis | asking about password? | 20:45 |
| pakcjo | hmmm ok, it's up again, still kerberos can't connect | 20:46 |
| pmatulis | pakcjo: not sure what you mean by that. you have kerberos data inside one of your databases? | 20:47 |
| pakcjo | when I try to connect it get conn=1001 op=0 do_extended: unsupported operation "1.3.6.1.4.1.1466.20037 | 20:47 |
| pakcjo | kerberos uses ldap | 20:47 |
| pmatulis | pakcjo: that's the only log message? try running slapd in debug mode (prolly easiest to invoke binary manually but add '-d -1') | 20:58 |
| pakcjo | pmatulis: I'm currently trying to see a way to drop ldap form kerberos... | 20:59 |
| pmatulis | pakcjo: prolly need to add some quotes: | 20:59 |
| pmatulis | /usr/sbin/slapd -h 'ldap:/// ldapi:///' -g openldap -u openldap -F /etc/ldap/slapd.d -d -1 | 20:59 |
| === Ursinha-afk is now known as Ursinha | ||
| pmatulis | do other operations work? | 20:59 |
| pakcjo | I don't have that many users and probably it will just be better to have a normal database, it seems that krb supports its own db2 stuff | 20:59 |
| pakcjo | pmatulis: no, it ask for password, i didn't enter anything so | 20:59 |
| pmatulis | not sure what you mean | 21:00 |
| pakcjo | the only reason that I have ldap here is to work as a database for kerberos, to authenticate users, someone thought that will be a good idea... | 21:01 |
| pmatulis | slapd can be good to have around for other future projects | 21:02 |
| pakcjo | yeah, well, if it is going to break on every upgrade... I rather not | 21:02 |
| pmatulis | don't use nested databases, that's not good form | 21:03 |
| pakcjo | pmatulis: no idea what is that... there are like 10 users only, no idea why it was nested on the first place | 21:05 |
| fridaynext | anybody here use a CLI email client exclusively? | 21:05 |
| pmatulis | pakcjo: prolly b/c whoever set it up didn't know any better | 21:06 |
| pakcjo | fridaynext: mutt | 21:06 |
| fridaynext | pakcjo: do you have specific reasons why you use it exclusively? | 21:06 |
| pakcjo | fridaynext: because i don't like anything else | 21:07 |
| pakcjo | fridaynext: I use i3wm and it looks good in it | 21:07 |
| fridaynext | pakcjo: well that looks cool. | 21:08 |
| === Ursinha is now known as Ursinha-afk | ||
| RobCWDudley | thanks Patrickdk - got it all working now | 21:44 |
| === blake_r_ is now known as blake_r | ||
| pakcjo | is there a way to list everything that is in the ldap database? | 22:23 |
| pmatulis | pakcjo: of course | 22:39 |
| pmatulis | pakcjo: do you know the index number of that database? if you have 2 (accesslog and "normal") then it would be "1" and "2". the config database is "0" | 22:41 |
| pmatulis | pakcjo: the simplest is with: 'sudo slapcat -n 0 > slapcat.config' ; where the index is given by '-n #' | 22:42 |
| pakcjo | thanks pmatulis | 22:45 |
| === swebb is now known as zz_swebb | ||
| === zz_swebb is now known as swebb | ||
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!