=== stooj_ is now known as stooj === Guest69465 is now known as mfisch === mfisch is now known as Guest67039 === peter is now known as Guest90866 === socketguru_ is now known as socketguru === ideopathic_ is now known as ideopathic [04:06] I can't seem to get my Ubuntu 13.04 server to work. . . and I'm not sure about it's network status. [04:09] I've tried to update the system, but keep getting 404 errors. I've changed the location it is trying to get updates from, but I'm getting invalid signitures: "nodata 1" and "nodata 2" [04:09] I chose samba server when first setting it up, if that changes anything. === bilde2910 is now known as bilde2910|away [04:31] Is anyone on? [04:37] !eolupgrade [04:37] End-Of-Life is the time when security updates and support for an Ubuntu release stop, see https://wiki.ubuntu.com/Releases for more information. Looking to upgrade from an EOL release? See https://help.ubuntu.com/community/EOLUpgrades === crazyhead42_ is now known as crazyhead42 [04:50] hi guys, how do i backup the whole intere live linux server..? [04:50] Sorry, Ruben, but I don't think anyone is on. [04:52] crazyhead42: :-( still hoping.. [04:52] It's getting late anyway. [04:53] I'd help you, but I can't get my server up enough to have anything to back up. [04:58] just want to know how to fuly nackup my entire linux server === kickinz1|afk is now known as kickinz1 [07:02] Good morning. === a1berto_ is now known as a1berto === kickinz1 is now known as kickinz1|afk === kickinz1|afk is now known as kickinz1 === kickinz1 is now known as kickinz1|afk [08:02] I'm in need of some help with a squid3 server, i keep getting TCP_denied/403 3915 - standard squid3 configfile, can anyone help (: === kickinz1|afk is now known as kickinz1 === markthomas|away is now known as markthomas === kickinz1 is now known as kickinz1|afk === kickinz1|afk is now known as kickinz1 [08:14] I'm in need of some help with a squid3 server, i keep getting TCP_denied/403 3915 - standard squid3 configfile, can anyone help (: === havanaworks is now known as havanasleeps [08:39] Jakob_: by default squid packaging sets squid up to only permit access from localhost. You'll need to add an ACL rule to the config file to permit access from your local network. [09:13] hello === helpme is now known as Guest53399 [09:13] can't create /var/cache/apt-show-versions/files: No such file or directory at /usr/bin/apt-show-versions line 196. E: Problem executing scripts APT::Update::Post-Invoke-Success 'test -x /usr/bin/apt-show-versions || exit 0 ; apt-show-versions -i' E: Sub-process returned an error code [09:14] Can someone help me [09:14] I deleted everything in /var/cache/ [09:15] Guest53399: Why would you delete everything form there? [09:15] from* [09:15] Because it said cache [09:15] I thought it will regenerate again [09:16] I mean the files in folder [09:16] It should, but still it is not a very good idea. [09:16] It was not. [09:16] a good Idea [09:18] Solution lordievader [09:18] ? [09:19] Guest53399: Can you still run an "sudo apt-get update"? [09:21] I get this error on update [09:21] can't create /var/cache/apt-show-versions/files: No such file or directory at /usr/bin/apt-show-versions line 196. E: Problem executing scripts APT::Update::Post-Invoke-Success 'test -x /usr/bin/apt-show-versions || exit 0 ; apt-show-versions -i' E: Sub-process returned an error code [09:23] Guest53399: Hmm, perhaps "sudo dpkg --configure -a" fixes things? [09:38] how do I setup the autodiscover redirect for the exchange auto discover === Lcawte|Away is now known as Lcawte [11:01] zul, can we catchup on websockify tests when you start pls === ming is now known as Guest82927 === IdleOne is now known as Guest73180 [11:13] I have a problem [11:13] can't create /var/cache/apt-show-versions/files: No such file or directory at /usr/bin/apt-show-versions line 196. E: Problem executing scripts APT::Update::Post-Invoke-Success 'test -x /usr/bin/apt-show-versions || exit 0 ; apt-show-versions -i' E: Sub-process returned an error code [11:13] PLease help [11:30] Guest53399: Did you do what I said? [11:39] yes it dint work [11:40] I am on a web client. the interface is not so good. please tag me when you reply lordievader [11:41] sudo dpkg --configure -a I tried lordievader [11:42] Guest53399: Ok, it didn't solve things? [11:43] Nope [11:46] Guest53399: Can you pastebin the output of 'ls -la /var/cache'? [11:47] I think its working now [11:47] I did sudo mkdir -p /var/cache/apt/archives [11:48] jamespage: yep [11:49] then sudo mkdir -p /var/cache/apt-show-versions/ [11:50] then make a blank file named file in /var/cache/apt-show-versions/ [11:50] then sudo apt-get update [11:50] Thanks lordievader === Lcawte is now known as Lcawte|Away [12:06] jamespage: when you have some time, I'd like your help uploading bcache-tools into Debian - preferably before freeze. === Lcawte|Away is now known as Lcawte [12:30] jamespage: hey [12:36] jamespage: so websockify [12:38] zul, indeed - how goes it? [12:39] jamespage: well the tests are enabled but not running and im not sure why [12:42] zul, I tried them directly upstream and they appear quite broken as well [12:42] jamespage: yeah [12:42] jamespage: and not being comfortable enough with them im not sure what to do [12:43] zul, I wondering whether we just skip the websockify test in nova - it feels not good enough for main [12:43] jamespage: did you try the git tree? [12:44] zul, yeah [12:44] same thing? [12:44] zul, yeah [12:44] all sucks [12:45] zul, I got this far - http://paste.ubuntu.com/8520684/ [12:49] jamespage: i was on trusty by mistake and was running the tests there and they were passing before i noticed I was on trusty for a sec [12:49] zul, they work on trusty? now I'm really uncomfortable websockify is just bust in utopic [12:49] zul, oh in the trusty version you mean? [12:50] jamespage: mistakenly running the tests on the trusty version [12:50] Hi. I would like to set up a VPN (encryption) between two ubuntu servers that can handle around 300 Mbit. What should I choose here? Can OpenVPN manage this? [12:51] zul, https://launchpadlibrarian.net/186746800/buildlog_ubuntu-utopic-i386.swift_2.2.0~rc1-0ubuntu1_FAILEDTOBUILD.txt.gz [12:51] jamespage: this in the openstack pppa? [12:51] oh no nevermind [12:52] zul, nope - proposed [12:52] zul, I figure its a 32 bit build issue [12:52] ah yes [12:52] as I did not see this locally (but I build with an amd64 chroot) [12:52] "OverflowError: long int too large to convert to in" [12:53] jamespage: the websockify stuff makes me nervous [12:53] jamespage: keystone rc2 is out as well if you missed it [12:54] jamespage: dosaboy commited the tests for websockify upstream so maybe we should ask him :) [12:54] zul, oh did he - dosaboy_ ?? ^^ [12:54] jamespage: i noticed that yesterday [12:55] dosaboy_, websockify tests appear a bit busted up - can you help us out? [12:57] zul: i didn't write those tests but i did add some fwir === dosaboy_ is now known as dosaboy [12:58] jamespage: do you have an error i can look at? [12:58] Is anyone familiar with a problem related to disk size geomtry out of bounds [12:58] dosaboy: http://paste.ubuntu.com/8520741/ [12:58] after upgrading to the latest release === Lcawte is now known as Lcawte|Away [12:59] dosaboy, that's direct in the upstream master - http://paste.ubuntu.com/8520742/ [13:00] jamespage, zul: i'll take a look [13:01] the exact error is: [ 10.753795] EXT4-fs (md0): bad geometr: block count 122096646 exceeds size of device (122096624 blocks) [13:04] I can't mount my raid because of the bad geomtr problem [13:05] anyone? [13:07] dosaboy, thanks [13:16] zul, doing keystone [13:16] jamespage: ack [13:16] jamespage: unbreaking my head around with neturon [13:19] zul, doing ceilometer [13:19] not that we actually have rc1 uploaded yet [13:20] jamespage: well you are doing it in spirit ;) [13:38] After updating to 14.01, I now get problems about bad geomtry errors on my RAID [13:38] anyidea? === Lcawte|Away is now known as Lcawte [13:41] Mars__, because there is not 14.01??? [13:43] ohh ops....I meant to say 14.04.1 [13:43] Mars__, noted. [13:44] what is the best way to go about reporting the problem I saw a question on askubuntu of someone else with the problem [13:45] Mars__, bug report??? [13:45] !bug [13:45] If you find a bug in Ubuntu or any of its derivatives, please file a bug using the command « ubuntu-bug » - See https://help.ubuntu.com/community/ReportingBugs for other ways to report bugs. [13:45] okay.. I will go ahead and report it then... [13:47] is there a way to find out what package is failing? [13:49] Mars__, I don't know enough to advise about [13:49] raid [13:49] cfhowlett: okay, thanks === Lcawte is now known as Lcawte|Away [14:36] what the best practice to config for a FQDN when multiple domains point to a single IP? [14:37] I consider each machine (or VM or container) to have a single, canonical FQDN. [14:37] Configure everything for that, and consider the others to be aliases. [14:38] there is only 1 server machine and 14 domains, which is what leads me to this question [14:38] Use the aliases only when you have to (eg. for public-facing virtual hosting, only for Apache configuration) [14:39] If the 14 domains are "equal", then I'd creating a 15th one for the canonical use purpose. [14:39] create [14:39] not sure what you mean by "equal" [14:40] For example if I'm asked to host 14 customer's websites on a single server. [14:40] customers' [14:40] Then there isn't an obvious thing to call the server. [14:41] So I make another name up, maybe under my own company's domain. [14:41] Use that one everywhere as the canonical name. [14:41] Only Apache (and DNS for the customers' FQDNs) see the other names. [14:42] ahhhhhh..... gotcha. this works then as 13 belong to other people and one is mine. [14:42] That'll be fine then. As long as there will never be a requirement that the canonical FQDN you use will have to change. [14:43] If that's even a remote possibility, far easier to register a new name now and make sure _that_ one will never change. [14:43] business name/domain so that won't ever leave [14:45] perfect. now I just need to hammer out why my postfix/dovecot/vimbadmin portion isn't working..... Although I am looking for other ways then vimbadmin as its been nothing but a hassle for me [14:46] I wish I had multiple machines for all this .... this one machine is taking a beating "so to speak"...... 1 machine does all the hosting for everything [14:50] Use containers. [14:50] (though I'm not sure how that'd work with only one public-facing IP, if virtual hosting, though) === danwest_ is now known as danwest [14:57] the virtual hosting is all setup and functioning correctly. now its just a matter of setting up mail for all the domains. Ive got everything down except the vimbadmin which simply just isn't working for me under any configuration I throw at it. basically looking for an alternative way now to setup virtual mail for all the domains [14:58] I know I can go and manually add it all to postfix, but with 14 domains current and more likely to be added later I am just looking for something a little "easier". === satyag is now known as zz_satyag [15:30] I'm using a 32 bit server software, ubuntu 13.04 and can't seem to get it working. my apt-get update currently gets the bad signitures "nodata 1" and "nodata 2" [15:32] crazyhead42: 13.04 is not a supported release of Ubuntu. It reached end-of-life in January. [15:32] crazyhead42: FYI, 13.04 is EOL [15:32] EOL? [15:32] crazyhead42: end of life [15:32] !13.04 [15:32] Ubuntu 13.04 (Raring Ringtail) was the 18th release of Ubuntu. Support ended on January 27, 2014. See !eol, !upgrade and http://ubottu.com/y/raring [15:33] crazyhead42: it's no longer supported - it reached the "end of life" date in January [15:33] IS there a way to upgrade it? [15:33] and i was just about to call that factoid too xD === Lcawte|Away is now known as Lcawte [15:33] I don't really want to switch back to desktop mode, run another install, rewrite the flshdrive, then put my desktop and grub at risk of user error AGAIN [15:34] zul: going to drop websockify; having discussed with dosaboy I don't think its suitable for main inclusion yet [15:34] jamespage: cool...i didnt think so either === bilde2910|away is now known as bilde2910 [15:38] drat. I was really hoping I wouldn't have to redo everything. [15:38] !eol | crazyhead42 [15:38] crazyhead42: End-Of-Life is the time when security updates and support for an Ubuntu release stop, see https://wiki.ubuntu.com/Releases for more information. Looking to upgrade from an EOL release? See https://help.ubuntu.com/community/EOLUpgrades [15:39] You can upgrade, but you'll have to do two release upgrades to get within support [15:43] jamespage: btw nova uses python-oslo.utils now [15:43] zul, where do you see that? [15:44] jamespage: nova/common/openstack/units has been removed [15:44] zul, in master or juno/proposed ? [15:44] master [15:44] zul, meh - don't care about master for now [15:44] jamespage: ack [15:44] juno/proposed is my immediate focus [15:44] zul, should be for your work as well for now [15:45] jamespage: yeah [16:21] anyone using a ssh client on the iphone? === stokachu is now known as stokachu__ === stokachu__ is now known as stokachu === Lcawte is now known as Lcawte|Away === Guest67039 is now known as mfisch === mfisch is now known as Guest72593 === havanasleeps is now known as havanaworks === markthomas is now known as markthomas|away [17:30] what is the fix for http://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-5107.html ? I am running 10.04 and 12.04 LTS [17:30] axisys: The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5107) === markthomas|away is now known as markthomas === markthomas is now known as markthomas|away [17:40] axisys, by reading the notes :) [17:41] patdk-wk: changed the LoginGraceTime to 20 from default 120 .. thanks [17:41] that isn't what the notes said to do :) [17:41] that would just make it worse [17:46] "By default, sshd will allow a connected user to wait for 120 seconds (2 minutes) before starting to authenticate. This could be used to conduct a Denial of Service (DoS) or a brute force attack against a running SSH daemon. One solution is lowering this to 20 seconds" [17:46] https://help.ubuntu.com/community/StricterDefaults [17:47] patdk-wk: ^ [17:49] oh, I read you changed 20 to 120 :) [17:49] but you did the other way [17:49] what out for that change :) [17:49] if you have dns issues, you won't be able to login [17:49] cause the timeout will happen, before the dns gives up resolving your ip [17:52] also note says to set MaxStartups to 10:30:100 . default seems safer 10:30:60 [17:52] ya [17:56] i guess i will just rely on ufw limit ssh which allows 6 per 30 secs default.. === Eu is now known as Guest82670 [18:32] Is there a command in Linux to tell the kernel/iptables to forget about all the NAT connections it knows about and start over like if the server just rebooted? [18:33] i'm not talking about iptables -t nat -D POSTROUTING 1, I am talking about connections the kernel remembers for packets that have been masqueraded [18:34] found ti [18:35] thanks guys! === Guest72593 is now known as mfisch === mfisch is now known as Guest6813 === Guest6813 is now known as mfisch === shredding_ is now known as shredding === bilde2910 is now known as bilde2910|away === Lcawte|Away is now known as Lcawte === kickinz1 is now known as kickinz1|afk === kickinz1|afk is now known as kickinz1 === kickinz1 is now known as kickinz1|afk [20:54] Line 13,21,28 http://pastebin.com/qEnw6NFR Cant send email by phpmailer via sendmail-bin === Lcawte is now known as Lcawte|Away [21:36] zul, still around? [21:36] does this make any sense - https://review.openstack.org/#/c/127030/ === nathema is now known as nath|off [22:41] Okay, I'm back and I have a working version of ubuntu server running. Can someone help me configure samba so I can start using it? The instructions require me to know how to do things I can't seem to find online. [22:42] crazyhead42: just configure it :P [22:43] Wow. That seems just like the online instructions I found. :P [22:43] RoyK: did you write the samba guide? :) [22:44] sarnold: no [22:44] But seriously, step one is accessing the file (I found it, but I don't think "less smb.conf" was the right command [22:44] crazyhead42: what specifically hsa you stopped? [22:45] Right now, correctly accessing the files - I'm in the samba config file, but in the wrong mode. Speaking of which, how do you get out of "less" mode? [22:45] 'q' [22:45] crazyhead42:it's a bit hard tp say how to configure samba without knowlede of how the rest of the system you're using are [22:46] samba's especially mean [22:46] well, SMB is mean [22:46] Is there a better interface for my windows? [22:46] no [22:46] drat. [22:47] but we're using samba for 20k users at work and it works well [22:47] Okay, well I know it should mainly have the defaults still, 64 bit of the version that was on the banner [22:48] Basic network access, I don't plan to put this online [22:49] what else do you need, and where do I fetch it from? [22:49] crazyhead42: nearly everything you could ever want is installable via "apt-get install " [22:49] crazyhead42: you can find the packages with "apt-cache search " to find allthe packages with foo in the name or description [22:50] apt-cache search mp3 ought to give the flavour of what I mean... [22:51] Foo? What's foo? [22:52] crazyhead42: just a placeholder, it's common in unix-land to use 'foo', 'bar', and 'baz' to stand for different things whe you don't really care what those things are :) [22:53] wait, you want me to install EVERYTHING?!?! [22:53] crazyhead42: haha no :) that was just a quick demo of how to find whatever it is you might need :) [22:53] crazyhead42: more on foo bar and baz http://en.wikipedia.org/wiki/Foobar [22:54] Oh. [22:54] I know how to install things, but I need to set them up, and Ubuntu Server doesn't have a handy GUI like the desktop version. [22:56] Okay, so how do I modify the config file? [22:57] whatever text editor you like [22:57] if you're asking, nano is probably a good plce to start [22:57] I prefer vim [22:57] others prefer emacs [22:57] the learning curves on those are huge but well worth the effort [22:57] but nano will let you finish today :) [22:57] vim++ [23:00] What's the difference between a wins server or a wins client? [23:03] isn't WINS a sort of DNS service for Windows/Netbios names? [23:03] (boy that goes back) [23:03] yeah it does.. man I'm glad to be rid of windows. [23:04] I -think- WINS is the nmbd, right? [23:05] Oh, shoot, chaning that variable didn't mean making it avalible to windows? [23:06] crazyhead42: I think if you've already got other windows "servers" on the network you probably don't want to set your samba to a WINS master or whatever they called it.. [23:06] crazyhead42: some people want to use their samba servers as the 'masters' of the workgroup or domain and others just want it to be a participating client... [23:07] ?? Way above my head! [23:07] I just want a place to stash files I don't want on my laptop === Guest73180 is now known as IdleOne [23:08] that's samba :/ I've spent weeks reading the bloody documentation (a dozen years ago now, of course), but I never felt like I was in control of the thing. [23:08] between the different types of shares and authentication modes and directory vs domains vs workgroups the whole thing is one gigantic pile of annoying and complicated. [23:09] Personally, I blame microsoft. [23:09] RoyK was able to get it to work for 20k users because they've put time and effort into making it good -- it didn't just come that way easy [23:09] so I'm not going to have it done in time to store my project for school. That's just great. [23:10] funny thing, they adapted the protocol from LANMAN in their usual "adopt, adapt, destroy" approach of the 90s :) they badly missed networking and the internet in particular, and so they copied where they could before they understood those things themselves. hehe. [23:10] original versions of the protocol didn't even work on tcp/ip. dark times. [23:11] Is there a package I could install that will give Samba a working default configuration? [23:12] I don't think I know what I'm doing enough to be playing around in the config file, especially if I couldn't do it in GUI. [23:13] they used to have a gui of some sort, SWAT, but it was a miserable pile of security problems and worse yet you had to know all the details of the configuration file anyway [23:13] crazyhead42: if you're finding all this overwhelming you might want to investigate Zentyal. it comes as an ISO. so you intall it and voila [23:14] (based on Ubuntu of course) [23:15] http://www.zentyal.org/ [23:15] I'm on an "Ubuntu Server". [23:15] well, you might be able to install individual packages and get the same thing, i'm not sure. you might consider re-installing with this zentyal ISO [23:16] crazyhead42: hmmm. I just did "apt-get install samba" and then "smbclient -L localhost" and it looks like a lot of things just worked.... [23:16] so back out, go to home directory, and try smbclient -L? [23:16] wait [23:16] That looks like a list command [23:16] crazyhead42: it does, it lists shares and printers on the specific server... [23:19] Okay. . . how do I get one though? Let's assume I'm worrying about security later [23:20] this is kinda rediculous, zentyal doesn't even want to tell me what it is [23:21] and samba doesn't want to give me any idea what I"m doing [23:25] crazyhead42: you will need to either read some Samba documentation at http://www.samba.org/ or install something like zentyal [23:27] I'm looking into zentyal, I don't have enough time for Samba === Eu is now known as Guest93444 [23:31] crazyhead42: do you just need some place to store stuff right away or do you need this to be a fully-functioning windows share? [23:33] What's the difference? [23:34] crazyhead42: it'd be easy to use e.g. filezilla to sftp files to your server [23:34] Okay... but what's the difference between that and a windows share? [23:34] crazyhead42: but you couldn't just aim winword or excel or at that because windows doesn't know how to natively speak sftp [23:35] ah. So the difference is I'd have to finish everything up, save it on my computer, then send it, then retrieve it again before I can use it? [23:35] yeah [23:36] will I be able to adjust that later, when I figure out how to get a fileshare going? [23:36] depending upon the program / use, it might be just as easy as a share, or it might be horrible :) [23:36] yeah [23:37] I can work with just a storage device for now. I want to upgrade it later, obviously, but for now I just want to clear up some files without deleting them. [23:37] give filezilla (use sftp) or winscp a shot, one might do what you need [23:38] is this for my PC or the server? [23:39] crazyhead42: pc [23:39] crazyhead42: the server probably already has it running, if you're using ssh to connect anyway [23:39] Huh? [23:39] what's ssh, and is it something that came with the computer? [23:40] *OS [23:40] Also, did I just remove it by purging samba? [23:40] ssh is awesome stuff, it lets you log in to remote computers safely; think "better telnet" [23:41] which I'm not sure I've gotten working on my computer anyway... [23:42] Where should I download filezilla from? [23:43] I don't know which sites are good and which ones contain viruses, but I'm pretty sure I cant' use cnet [23:43] crazyhead42: nice paranoia [23:43] More like nice virus. [23:43] crazyhead42: looks like I've got https://filezilla-project.org/ in my history -and- wikipedia claims it's the site :) soo hooray [23:44] It ransacked my browser until my computer's time was up. :( It was a good computer. [23:45] :( [23:46] Windows 8 is a curse brought on by dead computers. >:( [23:47] The big green one is the one I'm meant to click, right? [23:48] big green one? [23:48] Big green button. [23:48] Says "Download Now" but looks like millions of advertisments. [23:48] jamespage: it does to me [23:48] crazyhead42: ot, but a great way to get software for windows (including filezilla) is ninite.com [23:48] crazyhead42: hmm. that doesn't sound right. you may still have that virus. [23:49] jamespage: need to fix the pep8 error though [23:49] No, it's a wayyyyy differnt computer [23:49] crazyhead42: all I see on https://filezilla-project.org/ is some grey boxes around "Download FileZilla Client" and near zero advertising (just mention of their sponsors) [23:49] But on download sites, there are advertisments that look like green download now buttons [23:50] crazyhead42: with ninite, check boxes, download one file, it installs everything quietly, no malware, always up to date [23:50] grey? poop. What OS are you on? maybe your button looks diferent than mine because of client detection [23:50] crazyhead42: could be, I'm on ubuntu running firefox [23:50] Ah. Win 8 running firefox [23:50] qman__: dang that looks cool. [23:51] Why does something this simple have to be this complicated? [23:52] crazyhead42: use ninite, gets rid of the complication [23:52] crazyhead42: beats me, most linux distros come with useful tools already installed; yet somehow people still think windows is 'easier'. go figure. :) [23:52] Yep [23:53] Real package management is one of the greatest advantages to linux [23:53] It is: everything STARTS with working settings. [23:53] But linux is better if you know what you're doing, or so I have been lead to believe [23:54] I don't think this is nanite.com! [23:54] crazyhead42: windows trains users to have bad habits, downloading programs from all over the internet [23:55] Its something you have to unlearn when switching [23:55] nanite.com looks like usual domain squatter, hehe [23:55] Okay, I've got gray boxes now [23:56] I click on download client, then I get the big green button [23:57] okay, it goes to sourceforge.net, right? [23:57] It does say sourceforge [23:57] yes, it does claim to lead there [23:57] good good. [23:58] Sourceforge doesn't have any big green buttons [23:58] You're probably still infected [23:58] Unlikely, the virus should be contained and dead on the other harddrive [23:58] qman__: what do you see here? https://filezilla-project.org/download.php?type=client [23:59] a big green download now button next to a picture of what I assume to be a filezilla screen