[01:16] <soahccc> Hey guys, I currently try to find auditing tools and generally I'm struggling  to find anything "recent". There is tiger (which last release was in 2008 iirc) and ossec (which is more what I was looking for) but it seems that the community around ossec is dead. Which tools provide similar functionality (centralized logging, processing and action taking) but not require 3 years of learning to get them running?
[01:21] <ZorroT> i did the 14.04 upgrade and lost www userdirs. i've followed the instructions on google top hits for ubuntu 14.04 apache2 errors of this sort, and i am still getting 403s on userdir.
[02:08] <fridaynext> anyone have a suggestion for a music server to run on Ubuntu 14.04 headless, that will have smart playlists and update playcounts?
[05:35] <ZorroT> i did the 14.04 upgrade and lost www userdirs. i've followed the instructions on google top hits for ubuntu 14.04 apache2 errors of this sort, and i am still getting 403s on userdir.
[05:36] <cryptodan> is userdirs enabled?
[05:47] <ZorroT> ja
[05:47] <ZorroT> cryptodan: yes
[05:48] <cryptodan> any special .htaccess files?
[05:48] <ZorroT> this is all such, no userdir content is working
[05:49] <ZorroT> cryptodan: [Mon Nov 10 19:19:08.955340 2014] [authz_core:error] [pid 10645] [client XXXX:42030] AH01630: client denied by server configuration: /home/XXXX/public_html
[05:49] <cryptodan> looks like you have .htaccess files
[05:49] <ZorroT> but that is where none exists
[05:50] <cryptodan> do an ls -la on public_html
[05:50] <ZorroT> ha
[05:50] <ZorroT> i think i just figured it out :-)
[05:51] <cryptodan> .htaccess is a hidden file
[05:51] <mardraum> ZorroT: http://httpd.apache.org/docs/current/upgrading.html
[05:51] <mardraum> if you went from 2.2 to 2.4, read that.
[05:53] <ZorroT> i had done the various upgrade procedures, grant, etc.
[05:53] <ZorroT> what i had forgotten was that this server has a non-standard user web directory
[05:53] <ZorroT> so of course all of the directives referring to public_html won't help :-)
[05:54] <ZorroT> ID-10-T error.
[05:54] <cryptodan> non-standard?
[05:55] <ZorroT> "other than public_html"
[05:59] <ZorroT> for i changed public_html references in userdir.conf, php5.conf and now everything is humming along happily.
[06:00] <cryptodan> id recommend keeping the standard way
[06:09] <ZorroT> cryptodan: i didn't ask, but thanks.
[06:09] <ZorroT> there are perfectly good reasons that it is the way it is, and apache is amenable to allowing other than default options.
[06:11] <ZorroT> i thought i remembered explicitly telling the upgrade process to leave the configs alone
[06:11] <ZorroT> in which case, the normal documentation for the upgrade process would have applied correctly
[06:12] <ZorroT> this was the upgrade problem plus me overlooking the difference between the defaults and the existing installation's expectations.
[06:12] <ZorroT> i apologize for bringing that to channel :-)
[06:17] <cryptodan> It was just a recommendation nothing to insult you
[06:22] <ZorroT> typically, one doesn't change server defaults for purposes of whimsy. tone doesn't carry well on irc :-)
[06:23] <ZorroT> also, thank you for your help, cryptodan and mardraum !
[06:24] <cryptodan> you are welcome
[08:17] <lordievader> Good morning.
[10:25] <michele> hi there, what can I use to select the fastest apt mirror? netselect-apt is not in the repos anymore. any ideas?
[10:46] <Amir2> What`s the most lightweight GUI for ubuntu server?
[10:50] <michele> Amir2: xfce/lubuntu
[14:03] <delinquentme> about to head in for a devops interview.  ask me thangs I should know !
[14:18] <malinux> somebody who knows why autocomplete og apt-get install <package> only works when I am not doing so by sudo?
[14:20] <delinquentme> malinux, i believe its a setting in your profiles .
[14:21] <delinquentme> ~/.bashrc or ~/.bash_profile
[14:21] <delinquentme> so if root has the same setting it should work
[14:21] <delinquentme> root profiles will be in /root/*
[14:31] <malinux> delinquentme: hm, det root user don't have a .bashrc
[14:31] <malinux> it has, I sudo -i to root and it has
[14:31] <malinux> so I will check ito ut
[14:33] <malinux> delinquentme: autocomplete works when in root shell, but not when I do the same as sudo
[14:33] <malinux> I enabled autcomplete in the .bashrc for root
[14:33] <malinux> by uncommenting the lines
[14:41] <Kartagis> malinux: enable the bash-completion in /etc/bash.bashrc
[14:41] <malinux> Kartagis: already done so
[14:41] <Kartagis> did you source it afterwards?
[14:42] <malinux> by running: . /etc/bash.bashrc   ?
[14:42] <malinux> yes
[14:42] <malinux> or shoud I run source /etc/bash.bashrc ?
[14:42] <malinux> dosen't work either
[14:44] <malinux> if I try to autocompelte firefox, I get:
[14:44] <malinux> malin@malin-M15a:~$ sudo apt-get install firefox
[14:44] <malinux> firefox                                             firefox_29.0+build1-0ubuntu0.14.04.2.dsc
[14:44] <malinux> firefox_29.0+build1-0ubuntu0.14.04.2.debian.tar.gz  firefox_29.0+build1.orig.tar.bz2
[14:59] <zoraj> hi all
[15:00] <LinStatSDR> Hellop
[15:00] <zoraj> I'm actually installing ubuntu server
[15:00] <zoraj> and after I finish installing it, I will install Xen as hypervisor
[15:01] <zoraj> my question is, should I install Ubuntu Gnome Desktop or whatever WM ?
[15:01] <zoraj> I wouldn't do that though
[15:01] <LinStatSDR> whats wrong with the terminal
[15:02] <lordievader> zoraj: No WM at all?
[15:02] <zoraj> well, as I said, I will install Xen, so how Xen will show up Win 7 guest if it's totally in terminal
[15:02] <zoraj> maybe a silly question ^^
[15:02] <LinStatSDR> I was being silly heh
[15:03] <lordievader> zoraj: Servers rarely have a display attached. The display to VM is usually supplied through VNC or something.
[15:03] <zoraj> I'd prefer full terminal, but I will gonna install Xen, will it be necessary that at least I install gnome or something like that
[15:04] <zoraj> lordievader, I know, I am just wondering since it will be a hypervisor dom 0
[15:04] <zoraj> it's not a standard server, as it will host fully graphical OS
[15:05] <zoraj> (Win7, Win 8)
[15:07] <zoraj> so, my question is, will I have to install gnome or whatever WM, (atm, I am on the package choice screen)
[15:08] <zoraj> this is my first step with Xen,
[15:09] <mardraum> have to? no
[15:13] <malinux> any suggestions? :)
[15:13] <LinStatSDR> Wait waht
[15:16] <zoraj> ok, I'm continuing the installation,
[15:17] <LinStatSDR> You got it.
[15:21] <malinux> should I consider an reinstall of my entire Ubuntu-install, to get sudo apt-get install to autocomplete correct?
[15:33] <lordievader> malinux: What?
[15:33] <lordievader> malinux: Do you mean to say that you have broken packages?
[15:34] <malinux> lordievader: no, I say that apt-get install won't autcomplete when I do it as sudo. example: sudo apt-get install <package> it dosen not autcomplete pacakges, but things in /usr/bin and equal
[15:34] <malinux> not the package-things
[15:35] <malinux> lordievader: it works if I go to a root-shell or do it as user
[15:35] <malinux> apt-get install is useless as user
[15:35] <malinux> and if I have to enter the rootshell to get it work, that's a workaround and not a solution :)
[15:38] <lordievader> malinux: That is likely due to your shell.
[15:38] <malinux> lordievader: okey, so what is wrong with it? :)
[15:38] <malinux> echo $SHELL returns /bin/bash
[15:38] <lordievader> malinux: Probable the config.
[15:39] <malinux> lordievader: ok, I can pastebin the .bashrc ?
[15:40] <malinux> this is my .bashrc: 16:23 < dr0> apt-get install sudo
[15:40] <malinux> 16:23 < selx> apt-get install dr0
[15:40] <malinux> 16:23 < dr0> malinux: neida
[15:40] <malinux> 16:23 < dr0> :-P
[15:40] <malinux> 16:25 < selx> malinux: jeg aner ikke. Har ikke hatt så mye problemer med det du driver med...
[15:40] <malinux> 16:25 < malinux> selx: nei, har debian server og ubuntu desktop
[15:40] <malinux> 16:25 < malinux> har samme problemet begge steder by the way
[15:40] <malinux> 16:25 < malinux> dr0: sudo er installert på både debian-serveren og på Ubuntu-desktopen min
[15:40] <malinux> 16:26 < selx> aha :P
[15:40] <malinux> 16:26 < RoyK> tror godeste Carlsen sliter litt :P
[15:40] <malinux> 16:27 < malinux> hører rykter
[15:40] <malinux> 16:27 < malinux> selx: ja. så vet ikke hva jeg skal gjøre jeg :S [16:27] [malinux(+Zi)] [3:FreeNode/#ubuntu-no-offtopic(+cnt)] [Act: 1,2,4,5,6,8,9,11,14,16,17,18,20,21,22,23,24,28,29,31,35]
[15:40] <malinux> [#ubuntu-no-offt] har installert autoco
[15:40] <malinux> oops sorry
[15:40] <malinux> oh,. sorry
[15:40] <malinux> http://paste.ubuntu.com/8942743/
[15:40] <malinux> here it is
[15:41] <zoraj> tack :)
[15:41] <zoraj> the goddamn grub wont install on mbr
[15:41] <zoraj> :\
[15:41] <zoraj> and a blazing red screen appears as it says, fatal error
[15:41] <fridaynext> does anyone here use subsonic for music streaming?
[15:43] <lordievader> malinux: I rarely use bash, so I won't be any help there ;)
[15:43] <malinux> lordievader: ah
[15:44] <malinux> what do you use?
[15:44] <lordievader> ZSH.
[15:47] <malinux> lordievader: hm, I could try to change to zsh :)
[15:49] <malinux> lordievader: autcomplete as sudo works there, and the colors of that shell is awesome, Think I just change :)
[15:54] <RoyK> malinux: works well for me with bash, though
[15:57] <malinux> RoyK: okey, it dosen't help me a lot :p hm, I am such of a noob that can't even change default shell to zsh
[15:57] <malinux> and by changing the shell I don't fix the original issue
[15:57] <malinux> RoyK: it works when you in user prompt, type sudo apt-get install <package> ?
[15:59] <RoyK> yep
[15:59] <RoyK> malinux: chsh -s /bin/zsh username
[15:59] <malinux> did that
[16:00] <malinux> but when I open a terminal, it opens to bash
[16:00] <malinux> hm, maybe I forgot to add username
[16:00] <RoyK> malinux: if you did, then you probably changed root's shell
[16:00] <malinux> RoyK: why do you think I changed the root's shell?
[16:01] <malinux> now I did again as user an added my username to user
[16:01] <malinux> exited the terminal
[16:01] <malinux> reopenend with ctrl + alt + t
[16:01] <malinux> it starts a bash-shell
[16:01] <malinux> bah
[16:01] <RoyK> malinux: if you were root and ran chsh -s /bin/zfs, that changes the shell for thecurrent user
[16:01] <malinux> RoyK: ok
[16:01] <RoyK> malinux: no idea - I'll be back here in an hour or so
[16:02] <malinux> okey :)
[16:02] <malinux> RoyK: tried with sudo now, to change, nothing.
[16:03] <RoyK> malinux: bbl
[16:03] <malinux> I hate computers, but I can't live without them
[16:23] <malinux> after a reboot, the shell is now zsh as default. Is the syntax the same as for bash? I have to readd aliases
[16:33] <mdeslaur> hallyn: any idea why libvirt ftbfs on vivid?
[16:49] <hallyn> mdeslaur: libxml2 security update
[16:49] <hallyn> mdeslaur: if you dpkg -i the previous version it builds
[16:49] <hallyn> i filed a bug.  the response was basically 'you figure out why'.  which isn't unreasonable - it may be a mis-use by libvirt
[16:50] <fandi> hi all,
[16:50] <fandi> how to start service corosync on ubuntu 14.04
[16:51] <fandi> root@db3:/home/fandi# service corosync start
[16:51] <fandi> there is no answer. thanks
[16:52] <lordievader> fandi: What does "sudo service corosync status" return?
[16:53] <fandi> same no return :)
[16:53] <fandi> how to be manage by upstart
[16:54] <mdeslaur> hallyn: oh, hrm, where's the bug?
[16:54] <hallyn> mdeslaur: bug 1390637
[16:55] <hallyn> mdeslaur: i'm about to just ask on oftc#virt just to see if anyone knows offhand.
[16:58] <mdeslaur> hallyn: hrm, haven't look at all, but perhaps this: https://git.gnome.org/browse/libxml2/commit/?id=72a46a519ce7326d9a00f0b6a7f2a8e958cd1675
[16:58] <mdeslaur> hallyn: I'll poke at it this afternoon
[16:59] <hallyn> mdeslaur: oh, good, that one does look promising.  excellent, thanks for looking, ping me if you need anything
[17:00] <mdeslaur> hallyn: although, libxml2 in the stable releases should cause the ftbfs also, so maybe that's not it
[17:00] <mdeslaur> anyway, I'll poke at it
[17:25] <mdeslaur> hallyn: bingo: http://libvirt.org/git/?p=libvirt.git;a=commit;h=8f17d0eaae7ee2fa3e214b79b188fc14ed5aa1eb
[17:25] <mdeslaur> hallyn: want to give that a try?
[17:28] <hallyn> mdeslaur: will do, thx
[17:32] <hallyn> mdeslaur: test-building, but danpb agrees that'll be the fix
[17:32] <mdeslaur> hallyn: cool
[17:32] <mdeslaur> hallyn: if it builds, don't upload, I've got security patches to add, so just tell me
[17:33] <mdeslaur> hallyn: rather, give me your debdiff
[17:34] <fandi> lordievader, ok done, i thinks i miss ntp
[17:34] <fandi> lordievader, now it's working
[17:34] <hallyn> mdeslaur: ok, will do
[17:34] <lordievader> fandi: Hmm, okay. Good to hear :)
[18:11] <hallyn> mdeslaur: http://people.canonical.com/~serge/libvirt.debdiff , gonna do one more test build
[18:29] <mdeslaur> hallyn: built fine for me too, so uploading with security fixes
[18:29] <mdeslaur> hallyn: thanks!
[18:32] <hallyn> mdeslaur: great, thank you!
[18:50] <pmatulis> hallyn: just read the "containers are better" thread, ha ha
[18:51] <hallyn> pmatulis: I'm waiting to see how he blows his fuse when he reads my last reply
[18:53] <pmatulis> hallyn: tbh, it's funny that i always read that sentence the way it was intended but i can easily see others getting confused if ① you do not keep the whole paragraph in mind and ② you're not a native speaker
[18:53] <hallyn> all right, the color for names of ppl calling out my nick (yellow) is not working for me on white bg :)
[18:53] <hallyn> neat how you did that _1_ and _2_
[18:53] <pmatulis> ;)
[18:53] <hallyn> but yeah, i agree.  the funny thing is,
[18:54] <hallyn> 1. he won't accep tthat maybe he's missing a subtlety of hte language, and 2. he won't accept that maybe he committed a similar faux pas in several of his emails
[18:54] <hallyn> but maybe i'm giving him too much credit an dhe really is just an angry troll
[18:55]  * med_ wonders where the mythical "containers are better" thread lives....
[18:55] <pmatulis> med_: ubuntu-doc m/l
[18:57] <hallyn> med_: in the end I am in fact not a native english speaker, so i do accept that i make mistakes
[19:00] <hallyn> but basically i only defer to my wife :)  and she agrees with me.  so <boom>
[19:00] <med_> badabing badaboom
[19:00] <hallyn> speaking of this, time to check for a response
[19:00] <med_> serge, what's your birth language?
[19:00] <hallyn> English :)
[19:01] <hallyn> and she's a bit of a stickler with it
[19:01] <pmatulis> hallyn: how does that make you not a native speaker?
[19:04] <Valduare> hi guys
[19:04] <hallyn> med_: oh, *mine*.  haha.  french, then dutch.  whic his funny bc i've forgotten all my french
[19:04] <Valduare> anyone here know much about vpn
[19:05] <hallyn> Valduare: go ahead and ask your q.  someone her eor in #ubuntu-devel will be able to help, most likely
[19:10] <Valduare> I have some mk808 devices android sticks i want to have on same network as my ubuntu server
[19:10] <Valduare> but they are in separate physical locations
[19:10] <Valduare> so vpn is the way to do that.
[19:10] <Valduare> looks like there are a lot of different options ie  openVPN and tinc
[19:10] <Valduare> need someone knowledgable to help walk me through this new world of vpn :P
[19:13]  * hallyn checks the server guide
[19:16] <Valduare> wondering what the dif between ipsec and things like openvpn does ssh tuneling?
[19:18] <hallyn> Valduare: I guess https://help.ubuntu.com/14.04/serverguide/openvpn.html is the place to look
[19:20] <lordievader> Valduare: The layer at which it happens. Openvpn is application layer.
[19:34] <patdk-wk> more that just that :)
[19:34] <patdk-wk> ipsec is strictly a transport thing, it is limited, and that limitation causes people problems (mtu)
[19:35] <patdk-wk> openvpn works around the mtu issue, so it's normally *easier* to setup and use, but it has it's own built in routing and is not a *standard* thing, so compatability issues can exist
[19:36] <Valduare> with openVPN i need their app for android or ios or mac or windows to connect to it though
[19:36] <Valduare> but these devices have built in vpn connectors for other types of vpn servers?
[19:37] <Valduare> or do I just not worry about going with the built in route and use openVPN
[19:37] <patdk-wk> how do you expect us to answer that?
[19:37] <patdk-wk> we are not you
[19:38] <patdk-wk> going the builtin support is normally better
[19:38] <patdk-wk> but if you know nothing about ipsec
[19:38] <patdk-wk> I really would not recommend going down that path
[19:38] <patdk-wk> unless you REALLY want to learn it
[19:38] <lordievader> IPsec is good for headaches...
[19:39] <lordievader> Especially if you are new to it ;)
[19:39] <teward> ^ that
[19:39] <Valduare> so then tinc vs openVPN?
[20:05] <soren> Valduare: openvpn is a point to point sort of thing. tinc is more of a mesh sort of thing.
[20:06] <Valduare> ah
[20:06] <Valduare> so openVPN might be whaat im looking for then
[20:06] <Valduare> i have a webserver app that I want it to see these mk808 android devices as local
[20:11] <qman__> If you're trying to connect android devices, ipsec is going to be the most practical way; it is a pain, but openvpn requires hacking your rom to install last I checked
[20:18] <Valduare> hmm ok
[20:33] <njalk> qman__: openVPN runs fine on my android, stock fw
[20:34] <qman__> None of my android devices have openvpn support, and the app requires installing libraries manually to add it
[20:35] <qman__> Not just root
[20:35] <njalk> hmmm worked out of the box with the openvpn app here
[20:36] <Valduare> so is openvpn something i’d install on my web server that i want the android devices to connect to
[20:36] <Valduare> or would i setup a second virtual machien thats dedicated openvpn appliance
[20:36] <qman__> Generally you'd want a separate server
[20:37] <njalk> i've got a pi set up as my openvpn server
[20:37] <qman__> Another vm is fine
[20:37] <qman__> It doesn't hurt to try it, but in my experience, openvpn on android is generally a no-go
[20:37] <Valduare> I use a separate vm with smoothwall express 3 as a virtual router to hold my public ip address and then an internal nic for the vm’s under it
[20:38] <qman__> That was my main motivation to set up ipsec over l2tp
[20:38] <Valduare> so then one of the vm’s under it is the web server app
[20:45] <keithzg> qman__: Huh, I've never had issues with OpenVPN on Android.
[20:46]  * keithzg literally uses it daily, on a variety of (Nexus or Motorola) Android devices.
[20:48] <qman__> I have a variety of samsung and htc devices, and it has never worked with stock fw or cyanogenmod
[20:48] <njalk> works fine with my galaxy note 3 and macbook air
[20:49] <njalk> never had any issues
[20:49] <qman__> I actually haven't tried on cm11 yet though
[20:49] <keithzg> qman__: which Android client have you been trying to use? The older one that's still out there definitely was flaky for me.
[20:50] <Aison> is there a ppa with samba 4.1.13?
[20:50] <keithzg> https://play.google.com/store/apps/details?id=net.openvpn.openvpn is the one that's worked fine for me.
[20:50] <qman__> The point, though, is that ipsec / l2tp has native support on all androids, ipads, and windows
[20:51] <keithzg> Well . . . fair enough I guess. OpenVPN has been super-easy for me for setup (hell, at home my router even has it built in) and if your version of Android is from the last 2 years or so you definitely don't need root.
[20:51] <qman__> Never used that one
[20:52] <keithzg> It's just an app you install, you copy over your certs and .ovpn config file and you're done.
[20:54] <qman__> Ah, no tap support, wouldn't work on my setup anyway, but good to know it exists and has some level of support
[20:59] <zoraj> only one tiny step from succefull new installation
[20:59] <zoraj> :\
[20:59] <zoraj> it wont install grub
[20:59] <zoraj> wth !
[21:00] <zoraj> Lilo isn't an option since it seems Xen doesnt work with Lilo
[21:03] <lordievader> zoraj: It won't install grub... Could you be more descriptive?
[21:04] <zoraj> it says "Unable to install GRUB in /dev/sda"
[21:04] <lordievader> zoraj: Gui installer or manually?
[21:04] <zoraj> I have a hd RAID 0
[21:04] <zoraj> no gui
[21:05] <zoraj> terminal ftw
[21:05] <zoraj> I think I messed up with partition, what I chosed is Use entire hd and LVM
[21:06] <lordievader> zoraj: Perhaps it is usefull to have a /boot.
[21:06] <zoraj> what else should I have ?
[21:06] <zoraj> what are the mandatory ?
[21:07] <bekks> zoraj: / is mandatory, everything else can be omitted.
[21:07] <zoraj> so you are saying, better to manually create the partition
[21:07] <zoraj> coz as I said, I chosed "Use entire disk"
[21:07] <zoraj> I got / partition
[21:07] <bekks> zoraj: No one said that manually createing partitions is "better".
[21:08] <lordievader> It has been my experience that grub + lvm directy to be a drag.
[21:08] <qman__> Sounds like you might be using fakeraid; if you are, don't
[21:08] <zoraj> fakeraid ??
[21:09] <zoraj> I'm installing it on a Dell PowerEdge with 4 HD in RAID 0
[21:09] <qman__> "Hardware" raid controllers that aren't actually hardware raid controllers, such as onboard ones
[21:10] <qman__> Linux software raid is in all ways superior to fakeraid, so there's no reason to use it
[21:11] <zoraj> I am convinced that it's all about how I partionned the whole HD, but I dunno where
[21:12] <zoraj> second time I install it this evening, and always stucked on grub
[21:15] <qman__> Linux software raid and a decent HBA is superior to most low and mid range real hardware raid too, you have to spend good money to do better and even then you trade a lot of versatility for a performance edge
[21:16] <zoraj> well, sound like too advanced for me for now, all I need is setting up my ubuntu server up and running
[22:35] <hallyn> mdeslaur: now are you pushing any libvirt updates for t or u?
[22:36] <mdeslaur> hallyn: I did this afternoon
[22:36] <mdeslaur> hallyn: http://www.ubuntu.com/usn/usn-2404-1/
[22:37] <hallyn> cool, thanks
[22:37] <hallyn> shoulda looke dmore closely at the changelog date
[23:47] <Bilge> How do you stop a service from running at boot if all you can access is the file system?
[23:48] <cryptodan> what do you mean?
[23:49] <Bilge> Exactly what I said
[23:52] <cryptodan> its rather confusing "when you can only access the file system" what does that mean?