=== zz_DenBeiren is now known as DenBeiren === zz_DenBeiren is now known as DenBeiren [03:33] Vadim_: vim :) === markthomas|away is now known as markthomas === markthomas is now known as markthomas|away === DenBeiren is now known as zz_DenBeiren [06:22] hi. Snappy discussion here? === TDJACR_ is now known as NotADJ [06:42] I have nfs storage entry in fstab file. will it remount automatically if I restart the nfs service ? [06:58] abhishek: why don't you just try it? [06:59] "The fstab file is read by the mount command, which happens automatically at boot time to determine the overall file system structure, and thereafter when a user executes the mount command to modify that structure." [07:02] I know it .. I want to know how nfs service works .. I mean is it read fstab entry during start up ?? [07:03] this is resolved now .. I doesn't ... you have to remount nfs partition after nfs start up :) === negronjl is now known as negronjl_afk [08:22] Snappy anyone? === Lcawte|Away is now known as Lcawte [09:30] makara, #snappy :-) [09:35] thanks [09:35] i'm trying to setup a proxy server in ec2 [09:36] i see no snappy images yet so I just used the standard [09:36] i can't connect through the elastic ip [09:36] the security group allows all ports and protocols [09:38] I've done this last year, but today they require creating a VPC [09:39] how can I troubleshoot this? === Lcawte is now known as Lcawte|Away === zz_DenBeiren is now known as DenBeiren === Lcawte|Away is now known as Lcawte === Lcawte is now known as Lcawte|Away === martins-afk is now known as martinst [14:44] for some reason, i can no longer login using pubkey over ssh [14:45] i repeat the steps, create a new key, copy key over to authorized_keys on server, try again, no luck [14:56] adsc: is the server configured for ssh key auth being enabled? [14:59] yeah, it already worked [14:59] until i did updates today [15:00] after the updates and reboot because of kernelupdate, it no longer works [15:01] how many keys do you have configured on your machine your logging in as? [15:02] each key counts as a login attempt [15:02] so having too many private keys, till it locates the right one, will not allow logins [15:02] i can tell you how i set it up [15:02] what does setup have to do with anything? [15:02] it's a bit unconventional, because it's basically a shared key [15:03] i have an account xadmin on the server i want to log in to [15:03] i run ssh-keygen on this server, not on the local computer [15:03] i cat the public key into authorized keys of xadmin user on the server [15:04] then i get the private key onto the client's computer [15:07] client then logs in with ssh -i keyfile xadmin@server [15:22] Good afternoon. [15:48] this it must have to do with hostname resolution === bilde2910|away is now known as bilde2910 === Lcawte|Away is now known as Lcawte === martinst is now known as martins-afk [16:45] Hi. Is it possible to use the wheezy-backports in Ubuntu 12.04 LTS Server for upgrading dovecot from version 2.0.19 to 2.2.9? === markthomas|away is now known as markthomas [16:59] How many have upgraded using the "do-release-upgrade"? [17:03] NTQ: If the dependecies line up, probably. [17:03] avid_fan: Do you really expect to get a number? :) [17:07] andol: I see your point. :-) Let me rephrase. Has anyone tried an upgrade using the "do-release-upgrade" command and have it work properly? Does anyone here use this as their first choice when performing an upgrade? [17:07] aloha guys and well guys, we all know our women stay away from places like this :P [17:08] uhh... [17:08] avid_fan: that's something I've been considering for a while, but alas, I have plesk installed and I am afraid it will be very ugly scenario once I do the upgrade [17:09] kasad: We'd appreciate if you didn't make comments like that here. There are plenty of men and women here that don't particularly like seeing such comments in this channel. [17:09] ooh boy, I just found out the cause of my ssh publickey auth problem: encrypted home dir [17:09] so if you are not in a rush, I will probably find a way to virtualize that server in next 24 hours and can report you results [17:10] it's actually the first point on the troubleshooting list here: https://help.ubuntu.com/community/SSH/OpenSSH/Keys#Troubleshooting [17:10] Pici: it was a joke, mostly geared towards my fiancee who is reading what I type [17:10] I apologize if i offended anyone [17:10] so if someone else has this problem in the future, just link him there [17:11] the reason why it worked previously on my end was probably because I had another console open where I was still logged in, and thus the home dir unencrypted [17:11] kasad: No rush. I've just never tried it. I've always started from scratch and migrated whatever I might need from the old. Just curious to know if it's something often used. [17:12] avid_fan if that is your usual nickname, I can pm you after I perform the upgrade. Need to finish setting up few other things (just moved to new place so everything is in chaos) [17:12] NTQ: possible? Maybe. Good idea? Most definitely not. [17:13] and a weird thing happened, since I was moving, and was without net for couple days and my WS doesn't have wifi adapter, and I needed desktop enviroment [17:13] avid_fan: do-release-upgrade is the supported upgrade method, and I have used it with great success many, many times over the years [17:13] I installed lubuntu-desktop via apt-get install lubuntu-desktop [17:13] and now peculiar thing happened, wlan0 became eth1 [17:14] qman__: The problem is that I want to use dsync to migrate my mails from an external mail server to my own. And it seems that you need 2.1.4+ for this: http://wiki2.dovecot.org/Migration/Dsync [17:14] and there's no option for configuring wlan (eth1) in gui [17:14] kasad: It is my usual nickname. But don't go through it just for me. I have a possible server, not running anything mission critical, I can try. From the amount of replies, it doesn't sound like an often used approach. [17:14] qman__: Thanks for the feedback. [17:14] avid_fan: I am doing it anyway, I am currently on 10.04.4 LTS [17:14] NTQ: if there is not already an ubuntu backport or ppa available, the correct way is to build an ubuntu package yourself [17:15] kasad: Best of luck. :-) [17:15] NTQ: mixing distro sources is never a good idea [17:15] qman__: I know. That's the reason I am here. [17:16] avid_fan: so as soon as I virtualize this setup (because company I worked for full time, now part time, uses plesk setup, and I managed to mush plesk 9 which doesn't ask for licence and lets you host single domain (so I can host other projects/domains) as subdomains and successfully mirror their production setup [17:17] but considering that it's plesk (9.54 to be precise), it will break horribly once I upgrade [17:18] but first I need to fix this wireless, since I need to setup one dd-wrt, and would like to have net and be able to use the router at the same time [17:18] anyone got idea how to setup wifi, now that wlan mysteriously turned into eth1 [17:19] and mostly completely ignores me (no configuration options in gui, I tried this: (psl wait sec for paste link) [17:20] NTQ: you might use https://launchpad.net/~pdiffs/+archive/ubuntu/dovecot-backports [17:21] http://hastebin.com/owekotureb.hs [17:22] but nada (192.168.1.1 is dd-wrt), but it doesn't even try to connect [17:23] now in the meantime I figure that due to nature of dd-wrt I have to have 2 different subnets, but that's beside the point, wlan (eth1) was disconnected [17:23] anyone with suggestion? [17:23] any* [17:23] /s/suggestion/sugesstions === martins-afk is now known as martinst [19:04] Hi guys, we're having trouble deploying Openstack over MAAS using openstack-install. We're using this tutorial: http://www.ubuntu.com/download/cloud/install-ubuntu-openstack . We're at step 4, and we're getting this output: http://pastebin.com/Byaxct7c [19:04] thebozz: whast your juju status say? [19:22] jhobbs: hey, sup? Unfortunately, I can't see it now... my boss decided to reinstall MAAS to document the process up to where we're now. We'll try again later and see what we can find. [19:23] ok === martinst is now known as martins-afk [19:24] Details here: http://ubuntuforums.org/showthread.php?t=2255175&p=13187916#post13187916 [19:24] anybody here familiar with BIND9? [19:24] I've been looking for help on this for awhile and it's weird [19:25] I'm using Ubuntu 14.04.1, BIND9, trying to set up a server with views for both internal and external name resolution [19:25] but when the server is configured with views and rfc1918 zone file and reverse lookup, it won't respond to DNS queries, but as soon as I remove reverse lookup and rfc1918 zone file, it works just fine [19:25] anybody has had that problem before? [19:26] happyraver1958: it's probably a bad idea to try server example.com yourself [19:26] well, that's just for privacy, and it's a generic name [19:26] ah [19:26] but my real DNS name is being used in the configuration files [19:37] there is no config file info [19:37] nothing in that post [19:37] except an error [19:37] which post? [19:37] Details here: [19:37] did you post another one? [19:37] I just clicked on my link and it takes me straight to my post on ubuntu forums [19:37] yes [19:38] Post ID is 13187916 [19:38] there is only a single log line there [19:38] if that helps :) [19:38] so what help would you like? [19:38] we don't have access to your server [19:38] you may have to scroll up to see the rest of the post [19:38] we cant see the config [19:38] http://ubuntuforums.org/showthread.php?t=2255175 [19:38] ah, infomation overload [19:38] try this other one [19:40] 21st century = information overload... the next step in evolutionary history [19:41] I've removed the RFC1918 zone file altogether from the configuration to avoid that issue, I may add it later once I figure out why that config file is wrecking my server [19:41] well, the firs tissue [19:42] dig, cannot connect to server [19:42] I've only added my reverse lookup config files [19:42] that has nothing to do with the problem in bind [19:42] I may have to re-punch a hole in my firewall for that to work [19:42] wait, notify? [19:42] why is it receiving a notify? [19:42] it's not a slave server [19:43] it is most certainly not a slave server [19:43] ya, none of this is making sense [19:43] so much random info posted === martins-afk is now known as martinst [19:43] and it has all been muged [19:44] the weird thing is, when I remove the reverse lookup config, it works! which means I'm screwing something up in the reverse lookup configuration to wreck the forward lookup... somehow... [19:45] I can narrow down any part of the configuration to make things easy, but I'd need to know which parts of the configuration you need to look at [19:49] well, what is the *current* issue? [19:49] the same issue as before, my DNS server will not respond to queries when views are being used [19:50] if I remove reverse lookups, it works, but I need to have reverse lookups configured for my DNS configuration to be complete [19:50] and have an actual working DNS server, and I don't know why it won't work with the combination of forward lookups and reverse lookups [19:50] the daemon runs, but it won't respond to queries when views and reverse lookups are active [19:51] if I remove views, it works just fine with reverse lookups and all, but as soon as I activate views AND reverse lookups, it won't respond to queries [19:51] I've been at it for weeks now :( [19:52] So I have a question. Where should I put the build directory for our app on a production machine? [19:53] ideally, you don't build on a production machine, ever [19:55] zzxc: if the app runs as a user, the user's homedir seems fair [19:56] zzxc: If you absolutely have to put the build directory on your production server, you could use /usr/local/bin, it works ok for us and it doesn't interfere with our database or apps [19:56] happyraver1958, ah, that is your isuse [19:56] you have bad ordering [19:56] your { any; }; MUST be last [19:56] zzxc: and yes, the home directory of the non-root user would be ideal! [19:56] so when you put something before it, it's screwed up :) [19:56] my { ANY; } must be last, in which configuration file? [19:56] like, zone.rfc1918 [19:57] the whole zone.rfc1918 file [19:57] patdk-wk: True. Unfortantly we don't have a good system for building the application remotely currently, and we haven't really run into proformance issue for building the app during heavy usage. [19:57] the reverse-loopup view [19:57] your internal view MUST be before any less restrictive view [19:58] zzxc, the issue is, production is assumed to be a vaunerability, risk to hacking [19:58] so you don't want to build your stuff on it ever [19:58] but other than that, anywhere you deem fit? [19:58] probably a users folder, or maybe in /opt [19:59] patdk-wk: I'm checking it out right now... [20:01] I ran a named-checkconf and my "view "external" { match-clients { any; }; }; is the very last view in my configuration. I have reverse lookup first, then Internal, then External, which is the one with the { any; }; in match-clients [20:01] patdk-wk: Yeah I'm aware of that. I've been trying to get building moved over to a build server running jenkins, but progress on that has been pretty slow. [20:02] both my reverse lookup and internal zones have match-clients [ 192.168/16; }; [20:02] they all have any except internal [20:03] view "reverse-lookup" { [20:03] match-clients { any; }; [20:03] view "reverse-addresses" IN { [20:03] match-clients { any; }; [20:04] I've been trying to many things that I've changed that while trying these many things [20:04] I can only comment on the *current* config I can see [20:06] nowmy configuration looks like this: http://pastebin.com/FGeci7Aj [20:07] you have forward first, but no forwarders? [20:08] I intend on adding the configuration for that once I get the server to work [20:10] I've just removed that forward first and it's still the same :( [20:10] I know I'm missing something somewhere, which may seem intuitive and obvious to somebody else [20:10] what was the test? [20:11] from the server itself, I run nslookup host.example.com 192.168.151.25 [20:11] which is the IP address of the server at the end [20:12] and it will respond with either SERVFAIL or it will resolve the host name and give me the IP address [20:13] I can most definitely telnet into port 53, I ran that test too to make sure the port is open [20:13] can you test from a different computer? [20:13] not sure if localhost is causing an issue [20:14] or even ipv6 [20:14] with that limited scope [20:15] and, what happens if you merge those two vies? since they are the same anyways? [20:15] as I wonder if it sees the first one, and never the second one, cause the first one matched [20:16] I tested localhost too, I removed it from the configuration and all it does it change the error message from SERVFAIL to no response [20:16] yes, views are first match serviced [20:16] and any others WILL be ignored [20:17] so you can't have all those views [20:17] ""view clauses are processed in the order in which they appear in the named.conf file. Thus, in the example above the 'badguys' view clause matching condition (any) also satisfies the 'trusted' view matching condition. However, since 'trusted' appears first its matching condition is the first to be satisfied and view matching stops. [20:19] in that case, the server should respond by matching that view with its corresponding zone file and resolving the host name [20:19] no [20:19] because that's what I'm trying to do; yes, I admit, it was by accident that I came up with that order of views [20:19] the view that matches ONLY has the reverse-dns entries, not the forward [20:19] so it never sees example.com [20:20] you need to merge those two views [20:20] WOW!! I never thought of that! [20:20] you can't have overlapping view ip address ranges [20:20] I'm trying it right now! [20:23] now the forward lookup works, but not the reverse lookup (sigh) [20:24] don't get me wrong, I'm very grateful for your insight patdk-wk, THANKS1 [20:24] don't get me wrong, I'm very grateful for your insight patdk-wk, THANKS! [20:24] I just feel frustrated that it doesn't work the way it should :( [20:26] it's bind :) [20:26] no one knows how it *should* work [20:26] LOL true [20:26] I'll be right back [20:27] defined by the source :) whatever it does is The Right Way [20:31] I'll try to exclude with ! the local LAN in all those { any: }; clauses [20:31] maybe that will prevent the unwanted matches [20:34] Is there a decent tutorial/wiki-page for setting up Dnsmasq for providing DNS on a local network? I see https://help.ubuntu.com/community/Dnsmasq but it references /etc/dnsmasq.conf which doesn't even seem to exist by default these days. === keithzg_ is now known as keithzg [20:35] keithzg_: why not a real dns server like pdns or unbound or knot or djbdns or bind? [20:35] unbound is not a dns server [20:35] * patdk-wk is confused though [20:36] sarnold: well, I suppose I could look into those, it's mostly because in my own personal life I've always just had dnsmasq running on my home routers and it's been perfectly fine. Meanwhile the crazy djbdns+bind setup at my work here is causing nothing but problems, and djbdns is . . . not user friendly [20:36] is he talking server or recursive? [20:36] patdk-wk: Just internal, for resolving local names. [20:36] that didn't answer anything [20:37] is it *answering* questions? or is it *looking* up answers from other locations? [20:37] Well I'm not going to claim I understand 100% what I'm talking about. [20:37] patdk-wk: ah, thanks [20:38] patdk-wk: ah, I see what you mean (I think). Answering. [20:38] then your looking at pdns, nsd, bind, ... [20:39] dnsmasq can do it, but it's very limited i nthat fasion [20:40] Fair enough. I've just been beating my head against the djbdns setup that's existing right now (and where reverse lookups are completely failing, causing all sorts of havoc) and I'm looking to test a replacement that's as simple as possible. [20:44] keithzg: I'm just routinely impressed at how many "newly discovered" dns implementation flaws don't affect djbdns over the last decade.. [20:46] well, he was one to *overcode* things [20:46] it has been a long time since I looked at the code [20:46] but problem these days is, no one does input/type checking [20:47] djb code isn't really meant to be -read-, I think... [20:47] Oh, it does seem extremely secure. The guy was probably a genius in that respect. Unfortunately, he seriously *underdocumented* :P [20:47] djb is known to all that use the internet :) [20:47] you cant avoid his talks :) [20:48] * patdk-wk wonders off to add dnscurve support, so djb can talk to my dns servers :) [20:50] At least on the server where we have djbdns installed, the tools don't even come with man pages or usage (--help does nothing; djb only helps those that help themselves, I suppose :P) [20:50] i'm trying to get dnsmasq+resolvconf+static ip working in a somewhat non-traditional way [20:50] I thought I had this working before, but it's not now [20:51] specifically, the resolvconf 'base' file is not getting applied to /var/run/dnsmasq/resolv.conf [20:51] I've been getting SERVFAIL replies on reverse lookups, and the best documentation I've found for it is someone who read the code and figured out that many different errors are reported the same ( http://www.dqd.com/~mayoff/notes/djbdns/dnscache-log.html#servfail ) so . . . sigh. [20:52] i don't want to put my dns in /etc/network/interfaces, as I'd like to be able to update dns without bouncing the interface [20:52] well, dns doesn't exactly have error messages [20:52] mgw, don't use resolvconf? [20:52] patdk-wk: yeah, maybe that's the best idea [20:52] since it's not doing anything really anyway [20:53] now that I've eliminated dhcp [20:54] patdk-wk: fair enough, but I would've hoped the log file for the service itself would. But it isn't any more verbose than the response messages are, just "servfail 206.186.1.10.in-addr.arpa. input/output error" and such. [20:56] * keithzg is a bit clueless about all this anyways; without any verbose logs to go on it's rather fruitless [20:59] patdk-wk: so if i'm using dnsmasq as a local caching resolver, what would be the logical place for my upstream dns resolv.conf? [20:59] resolvconf puts it in /var/run/dnsmasq, but that seems to be an odd place to put it manually [21:14] jhobbs: after a full reinstall we got to the same step and it failed in the same way. I tried running `juju status`, and got 'environment "" not found'. [21:16] keithzg: Read your back-and-forth with patdk-wk. Are you trying to use DJB dnscache to resolve internal hosts? And those internal DNS zones, they're on a BIND server? === bilde2910 is now known as bilde2910|away === genii is now known as ChristmasPresent === ChristmasPresent is now known as genii [21:45] I changed a directory to be "777" (/var/www/html/mywordpress) [21:45] and have restarted apache, but the website says that i don't have permission to access? [21:45] 403 [21:45] actually, not 403, but Forbidden nonetheless, sorry. [21:51] 403 / Forbidden are identical [21:51] but using 777 is, of course, a sign of failing, security wise [21:52] allen: change the directory's owner and group to www-data (or root:www-data, but probably www-data:www-data) with `sudo chown1 [21:52] `sudo chown` * === genii is now known as ChristmasPresent === ChristmasPresent is now known as genii [21:58] teward, thank you for your help === genii is now known as ChristmasPresent === ChristmasPresent is now known as genii === MeltedLux is now known as MeltedDed === beisner- is now known as beisner === DenBeiren is now known as zz_DenBeiren [23:20] my server stopps during boot at "stopping userspace bootsplash" (12.04) any idea? [23:23] ya, something after that is having an issue [23:36] yes but what^^ === genii is now known as ChristmasPresent === ChristmasPresent is now known as genii === Lcawte is now known as Lcawte|Away