/srv/irclogs.ubuntu.com/2015/05/08/#ubuntu-server.txt

=== Lcawte is now known as Lcawte|Away
=== markthomas is now known as markthomas|away
tyler_wyliehallo anyone up01:29
Patrickdk!ask01:29
ubottuPlease don't ask to ask a question, simply ask the question (all on ONE line and in the channel, so that others can read and follow it easily). If anyone knows the answer they will most likely reply. :-) See also !patience01:29
tyler_wylierattking or sarnold you guys got a few to chat about fai? first server worked fine, following ones are failing nfs mount (can't parse ip addr '')01:30
=== zz_DenBeiren is now known as DenBeiren
harushimoquestion about maas03:13
harushimoSet the ‘Router IP’ to the default gateway for this private network03:14
harushimowhat does this mean? I'm not following03:14
harushimoIs it done when you use ifconfig?03:14
=== Lcawte|Away is now known as Lcawte
=== markthomas|away is now known as markthomas
=== CiPi is now known as cipi
=== spinza_ is now known as spinza
speck84Hiya all09:24
speck84I'm a student and I have never experiences the server version can somebody have a look on my assesment, and help me to decide can I use this service to comlite the scenario?09:25
speck84You are working as a network server engineer. You have been assigned a new project to design,09:26
speck84implement and support the network of a financial company which was established in 2014 in09:26
speck84London.09:26
speck84The company planning to use 60 client computers, two servers and four network printers, so that they09:26
speck84can meet the company requirements. They should have a capability of sharing the printers, files in09:26
speck84the file servers, and control all users according to the users needs and requirements, the company as09:26
speck84well need to include Remote access services for employees required to access documents remotely.09:26
speck84The company data should be treated on high level of security in terms of confidentiality and09:26
speck84availability. So, all the machines within the network should be up-to-date with the new patches and09:26
speck84service pack and latest security patches to avoid any security related issues. The company as well09:26
speck84forecasting an expansion in the foreseeable future and hence you have to put in mind the capability to09:26
speck84expand the network when needed (Scalability).09:26
speck84The IT manager of the company decided to use a private IP address Range of 172.16.0.0 /12 to be09:26
speck84distributed on all the network devices including the servers, workstation and printers, the network09:26
speck84manager specifically asked for the following criteria to be fulfilled (Software availability, Scalability,09:26
speck84maintainability and Technical support)09:26
speck84Thats the project and I just don't know th eubunutu server can handel this job?09:26
speck84My teacher sad it can not but I dont belive him09:27
maxbI see no reason why not, but the use of "service pack" in the problem definition suggests it was written by a Microsoft devotee09:31
arcskyanyone know a mangment tool for my ubuntu servers like windows SSCM ?09:36
Slingarcsky: http://www.ubuntu.com/server/management09:38
maxbThough, I can see that meeting that design brief with Ubuntu would require more up front work including probably writing some code09:38
=== CripperZ` is now known as CripperZ-
=== chmurifree is now known as chmuri
=== Lartza_ is now known as Lartza
=== Lcawte is now known as Lcawte|Away
=== Lcawte|Away is now known as Lcawte
=== Lcawte is now known as Lcawte|Away
=== Exagone313_ is now known as Exagone313
=== CripperZ- is now known as cripperz
=== unreal_ is now known as unreal
arcskySling: i have landsacpe isnt so good13:14
hackeronhey, question - when I do dpkg -i ffmpeg_latest.deb - a package I created, dpkg says: downgrading ffmpeg from 7:2.5.6-0ubuntu0.15.04.1 to 20150507-git-1 -- why downgrading? - how do I make it think it is upgrading?13:18
jpdshackeron: Because the epoch 7 is greater than epoch of none.13:19
jrwrenhackeron: what jpds said. the version number is less13:20
jpdshackeron: Do a version string like: 7:2.5.6-0ubuntu0.15.04.1+git2015050713:21
hackeronjpds: ah, ok, I changed the version to "999:20150507-git-1" :)13:34
hackeronor is that not very sensible? - I don't want to ubuntu to ever upgrade over this package13:35
jpdshackeron: Not really.13:35
hackeronjpds: what would you do to prevent this package from being upgraded?13:36
OpenTokixhackeron: read on apt-pinning13:36
jpdshackeron: Better to just set a sane version string and hold it with: apt-mark hold ffmpeg-latest13:36
hackeronah, ok, thank you, reading up on it now13:36
zulhallyn:  ping libvirt ;)13:55
=== cripperz is now known as CripperZ-
jamespagezul, juno nova is still not showing in proposed for utopic?14:22
zulerm....lemme look14:22
hallynzul: oh, yeah, will set htat up thi safternoon.  url again?14:24
zulgimme a sec on the phone14:25
hallynzul: (no worries, foudn it, setting up tests)15:41
zulhallyn:  sorry15:48
hallynzul: i said no worries :-)15:50
foxbuntuhey all, hoping someone might have some help with NFSv4 client. I have an export from a NAS mounted to a Linux server and Windows server. The windows server is setup to map to the same UID/GID as the Linux one. I transfered some data from Windows to the NFS share but it is not visable on the Linux server, any thoughts?16:14
=== cipi is now known as CiPi
=== CiPi is now known as cipi
=== _Jeepbeat is now known as Jeepbeats
=== JanC_ is now known as JanC
thesheff17anyone using snappy core? how does it handle people that use pip everywhere?  I'm guessing it doesn't.17:27
Voyage I started openvpn by service openvpn start on ubuntu but its not starting up. No errors shown. How can i debug?17:29
rsullyis the max open file descriptor limit still set to 1024 by default?17:32
sarnoldthesheff17: you may wish to ask in #snappy -- I think the general idea though is you vendorize it all, you pip download all your deps, package them up, and ship them in one big blob17:42
thesheff17sarnold: cool yea I'm reading this doc http://www.wefearchange.org/2015/04/creating-python-snaps.html pretty sure this is what I want to do17:43
sarnoldVoyage: check /var/log/. there's usually something logged when things don't work17:43
sarnoldrsully: probably; the select() API isn't safe to use with more than 1024 descriptors, so raising the limit withut inspection is dangerous17:43
rsullysarnold is that limit per-user or system wide?17:46
sarnoldrsully: per process17:46
Voyagesarnold  modprobe: ERROR: ../libkmod/libkmod.c:507 kmod_lookup_alias_from_builtin_file() could not open builtin file '/lib/modules/2.6.32-042stab106.4/modules.builtin.bin'17:46
Voyagerun not enabled17:47
Voyageit was working fine before17:47
sarnoldVoyage: 2.6.32?? what on earth...17:47
Voyagedont know..17:47
Voyagesarnold how can I enable tun17:52
wiredfoolI've got a trusty server, headless, that's hanging on reboot waiting for plymoutn-show-splash.  It's one of thee that appear to be setup similarly, but it's the only one that's doing this.18:01
wiredfoolan excerpt from the ps listing: http://pastebin.com/4puBZC1c18:02
sarnoldwiredfool: I think you can uninstall plymouth withuot any real consequences.18:02
wiredfoolThere's a bunch of stuff that requires it18:03
sarnoldoh :/18:04
wiredfoollike openssh-server, linux-image-* ubuntu-minimal and ubuntu-standard18:04
Onionnionso this weekend I'm doing a mail server upgrade from 10.04 to 14.04 which also has FTP. For mail it uses postfix and has a couple web interfaces via Apache. Of course full system backups will be made prior, but can anyone think of any specific changes I should have a concern about when upgrading through to 12.04 then 14.04?18:09
pmatulisOnionnion: any special reason you need to continue to 14.04?18:12
Onionnionpmatulis, for the most part, to guarantee the longest support18:13
Onionnionwithout needing downtime for another major upgrade18:13
sarnoldOnionnion: apache 2.4 in 14.04 LTS drastically changed the authentication and authorization interfaces; it'd be worth spending some time with those docs before you start18:14
pmatulisOnionnion: got it, but 12.04 is good for another 2 years.  anyway, there might be a grub problem going from 10.04 to 14.04.  while on 12.04 ensure grub2 is actually deployed on-disk (reboot and enter grub menu is a good way to check) b/c grub1 is not compatible with 14.04.  i have seen reports of unbootable 14.04 systems18:15
Onionnionsarnold, thank you18:15
Onionnionpmatulis, true, and there's been talks of moving the server from in-house to AWS, so going to 14.04 may not even be necessary when I think about it18:16
wiredfoolsarnold: I've moved /etc/init/plymouth-shutdown.conf to /etc/init/disabled, and that's solved it.18:30
wiredfool(well that and ipmi chassis power cycling)18:30
sarnoldwiredfool: ha! I like it. :)18:36
wiredfoolAnd while I'm at it, when there are manually setup interfaces, networking hangs for 2 minutes waiting for them to be configured18:42
wiredfoole.g: br0 inet manual, br0:1 inet static18:43
dasjoe<wiredfool> like openssh-server, linux-image-* ubuntu-minimal and ubuntu-standard ← Only ubuntu-standard *recommends* plymouth, so it should be safe to remove18:49
dasjoealso, set your br0 to allow-hotplug instead of (allow-)auto18:49
hallynzul: well, tests seemed to pass fine until nested kvm hung.  i thought qa-regression-tests didn't use kvm itself18:50
zulso +1?18:50
wiredfooldasjoe: thanks, I'll give that a shot18:50
hallynzul: well i'm rebooting to see if i can easily commen tout the kvm test18:51
hallyn(rebooting my server should also fix it, but then i lose a lot of containers :)18:51
zulhallyn:  okies18:53
zulhallyn:  containers are suppose to be short lived ;)18:53
smtp_not_workingHi everyone, I'm having some trouble with smtp on an ubuntu+zimbra server18:59
smtp_not_workingBasically, I can send e-mail from the web interface, but if I configure thunderbird it won't let me send any mail18:59
smtp_not_workingIt just pop up error with "4.3.0 temporary lookup error"19:00
smtp_not_workingCan you give any hints on how to solve this?19:00
sarnoldsmtp_not_working: on whatever machine is running thunderbird, run "host <smtphostname>" for whatever you set the smtp hostname in thunderbird..19:01
smtp_not_workingThunderbird is running on a windows machine19:02
sarnoldoh.19:02
smtp_not_workingDo you think it's that machine problem and not the server?19:02
sarnoldping the hostname then? that should do a name lookup anyway..19:02
smtp_not_workingThe ping return the correct IP address (ping mail.domain.com)19:03
smtp_not_workingAlso, I can receive mail from thunderbird with that account19:03
smtp_not_workingI just can't send them19:03
sarnoldreceive uses imap or pop, completely different protocol than sending19:04
smtp_not_workingYeah, right19:04
smtp_not_workingI just don't know what to try19:05
smtp_not_workingOr what to test19:05
sarnoldahh, 4.3.0 is coming from the smtpd server anyway. okay, then it's probably nothing to do with the thunderbird config or machine :)19:05
smtp_not_workingOk, so it's a server problem. Damn.19:05
sarnoldsmtp_not_working: well, good and bad.. good, in the sense that servers leave logfiles :) you might be able to spot the problem in the smtpd logs..19:06
smtp_not_workingsmtpd you say, I'll go check where that logfile is19:06
sarnoldcheck /var/log/mail* or /var/log/syslog ..19:06
smtp_not_workingIn zimbra I usually check logs of /opt/zimbra/log/mailbox.log19:07
smtp_not_workingBut there's nothing there19:07
smtp_not_workingWill check your two options19:07
sarnoldI'm going to guess the mailbox.log is for local delivery or imap/pop rather than incoming ..19:07
=== cipi is now known as CiPi
smtp_not_workingthere's this strange message: May  8 20:50:50 mta postfix/smtpd[63956]: warning: non-null host address bits in "192.0.0.41/24", perhaps you should use "192.0.0.0/24" instead19:11
smtp_not_working192.0.0.41 is the internal IP of the mail server19:12
sarnoldwas an ACL set along the lines of allow_from = 192.0.0.41/24 ?19:12
smtp_not_workingI miss the meaning of ACL19:12
sarnoldaccess control list19:12
smtp_not_workingI've got that IP on my zimbraMtaMyNetworks19:13
sarnoldI think it would be worth changing that variable to 192.0.0.0/24 -- but it's just logged as a warning. it's probably not relevant to the problem at hand.19:14
aitibai19:15
sarnoldnormally when you use CIDR notation to refer to a network, the bits that specify hosts _within_ the network should be zero; at least for /8 /16 and /24 networks that's easy, it's just having zeros in the last quads, but for other networks it requires math :)19:15
aitibadoing a "lxc exec d1 -- /bin/bash" I get "websocket: bad handshake" error ¿any ideas?19:15
sarnoldaitiba: any errors from lxc list?19:17
aitibano19:18
sarnoldaitiba: how about lxc info d1 ?19:18
aitibaRUNNING with ip19:18
smtp_not_workingThere's something here: May  8 20:29:14 mta postfix/smtpd[54048]: NOQUEUE: reject: MAIL from unknown[$MYTHUNDRBIRDIP]: 451 4.3.0 Temporary lookup error; proto=ESMTP helo=<[$MYTHUNDRBIRDIP]>19:18
aitibasarnold: all ok19:19
aitibaon info too19:19
sarnoldstgraber: aitiba has a problem that's beyond me :) ^^^19:20
aitibasarnold: thanks for try19:22
sarnoldaitiba: stick around.. when he returns he might know :)19:22
sarnoldsmtp_not_working: stackoverflow has a few similar questions and twice the answer was to build an aliases table. it seems unrelated to me but I'm really not a postfix expert.19:23
smtp_not_workingI also found this: http://www.unix.com/ubuntu/250558-noqueue-reject-relay-access-denied-postfix.html19:24
smtp_not_workingSo I'm checking my main.cf config19:24
stgraberaitiba: bad handshake is usually a sign that your source and target LXDs are not running the same version19:24
smtp_not_workingAm I wasting my time?19:24
stgraberaitiba: we unfortunately had to push a change (I believe in 0.8) which changed the websocket protocol a tiny bit, resulting in that error19:24
stgraberaitiba: we usually try not to do things like that, but well, that's why we're not calling it production ready yet, our API isn't entirely set in stone yet.19:25
aitibastgraber: we  use lxc 0.719:26
TheEternalAbysshi can someone help me with apache2 issues on my ubuntu server? I keep getting an error when trying to restart it and I can't seem to solve it. Keeps saying [Fri May 08 19:20:37.962625 2015] [ssl:emerg] [pid 9134] SSL Library Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch19:28
aitibaso what you say in on lxc version 0.8 and up right? stgraber19:29
TheEternalAbyssI don't know why it keeps saying that as I took out any reference to a .key file in my conf, yet it keeps trying to check it19:30
TheEternalAbyssso I am very confused here19:30
aitibalxd 0.8.1 ...19:31
stgraberaitiba: should work fine if you have 0.7 exclusively everywhere (all servers and all clients) but that error suggests your client is running something more recent than 0.719:40
TheEternalAbyssnevermind got it working19:40
ciscamHi! Can automatic security updates break a production apache server?19:51
sarnoldciscam: it's always possible, but we try hard to avoid regressions19:52
ciscamsarnold, Okay, so I'll enable it and be sure to be always awake on patch day. Was just wondering on what the conventional setting is19:54
sarnoldciscam: we don't really have a "patch day"..19:55
ciscamI'm building a new webserver infrastructure from scratch and want to be sure to follow the ubuntu way19:56
ciscamIt's supposed to become the sandbox19:56
ciscamI guess enabling automatic system updates is the way to go then19:58
sarnoldone less thing to think about :)19:59
=== cryptodan is now known as cryptodan_laptop
ciscamIs it desirable to modularize apache/php and mysql in such an environment?20:10
bekksthe LAMP stack is modularized already.20:15
ciscambekks, thanks for the info. I understand that putting each into an individual VM would be nonsense then20:17
bekksciscam: It is nonsense, because you cant separate apache and php.20:18
tootheHi! When I ssh in, I don't see a message that says "You have X packages that need to be updated" How do I set that as my motd?20:31
rattkingdoes anyone here know much about aide?20:58
hallyn18:53 < zul> hallyn:  containers are suppose to be short lived ;)21:15
hallynthat's conflating cloud and containers :)21:15
=== markthomas is now known as markthomas|away
hallynzul: groan.  kvm locked up again.  going to try in a container21:37
=== Lingo is now known as irondev
=== markthomas|away is now known as markthomas
tootheHi! When I ssh in, I don't see a message that says "You have X packages that need to be updated" How do I set that as my motd?22:18
sarnoldtoothe: that's managed by update-motd -- see the update-motd manpage, the pam_motd manpage, and /etc/update-motd.d/22:20
geniisarnold: Interestingly, dpkg -S on any files in /etc/update-motd.d/   do not resolve to a package22:22
sarnoldgenii: dpkg -S reports files there owned by base-files update-notifier-common ubuntu-release-upgrader-core  for me22:24
geniiInteresting, not here. But it may be because I continuously upgraded from 12.04 to current 14.1022:25
sarnoldgenii: could be; this is 14.04 LTS22:26
toothei think i have to update /etc/issue.net22:30
toothebut...I don't know how..22:30
geniitoothe: What's wrong with it?22:34

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!