/srv/irclogs.ubuntu.com/2015/07/06/#ubuntu-server.txt

=== Lcawte is now known as Lcawte|Away
=== Guest23854 is now known as IdleOne
=== Nigel_ is now known as G
=== Lurch_away is now known as Lurchy
=== markthomas is now known as markthomas|away
lordievaderGood morning.08:35
=== Lcawte|Away is now known as Lcawte
=== Den_Beiren is now known as zz_Den_Beiren
=== zz_Den_Beiren is now known as DenBeiren
=== CIPi is now known as cipi
=== cipi is now known as CiPi
sarthorHI, python packages are not installed . how to change software source,11:28
lordievadersarthor: What python packages? And what errors do you get?11:29
sarthorsudo apt-get install python-cups python-dateutil python-decorator python-docutils python-feedparser python-gdata python-geoip python-gevent python-imaging python-jinja2 python-ldap python-libxslt1 python-lxml python-mako python-mock python-openid python-passlib python-psutil python-psycopg2 python-pybabel python-pychart python-pydot python-pyparsing python-pypdf python-reportlab python-requests python-simplejson python-tz python-unicodecsv pyth11:30
sarthoron-unittest2 python-vatnumber python-vobject python-werkzeug python-xlwt python-yaml wkhtmltopdf11:30
sarthorchanged these in source.list .. Worked. deb http://suse.uni-leipzig.de/pub/releases.ubuntu.com/ubuntu/ trusty main11:31
sarthordeb-src http://suse.uni-leipzig.de/pub/releases.ubuntu.com/ubuntu/ trusty main11:31
sarthordeb http://ftp.freepark.org/ubuntu/ trusty main11:31
sarthordeb-src http://ftp.freepark.org/ubuntu/ trusty main11:31
lordievader!paste | sarthor11:31
ubottusarthor: For posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imgur.com/ !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic.11:31
sarthorOoh. Great bot. OK.11:31
pmatulissarthor: what happened to nginx yesterday?11:33
sarthorpmatulis, was unable to install yesterday. but today i changed a lot of software source from here " https://launchpad.net/ubuntu/+archivemirrors " the one I pasted here, worked.11:34
sarthorpmatulis, no no . .nginx is still not installing.11:35
sarthorpmatulis, E: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/n/nginx/nginx_1.4.6-1ubuntu3.1_all.deb  Connection failed [IP: 91.189.91.15 80]11:36
sarthorUnable to fetch some archives, maybe run apt-get update or try with --fix-missing?11:36
sarthorI did that apt-get update --fix-missing but no result.11:36
lordievaderMirror out of date?11:37
sarthorlordievader, where to find the FRESH one. here is some lists but no success https://launchpad.net/ubuntu/+archivemirrors11:38
lordievaderUse the main archive.11:38
lordievaderhttp://archive.ubuntu.com/ubuntu/11:39
sarthorlordievader, Failed to fetch http://archive.ubuntu.com/ubuntu/dists/trusty/main/binary-amd64/Packages  404  Not Found [IP: 91.189.92.200 80]11:42
sarthorshowing this all the day " 0% [Waiting for headers] "11:43
sarthorused " deb http://archive.ubuntu.com/ubuntu/ trusty main " and " deb-src http://archive.ubuntu.com/ubuntu/ trusty main "11:44
lordievaderHmm, that file ain't there. Let me see if I get the same error.11:55
lordievaderNope, no problems here with those sources.11:56
lordievaderI wonder why it tries to get that file.12:00
jonersCan anyone give me a hand with some ssh keys?12:14
jonersive created a public/private keypair using putty gen. I want two different servers to be able to talk to each other, i understand that ive got to add the public key to the remote server and the private key would stay on the local server12:17
jonersIll potentially have several other servers which may want to also communicate via ssh to the remote server using the same keypair, do i simply just add the private key to each local server?12:18
bekksjoners: For two servers (which arent running putty), generate a keypair on each server, and exchange the public keys.12:18
bekksPutty has nothing to do with it.12:18
jonersif im already connected to one of those servers using ssh it wont screw up anything or ask for a new key will it?12:19
bekksjoners: I assume both servers have valid keypairs. Now configure server A to accpet the key of server B, and vice versa. No need to generate new keypairs.12:22
jonersthanks, i havent generated any keypairs with them just connected via ssh after the install12:22
bekksjoners: So if both servers dont have keypairs, you need to generate them.12:23
jonerscool, will try that now. Thanks for the help12:23
=== Onionnion is now known as timeshifter
=== timeshifter is now known as Onionnion
tewardrbasak: ping, when you get a moment can you start a parallel thread to the release team one with the tech board?  Release team says the TB should weigh in14:02
teward(the nginx request for exemption at LTS time)14:02
rbasakDaviey: ^^ thanks for the reply, but why a parallel thread?14:29
rbasakDaviey: won't that just confusingly fragment the conversation?14:30
Davieyrbasak: Really, just because i think it is rude to bring in a senior board as referral mid-thread, without a summary.14:31
DavieyBut whatever, I won't cry if you bring them in. :)14:31
tewardDaviey: i'm still hunting analytics, but i may be forced to manually pull them all14:44
tewardwhich is a headache but doable14:44
teward(especially with that tool causing LP to error on its data pull)14:44
Davieyteward: That sucks, I had no idea it wasn't working.14:46
tewardDaviey: yeah, well, it's trying to pull all the data from 2k13 forward in one go14:48
=== DenBeiren is now known as zz_DenBeiren
tewardand I'm not fluent enough in C to go digging to make it pull in smaller sets14:48
tewardas I said I *can* pull stats, run them through my splunk instance for visualization generations..14:48
tewardbut eh14:49
tewardkinda more important right now for me to get my systems to ping to my Landscape server... i hate self-signed certs though14:50
tewardDaviey: i spent about 25 minutes on #launchpad seeing if it was their side, turns out the tool is just pulling too much data14:52
Davieyteward: Ugh, i didn't remember it being in C!14:52
tewardi could pull from the staging PPAs if you'd like14:52
tewardthey're far newer14:52
Davieyteward: I was sure there was a python version...14:52
tewardbut you don't get as nice analytics14:52
Davieyteward: I don't think it is essential, it was just a nice data thing to add to the discussion14:53
rbasakDaviey, teward: I'm interested in the difference of opinion about whether to follow upstream git HEAD or not.14:53
tewardDaviey: indeed.  ehhh this will have the same issue14:53
rbasakWhat Daviey said makes sense for Openstack.14:53
tewardrbasak: s/git/hg/14:53
rbasakI'm wondering whether that applies to nginx here though.14:54
tewardrbasak: replace nginx with apache and ask the question14:54
rbasakBecause Openstack users don't really expect to consume Openstack in a stable way until it's actually out upstream.14:54
tewardsince that's the nearest analog14:54
tewards/analog/similar package/14:54
tewardrbasak: i don't think it makes sense to track upstream hg for this - we'll end up with half-developed functions14:54
tewardDaviey: ^14:54
Davieyrbasak: Are you expecting people to consume the version released with LTS, then be happy to jump to a major new version shortly after?14:54
rbasakServer users wanting a particular nginx will generally install the Ubuntu LTS that comes with the nginx that they want.14:54
tewardDaviey: from a changes perspective, 1.10.x is cut from 1.9.x14:54
tewardDaviey: that is to say, the actual delta will be minimal14:55
tewardexcept for the potential of a new feature added in or finalized in development, with bugfixes as well14:55
rbasakDaviey: what teward says. The 1.9 to 1.10 bump is actually a no change branch AIUI, much like moving off rc.14:55
DavieyAh, i did not know that.14:56
tewardDaviey: the same happened from 1.6.x/1.7.x to 1.8.x/1.9.x -14:56
rbasakExcept that upstream effectively keep 1.9 ("mainline") production ready at all times.14:56
tewardin that 1.8.x is cut from the 1.7.x branch14:56
tewardand 1.9.x is the in-development branch14:56
tewardrbasak: with their tagged releases, yes14:56
rbasakRight14:56
tewardnot necessarily the same with the upstream repo14:56
rbasakbrb, need to make a call14:56
tewardack14:56
DavieyI think the question still unclear to me is.. What will cause the least surprise to users of the next LTS?14:56
tewardDaviey: i think sticking with stable will make them ask "WTF"14:56
tewardDebian has actually had a req for mainline packages14:57
tewardand during when they track stable they ahve the same req and it's refused14:57
DavieyWill it be, shipping a pre-release of the upstream LTS or the odd version point release number from prior?14:57
tewardIDK why they do it that way but...14:57
tewardDaviey: I... don't follow?14:57
tewardsorry i'm still not at 100% - the holidays threw me a loop14:57
tewardmy sister decided to get me drunk and i have a headache from that still >.<14:58
Davieyteward: I mean, we are currently talking about the next LTS, what version is put in there at _release_ time.14:58
rbasakI don't think there's much scope for users to be surprised by a version bump in nginx within a month or two of LTS release.14:58
Davieyteward: nice14:58
tewardDaviey: correct.  From 1.9.x to 1.10.x is not going to be a huge surprise14:58
tewardDaviey: prior to release, it'll likely have 1.9.x tracking Debian14:58
Davieyrbasak: Right, so - releasing for the 1-2 months of a hg snapshot, then updating to final VS a major version jump in that 1-2 month window? right?14:58
DavieyWhich one of those will cause least surprise to users?14:59
tewardDaviey: then we run the 'Untested Bug Explosion" issues at LTS time14:59
tewardif it takes nginx a week to go from 1.9.x to 1.10.x and they have bugs in there, which cause crashes, is that really the better option?14:59
Davieydoes upstream stack all of their testing to the last week before release?14:59
tewardDaviey: no, however we have no guarantee there's not a half-developed feature in there14:59
DavieyIn that 1-2 month window, what causes it to become stable - enough that we'd be happy jumping major versions as a SRU?15:00
Davieyteward: right.  I am wondering if a release note stating that for 1-2 months nginx is a tech preview until it is updated.. vs throwing in an older version and possibly making the user experience worse by jumping feature versions post release15:01
tewardDaviey: that's going to be a consideration either way for the Universe packages15:01
tewardin that any version bump might need a corresponding third party module version bump for FTBFS fixes15:02
tewardwhich i've seen 3 times iwth the 1.9.x branch so far15:02
Davieyright15:02
teward(especially the nginx-lua module, although there's a different discussion there)15:02
teward(with regards to Lua)15:02
teward(of which i think i've discussed briefly with rbasak)15:03
Davieyrbasak / teward: Have you thought about keeping 1.9 in universe for release, then adding 1.10 in main post release?15:03
DavieyIs that a better solution ?15:04
tewardDaviey: we'd have to demote nginx-core15:04
tewardor remove it15:04
teward(nginx-core was specifically created for the MIR)15:04
Davieyright15:04
rbasakWe could do that, but what would that achieve?15:05
rbasak(demote then promote later I mean)15:05
Davieyrbasak: No, i mean having two versions in the archive.15:05
rbasakOh.15:05
rbasakThat's be a bit painful :-/15:06
* teward shivers15:06
rbasak(in terms of maintenance work, etc)15:06
Davieyindeed15:06
rbasakFor version, if the choice is between hg snapshots or 1.9 releases, I think I favour 1.9 releases. They're effectively stablised hg snapshots from upsteam AIUI.15:06
tewardthat's an accurate representation15:07
tewardand 1.9 releases are tagged in hg, if we really wanted to pull from there (but they match the tarballs015:07
rbasakPerhaps an analogy to Openstack is following RCs instead of upstream git?15:07
* teward throws Apache out the window15:07
tewardsorry, i'm annoyed at a VM right now >.<15:08
DavieySo this is interesting, not much happened between 1.7.12 -> 1.8.. Really just fixing a compile issue.15:08
rbasakRight, because the last 1.7s are effectively RCs for 1.8.15:08
DavieyRight15:08
DavieyI didn't know this.15:08
rbasakThough there's no feature freeze rule AFAIK.15:08
tewardAIUI there's no feature freeze there, no.15:08
tewardokay, i need a walk otherwise i'mma throw servers out the window next, back in a few15:09
DavieyI am guessing there is no 1.9 point release schedule ?15:09
tewardDaviey: none15:09
Davieyteward: o/15:09
rbasakI'm also of the general opinion that if that's what upstream ship, that's what users expect from us.15:09
rbasakOr, at least, that is by definition acceptable for us to ship to users.15:10
Davieyrbasak: So a pre-release branch of 1.10 won't even exist.. it would be a case of tracking 1.9.X head?15:10
rbasakThough I accept there is a clash with our feature freeze policy.15:10
rbasakDaviey: yes, but I would want to follow 1.9.X _releases_ instead, which I think is what teward wants to do.15:10
Davieyrbasak: I mean, looking at the small gap here https://github.com/nginx/nginx/commits/branches/stable-1.8 .. going from 1.7.12 -> 1.8 post release would be fine! :)15:11
rbasakDaviey: it would, but we have no guarantee of that for 1.9.last -> 2.0 :-(15:11
rbasak(but we want to do it anyway)15:11
=== zz_DenBeiren is now known as DenBeiren
rbasakjcastro: you championed nginx into main when we did it a few years ago. I wonder if you have any thoughts on this? Guessing you're not aware of the discussion so far. Thread at https://lists.ubuntu.com/archives/ubuntu-server/2015-June/007072.html (cross over into July: https://lists.ubuntu.com/archives/ubuntu-server/2015-July/007081.html)15:13
* rbasak wonders if Sarah Novotny still works for nginx.15:14
rbasakMight be worth asking her too?15:14
Davieyrbasak: I think it might be worth getting upstreams perspective if possible.15:15
Davieyrbasak: If you do this, can you press on reluctance to have feature changes post-release, avoiding config changes and generally surprising the user least :)15:16
jcastrorbasak: yeah so I think it'd be nice to get at least semi-official response from them on what they'd like us to ship15:19
jcastroI am going to bet that it's 1.915:19
DavieyYeah, based on stable verisons being a cut from odd branches, this does change my opinion.15:20
jcastrodoes someone want me to ping sarah?15:21
* teward spawns again15:22
tewardrbasak: she does, you may want to ask LinuxJedi (Andrew HUtchings) as his role is pretty much being the advocate in this case15:23
tewardthe liason between us and them, AIUI15:23
tewardhe's been more responsive than Sarah has, TBH15:23
Davieyteward: LinuxJedi of get-iplayer?15:23
tewardDaviey: not sure, but LinuxJedi as in the LinuxJedi in this channel now15:23
tewardDaviey: i don't know his whole background15:24
tewardi could find out but i'd rather eat my lunch xD15:24
=== DenBeiren is now known as zz_DenBeiren
DavieyI'm probably confused.15:25
* teward shrugs15:25
tewardDaviey: i'm already confused, but that's not atypical of me when i'm multitasking in quantities of tasks more than i usually work with at once xD15:26
tewardI do know that the LinuxJedi currently in this channel here was present at my request (with Sarah joining in while he was in Moscow) to answer questions I might not be able to from the nginx side of things15:27
tewardthey're also my contact for forwarding questions/concerns up to nginx and getting timely responses to inquiries back15:28
tewardSarah's also a valid contact too if you wish to reach out15:28
tewardjcastro: AIUI from Andrew, they support 1.9.x as well15:29
* jcastro nods15:29
tewardor 1.10.x, but with the timeline of releasing being so close to LTS release it wouldn't get in until after FeatureFreeze or possibly even FinalFreeze15:29
tewardor after release15:29
jcastrohey so thinking aloud, could we do whatever snapshot of 1.10.x and then commit to putting final in 16.04.1?15:35
Davieyjcastro: Nice idea. Why didn't I think of that? :)15:35
tewardjcastro: 1.10.x pre-snapshots are 1.9.x15:35
jcastrooh ok15:35
rbasakjcastro: we can do that, sure. Though wouldn't it be better to do it even earlier?15:35
jcastroDaviey: it's the maas-model15:35
tewardthey don't have a 1.10.x tag series until they cut 1.10.x15:35
jcastrook15:35
tewardwhich means we'd be following 1.9.x tags/snapshots15:36
tewarduntil 1.10.x releases15:36
tewardand 'snapshots' aren't necessarily guaranteed as 'stable'15:36
teward(could have some bugs, etc.)15:36
rbasakLinuxJedi: so I think the key part of the difficulty we're having is that Ubuntu expects to have a feature freeze for everything in its release around mid-Feb 2016 (exact date TBA)15:37
rbasakLinuxJedi: and there is some dissonance between that and nginx's policy of doing anything to a 1.10 candidate (effectively the last 1.9 releases I guess) until 1.10 is actually out.15:38
rbasakLinuxJedi: is there anything you can to do accomodate us on this please?15:38
tewardnote i don't think they're awake atm15:38
rbasakack15:38
jcastrorbasak/teward: I'm of the opinion that doing it earlier and getting a non-LTS cycle in will be better for you come next spring15:38
tewardjcastro: the consideration of this is whatever lands in wily will likely land in lts15:39
tewardso deciding ahead of LTS to have 1.9.x before LTS release will be the go-ahead to merge15:39
tewardfailing that, i do nothing, and wily gets 1.6.x or w/e is currently in vivid15:39
teward!info nginx-core vivid15:39
tewardoh right bots are evil15:40
jcastroI don't think the old one should even be an option15:40
ubottunginx-core (source: nginx): nginx web/proxy server (core version). In component main, is optional. Version 1.6.2-5ubuntu3 (vivid), package size 384 kB, installed size 1075 kB15:40
tewardjcastro: that's what lands if i do nothing15:40
jcastrolike that's opposite to what people expect in nginx right?15:40
jcastroIf we ship the LTS with 1.6.x we're basically telling people "this is useless for you go use a PPA."15:40
tewardjcastro: for LTS the big thing is "Do we keep it on 1.9.x or do we get an exemption for 1.10.x?"15:41
tewardi'm OK with nothing happening for wily xD15:41
rbasakjcastro: right. So 1.6 is out IMHO.15:41
teward^ that15:41
* jcastro nods15:42
tewardat least for LTS15:42
tewardwily, decision is do we deviate from Debian and put 1.8.x in in the interim15:42
jcastroyeah so like do 1.9.x and get an exception to upgrade it to 1.10 for the point release15:42
tewardor do we pull in 1.9.x, and then what do we do for LTS15:42
rbasakjcastro: and I think the same is for 1.8 really. It'll EOL upstream when 1.10 is out, just after our 16.04 release.15:42
teward^ that15:42
jcastrowell, I love not deviating from Debian also, but if it's dead upstream that's even worse IMO15:42
tewardheheh15:42
tewardurgh i have too many emails >.<15:43
tewardjcastro: you're of the opinion rbasak and I have - 1.9.x for LTS, following Debian, and 1.10.x when it releases assuming a TB exemption15:43
teward(almost like a one-off MRE)15:43
jcastroyeah15:43
jcastroalso, I don't see in the thread but what do the security team think?15:43
tewardjcastro: we didn't loop them in, but I know sarnold gave an opinion early on in the server team thread15:44
rbasakIIRC sarnold was in favour of 1.9.x then MRE to 1.10.x too.15:44
tewardmhm15:44
tewardbut i don't know if that was a security team opinion or his own15:44
teward(that's in the ubuntu-server thread from a few weeks ago pre-server team meeting)15:44
jcastroI see it now, thanks15:45
jcastrook so it seems like everyone is in violent agreement then15:45
tewardexcept with what to do come LTS release15:45
tewardwe've had releases which had the 'mainline' version in it before during the debian syncups, but since there's a delta everything's manually merged15:46
rbasakWell we know what we _want_ to do. Just need permission from the release team and/or TB.15:46
teward^ that15:46
jcastroright.15:46
rbasakI think we've concluded that it needs to be the TB.15:46
tewardrbasak: and I think Daviey said the TB should be looped in15:46
tewardrbasak: agreed there, actually I think we even discussed privately and came to the conclusion the TB would likely need looped in15:46
tewardthat is you and I discussed privately15:46
tewardas LTS approaches, I'm more curious what we're going to do with the Lua issue15:46
jcastroyeah, like to me it seems that just a note in the release notes for nginx users outlining that 1.10 will come later would be fine15:47
jcastrowe've done that before with things15:47
rbasak+1 for release note15:47
tewardrbasak: the second part of this is regardless of nginx version, what do we do with Lua15:47
tewardis the release team and others still gunning to drop the older lua?15:47
tewardi think 5.1... it was?15:47
* teward pulls the code15:47
rbasakI'm not too worried about lua TBH15:47
rbasakAIUI, 5.2 is quite different from 5.1. Like a major bump with ABI breaks. More like lua 6.15:48
jcastroactually, we did this exact thing with Ceph .79->.80 for 14.0415:48
jcastroso there's precendent there15:48
rbasakWe can just follow what upstreams do. If the distro wants to drop 5.1 and upstream nginx doesn't support 5.2, then we have no choice but to drop lua support. Not really our decision.15:48
rbasakIIRC the same applies to Apache.15:49
tewardrbasak: indeed, i'm fine with that, as the PPAs will continue to have Lua support provided 5.1 exists in the repos - failing that there will be outrage15:49
rbasakHow many people actually _use_ nginx with lua?15:49
teward'cause i know there's quite a few who use the Lua modules15:49
rbasakHmm, OK.15:49
tewardrbasak: enough for me to know that if Debian dropped it there'd be people screaming and blood flowing15:49
rbasakPerhaps their outrage should be directed at the implementation of 5.2 support? :)15:49
tewardI had some outcry when I temporarily disabled it in the PPAs due to FTBFS problems15:50
tewardended up screeing my emails for two weeks15:50
jcastroI still think btw, that people who constantly flame you over mail or whatever over the PPA should really not do that.15:51
tewardi agree with you15:51
rbasakEmpty vessels and all that. The majority of users probably just get on with things, build their own, etc.15:51
tewardthis is now why i forward all "Hey, the PPA has a problem" emails with an autoresponder saying "File a bug on it on Launchpad at [link]."15:51
rbasakDaviey: so are you OK with releasing 16.04 with 1.9 and seeking an exception from the TB for a bump to 1.10 in -updates?15:52
tewardrbasak: (WRT Lua, it reminds me of Wireshark, in that newer Wireshark minor bumps (1.12 to 1.13 for instance) would break the earlier version and custom-compiled modules.  (There are buisnesses that fit that criterion))15:54
Davieyrbasak: Based on learning that 1.10 is cut from 1.9.X mostly.  What is the unknown is how long there will be between the 1.9.X in LTS to the 1.10 version.15:54
tewardDaviey: matter of weeks, using April 21 (the last cut date nginx had done this with) as a base guideline, within a few weeks either direction of release15:55
rbasakDaviey: I believe their schedule is "April 2016", so assuming a regular schedule for us then not more than a couple of weeks at most I think. Though of course like us nobody can commit to that.15:55
tewardso my guess would be within a week or two after, or a week before, we release15:56
tewardi can ask for LinuxJedi to poke the devels at nginx to get a more firm date when we get locser to April15:56
=== roaksoax_ is now known as roaksoax
=== markthomas|away is now known as markthomas
ciscamthere's a cifs share I need to mount on my ubuntu server. I use credentials for an account with full_set permissions (tested working with an android and a windows machine), but get no chmod/chown permissions inside ubuntu, for neither users nor root16:23
ciscamthe mount options I used are: credentials=*,iocharset=utf8,nounix,file_mode=0777,dir_mode=077716:24
ciscamnounix to get write permission at all and dir/file-mode to grant users on that machine write permissions16:24
arvislacisHello all, I have problem with Ubuntu 14.04 VPS when trying to upgrade or dist-upgrade system - Sub-process /usr/bin/dpkg returned an error code (1)16:42
tewardarvislacis: what's the entire error say16:47
tewardthat's one section of it, and by far not the whole error16:47
arvislacisteward: http://pastebin.com/TwAJ29ya16:50
tewardrbasak: Daviey: jcastro: are we all in agreement, at least for Wily, to do the merge from Debian?16:50
jcastroteward: debian is on 1.9 currently iirc?16:53
jcastrosorry I am starting to get mixed up, heh16:53
tewardjcastro: correct16:54
tewardjcastro: so for Wily it's just a merge16:54
tewardwhich I can do16:54
tewardprovided my sbuild schroots didn't implode again16:54
jcastrosounds good to me16:55
Davieyteward: Please outline the plan to TB first17:11
tewardack17:11
tewardrbasak is more eloquent with thorough messages to the TB about such things, though, he may want to start, and then make a note my plan will be laid out in the next message or such17:12
tewardbrb.  again.17:12
lalaSay if I want to use my Ubuntu Server 14.04.2 LTS not only on my local network, but configure it with a subdomain, how would I do so? I already made the IP address static on my local network by using `sudo nano /etc/network/interfaces/`.17:16
cwillu_at_workare there any gotchas with setting up a ubuntu samba ad dc?17:39
jpdslala: Have you given your server a public IP or are you NAT'ing?17:40
cwillu_at_workI'm unable to join another ubuntu machine as a member server; net ads join fails with a kinit succeeded but ads_sasl_spnego_krb5_bind failed: Invalid credentials;;  Failed to join domain: failed to connect to AD: Invalid credentials error17:40
lalajpds: My server doesn't have a public IP yet.17:56
lalaI've made my server's local IP static.17:56
lalaNot sure how to configure a public IP.17:57
jpdslala: OK, so you've set up NAT on your router?17:57
lalajpds: Not sure.17:57
lalaNot sure what that is.17:57
jpdslala: OK, so outside of your private network, noone can get to that machine because it sits behind a router that's on the internet.17:57
lalajpds: Yes.17:58
jpdslala: So you'll have to configure that router so that it "port forwards" ports on the public IP to a port on your server.17:59
jpdslala: I suggest you look up your router documentation.18:00
sarnoldhttp://portforward.com/english/routers/port_forwarding/18:01
sarnoldwow, they've really scammed-up the website since the last time I looked at it18:02
=== med_` is now known as med_
=== liam_ is now known as Guest20028
lalasarnold: Because of the scam adware links?18:10
sarnoldlala: the full-screen "download our software" interstitials, etc..18:12
lalajpds: My router shows that it has NAT enabled.18:14
jpdslala: No idea what you're seeing, but there should be like a port-forward section.18:14
lalaFound the settings!18:19
lalaLet me see.18:20
lalahttps://usercontent.irccloud-cdn.com/file/3622q4Gi/Screen%20Shot%202015-07-06%20at%202.20.19%20PM.png18:20
jpdslala: You probably want the single one.18:22
lalajpds: Okay. Which port should I use?18:24
jpdslala: Well, you map a port on the router to a port on your server.18:24
lalajpds: A single port?18:24
lalaOkay.18:25
jpdslala: If you're trying to forward a website, you usually forward something to port 80 on your static IP.18:25
lalaSo which port should it be?18:25
jpdslala: Just pick one to test, 8080?18:25
lalaWhat if I also want to ssh. And also ftp (in case?) or others.18:25
lalaIs 8080 used by anything else?18:26
jpdslala: Shouldn't be by default.18:26
jpdslala: You can add rules for them later?18:26
lalajpds: I'm not sure why that was a question.18:27
lalaNot sure what you're asking.18:27
jpdslater? → later.18:28
tewardif i have an issue with a server being unable to be registered in a self-hosted personal landscape instance, is that something you all can help me with or am I screwed18:30
sarnoldlala: please don't use ftp, it's a terrible protocol with horrible implementations.18:31
lalaI've messed up my internet by accident and fixed it again! Yay!18:51
lalaMessed up the /etc/network/interfaces file.18:51
lalaAnd then used `/etc/init.d/networking restart` and it was fixed!18:52
lalaWell it was fixed after I fixed the `/etc/network/interfaces` file.18:52
brett__An upgrade from 12.04 to 14.04 appears to have broken the ability for users to change their password in Samba. I've searched eveyrwhere I can think of - any hints?18:53
lalaThe `iface eth0 inet6 static` part messed it up.18:53
brett__It appears to be an issue in PAM " smb_pam_passchange: PAM: Password Change Failed for user XXX"18:53
lalaNever mind. I messed it up again.18:58
=== keithzg_vacation is now known as keithzg
lalaOkay. I think I've messed up my network configuration.19:15
lalaNow everything is unresponsive.19:18
ash_mwhen I'm setting up a user account for the first time; it says it's for non-administrative activities.... it suggests my full name, but honestly, I don't think I'll be logging in as anything but admin anyway.19:28
ash_merm19:30
ash_mthen I looked at this post: Specifically, the first user you create (when you install) and all users in the 'sudo' group are considered 'administrators' and have the ability to use 'sudo' for administrative tasks. So if you want to have a non-administrative user, make a new user account and don't put it in the 'sudo' group, then that user won't be able to make any system-wide changes.19:30
ash_mbut it specifically says: "A user account will be created for you to use instead of the root account for non-administrative activities.19:31
sarnoldash_m: by default, the root account isn't used for interactive users on ubuntu19:32
sarnoldash_m: feel free to configure it that way if you wish19:32
ash_msarnold: I am happy to sudo everything if that's what you're saying...19:33
ash_msarnold: but I am confused as to what this account is because of the contradicting message and post19:33
ash_msarnold: also, "admin" is not allowed.19:33
sarnoldash_m: once the account is created, log in to it, and run 'id' or 'groups' to see if it is in the 'sudo' group; if it is, then it's an administrative account19:34
sarnoldI'm surprised about 'admin' being forbidden; I don't see that account on my system, which is the only reason I can think of for i to be forbidden..19:35
ash_msarnold: I've reinstalled a couple times before and last time I was able to run sudo apt-get upgrade with no problems; does that make it seem like it's attributed to the sudoer's group?19:35
ash_msarnold: yeah, I didn't see it either19:35
ash_msarnold: but the message says: "Reserved username\n The username you entered (admin) is reserved for use by the system. Please select a different one."19:36
sarnoldinteresting, I've not seen that before.19:36
ash_msarnold: I'm running 14.04 LTS if that makes a difference19:37
ash_manyway, I'm sure you probably named your account sarnold ... right?19:37
sarnoldash_m: exactly :)19:38
ash_mmkay.19:38
ash_mout of curiousity, do you have your home directory encrypted?19:41
ash_msarnold: ^19:41
sarnoldash_m: no19:42
ash_mthanks :P19:42
ash_mwhat LVM?19:42
patdk-wkI normally never use lvm, unless  Ihave an explicit use for it on that system19:43
patdk-wkbut others, love lvm19:43
ash_mhmm... I'll skip it, but I'll look into it later I guess.19:44
ash_merm... I don't remember setting a root password in the setup19:48
patdk-wkwhy would you?19:48
patdk-wkwhat does one need a root password for?19:49
ash_m:: shrug :: I'm following a tut19:49
sarnoldbrute-force login attempts :)19:49
patdk-wkheh, tutorials are full of fail19:49
tewardthat includes ones on help.ubuntu.com too :P19:49
patdk-wkeven if they are 100% accurate, they fail, cause they assume you have some level of understanding, that is never meet19:50
teward(there's a few that should be revised :P)19:50
patdk-wkyes19:50
tewardsarnold: mind if I pick your brain with a question?19:50
sarnoldteward: sure19:50
tewardsee PM19:50
ash_mBy default root does not have a password and the root account is locked until you give it a password.19:51
ash_mapparently19:51
patdk-wknot locked, but unable to directly login, without sudo19:51
brett__What is the correct way to force a Windows user to change their password at the next login in Samba in 14.04?19:54
crucidal_Hi, I disabled a virtual host with a2dissite and reloaded my apache service afterwards. even after clearing my cache the virtual host is still accesible. Does anyone know how to solve this?19:57
ash_mI'm confused... do I _not_ need to see my username in sudoers or sudoers.d in order to be part of the sudoers group?19:58
crucidal_afaik sudoers is enough ash_m19:59
ash_m:q119:59
ash_moops19:59
sarnoldash_m: this bit here normally suffices:19:59
sarnold# Allow members of group sudo to execute any command19:59
sarnold%sudo   ALL=(ALL:ALL) ALL19:59
ash_msarnold: I see19:59
ash_mand only someone in that group can make another user part of that group20:00
ash_mright?20:00
crucidal_ok Dont mind my question: I used a copy of my old virtualhost to create a wildcard.conf... and in there I was still referring to the old html20:02
ash_mis there a ctrl+v equivalent in vbox?20:25
bekkshost+v20:26
bekksmaybe.20:26
bekksWhats the actual issue behind your question?20:26
ash_mbekks: that didn't work20:27
tewardash_m: what's the actual issue behind your question20:27
ash_mI want to paste from my windows computer to the vbox20:27
tewardinstall VBox Guest Additions20:28
tewardand does server even have a clipboard?20:28
tewardbekks: ^20:28
ash_m:: shrug ::20:28
ash_munder Devices it says "shared clipboard"20:28
bekksEnable clipboard sharing for your VM.20:28
ash_mbut I don't know how to access the clipboard20:28
tewardash_m: but also install the guest additions (i don't think they're default installed?)20:28
bekksWhere exactly inside the guest do you want to copy things into?20:28
ash_mbekks: vim... I'm editing the interfaces file20:29
bekksIn a console?20:29
ash_mbekks: well, it's a vbox20:29
tewardbetter question, why do you need to *paste* anything in there20:29
bekksThats not the answer.20:29
tewardwhy not type it out20:29
ash_mteward: paste is a useful function to know regardless20:30
bekksclipboard sharing technically doesnt work without a graphical environment inside the guest.20:30
tewardash_m: if you're running server as a guest clipboard sharing isn't guaranteed20:30
tewardit usually has/needs a graphical component20:30
tewardash_m: and again you haven't answered MY question - why do you need to paste into there20:30
tewardwhy not type it out20:30
ash_mteward: it would seem that's my only option.20:31
ash_mteward: but to answer your question, it's simply faster20:31
tewardno, it's not20:31
teward:P20:32
tewardtrust me, i work in VMs all the time, it's not faster to paste something from the host - especially if you end up typing it out once already20:32
* teward points to the three server VMs on this system right now :P20:32
* ash_m trusts teward 20:36
sarnoldash_m: it's usually easier to just ssh to your vms20:39
sarnoldash_m: then you could use e.g. putty's paste feature20:40
=== markthomas is now known as markthomas|away
tewardash_m: agreed with sarnold - set up openssh on your VMs, set up NAT rules, etc. if it's on the VBox NAT network device (or, add a host-only one, etc.), then use PuTTY or such21:51
tewardit saves a lot of headache21:51
=== Malediction_ is now known as Malediction
=== Hexagon is now known as Guest55859

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!