| skrp | i come home and my ubuntu server is hacked hard. vlc running at 99%. auth.log all removed | 00:20 |
|---|---|---|
| skrp | i can't apt-get remove/purge firefox, which was totally hijacked | 00:21 |
| patdk-lap | what where those things doing installed on a server? | 00:21 |
| tarpman | skrp: pull the plug. wipe the disks, reinstall, restore data from backup. you have know way to know what's been done. probably all kinds of rooted | 00:22 |
| tarpman | *no way | 00:22 |
| skrp | any way i can snapshot and inspect what they did later? | 00:23 |
| tarpman | shut it down first, then boot off a livecd if you want to look around or take an image of the disk | 00:24 |
| sarnold | an alternate plan is to pull the plug, get new disks, reinstall, restore data -- and then do forensics on the hacked images to learn more about it. Keeping in mind that they might have left behind "gifts" (in both the english sense and german sense :) designed to sabotage inspection.. | 00:24 |
| patdk-lap | I would be paranoid of restoring data | 00:25 |
| patdk-lap | if restoring data == restoring website | 00:25 |
| patdk-lap | that is likely how they got in to begin with | 00:25 |
| patdk-lap | previously hacked, or just vaunerable | 00:25 |
| sarnold | I'd suspect first brute-force sshd paswords, then cpanels/webpanel things, _then_ website content.. | 00:26 |
| patdk-lap | I have seen systems hacked, and then never really abused for months or years | 00:26 |
| patdk-lap | I always see website first | 00:26 |
| skrp | hmmm yeah | 00:26 |
| skrp | i'm going to have to wipe this one, and my pfsense box it is behind | 00:27 |
| patdk-lap | ssh is too easy to protect against, and never install cpanel/webpanel things | 00:27 |
| sarnold | patdk-lap :) | 00:27 |
| * patdk-lap notes another wordpress thing was fixed over the weekend :) | 00:27 | |
| patdk-lap | or was that last week | 00:27 |
| sarnold | probably "last week" will never be wrong with wordpress... | 00:29 |
| neonixcoder | When I try to upgrade from 10.04 to 12.04 some times I am getting "locale: /lib/libc.so.6: version `GLIBC_2.15' not found (required by locale)" | 00:55 |
| neonixcoder | Any suggestions on this? | 00:55 |
| === markthomas is now known as markthomas|away | ||
| roracle | hey guys when i set up my server, do I need to put a ".com" at the end? the reason i ask is because i need to set up postfix for sendmail, and can't seem to get it working, and was wondering if that might be why? | 05:53 |
| roracle | *i mean do i need a ".com" at the end of the hostname | 05:53 |
| === ochoroch1 is now known as ochoroch | ||
| === aarcane_ is now known as root________ | ||
| lordievader | Good morning. | 06:48 |
| === jerto1 is now known as jerto | ||
| === kickinz1|afk is now known as kickinz1 | ||
| Amillo | Hey guys, while trying to install apache on 12.04 I'm getting an error unable to correct problems, you have held broken packages. I've went through a lot of commands trying to solve it but none have been successful, anyone got any ideas? | 10:40 |
| Amillo | I've made a fresh server and that didn't solve it either | 10:40 |
| maxb | You do know 12.04 is ancient, right? | 10:41 |
| Amillo | Yep | 10:42 |
| Amillo | But I was told to use 12.04, would 14.04 be a better choice? | 10:42 |
| maxb | Unless you have a requirement you really absolutely can't change, never prefer a version that is obsolete | 10:43 |
| maxb | (and even then, try to subvert the requirement) | 10:43 |
| Amillo | I've got my DNS setup on 12.04 | 10:43 |
| Amillo | would using 14.04 on an apache effect this | 10:43 |
| maxb | On different machines or VMs? No. | 10:44 |
| Amillo | just vms | 10:44 |
| maxb | If you are setting up a new installation of Ubuntu, definitely use a current version, unless you have an extremely critical reason not to | 10:46 |
| lkthomas | does kernel linux-image-3.19.0-18 still under testing on 14.02 ? | 10:50 |
| lkthomas | how come none of my machines could boot properly under this kernel | 10:50 |
| fishcooker | what's preseed mean.. actually i want to make custom iso so that if new box is coming it would be install ubuntu automatically.. how to make it happen? | 10:57 |
| lkthomas | preseed is an installation template which "provision" your server like a stencil | 10:59 |
| lkthomas | fishcooker, during iso booting time, you could pointing it to a preseed config file, so you could provision millions of servers as same way | 11:00 |
| fishcooker | is the https://help.ubuntu.com/community/PXEInstallServer is the good point to start.. or there is another link should i follow lkthomas? | 11:05 |
| lkthomas | fishcooker, preseed is not very well documented, PXE is a good way to start, we are using PXE preseed as well, but I did dig into preseed codebase and search for options that I need. | 11:06 |
| === hito_jp0 is now known as hito_jp | ||
| teward | General question: What would cause the system to say "Out of Memory" when it's got 4.3GB of free memory buffered | 13:30 |
| teward | and only when dovecot is trying to do things | 13:30 |
| TJ- | fragmentation? | 13:30 |
| jrwren | teward: kernel saying OOM, or a process? malloc can fail for a few reasons. | 13:31 |
| teward | jrwren: syslog says hostname out of memory [18855] and there's no way to trace back | 13:33 |
| teward | oh, i neglected to mention the age of the server because i'd get smacked | 13:33 |
| teward | funny: it's EOL, and I just realized it by checking kernel version | 13:33 |
| teward | >.> | 13:33 |
| teward | someone give me a phaser, i need to vaporize some servers | 13:33 |
| TJ- | EOl doesn't equate to out of memory though | 13:34 |
| teward | no, but support in this channel does | 13:34 |
| teward | it's an 8.04 server :P | 13:34 |
| RoyK | teward: heh :D | 13:35 |
| RoyK | even 10.04 is EOL... | 13:35 |
| RoyK | shouldn't get out of memory anyway, though | 13:35 |
| RoyK | but still - perhaps time to upgrade it to get some fixes? ;) | 13:35 |
| teward | probably | 13:35 |
| TJ- | dovecot was process 18855 ? | 13:35 |
| lordievader | teward: Heh, we have one of those too... It has been up for replacement for years... | 13:35 |
| teward | TJ-: couldn't tell, had to halt the system to unstick SSH | 13:35 |
| RoyK | teward: that's a definite OOM | 13:36 |
| RoyK | but the kernel log should show | 13:36 |
| teward | RoyK: monitoring says it had more memory | 13:36 |
| RoyK | anyway - upgrade time! | 13:36 |
| teward | RoyK: kernel log is syslog? | 13:36 |
| teward | or elsewhere | 13:36 |
| RoyK | teward: don't remember log locations on hardy - either syslog or kern.log | 13:37 |
| teward | well there's nothing in kern.log indicating a kernel level OOM | 13:38 |
| teward | which makes sense since the VMware tools installed here responded and gracefully halted the system | 13:38 |
| * teward wonders if it's just Dovecot running out of its own memory | 13:38 | |
| RoyK | but then, the system hasn't been updated for 4+ years, so some bugs may have been fixed after that ;) | 13:38 |
| teward | 'cause the OOM killer would've started killing things, no? | 13:38 |
| teward | RoyK: oh, definitely, tell that to the ancient python scripts running here though | 13:39 |
| RoyK | the OOM killer sometimes saves the day, but just sometimes | 13:39 |
| teward | RoyK: this is what i don't get, vSphere shows that the memory consumption data relayed by VMware tools was under a gigabite, including the cache bits that LInux does | 13:40 |
| teward | so i'm not sure at ALL why it failed and hung up | 13:40 |
| RoyK | and I beleive the OOM killer has been improved a bit those seven years | 13:40 |
| RoyK | anyway - if this is under vmware - why didn't you bring up the console? | 13:40 |
| teward | 'cause my access creds don't give me a lot of access unfortunately | 13:42 |
| teward | start/stop/restart and basic stats | 13:42 |
| teward | my standard access creds anyways | 13:43 |
| * teward yawns | 13:43 | |
| teward | what we need is an overhaul here... | 13:43 |
| RoyK | if it happens repeatedly, you could setup a network console... | 13:43 |
| teward | i'm considering it | 13:45 |
| teward | my guess though is that it's got a bug somewhere | 13:45 |
| RoyK | but probably better to just setup a new VM with 14.04 and migrate the config | 13:45 |
| RoyK | I wouldn't dare having something that old connected to a network | 13:46 |
| TJ- | If it's PAE then even if the system has 4.3GB free, each process can only use a maximum of 2GB or 3GB depending on the kernel CONFIG_VMSPLIT_3G | 13:49 |
| teward | migration of the config isn't the issue RoyK | 13:52 |
| teward | migration of the custom inhouse software is | 13:52 |
| TJ- | 14.04 host with a 8.04 chroot :) | 13:53 |
| teward | lol | 13:53 |
| RoyK | teward: don't you have the source? | 13:53 |
| teward | it's all deprecated python | 13:54 |
| teward | so no | 13:54 |
| RoyK | *that* deprecated? | 13:54 |
| lordievader | Python 1.x? | 13:54 |
| RoyK | hihi | 13:55 |
| === medz is now known as samsn | ||
| jrwren | teward: internal app? | 13:56 |
| patdk-wk | why do you think it's a OOM? | 14:06 |
| patdk-wk | what is the exact log line? | 14:06 |
| patdk-wk | cause it sounds like a dovecot log line, out of memory, that is normal, cause each dovecot thread has it's own limit set, normally around 256megs | 14:07 |
| patdk-wk | and increasing it from defaults, is up to you, via dovecot config documentation | 14:07 |
| patdk-wk | the larger the mailbox, the more memory it will need to index the messages | 14:07 |
| patdk-wk | and then more if your using compression, or searching and other features | 14:08 |
| RoyK | patdk-wk: his sshd hung too | 14:08 |
| patdk-wk | ah, didn't see that in the text wall | 14:08 |
| patdk-wk | it wasn't perhaps, went readonly filesystem? | 14:09 |
| patdk-wk | ssh will stop responding if that happens, sometimes, depending on how the login is configured, due to logs and stuff unable to write | 14:09 |
| RoyK | patdk-wk: never seen ssh hang because of that... | 14:10 |
| patdk-wk | I have, can't remember exactly why | 14:11 |
| TJ- | I thibk that was back when /var/run/ was not a tmpfs on /run/, if /var/ file-system went read-only, sshd had no write access to /var/run/sshd/ | 14:13 |
| patdk-wk | I think the issue was, unable to fork | 14:15 |
| patdk-wk | due to the system being overloaded due to webhits, or other things, just backing up due to not able to process | 14:15 |
| TJ- | I've had the issue I described, many years ago | 14:16 |
| patdk-wk | I'm sure I had that also, but I know I've had the issue on 12.04, and that uses /run on tmpfs | 14:17 |
| patdk-wk | but I'm not saying my issue isn't specific to how I have things configured | 14:17 |
| * TJ- nods | 14:17 | |
| caribou | smoser: FYI, I won't be able to attend today's meeting. Nothing particular to bring up anyway | 14:25 |
| smoser | k | 14:27 |
| teward | jrgifford: yep, internal | 14:36 |
| teward | patdk-lap: quite literally, in syslog: hostname out of memory [18855] | 14:36 |
| teward | and a timestamp before it | 14:36 |
| teward | RoyK: I figured out the SSHd hang | 14:37 |
| teward | that was a VMware glitch | 14:37 |
| teward | (somehow the vNIC got disconnected from the vSwitch, the restart reloaded the vNIC) | 14:37 |
| RoyK | teward: strange - never seen that on vmware | 14:40 |
| RoyK | seen it on hyper-v, though - far more there (that was h-v v1) | 14:40 |
| patdk-wk | teward, seen that many times :( | 14:42 |
| patdk-wk | it's always pisses me off | 14:42 |
| teward | patdk-wk: which, that syslog line? | 14:43 |
| teward | RoyK: there was a maintenance option changed by the other guy that caused a momentary blip | 14:43 |
| teward | that one vNIC never reconnected | 14:43 |
| teward | happened once before here | 14:43 |
| RoyK | ok | 14:44 |
| teward | that's why SSH hung - because right as it prompted for PW that change happened | 14:44 |
| teward | so *kablooey& | 14:44 |
| RoyK | teward: is the software really bound to run on python 2.5? I mean - 2.7 isn't that big a difference, is it? | 14:44 |
| patdk-wk | no, the vnic | 14:45 |
| teward | RoyK: i can't get approval to test | 14:45 |
| teward | patdk-wk: ah | 14:45 |
| patdk-wk | has happened about 10times for me, in the last two years | 14:45 |
| patdk-wk | out of around 1400 vm's | 14:45 |
| teward | patdk-wk: yeah things randomly asplode :/ | 14:45 |
| teward | meh | 14:45 |
| patdk-wk | the syslog line, is odd | 14:45 |
| patdk-wk | no program name | 14:45 |
| patdk-wk | it should atleast say, kernel: on it | 14:45 |
| teward | patdk-wk: indeed, but is it really a kernel OOM error? It doesn't sound it since the resource graph showed only about 500MB used out of 4.5GB available | 14:46 |
| teward | taking caches into account of course | 14:46 |
| patdk-wk | that out of memory, can't be from the kernel | 14:46 |
| teward | right | 14:46 |
| patdk-wk | since it's missing the kernel: line | 14:46 |
| patdk-wk | and the OOM is like a 50+ line report | 14:46 |
| RoyK | teward: there are python 2.5 PPAs | 14:46 |
| teward | the question is: was Dovecot triggering it | 14:46 |
| teward | RoyK: i have a feeling it'll work on 14.04 | 14:46 |
| RoyK | teward: you should give your boss a dork approval | 14:46 |
| patdk-wk | if it was dovecot, it would say dovecot: :) | 14:46 |
| patdk-wk | hmm | 14:46 |
| teward | but i can't do anything without 5 other people's collaborative effort | 14:46 |
| teward | since we have to migrate email data over (dovecot), postfix configurations, SMB share configs... | 14:47 |
| RoyK | to insist on using software not update for over 3 years, you can't understand much | 14:47 |
| patdk-wk | I'm guessing it is a syslog issue | 14:47 |
| teward | RoyK: Believe me: If I had unlimited power i'd have burned this VM | 14:47 |
| teward | but eh | 14:47 |
| teward | i don't have time at the moment for the migration project | 14:47 |
| teward | patdk-wk: possibly, given this is a Hardy machine | 14:47 |
| * teward shrugs | 14:48 | |
| teward | it's on the list of things I'd love to upgrade | 14:48 |
| patdk-wk | teward, https://communities.vmware.com/message/2280260 | 14:48 |
| patdk-wk | same type of log entry, but on esxi hmm | 14:50 |
| teward | ooo so i can blame VMware this time | 14:50 |
| teward | patdk-wk: that's the system that VM is on | 14:50 |
| teward | I wonder if the VMware tools are at fault | 14:50 |
| teward | i could remove them... | 14:50 |
| jrgifford | always blame VMWare teward | 14:50 |
| teward | but we lose HA that way | 14:50 |
| teward | jrgifford: lol | 14:50 |
| patdk-wk | oh ya, your using older than hell tools :) | 14:50 |
| teward | jrgifford: always blame $random | 14:50 |
| teward | :P | 14:50 |
| teward | patdk-wk: i could always try and update the tools but that'd go badly lol | 14:51 |
| teward | kernel and what not | 14:51 |
| jrgifford | yeah, old tools will cause weird behavior, particularly if the host has upgraded throughout time. | 14:51 |
| jrgifford | (I'm assuming you've patched VMware at least once since Hardy was EOL...) | 14:52 |
| patdk-wk | ya, I backport newer tools to my ubuntu boxes | 14:52 |
| teward | jrgifford: i wouldn't know, i don't track the ESXi updates, that's the other guy's job :P | 14:52 |
| patdk-wk | but I don't even bother porting back to 10.04, and am dropping 12.04 next month | 14:52 |
| jvwjgames | Hi | 15:11 |
| jvwjgames | Hi i need help setting up multiple static ip's on multiple Routers what channel would I got to get help for that | 15:13 |
| teward | not here unless your routers are Ubuntu | 15:13 |
| jvwjgames | Is there a routing channel | 15:13 |
| teward | ##networking maybe, but if oyu don't know how to set static IPs on a router, you've got bigger problems | 15:14 |
| teward | and you likely have to set it one by one on each router | 15:14 |
| jvwjgames | I do but it can't set then up across multiple routers | 15:14 |
| jvwjgames | I* | 15:15 |
| teward | got a server that grinds to a halt when any operations of import are executed. recovery runs relatively fine, but sshing in takes over 3 minutes, disk operations are slow (apt-get dist-upgrade for instance), etc. RAM, Disks, Disk Array appear to check out, fsck returns 'clean' | 15:52 |
| teward | lookin for additional debug steps | 15:52 |
| teward | recovery mode flies | 15:52 |
| === markthomas|away is now known as markthomas | ||
| Seveas | teward: iotop. | 16:26 |
| samba35 | how to clear apt-get autoremove package list becase that list has some know package need to be install which i do not want to uninstall | 16:32 |
| rbasak | samba35: apt-mark manual <package> | 16:35 |
| samba35 | hmm ,there is around 100+ package | 16:36 |
| rbasak | or for the entire list, some variation on apt-mark showauto|xargs apt-mark manual | 16:36 |
| samba35 | ok Thanks | 16:37 |
| rbasak | Though that will wipe out the usefuleness of autoremove really | 16:37 |
| rbasak | You might as well just not use autoremove. | 16:37 |
| samba35 | then | 16:37 |
| cluelessperson | hey guys, I'm trying to install something as another user, znc --makeconf however it's trying to write to my zachary user's home directory | 17:16 |
| cluelessperson | is sudo -u zncdev -s not enough to be another user? | 17:17 |
| cluelessperson | whoami says I'm zncdev | 17:18 |
| cluelessperson | [ !! ] Writing config [/home/zachary/.znc/configs/znc.conf]... [ Unable to open file ] | 17:20 |
| TJ- | cluelessperson: as you can see, sudo doesn't change $HOME | 17:33 |
| cluelessperson | TJ-, is there a way to do so? | 17:34 |
| drocsid | the kernel is being held back for a minor upgrade 3.13.0.24 vs 3.13.0.59. Anybody else have an issue with this in 14.04.02 | 17:35 |
| drocsid | ? | 17:35 |
| PryMar56 | boot hangs when systemd starts in Vivid-server: http://paste.ubuntu.net/11949526/ | 17:56 |
| PryMar56 | ^^ asked for help 2nd time | 17:57 |
| sarnold | PryMar56: no luck so far, eh? guess it's time to file a bug | 18:17 |
| PryMar56 | sarnold, I have other installs with system-219 and the same kernel version that are seamless when system starts (no delay) | 18:19 |
| PryMar56 | systemd starts | 18:19 |
| PryMar56 | but its debian 8 with experimental | 18:19 |
| mariano_ | I'm trying to learn mysql (SQL) and I'm completely new to it. I was hoping to set up a mysql server on virtualbox to play with it. Can anyone recommend a good guide on how to go about doing this? | 19:14 |
| sarnold | mariano_: tada :) https://help.ubuntu.com/14.04/serverguide/databases.html | 19:17 |
| mariano_ | thank you. :) | 19:17 |
| sarnold | mariano_: unless you need mysql for a specific reason I suggest looking at postgres instead, I like it more.. | 19:17 |
| mariano_ | I want to get into data management and analytics. I know stats, econometrics, ect, but I know nothing about data management. I'm just graduating so I was told that if I want to move up, I have to learn sql and hadoop. | 19:20 |
| mariano_ | My professor said sql is easier to grasp and that more businesses use it. | 19:20 |
| darius93 | do i need to do any specific changes to libvirt dhcp server within the network file to have it access the internet with public ips? The assigning of ips work, but when attempting to ping something like google.com, etc., there is no internet access. | 19:21 |
| darius93 | I have bridge working fine with static ips, but just wondering about dhcp because i do want to be able to have that option available in the future | 19:21 |
| TJ- | mariano_: postgres is much closer to the enterprise class DBMS than mysql ... it emerged from what became MS SQL server | 19:22 |
| mariano_ | Thank you TJ. I'll start reading postgreSQL and then dive into hadoop. | 19:23 |
| jrwren | really? I didn't know sybase was founded on ingres. | 19:25 |
| jrwren | TJ-: thanks for the tip, I found this and it should be an interesting read: http://archive.computerhistory.org/resources/access/text/2013/05/102702565-05-01-acc.pdf | 19:26 |
| TJ- | sorry, I was thinking at cross-purposes; I was referring to tpostgres and T/SQL - got buried in implementing some T/SQL functions in postgres recently, | 19:31 |
| teward | anyone know where I can report a problem with the help.landscape.canonical.com documentation? | 19:42 |
| jak2000 | hi all | 19:44 |
| sarnold | teward: many of the webpages have a "report a bug on this page" link in tiny text near the bottom | 19:45 |
| jrwren | is midonet an OVS alternative? | 19:53 |
| bekks | jrwren: Whats "midonet" and whats "OVS"? | 20:18 |
| jrwren | midonet is something new to me, so I cannot answer. OVS is Open vSwitch. | 20:25 |
| teward | sarnold: it wasn't rendering that :/ | 20:38 |
| teward | meh | 20:38 |
| === markthomas is now known as markthomas|away | ||
| sarnold | teward: did you find a place to report the bug? | 21:28 |
| abcs | Im setting up a mail server and when I send a mail using echo it bounces and looking at the log its being sent to local instead of smtp any thoughts? | 21:59 |
| === Stuxweb is now known as JaguarDown | ||
| JaguarDown | Hi all newbie here. Simple question. In order to administer my server's web pages via SFTP I've changed the permissions of /var/www directory to 775 recursively, changed owner and group to www-data, and added myself to the group www-data. (I read in a couple places this is the standard thing to do?) After a couple of kinks I am able to read/write/execute via SFTP... | 22:09 |
| JaguarDown | ...However I decided that maybe that "Every one else/public" only needs to "read" html so I changed permissions to 774 and suddenly at the SSH terminal I can't even CD into /var/www due to "permission denied" | 22:09 |
| JaguarDown | Even though my user account is in the sudo and www-data group | 22:10 |
| JaguarDown | groups* | 22:10 |
| JaguarDown | What gives? | 22:11 |
| tarpman | JaguarDown: execute permission is required to traverse into a directory, ie. access anything inside of it. read permission means listing the contents (but not accessing them) | 22:11 |
| tarpman | JaguarDown: not sure why that's hitting your user, though. did you exit your ssh session and log in again after adding your user to the group? if you run "groups" at the prompt does the output include www-data? | 22:13 |
| sarnold | JaguarDown: just for the record, I really dislike the data being owned by www-data, since that's the usual user account that the webserver uses when running | 22:13 |
| JaguarDown | yes, groups says I am in the www-data group | 22:13 |
| sarnold | JaguarDown: .. which means when the webserver is hacked, it has write access to all the content, which makes it insanely easy for hacks to become persistent | 22:14 |
| JaguarDown | Ah. I didn't really know what the standard acceptable convention was for ownership of it | 22:14 |
| JaguarDown | Should I just change ownership to my one and only sudo account? | 22:14 |
| JaguarDown | This is just a home server | 22:14 |
| JaguarDown | Although it is serving web pages to the internet | 22:15 |
| JaguarDown | I did not log out and back in again | 22:15 |
| teward | sarnold: nah, realized that the doc i was looking at was 'retired' | 22:15 |
| teward | sarnold: then realized that I can't get landscape-client to work with the custom CA that was set up | 22:16 |
| teward | sarnold: THEN realized the easier route is to just spend $13 for a cert | 22:16 |
| sarnold | JaguarDown: up to you, I'd do a different owner, but that's just my preference.. | 22:16 |
| sarnold | teward: is that it these days? wow | 22:16 |
| JaguarDown | Okay I hopped out and into the SSH terminal and it works now. | 22:16 |
| teward | sarnold: through gandi, with Ubuntu Membership + E Rates and such, pretty cheapish for a single domain cert (landscape.domain.tld lol) | 22:16 |
| JaguarDown | However I didn't understand what you just told me about the www-data user. I will probably change it to myself. | 22:16 |
| JaguarDown | Or something other than www-data | 22:17 |
| dasjoe | teward: you can still get free certs from StartSSL | 22:17 |
| sarnold | JaguarDown: for me, I'd be content to use my user account to own it; for shared-with-someone-else I'd prbably make a new 'www' account or something | 22:17 |
| dasjoe | Although revoking them will cost | 22:18 |
| JaguarDown | sarnold: Okay that makes sense. I read somewhere someone used a "webmasters" group. | 22:18 |
| sarnold | JaguarDown: that makes sense; it's long :) but makes sense | 22:19 |
| JaguarDown | Cool well turns out my main problem was logging out and in. Thanks. | 22:19 |
| teward | dasjoe: true on both cases, but the StartSSL CA certs are a little more ambiguousish | 22:19 |
| teward | :/ | 22:19 |
| dasjoe | teward: I'm waiting for let's encrypt to become available, then I'll have to evaluate what's the best way for me to proceed | 22:20 |
| teward | mmm | 22:21 |
| teward | well my issue is that I just need it for landscape-server / landscape-client. What landscape-client does NOT want to do is accept the custom CA certificate | 22:21 |
| === markthomas|away is now known as markthomas | ||
| JaguarDown | This is probably not the best location to ask this but what do people generally do when editing html files via SFTP to be served by apache2? Do they simply edit the files via SFTP in their favorite editor and save or do they do all editing on their local machine and then upload via SFTP when they're done? | 22:36 |
| sarnold | JaguarDown: rsync <3 :) | 22:37 |
| dasjoe | Slightly related: https://xkcd.com/378/ | 22:38 |
| sarnold | dasjoe: hehhe :) | 22:38 |
| JaguarDown | sarnold: cool! | 22:44 |
| JaguarDown | dasjoe: favorited :) | 22:45 |
| sarnold | JaguarDown: one note with rsync, it's quite picky about the last '/' in directory names. it'd be worth fiddling around with a few permutations of rsync commands on test data before you really start using it | 22:51 |
| sarnold | JaguarDown: e.g. rsync -avz source/ destination/ vs rsync -avz source destination vs rsync -avz source destination/ vs rsync -avz source/ destination -- once you've seen it a few times you'll be fine :) | 22:52 |
| JaguarDown | sarnold: Thanks! That sounds like a promising proposition, I will definitely be giving it a go. Sounds like it could greatly streamline things. | 22:54 |
| sarnold | yes :) | 22:54 |
| JaguarDown | While we are on the subject, as the default apache2 config stands, if I want to place an image on my page and store it on the webserver does that image have to be stored under the "/var/www/html" directory or can the website see it if it's under, say, /var/www/images | 22:56 |
| JaguarDown | Sorry I am currently pretty ignorant to all of the webserver and web pages stuff. | 22:57 |
| JaguarDown | I currently have an image in /var/www/html/images and it's working fine | 22:57 |
| sarnold | I'm sure it's doable, but I'm not sure what you'd need to do to make it work | 22:57 |
| JaguarDown | The thing is the way i have it it causes an index to be available and I would prefer not to do that. | 22:58 |
| JaguarDown | By index I mean you can visit the folder via the website address | 22:58 |
| sarnold | you can turn that off with some other directives.. | 22:59 |
| abcs | Im setting up a mail server using postfixand when i do echo "test from mail server to user@example.com" | mail -s "test" user2@example2.com the recipient is not getting the mail. im not getting any errors in var/log/mail.err and my mail.log is showing its going through postfix/pickup /postfix/cleanup postfix/qmgr postfix/local then bouncing because its not a user any idea why its not | 22:59 |
| abcs | going to postfix/smtp but going to postfix/local | 22:59 |
| sarnold | JaguarDown: http://httpd.apache.org/docs/2.4/mod/mod_autoindex.html for ubuntu 14.04 LTS and newer | 23:00 |
| JaguarDown | sarnold: thanks | 23:00 |
| sarnold | abcs: is your postfix configured to accept mail for example2.com? | 23:01 |
| abcs | sarnold: no I don't want postfix to accept that mail I want to send it to someone elses mail account | 23:02 |
| * JaguarDown is now away - Reason : | 23:03 | |
| abcs | Im trying to test if the mail server is set up correctly to send mail out to a relay host if theres a different way to test that i can do that | 23:05 |
| sarnold | abcs: i'd next try doing things by hand: host -t mx example2.com, nc <host1> smtp ... EHLO sarnold MAIL FROM: RCPT TO: .... | 23:06 |
| abcs | host: couldnt get address for 'nc': not found returned | 23:12 |
| sarnold | two options.. either your recipient has screwed up their dns records, or your dns setup is broken | 23:13 |
| cryptodan_laptop | http://mxtoolbox.com is a good site for testing mail servers outside your network | 23:15 |
| abcs | the dns is hosted at godaddy i wouldnt think that would be the case i can send a recieve email from windows desktop not routed through the mail server | 23:15 |
| sarnold | I thuoght you were trying to debug sending? | 23:15 |
| abcs | i am | 23:15 |
| abcs | from post fix which i am currenly setting up | 23:15 |
| abcs | at the moment the email is routed through outlook that goes directly to godaddy | 23:16 |
| abcs | I need a mail server to relay it first | 23:16 |
| sarnold | cryptodan_laptop: nice! | 23:16 |
| abcs | I can send email back and forth on localhost but when I try to send it somewhere where the destination is not local it bounces | 23:17 |
| cryptodan_laptop | to verify your dns has propagated check here https://www.whatsmydns.net/ | 23:18 |
| abcs | the domain is propageted, its been in use for 10 years | 23:20 |
| cryptodan_laptop | those two sites have helped me solve many issues with my own dns | 23:21 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!