[00:00] "formerly known as Likewise Open" [00:01] hah, the download page doesn't load for me with noscript and privacybadger .. not sure which one is to blame, but it sure looks like it needs a contact form filled out first. that's not a good sign. [00:05] Doesnt exactly sound like something I want to use :) [00:05] the first page sounded good then the second page took it all away again :) hehe [00:10] here it is easier download: http://download1.beyondtrust.com/Technical-Support/Downloads/PowerBroker-Identity-Services-Open-Edition/?Pass=True [00:18] heh, windows people do things differently; there's a thosand links to binary downloads but not a single singature to be found anywhere; and they do appear to have a source link, but they put the non-hyperlinked-text in grey on grey at the very bottom of the page. [00:29] sarnold: you mean we're not supposed to arbitrarily click on a program without checking it out first? :) [00:29] samy1028: honestly i find the _executing_ of programs so boring -- all the real fun is in reading the source :) [00:34] It's only fun and games until some non-technical appointed domain admin installs a crypto-locker on the network. :) [00:34] but, yes, reading source can be fun. Though sometimes you find new things for thedailywtf and such. [00:35] .. and then you have fun new stories about moving all your patients to another hospital while you clean up the mess :) [00:35] hehe [01:26] what's my best option, besides editing the hosts file, to make a domain name refer to a LAN IP instead of the public IP? [01:30] you could investigate using dns split horizon, I think it's supposed to handle this [01:30] or have two dns servers, one outisde the network for everyone else and one inside the network for local queries [01:30] or add the external IP directly to the machine and add corresponding routes on all the machines that want to query it (that's more of a smartass solution than a good solution, but it's a solution...) [01:37] first or second one seem fine, don't know much about dns though, need to read documentations [01:37] thanks [08:50] pmatulis: hey, just fyi, lxd docs somewhat taking shape at https://code.launchpad.net/~serge-hallyn/+git/lxdserverguide . I'll flesh out the rest tomorow (barring serious bugs elsewhere), [08:50] pmatulis: am out the rest of the week, will then convert to xml (assuming that's what we still want at ths point, which i think is a safe bet) [09:12] Good morning. [12:21] hallyn: looks great [12:30] hmm, there has to be something wrong with apparmor on 16.04 :( [12:31] wrong profile is applied, and odd thing blocked that is allowed [12:33] tyhicks: when you come online, can you followup with patdk-wk? [12:34] it's either 16.04, or lxc, I don't get it :( been looking at it for days [12:34] patdk-wk: oh, days? tyhicks: nm [12:34] well, just myself [12:34] I thought it was just *me* [12:35] but I have pretty much ruled out me doing something stupid [12:35] patdk-wk: yesterday there was a new kernel with a big apparmor change [12:35] I am not running that yet [12:35] guess I should test it? [12:35] patdk-wk: so I was worried that was it, but if you have the old kernel, then it of course isn't :) [12:35] patdk-wk: wouldn't hurt :) [12:35] 4.4.0-13-generic #29-Ubuntu SMP Fri Mar 11 19:31:18 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux [12:35] tyhicks: I thought patdk-wk saw something in the new kernel, but he is running the old kernel [12:36] patdk-wk: note, there are a lot of fixes in that kernel, so it might actually have fixed it. I don't have the details at hand [12:36] no problem, I don't mind testing :) [12:36] I just hate digging myself a hole I can't find a way out [12:37] a profile for a binary, that doesn't exist on that system, gets applied, somehow :) [12:38] but since it's almost identical to the profile that should be applied, it doesn't cause any real harm, but well, that is just my usecase, and probably not a good thing [14:09] jdstrand, I think the issue has gone away [14:09] I'll keep watching it though [14:17] :( [14:18] qla24xx driver is causing panics on boot on the newer kernel :( [14:18] qla2xxx that is [14:18] 4.4.0-15 [14:21] http://maneshi.com/gallery/v/Users2/sysadm/Screenshot+from+2016-03-22+10_20_21.png.html?g2_imageViewsIndex=1 [14:25] yep, blacklist=qla2xxx got it booted almost :( [15:05] hey there I am pretty sure this might be the best place to askbut I have had Fail2ban running on a Ubuntu server working very good for 5-6months straight and today i found out that either it is not bannig as it should or something else is up becuase I am not getting the emials that I should from it, acording to the mail logs they are beeing sent but not received. I am using GMAIL but I haven't had any issues at all for 5-6 months. [15:09] LaserAllan: so look at the bounce logs [15:09] try using a trusted relay [15:09] look at the iptables rules, are the rules being added [15:09] work it through [15:09] I'll have a look and return here. [15:11] heh, the mail log files will tell you exactly what happened [15:12] you'll probably find you're getting bounces from google because you're sending from a non-trusted/blacklisted IP [15:17] But why had it worked for like 6 months and suddenly stopped [15:17] I'll get back once I've looked ;) [15:22] blacklisted ? [15:22] relay host dead ? [15:22] relay host black listed ? [15:22] change in googles policy [15:50] server team still meeting today? [15:50] I believe so, in 10 min [15:50] cool [15:50] matsubara: i was going to ping you too to make sure you were around, given the QA item i brought up yesterday heh [15:51] teward, I just confirmed the bug we spoke about yesterday [15:51] matsubara: cool, so it's definitely an issue then? [15:51] teward, and it seems someone also reported a similar issue in the desktop [15:51] ah, so it's a BIG issue, then [15:51] teward, I never get a keyboard layout screen, no matter what I choose [15:56] matsubara: is there a bug for the desktop observation as well/ [15:56] out of curiosity [15:57] teward, OP says it's a similar issue https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/1549529 but not exactly the same [15:57] Launchpad bug 1549529 in ubiquity (Ubuntu) "The keyboard is still installed as US-English even if another language is selected during the installation" [Undecided,Confirmed] [15:58] interesting. thanks! [15:58] i'll test Lubuntu then and see if I can replicate there, but it sounds like it's global [16:01] IRC meeting happening now [16:10] Hey guys. I have seem to deleted my gpg encrypted file with my passwords for my backup server. Is there any way I can get root access now and change all the passes? [16:10] Only thing I have left are the ssh keys to ssh into the machine and the gpg keys to decrypted the backups. [16:10] I guess im dead in the water, right? [16:12] Oh, recovery mode will fix it so it seems. [16:12] Carry on. [16:35] ikonia: That might be the case but what makes this even mroe confusing is that my friend who is using the same service doesn't have the problem I am having [16:35] ikonia: I don't have a huge amount of experience with Ubuntu Server yet but I am slowly getting there. [16:45] The logs doesn't seem to show more than that it is sending emails [16:45] and it also seems to empty the qeue but I am not sure if there is anything specific i am going to look for [16:48] jgrimm: ping [16:49] teward, hi there [16:49] jgrimm: grab a copy of your irc scrollback if possible, #ubuntu-irc was able to remove the meeting state in #ubuntu-meeting, but the fear is the meeting logs were torpedoed [16:49] for the server team meeting [16:50] we may wish to include that somewhere for the meeting logs/notes [16:50] im' going to pull a copy myself too [16:50] teward, indeed [16:50] i'm hoping there is an auto #endmeeting that kicks in [16:51] jgrimm: i don't think there is, but I know that I poked and asked if they could force-end because the chair went away [16:51] teward, I updated the bug 1559507 with what I just found. Please take a look and see if it makes sense [16:51] bug 1559507 in debian-installer (Ubuntu) "Keyboard selection is missed" [High,Confirmed] https://launchpad.net/bugs/1559507 [16:51] there was such a force-command, jgrimm, but the fear is we lost the logs, so for minutes, etc. we should probably back up our own copies and make it available [16:51] matsubara: looking [16:51] I need to find someone that actually knows that stuff to confirm that hypothesis [16:52] teward, saved. thanks [16:53] jgrimm: you're welcome [16:53] matsubara: indeed, I'm not sure who to prod on that though, maybe the desktop team will have further insights? GIven that the issue is happening everywhere, I wonder if it's the same missing mechanisms... [16:53] matsubara: odd though that this only very recently happened, because prior to the first observation by phillw it was apparently fine [16:54] though I don't regularly test [16:54] teward, I just asked on -devel [16:54] ok [16:54] * teward tracks there [16:54] teward, yeah, maybe it was there for some time but it wasn't noticed. [16:54] I'd say it's easy to miss if you always install with the regular US keyboard and don't care about setting up a different layout [16:55] matsubara: possibly. I know that phill pings whenever any of the Server stuff needs attention, I think it's his way of 'triaging' things in such a way that it gets additional eyes before it's filed as an issue. [16:55] and yeah, since I use regular US keyboard it's usually never an issue for me === kklimonda1 is now known as kklimonda === kklimonda is now known as Guest64305 === Guest64305 is now known as kklimonda [18:03] anybody here use yum? [18:04] why would anyone use yum in ubuntu? :) [18:04] !yum [18:04] Uh, don't you mean !apt ? [18:05] !botsnack [18:05] Yum! Err, I mean, APT! [18:05] lol === King is now known as eir [18:05] jjrabbit543: so why do you need yum? === eir is now known as Guest68205 === Guest68205 is now known as King [18:06] cause it's in the repos and was wondering if it's worth using? [18:06] i guess i should stick with the package manger that comes with the OS though right? [18:06] I'm sure you can install it, but it isn't going to be useful. [18:06] Pici: would it only show me packages for other distros? [18:07] because that wouldn't be useful at all [18:07] i was just interested in the usability of it [18:08] jjrabbit543: yum can only be used to install rpms, afaik. So I have no idea what it'd be used, except maybe for hosting mock or smilar on ubuntu [18:08] jjrabbit543: rpm is also in the repos, and while you can install packages with it, I wouldn't recommend it. [18:10] Pici: ok good point [18:10] just curious, thanks [18:10] i'll stick with aptitude [18:10] good ;) [18:34] anybody know how i can get to the Search menu at the top of aptitude? [18:34] jjrabbit543: ctrl-T [18:34] jjrabbit543: it says "C-T: Menu" right there in the top left [18:36] tarpman: so it does. Thanks! [18:37] wow you can lose on the first move in the minesweeper game [18:38] ubuntu minesweeper is merciless === King is now known as \me [18:39] the only winning move is not to play the game [18:46] anybody know why midnight commander isn't listed in aptitude? [18:46] !info mc [18:46] mc (source: mc): Midnight Commander - a powerful file manager. In component universe, is optional. Version 3:4.8.13-3 (wily), package size 501 kB, installed size 1586 kB [18:46] dunno, my tools show that it should be in everything frmo precise to xenial [18:47] it is in universe though, if you've only got main enabled, it won't show up [18:47] jjrabbit543: and if you didn't know how to find it via the name, you could do `apt-cache search ' midnight commander'` === alexisb is now known as alexisb-afk [18:48] what is component universe? [18:48] is that a category in aptitude? [18:49] jjrabbit543: https://help.ubuntu.com/community/Repositories [18:49] jjrabbit543: the archive is split into main and universe; packages in universe are supported only via community members, packages in main are supported by canonical and the community [18:58] does anybody here user file managers or are they a waste of time [18:58] does ubuntu come with one? [18:59] if you mean "explorer.exe workalike" then yeah ubuntu has a bunch [19:00] mc of course is a clone of nc which used to be popular in windows land 25 years ago or something [19:00] not explorer.exe workalike [19:00] midnight commander workalike [19:00] for ubuntu server [19:07] !info mc [19:07] mc (source: mc): Midnight Commander - a powerful file manager. In component universe, is optional. Version 3:4.8.13-3 (wily), package size 501 kB, installed size 1586 kB [19:08] jjrabbit543: why would you need a mc workalike if you have mc? [19:08] nacc: because it's in the universe component repository and which apparently is not a default package list [19:08] i prefer to use native tools that "come with" the OS [19:09] jjrabbit543: did you read the above link about the repositories? [19:09] nacc: yes, it says main and restricted are the defaults [19:09] jjrabbit543: "comes with" and "defaults" are different things, IMO [19:10] jjrabbit543: universe is part of Ubuntu, too [19:10] jjrabbit543: it's just a matter of who supports what [19:10] then how come i can't find packages that are in the universe component [19:11] component universe [19:11] * [19:11] jjrabbit543: you have to enable the component, in /etc/apt/sources.list [19:11] nacc: I ran this command instead: "sudo add-apt-repository "deb http://archive.ubuntu.com/ubuntu $(lsb_release -sc) universe"" [19:12] found it here http://askubuntu.com/questions/148638/how-do-i-enable-the-universe-repository [19:12] and still isn't working. did I mess something up by doing that [19:12] ? [19:12] apt-get update && apt-cache show mc [19:13] also, i think you can just run `add-apt-repository universe` ? [19:21] so, what instructions do I use to properly file a bug report on 4.4.0-15 kernel module (qla2xxx) panic on boot? :) [19:22] it was working upto 4.3.0-5 that I know, I didn't test any kernels inbetween [19:23] TJ-: try redirecting stdin on the -first- ncat from /dev/null or similar: ncat -m 1 -6kl 10006 < /dev/null | ncat -kl 10007 [19:24] sarnold: it looks like #1 is stopped because #2 is stopped. I'm suspecting its a buffer-full issue because there are no clients connected to empty the pipe [19:24] sarnold: I'm running testing right now to try to catch it, but it can take up to 12 hours! [19:24] TJ-: hmmm. I'd expect its write()s to block in that case.. [19:25] patdk-wk: https://bugs.launchpad.net/ubuntu/+source/linux/+filebug :) and be prepared for the kernel team demotivational bot to ask a pile of questions.. [19:25] I know, and panic on boot during initrd before filesystems are mounted, is kindof annoying as hell to report :) [19:26] sarnold: well, on the broadcaster node that sends to the proxy it can send almost all the kernel's "make bindeb-pkg" build messages before stalling [19:27] TJ-: heh can you feed it with /dev/zero to test something faster? :) [19:28] turns out running apt-get is 100 times easier than dicking around with aptitude [19:28] sarnold: I was going to pipe it via 'pv' to see how large the buffer is [19:28] jjrabbit543: indeed, I never understood the appeal of aptitutude [19:29] TJ-: you've got a few buffers in play simultaneously which is going to be confusing as sin -- the tcp recv buffer on the first one, the unix pipe buffer between the two, and the tcp send buffer on the second one [19:29] sarnold: indeed ... good, ain't it? :d [19:30] aptitude is annoying :) [19:42] sarnold: 'ncat ... | pv ncat ...' tells me the buffer is 43.2Kb [19:46] If I'm trying to learn server stuff, and I'm going through a tutorial, shouldn't this command work? : cat /etc/hosts /tmp/appendit [19:47] Shouldn't that take the contents of hosts and put a copy in appendit? [19:47] designbybeck: you're writing both files to stdout [19:47] no [19:47] HMmm TJ- [19:47] designbybeck: you're missing redirection (>) operator [19:47] designbybeck: also, why would you use cat, when you have cp ? [19:47] designbybeck: cat /etc/hosts >>/tmp/appendit [19:47] well depends [19:47] he might be missing >> [19:47] designbybeck: use >> if you want to 'append' to an existing file [19:47] patdk-wk: true, depends [19:47] so just >> would do it TJ- [19:48] or > to basically copy/overwrite [19:48] ah ok, I've never ran across that, but I'll try that out [19:48] designbybeck: yes, see "man bash" REDIRECTION section for the details [19:48] thank you TJ- and nacc [19:50] wow TJ- that's a heck of a man page! [19:51] but yes: cat this >> that worked [19:56] anybody know the shortcut to close a linux screen window? [19:57] i accidently created a bunch and need to close them [19:57] designbybeck: if you ever use sudo it won't though, because the >> will bind to the *output* of sudo (which is in the current user's context) not the command being called. In that case you either do "sudo sh -c "cat /etc/hosts >> /tmp/appendit" OR "cat /etc/hosts | sudo tee -a /tmp/appendit" (if you can stand seeing the output. Another alternative is "cat /etc/hosts | sudo dd of=/tmp/appendit [19:57] oflags=append" [19:57] jjrabbit543: ^D on a line all by itself will close bash [19:57] jjrabbit543: no idea if your terminal emulator you're using will then close or not.. but most do. [19:58] jjrabbit543: ^D tells teh terminal emulator to send the end-of-file signal, so it's also used to end HERE documents and similar things [20:00] im confused [20:00] sarnold: There may also be a bug wherein an overridden value is honored but the default is printed to screen anyway. I'm seeing messages talking about a 1:30 timeout that sure looks like it completes after the 15 seconds I specify. [20:00] you can have several windows open inside a single screen session and on top of that you can have multiple screen sessions running as well? [20:00] ChibaPet: ugh [20:00] jjrabbit543: Sure, why not? You can nest screens readily. [20:01] jjrabbit543: sure, nest as deep as you want.. [20:01] dang [20:01] #screenception [20:01] jjrabbit543: multiple vim tabs in tmux in screen in tabbed terminals in multi-desktop X sessions.. [20:01] .. managing multiple jobs in a job-control shell.. [20:01] jjrabbit543: Just remember, control-a a command to send a command to a screen one level deep. Control-a a a command to go two levels deep. Etc. [20:02] Also, remember to just open multiple windows if that's all you need. [20:02] is there a shortcut to kill one of the windows inside a screen session? [20:02] that's what i am trying to do [20:02] control-a \ [20:02] sorry, that's all windows [20:02] control-a k [20:02] heh we'll see if he saw the "sorry" in time.. :) [20:02] ChibaPet: ty!! [20:02] Mm, unfortunate timing on my part. [20:03] jjrabbit543: screen is amazing stuff. [20:03] sarnold: i did ;) [20:03] pfew :) [20:03] hehe [20:03] sarnold: It prompts by default, so he'd have seen the fishy query before nuking everything. [20:03] ChibaPet: ah, nice ;) I've never killed windows in screen directly before, I've always just terminated the shells.. [20:03] hm lets see [20:03] ya === alexisb-afk is now known as alexisb [21:14] coreycb barbican is ready for review: lp:~ddellav/ubuntu/+source/barbican [21:14] ddellav, ok thanks, I might need to look in the morning [21:15] coreycb ack [21:17] Hey guys [21:18] Anyone in here knows how SPF works? [21:18] LaserAllan i know a bit, yea [21:18] LaserAllan: what is your actual question? [21:18] higher spf = more time the sunscreen lasts [21:18] :P [21:19] LaserAllan: https://en.wikipedia.org/wiki/Sender_Policy_Framework [21:19] Or Shortest Path First. [21:19] Sling: ddellav I currently have issues with my mailing service, I have configured fail2ban and Xymon to send emails when needed but for some reason they are sent according to the logs but they aren't reaching my gmail [21:20] Could it be that it has been blacklisted? becuase the "domain" that is used to send the emials doesnt really exists [21:20] "exist [21:20] I am just wondering if I might have to setup SPF if i want Google to not blacklist my IP? [21:20] LaserAllan: Check your mail logs to see if they're being delivered. Check your gmail spam to see if they're being misclassified. [21:20] LaserAllan: hard to say, can you deliver mails to a domain where you can better see what is actually happening? [21:20] LaserAllan: Google can require complete correctness. Make sure your PTRs match, etc. [21:21] i have seen gmail accepting mails but still not pushing them to user mailboxes [21:21] LaserAllan ok if its being sent from a non-existant domain it will likely get blocked. beyond spf google wants to see a legit domain with properly setup reverse dns. [21:21] and they aren't very open in what checks they do exactly [21:21] if you find a mail in your spam box you can view the original to see the spf headers to see if it passed, failed, or softfaied [21:21] *failed [21:21] I don't think he has spf at the moment [21:22] Sling: Currently No i dont [21:22] I will m,ake a apstebin of the logs and show you [21:22] if you dont have a proper domain name setup with reverse dns it's likely guaranteed to get blocked from gmail [21:22] regardless of spf [21:22] ddellav: Nah i dont have that currently [21:23] but it has worked flawlessly for nearly a year [21:23] i would probably setup fail2ban and all those to use your gmail smtp settings to send mail to yourself [21:23] thats a bit weird, sounds like blacklisted [21:23] but hard to tell for sure [21:25] ddellav: I am going to take a piss and get a beer and I'll get to this, I haven't used Linux for more than maybe 7-8 months so I am fairly new to it so excuse me if my knowledge isn't as vast as I'd wanted iot to be [21:25] But yeah sending mails to myself could work but if it's possible to configure a reverse DNS since I do have a domain that wouldn't be bad :) [21:25] I guess it's easier to filter the emails than [21:26] just be sure to google first :) [21:27] ddellav: I have very little experience when it comes to setup a reverse DNS but does that I mean I'll have to setup SFB or is this something else? [21:27] im not sure what SFB is but reverse dns is something setup by the person that owns the ip address associated with your server [21:27] your "ISP" [21:28] so if someone does a reverse lookup on your ip, they'll see your domain [21:28] i.e. dig -x ip.add.ress [21:28] Hmm, well I have my domain at a hosting ocmpany here in scandinavia but the IP of the server which is gopig to send the emials is in the US [21:29] not sure if that makes any difference but [21:29] most hosting companies have control panels where you can set PTR records yourself, otherwise you'll have to contact them [21:29] assuming you have a dedicated ip and not shared hosting [21:29] LaserAllan: https://en.wikipedia.org/wiki/List_of_DNS_record_types#PTR [21:30] ChibaPet: Thanks :) [21:30] I have allot to learn but what better to do it with my owns tuff, not that much can break though:P [21:30] it's always great to experiment and learn new stuff. I'm excited for you. [21:31] I feel ashamed that it took me so amny eyars to really start using Linux [21:31] for servers I think its extremely powerful, secure and lightweight [21:31] every day is someones first day, nothing to be ashamed about [21:32] ddellav: Some people jsut seem to be unfriendly/arrogant towards people who doesn't know as much as them :), but I am amazed what Linux can do, I am still learning the CLI step by step though. [21:33] But but, I am not gonna clutter the chat with offtopic stuff, I'llg og et a beer and get back to the reverse DNS, hopefully I can sovle it together with a little help :) [21:33] im sure you'll get it figured out. good luck :) [22:40] hallyn: "zfs_poo_name" https://git.launchpad.net/~serge-hallyn/+git/lxdserverguide/tree/lxd.md#n201 [22:56] lol [22:56] thx