| Pinkamena_D | I cant connect to vsftpd anymore. Trying just local network no firewall. SSH works fine. raw FTP I open ftp it asks for username and then password and then just hangs there. Only thing in the log on the server is a "client connected" message. | 01:42 |
|---|---|---|
| DirtyCajun | Pinkamena_D, why dont you use sshd and grow from insecure vsftpd ? | 01:42 |
| sarnold | Pinkamena_D: did it ever work? | 01:44 |
| Pinkamena_D | I use sftp in many places, but for reasons outside the scope of this question, I need a standard ftp connection available in this case. I don't think this is an overly obscure or unreasonable request. | 01:44 |
| Pinkamena_D | no, it is still 'Password:\n' | 01:45 |
| sarnold | Pinkamena_D: are you setting this up from scratch and it's never worked? | 01:45 |
| sarnold | Pinkamena_D: or are you trying to figureo ut why something that worked N days ago doesn't work today? | 01:46 |
| Pinkamena_D | no, it has worked in the past, but it is not used extremely actively so I only noticed today | 01:46 |
| Pinkamena_D | the latter case, yes | 01:46 |
| sarnold | do you need to toggle the active/passive case? | 01:46 |
| sarnold | do you have a firewall on the machine that you're testing from? | 01:46 |
| Pinkamena_D | no - both machines are ubuntu 14.04 (one server one desktop) | 01:47 |
| Pinkamena_D | I have never changed any settings related to active/passive. I have used both nautilus "connect to server" and filezilla for connections in the past - now both hang | 01:47 |
| sarnold | is there anything in the logs on the server? | 01:48 |
| Pinkamena_D | nothing useful in dmesg or /var/log/vsftpd.log - is there anywhere else to check? | 01:48 |
| sarnold | _maybe_ /var/log/auth.log? | 01:50 |
| Pinkamena_D | it seems to be only ssh-related entries | 01:51 |
| Pinkamena_D | ok well i have no idea what actually the problem is, but it works after I disable LISTEN_IPV6 | 01:59 |
| Pinkamena_D | so yeah I will just keep chugging with ipv4... | 01:59 |
| sarnold | well -that- is surprising | 02:02 |
| === kyle is now known as kyle__ | ||
| === RickyB98 is now known as Guest21509 | ||
| === nchambers is now known as voldemort | ||
| === amoralej|off is now known as amoralej | ||
| SipriusPT | hello guys | 09:07 |
| SipriusPT | i am trying to connect an outlook client to my unix mail server and i am unable to authenticate on it | 09:08 |
| SipriusPT | till now i was only able to connect mail app clients | 09:08 |
| SipriusPT | i am using postfix, dovecot, getmail, open directory and CRAM-MD5, Digest-MD5, GSSAPI | 09:09 |
| SipriusPT | when i try to login i receive this message at outlook | 09:09 |
| SipriusPT | Iniciating session in the reception server of mail (IMAP): Failure with general authentication. No one of those authentication methods are supported by the IMAP server (if exists) are supported by this computer. | 09:09 |
| SipriusPT | In dovecot: auth_mechanisms = digest-md5 cram-md5 gssapi apop. (I didnt knew that i had apop enable, i will disable it in the future). Through telnet to port 143 i have AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=GSSAPI. I am using Outlook 2013. I was using the same settings as i was through Mail app, login username and password, and the DNS name of this mail server through IMAP. | 09:09 |
| rbasak | teward: https://launchpad.net/bugs/1639814 | 09:40 |
| ubottu | Launchpad bug 1639814 in nginx (Ubuntu) "nginx package upgrade on ubuntu 14.04 rewrites ssl config" [Undecided,Incomplete] | 09:40 |
| RoyK | rbasak: ouch - not very nice | 10:19 |
| === RoyK^ is now known as Royk | ||
| === JanC is now known as Guest44518 | ||
| === JanC_ is now known as JanC | ||
| SipriusPT | hello guys | 11:24 |
| SipriusPT | i am trying to connect an outlook client to my unix mail server and i am unable to authenticate on it | 11:24 |
| SipriusPT | till now i was only able to connect mail app clients | 11:24 |
| SipriusPT | i am using postfix, dovecot, getmail, open directory and CRAM-MD5, Digest-MD5, GSSAPI | 11:25 |
| SipriusPT | when i try to login i receive this message at outlook | 11:25 |
| SipriusPT | Iniciating session in the reception server of mail (IMAP): Failure with general authentication. No one of those authentication methods are supported by the IMAP server (if exists) are supported by this computer. | 11:25 |
| SipriusPT | In dovecot: auth_mechanisms = digest-md5 cram-md5 gssapi apop. (I didnt knew that i had apop enable, i will disable it in the future). Through telnet to port 143 i have AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=GSSAPI. I am using Outlook 2013. I was using the same settings as i was through Mail app, login username and password, and the DNS name of this mail server through IMAP. | 11:25 |
| patdk-lap | you shouldn't use cram-md5 or digest-md5 | 11:39 |
| patdk-lap | dunno if outlook supports gssapi | 11:39 |
| === Royk is now known as RoyK | ||
| SipriusPT | patdk-lap: i was avoiding textplain | 12:19 |
| SipriusPT | outlook is not compatible with those types of encryptions?! | 12:20 |
| patdk-lap | heh? those are not encryption | 12:23 |
| patdk-lap | they are a type of hash | 12:23 |
| patdk-lap | and why avoid plain text? | 12:23 |
| patdk-lap | md5 is easily crackable, so those are not secure | 12:23 |
| patdk-lap | your connection should be tls encrypted | 12:23 |
| patdk-lap | so the password type doesn't matter | 12:24 |
| SipriusPT | i see | 12:24 |
| patdk-lap | if you use plain text passwords, you get to use strong password hashing in your user database, protecting people | 12:24 |
| SipriusPT | i will do that | 12:24 |
| patdk-lap | instead of using plain text passwords in your database | 12:24 |
| patdk-lap | now, gssapi is good | 12:25 |
| SipriusPT | i was not able to set it up | 12:25 |
| SipriusPT | =/ | 12:25 |
| patdk-lap | the issue there is much the same, not much support, and requires plaintext passwords or some compromise normally | 12:25 |
| SipriusPT | i had a problem renewing tickets | 12:25 |
| SipriusPT | thanks patdk-lap i already check at my config file in postfix and it seems that tls is set by default | 12:30 |
| SipriusPT | (this is a fresh postfix installation) | 12:30 |
| SipriusPT | Hello guys | 14:38 |
| SipriusPT | 0 down vote favorite I notice that i am unable to connect Outlook (2013) users with my Unix mail server. I have tried from a remote computer and localhost at my local network with Mail App and its working fine except with Outlook where i cannot find a way to connect it. I have also a web mail service at my mail server and this working fine too. | 14:38 |
| SipriusPT | I am getting this error when i try to connect through outlook: | 14:38 |
| SipriusPT | Iniciating session in the reception server of mail (IMAP): Failure with general authentication. No one of those authentication methods are supported by the IMAP server (if exists) are supported by this computer. | 14:38 |
| SipriusPT | It seems that i am having a problem with user authentication with Outlook and i dont know well how to solve it, because all my users are set to just use Open Directory. | 14:39 |
| SipriusPT | Is there a way to set up Outlook to login in an user password type of Open Directory? | 14:39 |
| SipriusPT | Thanks in advance! | 14:40 |
| === amoralej is now known as amoralej|lunch | ||
| caribou | I'm about to upload a newer qemu package for an SRU on Trusty, anyone has anything inflight ? | 14:53 |
| caribou | mdeslaur: ^^^ | 14:53 |
| cpaelzer | caribou: I cleared out trusty queue 2 weeks ago - nowthing newer from me | 14:53 |
| caribou | cpaelzer: good, thanks. There was a recent security release so I guess nothing on this side either | 14:54 |
| cpaelzer | caribou: yeah I saw the pile of CVEs | 14:54 |
| mdeslaur | caribou: nothing in flight from me | 14:58 |
| caribou | mdeslaur: ok, thansk | 14:58 |
| mdeslaur | caribou: thanks for asking | 14:58 |
| cpaelzer | I often do that as well, but sometimes wonder who to ask - I wonder if there could/should be a defined way to "add what is in flight for a package" somewhere on LP or so | 14:59 |
| cpaelzer | I'm pretty sure that was discussed somewhen in the last decade already | 14:59 |
| caribou | cpaelzer: it used to be easier when there were bzr branches with the -proposed suffix | 15:01 |
| cpaelzer | caribou: bzr branches like for everything? | 15:02 |
| caribou | cpaelzer: a long time ago, yes and still it was not systematic | 15:05 |
| === amoralej|lunch is now known as amoralej | ||
| jgrimm | rharper, smoser, nacc, rbasak, caribou, cpaelzer, beisner : server irc meeting | 16:01 |
| caribou | \o | 16:02 |
| === JanC_ is now known as JanC | ||
| jge | hey all good morning, I'm working on an ansible playbook for ubuntu 16.04 LTS but I noticed the network interfaces are labeled different now | 17:13 |
| jge | I have enp0s3 instead of eth0 | 17:13 |
| jge | it's a VM running in virtualbox, is that the interface name for interfaces now or does it change according to the hypervisor used? | 17:14 |
| jge | trying to keep my playbook consistent across all | 17:14 |
| jge | I have that interface name hardcoded in the playbook so if it changes it'll break it | 17:15 |
| OerHeks | jge, this is the new predictable interface naming, but you can reverse this, see http://serverfault.com/questions/741210/disabling-predictable-network-interface-names-in-xubuntu-15-10 and more info ><> https://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/ | 17:20 |
| OerHeks | GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0" and update-grub | 17:20 |
| === degorenko is now known as _degorenko|off | ||
| jge | OerHeks: I see, would the first interface always be enp0s3? | 17:26 |
| jge | I guess not since it now uses a combination of firmware/topology and location | 17:27 |
| nacc | jge: 'predictable' (aiui) in that you can predict it ahead of time in case you know your hardware; not 'predictable' as in the first interface found will always have the sam ename | 17:28 |
| nacc | jge: the 'issue' was the 'eth*' naming is a kernel namespace; so tooling relying on it could break at anytime without warning | 17:29 |
| OerHeks | I hope so, after reinstall/restore image it should pick up the same number | 17:29 |
| OerHeks | this prediction is a breeze for openstack, iirc | 17:30 |
| jge | nacc: so most of our servers are VMs with a single interface | 17:37 |
| jge | so first interface will always end up being enp0s3? | 17:37 |
| SipriusPT | hello guys | 17:38 |
| SipriusPT | anyone here knows a good tutorial or doc on how to set pgina to able outlook in windows to connect to a open directory? | 17:39 |
| SipriusPT | or if anyone here have already made this here | 17:39 |
| === amoralej is now known as amoralej|off | ||
| cncr04s | I'm having an issue with the network/interfaces config | 18:54 |
| cncr04s | setting up iface eth0 inet6 static | 18:54 |
| cncr04s | address, netmask, and gateway | 18:54 |
| cncr04s | but its not there in ifconfig after boot | 18:54 |
| cncr04s | http://pastebin.com/LtLFuuWY | 18:58 |
| sarnold | cncr04s: are you sure you're allowed to have two stanzas for one NIC like that? | 19:01 |
| sypher | sarnold: Yes. | 19:02 |
| sypher | cncr04s: However, you might try modifying how you specify the prefix length. Rather than a separate "netmask" entry, simply append "/64" to each address. | 19:02 |
| sypher | cncr04s: Example, https://paste.ubuntu.com/23481889 | 19:05 |
| sypher | cncr04s: There may be some additional configuration required to add more addresses, come to think of it. I'll work up an expanded example. | 19:11 |
| cncr04s | adding /64 didnt seem to work | 19:13 |
| sypher | cncr04s: Yeah, I thought not as soon as I said it. | 19:14 |
| sypher | cncr04s: https://paste.ubuntu.com/23481936/ | 19:14 |
| sypher | cncr04s: That method is known to work. | 19:15 |
| sypher | cncr04s: What version of Ubuntu are you running? | 19:15 |
| cncr04s | 14.04 | 19:15 |
| sypher | cncr04s: Yeah, that last example is a known-good method. | 19:16 |
| sypher | cncr04s: Also note that ifconfig is long deprecated, and you should learn how to use the iproute2 tools, i.e. the "ip" command. | 19:16 |
| cncr04s | oh, i use the ifconfig for the display, not any actual commands | 19:17 |
| cncr04s | editing config now | 19:18 |
| sypher | cncr04s: https://paste.ubuntu.com/23481957/ | 19:19 |
| sypher | cncr04s: I took your example and converted it. | 19:19 |
| cncr04s | k, seems to work now, ip's are there when I reboot | 19:23 |
| cncr04s | thanks | 19:24 |
| tex | I have an Ubuntu NAT router. Works fine for everything except for UDP multicast. UDP packets make it to the router, but don't leave. Am I missing something? | 21:37 |
| station1 | i have a complicated server setup in a VM cloned it to a HDD Ubuntu16.04 server starts perfectly only ethernet isent configured RTL8111GR i presume ——firmware-realtek — — is the package. is there a comand to reconfigure/reinstall it without internet? | 22:18 |
| genii | !info firmware-realtek | 22:31 |
| ubottu | Package firmware-realtek does not exist in yakkety | 22:31 |
| genii | Hm | 22:31 |
| genii | !info firmware-realtek xenial | 22:31 |
| ubottu | Package firmware-realtek does not exist in xenial | 22:31 |
| station1 | if i separately install a ubuntu session how can i check and recreate the configuration. whan i install from usbstick it recognises it without intervention RTL8111GR | 22:40 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!