[01:42] I cant connect to vsftpd anymore. Trying just local network no firewall. SSH works fine. raw FTP I open ftp it asks for username and then password and then just hangs there. Only thing in the log on the server is a "client connected" message. [01:42] Pinkamena_D, why dont you use sshd and grow from insecure vsftpd ? [01:44] Pinkamena_D: did it ever work? [01:44] I use sftp in many places, but for reasons outside the scope of this question, I need a standard ftp connection available in this case. I don't think this is an overly obscure or unreasonable request. [01:45] no, it is still 'Password:\n' [01:45] Pinkamena_D: are you setting this up from scratch and it's never worked? [01:46] Pinkamena_D: or are you trying to figureo ut why something that worked N days ago doesn't work today? [01:46] no, it has worked in the past, but it is not used extremely actively so I only noticed today [01:46] the latter case, yes [01:46] do you need to toggle the active/passive case? [01:46] do you have a firewall on the machine that you're testing from? [01:47] no - both machines are ubuntu 14.04 (one server one desktop) [01:47] I have never changed any settings related to active/passive. I have used both nautilus "connect to server" and filezilla for connections in the past - now both hang [01:48] is there anything in the logs on the server? [01:48] nothing useful in dmesg or /var/log/vsftpd.log - is there anywhere else to check? [01:50] _maybe_ /var/log/auth.log? [01:51] it seems to be only ssh-related entries [01:59] ok well i have no idea what actually the problem is, but it works after I disable LISTEN_IPV6 [01:59] so yeah I will just keep chugging with ipv4... [02:02] well -that- is surprising === kyle is now known as kyle__ === RickyB98 is now known as Guest21509 === nchambers is now known as voldemort === amoralej|off is now known as amoralej [09:07] hello guys [09:08] i am trying to connect an outlook client to my unix mail server and i am unable to authenticate on it [09:08] till now i was only able to connect mail app clients [09:09] i am using postfix, dovecot, getmail, open directory and CRAM-MD5, Digest-MD5, GSSAPI [09:09] when i try to login i receive this message at outlook [09:09] Iniciating session in the reception server of mail (IMAP): Failure with general authentication. No one of those authentication methods are supported by the IMAP server (if exists) are supported by this computer. [09:09] In dovecot: auth_mechanisms = digest-md5 cram-md5 gssapi apop. (I didnt knew that i had apop enable, i will disable it in the future). Through telnet to port 143 i have AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=GSSAPI. I am using Outlook 2013. I was using the same settings as i was through Mail app, login username and password, and the DNS name of this mail server through IMAP. [09:40] teward: https://launchpad.net/bugs/1639814 [09:40] Launchpad bug 1639814 in nginx (Ubuntu) "nginx package upgrade on ubuntu 14.04 rewrites ssl config" [Undecided,Incomplete] [10:19] rbasak: ouch - not very nice === RoyK^ is now known as Royk === JanC is now known as Guest44518 === JanC_ is now known as JanC [11:24] hello guys [11:24] i am trying to connect an outlook client to my unix mail server and i am unable to authenticate on it [11:24] till now i was only able to connect mail app clients [11:25] i am using postfix, dovecot, getmail, open directory and CRAM-MD5, Digest-MD5, GSSAPI [11:25] when i try to login i receive this message at outlook [11:25] Iniciating session in the reception server of mail (IMAP): Failure with general authentication. No one of those authentication methods are supported by the IMAP server (if exists) are supported by this computer. [11:25] In dovecot: auth_mechanisms = digest-md5 cram-md5 gssapi apop. (I didnt knew that i had apop enable, i will disable it in the future). Through telnet to port 143 i have AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=GSSAPI. I am using Outlook 2013. I was using the same settings as i was through Mail app, login username and password, and the DNS name of this mail server through IMAP. [11:39] you shouldn't use cram-md5 or digest-md5 [11:39] dunno if outlook supports gssapi === Royk is now known as RoyK [12:19] patdk-lap: i was avoiding textplain [12:20] outlook is not compatible with those types of encryptions?! [12:23] heh? those are not encryption [12:23] they are a type of hash [12:23] and why avoid plain text? [12:23] md5 is easily crackable, so those are not secure [12:23] your connection should be tls encrypted [12:24] so the password type doesn't matter [12:24] i see [12:24] if you use plain text passwords, you get to use strong password hashing in your user database, protecting people [12:24] i will do that [12:24] instead of using plain text passwords in your database [12:25] now, gssapi is good [12:25] i was not able to set it up [12:25] =/ [12:25] the issue there is much the same, not much support, and requires plaintext passwords or some compromise normally [12:25] i had a problem renewing tickets [12:30] thanks patdk-lap i already check at my config file in postfix and it seems that tls is set by default [12:30] (this is a fresh postfix installation) [14:38] Hello guys [14:38] 0 down vote favorite I notice that i am unable to connect Outlook (2013) users with my Unix mail server. I have tried from a remote computer and localhost at my local network with Mail App and its working fine except with Outlook where i cannot find a way to connect it. I have also a web mail service at my mail server and this working fine too. [14:38] I am getting this error when i try to connect through outlook: [14:38] Iniciating session in the reception server of mail (IMAP): Failure with general authentication. No one of those authentication methods are supported by the IMAP server (if exists) are supported by this computer. [14:39] It seems that i am having a problem with user authentication with Outlook and i dont know well how to solve it, because all my users are set to just use Open Directory. [14:39] Is there a way to set up Outlook to login in an user password type of Open Directory? [14:40] Thanks in advance! === amoralej is now known as amoralej|lunch [14:53] I'm about to upload a newer qemu package for an SRU on Trusty, anyone has anything inflight ? [14:53] mdeslaur: ^^^ [14:53] caribou: I cleared out trusty queue 2 weeks ago - nowthing newer from me [14:54] cpaelzer: good, thanks. There was a recent security release so I guess nothing on this side either [14:54] caribou: yeah I saw the pile of CVEs [14:58] caribou: nothing in flight from me [14:58] mdeslaur: ok, thansk [14:58] caribou: thanks for asking [14:59] I often do that as well, but sometimes wonder who to ask - I wonder if there could/should be a defined way to "add what is in flight for a package" somewhere on LP or so [14:59] I'm pretty sure that was discussed somewhen in the last decade already [15:01] cpaelzer: it used to be easier when there were bzr branches with the -proposed suffix [15:02] caribou: bzr branches like for everything? [15:05] cpaelzer: a long time ago, yes and still it was not systematic === amoralej|lunch is now known as amoralej [16:01] rharper, smoser, nacc, rbasak, caribou, cpaelzer, beisner : server irc meeting [16:02] \o === JanC_ is now known as JanC [17:13] hey all good morning, I'm working on an ansible playbook for ubuntu 16.04 LTS but I noticed the network interfaces are labeled different now [17:13] I have enp0s3 instead of eth0 [17:14] it's a VM running in virtualbox, is that the interface name for interfaces now or does it change according to the hypervisor used? [17:14] trying to keep my playbook consistent across all [17:15] I have that interface name hardcoded in the playbook so if it changes it'll break it [17:20] jge, this is the new predictable interface naming, but you can reverse this, see http://serverfault.com/questions/741210/disabling-predictable-network-interface-names-in-xubuntu-15-10 and more info ><> https://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/ [17:20] GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0" and update-grub === degorenko is now known as _degorenko|off [17:26] OerHeks: I see, would the first interface always be enp0s3? [17:27] I guess not since it now uses a combination of firmware/topology and location [17:28] jge: 'predictable' (aiui) in that you can predict it ahead of time in case you know your hardware; not 'predictable' as in the first interface found will always have the sam ename [17:29] jge: the 'issue' was the 'eth*' naming is a kernel namespace; so tooling relying on it could break at anytime without warning [17:29] I hope so, after reinstall/restore image it should pick up the same number [17:30] this prediction is a breeze for openstack, iirc [17:37] nacc: so most of our servers are VMs with a single interface [17:37] so first interface will always end up being enp0s3? [17:38] hello guys [17:39] anyone here knows a good tutorial or doc on how to set pgina to able outlook in windows to connect to a open directory? [17:39] or if anyone here have already made this here === amoralej is now known as amoralej|off [18:54] I'm having an issue with the network/interfaces config [18:54] setting up iface eth0 inet6 static [18:54] address, netmask, and gateway [18:54] but its not there in ifconfig after boot [18:58] http://pastebin.com/LtLFuuWY [19:01] cncr04s: are you sure you're allowed to have two stanzas for one NIC like that? [19:02] sarnold: Yes. [19:02] cncr04s: However, you might try modifying how you specify the prefix length. Rather than a separate "netmask" entry, simply append "/64" to each address. [19:05] cncr04s: Example, https://paste.ubuntu.com/23481889 [19:11] cncr04s: There may be some additional configuration required to add more addresses, come to think of it. I'll work up an expanded example. [19:13] adding /64 didnt seem to work [19:14] cncr04s: Yeah, I thought not as soon as I said it. [19:14] cncr04s: https://paste.ubuntu.com/23481936/ [19:15] cncr04s: That method is known to work. [19:15] cncr04s: What version of Ubuntu are you running? [19:15] 14.04 [19:16] cncr04s: Yeah, that last example is a known-good method. [19:16] cncr04s: Also note that ifconfig is long deprecated, and you should learn how to use the iproute2 tools, i.e. the "ip" command. [19:17] oh, i use the ifconfig for the display, not any actual commands [19:18] editing config now [19:19] cncr04s: https://paste.ubuntu.com/23481957/ [19:19] cncr04s: I took your example and converted it. [19:23] k, seems to work now, ip's are there when I reboot [19:24] thanks [21:37] I have an Ubuntu NAT router. Works fine for everything except for UDP multicast. UDP packets make it to the router, but don't leave. Am I missing something? [22:18] i have a complicated server setup in a VM cloned it to a HDD Ubuntu16.04 server starts perfectly only ethernet isent configured RTL8111GR i presume ——firmware-realtek — — is the package. is there a comand to reconfigure/reinstall it without internet? [22:31] !info firmware-realtek [22:31] Package firmware-realtek does not exist in yakkety [22:31] Hm [22:31] !info firmware-realtek xenial [22:31] Package firmware-realtek does not exist in xenial [22:40] if i separately install a ubuntu session how can i check and recreate the configuration. whan i install from usbstick it recognises it without intervention RTL8111GR