[01:42] <Pinkamena_D> I cant connect to vsftpd anymore. Trying just local network no firewall. SSH works fine. raw FTP I open ftp it asks for username and then password and then just hangs there. Only thing in the log on the server is a "client connected" message.
[01:42] <DirtyCajun> Pinkamena_D, why dont you use sshd and grow from insecure vsftpd ?
[01:44] <sarnold> Pinkamena_D: did it ever work?
[01:44] <Pinkamena_D> I use sftp in many places, but for reasons outside the scope of this question, I need a standard ftp connection available in this case. I don't think this is an overly obscure or unreasonable request.
[01:45] <Pinkamena_D> no, it is still 'Password:\n'
[01:45] <sarnold> Pinkamena_D: are you setting this up from scratch and it's never worked?
[01:46] <sarnold> Pinkamena_D: or are you trying to figureo ut why something that worked N days ago doesn't work today?
[01:46] <Pinkamena_D> no, it has worked in the past, but it is not used extremely actively so I only noticed today
[01:46] <Pinkamena_D> the latter case, yes
[01:46] <sarnold> do you need to toggle the active/passive case?
[01:46] <sarnold> do you have a firewall on the machine that you're testing from?
[01:47] <Pinkamena_D> no - both machines are ubuntu 14.04 (one server one desktop)
[01:47] <Pinkamena_D> I have never changed any settings related to active/passive. I have used both nautilus "connect to server" and filezilla for connections in the past - now both hang
[01:48] <sarnold> is there anything in the logs on the server?
[01:48] <Pinkamena_D> nothing useful in dmesg or /var/log/vsftpd.log - is there anywhere else to check?
[01:50] <sarnold> _maybe_ /var/log/auth.log?
[01:51] <Pinkamena_D> it seems to be only ssh-related entries
[01:59] <Pinkamena_D> ok well i have no idea what actually the problem is, but it works after I disable LISTEN_IPV6
[01:59] <Pinkamena_D> so yeah I will just keep chugging with ipv4...
[02:02] <sarnold> well -that- is surprising
[09:07] <SipriusPT> hello guys
[09:08] <SipriusPT> i am trying to connect an outlook client to my unix mail server and i am unable to authenticate on it
[09:08] <SipriusPT> till now i was only able to connect mail app clients
[09:09] <SipriusPT> i am using postfix, dovecot, getmail, open directory and CRAM-MD5, Digest-MD5, GSSAPI
[09:09] <SipriusPT> when i try to login i receive this message at outlook
[09:09] <SipriusPT> Iniciating session in the reception server of mail (IMAP): Failure with general authentication. No one of those authentication methods are supported by the IMAP server (if exists) are supported by this computer.
[09:09] <SipriusPT> In dovecot: auth_mechanisms = digest-md5 cram-md5 gssapi apop. (I didnt knew that i had apop enable, i will disable it in the future). Through telnet to port 143 i have AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=GSSAPI. I am using Outlook 2013. I was using the same settings as i was through Mail app, login username and password, and the DNS name of this mail server through IMAP.
[09:40] <rbasak> teward: https://launchpad.net/bugs/1639814
[10:19] <RoyK> rbasak: ouch - not very nice
[11:24] <SipriusPT> hello guys
[11:24] <SipriusPT> i am trying to connect an outlook client to my unix mail server and i am unable to authenticate on it
[11:24] <SipriusPT> till now i was only able to connect mail app clients
[11:25] <SipriusPT> i am using postfix, dovecot, getmail, open directory and CRAM-MD5, Digest-MD5, GSSAPI
[11:25] <SipriusPT> when i try to login i receive this message at outlook
[11:25] <SipriusPT> Iniciating session in the reception server of mail (IMAP): Failure with general authentication. No one of those authentication methods are supported by the IMAP server (if exists) are supported by this computer.
[11:25] <SipriusPT> In dovecot: auth_mechanisms = digest-md5 cram-md5 gssapi apop. (I didnt knew that i had apop enable, i will disable it in the future). Through telnet to port 143 i have AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=GSSAPI. I am using Outlook 2013. I was using the same settings as i was through Mail app, login username and password, and the DNS name of this mail server through IMAP.
[11:39] <patdk-lap> you shouldn't use cram-md5 or digest-md5
[11:39] <patdk-lap> dunno if outlook supports gssapi
[12:19] <SipriusPT> patdk-lap: i was avoiding textplain
[12:20] <SipriusPT> outlook is not compatible with those types of encryptions?!
[12:23] <patdk-lap> heh? those are not encryption
[12:23] <patdk-lap> they are a type of hash
[12:23] <patdk-lap> and why avoid plain text?
[12:23] <patdk-lap> md5 is easily crackable, so those are not secure
[12:23] <patdk-lap> your connection should be tls encrypted
[12:24] <patdk-lap> so the password type doesn't matter
[12:24] <SipriusPT> i see
[12:24] <patdk-lap> if you use plain text passwords, you get to use strong password hashing in your user database, protecting people
[12:24] <SipriusPT> i will do that
[12:24] <patdk-lap> instead of using plain text passwords in your database
[12:25] <patdk-lap> now, gssapi is good
[12:25] <SipriusPT> i was not able to set it up
[12:25] <SipriusPT> =/
[12:25] <patdk-lap> the issue there is much the same, not much support, and requires plaintext passwords or some compromise normally
[12:25] <SipriusPT> i had a problem renewing tickets
[12:30] <SipriusPT> thanks patdk-lap i already check at my config file in postfix and it seems that tls is set by default
[12:30] <SipriusPT> (this is a fresh postfix installation)
[14:38] <SipriusPT> Hello guys
[14:38] <SipriusPT>  0 down vote favorite I notice that i am unable to connect Outlook (2013) users with my Unix mail server. I have tried from a remote computer and localhost at my local network with Mail App and its working fine except with Outlook where i cannot find a way to connect it. I have also a web mail service at my mail server and this working fine too.
[14:38] <SipriusPT> I am getting this error when i try to connect through outlook:
[14:38] <SipriusPT> Iniciating session in the reception server of mail (IMAP): Failure with general authentication. No one of those authentication methods are supported by the IMAP server (if exists) are supported by this computer.
[14:39] <SipriusPT> It seems that i am having a problem with user authentication with Outlook and i dont know well how to solve it, because all my users are set to just use Open Directory.
[14:39] <SipriusPT> Is there a way to set up Outlook to login in an user password type of Open Directory?
[14:40] <SipriusPT> Thanks in advance!
[14:53] <caribou> I'm about to upload a newer qemu package for an SRU on Trusty, anyone has anything inflight ?
[14:53] <caribou> mdeslaur: ^^^
[14:53] <cpaelzer> caribou: I cleared out trusty queue 2 weeks ago - nowthing newer from me
[14:54] <caribou> cpaelzer: good, thanks. There was a recent security release so I guess nothing on this side either
[14:54] <cpaelzer> caribou: yeah I saw the pile of CVEs
[14:58] <mdeslaur> caribou: nothing in flight from me
[14:58] <caribou> mdeslaur: ok, thansk
[14:58] <mdeslaur> caribou: thanks for asking
[14:59] <cpaelzer> I often do that as well, but sometimes wonder who to ask - I wonder if there could/should be a defined way to "add what is in flight for a package" somewhere on LP or so
[14:59] <cpaelzer> I'm pretty sure that was discussed somewhen in the last decade already
[15:01] <caribou> cpaelzer: it used to be easier when there were bzr branches with the -proposed suffix
[15:02] <cpaelzer> caribou: bzr branches like for everything?
[15:05] <caribou> cpaelzer: a long time ago, yes and still it was not systematic
[16:01] <jgrimm> rharper, smoser, nacc, rbasak, caribou, cpaelzer, beisner : server irc meeting
[16:02] <caribou> \o
[17:13] <jge> hey all good morning, I'm working on an ansible playbook for ubuntu 16.04 LTS but I noticed the network interfaces are labeled different now
[17:13] <jge> I have enp0s3 instead of eth0
[17:14] <jge> it's a VM running in virtualbox, is that the interface name for interfaces now or does it change according to the hypervisor used?
[17:14] <jge> trying to keep my playbook consistent across all
[17:15] <jge> I have that interface name hardcoded in the playbook so if it changes it'll break it
[17:20] <OerHeks> jge, this is the new predictable interface naming, but you can reverse this, see http://serverfault.com/questions/741210/disabling-predictable-network-interface-names-in-xubuntu-15-10 and more info ><> https://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/
[17:20] <OerHeks> GRUB_CMDLINE_LINUX="net.ifnames=0 biosdevname=0" and update-grub
[17:26] <jge> OerHeks: I see, would the first interface always be enp0s3?
[17:27] <jge> I guess not since it now uses a combination of firmware/topology and location
[17:28] <nacc> jge: 'predictable' (aiui) in that you can predict it ahead of time in case you  know your hardware; not 'predictable' as in the first interface found will always have the sam ename
[17:29] <nacc> jge: the 'issue' was the 'eth*' naming is a kernel namespace; so tooling relying on it could break at anytime without warning
[17:29] <OerHeks> I hope so, after reinstall/restore image it should pick up the same number
[17:30] <OerHeks> this prediction is a breeze for openstack, iirc
[17:37] <jge> nacc: so most of our servers are VMs with a single interface
[17:37] <jge> so first interface will always end up being enp0s3?
[17:38] <SipriusPT> hello guys
[17:39] <SipriusPT> anyone here knows a good tutorial or doc on how to set pgina to able outlook in windows to connect to a open directory?
[17:39] <SipriusPT> or if anyone here have already made this here
[18:54] <cncr04s> I'm having an issue with the network/interfaces config
[18:54] <cncr04s> setting up iface eth0 inet6 static
[18:54] <cncr04s> address, netmask, and gateway
[18:54] <cncr04s> but its not there in ifconfig after boot
[18:58] <cncr04s> http://pastebin.com/LtLFuuWY
[19:01] <sarnold> cncr04s: are you sure you're allowed to have two stanzas for one NIC like that?
[19:02] <sypher> sarnold: Yes.
[19:02] <sypher> cncr04s: However, you might try modifying how you specify the prefix length. Rather than a separate "netmask" entry, simply append "/64" to each address.
[19:05] <sypher> cncr04s: Example, https://paste.ubuntu.com/23481889
[19:11] <sypher> cncr04s: There may be some additional configuration required to add more addresses, come to think of it. I'll work up an expanded example.
[19:13] <cncr04s> adding /64 didnt seem to work
[19:14] <sypher> cncr04s: Yeah, I thought not as soon as I said it.
[19:14] <sypher> cncr04s: https://paste.ubuntu.com/23481936/
[19:15] <sypher> cncr04s: That method is known to work.
[19:15] <sypher> cncr04s: What version of Ubuntu are you running?
[19:15] <cncr04s> 14.04
[19:16] <sypher> cncr04s: Yeah, that last example is a known-good method.
[19:16] <sypher> cncr04s: Also note that ifconfig is long deprecated, and you should learn how to use the iproute2 tools, i.e. the "ip" command.
[19:17] <cncr04s> oh, i use the ifconfig for the display, not any actual commands
[19:18] <cncr04s> editing config now
[19:19] <sypher> cncr04s: https://paste.ubuntu.com/23481957/
[19:19] <sypher> cncr04s: I took your example and converted it.
[19:23] <cncr04s> k, seems to work now, ip's are there when I reboot
[19:24] <cncr04s> thanks
[21:37] <tex> I have an Ubuntu NAT router. Works fine for everything except for UDP multicast. UDP packets make it to the router, but don't leave. Am I missing something?
[22:18] <station1> i have a complicated server setup in a VM cloned it to a HDD    Ubuntu16.04 server starts perfectly only ethernet isent configured RTL8111GR i presume  ——firmware-realtek — — is the package. is there a comand to reconfigure/reinstall it without internet?
[22:31] <genii> !info firmware-realtek
[22:31] <genii> Hm
[22:31] <genii> !info firmware-realtek xenial
[22:40] <station1> if i separately install a ubuntu session how can i check and recreate the configuration. whan i install from usbstick it recognises it without intervention RTL8111GR