[01:09] hello, im banging my head in on configuring a remote dedicated server new nic. i only have kvm access and maint. mode will not work. i can confirm that there is in fact a netplan yaml but i cannot for the life of me get it to initialize on boot. it was incorrect, so i have updated with the correct info using bash from the kernel. would anyone be [01:09] willing help me nudge this along? [01:19] this looks interesting: http://www.yamllint.com/ [01:20] has the interface name changed? [01:23] yes [01:24] i think (?) [01:24] lol [01:24] not to mention its a german keyboard in kvm [01:25] warum sie haben es kaputtmachen? [01:28] maybe: sudo netplan try [01:28] from kernel? [02:29] I'm looking at the logs for Ubuntu, whenever I attempt to login with an AD user it spits out "Jan 22 13:28:45 ubuntu systemd-resolved[539]: Server returned error NXDOMAIN, mitigating potential DNS violation DVE-2018-0001, retrying transaction with reduced feature level UDP." I'm pretty sure this is why tis not working, any ideas would be appreciated [02:31] Pretty sure it's a DNS issue -_- [02:32] Wally: this discussion may help you understand it better https://github.com/systemd/systemd/pull/8608 [02:34] ah [05:27] Hi all. I am having a difficult time migrating a server to a new ubuntu instance. it's an ubuntu server but apache2 is running from /etc/apache-sp. How do I update my systemd script to use the /etc/apache-sp locatio instead of /etc/apache2? [05:27] I can't find the location of the init script that runs the command to start apache === paride6 is now known as paride [07:24] Good morning [07:25] zxvff: You want an systemd override (systemctl edit apache2.service), else your edit will be overwritten on the next update. That said, why not migrate your apache-sp to /etc/apache2? [07:33] i have setup basic bridge with ovs-vsctl add br and ovs-vsctl add-port to my nic [07:34] and i have guest on kvm ,now how do i assing ip address to guest from host [07:54] DHCP? [07:55] yes try but its now working [07:55] or i am doing some thing wrong [07:56] Firewall dropping the requests/answers? [07:58] no firewall no appliation firewall [07:59] Start tcpdumping then [07:59] ok [07:59] sorry but i have very little or equal to no idea on how to read output [08:01] What you are looking for is if the server sees the dhcp request (and answers it), and on the client to see if the answer is being received. [08:02] ok [08:02] let me give try [08:03] will also refresh packages [08:04] brb [10:05] If anyone needs to know how to manipulate both icon size and precise placement of icons in plasma5 kde, let me know. I have it all figured out now. [10:06] weedmic: hows that related to ubuntu server please? [10:06] some use de = plasma [10:07] but its not a server specific question [10:13] weedmic: could try #plasma ? [10:53] More suited for #kubuntu [13:19] sahid: re: networkx ussuri backport, yes it seems more and more packages are needing 2.x. I've been trying to patch packages back to 1.x in ca-patches but it's getting more likely that we need to backport networkx [13:19] sahid: I started trying to but it gets very involved [13:21] I'm looking for a help regarding X forwarding on ssh inside Ubuntu server. [13:23] coreycb: i was considering doing a revert of dc6495cfa1c8e1dc95bad554a55f0b4e8e360abe [13:23] sahid: in taskflow? [13:23] yes [13:24] i mean condiring prepare a patch for ca-patches that to revert it [13:25] sahid: let's do that for now and carry it in ca-patches [14:03] sahid: horizon's uploaded, thank you [14:04] coreycb: ack [14:33] sahid: looks like we'll also need a ca-patch to six.patch to s/python2/python in d/control [16:16] is it possible to set up EITHER a yubikey or Google Authenticator two-factor auth for ssh on ubuntu, but not both? [16:16] Similar to how on google (for example) you can register multiple second factors in case one becomes unavailable, but you don't have to use each of them on each login [16:39] jayjo: This thread seems to be close to achieving what you're looking for... it might start you down the right path? https://serverfault.com/a/222655 [16:40] I haven't heard of the ability to choose one or the other on login... you'd have to have some way to prompt the user which they're choosing [16:48] jayjo, I'm pretty sure in PAM you could set it to prompt for both, but only require one to pass. That's pretty clunky though. [16:49] lordcirth_: How would PAM be able to identify which one is being used though? [16:49] pragmaticenigma, it prompts for one, and then the other, and in one you just press enter and submit emptystring [16:50] And it ORs then [16:50] ah, simple solution :-) [16:50] Very kludgy [16:50] At the moment, I haven't seen anything better. Except to ask users on setup which they prefer and setup the user to only use that option [16:56] It *might* be possible to present one text prompt, and run it past both methods [16:57] For example, Yubikey auth works if you type your password, then your yubikey, or yubikey -> newline -> password === PaulePan1er is now known as PaulePanter [17:27] If I were to allow users to decide which one they prefer, would there be any way to bypass the 'preferred' one if it became misplaced? [17:27] Thanks for the resources, definitely on the right track [17:42] I'm sure anything is possible [18:56] I found this feature just searching through ubuntu docs: https://help.ubuntu.com/community/SSO/FAQs/2FA [18:57] is this for ubuntu in general or just for login.ubuntu.com ? It does mention "You can add multiple 2fa devices to your account; the system will auto-detect which one you use at each login. We recommend having at least two devices associated with your account so you will have a backup in case the main device fails or locks you out. It's also required to have a "printable backup codes" device in case [18:57] all your electronic devices become unavailable. [18:59] jayjo: all the services that use the canonical-supplied 2fa mechanism (which isn't entirely the same as all canonical services that have logins, I think I've seen third-party projects integrating with the login.ubuntu.com single-signon before..) [20:44] jayjo: anything that uses login.u.c and its SSO system is bound to that [20:44] some third party services utilize it as well, but that ONLY applies to login.u.c and the SSO system that goes with it [20:45] those statements don't apply to other SSO systems/providers which don't integrate with Canonical's SSO.