=== xispita_ is now known as xispita
=== scoobydoob is now known as scoobydoo
[06:14] <Ox4d_Coma> Hello.  I'm following the ubuntu server docs for service-ldap and service-kerberos and have hit a snag. Attempting to start krb5-kdc I get "Unable to read Kerberos container: Kerberos container location not specified - while initializing database for realm OXFORD.LAN" (real domain name changed)
[06:17] <Ox4d_Coma> Small thing, but the output example for "Next, use the kdb5_ldap_util utility to create the realm:" is off. After asking for the KDC database master key it asked me for the DN for the Kerboros container DN, so I put "cn=krbContainer,dc=oxford,dc=lan" to match the dbdefault block in krb5.conf
[06:22] <Ox4d_Coma> My system likes to hard lock periodically, so I apologize if I miss the answer and end up re-asking. (I'm assuming the logs are publicly available for searching.)
[06:27] <cpaelzer> Ox4d_Coma: the logs are here - I see three messages from you
[06:28] <cpaelzer> I do not know enough on this, but it sounds like the krb5.conf is not specific enough so that it fails to map to its database (that is the bit that search foo gave me)
[06:28] <Ox4d_Coma> I meant to say the logs probably aren't publicly viewable.
[06:29] <cpaelzer> the IRC logs are public - they will be here in a while https://irclogs.ubuntu.com/2022/05/24/%23ubuntu-server.html
[06:30] <Ox4d_Coma> Thanks. Bookmarked just in case.
[06:32] <Ox4d_Coma> The setting in krb5.conf for ldap_kerberos_container_dn matches what I put in the kdb5_ldap_util for creating the subtrees.  And I see the cn in apache directory studio.
[06:36] <Ox4d_Coma> Well crap. I think I found it. I put [dbdefault] instead of [dbdefault] in the krb5.conf.
[06:37] <Ox4d_Coma> Yep. That did it. The typos are never in the obvious spot.
[06:38] <Ox4d_Coma> I even made the typo again earlier. I put [dbdefault] instead of [dbdefaults]
[06:39] <Ox4d_Coma> Probably why the call to kdb5_ldap_util asked me for a DN instead of matching the ubuntu docs.
[06:39] <cpaelzer> well, glad to be your rubber duck ;-)
[08:14] <Aison> why is bacula not available in jammy? here it looks like it is available in impish and kinetic but not in jammy: https://launchpad.net/ubuntu/+source/bacula
[08:17] <schopin> Aison: IIRC it was blocking the libssl3 transition.
[08:18] <Aison> ah ok, as I see tehy use a quite "old" version of bacula anyway 9.6.7
[08:22] <Aison> current version is 11.0.6
[13:11] <ahasenack> kanashiro: yesterday I did a juju deploy of hacluster, and I did see the phantom "node1" node
[13:11] <ahasenack> I'm unsure if the charm fix is released or just committed
[13:11] <ahasenack> it also takes a while to stabilize, in one occasion the node1 disappeared, maybe I didn't wait long enough the first time
[13:22] <Woet_> is there a way to pin package versions together? for example, I don't want to update package foo from version 1.2 to 1.3 until package bar also has an update from version 1.2 to 1.3 available.
[13:27] <schopin> athos: I stumbled onto this from a openssl-users thread, we might want to cherry-pick this patch: https://github.com/php/php-src/pull/8558
[13:27] <ubottu> Pull 8558 in php/php-src "Fix bug #79589: ssl3_read_n:unexpected eof while reading" [Closed]
[14:04] <kanashiro> ahasenack, did you understand what charms are doing under the hood?
[14:04] <ahasenack> working on it
=== Woet_ is now known as Woet
[16:06] <athos> schopin: thanks for the pointers. I will check this in the morning!
[16:08] <schopin> Nice, thanks!
[16:08] <athos> am sort of offline today :)
[16:34] <foo> Anyone have a preference for something like sentry? vector by datalog? Would be great if we can grab a docker image and run it ourselves.
=== elastic_dog is now known as Guest3808