#ubuntu-server 2006-08-01 <_j> thanks ries :) <derekS> can someone help me with installing a spam filter (like spam assasin) <derekS> i am not sure where it fits into my system <Ries> derekS: I remember I followed the spam assasin totorial one day..... and stall it using apt.get and then go... <Zambezi> derekS, /join #spamassassin <derekS> Zambezi: my question is more theoretical <Zambezi> derekS, Or how it's spelled. <derekS> i am using fetchmail to dl mail from my servers, and procmail to distribute it <derekS> where does this fit in? <derekS> it gets distributed to ~/Maildir <Ries> derekS: Don't you have a mailserver running like postfix? <Zambezi> derekS, I think they can answer that in spamassain. I think spamassasin make rules and with like fetchmail and fetchmails doesn't "transfer" the mails to your client. <derekS> Ries: i am pulling from multiple imap accounts that i have no admin control over <Ries> I do think you can start spamassasin and pasy anything through it... <Ries> derekS: still if you have a local MTA running... it can take care of distribution... I used to do that when I was on dailup <Ries> and no MX record pointing to my server...... <derekS> cool <derekS> i will look into that <J_P> hi all <derekS> hi <J_P> people, I install ubuntu server dapper on the CPU VIA Nehemiah 1.4GHZ, install ubuntu-server was OK, but in first boot ubunut dont boot.. :-( <J_P> grub start, linux try umpack and stop with this message : <J_P> "booting kernel linux...." and stop <J_P> during install ubunut-server use kernel 156.14.161.142-386, but after ubunu server finish to install kernel 2.6.15-23-server is installed right <J_P> mey this is the problem.. that ...-server kernel is not supported by VIA ? <J_P> anyone ? any idea ? <J_P> correct message when stop is : "Uccompressing Linux... OK, bootin the kernel." <J_P> after this boot prcess stop <J_P> hey all, anyone can help me ? <J_P> if is ..-server the problem, that not suppoert VIA... so, are there some alternative ? Like as boot with livecd, mount hda1 as chroot and instal via APT 386 kernel for can boot ? <skateinmars> don't you have the choici via the grub boot menu ? <skateinmars> *choice <J_P> skateinmars: NOT <J_P> only ...-server one grub <J_P> after ubunbu-server are installed <skateinmars> so maybe the problem isnt with this particular kernel <skateinmars> did you try the livecd on this computer ? <J_P> skateinmars: yes, live cd are ok <J_P> skateinmars: I'm doing chrrot and installing linux-386 <J_P> via ubunut livecd desktop <skateinmars> ok <J_P> skateinmars: but problema is ...-server don't support via processor :-( <J_P> this is a very problem, becouse many people use VIa as server.. <J_P> I always use this.. <skateinmars> weird... <J_P> why ? <skateinmars> why woudln't it support the via processors ? <J_P> skateinmars: mey me ububnu server core team know :-) <skateinmars> :) <J_P> YES... after install linux-386 via chroot now ubunu-server are booting fine :-) <skateinmars> ok :) #ubuntu-server 2006-08-02 <A-Kaser> poy poy <Astinus-> in which package can i find CC, C compiler? <A-Kaser> gcc <Astinus-> i installed it, but no cc <A-Kaser> ? <Astinus-> only gcc <A-Kaser> what do you try to compile ? <infinity> Astinus-: /usr/bin/cc sure as heck works over here. <infinity> (base)adconrad@cthulhu:~$ cc -v 2>&1 | tail -n 1 <infinity> gcc version 4.1.2 20060715 (prerelease) (Ubuntu 4.1.1-9ubuntu1) <infinity> Of course, that's still gcc, but I'm not sure what you're expecting. This isn't Solaris, our system compiler *is* GCC. <J_P> hi all <A-Kaser> hum <A-Kaser> I try to remove quagga on ubuntu-server <A-Kaser> and it's not possible ... <A-Kaser> dpkg --force-all -purge quagga <A-Kaser> don't work <A-Kaser> idea ? <infinity> A) never use --force-all <infinity> B) Why are you purging with dpkg directly, instead of a higher-level package manager? <infinity> C) What's the error message? "don't work" isn't helpful. <infinity> D) This isn't a support channel. <A-Kaser> because I use apt-get and dpkg everytime <infinity> But I suggest "apt-get --purge remove quagga" <A-Kaser> never a high level packages <A-Kaser> apt-get --purge it's same as dpkg <infinity> No, it's not. <infinity> It handles dependency removal. <infinity> dpkg just tries to remove what you tell it to, and fails if that doesn't work. <A-Kaser> yes <A-Kaser> and I prefer <A-Kaser> because if I have other program which need the lib without depend <A-Kaser> apt-get remove the lib <infinity> Err, come again? <infinity> quagga's not a library, and no libraries depend on it. <infinity> If you're talking about automatic removal of "auto-installed packages", you're thinking aptitude, not apt-get, and that's not what I meant. <A-Kaser> for quagga yes <A-Kaser> I speak in general <infinity> If you remove A, and B depends on A, B should be removed also. Otherwise you just broke your system. <A-Kaser> the problem is not this <A-Kaser> I install C <A-Kaser> C work alone <A-Kaser> but C can have a new feature if I add another lib <A-Kaser> So I install lib B without dependecy <A-Kaser> after I install application A which need lib B <infinity> Yeah, you're thinking of aptitude. Not apt-get. I just said that. <infinity> apt-get will only remove things to prevent you from breaking stuff, it won't remove things cause it thinks you "don't need them anymore". <A-Kaser> if you remove A with depedendy B so application C lost is new feature * infinity gives up. <A-Kaser> http://pastebin.ca/112022 <infinity> I go back to my statement (D). This isn't a support channel. <A-Kaser> it's ubuntu-server <A-Kaser> and I suppose quagga is not a user service <infinity> Looks like a bug in quagga. <A-Kaser> or most of people have BGP at home may be ? <A-Kaser> so I don't live in the same galaxy as you <infinity> dpkg-reconfigure quagga, tell it to stop the daemon on package removal, then remove it. <A-Kaser> same <infinity> I used to advertise BGP routes at home, actually. <infinity> Until I moved and seriously downgraded my network. <A-Kaser> lool <infinity> Anyhow, file a bug if you'd like to see this properly fixed. I'll forget about it by morning if you don't. <infinity> But from the output, I'm guessing that "dpkg-reconfigure quagga", picking a different option, then purging the package will have you happy. <A-Kaser> I don't want to reconfigure it <A-Kaser> but I do it before in hope quagga become 'stable' to be unsintalled <infinity> I know you don't want to reconfigure it, but it appears to be tripping specifically on a stupid debconf setting (and a broken postrm that doesn't deal with it right), so just humour me. <infinity> And note that these sorts of answers can be given to you in #ubuntu. The fact that quagga is a daemon has nothing to do with it, this is just a packaging bug, as could be found in any package. <A-Kaser> sure <A-Kaser> and for you <A-Kaser> what is a server question ? <infinity> This is a development channel. <infinity> But if you have really fascinating questions that are a bit more than "I can't purge a package, help", we sometimes take pity and have fun debugging. <A-Kaser> lol <A-Kaser> -ChanServ- [#ubuntu-server] Ubuntu Server Discussions (development and support) <infinity> Yes, ChanServ lies. I think Fabio created the channel, so I'll make him fix it. * ..[topic/#ubuntu-server:infinity] : This is a development channel, for the planning and co-ordination of Ubuntu Server CD images, installation methods, kernels, and related package sets || Please take support questions to #ubuntu <infinity> At least we can have an accurate topic. * infinity decides to go to bed. <A-Kaser> gn #ubuntu-server 2006-08-03 <cha_cha> hey there. would anyone have any good recommendations as to how to set up a mail server? <Ries> cha_cha: that highly depends on your situation I guess, are you an office, an ISP, home user how much mail, how are you connected etc etc <cha_cha> just a home user - this will be my personal email for my personal server <cha_cha> actually let me move forward a bit <cha_cha> im installing postfix right now, <cha_cha> and in the question "local networks?" the default is 507-653-2812/8 <cha_cha> should i leave that alone, <cha_cha> or set it to the server's IP? <skateinmars> youcould set your local ip <skateinmars> something like 192 <skateinmars> 192.168.x.y <cha_cha> okay <cha_cha> does it matter though? <skateinmars> i don't know, but I don't think this is really necessary <skateinmars> I have a few tutorials about it but, only in french ;) <cha_cha> haha well okay <cha_cha> okay, when i try to enter echo 'pwcheck_method: saslauthd' >> /etc/postfix/sasl/smtpd.conf in the command, i get an error that says permission denied <cha_cha> i tried sudo first <cha_cha> still didn't work <skateinmars> the > and >> does not work with sudo <cha_cha> remove them? <skateinmars> do a "sudo -s" before to become root and then enter your command with the > <cha_cha> so it should look like this: <cha_cha> sudo -s > (command) <skateinmars> no <skateinmars> first "sudo -s" <skateinmars> then <skateinmars> echo 'pwcheck_method: saslauthd' >> /etc/postfix/sasl/smtpd.conf <cha_cha> ahh thank you <skateinmars> and "exit" to become a normal user again <cha_cha> okay <skateinmars> nope * Ries always does sudo sh :) #ubuntu-server 2006-08-04 <sanmarcos> ubuntu server rocks :) <sanmarcos> is there a way to update from normal ubuntu to ubuntu-server? <NineTeen67Comet> Hello all .. I know I'm missing something simple... I can access my server via https (or http)://507-653-2812:631 and I get the main CUPS screen. But when I attempt add printer, I get "403 Forbidden" .. what'd I forget to change? <JamieG> hi <JamieG> can someone explain why ubuntu-server is better than ubuntu if you want to run a server like computer <JamieG> ? #ubuntu-server 2006-08-05 <Linuturk> !LAMP <Linuturk> and that is why I love a LAMP server :) <Linuturk> one command <Linuturk> and it's up and running :) <sanmarcos> is it possible to update from dapper to ubuntu-server? <sanmarcos> are there any fundamental changes in packages? <jimcooncat> how do I take a full dapper installation back down to a "server" install? aptitude purge xserver-xorg? <infinity> Uhm, you pretty much don't try. <infinity> But if you look at everything that "ubuntu-desktop" depends on and remove all of those packages, that's a good start. <infinity> It'll leave a lot of libraries behind, etc. <jimcooncat> I'm renting a "computer" from a uml web host <jimcooncat> they have a full dapper install, but they also have debian sarge <infinity> They seriously do a full install on a colo machine? That's just wrong. <jimcooncat> maybe I could work from their little sarge install to upgrade to dapper? <infinity> We provide the minimal and server installs for that very reason. <infinity> Can't you just ask them to pick the "server" option on the Ubuntu install CD? <jimcooncat> I guess some people like to use it for testing, vnc, or whatever <infinity> (Which doesn't install the server kernel, unless it's a server CD, but it won't install all the desktop junk) <jimcooncat> I have to use one of the providers custom kernels anyway <infinity> Anyhow, were I in your place, I wouldn't care what they installed, Debian or Ubuntu, because I'd just debootstrap a new root filesystem, move it into place, make grub happy, and reboot. <infinity> Oh, right, UML. You can't do that either. <infinity> Not as easily, anyway. <infinity> Well, I suppose you can, the steps are just different. <jimcooncat> maybe I'll just stick with sarge and backports then <jimcooncat> just would be nice to have all my computers on dapper <infinity> Well, upgrading a minimal sarge installation to dapper should be fairly drama-free. <jimcooncat> really. just change repos and dist-upgrade? <infinity> I did sarge->breezy->dapper with no real issues. <infinity> Yeah, if it's a base install, there aren't many packages there anyway. And most of the complex upgrade paths should be skipped. <jimcooncat> I did a dist-upgrade from warty to breezy with no probs on their system <jimcooncat> good, I'll give it a shot then. I've no investment in the current install. <jimcooncat> thanks for your help, infinity <infinity> NP #ubuntu-server 2006-08-06 <NineTeen67Comet> Hi all .. "little" cups problem .. I recently tried to access my server via http://507-653-2812:631 and it got me to the cups front page, but I can not add printer or anything administrator related with out an Error 403 page .. help? The /etc/cupsd/cupsd.conf page doesn't have /admin on it like the standard page .. How can I allow this computer access to my server's cups screen? <Ries> NineTeen67Comet: if you try this from your localhost... is it then possible? 8 <NineTeen67Comet> It's a headless server, so no I can not use localhost .. that is what's killing me .. that and there is no /admin section on Ubuntu's /etc/cupsd/cupsd.conf file .. I'm reading a Debian.gz file now that has some examples though .. <Ries> NineTeen67Comet: then checkout Cups access rights system... I know localhost is enabled by default, anything else needs to be configurated <Ries> NineTeen67Comet: one hint... you can install vnc on the machine to get a esktop... <NineTeen67Comet> WooHoo .. got it working .. well, I am in "add a printer" at least .. lol <NineTeen67Comet> VNC is awesome, but there is no x-server on my server .. it's strictly LAMP / SAMBA / CUPS .. <Ries> NineTeen67Comet: then indeed you need to configure it by hand... it's not to differcult from what I remember <NineTeen67Comet> Naw, looks like it's all going to be fine .. Just had to RTFM a little better on my part .. <NineTeen67Comet> Thank you for your time Ries .. much appriciated .. <jimcooncat> I upgraded a small sarge install to dapper, is there a package for all the tools that would come with a server install: ubuntu-minimal? #ubuntu-server 2006-08-07 <verbose_> how safe is it to use ntfsresize on a ntfs partition that has somewhat important data on it <thefish> any ldap bods here? I need to search by username, and return the names of the groups they are a member of... any ideas? <thefish> ldapsearch -x '(&(objectClass=groupOfNames)(cn=*)(member=cn=joeuser,dc=foobar,dc=com))' seems to work <fryfrog> so, i've just started poking around in ubuntu-server and i had some questions that google didn't turn up answers to <fryfrog> or i was not searching well :) <fryfrog> I am looking into building a vmware appliance lamp for gallery2, and i was looking for ways of slimming down the size as much as possible <lionelp> hi fryfrog <lionelp> the basic server installation is quite minimal <fryfrog> 400-500mb :( <lionelp> hum... I would have said less (about 300Mb) <fryfrog> maybe 400mb once i clear the apt cache <lionelp> fryfrog: you are talking about the LAMP server installation or the server installation ? <fryfrog> ah, sorry LAMP <lionelp> np :) <lionelp> I think on LAMP installation, you have thinks you does not necessary need in your case <lionelp> But it is not so enormous a 400Mb file to download nowaday <fryfrog> no, not terrible <fryfrog> every little bit helps though <fryfrog> i need to figure out apt :) <fryfrog> my big annoyance is that imagemagick pulls in X :( <lionelp> yes, right... <lionelp> does gallery2 (i do not know it very well) needs imagemagick ? <fryfrog> well, sort of <fryfrog> it can use imagemagick, gd and netpbm <fryfrog> dcraw and ffmpeg as well <fryfrog> it would be *nice* to include support for all of them, since its likely the vmware image will be used to test features and maybe do dev work #ubuntu-server 2006-08-10 * Starting logfile irclogs/ubuntu-server.log <nerophibia> hello <frafra> ok #ubuntu-server 2006-08-11 <edgy> Hi, I added a ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/ to make my lists.domain.com/mailman works but I want lists.domain.com to be an alias instead what shall I do, please? <edgy> or actually I think the reverse /usr/lib/cgi-bin/mailman <ag[1] > hi <Bicchi> i just got a new server up. what is the command to turn off the machine. <Ries> shutdown -h now <Ries> sudo shutdown -h now #ubuntu-server 2006-08-12 <ag[1] > hi <ag[1] > can i get help? <ag[1] > i'm trying to make hostname and hostname -f to be the same, so i edit /etc/hosts (line 507-653-2812 localhost.localdomain localhost (line 2) 507-653-2812 ahazg.pc but it doesnt work when i type hostname i get ahazg and for hostname -f i get ahazg.pc i want both to be ahazg.pc <infinity> You don't want that. <infinity> hostname is MEANT to be only the first part of the FQDN. <infinity> (base)adconrad@cthulhu:~$ hostname <infinity> cthulhu <infinity> (base)adconrad@cthulhu:~$ hostname -f <infinity> cthulhu.0c3.net <ag[1] > ok thanks <ag[1] > infinity, y wouldnt it be good <infinity> ag[1] : Let me reverse the question -- Why do you want it to violate spec and the expectation of every piece of UNIX software ever written? <ag[1] > sorry, i am kind of new to the world of unix <infinity> Anyhow, if you're insistent on breaking it, you can set a FQDN in /etc/hostname, which will set your hostname on boot to be what you want. <infinity> But I highly recommend looking at WHY you want it to do that, and figuring out how to avoid it. :) <ag[1] > im basically following this guide <ag[1] > http://www.howtoforge.com/perfect_setup_ubuntu_6.06_p3 <ag[1] > Now run <ag[1] > hostname <ag[1] > hostname -f <ag[1] > Both should show server1.example.com. <ag[1] > thats from the site <infinity> Right, whoever wrote that shouldn't have. :) <infinity> They shouldn't have written most of it, to be honest. <infinity> Encouraging people to enable to root account isn't helpful either. <infinity> Or encouraging them to install random software they don't need. <infinity> This HOWTO's just filled with uselessness. <ag[1] > then how would you be able to perform commands like apt-get without root <infinity> It's more like this guy's notes on how HE likes to setup HIS machine, but it seems useless to post it publically for others to follow. <infinity> "sudo apt-get install foo" <infinity> Or if you want to become root for an extended period "sudo su -" <ag[1] > i just use "su" <ag[1] > is that the same thing <infinity> Yes, I know. I read the HOWTO. :P <ag[1] > ok <infinity> Using "su" means that you've set a root password. <ag[1] > i shouldn't have done that? <infinity> Which means you now get to deal with making sure daemons don't allow root authentication and other such, making it easier for people to brute-force root. <infinity> It also means that you're far more likely to keep open a root shell and do silly things with it. <infinity> While doing "sudo random-command" every time you want to run something is a subtle reminder that you might be breaking the world. <ag[1] > any way to undo what i did <infinity> But, *shrug*... It's up to you. We don't stop you from enabling root. I just wish 3rd party documentation wouldn't TELL people to enable it as if you absolutely must do it. Certainly not without first discussing the pros/cons. <ag[1] > i c ur point, its a security threat <infinity> "sudo passwd -d root" would delete root's password again. <infinity> Though that doesn't seem to return the shadow record to factory fresh. <infinity> Seems to do the trick anyway. <ag[1] > so r u implying that it would be better to do a reinstall of unbuntu server <infinity> Nah. Though, if you're just learning and breaking things anyway, you'll probably end up taking some notes, and reinstalling again in a day or two to make sure you understand what you've learned. :) <infinity> I don't think there's a single OS I've ever installed "just once" the first time I did it. <ag[1] > that was what i was going to do <infinity> Also, word of advice. If you don't want to drive people on technical IRC channels completely insane, try to avoid AOL/TXTisms like "i c ur point" and "r u implying"... <infinity> It doesn't take much longer to type the whole word out, and we will be less likely to want to gouge our eyes out. <ag[1] > ok <ag[1] > ok now instead of using su i would use sudo [command] right <infinity> Right. <infinity> https://help.ubuntu.com/community/RootSudo <-- Might be a good read. <ag[1] > Sudo is no different than gksu, right? <infinity> gksudo, even. :) <infinity> (gksu and gksudo are in the same package, mind you, but one behaves like su -- asking for the root password -- the other behaves like sudo, asking for your password and obeying /etc/sudoers) <ag[1] > I always use "gksu apt-get [command] " in Debain <ag[1] > linux is very hard #ubuntu-server 2006-08-14 <bmk789> i tried upgrading to php5 from php4 and now apache wont load the php files. How to i make sure it loads the php5 mod? <bmk789> nvm <tumbleweed> hi guys, something up with rsync on durville? <tumbleweed> http://paste.ubuntu-nl.org/20552 <tumbleweed> aah, grr this channel is for ubuntu-server distro, not the servers :_( #ubuntu-server 2006-08-15 <derekS> can anyone help me with a procmail recipe? i want all emails recieved by an account to be put in to a folder based on date... for example if the email was recieved on august 2006, i want it to go to folder 2006-08 <derekS> what is everyone using for spam protection? <nictuku> I am happy with postfix, amavis and spamassassin <derekS> nictuku: hmm, ok <derekS> nictuku: how do you seperate your mail into folders? i am looking for a good accurate scheme so my mailbox doesn't get too large <derekS> and then i won't have trouble opening it <nictuku> you mean in a server environment or in your local inbox? <nictuku> anyway, using maildir + maildrop/procmail is a start <derekS> i am using fetchmail->procmail->dovecot imap (all out of ~/Maildir <derekS> ) <derekS> but i don't know of a decent method to sort them <nictuku> you know procmail can do that filtering, right? <derekS> nictuku: yeah, but i don't know how to filter it <derekS> i am using procmail to filter <nictuku> you can try switching to maildrop, its syntax is easier to digest, IMO <nictuku> google has a lot of resources about filterting with procmail <derekS> yeah i am reading :) <derekS> i got it, what i want to do is put everything in the main maildir, and then have a python script run once a week to move things that are older than 30 days into an MailDir that is Year-Month <nictuku> then you can either user your MUA filtering capabilities, or writing a script called by cron that does that. a simple bash using "find"+xargs would do it, I guess <derekS> i was planning to make a python/perl/etc script to just get called by cron <derekS> which would work <kagou> hi <kagou> i'v searched but not found answers on wiki. We have apache/postfix/courier officially included (in main). Including a webmail like imp is it planed ? <NineTeen67Comet> Anyone in here use Gallery2? .. I see it is available for install, but I've only used it via tar.gz .. unzip .. run it .. <NineTeen67Comet> How do I use it when apt-get installs it? * NineTeen67Comet how do I point the browser to g2's main.php file to start the server set up? <lionelp> Hi NineTeen67Comet <lionelp> that's probabily something like http://server/gallery2 <lionelp> have a look on etc/gallery2/apache.conf to see <NineTeen67Comet> lionelp: That's not correct in my case .. all my users web sites are in /shared/www/<users URL> .. like my site is http://www.justinsteiger.com .. that main index.html file is in /shared/www/justinsteiger .. <NineTeen67Comet> I can check that .. thank you .. <NineTeen67Comet> Think I might be able to point something in the config to the main gallery data base .. <NineTeen67Comet> thanks for the direction lionelp <NineTeen67Comet> Sorry to rattle on again in here . but can Apache2 use files that are not in the normal sites path? My sites are all in /shared/www/<sites url> .. but gallery2 is in /usr/share/gallery2 .. and I need to get to /usr/shared/gallery2/install/main.php via the www in order to start setting it up .. <NineTeen67Comet> Think I got it .. had to make a subdomain, and have that listed as a virtual host in /etc/gallery2/apache.conf . then tell my DNS server to hand off gallery2.justinsteiger.com .. to that virtual host .. sigh .. shweew .. <derekS> how do you all do smtp with mutt? #ubuntu-server 2006-08-16 <p4> Hello. How to adjust Ldap-authorization Samba if LDAP is on OTHER server? <lionelp> p4: hello <lionelp> the same <lionelp> but change localhost by your LDAP server :) <p4> Thank. Where it is better to look adjustment in Ubuntu LDAP-authorizations SAMBA? <alexis_> hi <alexis_> does anyone got the postfix-ldap package to work <alexis_> ? <lionelp> alexis_: yep <alexis_> hi <alexis_> postfix tells me "SASL CRAM-MD5 authentication failed" <alexis_> every time i try to send a mail with a user which is in the ldap base <alexis_> testsaslauthd works well (0: OK "Success.") <lionelp> For what purpose you use LDAP with postfix ? <lionelp> Ok, for SMTP-AUTH ? <alexis_> i nned to migrate a macosx server (with netinfo) to ldap <alexis_> ?? <alexis_> what do you mean by "Ok, for SMTP-AUTH ?"? <lionelp> You are trying to use SMTP-AUTH with Postfix ? <alexis_> yes <alexis_> i need the smtp server to allow only ldap users to send mails <lionelp> 2s <alexis_> it works well without authentification <alexis_> ok <lionelp> alexis_: sorry <alexis_> yep <lionelp> You does not need postfix-ldap to make SMTP-AUTH <lionelp> postfix-ldap is for maps LDAP support in postfix <lionelp> (for example if you store mail addreses in LDAP) <alexis_> it's what i want to do <lionelp> in your case, it is SASL (saslauthd to be more precise) that will interact with LDAP <lionelp> Ok :) <alexis_> yes <alexis_> saslauthd works <lionelp> with LDAP ? <lionelp> Oh, i know <alexis_> but postfix always tell me "SASL authentication failure: no secret in database" <lionelp> did you take care of Postfix chroot ? <alexis_> yes <alexis_> i have a testman in ldap and "testsaslauthd -u testman -p 123" works <lionelp> That's fine for saslauthd <alexis_> yes i did some changes in configuration files (google) <lionelp> How did you had saslauthd socket in postfix chroot ? <alexis_> but when i try testsaslauthd being not root it does not work <alexis_> i added a few lines into /etc/init.d/saslauthd <lionelp> Can you show me the /etc/default/saslauthd ? <alexis_> yes <alexis_> 2s <alexis_> http://paste.ubuntu-nl.org/20744 <alexis_> and i added these lines into /etc/init.d/saslautd: http://paste.ubuntu-nl.org/20743 <lionelp> Ok <alexis_> and i modified 2 lines in the beginning of /etc/init.d/saslautd: <alexis_> PWDIR=/var/spool/postfix/var/run/saslauthd <alexis_> PIDFILE="/var/spool/postfix/var/run/${NAME}/saslauthd.pid" <p4> How to LDAP+SAMBA? <p4> How to LDAP+SAMBA? <alexis_> i haven't tried samba yet <alexis_> but ftp works well <alexis_> ftp+ldap i mean <lionelp> alexis_: what is the content of /etc/postfix/sasl/smtpd.conf ? <alexis_> pwcheck_method: saslauthd <lionelp> p4: We understand even if you ask only once :) <lionelp> p4: did you check http://us4.samba.org/samba/docs/man/Samba-HOWTO-Collection/ <lionelp> oh sorry alexis_ i missed your answer <lionelp> you should add the following line <lionelp> mech_list: PLAIN LOGIN <alexis_> ok i'll try <alexis_> it does not work <alexis_> i check the logs... <lionelp> did you reload postfix ? <alexis_> yes <alexis_> the log is not the same <alexis_> 2s i post it on pastebin <alexis_> over there http://paste.ubuntu-nl.org/20752 <alexis_> it is the same error i i tell sylpheed-claws to use AUTH PLAIN instead of AUTH LOGIN <alexis_> "cannot connect to saslauthd server: No such file or directory"... which file is it talking about? <lionelp> alexis_: I think this is the socket file <alexis_> i see the problem <alexis_> /var/run/saslautd is a link to /var/spool/postfix/var/run/saslauthd <alexis_> but /var/spool/postfix/var/run/saslauthd does not exist even if saslautd is running <lionelp> hum... <lionelp> Can you check the content of /var/run/saslauthd ? <lionelp> Does your socket even exists ? <alexis_> i will put back the original configuration <lionelp> I personnaly used a moutn with bind option <lionelp> Here is my fstab entry : /var/run/saslauthd /var/spool/postfix/var/run/saslauthd none bind,defaults 0 0 <alexis_> i will try this <alexis_> wow <alexis_> i dont kno what i have changed but testsaslauthd does not work anymore <alexis_> ok now it works again <alexis_> so i must keep PWDIR=/var/spool/postfix/var/run/saslauthd ? <lionelp> no <alexis_> i need to put back PWDIR=/var/run/saslauthd? <lionelp> I would do so <alexis_> ok <alexis_> now i'll change my fstab <alexis_> YES <alexis_> authentification is OK <alexis_> but now... <alexis_> it wouldn't send my mail <alexis_> [12:16:39] ESMTP< 235 Authentication successful <alexis_> but after that it does nothing <alexis_> AUTH PLAIN works and AUTH LOGIN works <lionelp> did you changed the smtpd_recipient_restrictions ? <alexis_> smtpd_recipient_restrictions = permit_mynetworks <alexis_> permit_sasl_authenticated <alexis_> reject_unauth_destination <lionelp> Ok, looks good <lionelp> Does log tell you more ? <alexis_> 2s i look <alexis_> i ll post it <alexis_> ah <alexis_> fatal: ldap:aliases(0,100): table lookup problem <lionelp> alexis_: I will look at it after lunch <lionelp> oh, you've got it <alexis_> ok <alexis_> bon appetit <lionelp> collegues are waiting for me <lionelp> merci :) <alexis_> thank you very much <DevGet> I get "forbidden" when I'm trying to go to the defult cgi-bin in my webbrowser, whats wrong? <DevGet> what's* <DevGet> oh, sry <DevGet> wrong channel <alexis_> are you here lionelp? <J_P> hi all <J_P> hey all, anyone know some colocation (server location) in the web that install ubuntu too in servers ? <infinity> J_P: I don't know of any off hand, but I've always just gone with places that do RedHat or CentOS or whatever, then debootstrapped an ubuntu install, and used a static shell to mangle it into place. <infinity> J_P: Another option is someplace like www.layeredtech.com that installs Debian Sarge, and you can "sidegrade" from Sarge to Dapper. <J_P> infinity: humm second option is better, but yet is bad, becouse I would like two HDs doing RAID and LVM, so ned do this in instalation <dj_ryan> hail people. #ubuntu-server 2006-08-17 <alienbrain> I know Ubuntu Server comes with mysql 5 by default, but does it also has mysql 4.1 or may be 4.0 also as alternatives? <alienbrain> ops, nvm <lionelp> alienbrain: yes it also have mysql-4.1 available <lionelp> (no 4.0) <MagicFab> I am looking to compare Fedora and ubuntu in servers environment. Does anyone know of resources with white paper /case study structure ? <MagicFab> this is a friendly although very light comparison <MagicFab> http://en.jakilinux.org/choose/comparison?distro1=Debian&distro2=Fedora <alienbrain> lionelp: that's great, many thanks #ubuntu-server 2006-08-19 <yves> is there any known issue with a possible grub fscking in any latest kernel update? <nictuku> after booting a server, grub wasn`t there anymore <lordhelmet> hey i have an apache2 question, is anybody good with configuring it? #ubuntu-server 2006-08-20 <nerophibia> hi all <Overand> Is there a way to 'switch' eth0 and eth1 on a two-network-card system? <Overand> ah, got it, /etc/iftab <netdur> oh! shouldn't be #ubuntu-server-devel for development and #ubuntu-server for help? <netdur> ok, how come you install lamp without sendmail? mail function in php wouldn't work without sendmail!!! <alienbrain> netdur: I say it's because not everyone on the planet preferes sendmail <infinity> I assume he means /usr/sbin/sendmail (as could be provided by postfix, exim, sendmail, etc), not the sendmail package. <netdur> alienbrain, it really doesn't matter what MTA is in use, php's mail function doesn't work, also it doesn't generate any error, this is confusing, if you developers don't like sendmail, install postfix or something works <infinity> And I'd given it some thought, and decided against it, because most people don't really need an MTA, will misconfigure it, and it generally causes a hassle. If you need one, it's one apt-get call away. <infinity> I'll admit that that decision on my part may not have been ideal, but I have to drap the line somewhere for "what extra stuff do we install, and what don't we", and I'm not sure that opening port 25 to the world is what most people would expect from a DB/Web server. <infinity> s/drap/draw/ <netdur> you know better I <netdur> I just shared my experience as user, thanks for ubuntu server #ubuntu-server 2006-08-23 <tkup> any tips on a good NIDS/firewall setup? <tkup> oh my bad, didn't fully read the topic <mooseman447> hey <KenSentMe> hi * Starting logfile irclogs/ubuntu-server.log #ubuntu-server 2006-08-24 <milkyway> hello <milkyway> anyone familiar with apache2 2.0.55-4ubuntu2.1 segmentation faults ? <infinity> Not familiar enough to answer in the two minutes before you leave. #ubuntu-server 2006-08-25 <J_P> hi all <J_P> good morning! <stian> Bonjour <reddux01> Hi guys.. #ubuntu-server 2006-08-26 <nerophibia> hey all <nerophibia> a question about FAI <nerophibia> Is there any plan to develop a kind of trusted master server for Ubuntu-Server version <nerophibia> that could be very interesting for people who have to deploy a huge range of server <maswan> trusted master server? <nerophibia> I also quite interested about that and very interested in participation <nerophibia> maswan: sorry for my english... want to say something like the lamp functionnality... that permit to deploy from scratch a master server <nerophibia> with trusted FAI template... or something like that <maswan> nerophibia: ah, ok. don't know about any such projects as such, but in general the fai package should be the place for such development <nerophibia> maswan: what do you mean by 'should be the place' <maswan> nerophibia: that installing the fai package should be enough to get a good master server etc <nerophibia> Yeah it should but from my personal use, the package comes with 'too much' generic template, only focused on bewolf deployement... without out-of-the-box functionnality for datacenter deployment (LAMP,etc) <nerophibia> maswan: another question if you permit, what are the current project of the server team (perhaps only a link :$)? <maswan> nerophibia: well, that's the tricky part, I'd expect pretty much all fai users to be different, that's why flexibility in class definitions are so important <maswan> and no clue, I'm not in it <nerophibia> maswan: maybe increase the number of default classes ;) thanks for all... gonna sleep now <maswan> nerophibia: I'm sure they'll be happy to get a patch for a lamp class or so #ubuntu-server 2006-08-31 * Starting logfile irclogs/ubuntu-server.log <tkup> any reason why proftpd isn't in the package repository? <iceman> hello everyone! <iceman> I've got a problem trying to configure a cups printer via the web interface on an ubuntu server <iceman> can anyone help me please? <iceman> oups my bad, hadn't read the topic yet #ubuntu-server 2007-08-03 * Starting logfile irclogs/ubuntu-server.log <kraut> moin <stiv2k> how do i set a static ip for my server <stiv2k> nvm <stiv2k> <3 google <juliux> ood morning <Drazha> odd morning <baggito> odd afternoon <Drazha> soon enough <Drazha> it will be day <Drazha> and then evening <Drazha> and then.... <Drazha> the night shall fall# <Drazha> so anyway... <Drazha> WHY Ubuntu Server? <baggito> because we're used to ubuntu now? <baggito> and have faith in their dogma <Drazha> just because of that? <Drazha> that dogma being? <baggito> mmmm <baggito> something about linux and humans <juliux> Drazha, ubuntu rocks, that is all, and pls no flamewars;) <Drazha> actually I am not trying to start a flamewar, honest to god <Drazha> I am just trying to understand, is all <juliux> Drazha, i use ubuntu on servers because i have ubuntu on all my desktop computers and i knwo how to work with ubuntu systems, so it is easier for me to have ubuntu on the server then debian or gentoo <juliux> Drazha, i only have to read one security liste, i only have to test the upgrades on one system <juliux> so its less work for me <baggito> that's basically my idea too <baggito> ubuntu on desktop, ubuntu on server <baggito> develop on desktop, deploy on server <baggito> it's much easier if you don't have to start dealing with package-version skew or trans-location of files <juliux> Drazha, and if i found a problem on my desktop i can fix it theren then i know that this problem can be also on my server but then i know how to fix it <Drazha> hm, ok, so lets say I find that ubuntu has an old version of some app <Drazha> i am back to compiling from scatch and sources? <soren> Drazha: Depends on the app. <juliux> Drazha, i also compile some apps. for example qmail <soren> Drazha: Generally, if you're the kind of person who needs a lot of recent software, you *really* want to be running the latest release. <soren> Drazha: And generally, the software in the lastest release should be quite recent. <soren> Drazha: Also, for some packages, it not really all that difficult to backport it yourself. <soren> Drazha: Are you thinking of any particular app or just asking a general question? <Drazha> just a general question <Drazha> you see, the only reason why I stay on the edge of development because a lot of security features are intriduced, such as in antispam etc... <Drazha> sometimes when one needs to upgrade its living hell <Drazha> so I kinda thought maybe freebsd would be kewl, but i have issues with that... <Drazha> and I havent used debian nor ubuntu that much in server variant to know much about issues such as upgrading etc <soren> Drazha: My upgrade habits are not really sane, so I can't say for sure, but I think generally upgrades are pretty smooth with Ubuntu Server. <soren> (I upgrade at some point during the development cycle, so that doesn't really count) <Drazha> ok so whats the difference between ubuntu desktop and server? no X stuff? <soren> Drazha: it's the same software repository, so the only real difference it the selection of software that gets installed by default. X for instance is not installed by default on servers. <Drazha> I see <Drazha> so just a package selection that is different <soren> Drazha: Yes. <Drazha> if I were silly, I could pretty much easily install just abount anything and make the box everything and nothing <soren> Drazha: Yes. You can easily take a server install and install gnome on it, and presto, it's a desktop! :) <soren> Drazha: Except for the different kernel, of course. <Drazha> a server desktop :) <soren> Drazha: The servers get a different kernel installed by default. <Drazha> hm, they develop a server kernel and a desktop kernel? <Drazha> hehe, this would not have to do with the recent scheduler conflict? <soren> Drazha: I can't remember all the differences, but stuff like using a different i/o scheduler and a lower HZ. <Drazha> :)) <Drazha> oh well, I guess it does make sense <Drazha> but I guess one could install both kernels and switch if one is so concerned about that <Drazha> not that running a web app on a box with gnome on it makes sense, but what the hey <soren> Precisely. They share the same repository, so you're not tied into anything. <Drazha> which basically then boils down to, which default MTA is ubuntu using, for example? <soren> None :) <soren> We have a no-open-ports-by-default policy. <soren> ..so we don't install an MTA by default. <soren> Exim and Postfix are both in main. <Nafallo> hmm <Nafallo> do we still? :-) <soren> Nafallo: still what? <Nafallo> soren: have that policy. I thought 5353 had been opened. <soren> Nafallo: Ah, have a no-open-ports-by-default policy? <soren> Nafallo: mdns is a bit special :) <Nafallo> in what ways? :-P <Nafallo> it <Nafallo> it's still an open port <soren> Nafallo: You need to remember that even though we have a no-open-ports-by-default, we still have DNS and DHCP installed, for instance. <Nafallo> soren: do we really? <soren> Nafallo: clients. <soren> Nafallo: They listen for stuff on the network. That's how they work :) <Nafallo> soren: clients doesn't open ports be default no... <Nafallo> soren: dns doesn't listen. it asks. <soren> Nafallo: And how do you think the response gets back? <Nafallo> same with dhcp <Nafallo> soren: well, that's not what we mean by no open ports :-) <Nafallo> soren: ofcourse epiphany open ports when I try to talk to T/80 :-P <soren> Nafallo: That's different. <soren> Nafallo: It's TCP connections. <Drazha> hm <Drazha> well what about ssh? :) is that closed by default as well? :)) <soren> Nafallo: Hang on, there's a wiki page about all of this. <soren> Drazha: Not installed. <Drazha> so how the heck do you get in your box remotely? <soren> Drazha: We ship it on the CD, so it's super easy to install it, but it's not installed by default. <Nafallo> soren: there is no open port for DNS on my client. <soren> Nafallo: Try making a dns query and watch your netstat. <Nafallo> soren: two udp for mdns and one for dhclient. <Nafallo> soren: sure, but that's not open by default. <soren> Nafallo: No, but it's not closed either. <Nafallo> soren: that's open on request. <Nafallo> soren: it is closed by default :-) <Nafallo> soren: if the client does not do a request it's closed. <soren> Nafallo: Yes, but the point is that when it's open, anyone can send stuff to it that might exploit a security hole. <Nafallo> agreed. but that's a pretty small chance they'll be able to see the port open and get to send data their in the time-frame :-) <Nafallo> there even <Drazha> hm, whats mdns anyway? I've seen it being mentioned before but was to lazy to google it <Nafallo> automatic service discovery <soren> Nafallo: A small chance is all a dedicated malicious person needs. <Nafallo> well, you can't talk to thinks if you don't listen for answers. if you're that paranoid you shouldn't even have the PC connected to electrical power. <Nafallo> s/nk/ng/ <soren> Nafallo: I'm not suggesting that we should disable dns or dhcp. <Nafallo> good ;-) <soren> Nafallo: I'm just pointing out that there *is* in fact stuff that evil-doers can connect to if they want. <Nafallo> sure, but most scriptkiddies can't :-) <Nafallo> the chance getting struck by those are fairly much higher. <soren> Nafallo: Sure they can. Just keep flooding until it opens up. <soren> Nafallo: a) the code has been audited many times, b) we can't really live without DNS capabilities. <soren> Nafallo: Hence, we accept this (minimal) risk. <Nafallo> then scriptkiddies must have became much better in the last years then :-) <soren> Nafallo: They just have more bandwidth :) <Nafallo> hm. food. bbl. <soren> Nafallo: The mdns code has been audited, and the impact of a compromise has been deemed very small. <soren> Nafallo: On servers, though, we don't install it by default. * soren -> lunch <Nafallo> I know :-) <boxrock> can someone tell me how i play a wav file from shell? i get "oss_audio: failed to open audio device /dev/dsp" from flite <sommer> boxrock: you can try aplay. <sommer> comes with alsa-utils <boxrock> aplay x.wav => PULSEAUDIO: Unable to connect: Connection refused <sommer> is the module for your sound card loaded? <boxrock> i can play the wav file from GUI <boxrock> but i need CLI <sommer> mmmm...mplayer works from CLI. Kind of a big package though. <baggito> mplayer is a good choice. it's quite robust <baggito> esdplay aswell, if you're using ESD <baggito> wait no. i'm talking crazy <baggito> yes it's in esound-clients package <lamont> soren: listening on 507-653-2812 is allowed under the no-open-ports policyu <soren> lamont: Right. <soren> lamont: Have I said otherwise? <jdstrand> dendrobates: good morning <jdstrand> dendrobates: got your email about auth-client-config-- thanks <dendrobates> good morning <jdstrand> dendrobates: I also go the email about the change in the wiki. notably: <jdstrand> wait a sec, I think I misread it <jdstrand> ok so no migration script? <dendrobates> no, in the interest of time <jdstrand> seems reasonable. your assertion here may be over simplified: <jdstrand> If /etc/libnss-ldap.conf or /etc/pam_ldap.conf exist, notify user that he must manually migrate the files <dendrobates> feel free to modify it. <jdstrand> in the case that the libnss-ldap and libpam-ldap may not be purged <jdstrand> but removed <dendrobates> true. <jdstrand> will ldap-client-config depend, suggest, or recommend one or both of libpam-ldap and libnss-ldap? <dendrobates> I am working on a dependency tree now. <jdstrand> ldap-client-config could conflict with a versioned libnss-ldap and libpam-ldap, then when libnss-ldap and libpam-ldap are upgraded, they can remove those conffiles <jdstrand> but then you'd need to be sure that they got upgraded before ldap-client-config <dendrobates> that will work if a user installs ldap-auth-client. It will install everything. <dendrobates> But there are some complexities I am still learning. <jdstrand> right-- but on a standard upgrade, ldap-client-config wouldn't get installed yet <jdstrand> I am looking at this backward. <jdstrand> libnss-ldap must depend on ldap-client-config to have any configuration at all <jdstrand> libnss-ldap gets upgraded, and removes the old conffile <dendrobates> It does. <jdstrand> ldap-client-config create /etc/ldap.conf <jdstrand> ldap-client-config doesn't have to care at all about libnss-ldap.conf <jdstrand> it could just warn the user that the confiles have moved around, if they are found <jdstrand> but the user is forced to use ldap-client-config to configure <dendrobates> yes. I think it all works, but I need to look at all the use cases to make sure. <jdstrand> it does not provide a smooth upgrade though-- meaning pre-existing configuration is not preserved. :( But that was punted anyway <jdstrand> at least for gutsy <jdstrand> gutsy+1 is LTS? <dendrobates> yes. <jdstrand> so work could be done on the migration script for dapper to gutsy+1 <dendrobates> I'm thinking of checking for the old conffiles at preinst, and kicking out before install so the user can fix it. What do you think? <dendrobates> yes on the dapper to gutsy+1 <dendrobates> the problem is once the new pam_ldap and nss_ldap are installed there old confiles are useless and the system is broken. <jdstrand> to my thinking, if libnss-ldap and/or libpam-ldap are installed or removed but not purged, you will always hit that condition <jdstrand> on upgrade of course <dendrobates> true. It will require user intervention. Either migrate or purge than install. <dendrobates> brb <jdstrand> maybe for gutsy, an informational message stating the the conffile has moved to /etc/ldap.conf, but that it cannot be migrated and that they will be prompted for configuration via ldap-client-config <jdstrand> s/migrated/migrated automatically/ <jdstrand> this would have to be done in both libnss-ldap and libpam-ldap <jdstrand> could also talk about the benefits of using a unified conffile, to make the pill go down easier. :) <jdstrand> really-- since libnss-ldap and libpam-ldap will depend on ldap-config-config, you could put that message in ldap-client-config <jdstrand> as such, maybe rather than removing libnss-ldap.conf and pam-ldap.conf, those should be moved to libnss-ldap.conf.obsolete and pamldap.conf.obsolete, and the user told about that, so that the files are still available to compare with /etc/ldap.conf <dendrobates> jdstrand: are you talking about gutsy or gutsy +1 <jdstrand> gutsy <jdstrand> gutsy+1 can keep working on migration script <jdstrand> for gutsy+1, only give message to user if the migration failed <jdstrand> these are ideas mind you. but seems to work <jdstrand> to summarize my thoughts: <dendrobates> So you want to rename, and configure no matter what? <jdstrand> for gutsy-- yes, unless that migration script is ready <dendrobates> I see what you are saying, but I am not sure that pitti will be satisfied. <jdstrand> I don't find it particularly satisfying <jdstrand> :) <jdstrand> libnss-ldap and libpam-ldap *must* depend on ldap-client-config -- that is a given <dendrobates> I've already modied them to do that. <dendrobates> s/modied/modified/ <jdstrand> problem is, on upgrade, without a migration script, I can't see how to do a smooth upgrade, unless you just pick one to copy over <jdstrand> perhaps that is a solution for gutsy. <jdstrand> message: I have detected libnss-ldap.conf. This file is obsoleted by /etc/ldap.conf. I can copy it over for you, or you can use ldap-client-config to create a new /etc/ldap.conf" <jdstrand> that is the gist, not the actual message <dendrobates> But what about pam_ldap.conf? Which do we use? And we would also have to migrate the *.secret file if it exists. <jdstrand> if both libnss-ldap.conf and pam-ldap.conf exist (highly possible with removed but not purged packages), you are in a bind though <dendrobates> That is the dilemma. I wish we had more time to solve it, but we need to iron this out so it can get approved for gutsy. <jdstrand> why did you remove the checks for the .so files from the spec? <dendrobates> Because that is part of the migration, and I was deferring it. <jdstrand> deferring to what? <dendrobates> deferring it to gutsy+1 <jdstrand> checking for the .so solves the purge/remove discrepency <jdstrand> if .so and conf, then cp <jdstrand> if !.so and conf, ignore <jdstrand> that could be optimized... <jdstrand> if .so, then cp <jdstrand> if !.so, then ignore <jdstrand> if libnss.so and libpam.so, then prompt for manual intervention <jdstrand> (don't know if those are the actual .so filenames off-hand) <jdstrand> but you get the idea <dendrobates> I agree with all that you are saying, but I want to get it approved in the simplified way, than if we have time to do a little scope creep before gutsy, fine. <eikke> grmbl <eikke> something's doing an invalid "GET /" request (no http version etc) on a regular base to my https server, request coming from localhost going to localhost <jdstrand> I agree with you too, I just don't think it can be done in a optimal way with conffiles alone <jdstrand> because of remove vs purge <eikke> every 10 minutes or so it does 2 consecutive requests, but I got no clue what causes this, and I hate that feeling <dendrobates> we can check apt for the status of the packages. <jdstrand> in my experience (and this is esp true with ldap), many people try libpam-ldap and libnss-ldap (lots of different howtos and docs out there) <dendrobates> jdstrand: I have to meet some people for lunch.
{'channel': 'ubuntu-server', 'month': 8}