#ubuntu-server 2006-04-01 <Drac[Server] > Shutting down temporarily to change surge protectors. <Hal9000> is there a "powered by ubuntu-server" logo or something? #ubuntu-server 2006-04-02 <unary> hi all <harisund> People, could someone please explain if doing hostname <new_name> breaks the system? <harisund> I tried to do that, and now whatever I do I get an error, saying the hostname couldnt' belooked up using gethostbyname() <harisund> and my /etc/hostname still has the old name only ! I can't even sudo reboot ? <harisund> vi /etc/hosts <deejross> hello, can anyone help me with a jabber server problem? #ubuntu-server 2006-04-03 <pab1> can some one here help explain a couple things about ssh <pab1> ? <infinity> ? <pab1> Well im having trouble grasping onto where exactly I should be storing my pub and priv keys <infinity> private keys go in .ssh on the machine you generated them on (which is going to be the "client" machine) <pab1> ok that helps a lot <infinity> public keys get copied into .ssh/autorized_keys on the target ("server") machine. <pab1> in the home directory? ~/.ssh/authorized_keys ? <infinity> Yes, ~/.ssh/authorized_keys is just a text file, with one public key per line. <infinity> (Well, it's more complext than that, you can limit what commands can be run by that key, etc, but by default, it's just "one key per line to allow access") <pab1> ok cool <pab1> so i just create the auth_key path in any accounts home directory on the server? <pab1> then copy my pub key in auth_keys <pab1> and im good? <infinity> It's a text file, not a directory. :) <infinity> But otherwise, yeah. <pab1> o ok <infinity> (And make sure the permissions are right on the directory...) <infinity> ~/.ssh must be owned by the user, and must be 0700 <pab1> MUST be 700? or is that best practice? <infinity> MUST. <pab1> :o <infinity> sshd will tell you where to go and how to get there if it isn't. <pab1> haha <infinity> (And won't let you log in) <pab1> ok one more thing... if I put multiple pub keys in the auth_key FILE ( :) ) then each of those clients can login as that user <infinity> Yup. <pab1> if that is the case, how would I login from the client? with the server account (ssh severacct@host) or with client account (ssh clientacct@host) <infinity> serveracct. <pab1> ok <pab1> thanks a lot man, uve been a huge help! <infinity> When you do "ssh foo@host", it authenticates on the remote end as "foo". <infinity> What user you are locally is irrelevant. <pab1> got it <infinity> No different from "ftp user@host" or "http://user:pass@host/" :) <pab1> ya i see now, just the fact that the client will have a different priv key confused me a bit <infinity> The name on the key (for instance, mine say "adconrad@cthulhu") is just a comment so you can have a vague idea of where it came from. it's meaningless to sshd. <infinity> It's only the long hex string that matters. <infinity> Or, ASCII, in the case of DSA and RSA keys for SSH2. <infinity> But, yeah. That long string (and the tag before it that says what sort of key it is, ssh-dss, etc) is what's important. <pab1> gotcha <infinity> sshd completely ignores the "user@host" comment on the end of the pub key, it's just a helpful comment for you to remember that you generated that key on host "foo" with user "bar". :) <pab1> so I could tecnically edit that last comment with no real change to the keys function? <infinity> Also handy if you're setting up a semi-insecure shared account, and douglassanchez@example.org send you an urgent (signed with GPG, I hope) email saying that he needs his public key changed... You'll know which one to delete. :) <pab1> not that I really have a reason <infinity> Editing the comment to be more informative can be done, yes. <pab1> haha <pab1> welp i'm gonna try all this out <pab1> thanks again! <infinity> Have fun. <infinity> Don't forget to save the backscroll until you're sure how it all works. <infinity> No one likes people asking the same questions twice. ;) <pab1> im logging this :D <pab1> very helpful <pab1> are you a unix admin? if you don't mind me asking <infinity> By trade?.. Probably... I currently work on Ubuntu fulltime, though. <pab1> awesome <pab1> i like your OS :-P <infinity> Thanks. I'm rather fond of it too. :) <pab1> or distro i should say <pab1> let me pick your brain on this... is there a way to use samba as a central login for win and linux? Linux mainly being the one that I'm not sure on <yves> use <yves> pab1, a very nice, but not really simple, way is to use samba+ldap <pab1> hmm. is there a straight forward way to do it or is that really the only route? <yves> you can use smbpasswd as your auth backend <pab1> i prolly should learn ldap anyways <pab1> maybe ill just do that <pab1> i use smbpasswd currently <pab1> just for file and print sharing tho <yves> you'd better first setup a domain using smbpasswd, then move on to ldap <yves> then it's just a matter of setting your samba server as a login server <yves> one line change :-D <pab1> hmmm <yves> that would'nt work for linux local accounts, though <yves> only windows logons and file sharing auth <pab1> ya thats the thing <pab1> I actually did that before then run into the no linux login thing and the no admin group thing <pab1> ldap will allow for at least an admin group right? <yves> yes, it will solve both problems <pab1> bah <yves> its learning curve is high, i think <pab1> im gonna have to wait till after finals i think <evilmonkey> hi <Pygi> hi evilmonkey <evilmonkey> is this the place to ask question about installing java sun sdk <Pygi> dapper, breezy? you want java sdk on server?? <evilmonkey> brezzy, no, local for development with eclipse <Pygi> #ubuntu <evilmonkey> ok <evilmonkey> thankyou <Pygi> yw <Jeeves_> Hi there #ubuntu-server 2006-04-04 <bip> anybody has experince with ltsp running on dapper ? <fabbione> bip: -> #edubuntu <bip> ok <bip> grazie fabbione <bip> ma ho risolto ;-) <bip> maybe ;-) <Bakgat> hi all <Bakgat> anyone here well versed in networking on an ubuntu system (interfaces, shorewall, etc) <Pygi> Bakgat: what exactly do you need? <Bakgat> Hi Pygi <Pygi> Hi Bakgat <Bakgat> I've set up a mail server based on instuctions from http://flurdy.com/docs/postfix/#install_pack <Bakgat> very detailed & helpfull <Bakgat> Everything seems to have gone ok (took me better part of a whole day to set up). but i ca't seem to access the networks. <Bakgat> I originally set it up with only a single NIC, detailed in /etc/network/interfaces <Bakgat> i've atempted to fill in as much detail in /etc/shorewall/* , but i seem to have missed something, cause if i ifconfig, i only c the loopback <Bakgat> this box is going 2 act as mail & web server from a dnz zone. i have a seperate box that acts as a router/firewall/proxy/etc <Bakgat> my firewall will transparrently route traffic & handle security from internet, wired network, wireless network & dmz, but that's a topic 4 another day <Bakgat> where do we start? <Bakgat> the mail service & some other services seem ok <Bakgat> i just can't get the nic to gell <Bakgat> Pygi, u still there? <Pygi> Bakgat: not really, and yes :-/ <Bakgat> so, what do u suggest? <Pygi> tried restarting "networking"? <Bakgat> yip <infinity> You're configureing your network in /etc/network/interfaces? <infinity> And does "ifup eth0" (or whatever interface) work? <Bakgat> yip. will give detail soon <Bakgat> nope <infinity> Do you get any errors? <Bakgat> networking/interfaces set to dhcp 4 now <Bakgat> checking log not <Bakgat> now <ivoks> ifconfig | grep eth0 <ivoks> check out if kernel recognized your nic as eth0 <ivoks> or maybe some other nic is eth0 (this is not so rare as it seems) <Bakgat> ok. where/how do i do that? <Bakgat> ifconfig only lists loopback <ivoks> in konsole/terminal <infinity> "ifconfig -a" to show interface that aren't up. <Bakgat> ok. hang on <infinity> s/interface/interfaces/ <ivoks> may bad... <ivoks> dmseg | grep eth0 <ivoks> not ifconfig :) <Bakgat> cool! sees all nic, just not assigning adddr. <Bakgat> not seeing dmseg cmd <infinity> Kay, then your /etc/network/interfaces is wrong. :) <ivoks> mii-tool? <Bakgat> mii-tool, check <Bakgat> eth0: Bad addr, eth1 op not supp <Bakgat> no MII interfaces found <Bakgat> bad network/interfaces? <ivoks> eth0: bad addr? <Bakgat> will set interfaces 2 static in interfaces <ivoks> huh? <ivoks> your eth0 gets ip from dhcp? <Bakgat> mii-tool reports SIOCGMIIPHY on 'eth0' failed: Bad Address <Bakgat> for now <Bakgat> wil set to static <ivoks> dont <ivoks> do ifdown eth0 <ivoks> and then manually get address from dhcp <ivoks> dhclient eth0 <Bakgat> sit0: unknown hardware addr type 776 <Bakgat> do u have skype addr? typing's a schlep <ivoks> nope <Bakgat> ok <ivoks> forget about sit0 <ivoks> what did it tell you about eth0? <Bakgat> no-go. hardware. let me just reboot with single nic <Bakgat> sweet! got a DHCP lease 669-615-7011), but not I need to set it up as static 669-615-7011/669-615-7011 for test & config, but 669-615-7011/669-615-7011 in production) <ivoks> i told you to run dmsg | grep eth0 <ivoks> that other nic was eth0, and the second one was eth1 <Bakgat> disabled eth1 in bios, dmesg picks up on eth0. gives hardware id, mac, irq, link up, no ip6 routers <Bakgat> i can c the apache server via http, but other services to working (phpmyadmin, squirrelmail) <Bakgat> *other services not working* <infinity> Bakgat: dID YOU JUST SAY 669-615-7011? <infinity> Bakgat: Erm, caps lock, sorry. <infinity> Bakgat: But, I hope that was a typo. 669-615-7011 is a routable subnet, not a private one. People own that IP address. :) <ivoks> infinity: people think 192.x.x.x is public :) <ivoks> infinity: i saw one big company with 192.192.x.x for private network :) <Bakgat> once in production i'll change the networkning & shorewall. i'm setting up the server @ home office <infinity> ivoks: You mean private, I assume. :) <ivoks> infinity: right :) <infinity> Bakgat: In the 192 space, ONLY 669-615-7011 is private, no other 192.x subnets. <infinity> (If you really need more IPs than a class B, though that seems unlikely, use 669-615-7011, which is entirely private) <ivoks> Bakgat: if you need class A, take 10.x.x.x <ivoks> lol <Bakgat> i'm planning the networks from my firewall's PoV into 3 seperate network classes. DNZ in class C, wired network class B, wireless class A. have i got it wrong? <infinity> And I always forget the other one... 172.something? <infinity> Bakgat: Almost certainly. <ivoks> infinity: that one i froget too... <ivoks> Bakgat: you need three class C networks <infinity> Well, or three much smaller networks. <Bakgat> been a while since i've done subnetting, so i'm a bit rusty. used a subnet calc to determine networks <infinity> classless subnetting is the future. <ivoks> Bakgat: for example, 192.168.1.x, 192.168.2.x and 192.168.3.x <ivoks> why bother with subnetting? <ivoks> in this case... <Bakgat> i'd like to seperate networks by subnets so that one network cant accidentaly stumble upon another <ivoks> subnetting is ok only for public subnets <maswan> infinity: 172.16 - 172.31 <ivoks> maswan: right :) <infinity> maswan: Thanks, you ever-loving fount of useless knowlege. :) <maswan> We use that here, actually <infinity> Sure, use the one that's hardest to remember. Makes sense. <ivoks> :) <infinity> I always use 669-615-7011, because I'm a lazy typist. :) <maswan> Since 10.x is used by the networking people and 192.168 is used alot <maswan> Ok, as long as the campus networking people do things right, we never notice. But... ;) <Bakgat> ok. lets assume this server will sit @ 669-615-7011/669-615-7011 <ivoks> Bakgat: that's ok <Bakgat> i'd still like to put my other networks on seperate subnets, but that's an exercise for another day <ivoks> Bakgat: ? <ivoks> Bakgat: put the other one in 192.168.1.x <ivoks> and there you have it <Bakgat> I'll go mod my networks/interfaces file quiqly. cool? <ivoks> on different subnets, one can't go to the other <Bakgat> that's the idea <infinity> Well, not really true. <infinity> If they're the same physical network, you can easily hop from one to the other. <ivoks> infinity: what's true these days? :) <Bakgat> the router/firewall must handle routing (i use IPCop) <infinity> But, shhh. <ivoks> infinity: nothing can prevent that :) <Bakgat> i'm looking @ LDAP on a seperate server, but also an exercise for another day <infinity> I was rather surprised to discover that my AUD 150 hunk of junk DSL modem/router actually does VLAN switching. <infinity> Not that I need VLANs at home, but neat anyway. <ivoks> ah, i'm using wifi broadband :) <Bakgat> ok, so I set my networks/interfaces to static as detailed in http://flurdy.com/docs/postfix/#install_pack <Bakgat> now what <Bakgat> net to fix static 2 nic <Bakgat> do I need to set up shorewall next? <Bakgat> would eth0 b net or loc on shorewall in the current stup <Bakgat> would eth0 b 'net' or 'loc' on shorewall in the current setup? * ivoks doesn't use wizards :) <Bakgat> cool. set up my dhcp server to issue lease to server based on mac (will lock down later) <Bakgat> now, how do I configure my shorewall files (bit confising) #ubuntu-server 2006-04-06 <Bakgat> top of the mornin 2 ya <z> hey I am having some trouble with postgresql <z> I cant get version 8.0 running <z> how do I update the locate database #ubuntu-server 2006-04-07 <nictuku> how reasonable is it to expect, in the long run, that ubuntu acts like a "Debian Enterprise" - but in the sense that it is supported by products of major players like Oracle? <nictuku> that's a possibility I'm really excited with about ubuntu server. <nictuku> But as I didn't see it mentioned in the UbuntuServer, I don't know if it is in the agenda. <nictuku> I only know that IBM's DB2 is homologated (is this wording fine?) for Ubuntu. <neuralis> nictuku: we're working onit. <neuralis> on it, even. <nictuku> nice :-D. is there any public information available somewhere? <neuralis> not at the moment, no. <nictuku> how can volunteers help on that? <nictuku> I mean, technically <neuralis> ISV certifications are a pretty finicky and particular process. we appreciate your willingness to help, but i'm afraid the process mostly has to be left to canonical. <nictuku> I thought so, but it wouldn't hurt to ask. <neuralis> certainly. and if you have contacts at ISVs, convincing them to get in touch with canonical about certifying ubuntu is certainly one way to help. <nictuku> That would be a major news for, well, at least the whole Debian community. <neuralis> nictuku: rest assured, it's being taken douglassanchez@example.org. <nictuku> neuralis, would you mind if I blog about what you're saying? I think many others would be interested <neuralis> nictuku: actually, i would. i'm not a canonical employee. <nictuku> Oh I see <neuralis> nictuku: i'm happy to put you in touch with the right person if you wanted to get the official position, though. <nictuku> I'd be interested, yes. <neuralis> nictuku: Malcolm Yates <douglassanchez@example.org> <nictuku> thank you <neuralis> nictuku: sure. you're also welcome to quote me as a member of the server team, as long as you make it perfectly clear it's unofficial and not coming from an employee. <nictuku> sure <nictuku> there is this mail from Mark Shuttleworth mentioning ISV certifications, which helps http://lwn.net/Articles/175272/ <nictuku> by the way <nictuku> There's a lot of road to run until official communication doesn't just help fostering the idea that ubuntu is only about desktop. <neuralis> yes, that's an unfortunate problem with our marketing. we're debunking some of it in the server chapter of the official ubuntu book, soon to be released, and i'm working on some extra advocacy efforts for ubuntu server. <nictuku> that e-mail just reinforces that <neuralis> i disagree. a lot of that e-mail is desktop/server agnostic. <neuralis> testing, certification and 24x7 global tech support apply equally to servers and desktops, for instance. <nictuku> most part of it <nictuku> We would like to show that a <nictuku> Debian-based distribution can deliver the same world class desktop punch <nictuku> that you might traditionally expect from Novell or Red Hat. <nictuku> (quote) <neuralis> right. it would have been nice to have ubuntu server mentioned there, and i'll talk to mark about mentioning it next time, but the word about ubuntu server is definitely getting out. <neuralis> and we're still a young effort, with a lot of the really nifty features planned after dapper. <nictuku> Another issues that worries me, and I'm sorry if that has been discussed too much (not in the ubuntu-server list, though, which I read), are the blessed server packages. <neuralis> what worries you? <nictuku> sure, and we're excited with all that. I'm even trying to help with what I can, implementing one of the specs. <neuralis> nictuku: hm? <nictuku> well, from a sysadmin point of view, this idea that only a part of main will have long time support is confusing, and even maybe useless sometimes. <neuralis> nictuku: i didn't understand the "we're excited with all that" message, was that aimed for a different channel? <nictuku> sorry, I meant excited with the server effort. <nictuku> and "we" I meant, the community <neuralis> ah, cool. which spec are you working on? <nictuku> network wide updates <nictuku> even having main and universe is confusing. <neuralis> as for only part of main being supported, it makes sense. the alternative is a different archive for server and desktop ubuntu, and that's really best avoided. <nictuku> I know the reasons, I'm just thinking from a marketing and user point of view. <nictuku> https://dev.ubuntubrasil.org/trac/nwu <neuralis> looks neat! i'll have to take a closer look later. <nictuku> thank you. I hope the PyGTK interface we're working on will be coolness compliant. <neuralis> i don't think i've seen this mentioned on ubuntu-server, can you post about it there? <neuralis> hmm. why did you choose to go with SOAP? <nictuku> no, xml-rpc <nictuku> Used SOAP, then moved to xml-rpc <neuralis> good. the wiki mentions SOAP, i'll correct it. <nictuku> thank you <nictuku> I'm currently working on the packages so testing can be easier. <neuralis> great. please do post about it on the list, this is something that'll interest a lot of people, and you can benefit from the added testing. <nictuku> A Debian developer friend of mine have even offered to send it to unstable already <nictuku> and it's on revu too <nictuku> right, I will, despite being very afraid of disappointing testers. <neuralis> disappointed testers are much better than apathetic testers. <neuralis> disappointed testers complain and tell you what's not good, and then you can fix it. <neuralis> also, in a tool like nwu, security is paramount. you'll want to find a security person or two to give you a review before making the case for distro inclusion. <nictuku> yes, that a major concern <neuralis> i'm happy to do a security review of this in a month or so when my schedule clears up, so feel free to mail me around then and remind me to do it. <nictuku> and one of the reasons I didn't mention it in the lists, because there are known unresolved security issues already. (clients always accept server SSL certificate) <neuralis> well, you shouldn't let these things prevent you from asking people to test it. no one expects a perfect product on the first go. really. just mention the unresolved issues, and it'll be fine. <nictuku> you're right, but i still have to convince the perfectionist part of myself of that <neuralis> i empathize; i'm the same way ;) <nictuku> my idea was to ship a very basic set of features, but a nice, stable and safe set of features. <nictuku> the features are there already, I'm working on making it stable and safe. <nictuku> and, argh, writing documentation <nictuku> can i have your e-mail address? I'll contact you next month then, if you don't mind. <neuralis> nictuku: douglassanchez@example.org <nictuku> thank you <neuralis> sure. thanks for your work on this! <nictuku> I hope the CC recons that on the monday meeting :-). <neuralis> hm? <nictuku> i'm on the process of being accepted as a ubuntu member. That's on the community council meeting agenda.. <neuralis> cool. <tarvid> with a default postfix and fetchmail install, which is the easiest imap server to use with mbox? <yves> hi <nictuku> Are there plans to LSB ceritication in Ubuntu? Mark Shuttleworth has once mentioned that "If we were to do LSB for Ubuntu, it would be done directly rather than as a compatibility layer.". So I guess that Ubuntu would rather take the long path of making Debian LSB-compatible - which seems to be the RightWay. <ivoks> we should really include new samba :/ #ubuntu-server 2006-04-08 <tarvid> on one of my workstations I installed moodle and php5 which all went well enough. <tarvid> then I installed mirrormed - it wanted php4 <tarvid> i found both installed on this machine but libapache2-mod-php5 was installed <tarvid> i installed libapache2-mod-php4 and broke everything <tarvid> any secrets to the php4/5 dilemma? <infinity> Yes, don't install both. * infinity can't find this mirrormed package you speak of. <tarvid> mirrormed is a GPL medical practice management system <infinity> Yes, Google tells me that. <infinity> But I don't see any package of it that requires php4. <infinity> If you're installing it from source, what makes you think it won't work with php5? <tarvid> it is easy to say don't install both but sometimes one does not know in advance <tarvid> the install scripts check php version and stop if it is less than 4.3 or greater than or equal to php5.0 <infinity> Well, you can't install libapache2-mod-php5 and libapache2-mod-php4 together. They conflict with each other. <infinity> So fix the install script to be more lenient, and see if it works with php5? <infinity> If not, then I suppose you need php4 instead of php5, or you need to run one as a CGI. <tarvid> I did patch out the test on php version and died in a related place so i tried to revert to libapache2-php4 <tarvid> but I am intrigued by your suggestion of running one as CGI <tarvid> how would one go about that? <infinity> With a fair amount of unnecessary pain, generally. <infinity> You're better off not bothing unless you KNOW it's required. <infinity> (It will require mass renaming of some PHP scripts, etc) <infinity> You're better off figuring out where/how/why your install script dies and fixing it, I suspect. <infinity> You can force php5 to be "almost like php4, but not quite" by enabling the zend.ze1_compatibility_mode flag (perhaps only in the vhost serving mirrormed) if it's really necessary. <tarvid> This machine does not have to run other applications, machines are cheap <infinity> Well, if the only application it needs to run is mirrormed, and you're pretty sure it needs PHP4, then just use PHP4. <infinity> But then you're stuck not being able to run stuff that definitely DOES require PHP5, that's all. <infinity> While php5 has some backward compatibility options, php4, oddly enough, doesn't have any forward compatibility flags. :) <tarvid> my tech insists he didn't install php5 intentionally, is there a way to get the installation history to know when it came in? <infinity> If you installed the moodle package, that's what pulled it in, yes. <tarvid> I did that on my machine but he has performed at least two fresh installs on a different machine <infinity> Well, unless you install some PHP application that depends on it, nothing will pull it in "by default"... We don't install any PHP interpreter by default. <infinity> If you install php4-pear, that will bring in some php5ish packages, but that's not the same as "having PHP5 installed in apache"... Only libapache2-mod-php5 will do that for you. <infinity> So, make sure apache is using libapache2-mod-php4, and you're set. <tarvid> thanks, it may be working <nictuku> infinity, are you there? <infinity> nictuku: I am, but just heading out. <infinity> What's up? <nictuku> ah ok <nictuku> I was wondering if you could show up in the #ubuntu-meeting and say "yes I remember this guy. he's working on nwu", since no one from my small fan club appeared (07:00am here). it could take a few minutes though, and since you're leaving, thanks anyway :-) <infinity> Well, I haven't had a chance to look at or tst any of your code, so I wouldn't be a very good advocate anyway. <Nrbelex> Hi - I'm learning through experimentation and so far I've setup Apache and registered a domain name from godaddy and created a tiny test website in my www folder. I registered at Zoneedit and am waiting for a response. I installed the ez-ipupdate package (but can't find it, if there is something to find in order to configure it). I opened port 80 on my router and can access the site from my... <Nrbelex> ...IP address in the address bar. I don't understand how I do binding or if I need to and how to use a name server or anything. At this point, I'm thoroughly lost. Any help would be greatly appreciated. <neuralis> Nrbelex: you'll want to edit your domain in godaddy, which provides free DNS services, and create an A record that points your domain to your IP address. <Nrbelex> neuralis: looking for that on the site now... thanks <Nrbelex> neuralis: I'm not seeing it on Godaddy <neuralis> actually, if you're doing this with a dynamic IP (which is what i'm guessing you want to use zoneedit and ez-ipupdate for), you'll want to edit your domain at godaddy, and put zoneedit's DNS servers instead of godaddy's. <neuralis> put =~ set it to use. <Nrbelex> neuralis - I registered with them but they haven't gotten back to me yet - how do I do that? <neuralis> Nrbelex: http://www.zoneedit.com/doc/dynamic.html <Nrbelex> neuralis right but how do actually transfer the domain or will that come with my registration E-mail? #ubuntu-server 2006-04-09 <maswan> Setting up snmpd (5.1.2-6.1ubuntu2) ... <maswan> Couldn't create /home/snmp: Read-only file system. <maswan> gah! <Jeeves_> Nice :) <maswan> Of course it can't create it! <maswan> I have centralised home directories <lionelp> maswan: juste install snmpd before lanching automount :) <maswan> lionelp: No automount, AFS. <maswan> And I'm not about to unmount it <maswan> which means hacking around in inst scripts etc. <maswan> bleh. <lionelp> but i agree, snmpd could have a home somewhere else (in /var for exemple) <maswan> yeah * alleeHol wonders why /srv/snmp isn't used. /home/ does not seem the right place <maswan> Should be a clear debian policy violation too, but I don't know how well in sync this is with the debian package <lionelp> it is the same in the debian package IIRC <maswan> lionelp: do you happen to have a sid system around to verify? I don't, otherwise I'd be submitting this to the debian BTS too. <lionelp> I was wrong, in sid, the home is /var/lib/snmp <lionelp> I have a sid in chroot <lionelp> maswan: but is is not the same version <lionelp> sid : Version: 5.2.2-3 <lionelp> , Dapper : Version: 156.14.161.142-4ubuntu1 <lionelp> maswan: you filled a bug ? <infinity> maswan: Eek. Is that on breezy? <lionelp> oh infinity you are right, it is not any more the case in Dapper ! <infinity> It isn't? <infinity> Looking at the package, it still should have the same bug. <lionelp> no, not any more <lionelp> it was the case in breezy <lionelp> sorry <infinity> No, looks like dapper has the same bug to me. <infinity> (sid doesn't) * infinity fixes. <lionelp> infinity: you are right, i forgot to exit chroot after checking Debian.... <maswan> infinity: Oh, nope. Breezy. <infinity> maswan: Yeah, it's buggy in dapper too. Ficing there. <infinity> Fixing, even. <infinity> Not going to fix it in breezy-updates, not really critical enough. <maswan> infinity: ah, great. <maswan> infinity: yeah, the workaround should probably be somewhere findable though, but I don't really know how. <infinity> Edit the postinst and add --no-create-home to the adduser call, then try again. :) <infinity> adduser --quiet --system --no-create-home --home /var/lib/snmp snmp <infinity> That's what it'll look like in dapper in a few minutes. <maswan> it runs fine without a home? <maswan> or does /var/lib/snmp already exist for other reasons? <infinity> maswan: /var/lib/snmp is shipped in the package. <infinity> maswan: You might want to "chown -R snmp /var/lib/snmp" after the package installation, though (the new package in dapper will do so) <tsurc> Hi, kind of a newbie here. I have a HP DL140 G2 server (Read 2*Xeon 4gb Ram 2*80Gb sata HDD) Do I install 686-smp or -server kernel for best performance using dapper? <exobuzz> im considering running ubuntu server edition. I use kubuntu on a desktop machine. Im thinking to try breezy on a server (well.. on a intel mac mini).. wondered what I can expect in comparison to say debian stable in terms of packages/support/stability ? <tsurc> I'v looked on the wiki and other places, but draw a blank, what s ther difference between the server kernel and the others. What so special about it? <exobuzz> maybe things like v4l etc left out <tsurc> does it have smp support? I have a dual xeon server I want to get Windoze off and liberate it <tsurc> but I want to get the right kernel installed for the job. like having a 386 kernal on a dual xeon isn't good right? <exobuzz> well i guess it wont run quite as well.. <infinity> tsurc: You want the -server kernel most likely. <infinity> exobuzz: You won't get it to install or boot on an Intel Mac Mini. <infinity> exobuzz: We're hoping to have all the pieces in place for that to work in some sane fashion for dapper. <infinity> exobuzz: As for comparing to stable, I try pretty hard to make sure that our releases compare in quality. Package selection is nearly identical (for obvious reasons), and support tends to be a bit quicker (security support, especially) <exobuzz> infinity: why won't i get it to install ? <exobuzz> infinity: I'm smart you know :-) <infinity> Because the Intel Macs aren't like other Intel systems. <infinity> They're EFI based, not classic PC BIOS based. <exobuzz> ive already got elilo up and running <exobuzz> :-) <exobuzz> just compiling the kernel now ready to boot a live cd and bootstrap ubuntu <infinity> Oh, if you're already on your way, then fine. If that's the case, I can't imagine why you'd need to ask the other questions (like how package selection compares between sarge and breezy) <exobuzz> infinity: it was more a general question. i didnt mean package selection, i meant quality of packages etc.. configuration level of packages <infinity> Pretty darned similar. <exobuzz> ok <exobuzz> :-) <infinity> We don't fork the server stuff very far from Debian. <exobuzz> im a little worried about myself btw, as i booted up osx for the first time today. and kinda liked it. should i see a doctor ? <exobuzz> :-) <exobuzz> i mean.. eye candy mental but <infinity> And half the stuff you'd want to install on many home servers (postfix, apache2, php5, mysql, postgresql, etc) is maintained by Ubuntu maintainers in both Debian and Ubuntu. <infinity> (ie: Me) <infinity> And yes, you should see someone. :) <exobuzz> and 3rd party support? for example debian stable users can go and install the dotdeb packages for latest php/mysql.. obviously ubuntu is more up to date that stable anyway. <infinity> I like to look at OSX, but I can't stand using it. The fact that it's painfully slow on REALLY FAST hardware doesn't sell it to me as a desktop, and as a server, it's just a bit too.. Quirky. <exobuzz> i wouldnt know where to start to use it as a server. everythyings in the wrong place :-) <infinity> exobuzz: I wouldn't recommend anyone, Debian or Ubuntu users, install anything from dotdeb. Ever. So, you're asking the wrong man. <infinity> I've dealt with more bug reports coming from those packages being broken, because he just blindly mangles and backports my packages with very little thought on his part. <exobuzz> ok.. actually i dont use dotdeb.. because my other server is a powerpc mac :-) (and they dont supply powerpc packages) <infinity> But I'm not bitter... <exobuzz> aah i see ok <exobuzz> the main reason im considering ubuntu, is that I really dont want to wait 2 years for the next debian stable :-) <infinity> But, in general, some people do provide 3rd party repositories, we also provide our own "backports" repository that will often contain backports of sources from release+1 <exobuzz> great <infinity> (So, breezy-backports has many backports from dapper, hoary-backports has many backports from breezy, etc) <exobuzz> yeh i use some on my desktop kubuntu <infinity> Not recommended either, you're generally better off using the stable and supported packages, but hey. If you're a bit nuts, go for it. <exobuzz> and ubuntu/kubuntu is great for the desktop.. really lovely <infinity> You won't have to wait 2 years for Etch. :) If all goes well, it should be a Christmas release, give or take. <exobuzz> i take it breezy has php4 as well as php5 ? and for compatibility i wonder if it has the 3.4 or.. <infinity> Debian's aiming for an 18 month cycle these days, while Ubuntu is a 6 month cycle, I think they should complement each other well. <exobuzz> hmm.. christmas.. thats a long time to be living with an old php :-) <infinity> breezy has 4.4.0 and 5.0.5 <exobuzz> 4.4 has compatibility issues with functions returning constants or something doesnt it. hmm <exobuzz> it gives notices on them at least <infinity> And well it should. <exobuzz> they changed something from 4.3->4.4 <infinity> You shouldn't display notices in production anyway. <infinity> (And you should fix the buggy code) <exobuzz> :-) <infinity> It was always incorrect to do the things that started throwing notices in 4.4, we just forgot to throw notices.. <exobuzz> what if i really like ubuntu server.. then i will want my other server to run it. but its 100 miles away <exobuzz> damn :-) <infinity> Anyhow, if you really want 4.3, there's a slim chance that the 4.3.10 packages from sarge will install on breezy. <infinity> I do remote distro switches all the time (usually because leased machines come with Fedora or CentOS installed, and I want to switch them to Debian or Ubuntu) <infinity> It's not terribly much effort. <exobuzz> any tips ? im not sure id know where to start.. <exobuzz> :-) <exobuzz> websvn on sf can be painfully slow.... grrr <infinity> Get debootstrap. debootstrap $distro_of_choice into /newroot. Install a static shell (with enough builtins to pull off this trick). Run static shell. rm -rf /(anything not /newroot). mv /newroot/* /. Make sure bootloader is configured and installed on bootblock. Reboot. <exobuzz> oh yeh <exobuzz> that makes sense <exobuzz> :-) <infinity> Things to watch out for: Make sure you set a password for at least one user (a regular user with sudo or a root user) in the /newroot chroot when you were creating it. Make sure to install sshd so you can get back in. Don't screw up the kernel and bootloader setup. <exobuzz> which static shell do you use ? <infinity> sash works well. <exobuzz> thanks <infinity> I do this on a regular basis, and mostly from muscle memory, so I may have left out a few steps, but you get the general idea. <infinity> Just make mental checklist of "ways you can screw yourself" before you reboot and find yourself locked out. <infinity> The first time I did this, I created an initial user... Without sudo access.. And didn't set a root password. <infinity> The funny half of this story is that the kernel I installed was the woody d-i kernel that had a known root hole, so I rooted myself to get access to the box. <infinity> Beat calling up the hosting provider and paying them 50 bucks to reimage with RedHat so I could statr all over. <exobuzz> hahaha! <exobuzz> *phew* <exobuzz> ok.. out of all the technicalities i could stumble across whilst getting linux installed on this intel mac mini <exobuzz> how do i eject the cd :-) <exobuzz> humph.. <exobuzz> one of the buttons on the kb for sure. <exobuzz> hold f12 ! simple.. <exobuzz> im a genius! <allee> mhmm, ganglia v3 released over a year ago. Are there problems with v3 (beside that debian maintainer didn't upgrade it's pkgs) <exobuzz> got ubuntu-server up and running on my intel mac mini now! <fabbione> allee: nobody contributed packages and we had no time to do it <allee> fabbione: ok. looks like I'll to do it sooner or later ; <allee> exobuzz: congrats <exobuzz> :) <allee> bbl <tarvid> anybody working with ipp2p or l7-filter? <danf_1979> Hi <danf_1979> any tutorial for installing apache mod_security? the debian package seesms unavailable from the repos <bpuccio> danf_1979: http://packages.ubuntu.com/breezy/web/libapache2-mod-security it seems mod_security is there <bpuccio> for warty, hoary and dapper as well #ubuntu-server 2006-04-10 <nictuku> if anyone has time to test nwu, it seems stable enough for testing: https://dev.ubuntubrasil.org/trac/nwu/wiki/DownloadNwu <Toadstool> hey o/ <Toadstool> I knew I was missing an important ubuntu channel ;) <Kolan> Hi, Im about to setup a Dual Xenon EM64t server serving Apache/PHP/PostgreSQL on 4GB Ram. should I choose the AMD64 version of ubuntu? <Kolan> or would it be the same to use the regular? <infinity> Kolan: Yes, you want the amd64 version. <Kolan> infinity: thanks for the response, I was looking on the server wiki which is linking and talking about that Drapper is the build to use. Should I be safe to install that even though its not a stable release? <infinity> Safe? I suppose. But it's not released and not supported. <infinity> Where does it say to use dapper in production? <Kolan> its not saying anything about to use it in production <Kolan> but it describes it as it was a production release.. would you recommend me to install Breezy? <infinity> Well, if you want stability in production, you want breezy. <Kolan> as this server is to be in production <Kolan> ok <infinity> If you don't mind upgrading occasionally for the next couple of months and helping us find and fix bugs, dapper's cool. <infinity> I certainly don't mind people testing dapper and filing bugs for me to fix, just as long as you're aware that it's an unstable release, and you don't scream to loudly if we occasionally goof it up. <infinity> If it's a production box, please install breezy. :) <infinity> And after you install it, you'll want to install "linux-amd64-xeon" to get the Xeon-tuned kernel for your CPUs. <Kolan> ok.. is that even though I install the AMD64 version? <infinity> Yes, the amd64 installer will install "linux-amd64-generic" which is a very generic amd64 kernel that runs okay on Athlon64, Opteron, and Xeon systems. <infinity> The tuned kernels (-k8, -xeon, etc) run better on their target platforms. <infinity> This is no different from the i386 install, which installs a -386 kernel by default, but you may want -686, -k7, etc. <Kolan> okay.. is there any special kernel for smp aswell? <infinity> The xeon kernel is SMP-enabled. <Kolan> ok <infinity> (based on the argument that none of us have ever seen a useful Xeon system that wasn't SMP) <Kolan> I've been struggeling to get Debian up an running on this server for a week, but as their kernels are to old it dosn't work with the configuration I've <infinity> breezy should be okay... <Kolan> ok :) we'll see <infinity> If the system really does have a lot of incredibly shiny new hardware, you may be stuck having to try a dapper install CD. <Kolan> mm.. it shouldn't, it runs well on xBSD <infinity> Hey, the BSDs beat us to new hardware support sometimes. :) <infinity> (Though, not often) <Kolan> well according to the company that deliverd the server it has runned on FreeBSD for almost 1.5 years <Kolan> with this hardware <infinity> Oh, then yeah, it's crusty, old, and will happily run Ubuntu. :) <infinity> Probably even Warty or Hoary, if you feel like going back in time. <infinity> (warty not recommended, we just dropped support for it) <Kolan> I'm burning out the Breezy AMD64 CD right now <Kolan> so no worries about older version are needed <Kolan> what about when the Drapper's going stable, is it possible to upgrade than? how is that working..? <infinity> Dapper, not Drapper. :) <Kolan> sorry <infinity> And yes, dist-upgrading between releases is generally painless. <Kolan> ahhh... Ubuntu seems to be a dream :) <Kolan> how big should the SWAP partition be if I've 4GB of Ram <infinity> As big as you like. <Kolan> so theres no general rule about 2xRam-size <infinity> If it's not going to be a massively loaded machine, it may never swap anyway, but if you have plenty of disk, it doesn't hurt to have swap. <Kolan> ok <infinity> I usually do RAM*1.5, but that's just force of habit, no hard rule. <Kolan> ok <Kolan> I've also been recommended to use JFS as filesystem on /var since databases works better on those. is this something known? I've never heard about it before <infinity> I wouldn't recommend it, personally. <Kolan> any special arguments for that? <infinity> Stability, peace of mind. <infinity> The two most stable filesystems on Linux currently are ext3 and xfs. <infinity> I generally use the former, unless I have a wonderfully good reason to use the latter. <infinity> (because the latter still has a few really weird corner-case bugs that confuse people sometimes) <Kolan> okay <Kolan> than I'll go for EXT3 on all my partitions <jurjenst> I had some real problems deleting 200k files from a ReiserFS once... I don't recommand that FS to anyone <jurjenst> it could be better with the newest version of it but it was a pain.. took several hours to delete the files <jurjenst> What is the experience here with checks of EXT3 when the server is reset 20 times? Do you disable the check or just let all the users wait till it is finished? <Kolan> where can I find documentation on the server version? I'm thnikn of installation.. <Kolan> or when I get to boot: <Kolan> shall I run: server <jurjenst> Kolan: server installs only the minimal software... <jurjenst> no X, Gnome or KDE <jurjenst> so you login on the prompt and install whatever you like to run <jurjenst> something like: apt-get install mysql-server phpmyadmin <Kolan> hmm.. I was thnikin of when booting a server iso CD and get to the installation "boot:" prompt <Kolan> I was just hitting enter <infinity> jurjenst: I tend to tune2fs and remove the "maximum mount count", but leave the "maximum mount age", so 30 reboots won't cause a fsck, but rebooting after a long time up will. <jurjenst> infinity: thanks... I'm not totally sure what to install on servers... downtime is allways annoing ubuntu drake boots up fast... that is really nice... #ubuntu-server 2006-04-11 <Dre> hello. I have been using windows and just windows. I would like to know if ubuntu is suitable for a newbie like me to learn the ropes of making a webserver, nameserver and other hosting services. In need of help thank you.. <hunger> Keybuk: That works after the system is up. <hunger> Keybuk: But the kernel expects /dev/mapper/$VG-$LV. <hunger> Damn... wrong channel again! <dereks> hello. have you guys seen freenas? Is the goal of ubuntu-server to make a distro like freenas (obviously linux not bsd) in terms of how well everything is integrated and ease of use? <spike> hi guys <infinity> dereks: Not really, no. (Well, Ubuntu in general is well integrated anyway, but ubuntu-server is targetted currently at the datacentre and hosting provider types, more than "all in one appliances") <infinity> Though, people could easily use ubuntu-server as a base to create a greate distro for appliances. <dereks> infinity: ok <dereks> i really like that project, just wish i knew bsd enough to truely use it :) <dereks> maybe there will be an ubuntu-nas offshoot #ubuntu-server 2006-04-12 <ToadZzZztool> before I go to bed I'd like to join Ubuntu Server Team 'cause I'm a sys&net admin in a little network (only 500 hosts and 12 servers) and a student in network engineering... are there any requirements? <ToadZzZztool> anyhow, good night here too ;) <allee> Hi, I had a douglassanchez@example.org. Looks like no ServerTestingTeamTemplate yet. :( <allee> Is it okay to add something like ServerHardware/SunGalaxy ServerHardware/SunGalaxy/X4100 ServerHardware/SunGalaxy/X4200 ditto for DellPowerEdge that are more like a linux on laptop pages? I.e. a page that contain known issue. tools, tips links to other links pages in Web? <spike> 'lo ubijtsa <ubijtsa> lo spike <spike> how do you do man? <ubijtsa> not bad.. WFH today, and trying to do some of the stuff remotely is a pain <spike> ubijtsa: like? <ubijtsa> running mozilla over a reverse ssh tunnel <spike> no vpn/vnc? <ubijtsa> nope <ubijtsa> not to the network I need to access <thefish> ubijtsa: reverse ssh tunnel? <ubijtsa> thefish: yeah, you ssh from box1 to box2 with something like "while true; do ssh box2 -R 2222:localhost:22 'while true; do echo -n . ; sleep 60; done'; done" <ubijtsa> on box2 you can then do 'ssh -p 2222 localhost' and connect back through the ssh tunnel to box1's ssh port <ubijtsa> poor mans vpn like :) <spike> speaking of, what's going on with openssh vpn? <thefish> what benefit does it give over just normal ssh? <thefish> to run moz, i would just ssh -X box2 <spike> there's been much rumor about it, but I've never seen anybody actually doing it <spike> thefish: firewall filtering on port 22? <ubijtsa> thefish: if box1 is masqueraded, you can't get to it directly <spike> ;) <thefish> ssh -X -p2222 box2 <thefish> mkay <ubijtsa> in my case, box1 is at work, and box2 douglassanchez@example.org. <spike> apparently with openssh 4.x you can do real vpns, but I couldnt find much about it :/ <ubijtsa> I can't ssh into box1 from the net, as it is behind firewalls and NAT, but I can ssh from box1 to box2 :) <morrow> one more reason to block outgoing/incoming ssh connections. :/ <ubijtsa> morrow: hence why my sshd don't run on standard port <morrow> ubijtsa: if you have the money you can also check port 80/443 connects and break the ssl stream. :) <spike> uh? <ubijtsa> morrow: that's the type product I do QA on <spike> how would you do that without mouting a MITM attack? <morrow> ubijtsa: which one? tommy ssl? <morrow> spike: it is a MITM attack, your clients need the CA of your SSL Proxy <ubijtsa> spike: transparent proxying/routing/bridging <morrow> some companies are willing to go this way <ubijtsa> morrow: McAfee SCM <morrow> ubijtsa: Ahh <spike> morrow: that was the point, if client isnt cluesless it'll spot the MITM <spike> ubijtsa: uh, how? I dont see how that's gonna prevent that <ubijtsa> spike: when you as an employee get told that all traffic is intercepted, what choice you have? <spike> and I think this has been debated beyond the flame limits on any sec list :) <morrow> spike: well.. if your clients are not within your adminstration you shouldn't do such bad things. :) <spike> as in, you either enforce it with policies or nothing, technically u cant stop it <ubijtsa> one way of preventing IM on a corporate lan is to forbid CONNECT through proxies on http traffic <spike> ubijtsa: yes, but then employers wont be able to use any https, and that's not reasonable for quite a few places <spike> even for work purposes, as in they need to access customers' stuff and so on <ubijtsa> spike: that is where URL filtering comes in <ubijtsa> spike: trust me, there has been *loads* of work gone in to these products, and they mostly work so well you don't know they are in the way <spike> ubijtsa: ok, so you basically restrict connect to a few websites <ubijtsa> spike: or allow and log <spike> ubijtsa: I do believe you, I'm just curious :) <ubijtsa> then when you have stats, you start blocking or coaching <spike> sure sure, again, I thought you could "technically" stop it, which is something I was pretty sure you couldnt do <morrow> not without breaking the ssl streams... <spike> without stuff like the aforementioned MITM like setup, which a smart employer would detect <spike> as a non smart one isnt gonna ssh tunnel home imho <ubijtsa> one way to detect if your traffic is filtered is for downloads.. <ubijtsa> the larger the download, the longer it takes before you get any data at all, as the AV scanners need big blocks (or whole file) to work with <morrow> ubijtsa: if you work for mcafee, how about asking some developers to relase a daemon version of uvscan? :) <ubijtsa> hehe.. I could ask.. :) <ubijtsa> I sit not far from the guys that wrote LinuxScan <ubijtsa> but that project been idle/dead for ages <morrow> hmm :/ <ubijtsa> there is *some* scanner available for linux, but I have to check who is writing it, so I direct feature requests to the right people <ubijtsa> I can do that on monday <morrow> well currently its uvscan. but this is only a command
{'channel': 'ubuntu-server', 'month': 4}