#ubuntu-server 2006-02-01 <Xoritor> wow <Xoritor> thats all i have to say <Xoritor> wow <ubijtsa> Xoritor: about what... <E0x> morning <spike> 'morning E0x <E0x> squid or dansguard what is better choose ? <E0x> err squidguard* <spike> how is packages inclusion regulated? <spike> I was wondering why we should get alsa stuff by default, doesnt sound really useful on a server <E0x> true <spike> ehehe /me realizes know the "fun" of alsa-packages not 'sounding' useful <spike> :P <spike> also, I do understand you could use dapper-server to install a wifi hotspot, but what's the point of wireless-tools too? <spike> we should either include more stuff, and that's not possible, or just including wireless-tools pkg isnt that useful imho <spike> and uhm, pcmciautils too, what's the point? <spike> then, since the installation process offers a lvm partitioning options, and lvm2 tools are included, why also including evms ones? <spike> if you prefer evms you can install it afterwards and redo ur config * spike yet hasnt got the point is this stuff should be directed to -devel ML or not <spike> last for now: why do we get mdadm up and running even if no raid has been created? <spike> I see the dependences makes it impossible to remove the pkg, and that's ok, but at least, if at install time no raid has been created, mdadm should be run @ boot <lamont-away> spike: anything with a PCI bus can have PCMCIA. not necessarily common on a server, but I expect that it does exist. <spike> lamont-away: I c. what about wireless, alsa and evms packages? <lamont-away> one reason I might add pcmcia to a server would be to plug in a wireless card, generally just for connectivity, or to act as the AP <lamont-away> ISTR alsa gets involved in some winmodem support, which might be useful (I can think of one machine that, if it had a winmodem, I'd want that on..) <lamont-away> as for default install, it might not hurt to not have it there. <spike> keep in mind here I'm talking of default install here <spike> ok, that's what I meant <spike> all of them of course can make sense on a server too, but not as default imho <lamont-away> ubuntu-standard is driven more by "if you show up at a random machine, what do you expect to be there" than it is by just ubuntu-server... not sure which meta package is sucking in these parts, but if it's ubuntu-standard, then it probably wants to stay <morrow> pcmcia could also be usefull fuer some smartcard readers... <morrow> but i think this is already to specialized on a default install <spike> exactly <spike> *default* is the key here <spike> have you seen this? http://hands.com/d-i/ <spike> any chance to get it into ubuntu? also,it sounds nice for the NetworkBoot project too <troy> good evening folks #ubuntu-server 2006-02-02 * netjoined: irc.freenode.net -> brown.freenode.net <ubijtsa2> fabbione: you are in denmark? :) <fabbione> ubijtsa: i live in denmakr yes <fabbione> denmark even * ubijtsa2 thought fabbione lived in italy... <ubijtsa2> dunno why I had that impression... :) <fabbione> common misconceptio, but i am italian <ubijtsa2> do they have problems pronouncing your name in .dk ? <fabbione> usually no * ubijtsa2 finds that even after ten years, people still can't get my name right here in .uk <fabbione> i am in London as we speak <ubijtsa2> fabbione: not far from here then.. <fabbione> dunno where "here" is :) <ubijtsa2> I live in Farnborough, so less than 50 miles away from you. <ubijtsa2> wsw out of London on the M3 motorway :) <Xoritor> anyone here setup dovecot? <ubijtsa2> Xoritor: to do what? <Xoritor> imap and imaps * ubijtsa2 might have but won't fully admit it until he knows more about the question <Xoritor> auth from pam <Xoritor> heh <ubijtsa2> yes, I think that is the default, is it not? :) <Xoritor> im having issues authenticating with the default config <Xoritor> i have not really changed anything <ubijtsa2> well, the user has to exist... :) <ubijtsa2> then it is just username/passwd, same as for console login, to get to your imap account <Xoritor> yep <Xoritor> my user does exist <Xoritor> and i am using the same info <ubijtsa2> then it should work. <ubijtsa2> hmm <Xoritor> protocols = imap imaps <ubijtsa2> yep <Xoritor> i only changed that to be the default <Xoritor> it was empty <ubijtsa2> ssl_disable = no <ubijtsa2> ssl_cert_file = /etc/ssl/certs/dovecot.pem <ubijtsa2> ssl_key_file = /etc/ssl/private/dovecot.pem <ubijtsa2> ssl_parameters_file = /var/run/dovecot/ssl-parameters.dat <ubijtsa2> ssl_parameters_regenerate = 24 <Xoritor> those are all commented out <ubijtsa2> if you want imaps you'll need to enable them, and create the cert <ubijtsa2> selfsigned is good <Xoritor> yea i did that on my other machines <Xoritor> they were not ubuntu though <ubijtsa2> maildir_copy_with_hardlinks = yes <ubijtsa2> (not strictly needed, but faster) <ubijtsa2> auth = default <ubijtsa2> auth_mechanisms = plain <ubijtsa2> auth_userdb = passwd <ubijtsa2> auth_passdb = pam <ubijtsa2> that should be it <ubijtsa2> it's what I use and it works (well, I use the dotfile pam module as well, but that makes no difference) <Xoritor> i dont have auth_passdb <Xoritor> or auth_userdb <Xoritor> auth default { <Xoritor> just saw a link to a wiki <Xoritor> http://wiki.dovecot.org/Authentication <ubijtsa2> what version of dovecot do you have? <ubijtsa2> I have 0.99.14-1ubuntu1 <Xoritor> odd it says my version is <none> <ubijtsa2> dpkg -l | grep dovecot <ubijtsa2> :) <Xoritor> ii dovecot-imapd 1.0.alpha5-1 <Xoritor> aah i upped to dapper <Xoritor> i forgot <Xoritor> dang <Xoritor> thats prolly why <Xoritor> its a home "test" server <Xoritor> ok, never mind ill hack on it a bit <Xoritor> thx <ubijtsa2> np <Xoritor> im not saying i dont want your help, just that i dont want to bother you for me running dapper <ubijtsa2> well, an alpha package might well be unstable <ubijtsa2> I'll bite the bullet on dapper in late april <ubijtsa2> this box will get upgraded then <Xoritor> yea <Xoritor> heh <Xoritor> i wanted to play with prelude .9x <ubijtsa2> no idea what that is <Xoritor> intrusion detection framework <ubijtsa2> like AIDE and tripwire then <Xoritor> uses other things like snort, samhain, etc... as "plugins" <Xoritor> and has ssl etc... so integrate lots of systems together <Xoritor> and a central place to monitor all of them <ubijtsa2> okay.. sounds useful <Xoritor> pretty freakin cool actually <ubijtsa2> I installed ntop <ubijtsa2> useful tool as well <Xoritor> ntop is ok, good to dissect whats going where <Xoritor> so is ettercap ;-) <Xoritor> heh <ubijtsa2> *grin* <Xoritor> one of the things i like about prelude is that pretty much anything could be a "plugin" <Xoritor> and its all distributed <Xoritor> then i get to monitor from one place <ubijtsa2> that's handy <Xoritor> that to me is awesome... now top it all off that all comms between nodes are ssl enc <Xoritor> and only "authorized" nodes are allowed <ubijtsa2> nessus does that as well iirc * ubijtsa2 goes to grab a tea and check gmail <Xoritor> for nessus yes, but not for logs ;-) <Xoritor> no more sending logs to a remote machine over un encrypted udp <Xoritor> prelude-lml runs on the node and sends the logs encrypted to the monitor <Xoritor> i am hoping to intgrate "alerts" into nagios <Xoritor> and setup some response scripts maybe to auto firewall malicious ssh attempts <Xoritor> ie... same ip logging in with users that dont exist <Xoritor> over and over <Xoritor> you can do stuff like that... since it uses snort, log monitoring, etc... all in one framework <Xoritor> and you can do it distributed... so if someones trying to break into one system by brute force you can have all of the other systems auto-firewall them out <Xoritor> and after a time clear that iptables entry <ubijtsa2> sounds very good, this will be in nubuntu I gather <Xoritor> yea <Xoritor> no <Xoritor> no <Xoritor> im doing it in regular ubuntu <Xoritor> thats why i installed dapper <Xoritor> heh <Xoritor> has the needed version of prelude <ubijtsa2> I ment that this tool will be part of nUbuntu default install :) <Xoritor> not that i am aware of <Xoritor> i looked there, but didnt see it <chillywilly> ello <Xoritor> hello <chillywilly> prelude sounds interesting <chillywilly> heh, seems like everyone is using trac <Xoritor> heh <Xoritor> true * spike is using trac ;) <spike> Xoritor: ever played with sguil? <Xoritor> no i have not <Xoritor> looks like my issue with dovecot is a missing pam lib <Xoritor> can someone tell me what package provides this file? /lib/security/pam_foreground.so <ubijtsa2> dpkg -S (or -s) will tell you <Xoritor> its not installed <Xoritor> i need to install it <ubijtsa2> or apt-cache search perhaps? <ubijtsa2> i don't think I have that file <Xoritor> nope <spike> packages.ubuntu.com? <spike> or apt-file <Xoritor> good idea <spike> anyway, away to fetch a drink, brb <Xoritor> got it <MarioMeyer> :P <Kuyaedz> anyone want to take a shot at my 'vhcs migration killed smtp' issue? #ubuntu-server 2006-02-03 <bwana> that's odd <bwana> i can't get to http://www.ubuntu.com/ <bwana> anyone else having problems <spike> can anybody help me with a serial connection to a cisco pix? <spike> Ive tried with minicom, using /dev/ttyS0, got permissions on it for my user, baudrate set to 9600, 8N1, blanked init and reset strings <ivoks> ok <spike> I get this /dev/ttyS0, UART: 16550A, Port: 0x03f8, IRQ: 4 from setserial -g /dev/ttyS0 <spike> I've checked the bios and serial support is on (had it on Disabled before) <spike> using the standard light blue cisco cable <ivoks> i don't know about cisco pix <ivoks> i tought you need help with ubuntu :) <spike> well, I'm connecting from an ubuntu box :P <spike> #cisco definitely has prob with attitude the few times someone speaks in there :/ <ivoks> well, what did you expect from company that puts Cisco/Cisco as default username and password :) <ivoks> egotrip :) <spike> there's nothing wrong at all with that <ivoks> it's not cisco/cisco :) <ivoks> but with capital C :) #ubuntu-server 2006-02-04 <ubijtsa> *yawn* <lapo> hi there <lapo> I tryed installing dapper on amd64 using the iso at http://tinyurl.com/cllfu, my installation is on raid1+lvm, with the same setup hoary actually booted, with dapper grub gave me an unrecognized partition error for /dev/mapper/vg0-root <lapo> that volume is actually reiserfs formatted, isn't reiserfs in the dapper initrd? #ubuntu-server 2006-02-05 <gpd> is there a way to specify 'server' to an already installed system? <MarioMeyer> hummm.. remove all packages under ubuntu-desktop ? <gpd> that is what I figured - just wondered if there was a more stable way --- <gpd> aptitude gets a little over excited sometimes! <MarioMeyer> i know.. :P <gpd> also - is there a bootstrap for ubuntu-server or a UML image anywhere? <MarioMeyer> that i dunno <gpd> so the ubuntu-server-5.10.isos differ from the desktop cousins only in the package selection - correct? <gpd> http://ubuntuforums.org/archive/index.php/t-16345.html <-- will try this instead <hunger> Keybuk: I think my USB HD has one... shall I test something? <lapo> the initramfs after install dapper doesn't contains mpt* (fusion mpt chipset) scsi drivers (quite common on dell server hw), is it a known bug? <tepsipakki> lapo: yes it is, don't know why it's still unfixed <lapo> tepsipakki, I checked upstream and seems that this bug is fixed in newer version of initramfs-tools (0.41 *should* work) <tepsipakki> ok, that's good to hear <lapo> I'm using an lvm on (sw)raid1 setup and everything works fine (well, almost see missing mpt drivers in initramfs), but I get an error installing lilo during the install (I think it is related to liloconfig which doesn't handle raid1 setup) <lapo> since there's a patch for grub to make it read its stage2 from lvm, any chance to have it in? <Nafallo> those are probably better asked in #ubuntu-boot :-) <spike> #ubuntu-boot? O_o <spike> guess the number of registered chans on freenode doubled since ubuntu project started :P <lapo> uhm? there's even an #ubuntu-boot channel?! :-) <Nafallo> :-) <morrow> is there a good howto for ubuntu and preseeding? <tepsipakki> morrow: the installation-guide has some info <morrow> tepsipakki: thx <ubijtsa> hmmm.. nmap 4.00 released... <spike> yup :) <spike> the new features list is endless :P <spike> I couldnt read it all, eheh <spike> ubijtsa: btw, hello dude :) <ubijtsa> lo spike :) * ubijtsa spotted the QA Engineer role that came available at Canonical as well <spike> ubijtsa: check this out ;) http://edge.channel4.com/theitcrowd/episode1_c4web.wmv <spike> ubijtsa: starting next friday apparently ehehe <ubijtsa> heh * ubijtsa is offski to bedski nowski <spike> too much UF? ;) <ubijtsa> nn .+ <ubijtsa> nah, 1 yo kid with faaar to much energy <morrow> hmm is there a meta package for U.S.? <lionelp> morrow: in Dapper ? <morrow> yep <lionelp> nope #ubuntu-server 2006-02-06 <Unfun> Hello all <Unfun> Anyone know if it's possible to get ServerWorks HT1000 SATA controller working on ubuntu-server 5.1 <Unfun> ? * irvin is away: I'm busy <pabs_> can anyone assist me with " 500 OOPS: could not bind listening IPv4 socket" error with vsftpd? <maswan> pabs_: probably, the local ftp port that vsftpd wants to listen on is already busy <maswan> perhaps an old ftpd process? <pabs_> ya your right <pabs_> I killed all vsftpd processes <pabs_> and i think im running@ <pabs_> :-D !!! <pabs_> i was actually trying to connect locally <pabs_> and got that error <pabs_> man o man that was chore getting that up and running tonite <pabs_> im new to linux :) <pabs_> maswan thanks for your help man <pabs_> appreciate it <maswan> enjoy! <spike> I'm running out of ideas and resources..., so, anybody with cisco experience? <maswan> Well, some of ther smaller switches are just overpriced, I avoid the rest? <spike> I'm having an hard time setting up a vpn between a pix 501 and a cisco vpn client <maswan> never touched vpns <fabbione> spike: good luck! <fabbione> pix 501 sucks <fabbione> and it also depends what cisco vpn client you are using <fabbione> because they have 2/3 different ones according to the vpn concentrator <spike> fabbione: cisco vpn client 4.8.0 <fabbione> spike: i lost my CCO account when cisco has been hacked <fabbione> didn't even bother to reenable it <spike> the thing is, it's a weird test bed, I get the vpn, but then cant ping/access what's on the other side <spike> but the more I check ACLs and stuff, the more it looks fine <fabbione> did you check that the client is setting default gw over the vpn? <fabbione> iirc there is a setting on server side to force such a thing <fabbione> or a client option <fabbione> that you don't want the users to be able to override <fabbione> hence you set it on the server <fabbione> anyway cisco vpn are extremely easy to hack :) <spike> fabbione: yes, gw is over vpn. the option should be split-tunnel <spike> but yes, the packets get to the pix, so that's not the prob <spike> I can see them all with show capture <spike> the problem is accessing boxes on over the vpn, packets stop at incoming interface and never reach the other one <spike> fabbione: so it must be something ACL related, that would sound obvious, but I've just got one (test bed for a specific scenario), so, mh, I'm kinda sure I got it right <ealden> MarioMeyer: ping <MarioMeyer> ealden, pong <Unfun> Hello <Unfun> Anyone in here? <spike> yeah, but all dead <fabbione> yup <Unfun> I just bought a brand new dual core amd 1U server and i can't get ubuntu-server to recognize the HT1000 ServerWorks SATA controller <Unfun> Is there a driver in the works or no? <spike> fabbione: so far nobody flamed me for the apache post, but I havent got a reply either :) <fabbione> Unfun: you will need to try dapper CD's <Unfun> http://www.siliconmechanics.com/i4442/opteron-server.php <fabbione> i don't think .12 does support it <Unfun> How unstable is dapper? <fabbione> spike: i have been feeling really bad today <fabbione> Unfun: quite unstable <Unfun> I may just install on a usb drive <Unfun> compile a kernel <fabbione> spike: so were the other 2 apache maintainers... <spike> fabbione: oh, doh, sorry to hear about that <Unfun> Then copy it over <fabbione> spike: we got some kind of food poisoning or something.. <spike> eeewww, that sux <fabbione> yes <fabbione> we are not going too well these days <fabbione> doing even <spike> fabbione: then it must be that that made you you define hw "desperate" instead of "disparate" ;) <fabbione> possibly <spike> and it must be my lack of sleep that makes me double words... <spike> anyway <spike> fabbione: btw, I solved that vpn issue :) <fabbione> ah nice <spike> as of 2 days playing with cisco stuff, I dont definitely like it... <fabbione> i don't like their firewalls/vpn solutions <fabbione> i don't mind switches and midrange routers <spike> expecially traffic analysis, not really comparable with iptables logging / tcpdump <spike> both debug and capture miss useful features <spike> I'm running IOS 6.3, tho, something better might be available in 7.0 <fabbione> yeah probably more bugs <spike> eheheh <spike> what it is really scaring is default licences wont support aes, so u're stuck to DES <fabbione> useless <fabbione> is it at least 3DES? <fabbione> perhaps one day i will show you how to hack the vpn client :) <spike> fabbione: ehehe, I'll keep waiting for that day :) <fabbione> spike: eheh <fabbione> i am off now <fabbione> cya tomorrowq <jbwiv> hey guys, what is the status of ubuntu-server? Is it ready for use, or should I stand by? I've got a Suse server that just got hacked, and thinking about either Debian or Ubuntu... <lionelp> hey jbwiv <lionelp> you can start using Ubuntu as a server <lionelp> some improvement will occur on the next release, but there is since the breezy release (5.10) a server release <jbwiv> lionelp: will I need to wipe and reinstall in the next release <Unfun> No <jbwiv> or can I apt-get dist-upgrade? <lionelp> absolutely no ! <lionelp> yeah, just dist-upgrade <jbwiv> good, good <jbwiv> does apache by default run chrooted? <jbwiv> in the server version? <lionelp> no <lionelp> it is the classical install, like the Debian one <jbwiv> lionelp: is there a package that will do this easily? Ah...ok. Is harden and bastille available via apt? <lionelp> jbwiv: a package to easily do that is planed but not yet available <lionelp> yes, harden and bastille are available via apt <jbwiv> lionelp: ok, is harden and bastille available, as it is in debian? <jbwiv> ok, thanks ;) <lionelp> you can check it on http://packages.ubuntu.com <jbwiv> lionelp: one last question... <lionelp> no pb :) <spike> jbwiv: just in case: it's technically a *very* poor countermeasure, but mounting /tmp noexec stops 99% of the attacks, since they're as poor as the countermeasure itself <jbwiv> what would you argue is the reason to go with ubuntu server in it's current state, as opposed to debian? <spike> hey ubijtsa <lionelp> jbwiv: not to be obliged to wait three years for a new release :) <jbwiv> spike: heh...here's what I faced this morning: wwrun 20533 1 0 Feb16 ? 00:00:00 /tmp/.tmp/public_html/s <jbwiv> > 6585208393 53 <lionelp> on the next release (Dapper, that will be available in april), some meta packages and a support for 5 years will be available <spike> jbwiv: that in a few months u'll have chances to seamlessly get lots of server related improvements <ubijtsa> lo spike <jbwiv> woops...well, you get the picture. <jbwiv> exploit running out of tmp on the suse box ;) <spike> out ot /tmp ? <jbwiv> spike: yep <jbwiv> so, you're advice is wise ;) <spike> that doesnt look out of /tmp to me.. <jbwiv> mounting noexec <spike> aaah, ok <jbwiv> /tmp/.tmp/public_html/s <spike> out of tmp, I read it as , not in /tmp <ubijtsa> hmm.. /tmp should probably be mounted nodev, noexec <spike> yep <jbwiv> the command was /tmp/.tmp/public_html/s > 6585208393 53 <spike> yes yes, sorry, just misunderstood ur comment "out of tmp" <jbwiv> only way I caught it is the damned thing was DOS'ing my firewall <jbwiv> ah, ok <jbwiv> so, guys, what you're telling me is that ubuntu-server is ready for use, regardless, right? It doesn't seem to be very buzzy in terms of community and portal, but I may be not looking in the right place. That was my only concern. I use it on the desktop ;) <spike> indeed, I brought up to attention that more than once, but they said "it's ok to run it within the ubuntu framework" <spike> jbwiv: it's ready, just not super-accessoried 'till april <spike> jbwiv: but you wont lose anything compared to debian, and have a huge gain in a few months without reinstalling <jbwiv> spike: done deal then...thanks! <jbwiv> by the way...very glad to see this project in existance! <spike> I'm off, c u guys <ubijtsa> I am seeing some _really_ bizarre things in kde 3.5.1 <ubijtsa> xkb is b0rked to the point I have had to disable it.. no keymaps available etc.. <jbwiv> quit #ubuntu-server 2006-02-07 <Xoritor> has anyone setup fastcgi on ubuntu? <Xoritor> anyone setup fastcgi? * netjoined: irc.freenode.net -> brown.freenode.net <spike> do you guys know packet generators like scapy? <spike> packet generator libs/framework to be precise <spike> not stuff like hping <spike> uhm, what's up with mod_alias? <spike> there's no mod_alias in /etc/apache2/mods-available/ <spike> fabbione: how u doing? feeling better? <fabbione> hey spike <fabbione> yeah thansk <spike> the asking ans apache question werent related :) * spike shrugs <spike> sometime my english totally goes nuts <spike> anyway <spike> I was gonna use RedirectMath and found out there's no mod_alias available in mods-available <spike> but uhm, Alias works and it requires mod_alias, is that module compiled in? <fabbione> man apache2ctl ? <fabbione> there is a ctl option to see loaded modules <fabbione> or even compiled in <spike> oh, -l <spike> yes, it's compiled in <spike> fabbione: tnx #ubuntu-server 2006-02-08 <pabs_> ok whos ready for an easy noob question :/ <pabs_> how do i start blackbox from the command prompt? <pabs_> ok i figured it out lol.... <pabs_> now i just need to get a terminal in blackbox <pabs_> :| <ealden> MarioMeyer: ping * netjoined: irc.freenode.net -> brown.freenode.net <visik7> why evms are started at boot ? <fabbione> because if you use evms you need it <fabbione> and the script doesn't really do much itseld <fabbione> itself <visik7> but there is no evms install options <fabbione> so? you can install use it later on. evms can take over lvm2 disks for example <visik7> ah <visik7> is there some guide about lvm/evms <fabbione> and you don't need to worry about installing the package if you start using it <fabbione> not that i know of <visik7> do u use lvm ? <fabbione> i am not familiar with evms myself <spike> eheeh, seems I'm not the only one complaining about it being there :P <visik7> and lvm ? <fabbione> i prefer lvm2 but that's a personal choise <visik7> I can't get the differences between lvm and evms <fabbione> they both do similar things <spike> visik7: userland tools <fabbione> they just get to it in different ways <spike> that's the only diff <fabbione> spike: not only <spike> not even that different afaik <fabbione> they configure the device-mapper in differnt ways <fabbione> evms has also the concept of raid iirc <spike> brb <visik7> fabbione: I have an external disk how can I snapshot the current system that is an ubuntu installed with lvm ? <fabbione> visik7: snapshot as in an lvm snapshot or a backup? <fabbione> because the 2 are completely different things <visik7> ah <visik7> maybe I misunderstood something <visik7> a copy of therunning system to restore in case of emergence <visik7> so yes probably a backup <fabbione> it's a backup <fabbione> but <fabbione> you can achieve backup via lvm snapshot <fabbione> the question is that with an external drive i assume you want a normal backup <fabbione> because playing with lvm snapshot can be tricky if you don't understand lvm <visik7> so if a lvm snapshot isn't a backup what is it ? <fabbione> visik7: it can be used as backup, but not on an external disk that you plug/unplug <visik7> it must be connected from the boot ? <fabbione> yes <fabbione> and you can't unplug it <fabbione> lvm snapshots record deltas of metadata <fabbione> not the entire thingy <fabbione> metadata and data sorry <visik7> yes I understand the problem <visik7> so <fabbione> example: <visik7> to backup using lvm the way is ?... <fabbione> you have your /foo on lvm <fabbione> and there is a file called bar <visik7> a kind of cow <fabbione> i make a snapshot of that <fabbione> mount the snapshot somewhere <fabbione> and create a file called bar <fabbione> baz sorry <fabbione> baz will appear only on the snapshot <fabbione> file bar is in both <visik7> mmm <fabbione> but it stored on the real system only once <visik7> so is not what I need <fabbione> you want a normal backup <fabbione> specially if you don't know lvm concept of snapshot <fabbione> that again.. can be used as backup if you know what you are doing <visik7> it's the root partition so it's complicate to snapshot as backup <visik7> I've to reboot <fabbione> iirc snapshot can be done live <fabbione> check the man page <fabbione> it's explained <visik7> which of 40 commands related to lvm ? <fabbione> man lvm <visik7> yes there's a short explaination and then a SEE ALSO section of 40 commands <fabbione> the 40 commands are all symlinks to lvm binaries just to help users understsand what they are doing <visik7> ah <visik7> :) <visik7> I think it's more complicated than a single blinary <visik7> is there some references on ubuntu wiki ? <fabbione> visik7: check lvm documentation in /usr/share/doc/lvm2 <fabbione> visik7: these anyway are really basic questions you can ask in #ubuntu <visik7> ok <MarioMeyer> ealden_, ping <ubijtsa> hohum... #ubuntu-server 2006-02-09 <MarioMeyer_> ealden, ping <ealden> MarioMeyer_: ping <tschwall> Hi, is http://www.openqrm.org a topic for ubuntu-server? Seems to have a lot of potential. <fabbione> possibly <fabbione> did anybody packaged/tested it? <tschwall> http://www.linuxworld.com.au/index.php/id;1950523229 <tschwall> > OpenQRM supports the two leading distributions of Linux from Red Hat and Novell. The company is seriously looking at also supporting the Debian and Gentoo Linux distributions <tschwall> Maybe one should do some proactive stuff here.. <fabbione> mail davidhull@example.net <fabbione> and explain to him about it <tschwall> ok, perfect. #ubuntu-server 2006-02-10 <[g2] > where would be a good place to start for building a customized server ? <tarvid> installed webmin-slbackup and it does not appear in the webmin menus <tarvid> the module appears to have been installed /usr/share/webmin/slbackup/WebminSLBackup.pm <tarvid> it is in webmin.acl <tarvid> it is not in module.infos.cache <tarvid> it is in module.info in the source <tarvid> i have both /usr/share/webmin-1.250 and /usr/share/webmin <tarvid> slbackup is in /usr/share/webmin but not in /usr/share/webmin-1.250 <tarvid> could that be the problem? <tarvid> After much stumbling about, I found the problem. webmin updates via different directories in /usr/share <tarvid> ubuntu installs to a directory without the version suffix <Mercury> I'm trying to move my server over from the user land NFS server with ugidd (which more or less works, but which has some Issues), to NFSv4 with the kernel land NFS server. <Mercury> At the moment I have some progress, it gets mounted fine, ls -l on stuff shows the proper usernames, with the ones that only exist on the server shown as nobody. <Mercury> However as best I can tell, for actually _accessing_ files the raw UID is used, and I can't for the life of me figure out _why_. <Mercury> Any suggestions? <Mercury> Yep, it is most definitely doing the proper translation when going from the server to the client, but it doesn't seem to be for going from the client to the server. <Mercury> And.. I don't know enough about the workings of nfsv4 to debug this properly, hrm. <lionelp> NFSv4 is not currently considered as stable <lionelp> it is still exeperimenting stuff <Mercury> Understood, but I'd still like to track down this problem. <lionelp> I search the web few weeks ago, and i do not found viable informations :-( <lionelp> yes, no pb <Mercury> Did you have the same problem? <lionelp> non, i did not try yet to migrate NFSv4 * Mercury nods. <Mercury> Alright, this has one, simple, itty bitty question.. Why the hell is the client sending back UIDs instead of names? <spike> Mercury: what's the subject? LDAP? <Mercury> spike: NFSv4. <Mercury> spike: I have a problem, after poking at things a bit I've come to the conclusion that the clients are not sending user names back, they are sending UIDs back, which makes no davidhull@example.net. <spike> Mercury: uh, sending back user names? what are you doing and what's not working? <spike> Mercury: have you run tcpdump and sniffed the traffic? that would clear out any doubt on what clients are sending back <Mercury> spike: I have. <Mercury> spike: The server is sending <user>@<domain>, nice and dandy. <Mercury> spike: The client is sending the UIDs, not even in ASCII. <Mercury> spike: This, of course, completely breaks the ID mapping. <Mercury> spike: And I can't figure out _WHY_. <Mercury> spike: Any ideas? Any at all? <Mercury> spike: A known working configuration? Anything that might help? <spike> Mercury: nope, sorry, I thought it was some ldap related prob <Mercury> spike: Alright. #ubuntu-server 2006-02-11 <tarvid> I have 7 breezy servers and 5 mandrake <tarvid> rdiff-backup version is different on the two sets <tarvid> i used alien to build rpms of the debs <tarvid> but when i try to install them on mandrake, rpm complains of a missing linux-gate.so.1 <tarvid> any suggestions? <fabbione> meh? <fabbione> what are you trying to do exactly??? <tarvid> run rdiff-backup on an Ubuntu machine to backup files on a mandrake machine <fabbione> ok and what is the problem? <tarvid> rdiff-backup fails when the versions are different <tarvid> rdiff-backup 0.13.4 <tarvid> on Ubuntu <tarvid> 0.13.3 on a Mandrake 10.x machine <fabbione> alien won't help <fabbione> find 0.13.4 for mandrake <fabbione> already in rpm format <tarvid> 0.13.4 is getting moldy and I haven't found one yet <tarvid> this is going to be an issue in breezy to dapper updates <tarvid> what would be the best way to suggest the upstream maintainers address the version issues? <fabbione> tarvid: mail them? <spike> fabbione: I'm running out of ideas, so I'm asking you as well: does it happen you know of any policy priority issues with cisco appliances? <spike> at isakmp stage, this pix doesnt go through the available policy but stops after trying number 1 <fabbione> spike: no idea.. too long that i don't play with cisco <spike> ok, np, tnx <fabbione> sorry.. <spike> unfortunatly the trend it's constant... the more I workon on 'em, the more I hate 'em <fabbione> that's why i gave up on networking :) <spike> and the cisco website is awfully organized... I couldnt find changelog for the pix version I have in hours... <fabbione> i know <fabbione> have been there <spike> fabbione: so what do you deal with now? <fabbione> ubuntu? <spike> if you gave up on networking I mean <spike> yeah, but not doing sysadmining at all? <spike> working as coordinator, devel? <fabbione> i do the bare minimum for my home network <fabbione> spike: i have been working for Canonical for the last 2 years (almost) <spike> I see <fabbione> and i do only devel <fabbione> the net/sysadm stuff i do is only for myself <fabbione> that's really reduced to the bare minimum <fabbione> but i did work as net/sysadm for a bunch of years <fabbione> time to stop for now <fabbione> later <spike> later <nictuku> hi <nictuku> after a long period, I've finally found time to work on the network wide updates prototype #ubuntu-server 2006-02-12 <ubijtsa2> *grumble* <spike> hey ubijtsa2 <ubijtsa2> lo spike * spike tries to not scream and swear <ubijtsa2> spike: you too? <ajmitch_> sounds like you're having fun <spike> nobody should start cs with linux * ubijtsa2 is trying to netinstall ubuntu-server from a kubuntu ISO <spike> u should go through windoze, then appliances, and at last nix systems <spike> the other way around it's pain... I cant stand this crap <spike> it's just astonishing how dumb this cisco stuff can be... <spike> and for ho much they payed... /me shrugs <ubijtsa2> the netinstall hangs when loading isofs kernel module <ubijtsa2> *bugger* <spike> how can you design a fw appliance and not plan traffic dump filters!?!? <spike> it's just bloody stupid <spike> how hard it was to implement somethinglike tcpdump? <spike> bah <maswan> spike: firewalls are bad, mmkay? <spike> maswan: eh? mmkay? <ubijtsa2> fabbione: quick (or maybe not so) question. when netbooting from an ISO, should it hang on loading the isofs kernelmodule ? <fabbione> you need another initrd for netboot <fabbione> you can't use the one from the CD <ubijtsa2> there is one in the netboot directory <ubijtsa2> install/netboot/ubuntu-installer/i386/ somewhere on the CD <fabbione> it shouldn't hang <fabbione> at least it doesn't here <ubijtsa2> that is what I thought <ubijtsa2> this is on an older box tho.. <ubijtsa2> i'll give it a shot with noapic/noioapic/noacpi later.. first I want it not to ask any questions until preseed has been loaded <ubijtsa2> right. fixed the questions, so now I have left is to bypass the isofs module... * ubijtsa2 wonders if alright to disable the ide i/f <ubijtsa2> the box is otherwise scsi, so no problems there <fabbione> are you sure is not just a bad cd burn? <ubijtsa2> the ISO is fine, we have installed half a dozen boxes from it <ubijtsa2> setting ide0=noprobe didn't work either, so that's a no-go <ubijtsa2> what I have done is to loopmount the ISO, and I am running PXE boot from it <ubijtsa2> bah, all I want is for it _not_ to try the CD (as it isn't there) <ubijtsa2> hmmmmm.. bin/hw-detect in the initrd seems to have an answer... * spike adds to the chorus of pissed-off ones <spike> :) <ubijtsa2> would appear I need to comment out some more stuff <hunger_> allee: I agree with you that all ubuntus should use the same setting for X. <hunger> Sorry, wrong channel again. <ubijtsa2> fabbione: located the problem in the end... <ubijtsa2> dunna what to do about it, but it wasn't isofs module that was the issue <ubijtsa2> there is a grep running in /proc/scsi/scsi that has hung, and my attempt at cat'ing /proc/scsi/scsi hung as well <ubijtsa2> the raid-controller in question that ought to be in /proc/scsi/scsi is a "0000:06:01.0 RAID bus controller: Adaptec (formerly DPT) SmartRAID V Controller (rev 01)" <ubijtsa2> that would suggest the dpt_i2o module is b0rked <ubijtsa2> http://bugzilla.ubuntu.com/show_bug.cgi?id=17897 describes the problem * ubijtsa2 will try with the Dapper Flight3 ISO <spike> *SOLVED* <spike> I'm goin on vacation after this :) <desti> hi, is it possible to install ubuntu server with only remote access? <maswan> desti: do you have remote console? <maswan> if so, just boot it and do the install via serial console/management processor console. <desti> i have a running suse 10 64bit system, but only 1gb free diskspace, because i cant resize the large suse partition <ubijtsa> fabbione: dapper flight3 solved the hang problems I was seeing <Drac[Server] > How do I configure Apache? <Pygi> for what exactly? :) <Pygi> with what modules, support for what, etc <Drac[Server] > I just want to know where the config file is... <Drac[Server] > I've never played with Apache before. This is my first server, and I'm learning from experience, etc. <Drac[Server] > Pygi: *poke* <Drac[Server] > Oh. <Drac[Server] > So.. um.. Apache config file... Where is it? <Pygi> /etc/apache2/ #ubuntu-server 2006-02-13 <Drac[Server] > Is "0" unlimited? <Pygi> depends where <Pygi> but probably yes <Drac[Server] > Um... What do I do with "user www-date" and "group www-data" ? <Drac[Server] > data* <Pygi> just make sure you set right permissions on files <Drac[Server] > Eheh... um... which files would those be? ._. <Pygi> bah <Pygi> /var/www I guess <Drac[Server] > I told you I'm davidhull@example.net... <Drac[Server] > What would those files do? <Pygi> buh, that is where you put files to host <Pygi> for your web server <Drac[Server] > Oh! Okay. Now I get it. <Drac[Server] > /var/www/(user)/filesgohere right? <Pygi> huh, you want a multi-user enviroment? <Pygi> this can probably help <Pygi> read this <Drac[Server] > Well... I don't see how else I'd have multiple accounts with FTP access and stuff... <Pygi> t see how else I'd have multiple accounts with FTP acce <Pygi> bah, sec <Pygi> https://wiki.ubuntu.com/ApacheMySQLPHP?action=show&redirect=LAMPForHoary <fmasi> can some one help me seting up my vsftpd i am a bit rusty and i trying to make anonymous aces to be able to upload but after some configuration i got this error http://paste.ubuntu-nl.org/8221 <fmasi> please help me i nead to get unrusted <Drac[Server] > When the mysql documents refer to the "hostname" do they mean what can be printed by the command that I can't remember at the moment? <fmasi> some one home ??? <Pygi> o, welcome fabbione <fabbione> hey Pygi <Pygi> long time no see <fabbione> how are you? <Pygi> tired :-/ too much non-sleep due to coding :-/ <fabbione> ehe <Pygi> :) <Pygi> how's server comin' along? <fabbione> working on it :) <Pygi> great :-P <Pygi> anything that I can help on? <fabbione> Pygi: test install from daily cd would be great <Pygi> k, will do...now tell me where to get it :) <fabbione> http://cdimage.ubuntu.com/ubuntu-server/ <Pygi> k, I'll make it download now <Pygi> Once I install it *these days I hope* you'll get reports <fabbione> Pygi: keep in mind one thing <fabbione> the reason why we need testing is because we did switch the archive managment software <fabbione> iso's might be borked to death <fabbione> or not working at all <Pygi> k, no problem <fabbione> that's the whole point of testing them :) <Pygi> :) <Pygi> also, are we going to provide more detailed /etc files? meaning *every* option in most crucial files explained? <fabbione> i don't have time to do stuff like that <fabbione> and i won't <fabbione> if somebody wants to work on it, welcome to push me patches and i will apply them <Pygi> ah,kk <lapo> hi <fabbione> hi <lapo> ubuntu kernel should run update-initramfs in postinst <fabbione> it does <lapo> I have machines with mpt hw and the actual initramfs doesn't contain the needed modules (bug?), so w/o updating the initramfs on kernel upgrade the machines won't boot anymore <fabbione> lapo: file a bug in malone, but the kernel does update-initramfs <lapo> fabbione, are you sure? <fabbione> yes i am <lapo> fabbione, the kernel update of 2 or 3 days ago, leave my test server unbootable <lapo> fabbione, can it be lilo? does update-initramfs run lilo after updating the initrafs? <fabbione> lapo: file a bug on malone. component: linux-source-2.6.15 <fabbione> that's a completely different hook <lapo> K, I'll do it <lapo> fabbione, yes it is, but the result is the same :-) <lapo> fabbione, should I file a bug against update-initramfs? <fabbione> lapo: yes. <fabbione> i don't think lilo is at fault here at all <fabbione> since the hook that calls the update bootloader has been untouched for ages <fabbione> and i would have noticed the breakage <lapo> fabbione, I think the problem is that update-lilo is run before update-initramfs <lapo> so I get a panic on boot cause it cannot find the initrafs image (since it's changed) <fabbione> nope <fabbione> lilo is executed way later than that <fabbione> open a bug on update-initramfs or lilo <fabbione> also check that initramfs is of a reasonable size compared to the old one <lapo> I think it's about 200k bigger, not that much <fabbione> try to boot with the old kernel and run lilo manually and see if it helps <fabbione> start excluding one bit at a time will help <lapo> fabbione, no problem doing things manually, there's some automation which haven't worked <lapo> I'll try reinstalling that kernel to see what happen <fabbione> lapo: do one thing at a time <fabbione> the kernel is installed, try to check if lilo config is right <fabbione> and rerun lilo manually <fabbione> see if that fix the problem <lapo> I know the drill, I did it several times these days :-) <fabbione> if it doesn't compare the differences between the initramfs? <lapo> doing things manually works <lapo> donig an apt-get install --reinstall linux-image-2.6.15-14-amd64-xeon <lapo> update-initramfs and update-lilo are in the correct order, lets reboot <lapo> something wicked happend :-/ <lapo> found out, my boot partion fs was corrupted, so it was not kernel nor lilo fault, sorry for the noise * fabbione sighs <fabbione> lapo: anyway.. your nick says it all :D * fabbione couldn't resist <lapo> fabbione, my nick is actually my name (purtroppo) :-) <fabbione> sucks to be you <lapo> but I'm no way involved with fiat, elkan or so :-) <lapo> eheh <fabbione> ejje <fabbione> ehe <lapo> since you did that joke about my name, I'going to bug you about grub :-) <fabbione> tsk :O) <lapo> lilo is the only option for a sw raid1 + lvm setup (read no /boot partition), since lilo is a PITA and there are patches around for grub to support raid1+lvm setups, any caches to have them in? <lapo> I think sw raid1+lvm is a common setup on servers, no? <fabbione> lilo does not support /boot on LVM <fabbione> you must keep /boot separate <lapo> fabbione, are you sure? <fabbione> lilo manages to install once <fabbione> it will kill you at the first kernel upgrade in certain conditions <fabbione> lapo: yes i am sure.. don't ask me if i am all the time :) <lapo> lapo@posta:~$ sudo sfdisk -d /dev/sda <lapo> Password: <lapo> # tabella delle partizioni di /dev/sda <lapo> unit: sectors <lapo> /dev/sda1 : start= 63, size=143363997, Id=fd, bootable <lapo> /dev/sda2 : start= 0, size= 0, Id= 0 <lapo> /dev/sda3 : start= 0, size= 0, Id= 0 <lapo> /dev/sda4 : start= 0, size= 0, Id= 0 <lapo> so how can you explain this? :-) <fabbione> please do NOT flood the channel <lapo> sorry <fabbione> lapo: because i read lilo code? and we had bugs for it that forced me to do it <lapo> lilo does support booting from lvm, I'm currently using it <fabbione> lvm1, not 2 <fabbione> and only if certain conditions are met <fabbione> the first time you will upgrade the kernel and the file will be fragmented across more than one PV you lose <lapo> fabbione, yep but if the boot vg is only on one pv there are no problems using such a setup <fabbione> right <fabbione> it also depends how you set the lv but that's a more uncommon case <fabbione> anyway grub supports boot from raid1, but not from lvm (in our case) <fabbione> and i doubt we will pull in anything new and fancy for grub <fabbione> we will probably get grub2 in dapper+1 <lapo> grub2 is a myth :-) <lapo> btw, the installer get confused in my case using preexisting partitions and vgs, it installs grub <lapo> so a smarter grub can solve this problem too * lapo set bugging mode off #ubuntu-server 2006-02-14 <fmasi> hi can some one help me whith vsftpd config <fmasi> i geting 500 OOPS: vsftpd: refusing to run with writable anonymous root after i had configurate the server for anonymous to be able to right <spike> wow, gnutls DoS <spike> pretty nasty stuff <morrow> Hmm? <spike> this release fixes several serious bugs that would make the DER <spike> decoder in libtasn1 crash on invalid input. The problems were <spike> reported by Evgeny Legerov on the 31th of January. New releases of <spike> GnuTLS will follow later today. <spike> http://lists.gnupg.org/pipermail/gnutls-dev/2006-February/001058.html <morrow> ahh thx :) <ubijtsa> fabbione: ping <fabbione> ubijtsa2: pong? #ubuntu-server 2006-02-15 <bashgeek> hi <bashgeek> is there any installation guide to install ubuntu on a remote system via. rescue console? <troy> good day folks <ubijtsa2> fabbione: no worries.. <fabbione> morning <fabbione> i am not worried :) <fabbione> what' s up? <ubijtsa2> I was going to ask you about setting a hard stack limit in /etc/security/limits.conf <ubijtsa2> testing it last night though showed there being no difference in memory usage on a freshly booted system <fabbione> hmmm i am not too happy about changing these defaults <ubijtsa2> it had been suggested to me it could make as much difference as 100MB on a full Gnome desktop.. <ubijtsa2> the default of the system seems to be allocating 8MB of stack, and lowering that to 512kB was the suggestion <ubijtsa2> as it turns out, it probably will not make that much difference.. hence the 'no worries' comment :) <fabbione> nope <fabbione> that's just wrong <fabbione> that's not the default alloc on the stack. <fabbione> it's max amount of stack a user can allocate <fabbione> if you hit the limit, the process is killed <fabbione> so something like that will just break in some corner cases <fabbione> = BAD <ubijtsa2> Mmhmm.. I wanted to ask you about it last night, but while rebooting I encountered oddities with zeroconf <ubijtsa2> hence why I was not back on IRC when you replied <ubijtsa2> still, half a meg of stack should be more than adequate.. <fabbione> -> REJECTED <fabbione> it breaks stuff in corner cases <fabbione> and you don't want that <fabbione> 8MB is more than fine <fabbione> and again, it is a limit <ubijtsa2> I understand.. <fabbione> it's not allocated by default <neuralis> fabbione: long time no see <neuralis> fabbione: how are things? <fabbione> hey neuralis <fabbione> i am fine and you? <neuralis> pretty good, moved back to cambridge a week ago, horribly busy <fabbione> i believe that <neuralis> how's server-candy coming along? <fabbione> we are at 2/3 more or less <neuralis> nice! <fabbione> there are things that needs to be done <fabbione> but we are getting there <fabbione> we won't manage to get /etc in RCS <fabbione> but otherwise we are okish <neuralis> hmm, too complicated or other problems? <fabbione> mainly the changes in bzr <fabbione> bzr is changing too fast to be good for 5 years <fabbione> and i didn't want the overhead of other RCS <neuralis> yeah, good decision <fabbione> there are also the 3rdy part tools that need packaging or something <fabbione> assuming we can redistribute them <fabbione> but that's like a couple of days of work <neuralis> although, for just versioning /etc, bzr 0.7 would probably be just fine <fabbione> my point is that the bzr backend is changing fast <fabbione> so let say we ship 0.7 in dapper <fabbione> it might not be compatible with dapper+1 <fabbione> figure in 5 years <fabbione> so you might not be able to use the repos for cross merging <fabbione> and that's one of the most interesting features about having all /etc in RCS <neuralis> right. <fabbione> cherry-pick this change from the test-server... boom <neuralis> well, bzr should stabilize quite a bit by dapper+1, so hopefully we can do it then. <fabbione> did you hear anything from the cluster guys? <neuralis> nope. <fabbione> i guess they won't match our deadlines <fabbione> oh well.. we will work it out for dapper+1 hopefully <neuralis> it sounds like they'll still put out openssi packages for dapper, just not through ubuntu channels <fabbione> that's sick.. but ok <fabbione> if they prefer that way <neuralis> they don't, but there just wasn't enouh time to meet UVF <neuralis> *enough <fabbione> well they need to meet Feature Freeze <fabbione> that's in 13 days <ajmitch> bzr guys are hoping to have 0.8 in dapper, with the understanding that there be some stability in branch formats & API (though probably not for 5 years) <neuralis> ajmitch: they're aiming for 6-12 months. <ajmitch> not nearly enough for a 5-year distro support <neuralis> fabbione: to be honest, i think it's better for ubuntu not to have it in officially for dapper. it's not stable enough. <fabbione> neuralis: ok <neuralis> fabbione: so let them put out packages separately and get testing, and we can look at official inclusion for dapper+1 <fabbione> neuralis: right, but we will land in the exact same problem <fabbione> dapper+1 won't have .15 <fabbione> probably .18 or something <fabbione> if the openssi guys don't start tracking recent kernels, it will be the same as Xen for hoary/breezy/dapper... <fabbione> anyway i need to reboot my ws <fabbione> brb <neuralis> ok <fabbione> re <neuralis> fabbione: around feature freeze, i'd like to chat with you briefly about everything that went into server, to make sure i don't forget anything <fabbione> sure <fabbione> assuming i can remember all of it :) <fabbione> but i think we should chat about it today <fabbione> so if there is something i did overlook <fabbione> there might be time to get it done <neuralis> sure <neuralis> would you like to do it now or later? <fabbione> i just need about 20 minutes to finish something <neuralis> sure. ping me when you're back. <fabbione> yup <fabbione> re <fabbione> neuralis: still around? <neuralis> fabbione: yep <fabbione> ok where do you want to start? <neuralis> i just went over the list of all dapper specs <neuralis> relevant to servers are HardwareTestingCatalog, CommunityServerHardwareTesting, KernelServerRoadmap, TestingServerHardware, ServerCandy, UbuntuClusters <neuralis> we should probably talk only about the last two <fabbione> KernelServerRoadmap is implemented <fabbione> in terms that we have the kernels <fabbione> we need to make them the defatuls for server CD <fabbione> and probably do some more config tuning <fabbione> nothing really fancy is left there <neuralis> right, i just want to find out specifically what was
{'channel': 'ubuntu-server', 'month': 2}