User1: hi all. has anyone here tried no-TLS postfix under gutsy?
User1: we've disabled it in the configuration, but its still been requested somehow
User2: User1 That's a very good question.
User2: User1 We are having the same problem here.
User1: guess i'll have to wait then ;)
User1: User2 its smtpd_tls_security_level = encrypt
User1: just comment it out :P
User3: hey i have 4 ethernet adapters in my box which is acting as a bridge, 1 is wireless and connects to the router for the internet, i can ping it from the box, i can ping my bridge from my client but i cant ping the router from my client
User4: i would like to install virtual machine at ubuntu-server, but i confuse to choose between VMware-server or VirtualBox, which one do you recommend ?
User5: moin
User6: ?
User6: what is encrypted server?
User6: you can encrypt filesystem, you can provide cypted service
User6: but crypted server?
User6: ?
User6: J-_: where did i flame? i asked
User6: and encrypted filesystem is an option during install
User7: J-_: It's probably not the most productive thing to whine at the people that are trying to help you.
 * ScottK was too late.  missed it by that much.
User6: and encrypted filesystem won't save you from net attacks
User6: and i'm not sure how exim could provide logs about LAMP :)
User6: oh, he left :)
User6: didn't notice that :D
User8: heh
User8: minor detail
User9: has anyone tested the latest server images on real metal (or vmware even). It still doesn't boot in virtual box
User9: installs fine though
User10: hiya, trying to migrate samba accounts from one machine to the next. what files do i need to copy? using the smbpasswd backend
User10: found /var/lib/samba/passdb.tdb, but is that the only file needed?
User11: User10 don't forget /var/lib/samba/secrets.tdb
User11: and /var/lib/samba/group_mapping.tdb
User11: if you have issues you might copy all the files in /var/lib/samba
User10: hmm
User10: that sounds promising but i'd still like to find some documentation about this online
User10: those files names will help a lot
User11: User10 you can look through the samba docs: http://samba.org/samba/docs/man/Samba-HOWTO-Collection/index.html
User11: I'm not sure how much you'll find on replicating accounts though.
User10: that might be faster than searching for keywords across the web, thanks
User11: np... if you don't need the second machine up right away the best thing may be just to copy the files and see if the accounts are there.
User11: if not copy another file, and so on
User10: actually maybe we should switch to pam auth
User10: that way we won't have to deal with multiple passwords anymore
User11: that works too, also using LDAP works too
User10: one of these days i'd like to get a centralized authentication system going
User10: even for plain user accounts
User11: IMHO LDAP is the way to go
User10: yeah i need to bite the bullet the figure it out one of these days
User10: what's the default windows workgroup for xp?
User10: i forget if it's WORKGROUP or MSHOME
User11: User10 I think workgroup
User12: workgroup
User13: Really?
User11: "I think"... been a while since I've used XP
User12: perhaps it varies per flavor of xp, but I just installed xp on a machine a week ago and I swear it was workgroup
User10: ah yes, browsing our network all our unconfigured boxes are there
User10: so it's workgroup
User13: We changed our default (in Samba) to MSHOME to match Windows.
User13: Did they change it at some point?
User10: maybe it depends on what eddition of xp you have
User12: perhaps on XP Home it is MSHOME and on XP Pro or the Corp install it is WORKGROUP
User11: is it MSHOME for vista?
User12: not on ultimate
User10: switching to WORKGROUP that's what 2k used by default and that's the best version of windows anyway
User10: even if no one uses it anymore
User12: I still deploy it ;)
User10: if you have to use windows it's the best if you can get away with it
User10: doesn't support ie7 but then again you shouldn't using ie at all anyway
User10: btw looks like those tdb files worked
User10: just copied all of them
User10: looks like they all were needed according to the docs
User11: User10 party!
User10: http://samba.org/samba/docs/man/Samba-HOWTO-Collection/install.html#tdbpermfiledesc
User10: thanks for the help
User11: np
User14: hey, i just did a dist-upgrade from feisty to gutsy 32bit and now my machine does not boot properly anymore. it seems like the boot process is not running as root. when it should mount the partitions it tells me "you need to be root to do that". did anyone else experience this problem and maybe knows a solution?
User11: anyone else order one of those OLPC XO laptops?
User15: okay, i'm not sure, but I think someone keeps trying to ssh into my server that shouldn't be there, i just happened to find /var/log/auth.log and found hundreds of login attempts from the same ip
User15: my server is not at all secure
User15: this is the first time i've ever had to administrate my own server
User15: what do I do? how do I secure this box
User15: its all from 91.69.162.6.. like a billion attempts to login
User11: User15 if you have ssh open to the Internet I'd add this config option to /etc/ssh/sshd_config: AllowUsers username
User11: AllowUsers is a space seperated list, then restart ssh
User15: okay
User15: I mean, I don't know *anything* about what i'm doing
User15: this is my first time using linux letting alone administrating a server let alone securing one
User15: what are the general measures I should be taking
User11: User15 you can also look into hosts.deny, I've never used it, but I know people do.
User15: firewalls, all that good stuff
User15: should i change my ssh port for the hell of it?
User11: User15 sure iptables is the firewall shipped with Linux
User15: i've never used that, learning curve?
User15: what is pam_unix
User11: User15 can be a little steep, but there are gui "editors" that can help you create configs... I think firestarter and shorewall are a couple
User15: i'm not running x on the server
User15: that would be bad, right?
User11: pam_unix is the authentication system (Pluggable Authentication Module... I believe)
User15: l
User15: kl
User11: User15 if you're running a ubuntu desktop I believe you can install firestarter on it then copy the script to the server.
User15: win:(
User15: AllowUsers user, will only allow that user to login?
User11: here's an iptables guide: https://help.ubuntu.com/community/IptablesHowTo
User15: do I have to enabled the Allow only option somewhere?
User11: User15 only allow that user/s to login using ssh... any user can still login from the console
User15: thank you sommer
User15: i'm going to play around
User15: its a bit scary when you see a hundred failed login attempts
User11: np... another quick precaution is to change your password, making sure it's hard to guess symbols, numbers, upper case and all that
User12: hrm, I thought sshd_config had PermitRootLogin set to no by default
User15: User11 i typically randomly generate an 8 character pass
User15: do you have a mailbox filled with unauthorized access attempt notes? :)
User16: nijaba, soren - where do we stand on getting the iso to work with qemu or xen?  Last I tried in qemu, I got stuck at an initramfs prompt
User17: User16 for 7.10, no go
User17: User16 but for 8.04 it should and will be solved.  I think soren is working on it
User15: did you install mail?
User15: mailx
User15: sudo apt-get install mail
User16: can the problem at least be documented?  what sort of fix is soren looking at?
User15: DM| what happens when you type 'mail'
User15: sommers: so iptables seems straightforward enough, but when I specify --dport ssh, i'm not specifying the port (which is not longer 22 btw :)
User16: User17  or can the build script be referenced so folks can fix it themselves?  I just hate the idea of 6 months of saying to folks "our chosen virtualization target platform doesn't run our iso (since we decided that either qemu or xen is the platform of choice - did we ever get back to that discussion?  I recall a posting to the devel list being the next thing to do?)
User15: sommers: does it just figure it out from the service, or should I actually specify --dport xxx instead of --dport ssh
User17: User16 AFAIK that's our choice for Hardy, right?
User15: DM|: i wish I could help you but I am far far far from someone knowledgable, maybe someone here can help
User15: yeah, i know of the file, and how to edit it
User15: sudo visudo
User16: User17 well I'm still digging for more info, but the choice I'm thinking of for gutsy is telling folks how to make a fixed iso.  can isos go in ppas?
User16: is there an open bug for this?
User13: User16 The problem was getting the ends to meet, i.e. making the kernel and qemu agree on a usable driver for things.
User15: are you guys core developers or something?
User13: User15 Some of us are.
User16: qemu works great with the linux-virtual kernel for what I've done
User16: it is the iso that seems to stop dead
User15: woah
User16: on reboot, after install
User13: Er.. Why do you boot the iso after you've installed?
User16: I'm not booting the iso, I'm booting the disk I installed it on
User13: 22:57:27 < nealmcb> it is the iso that seems to stop dead
User13: ?
User15: DM| are you logged in as the user you first created when you installed?
User16: (after installing from iso in that case)
User13: User16 Oh...
User16: so I can run kvm or qemu with the virtual kernel and ubuntu-jeos-builder just fine.  but when I install from iso, I can't boot the disk I installed to
User18: DM|: your sendmail error means that sudo is attempting to send mail without bothering to see if it should.
User15: DM| you have something far wronger with your system than I (will ever) know how to fix
User13: User16 that's really... odd.
User13: User16 They ought to be just the same.
User11: User15 --dport xxxx you can use --dport ssh because ssh is listed in /etc/services I believe
User11: User15 so if you change it you'll need to specify
User15: User11 okay, yeah, i saw it automatically associated 80 with www, slick
User16: of course I might have done the install wrong or something - it is such a slow pain to try again....
User18: ln /bin/true /usr/sbin/sendmail :)
User16: nijaba, soren - does a wiki page https://wiki.ubuntu.com/JeOS-Builder make sense for me to work on?
User18: or install a mailer and configure it
User17: User16 IMO, yes, definitely !
User13: User16 Apart from the fact that it'll get renamed real soon, sure.
User16: i.e. the name, and choice of the wiki since it is pre-release
User16: User13 that's what I'm asking.....
User13: User16 We can rename pages on the wiki, no problem.
User17: User16 should not prevent you from working on it :)
User16: but we can't re-point links  - what name are you thinking of?
User17: User16 yes, but we can maintain a redirect page...
User16: of course - I just prefer to get it right and avoid confusing folks
User17: User16 the naming issue is still something we have to figure out.  It should not prevent us from working on the tool
User16: what is the process for figuring it out?
User17: User16 discussion?
User17: User16 and a bit of marketing of course...
User13: Well, there are two options:
User13: a) Come up with a good, flashy name
User13: or
User13: b) rename it to ubuntu-vm-builder (because I say so)
User13: :)
User13: If a) doesn't happen within... um... let's say two weeks, I'll go with b).
User16: how is virt-manager looking?
User17: User13 even though I think ubuntu-vm-builder makes sense, I think we should bring it up with other people, such as gerry...
User16: virt-install etc
User13: User17 Indeed.
User13: User16 virtinst just got built an hour ago.
User17: User13 do you want me to put it in my todo list for monday?
User16: :-)
User13: User17 That would be much appreciated.
User17: User13 will do then
User18: User13 finish default-mta packaging yet? :-)
User13: User16 It took a while for it to go trough NEW, but now we're getting somewhere.
User16: User13 is there a chance we'd just go with it?
User13: User16 Not if I have any say in it.
User16: built in a ppa, or for hardy alpha 1??
User13: User16 alpha 1 was yesterday.
User16: User13 and who would give YOU any say in it?
User16: :-)
User13: User16 Er... Sorry, I got confused, apparantly.
User13: User16 "is there a chance we'd just go with it?" what is "it"?
User13: User18 gah... /me looks
User16: I think you got it right - q was if adapting virt-install would be preferable to ubuntu-jeos-builder
User16: User13 so did it build for hardy?  or still just in your ppa?
User13: User16 The source is in the official archive now.
User13: User16 The binaries are in the NEW queue.
User16: sounds good
User13: User18 My biggest problem right now is the long description. I've rewritten it three times and I'm still not happy with it.
User16: and how would you compare what it can or should be able to do with your very nifty builder script?
User16: I'm just thinking that pushing a whole free virtual machine infrastructure is a big job, and wondering where it makes sense to invest time and effort
User13: Quite. I need to look into it a bit more. I've been blocked by a few bugs in it, so I haven't been able to look too tylerwilliams@example.org.
 * nealmcb needs to just look at it more himself, but has lots of other things still cooking....
User16: User13 you do manage to get an amazing amount of stuff done.....
User18: User13 feel free to toss it at me and I'll mess with it and upload it and we can deal with the inevitable bug reports. :)
User13: User18 Should it just depend on exim4 or something more specific?
User13: User16 It doesn't feel that way.
User16: Where might I go to gather more info about this bothersome initramfs prompt?  I haven't found much relevant documentation.  or might I just ship you the vm that I built from the iso for qemu?
User18: for debian, I think it's exim4... not sure.
User13: User16 I've ticked *one* think off on my todo list this week.
User13: s/think/thing/
User13: User16 Er.. I can probably look into it some time early next week.
User16: can you be more specific about the mismatch between the kernel and qemu you were talking about?
User16: i.e. which driver might be an outage for qemu?
 * nealmcb needs to just do a proper bug report, like he should have done weeks ago, rather than just posting on the forum thread about it
User13: User16 I forget the exact details. Gutsy is old hat. :)
User16: should I file the iso reboot bug on ubuntu-jeos?  or on the kernel somehow? or ???
User13: That's a might good question.
User16: installer? initramfs?
User13: The trouble is that it's unlikely to be severe enough to warrant an SRU anyway.
User13: User18 http://people.ubuntu.com/~soren/dmta/  <-- The current stuff
User16: well, getting it documented for hardy is a good start....
User13: User16 Hopefully, the problem won't exist in hardy :)
User16: well it still needs a bug....
User13: User16 I suppose.
User16: User13 you seem unsure - I'm confused
User13: User16 It's just that there's a lot of focus on exactly these things.. qemu and kvm  and the kernel running inside them.. It's unlikely to not be fixed regardless of whether you spend time reporting the bug.
User16: my point is just that qemu and the existing kernel seem fine - it is just the iso that is having problems.  xen may be a whole different issue - I haven't tried it
User16: iso or install process or whatever
User13: User16 Ah.
User13: User16 Erm.. I'm not sure what I'd report it against.
User16: any good doc on the initramfs busybox prompt?
User13: User16 Not that I know of.
User16: and how to figure out how I got there
User13: User16 You land there if the early userspace stuff fails to get you a proper root.
User16: I just just run it in a vm and watch what happens.   oh yeah - I am....
User13: User16 This can be for any number of reasons.
User13: User16 So to reproduce this, I just take which iso and do what?
User16: install jeos iso via qemu, reboot, ignore error, restart qemu with the new disk, see initramfs prompt
User16: (ignore the "you've still got a cdrom loaded" error)
User13: User16 Added to my todo list. I'll figure out what to report it against.
User16: :-)
User19: Hello. Could someone point me in the right direction in terms of installing a shorewall package from 7.10 on a 7.04 box? Or just in getting shorewall updated to 2.3.2 or better?
User19: how do I go about using Prevu to try a 7.10 .deb on 7.04 ?
ubuntu-server
Ubuntu IRC