User1: hi, is here an expert in vsftpd present?
User2: he went to proftpd :-)
User2: sry, joke :-)
User2: just ask :-)
User1: np, i was just googeling what proftpd is :)
User2: hehe
User1: i am behind my router, trying to connect with FileZilla within the lan on an ubuntu server box, when i connect unencrypted, so non-secure, it works just fine, when i do it with SSL it gives me an error: Connection timed out!
User1: so basically, the problem is i can't get it to work with SSL
User2: User1 which servertype ou chose in filezilla?
User1: OsAC, FTP over SSL (explicit encryption) ... anything else but 'FTP' won't work
User2: I would sugest you setup sshd and than use sftp
User1: OsAC, sry wrong info: it works also (until operation times out) with FTP over TLS
User1: i already use ssh
User1: OsAC, do u have a good guide or tutorial for setting up sftp? a guide which u actually know about that it's good
User3: SFTP is a nicer protocol than FTP over anything, if only because FTP implicitly requires bidirectional routing (i.e. chokes on NAT).
User3: SFTP is set up automatically by installing the OpenSSH server: aptitude install openssh-server.
User3: You can then configure sshd_config to remove full shell access, so that only SFTP is left.
User1: twb, interesting thing you're saying, ftp chockes on NAT? well, i'm behind a router
User1: could that be the problem?
User3: User1 it works on *some* clients; they have to implement either the EPORT or PASVE (IIRC) extension.  I remember that this is not the case for Firefox.
User3: Note that SFTP is not just FTP over SSH; it's actually a quite different (and better) protocol.
User3: http://en.wikipedia.org/wiki/FTP#FTP_and_NAT_devices
User2: ftp is legacy protocol ...so you are better using something else for transfering files
User2: if u need only to dwnl files http is better choice
User4: Depends on the privacy requirements.
User2: https :-p
User1: i need something like a ftp-server which allows me to upload and download files (securely) from outside my lan
User3: User4 and other requirements, of course.  Maybe you need write access and DAV is sucky.
User1: should i try it with WebDAV?
User4: Yeah
User3: User1 SFTP is the best choice for that by far, IMO.
User4: sftp is totally wonderful.
User1: maybe a tutorial which i can use about sftp?
User1: i went for vsftpd because it is the only one on the ubuntu server guide page
User2: if u have sshd installed , eg you can ssh to your box
User3: User1 no configuration is necessary for SFTP.
User2: go to filezilla add new conn
User3: User1 except if you want to lock it down more.
User2: enter server hostname, ssh port and choose sftp
User2: and it will work
User2: you have it working allready .-)
User2: no need for vsftpd
User2: try it :-)
User1: w8 i-ll try it this way
User1: Response:	Fatal: unable to initialise SFTP: could not connect
User1: i'm using SSH already with pub/private keys authentification (secure)... maybe that's why it won't work
User2: yes
User2: you need user/pass
User1: but ain't this a major security risk?
User1: because i'm open for brute force attacks
User1: and twb, what did u mean with lock it down more?
User2: yes, dont allow root to be able to use ssh (use sudo) and move ssh port away from 22 to something like 15000
User3: User1 as in, disable password-based access, and disable access to anyone that isn't your user, and disable access except from a whitelist of source IPs.
User3: User1 for example, on one of my systems, you can only log into it if you are logging in as twb, from 91.69.162.6, and you have to have both my passphrase and my ssh key.
User3: User1 since you are interested in SFTP, you would also want to disable SSH (shell) access, so that only SFTP remains.
User1: twb, but i need shell access over SSH very much... i'm doing all the work remotely on the server
User3: User1 OK, so leave that on
User3: User1 my point is you turn off all the bits you *don't* need, so that brute-force crackers can't use them.
User2: the best thing is just to move sshd to another port, avoiding automated hacking tools
User1: twb, you say disable password based access, OsAC says i must have that in order to use SFTP :S kinda confused over here
User1: OsAC, already done that :D
User3: User1 SFTP does not require password-based authentication.
User2: twb is right
User1: [01:39] <OsAC> you need user/pass
User1: what do u mean then OsAC, sry i must have misunderstood u
User2: listen what twb  has to say :-)
User3: User2 I would not be comfortable with simply changing the port; I would also take the other measures I mentioned.
User2: User3 ofc
User3: Of course, I would also generally use port 443 because this is the least likely to be blocked by stupid corporate firewalls.
User1: ok guys, so now that u know my situation, how can i make it work?
User1: twb, i'm listening, what to do?
User3: User1 about what, specifically?
User1: the security measures you specified earlier were all been taken care of :)
User1: twb, how can i make sftp work?
User3: What isn't working now?
User1: do i got to change some settings in /etc/ssh/sshd_Config ?
User1: nope, told u: error: Response:	Fatal: unable to initialise SFTP: could not connect
User3: User1 what gives that error?
User1: dunno the cause, it says so when i try to connect in FileZilla
User2: drop filezilla and use http://winscp.net/eng/index.php
User2: andyou are done
User3: User1 you are on a Windows machine?
User1: twb, yes
User2: :-)
User3: User1 please get a copy of pscp.exe from putty's website.
User3: User1 while you're there, get putty.exe, too.
User1: i have them both already
User1: i also use them
User2: ohh
User1: told u i was doing all the work remotely on the server
User1: with putty and winscp
User3: Oh, oops.  I was confusing pscp and psftp.
User3: Get psftp.exe and run it with the server's name as the argument.
User1: so as i got it: FileZilla won't work for me because i can't specify a private key to use right? which is possible in WinSCP so it works
User3: I'm not interested in helping you get filezilla working.
User3: If you have already established that the problem is in filezilla, then we are done; you can take up the problem with filezilla's team.
User1: i was just asking so that i get it why it won't work with the one while it works with the other
User1: ok it works with psftp.exe
User5: Hello, I'm looking for some help with a BIND9 problem
User5: When I run named-checkzone I get the error that my db file has no current owner
User5: Its ok I've resolved it now, got some help in #dns
User6: hello,
User7: ucf is very cool stuff :)
User6: what is ucf?
User7: update configuration file
User7: http://packages.debian.org/sid/ucf
User7: it's for development of .deb packages
User6: i didn't think installing webmail would be so easy
User7: roundcube?
User6: yes
User7: how about configuring whole mail stack?
User6: i've been struggling with horde forever
User7: :)
User7: in my perfect world, this should be even easier:
User6: <ivoks> how about configuring whole mail stack? <--- what do you mean?
User7: sudo apt-get install ubuntu-mail-server
User7: pop, imap, mta...
User7: how did you configure imap and pop?
User6: sudo apt-get install postfix dovecot
User7: yeah, but you had to configure it :)
User6: not postfix
User6: only rbl stuff
User7: true
User7: so, you don't have SSL and you don't use dovecot's LDA
User7: not SSL, SASL
User6: nope
User6: i have tls, but i have a problem with it
User6: i get offered the wrong certificate
User7: it's not wrong
User7: it's generic
User7: you have to create your own
User6: i created one for 5 years, what i get offered is for 1 year
User7: dovecot and postfix, by default, offer 'snakeoil' certificate
User6: and it keeps asking and keeps asking
User7: so, you have to configure both services to use your certificate
User6: do you follow postfix-users ML?
User7: no
User6: ivoks, i love you :)
User6: you got me the right direction
User6: i thought postfix offered the certificate
User6: i tweaked dovecot and i get offered the right certificate now
User6: yay!
User7: great
User6: heh!
User6: now, how can i create & use one ssl certificate for roundcube?
User6: i think i have to make dovecot listen on 993, right?
User6: do i?
User6: oh, my server already listens on 993
User8: moin
User6: good morning
User9: hi guys, stupid apache question, but if i add a virtual host for domain.com... do i need to add another for www.domain.com or is this taken care of via dns?
User7: User6 you need to setup apache to use ssl
User7: User9 you need to do both
User7: User9 set up DNS and configure apache
User7: User9 in apache, you need to add 'ServerAlias domain.com' to www.domain.com vhost
User7: User9 but if DNS doesn't point domain.com to your apache server, there's nothing you can do
User9: ivoks, can i do something like a wild card?
User7: User9 i'm not sure, i've never tried that
User9: User7 i.e.  servername *.domain.com
User9: ah ok coolio.  i have a user who's using webmin
User7: doh :(
User7: webmin
User9: would be nice if he didnt have to add twice :)
User7: we hate webmin on this channel
User7: !webmin
User10: webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead.
User9: i hate webmin as well
User9: thanks for the heads up on ebox!!
User9: will def check it out.
User7: !ebox
User10: ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox
User9: User7 do you use ebox?  thoughts on it?
User7: User11 good morning
User7: User9 one of my clients use it, yes
User11: User7 hey
User7: User9 it's great, easy to use and quite simple
User7: User9 my client manages smb shares and user accounts with it
User9: it looks a lot cleaner than webmin
User6: i once used ebox, but it overwrote my smb.cnf so i got rid of it
User9: User6 what do you mean?  like it installed a blank conf over what u had?  or did u try to make a change and lose everything?
User6: i live happily with webmin
User6: Zlogger, i don't remember exactly what it did, but i remember losing my shares
User7: those things take full control of your configuration files
User7: you can customize ebox's templates, if you don't like defaults
User9: User6 sux man.
User6: ivoks, do i have to create another certificate for apache?
User7: depends on common name you used for mail certificate
User7: if the common name is the same as MTA, then no
User7: in another words
User7: if your mail server is mail.domain.com, and you created certificate with common name mail.domain.com
User7: if you have webmail on mail.domain.com, then no, you don't need additional certificate
User7: but if your pop/imap is mail.domain.com, and your webmail is www.domain.com/webmail, then you need additional certificate
User6: that means i need, because my mx is mail.domain.com and my webmail is on webmail.domain.com
User6: right?
User7: right
User12: hi, is anyone running hardy server with spamassasin and amavis, i getting the error that bayes synced databases every 3 hours with the cronuser
User12: very annoying :), can place a dirty hack but that's not nice
User12: anyone else having this problem?
User7: what's the error?
User12: bayes: synced databases from journal in 0 seconds: 646 unique entries (1023 total entries)
User7: that's not an error
User7: and that's not default in 8.04
User7: check your cron scripts
User7: redirect stdout to /dev/null
User12: i didnt change the cronscript, it start emailing since the last update i guess
User7: go to /etc/cron.d/
User7: you get that via email?
User12: yes
User12: from the cron daemon
User7: so, subject of email should have more info
User12: Cron <amavis@silvio> test -e /usr/sbin/amavisd-new-cronjob && /usr/sbin/amavisd-new-cronjob sa-sync
User7: grep -sr 'amavisd-new-cronjob' /etc/cron*
User12: http://pastebin.ubuntu.com/116411/
User7: so, you see where the problem is
User7: i have those scripts and they don't return anything to me
User12: how can i see what the problem is?
User12: without editting the scripts, i didnt change anything :)
User7: those scripts are ok
User12: ok
User7: ls -dl /bin/sh?
User7: have you customized spamassassin configs?
User12: nope defaults
User12: serge@silvio:~$ ls -ld /bin/sh
User12: lrwxrwxrwx 1 root root 4 2008-04-16 10:28 /bin/sh -> dash
User7: User12 log into that server, become root
User7: User12 do su - amavis
User7: User12 and then run /usr/bin/sa-learn --sync
User7: does that generate any output?
User13: http://paste.ubuntu.com/116431/    <---- is 'hostname' a valid option in dhcpd.conf?
User6: man 5 dhcpd.conf says it is
User14: I get the error "apt-get install build-essential." but the "build-essential" package is installed and up to date. How can i fix this?
User15: there's nothing to fix
User14: err sory errors is "error: C++ compiler cannot create executables"
User16: User14 Remove the '.' at the end?
User14: what . there is no . in the eroor "error: C++ compiler cannot create executables"
User16: You said: "apt-get install build-essential."
User16: Also, you probably need to install g++
User16: sudo apt-get install g++
User14: then i corected myself after _ruben replied
User14: already installed
User16: Although, that should be included in build-essential.
User16: Dunno. Look at the config.log
User14: that was the only problem i found
User14: http://pastebin.ubuntu.com/116439/ but maybe i missed something?
User14: how do i change the sim link for g++?
User17: i have a file server and i've set up samba for sharing home dirs to windows boxes,  nfs for linux and what can i do to make it easy for mac guys?
User18: tell them to use nfs or samba?
User7: you'll have to set up 'unsecure' nfs for mac
User17: how does gnome build the 'network' list of servers
User7: so it's better for them to use samba
User7: or, there's netatalk for old afp protocol
User17: what protocol builds up the 'Network' file browser
User7: wrong place for that question
User7: try #ubuntu
User7: i'd say it's smb
User17: its not smb as there is 'Windows NEtwork'
User17: all the macs are appearing there
User7: macs have samba too
User7: it shows computers from same workgroup
User7: if you select windows network, it shows all workgroups
User7: apple suggests using smb as default network protocol
User7: nfs is also supported
User7: afp is considered old, but imho, still is the best file sharing protocol for macs
User17: its doing something more
User17: as its picked up an sftp server
User7: are you sure that sftp server doesn't have smb?
User19: hi, operationally how different is 8.04 LTS and 8.10?  am i going to continually run into issues installing PHP 4, MySQL 5 etc on .04?  I like the sound of the LTS release, but if its more hassle to support locally....
User7: php4?
User7: why would you use php4?
User19: User7 legacy code
User17: RichardP, if you want to for production go with 8.04
User17: i don't think php4 is in 8.04
User7: well, i'd still go with 8.04
User19: User17 i would be surprised if it isnt
User20: !info php4 hardy
User17: RichardP, its not
User10: Package php4 does not exist in hardy
User19: then im screwed
User20: you can always install and maintain php4 from source yourself
User7: even php5 is old :)
User19: User20 i wanted to avoid that
User21: anyone has seen thing like that, lsi 1030 hard drives just wont show up
User21: i have two x345 ibm server
User21: one installed everytokey
User21: everything okey
User21: but with second server cant find drives
User21: any suggestions _
User21: ?
User7: have you initialized drives in raid controller?
User21: ivoks, its resyncing array at the moment
User21: thou there was live system running on it before
User21: i tried to install ubuntu on it
User21: thou redhat
User21: all driver disks i have found are aswell for redhat/suse
User7: you have lsi raid controller?
User21: yes lsi 1030
User21: both boxes to
User21: that what makes it strange
User21: thats
User7: 8.04?
User21: yes
User7: any errors in logs?
User21: hmmmz will check
User12: User7 sorry was afk, lemme check
User12: User7 it gives the same output as in the email :)
User7: User12 that means your spamassassin is configured for verbose output
User7: check /etc/spamassassin/*
User7: i'm sure you changed something there
User12: in local.cf everything is outcommented
User7: could you paste that line again?
User12: what line?
User7: the output
User12: sec
User12: $ /usr/bin/sa-learn --sync
User12: bayes: synced databases from journal in 0 seconds: 117 unique entries (117 total entries)
User7: https://bugs.edge.launchpad.net/ubuntu/+source/amavisd-new/+bug/165184
User22: Launchpad bug 165184 in amavisd-new "amavisd-new + spamassassin: cronjob spams root user" [Medium,Triaged]
User12: yeah found that one, but the date is 2007
User21: really strange booted up ubuntu again to check the logs for errors and what happens it found my hdd
User21: only option is that my array was broken or smt
User7: User12 so what? last activiy is 4 days ago
User7: User21 it probably wasn't initalized
User21: ivoks,  thou i didnot change anything in raid configuration util
User21: just booted up debian
User21: then it hanged or smt
User21: and then booted up ubuntu cd
User21: thou it was resyncing my array
User21: all the that time
User12: User7 ok :) well i thought that if it was reported in 2007, and having problems since an update it would not matter :)
User21: ivoks,  tnx for help anyways
User12: User7 thanks for the help ivoks, going to try those hacks later tonight
User23: Hi. Is there a netboot installer for ubuntu server? The only one I can find is this: http://archive.ubuntu.com/ubuntu/dists/hardy-updates/main/installer-i386/current/images/netboot/
User23: and that seems to be a regular ubuntu installation.
User23: The CD drive on my very old Dell only reads the inner parts of a CD, so I need a small iso :-p
User21: Ko_deZ, i would suggest you to go pxe boot
User23: User21 Thanks for the tip. Will have a paul41@example.net.
User24: Why do my servers crash when I try to get an iscsi-device attached?
User24: (Hardy)
User15: ouch
User15: wasnt there a bug in open-iscsi some time ago .. or are you using iscsi hba's?
User24: I'm trying to mount iscsi-devices exported by Sun storage (open storage, solaris)
User15: server fully up to date? (wrt to the open-iscsi bug)
User24: I just dist-upgraded :)
User24: It's pxe-booting as we speak :)
User24: So that will be a complete reinstall
User15: havent tried ubuntu as initiator, only as target .. using esxi's software initiators at the other end of the "wire"
User25: User24 did you try to mount an iscsi volume from your netapps?
User24: exported by Sun storage (open storage, solaris)
User24: I wasn't even mounting yet
User24: just discovering and attaching
User15: bah .. why is squid's logging so damn nasty .. its pretty much undoable to write filter regexps for the useless stuff
User26: I just installed server with the LAMP, Samba & FTP options.  Testing FTP results in no connection. Any idea which FTP package was installed and where the conf file is?
User20: dpkg -l |grep ftp
User20: at a guess, vsftpd, and the configuration should be in /etc/vsftpd/
User26: good idea
User26: User20 nope not fsftpd
User26: User20 it's using ftp/lftp.. ftp is the client and lftp is the server
User20: task-sel --list-tasks, find the task name for the ftp server
User20: then tasksel --show-packages <ftpserver task>
User20: lftp is a client, not a server
User7: User26 how did you install FTP server?
User26: oh.. hard to tell on the readout of the grep command
User26: User7 as part of the standard install of the server edition.. there's a point that asks what additional services you want.. I ticked Lamp, samba and ftp
User7: but dpkg -l | grep vsftpd results with nothing
User7: either you didn't select it or you've hit a bug
User7: which ubuntu version is that?
User20: cant be hardy, no ftp-server task in hardy
User20: at least, according to tasksel, anyway
User7: i don't think we have ftp task at all
User26: User7 it rusults in ii ftp  (next line) The FTP client (next line) ii lftp
User7: User26 notice: dpkg -l | grep vsftpd
User7: vsftpd
User7: not ftp
User26: k
User7: User26 what ubuntu version is that?
User26: looked in ~ for the .vsftpd.conf file but there wasn't one.. grep returns nothing .. version is 8.10
User7: vsftpd is system service
User7: it doesn't have users configuration
User7: you just didn't install ftp service
User26: I haven't yet manually..
User7: right, there's no FTP task in ubuntu-server
User7: http://images.howtoforge.com/images/perfect_server_ubuntu8.10/24.png
User7: so, you installed something else...
User7: tasksel --list-tasks | egrep ^i
User26: User7 yep.. the pic jogged my memory .. it was ssh .. should have remembered that since I'm on the server box via ssh now.
User7: this will tell you what you have installed
User7: there you go...
User7: we suggest vsftpd as FTP service
User7: once you install it, configuration file is /etc/vsftpd.conf
User26: User7 yes.. I have vsftpd on another machine and works well. I have issues though, setting it up so Joomla functions..It's been driving me nuts for several days
User7: vsftpd has nothing to do with joomla
User26: User7 it does on the back end when you need to change templates or upload pic etc..
User26: User7 not just vsftpd but ftp in general..
User20: User1 https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/308952 may relevant to you
User22: Launchpad bug 308952 in vsftpd "FireFTP(Mozilla) cannot LIST files" [Undecided,Incomplete]
User26: interesting
User26: so maybe proftpd?
User21: hmmmz anyone worked around with drbd ?
User21: should i make the filesystems to partitions i want to sync before sync ?
User15: User21 not too sure about your wording, but the sync can be initiated either before or after the partitions are in use (data wont be destroyed)
User15: *if* done correctly
User15: but no, i dont have any experience with drbd, just did some limited research
User21: _ruben,  i have no data just two partitions without filesystems, was wondering what type of filesystem i should create to there
User15: whatever filesystem you want to use
User21: ah okey tnx :)
User26: not FAT
User15: there's tons of howtos out there on how to setup up dbrb properly
User15: drbd
User21: yeah i was following the guide at drbd website
User21: just it mentioned lvm and stuff like that
User21: couldnot figure out can i use ext
User7: User26 that's a bug in client, not server
User7: User26 notice 'Hello, i reverted back to FileZilla_91.69.162.6_i586-linux-gnu.tar.bz2 and it is working fine now'
User20: User26 that bug has no relation to you, it was for dou213 (notice the line prefixed with User1)
User15: when using drbd i'd use lvm logical volumes to replicate, makes things a tad easier .. i hardly ever use "raw" partitions these days, apart from /boot
User26: Deeps, ivoks thanks.. I was just picking up on that.  with joomla it's just a setup issue. there's lots of how to's but nothing a-z definitive.  Once I figure it out I'll have to write one
User20: User26 you'll probably find that whatever issue you have with vzftpd+joomla, will occur with any other ftpd
User26: User20 I'm sure..
User20: User26 anyway, good luck configuring joomla :)
User26: User20 thanks. on public shared servers it hasn't been an issue at least with the isp's I use. on the home server it's been a little different :/
User27: User16 where you the one looking at cobbler a cycle or two ago?
User16: User27 Yes.
User27: fyi, 1.3 seems to support debian/ubuntu directly: https://fedorahosted.org/cobbler/wiki/SupportForOtherDistros
User16: User27 Oh, someone else did my job. Fantastic!
User27: I wonder if someone has messed with it yet
User1: thx Deeps, i'll give it a check
User28: what is the most common cause of max cpu utilization by udevd?
User29: server team meeting in #ubuntu-meeting now
User30: !screen
User10: screen is a terminal multiplexer. See http://www.kuro5hin.org/story/2004/3/9/16838/14935 and http://en.wikipedia.org/wiki/GNU_Screen
User31: Anyone have success installing Ubuntu server with hardware raid on an HP Proliant dl160 g5--or is software raid the only solution?
User32: hi. what is the best way to set up an FTP server ?
User32: imo ?
User32: right, but how would i make useres login to the same directory
User32: the FTP users
User32: heheh ok
User30: User7 is there a wiki page to track the postfix/dovecot integration?
User7: no
User7: i was working on this today
User7: trying to get it in before FF
User30: User7 I'm just trying to remember what are the goals
User7: goal is to provide full postfix-dovecot integration
User7: including, not related to that, maildir support
User7: and other optimizations
User30: User7 right - that means: maildir by default in /home/$USER/Maildir/, postfix using dovecot sasl, postfix using dovecot lda
User7: i don't see why i can't use ucf to take over package
User7: it even has examples in man page how to do that
User7: User30 right
User7: s/package/config
User31: User32 take a look at <http://www.cyberciti.biz/tips/rhel-centos-linux-install-configure-rssh-shell.html>. at the bottom of the page, you'll find a method for 'jailing' users in their own directories
User30: User7 since we've decided to provide a tight integration between  dovecot and postfix I think that dropping a different configuration file and update the init script to look for it is the easiest solution
User7: how about making dovecot.conf a link to dovecot-original.conf in dovecot-common, and then in dovecot-ubuntu, making it a link to dovecot-ubuntu.conf?
User32: erzlaute, right, but if i want multiple users to access the same directory for FTP
User7: that way we don't have to change init script
User7: or use alternatives or something
User31: oh, right--sorry--i should've read more closely. not sure how that would be done securely...maybe a better solution will come up
User7: anyway, dovecot needs serious update
User7: new version
User30: User33 what's your proposal?
User30: User7 yeah - it seems that experimental has an up-to-date package.
User7: User30 current is .11, irrc
User7: iirc too
User30: User7 well - I don't know if symlinking would be accepted
User7: User34 ping :)
User33: wanted to ask about what samba version do we want in jaunty. 3.3 is out but it may not be a good idea as it's really recent. the latest release of the 3.2 branch is 3.2.8 whereas jaunty only has 3.2.6. does anyone object to updating samba to 3.2.8?
User7: let's ask before we spend another day for nothing :D
User33: jaunty has 3.2.5 even
User30: User33 right - there is a discussion about that on the samba maintainer list in debian
User34: User7 yes
User34: ?
User7: User34 i have a question
User34: just reading scrollback
User7: User34 would creating symlinks (dovecot.conf -> dovecot-[ubuntu|original].conf) be bad?
 * andol isn't sure about 3.3, but would definatly not mind seeing 3.2.8 in Jaunty.
User34: why is a symlink necessary? why not just run dovecot with some different argument to use a different configuration file?
User34: that would be perfectly reasonable and far less complex
User7: User34 cause then will have to change init script
User34: so what?
User30: User7 I thinks that's reasonable
User7: ok then
User34: honestly, messing about with configuration files and symlinks is going to get you tons of bugs down the road
User34: keep it simple
User30: User7 some of the init scripts have specific logic to handle ltsp
User7: if [ -f /etc/dovecot/dovecot-ubuntu.conf ]; then NAME=dovecot-ubuntu
User33: User30 http://lists.alioth.debian.org/pipermail/pkg-samba-maint/2009-February/thread.html which one?
User30: User33 http://lists.alioth.debian.org/pipermail/pkg-samba-maint/2009-February/006337.html
User7: or, better CONF=blablabla, instead NAME
User7: User34 thank you!
User35: i realize that a fresh install of Ubuntu doesn't have UFW turned on, but is there a type of firewall that's already on?  i think my port 9103 (bacula) should be trying to accept data.. but i'm getting a connection refused.  is there something blocking it?
User35: should i just turn on ufw and ask it to open 9103?
User7: User30 but, i already see tons of bugs 'i've changed this and this in dovecot.conf, and nothing works' :)
User36: User35 Shouldn't be any rules active by default. You can always check by running "sudo iptables -L"
User30: User7 right - we could drop a comment in dovecot.conf about that
User30: User7 or change the way configuration files are used
User35: Faust-C: what log do you have in mind, in particular?  (i'm fairly new to this and i understand that /var/log/syslog is important... i do see a /var/log/bacula/log but it doesn't look like much is in it.
User30: User7 hm - nevermind
User30: User7 it would too complicated
User7: right
User30: User7 let's just modify the init script to use dovecot-postfix.conf if it's there
User7: ok
User7: and i'll add warning in dovecot.conf
User30: User7 and add a comment to dovecot.conf to point to dovecot-postfix.conf if it's there
User7: big warrning :)
User30: User35 you should check if bacula is listening on port 9103
User30: User35 and is accepting connection from the outside - it may be configured to only listen on localhost
User7: User30 i've forgot to mention one thing at meeting
User35: thank Faust-C and andol  -- andol i tried the 'sudo iptables -L' and i don't really understand what it says- - but this is a fresh install, and i haven't touched iptables or ufw yet.  i'm trying to get bacula working (first thing) before i enable anything else.
User34: User7 no problem, hope that's all doable, sorry for sticking my oar in late
User30: User7 I wouldn't call the package ubuntu-mail-server
User30: User7 dovecot-postfix seems the best choice IMO
User7: User30 should we enable managesieve by default or not? none of ubuntu clients support it
User7: User30 right, i won't call it ubuntu-*
User35: User30 ahh interesting, i did an 'nmap -p1-65535' (or something like that) to see what would turn up on my host, and it only showed port 22 (ssh obviously) was open.
User30: User7 the managesieve patch is included
User35: User30 where do i look to see if bacula isn't accepting connections from the outside?
User7: User30 still, managesieve is just great stuff, supported by kmail and thunderbird plugin
User30: User7 what do you mean by enabling it?
User33: User30 ok, but that doesn't say what we decide for ubuntu jaunty
User30: User7 I agree.
User7: User30 managesieve listens on port 2000
User36: User35 what does "sudo netstat -tlp" tell you? It should give you information about which services listens on which ports.
User7: User30 so, it's an additional port, but none of our clients (except kmail) can use it
User7: out ob the box
User7: evolution even doesn't want to work on it
User30: User7 that's ok
User7: ok
User7: so, on by default? :)
User30: User7 a new port can be opened.
User7: i know
User30: User7 we'd have to make sure that sieve scripts are stored correctly and processed by the lda
User7: right, there's an open bug about that
User30: User33 true - but it gives us clues about what debian is doing
User7: any users can overwrite others sieve scripts :D
User30: User33 and we're working closely with debian on the samba packages
User30: User7 oh! that should be fixed before enabling managesieve by default then
User7: of course
User30: User7 as we're close to FF may be we should defer managesieve by default for the next release
User7: well, we have to update dovecot anyway
User7: once we do that, we've closed that bug
User33: User30 I know, and I already asked slangasek about that. he said 3.3 is probably not a good idea but a more recent version of 3.2 should work. so does anyone in the server team disagrees?
User30: User7 let's focus on updating dovecot and integrate with postfix (sasl, maildir and lda)
User30: User33 I think trying to get the latest 3.2 would be a good thing
User33: ok
User30: User33 however we'd have to package the latest release since debian won't push it to unstable before our FF
User33: why wouldn't they? Steve told me it was possible
User30: User33 true - what matters here is a timeframe
User30: User33 we need to get 3.2.8 (IIRC) before Thursday, next week
User35: andol and Faust-C okay, i've done both netstat commands, 'netstat -tlp' shows me that 'bacula-dir' and 'bacula-sd' are doing something (i can't see what.  'netstat -lnp' shows me that 91.69.162.6:9101 and 91.69.162.6:9103 (the bacula ports)  are LISTENing;  can you help me with what this may mean?
User30: User33 and I don't think that debian will package 3.2.8 for unstable within a week
User36: User35 If you'd like to interpret the result you can always paste it onto http://paste.ubuntu.com/
User22: New bug: #327703 in dnsmasq (universe) "DHCP Request Cycle can get caught in infinite loop" [Undecided,New] https://launchpad.net/bugs/327703
User35: rad thanks andol
User33: User30 see the end of http://irclogs.ubuntu.com/2009/02/08/%23ubuntu-devel.txt and the beginning of the next day
User35: i'm going to go through my bacula .conf files to see if i can make heads or tails to see if i'm only accepting from localhost or something like mathiaz said.
User35: cause i pretty much swear i haven't to uched any firewall stuff
User30: User33 ok - well we'll see then
User30: User33 if 3.2.8 hits unstable before FF we can merge it
User33: ok, I'll follow this closely, to make sure we either have it via merging from debian or via packaging it ourselves
User37: why did we choose IT/computers? I should have chosen the blue pill....
User35: lol teddy
User7: User38 is there a way (like postconf) to write something in master.cf?
User7: User38 if i would like to integrate amavis with postfix, right from amavis package, for example
User7: afaik, there's no such thing
User35: okay, bacula doesn't want to connect to either 'buddleia:9103' (buddleia is the host name) or 'localhost:9103' i don't know what to do ... (i understand in the bacula director conf file i'm not supposed to use 'localhost' in the 'storage' section, i just did it for testing purposes.
User35: so bconsole connects fine to the director, but the director isn't connecting fine with the storage daemon
User7: User35 i could help, just give me a minute to sort some thing first
User35: ivoks, thank you so much.  i guess i'm still in the holding hand stages with this -- i've been working with linux off and on for almost 10.. probably more..  years.. and i still don't understand it
User8: i've got a grypted root volume from which i boot, is it possible to type in the passphrase via tty0 and ttyS0?
User7: User8 why not?
User7: User35 ok, let's see
User8: and how?
User8: a created ttyS0 in event.d, the getty starts after that
User7: User8 you need to tell grub to use terminal
User8: it does, but i'm not able to type in the passphrase
User7: User8 you see the output?
User8: i can move through the menu of grub, but after i boot the kernel, it stops
User7: User8 that's not it, do you see kernel loading in terminal?
User7: User8 that's *after* grub is loaded
User8: no
User7: User8 http://ivoks.blogspot.com/2008/09/full-control-over-server.html
User7: User8 check out grub section
User8: serial --unit=0 --speed=9600
User8: terminal --timeout=10 serial console
User8: that are the first lines of menu.lst
User35: ivoks, what do you want me to share with you?
User7: User8 quiet serial console=ttyS1,57600n8 (in my case)
User8: aha!
User8: yeees, that's it
User8: gah! ;)
User7: User35 just a second
User35: ivoks, also looks like i lost my mouse.. so i can't cut and paste (i'll bring in a mouse on friday
User7: User35 so, in bconsole
User7: User35 when you do status, it waits where?
User35: i've never done status before... i have 1,director, 2 storage, 3 client 4 all
User35: just go ahead and hit 2?
User7: 4
User7: all
User35: k
User7: did it stop somewhere?
User7: or did everything go without problems?
User35: yea, 'failed to connect to Storage daemon File' also failed to connect to Client
User35: but it connected to the first one, the director
User7: ok, let's take care of storage first
User7: which ubuntu version is that?
User35: 8.10
User35: server amd
User7: nise
User7: nice
User7: ok, open bacula-sd.conf
User35: k
User7: check the Storage section
User7: is there SDAddress?
User35: yea, it's 91.69.162.6 ... originally it was 91.69.162.6 .. i changed it for 'testing' purposes because id idn't know what was going on -- i don't mind changing it back to 91.69.162.6
User8: User7 now i'm only able to type in the passphrase via ttyS0
User7: User35 just delete it :)
User35: delte.. okay
User35: how abotu # instead of delete?
User7: User8 that's why you can have multiple grub entries, where you can define for each how to handle that problem
User7: User35 or comment it out, yes
User8: User7 isn't there any soloutions? :/
User8: and per default there is only standard and rescue
User8: perhaps i need to violate rescue for that
User7: User8 i didn't think about them and now i'm helping AndyGraybeal, and i can't help everybody at the same time :D
User35: ivoks == god
User7: no, i'm not
User8: pff ;)
User35: it works! holy crap
User7: User35 it does? nice
User7: User35 open bacula-dir.conf
User7: User35 find 'Storage' section
User35: ok
User7: User35 check Address
User35: address = buddleia (my server name)
User7: Address in Storage section of bacula-dir.conf and SDAddress in bacula-sd.conf must be the same
User7: buddleia needs to resolve to 91.69.162.6
User35: i thought i just uncommented SDAddress out in bacula-sd.conf
User7: i'm just telling where the problem was
User35: aaah understood
User7: now, bacula-sd listens on all IP addresses
User7: but you might want to squize that a bit
User35: *understood.
User7: if director and storage are on the same server
User7: it would be reasonable to hade localhost for Storage Address and SDAddress
User7: s/hade/have
User35: buddleia doesn't really resolvge i don't think.. i just made the name up
User35: how do i know if it resolves?
User7: hehe
User35: ah so your saying i could just use localhost then and all is okay?
User7: User35 yes
User7: on both
User35: rock on thank you
User7: for Storage
User7: not for everything
User38: User7 there's a tool that scottk gave me that's in postfix.  outside of that (which we can modify...), there isn't a postfix-provided api
User35: ivoks, for storage and director, correct?
User7: User35 correct
User7: notice that we haven't talked about Director at all :D
User7: User38 ok
User7: User38 i'll check it out
User35: ivoks, nods, is there a reason .. should i not touch my director conf?
User7: User35 no, i'm just saying... bacula is very complex piece of software
User7: User35 Storage section in bacula-dir.conf describes how to contact storage daemon
User7: User35 you could have director on one machine, storage on another, clients all over the world and console on your ipod
User7: User35 bacula makes that possible, but cause of that, for newcomers it's PITA to set up :D
User7: User35 in 8.10, everything should be set up out of the box, so i don't really understand why you changed configs :D
User35: thanks alot ivoks. so far director and storage are on the same place, no ipod with  linuxes yet for me.
User35: ivoks, it didn't work, i didn't change the configs!
User7: it did
User7: remeber the SDAddress? :)
User21: bacula is nice :)
User7: very nice :)
User39: User41 is the ebox fix in a ppa or somewhere i can get the .deb?
User40: User39 dont tell me you use ebox to run your system
User39: no
User39: a friend of mine is having troubles
User39: :D
User39: he updates from hardy to intrepid
User39: updated*
User39: http://forum.eboxplatform.com/index.php?topic=980.new;topicseen#new
User40: User39 riiiight...:)
User7: if it isn't reported on launchpad, it doesnt't exist :D
User39: heh
User7: when is FF?
User7: i would like to squeeze support for DELL servers into ipmitool :)
User35: okay, ivoks, thanks for the hand holding.  appreciated.
User7: User35 everything works now?
User35: i'm pretty sure i can go from here.
User7: if you have problems with client, check FDAddress
User35: status turns out fine thoug, still need to play with the client, but i think i'll be fine with that
User7: in client's bacula-fd.conf and Address in Client section of bacula-dir.conf
User35: gotcha, awesome th anks for say ing that.
User7: np
User7: and, if you find some bugs, report them on lp
User7: i'm trying to keep bacula in shape in ubuntu
User7: but there's one bug across all ubuntu version >8.04, which i'll deal with next week :D
User41: User39 I think interpid-proposed
User41: User39 other than that I don't think so... the version in my ppa is old
User39: mm
User39: i don't find it on -proposed
User39: i will apply your patch and upload to my ppa
User35: User7 all checks out good now.
User41: User39 err wherever mathiaz uploaded it
User7: User35 i know, that bug isn't related to you, since you've managed to install bacula :)
User41: User39 if you want to run the latest the ebox-ppa has packages that work for intrepid
User39: really?
User35: User35 i wasn't talking about the bug :P  but just about the last test i ran with the Client alsol.
User7: ok
User41: User39 it's not the version that shipped with intrepid, but it will run on intrepid.. if that makes sense
User39: right
User39: he just wants it to run
User41: User39 https://launchpad.net/~ebox-unstable/+archive/ppa
User41: in case you didn't have it :0
User39: i was looking at https://edge.launchpad.net/~ebox/+archive/ppa
User41: ah, probably the same thing
User39: yeah one is stable and the other developent i think
User35: ivoks, can you help me with btape?  i'm doing this: "sudo -u bacula btape -c bacula-sd.conf Quantum" it gives me a prompt with no errors, i type 'test' and nothing happens.
User7: sudo -u bacula "btape -c bacula-sd.conf Qantum" ?
User35: well the quotes were around the whole thing.. just to distinguish it from the rest of my typing
User7: but, that's wrong
User7: sudo -u bacula "btape -c bacula-sd.conf Qantum"
User7: otherwise, -c will be considered as sudo switch
User35: interesting
User35: i swore btape worked y esterday
User7: now it doesn't?
User35: looks like it... so evil
User35: i co uldn't get bacula to work, but btape did the 'test' just fine yesterday
User7: did you enclose btape in "" now?
User7: as i told you?
User35: yea, i did.. and it says: sudo: btape -c bacula-sd.conf /dev/nst0: command not found
User35: i'm in /etc/bacula (just in case your wondering)
User7: you didn't then
User7: sudo is executing bacula-sd
User35: well earlier it atleast worked, when i enclose it in quotes, it doesn't work
User7: become root
User7: sudo -i
User35: k
User7: then move to bacula user: su - bacula
User7: then run, as bacula user, btape -c bacula-sd.conf
User35: that gets me into bconsole, and i run 'test' and no diec from there.
User35: *dice
User35: any thoughts?
User35: i ran 'test' just fine yesterday
User7: are you sure you are bacula user?
User4: User7 Note that the scripts lamont added to postfix for adding policy servers or smtpd proxies are very basic.  They do the limited thing they were meant to do, but could certainly do with improvement.
User7: whoami
User7: User4 if they can add amavis, that's all i'm looking for :)
User4: User7 I was cribbing from the amavisd-new docs when I wrote it.
User4: ;-)
User7: :)
User35: User7 i did "su - bacula" like you said, and it appears that i didn't become the bacula user
User7: right, bacula has /bin/false shell by default
User7: change it tu bash
User7: to
User35: ok
User35: ivoks, okay now i'm 'bacula' i ran btape, and test just sits there.  yesterday it made the tape dance a little
User7: User30 i think i have dovecot sorted out
User7: User30 care for a debdiff?
User30: User7 sure
User30: User7 I can have a look at it
User42: why does mtop try to install itself using root@localhost with no password? shouldn't it try to install itself using the debian-sys-maint user?
User42: or as man mtop states... make a mysqltop user with all privileges set to N except Process_priv ...
User7: User30 http://www.init.hr/dev/jaunty/dovecot-postfix.debdiff
User7: User42 report it as a bug
User35: aah it says "ensure that bacula is not running" when i use btape.... maybe this will change the circumstances when i turn off bacula.
User7: ScottK lamont ^^ i'm also interested in your opinion
User35: User7 turning off the storage daemon, made the world of difference when running btape :)
User7: User35 that's how it works
User35: <- slowly learning
User7: lol, ignore the changelog :D
User4: User7 Right.  Still needs the script called for the master.cf changes.
User7: User4 yes, but that's another step, to integrate amavis
User7: User4 for postfix+dovecot, this is all that's needed
User4: OK.
User4: Right.
User7: User4 i would also like to move roundcube to main for jaunty+1 or +2
User4: Sorry.  Brain slow today.
User4: You'd want to add a similar binary to the amavis package for that.
User7: and include it's sieve patch, so that we have full mail stack
User7: for what?
User7: for amavis, only config dropped in amavis's conf.d and two lines in master.cf is enough
User7: that could be done in postinst of this binary (dovecot-postfix)
User4: Doesn't amavis have to control that?
User7: files in conf.d?
User30: User7 why do you need to replace dovecot, dovecot-common in dovecot-postfix?
User30: User7 AFAICT there isn't any file that is shared between the packages.
User7: User30 ah, good catch, that's from old idea
User4: User7 Yes.  Isn't this the same conffile problem that stopped the tasksel approach?
User7: User30 that's leftover from ucf stuff
User7: User4 tasksel problem was that we couldn't edit files
User7: there's noting stoping us in dropping files in conf.d
User7: that's the idea of conf.d
User7: like /etc/apache2/conf.d
User30: User7 what is managesieve-vritual-users-fix
User30: User7 used for?
User30: User7 is it a security fix?
User7: User30 fix for https://bugs.edge.launchpad.net/ubuntu/+source/dovecot/+bug/307291
User22: Launchpad bug 307291 in dovecot "Security hole in ManageSieve: Virtual users can edit scripts of other virtual users" [Undecided,New]
User7: User30 yes
User7: User30 patch is provided by http://dovecot.org/list/dovecot/2008-November/035259.html
User30: User7 ok.
User30: User7 you've also enabled ssl for postfix
User7: yes
User30: User7 why use /etc/ssl/certs/ssl-mail.pem
User30: User7 ?
User7: and disabled weak
User7: ssl
User30: User7 rather than snakeoil directly?
User7: well, ssl-certs create their own certificate
User7: User30 i would prefere if users would put their own certicates as ssl-mail, instead of changing configs
User7: if they change config they'll get unneeded diff
User7: of configs
User7: so, ssl-mail is a link on snakeoil
User7: so user can just relink it or remove it and put it's own
User30: User7 users could update snakeoil directly?
User7: User30 i know, but in 99% they'll want to change the name :)
User30: User7 or you want to support different certificates on the same system?
User7: that could also be a usecase
User30: User7 I wonder if Maildir/ is a good location for the user mailbox
User7: if we prefere users to change config, that's no problem
User7: User30 that's unwriten default setup
User30: User7 what is the default home_mailbox in postfix?
User7: User30 lots of howtos use ~/Maildir
User7: User30 default is none, which is then mbox in /var/mail/
User4: User7 Good point.
User4: (re conf.d)
User7: User30 i'm thinking of removing dovecot's related stuff from postfix, on dovecot-postfix removal (in postrm)
User7: User30 so that postfix continues to operate once package is removed
User30: User7 right - I was thinking the same
User30: User7 smtpd_tls_auth_only = yes
User7: yes?
User30: User7 does this mean we won't support some smtp clients?
User7: no
User7: this means no SASL if it isn't crypted
User4: Which is what you want.
User7: we don't want plain text passwords over wire
User7: User30 if client doesn't support TLS (i can't think of any), then it won't be able to use SASL
User7: but it'll be able to use server as a relay host if it is in the same network
User4: User7 Older Outlook/Outlook Express need SMTPS.
User7: User4 really?
User4: Yes.
User7: then we'll enable smtps too
User7: somehow :D
User4: I think Outlook 2007 was the first to do TLS.
User7: that can't be true
User4: Maybe 2003.
User4: I don't recall for sure.
User4: I know a lot of people still use Office 2000/XP.
User7: i'll check that out
User4: I think the last thing we want is "Sorry, you need to update your MS Office to use ours system."
User7: we'll enable smtps
User4: OK
User30: User7 in dovecot-postfix.conf: disable_plaintext_auth = yes
User7: i think outlook supports TLS for a long time
User30: User7 are we loosing some clients?
User7: it's just that you have to manualy change port
User30: User7 ie some POP/IMAP client won't be able to connect?
User7: User30 that's the same thing as postfix before
User7: User30 if you want to authenticate, use imaps or pop3s
User7: User30 no plain text passwords over wire
User30: User7 ok
User30: User7 mail_max_userip_connections = 5
User7: yes
User30: User7 that's too low IMO
User30: User7 thunderbird is known to open multiple connections at the same time
User7: well...
User7: we could raise it to 10?
User30: User7 IIRC it opens an imap for each folder :/
User7: if that's true, then it's broken
User30: User7 I'd go with the default upstream value
User7: iirc, 10 for pop, 3 for imap :D
User30: User7 oh you're right
User7: 10 for imap
User7: 3 for pop
User30: User7 login_greeting_capability = yes
User30: User7 are we breaking existing clients?
User7: no
User30: User7 or is it just an optimization issue?
User7: it's optimization for those that support it
User30: User7 imap_client_workarounds = outlook-idle delay-newmail
User30: User7 ^^ we support more clients OOTB
User30: User7 ?
User7: yes
User7: those are bugs in OE
User7: and this is workaround
User30: User7 same thing for: pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
User30: User7 ?
User7: yes
User30: User7 postmaster_address = postmaster@localhost
User7: right
User30: User7 is there a way to get the domain from the debconf db?
User7: for lda, postmaster_address needs to be set
User7: i haven't looked for it
User30: User7 or take the domain name?
User30: User7 how does postfix handle that?
User7: we could do that
User7: postfix adds localhost as designated address
User7: so, this should be sane as default, but we could add something
User7: postfix asks for user input on this one
User30: User7 ok - I'd suggest to mimic what postfix LDA does by default
User7: but always adds localhost
User7: imho, @localhost is best option
User30: User7 quota_full_tempfail = yes
User7: but, i could look into scripting that into something...
User7: right
User30: User7 re @localhost, I don't what would be the best option
User7: instead of bouncing email, give sender human report
User7: people always resend their mail on errors
User30: User7 if @localhost is standard practice we should keep it that way
User30: User7 ScottK or lamont would probably know better on that subject
User7: User30 postfix deliver to $mydomain, but...
User7: User30 with $mydomain, it always accepts mail for localhost
User7: User30 otoh, taking domain name from /etc/mailname
User7: User30 in some cases results with problems
User7: when people misconfigure it's mta
User7: their
User30: User7 ok - I don't know. But I'd do the same way as the default postfix LDA handles the postmaster_address
User7: that's 'postmaster' :)
User30: User7 regarding the quota, the default postfix LDA doesn't handle that
User7: without the domain :)
User7: User30 it does, kind of
User30: User7 ok - so why not setup the dovecot LDA to do the same?
User7: User30 it returns not quite understandable message
User4: I think @localhost is a reasonable default
User7: User30 i didn't try without domain, but i will
User30: User7 auth_socket_path = /var/run/dovecot/auth-master
User30: User7 ^^ why is this commented?
User30: User7 shouldn't this be enabled for dovecot LDA?
User7: hm...
User7: i'll check that out
User7: it should be enabled
User30: User7 so under this setup all mail users are local users
User7: yes
User30: User7 their email is stored in /home/user/Maildir/
User7: yes
User30: User7 where are the sieve scripts stored?
User30: User7 since managesieve is enabled by default, we should make sure it works correclty
User7: ~/sieve
User30: User7 ie: sieve scripts can be uploaded/managed
User7: but we could move that into Maildir too
User30: User7 *and* that the dovecot LDA process them correctly.
User30: User7 I don't think that sieve scripts should be under Maildir
User30: User7 or is it common/supported to upload sieve scripts via IMAP ?
User7: over sievemanage
User7: or ftp/sftp
User30: User7 as for the security patch it's irrelevant to this setup (but should be included anyway)
User30: User7 since it deals with virtual users (which is not the configuration here)
User7: this is patch for dovecot in jaunty
User7: it's not related only to 'setup'
User30: User7 right - it's relevant to dovecot, not dovecot-postfix
User7: i haven't tested this
User7: so there should be a new debdiff once i trougly test it
User7: check this out:
User7: http://blog.janus.cx/archives/237-dovecot-Fatal-postmaster_address-setting-not-given.html
User43: when using apt-get, is it possible to download the details of changes in a package?
User7: argh...
User43: aptitude shows the generic package description, but I am looking for the details of the fix
User43: oh... "C" for changelog
User43: weeee
User7: mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/dovecot-postfix.conf
User7: that should be right :)
User7: User30 i've checked; having 'postmaster' as postmaster_address is fine
User7: User30 postfix will add domain then
User7: or deliver to the alias
User30: User7 great
User30: User7 would it make sense to split all configuration in their own files?
User7: and it's running without problems without unix_socket_auth
User7: User30 i don't understand?
User30: User7 something like: dovecot-imap.conf, dovecot-pop.conf, dovecot-lda.conf, dovecot-auth.conf
User30: User7 and then start relevant daemons with their own configuration files?
User7: hm
User30: User7 would that help in our setup?
User26: is there a way to import or convert a vcard export from evolution's address book so I can import it into abook? thunderbird and abook don't import vcard files
User7: User30 we would just have more configuration files to add -postfix too :)
User7: User30 i wouldn't go there for jaunty
User7: User30 but we could explore that for +1
User42: this doesn't seem to be good :( http://pastebin.com/m55058262
User7: User42 that application isn't supported by ubuntu-server
User30: User7 ok
User7: User30 so, just for the record, this debdiff doesn't work :)
User7: User30 i'll provide a new one with some changes
User7: should be up in next 24 hours
User26: nevermind .. found a site http://labs.brotherli.ch/vcfconvert/
User42: ok, then what should i use to monitor apache? or which ubuntu supports it?
User30: User7 awesome - thanks for taking up this task!
User7: User30 i hope this time it will get accepted :D
User7: User42 well, it works for me on 8.04
User7: maybe you have high traffic?
User42: just installed a VM using intrepid... access.log is 51372 & error.log is 1109 ... not sure why that should cause a buffer overflow issue
User7: i haven't tested it on intrepid
User7: anyway, that's all from me for today
User7: take care
User44: hi - have just upgraded my server from 7.10 to 8.10 - now nothing works - no server app will start on boot and apache2 wont even start correctly :/
User4: User44 Did you upgrade directly 7.10 or stepwise 7.10 -> 8.04 -> 8.10?
User4: ... directly 7.10 to 8.10 ...
User44: yes 7.10 to 8.04 then 8.10
User44: to tell u the truth it worked pretty bad already in 8.04 so i thaught that maybe a upgrade to 8.10 would fix it but it just made it worse
 * ScottK looks around for someone who knows about Apache.
 * ScottK <-- mail server guy.
User44: my mailserver dont works pretty good either now :/
User44: when i got things to work in 8.04 i could not send any mails :/ its pretty bad here :P
User44: i get this when reconfig:
User44: Warning: found /etc/apparmor.d/force-complain/usr.sbin.mysqld, forcing complain mode
User32: hi, i just installed munin master and munin node , what is the difference between the two, and how do i use them ?
User33: User32 you can install munin-node on multiple machines, and each node sends the data to one machine which has munin installed
User35: well, i'm running my first 'fill' onto my tapes; feels good.
User35: looks like my throughput is roughtly 9250KB/s
User32: what is the best way to install webmin on 8.10 server ?
User45: !webmin
User10: webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead.
User46: orudie, you *can* do it from the webmin website, but, like ubottu says, it may cause problems :(
User32: i just installed munin and munin-node, trying http://myip/munin  no data there
User47: !ebox
User10: ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox
User32: viezerd, E: Couldn't find package .^ebox-.*.
User47: try without that first point "." ;)
User47: @orudie
User32: viezerd, http://pastebin.com/m6b9ff3f
User32: viezerd, ubottu> ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox
User32: viezerd, ooops sorry
User32: viezerd, WARNING: the eBox package released with Ubuntu 8.10 (Intrepid Ibex) is broken and cannot be installed. See bug #255368 for information and unsupported workarounds.
User22: Launchpad bug 255368 in ebox "ebox: Depends: libapache-authcookie-perl but it is not installable " [Undecided,Fix committed] https://launchpad.net/bugs/255368
User47: hmmz, orudie ; drop that second point too --> sudo apt-get install ^ebox-.*
User47: that did it for me
User47: euh
User32: viezerd, they say its broken for 8.10 which is what i have
User47: User32 I am on 8.04 myselve
User48: how often would people reccomend taking snapshots (i.e. backups) of a file system with mysql on it?
User30: User48 it depends on your backup policy. However you'd better use mysql tools to do a backup of your mysql server
User30: User48 either mysqldump or mysqlhotcopy to make sure that you have a consistent backup of your mysql databases;
User49: Yes, dumping the db to some exterior storage on a regular basis is the safest
User48: i'm going to
User48: with amazon's EBS snapshots
User48: but i dont know at what frequency i should run them
User48: nightly i think for starters
User49: It depends on how much the data changes
User50: I liked zrm backup
User50: User48 well, how worth is your data?
User48: how much is it worth
User48: its important
User48: heh
User48: could we lose a day?  ugh i donnao
User44: Hi - upgraded my server from 7.10 to 8.10 today - but that resultet in some problems... First apache2 did not work but that is fixed now :) I can get access to the server through SSH but cant access the shell on the computer locally... And no server app is starting auto. on boot Any ideas how to fix this?
User43: in regards to local access, what errors do you see on console or in /var/log/messages or /var/log/auth?
User44: wait a sec
ubuntu-server
Ubuntu IRC