User1: got a question for you folks, i've recently installed a ew7811un wifi *stick*
User1: i've tried every guide i can find online and cannot get it to connect successfully to my home wireless connection
User1: i've even rebuilt the kernel module for it, and it will not connect to my wireless...i have no GUI installed on this box, so everything must be done via cli
User1: le sigh
User2: rreset
User2: reset
User2: dammit :)
User3: How can i change a digit of a defined variable? SERVICE=$SERVICE$1 does not work.
User4: Hello. Is there any way to install Squid 2.7 under Saucy? I can only find squid3 packages, and I kind of need squid2.7 :-/
User5: zul, OpenStack virtualization session PM today = are you running that one?
User6: yeah
User6: i think
User7: hey
User6: User5  http://docs.openstack.org/admin-guide-cloud/content//section_manage-logs.html
User8: User12 I just filed https://bugs.launchpad.net/debian/+source/nginx/+bug/1253691. Do you have any interest in working on it?
User9: Launchpad bug 1253691 in nginx "Specially crafted request URI permits security restriction bypass" [Undecided,New]
User8: Filing the MIR for nginx is still on my TODO.
User8: So I will do this first, unless you want to take it?
User10: hello
User10: I got a question about postfix
User10: ehlo diablo3post.com 250-vividgn.com 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN auth plain 503 5.5.1 Error: authentication not enabled auth login 503 5.5.1 Error: authentication not enabled
User10: Im getting the error authentication not enabled
User10: when i have it enabled.
User11: hi there. quick question. on /etc/crontab I have this row: 47 6    * * 7   root    test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly ) ; how come this machine executes cron.weekly every Thursday instead of Sunday (dow in crontab row is 7)
User12: User8 absolutely, you'll notice my comments on the bug (via my phone)
User12: User8 note that there's another nginx CVE that i also need to address and i need to get the changes from Debian first (they just issued release 1.4.4 so a merge of 1.4.4 from Debian to Trusty would fix two CVEs AFAICT.)
User8: User12 great. Thanks! Please let me know how it's going and if you need any help.
User12: User8 don't think there'll be an issue, after consulting with #ubuntu-hardened i'm settging confirmed/high other than that i'm just getting the source so i can debdiff it.
User12: since apparently it went missing on my system
User12: User8 since of course i'm not security team, i always consult with them before changing a security bug's status ;)
User12: but first... coffee.
User12: User8 the only thing i might not be able to do is a merge... #ubuntu-hardened suggests merging 1.4.4 from Debian to Trusty, but the last couple "merge" attempts I tried FTBFS locally
User12: (I always build with sbuild to test that it actually builds)
User8: User12 OK. If it fails, stick what you have in the bug and I'll take a ewalter@example.net.
User12: User8 the patch as is from upstream will fail to apply, because p0 patch
User12: adding a/ and b/ to the beginning of the filepaths made it import.
User12: then apply :)
User8: Great!
User12: thanks to -motu for that guidance on the fix
User13: Hello
User13: I need help with setting up a web-server for saving backups. It has to accept HTTP POSTs and save the files sent
User13: How would you reccomend going about doing it?
User12: User8 feel free to check the debdiffs i put onto that bug if you want, but ultimately security has to upload them.
User12: User8 and security would also have to approve them, so meh.
User12: User8 and not sure if you saw in -motu, but cjwatson will merge 1.4.4 into trusty and that should take care of the CVE for Trusty.
User6: User14  i just uploaded a new libvirt we should be ok when python-libvirt is split out
User12: User8 as for other security bugs drifting around for nginx: CVE-2013-0337 still has no patch that I'm able to see just yet... and CVE-2011-4968 is still bouncing around the nginx-devel mailing list and has no solution yet as a result of that.
User9: User12 The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive information by reading the files. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0337)
User9: User12 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4968)
User12: User9 you need to die
User9: User12 Error: "you" is not a valid command.
User12: sorry for general channel spam everyone :/
User8: User12 I don't think that nginx users expect more from us than what nginx upstream provide. I wouldn't fret about those for now. Just leave the bugs be, and the security team can make a decision once I've filed the MIR.
User12: User8 yep, i just put that there as an FYI
User12: because i'm constantly on the lookout for those fixes
User12: User8 note trusty won't have a fix until... monday i think cjwatson said...
User12: (merge of 1.4.4 from Debian -> Trusty)
User12: ... lol i just got spammed by launchpad, and it's all my changes xD
User14: User6 sweet
User15: https://bugs.launchpad.net/ubuntu/+source/screen/+bug/574773?comments=all#yui_3_10_3_1_1385064379062_1839
User9: Launchpad bug 574773 in screen "Cannot make directory '/var/run/screen': Permission denied (convert init to upstart)" [Medium,Fix released]
User16: just installed default lamp stack on fresh ubuntu 13.10, noticed it defaults to mod_php + prefork, is there an 'ubuntu' way of switching to event + php-fpm + mod_proxy_fcgid ?
User16: or should I just manually unload mod_php, load & configure mod_proxy_fcgid and switch MPM
User17: User16 is this non-prefork stuff working meanwhile? A few years ago most php software didn't run on fcgi or other stuff.
User16: User17 yup works fine
User16: about to setup an owncloud + zimbra install on it
User17: User16 wtf? You won't need php for zimbra ;)
User16: well, for the webmail stuff
User17: zimbra is java
User17: and has its own hosting
User16: oh
User17: which is perfectly fine
User16: well then ill be reverse proxying to it
User17: good product
User16: whatever :)
User17: don't
User16: because?
User17: run zimbra on a dedicated vm.
User17: because you'll have a lot of trouble sharing this.
User16: this vm wont be doing any webhosting or w/e
User17: zimbra even brings its own nginx
User16: which can listen on any port
User17: sure
User17: prepare for evil things ;)
User17: zimbra has LOTS of things to configure if you want to do it yourself.
User16: im trying to ditch gmail ;)
User17: User16 btw: zimbra brings its own webdav and cal.
User17: so no need for owncloud
User17: which doesn't work either.
User16: ill be using owncloud across desktops/machines for my documents
User17: User16 look at seafile and be happy
User17: instead of crying every day because webdav just sucks
User16: i wasnt planning on using webdav
User17: plus you get client side encryption
User16: but yeah im not here to discuss every piece of software im going to install, was just wondering about the mpm/fpm stuff
User16: :)
User17: M)
User17: You will have to go through all this yourself ;)
User16: thats fine
User17: sure
User17: I had to do it too
User18: heya
User18: I'm getting periodic errors form apt-cacher-ng like "storage error [500 Server reports unexpected range], last errno: Operation now in progress" and "storage error [500 Server reports unexpected range], last errno: Resource temporarily unavailable"
User18: having trouble figuring out what the root cause might be
User18: from the source, http://git.fsinf.at/apt/apt-cacher-ng/blobs/d656c645d99ac99b0045e663492f0824d8cfee2e/source/fileitem.cc, it looks like it might be an upstream mirror problem where it's not giving me a complete header response
User19: HI we have recently ported all of our applications and drivers from redhat to ubuntu (RH6.4 to Ubuntu 12.04 update 3) . We see some slowness while applications open the device drivers, any idea why and how to tackle this? thx
User20: i want to encyrpted  my home folder.. and i've plan to put some apps on it that will run after the user login
User21: rostam, are you running ubuntu-server? should be empty -> dpkg -l | grep xserv
User21: rostam, what is your pkg count? dpkg -l | grep -c ''
User21: full ubuntu with GUI is bloated at 1300 pkgs or more
User22: sander^home: No, but my first guess would be that you need to provide the credentials in the URL, eg http://user@xxxx:password/webdav/
User22: sander^home: Ah, looking at the man page, it looks like you're supposed to give -o username=someuser, then the password is read from stdin
User22: sander^home: http://linux.die.net/man/8/mount.davfs
User22: sander^home: For use in fstab, looks like you're supposed to put that information in a special secrets file.
User23: Bah, false hilights. I blame tonyyarusso. :-p
User22: User23 ha, what did you hilight on there?
User23: User22 I'm ewalter@example.net
User22: sander^home: Digest and basic should be the same as far as the client is concerned...
User22: User23 ooooh, neat.
User22: sander^home: are you using a secrets file already?  I see the format is (sort of) explained in the "Examples" section.
User22: User23 what's the story behind the domain name?
User23: It predates me; it's a friend's.
User22: What happened to Ubuntu Orchestra after precise?
User24: User22 I think you're looking for 'juju' now
User22: User24 ah, could be
 * tonyyarusso hasn't kept track of all of the pieces and funny names over the years; trying to figure out what they do these days
User22: In short, should I set up a Puppet server, PXE/TFTP server, and APT cache manually, or use a prepackaged deal.
User25: i've got error there is message.. so that i have to check /var/log/syslog on virtual console 4
User25: many error don't know how to start
User25: ...
User25: ext4-fs.. errors=remount-ro
User24: User22 that's a tough call; juju and maas are pretty slick, but it feels like they shine when you're either using a public cloud provider or have plenty of machines for an internal private cloud (maas or openstack).. juju can deploy to specific machines these days, which is neat, but it isn't really where it's awesome.
User22: User24 I'm working with probably one or two dozen physical machines, and then a few dozen more virtual ones that are in VMware, so as far as I see them very similar to physical since I can't do magic with VMware in the same way.
User22: User24 Right now we have an "initial setup checklist" that we do by hand on ALL servers, which is getting too long and tedius, 20 of the virtualized servers should have the same packages, some of the same settings, etc. (they all run the same app, just for different clients/domains), but currently differ in ways unknown, and I have no good way of changing the "master" (non-LDAP) user's password on all ewalter@example.net.
User24: User22 oh, man, that sounds like something that would benefit greatly from puppeting or juju charming
User22: Yeah, it definitely needs SOMETHING along these lines - just a question of what exactly.
User24: since your machines mostly exist as-is, I'd be tempted to go down the puppet route. if at some point in the future you've got an openstack setup or juju grows a vmware provider that can make new instances, you can still use those puppet recipes in juju charms to pipe everything together; it's not entirely a one-way decision
User22: true
User22: As for the "exist as-is" part, we do have several machines that need to be rebuilt right now, and we just lost the second sysadmin this quarter, leaving just me, so it's a great opportunity to push hard on any automation I can.
User22: I found a server the other day running 6.06 still...
User26: User22 My favourite release! \o/
User26: User22 Wait, a live server?
User26: User22 Regarding automation, I've used Puppet and Salt, they're both fine
User24: User22 yikes :)
ubuntu-server
Ubuntu IRC