[00:10] <JanC> Kallis: maybe try asking in #samba also
[00:11] <pmatulis> Kallis: i have never heard of a conversion from windows to Samba. also, you might want to wait a week to use 16.04 and not 15.10
[00:30] <Kallis> pmatulis, yeah it would have just saved me resetting up all of the ACL for users, there are a lot QQ
[00:30] <Kallis> JanC, I have asked in there as well thanks JanC :D
[01:07] <devster31> do I need to specify APT::Default-Release if I want to pin packages or can I just set Package: * Pin: release a=trusty Pin-Priority: 990 ?
[05:09] <patdk-lap> something go wrong with apt-daily.timer
[05:10] <patdk-lap> it is appearing in my dmesg every few seconds :(
[05:12] <patdk-lap> but not on all of my xenial machines, and not even on two mirror imaged ones
[05:12] <patdk-lap> http://paste.ubuntu.com/15886862/
[05:17] <UserUS> anyone here have ubuntu server on there computer, and use the OS for other things as well?
[05:20] <patdk-lap> exactly how do you use an os for other things as well?
[05:20] <UserUS> irc, web browsing, making videos, skyping...etc
[05:21] <patdk-lap> you cannot do that on ubuntu-server
[05:21] <patdk-lap> you can do those on ubuntu-desktop though
[05:21] <UserUS> yes, you can?
[05:21] <UserUS> I've installed it and done so
[05:21] <patdk-lap> the difference, is nothing, though
[05:21] <UserUS> you just install gnome gui
[05:21] <patdk-lap> you can run skype without a gui?
[05:22] <UserUS> you install a gui mate
[05:22] <patdk-lap> and as soon as you did so, your using ubuntu-desktop
[05:22] <UserUS> just install ubuntu-desktop
[05:22] <UserUS> yeah, but it keeps the server and  apache
[05:22] <patdk-lap> and, the same would be true if you install ubuntu desktop, and installed apache
[05:22] <patdk-lap> I don't see your point
[05:22] <patdk-lap> the same would be the case if I installed windows 10, then installed apache
[05:22] <UserUS> my point is, does it matter if i do so
[05:23] <UserUS> run the server on the same pc
[05:23] <UserUS> or will it be deadly slow...etc
[05:23] <patdk-lap> it will be slower
[05:23] <patdk-lap> you just added a bunch more crap into ram, cpu, ...
[05:23] <UserUS> or kick users from the site for lack of bandwith
[05:23] <UserUS> its an i7 with 16gb of ram
[05:23] <UserUS> fourth gen intel
[13:48] <devster31> so I have this right now: https://bpaste.net/show/07230537e2b5 how do package dependencies behave? meaning, does nginx-common automatically get updated if theres's the requirement on the newer package?
[15:07] <Kallis> hi there, looking at moving my windows server over to a linux server and am just going about setting up samba with acl, was just wondering if there was an easy way for me to copy all current user acl's that are in place on the windows server over to the new samba linux box please or do i need to redo all acl for all users on all directories
[15:11] <RoyK> Kallis: never tried it, but if you enable ACLs in Samba and copy the files with Windows, that may be all you need
[15:11] <RoyK> Kallis: you'll have to try it out
[15:12] <Kallis> RoyK, ok cool, I mean worst that can happen is I spend a few days redoing all ACL's but if there was a faster way would have been nice
[15:12] <RoyK> Kallis: make sure the filesystem is mounted with the 'acl' option and that ACLs are enabled in the samba config
[15:12] <Kallis> RoyK, Yeah i have already enabled ACL in fstab and just about to do the Samba configs
[15:13] <RoyK> try getfacl/setfacl somewhere to test it first
[15:13] <patdk-lap> robocopy :)
[15:13] <RoyK> patdk-lap: can that do ACLs?
[15:13] <patdk-lap> hmm, ya, since like always
[15:13] <RoyK> ok
[15:13] <RoyK> Kallis: listen to patdk-lap - he seems to know this a wee better than I ;)
[15:14] <patdk-lap> the question is, do you have the users setup correctly in linux though?
[15:14] <Kallis> RoyK, cool cool, patdk-lap yeah it is LDAP
[15:14] <RoyK> same UIDs?
[15:14] <Kallis> patdk-lap, ldap is running fine with pbis
[15:14] <Kallis> RoyK, yeah
[15:14] <patdk-lap> kerberos I hope
[15:15] <Kallis> yeah kerb
[15:15] <RoyK> The Hound
[15:16] <Kallis> also wanted to ask, i keep getting hammered by various ip addresses trying to brute force SSHD , I have setup a script to block an IP permanently after 3 failed logins, but is there anything else I can do ?
[15:17] <Kallis> most of the ip's geo are china
[15:18] <RoyK> fail2ban is nice
[15:18] <RoyK> sshguard too, although it's a bit paranoid
[15:18] <Kallis> lol
[15:18] <Kallis> but reall the only option is constantly banning the ip's yeah
[15:19] <patdk-lap> you can always do security by obscurity? and move it to port ?rand?
[15:19] <patdk-lap> but that doesn't fix anything, just cuts back on log noise for awhile
[15:19] <RoyK> denyhosts is also good, although it hasn't been updated for years, so it's no longer in the repos
[15:19] <Kallis> yeah
[15:19] <RoyK> (iirc)
[15:24] <Kallis> i will probably just leave it as is then tbh, banning after 3 attempts has decreased log noise a lot
[15:25] <Kallis> maybe jusr change the port as well
[15:29] <patdk-lap> even more if you set the ban time to like 30days :)
[16:13] <baldini> Hi, when will you fix the major issue with proftpd and your releases
[16:14] <baldini> LoadModule mod_copy.c
[16:14] <baldini> I thought you guys were cutting edge?
[16:16] <baldini> It leaves all servers using Ubuntu to a very serious hack
[16:16] <baldini> SERIOUS
[16:17] <baldini> other distros have apparently sorted it
[16:26] <baldini1> :)
[16:26] <baldini1> sort it guys
[16:27] <baldini1> I just lost a client with 5 dedies because of this
[16:28] <baldini1> one server fell foul and about 70 sites affected, then he closed his other servers
[16:28] <baldini1> all Ubuntu
[16:29] <baldini1> Ubuntu plz get your head out of your ass on this
[16:37] <cowboydodo> hi guys, trying to setup an ldap authentication having a a posixAccount in "cn=Test Appsiting,ou=benutzer,dc=example,dc=com"
[16:37] <cowboydodo>  and its gid is "appsiting", which in turn is "cn=appsiting,ou=gruppen,dc=example,dc=com" . My apache configurtation is: https://www.refheap.com/117749 but when trying to login with "testappsiting" I get a "invalid credentials, why is that?"
[16:41] <tarpman> cowboydodo: for a start, "ou=benutzer" != "ou=benutzer,dc=example,dc=com"
[16:42] <tarpman> cowboydodo: hard to do more than guess, since you haven't shown any debug logs, neither from apache nor the ldap server
[16:43] <tarpman> cowboydodo: since you said posixAccount, I also want to check - are you using LDAP groups (groupOfNames or groupOfUniqueNames) or RFC2307 groups (posixGroup)? 'Require ldap-group' is going to require the former
[16:43] <tarpman> cowboydodo: per https://httpd.apache.org/docs/2.4/mod/mod_authnz_ldap.html#reqgroup
[16:51] <cowboydodo> tarpman: The apache2 log says user testappsiting: authorization failure for "/", the slapd i cant find, there is no /var/log/slapd.log, oh and cn=appsiting is a posixGroup. I'll change it
[16:52] <baldini>  LoadModule mod_copy.c  when you going to fix this guys
[16:52] <baldini> anytime in the last year would have been fine
[16:52] <tarpman> baldini: it looks like bug 1462311 is just waiting for someone to propose a patch (debdiff) for review; maybe you could do that?
[16:53] <baldini> lol
[16:53] <baldini> wtf
[16:53] <tarpman> baldini: as the first comment on the bug says, proftpd is in universe, so not supported by the security team
[16:53] <baldini> tarpman:  please give me a break
[16:54] <baldini> just dump the crap if its not secure
[16:54] <cowboydodo> tarpman: groupOfNames  would be fine as well, right?
[16:54] <tarpman> cowboydodo: yes
[16:54] <tarpman> baldini: just to be clear - i'm not affiliated with ubuntu in any way. just trying to be helpful in a constructive way
[16:55] <baldini> np, I appreciated your input
[16:55] <baldini> but really
[16:55] <tarpman> baldini: if you want help from the security team, asking nicely in #ubuntu-security might get more attention
[16:55] <baldini> I do
[16:55] <baldini> for the last 6 months
[16:55] <baldini> but id proftpd is not secure it should be dropped
[16:55] <baldini> if sry
[16:56] <tarpman> not sure how you "drop" something that many users (apparently including yourself) have already installed
[16:56] <baldini> how many people using proftpd on Ubuntu at the moment and totally unaware they are totally hackackable
[16:57] <baldini> its a major security risk
[16:57] <tarpman> cowboydodo: slapd log -> https://help.ubuntu.com/lts/serverguide/openldap-server.html#openldap-server-logging -- 'stats' would be a good log level to start with (logs every query)
[16:57] <cowboydodo> tarpman: getting closer, instead of a "user not found" i now get a "authorization failure"
[16:57] <tarpman> baldini: proftpd is far from the only package in universe with glaring security problems
[16:58] <baldini> tarpman: agreed
[16:58] <baldini> but that just affected me
[16:58] <baldini> maybe its tile for Ubuntu to pack it in?
[16:58] <baldini> time
[16:58] <tarpman> baldini: if you want to make sure you only run security-supported packages, you have to remove universe from sources.list altogether
[16:58] <baldini> tarpman:  noted
[16:59] <baldini> all my installs are minimal
[16:59] <tarpman> baldini: or consider debian - the entire archive gets security support (in theory... in practice the security team there is also overworked)
[16:59] <baldini> I know about overworked
[16:59] <baldini> its all imploding
[17:00] <tarpman> baldini: but for the immediate problem you're working on (proftpd): the shortest path to a good solution for you and all the other proftpd users is for someone to propose a debdiff for review
[17:00] <tarpman> anyway, i'm going in circles now, i'll shut up :)
[17:00] <baldini> hehe
[17:00] <baldini> easy fix is # the module
[17:03] <cowboydodo> oh my god i got it, thanks tarpan
[17:03] <cowboydodo> had to use the full dn
[17:03] <cowboydodo> after require ldap-group
[17:46] <profall> Is it worth it to move to 16.04 yet?
[17:50] <tarpman> profall: for evaluation/pre-production use, or if you consider yourself an "early adopter", certainly
[17:50] <profall> Well, it will be used in a production environment. Just worried about setting up things on 14.04 and then having to move everything over 6 months from now...
[17:51] <tarpman> profall: for production use, depends on your risk tolerance; you might want to wait a month or two for the bugs found by initial adopters to be fixed
[17:51] <profall> true
[17:51] <profall> I think ill just wait, plus it gives me a job in the future :P
[17:51] <tarpman> profall: if you're just starting a project now, I'd say 16.04 is a better choice than 15.10
[17:53] <profall> How long is 14.04 supported for?>
[17:54] <tarpman> https://wiki.ubuntu.com/Releases -> April 2019
[17:54] <patdk-lap> generally it's best to wait till 16.04.1
[17:54] <patdk-lap> that is normally aug time frame
[17:54] <profall> yea


[09:53] <luna_> broken, reported a bug going to the Swedish Commodore Club Meetup over the weekend however: https://www.commodore.se/commodoretraffen-2023/ will test again on Monday next week


[03:21] <bittin> somone here knows anything about wvdail?
[03:24] <bittin> somone know how to get mobile broadband to work with wvdail?
[03:35] <bittin> here is the error: http://pastebin.se/198471
[03:53] <jawa> Hi.  I'm new to ubuntu.  I just installed the educational desktop for ubuntu from add/remove program under applications.  What I wanted were the programs
[03:54] <jawa> but I found upon reboot was that it has changed the startup screen and my icons.  how can I revert to the stock icons/start-up screen?  I tried uninstalling the educational desktop for ubutuntu application, but this did not work.
[03:59] <bittin> no iam going to bed and trying to fix it when iam more non tired
[14:34] <sbalneav> Morning all


[10:56] <Festor> Hello! I wanted to create a patch to implement support ed2k links in firefox
[10:56] <Festor> The problem is that as you now going to pack the rc1 of firefox 3
[10:57] <Festor> I do not know where you will get the source code to enable the patch
[10:57] <Festor> using the Web's official?
[10:59] <Festor> hi?
[17:24] <jeroen--> do you guys need some help testing RC1 in ppa or is that version going to be released this weekend anyway?
[17:30] <jeroen--> oh well no response
[17:30] <jeroen--> I will install them anyway
[17:47] <jeroen--> asac or someone elkse: so far so good, rc1 from ppa. Do I have to keep my eyes on something?
[18:48] <jeroen--> hello fta
[18:49] <jeroen--> I'm testing  rc1 from ppa, do I have to keep my eyes on something?
[18:49] <jeroen--> so far so good
[18:51] <fta> nothing in particular. there's a known issue if you have you computer stressed by a lot of IO you could experience ff freezes for several seconds
[18:52] <fta> the version in my ppa contains a workaround making this issue less disruptive, but it's still not perfect
[18:52] <fta> upstream is still working on this
[21:16] <crimsun> gnomefreak: I mentioned flashplugin-nonfree needing backporting to jdong; he was chest-deep in work last week.  Feel free to help move that along.
[22:40] <gnomefreak> thanks crimsun ill take a look at it sometime soon.


[00:02] <nhaines> akk: unfortunately 1 and 2gb sticks are just as expensive to make.
[00:04] <nhaines> I think I got a shiny new 16GB SD card for my 3DS for $9 at Best Buy.  Brand name and everything.  So now I have New Super Mario Bros 2 on the system all the time, no game card to swap.
[00:04] <nhaines> pleia2: have you seen that one?  COLLECT ALL THE COINS!
[00:07] <pleia2> nhaines: aware, not played (bit behind on games)
[00:15] <nhaines> pleia2: I should have held out until I 100%ed SMB3DL but to be honest I prefer sidescrolling.
[16:44] <kdub> hola channel
[16:47] <pleia2> hey kdub
[18:31] <bkerensa> pleia2: you are 104% of your chipin goal... you still need money?
[18:31]  * bkerensa didnt even get a chance lol
[18:39] <pleia2> bkerensa: I had a very generous donor swoop in :)
[18:39] <pleia2> 1500 covers most of my expenses
[18:44] <bkerensa> pleia2: I wonder if a chipin for installing Edubuntu on laptops on the beaches of the Bahamas would be as successful? :0
[18:44] <bkerensa> I will do it anyday of the week :)


[09:25] -SwissBot:#ubuntu-news- ::Softpedia:: GNOME 3.32 Desktop Environment Development Kicks Off, First Milestone Is Out Now @ https://news.softpedia.com/news/gnome-3-32-desktop-environment-development-kicks-off-first-milestone-is-out-now-523209.shtml (by Marius Nestor)
[14:16] -SwissBot:#ubuntu-news- ::Planet:: Ubuntu Podcast from the UK LoCo: S11E31 â Thirty-One Dates in Thirty-One Days @ http://ubuntupodcast.org/2018/10/12/s11e31-thirty-one-dates-in-thirty-one-days/
[15:50] -SwissBot:#ubuntu-news- ::Softpedia:: Firefox ESR 60 Is Now Available on Ubuntu as a Snap, Here's How to Install It @ https://news.softpedia.com/news/firefox-esr-60-is-now-available-on-ubuntu-as-a-snap-here-s-how-to-install-it-523221.shtml (by Marius Nestor)
[19:13] -SwissBot:#ubuntu-news- ::Softpedia:: GNOME's Nautilus Gets Better Google Drive Support, Warns About Security Risks @ https://news.softpedia.com/news/gnome-s-nautilus-gets-better-google-drive-support-warns-about-security-risks-523226.shtml (by Marius Nestor)
[19:48] -SwissBot:#ubuntu-news- ::Softpedia:: Ubuntu Touch OTA-5 Is Out for Ubuntu Phones with New Morph Browser, Improvements @ https://news.softpedia.com/news/ubuntu-touch-ota-5-is-out-for-ubuntu-phones-with-new-morph-browser-improvements-523228.shtml (by Marius Nestor)
[22:32] -SwissBot:#ubuntu-news- ::Planet:: David Tomaschik: Course Review: Adversarial Attacks and Hunt Teaming @ https://systemoverlord.com/2018/10/12/course-review-adversarial-attacks-and-hunt-teaming.html


[01:50] <wallyworld> thumper: small PR? https://github.com/juju/juju/pull/8492
[01:50]  * thumper looks
[01:52] <thumper> wallyworld: one small comment
[01:52] <wallyworld> ty
[02:02] <thumper> https://github.com/juju/juju/pull/8493
[03:06] <thumper> wallyworld: can you look at this one? http://<IP_ADDRESS>:8080/view/unit%20tests/job/RunUnittests-ppc64el/286/testReport/junit/github/com_juju_juju_worker_firewaller/TestAll/
[03:07] <thumper> I've been staring at it for about 10-15 minutes, and also haven't been able to reproduce failure locally
[03:07] <thumper> ...
[03:07] <thumper> hmm...
[03:07] <thumper> I do wonder though...
[03:07] <thumper> this is most likely a watcher bug
[03:08] <thumper> and we do know that mongo has a bug on these architectures where we miss things...
[03:08] <thumper> holy crap I want to get off mongo 3.2
[03:09] <thumper> wallyworld: I do think now that this bug is likely an observation of the same mgo.OpLog test failure we see
[04:09] <wallyworld> thumper: looking
[04:24] <wallyworld> hmmm, i think i agree, it's a plausible explanation
[05:08] <wallyworld> anastasiamac: small review? https://github.com/juju/juju/pull/8494
[05:09]  * anastasiamac looking
[06:01] <jam> I have a patch to bring 2.3 up to go-1.10, turns out we have a few tests that fail because of things like changes in error strings.
[06:01] <jam> Anyone want to confirm that my fixes make sense?
[06:01] <jam> httsp://github.com/juju/juju/pull/8480
[06:01] <jam> https://github.com/juju/juju/pull/8480
[07:48] <manadart> jam: LGTM.
[08:43] <jam> thanks manadart
[08:48] <jam> manadart: I just approved your expenses, but wasn't there another meal in there, like Sun lunch ?
[08:51] <manadart> jam: Thanks. Doesn't matter. It's OK as is.
[09:11] <wpk> jam: do you have a sec?
[10:10] <jam> wpk: sure
[10:11] <wpk> jam: I msged you about the problem I have with vsphere. I'm stuck with it since yesterday
[10:14] <jam> wpk: happy to talk it over with you, not that I know that much about vsphere. Let me grab a coffee, and I'll hit you up for a hangout
[10:15] <wpk> jam: ok
[10:15] <wpk> I might grab a coffee as well
[10:18] <wpk> witold-john
[10:38] <manadart> jam: Scenario: No HA space, 3 controllers in HA (one cloud-local address each). Cloud-local address is added to one of the machines. Peergrouper errors out thereafter.
[10:40] <manadart> Until one goes back to one cloud-local each, or sets a correct HA space config.
[10:47] <manadart> jam: Initial thought is maybe to hold the err value of the up-front address check, and only return it if the members are different. Report no change if they are the same and still have the prior addresses...
[10:59] <jam> manadart: peergrouper starts erroring, but presumably the replicaset itself is untouched?
[11:01] <wpk> jam: linking jujud killed everything
[11:02] <manadart> jam: Yes.
[11:20] <jam> manadart: I'm about 3 conversations deep right now. I'm not positive what to do here. it could be fine to preserve the addresses, rather than going into failure mode, but we'd probably at least want some sort of message to users, since it is unclear
[11:20] <jam> maybe its an info or even just DEBUG message...?
[11:31] <manadart> jam: Yeah; I see you're all over. I will implement something now, review later.
[14:31] <mup> Bug #1752662 changed: ssh-proxy does not work as expected on AWS <juju:New> <https://launchpad.net/bugs/1752662>
[16:29] <wpk> jam: balloons: damn, I found the issue. after importing the disk has -two- files (file.vmdk and file-flat.vmdk), the first one is a ~500b text file with the link to the latter. Since I was creating the temporary VM for conversion in the same directory as the 'final' one it worked for the first time (because the 'large' file was there too), but for all later launches the directory was different and the VM
[16:29] <wpk> was left with an unusable short text file
[16:39] <balloons> wpk, wow..
[16:39] <balloons> wpk, glad you figured it out.. Foiled by a symlink then?
[16:43] <wpk> balloons: kind of
[16:44] <wpk> balloons: I'll switch to creating a template VM altogether, not an image. That should work and it should be 'cleaner'
[16:51] <jam> wpk: balloons: i think it is because a VM disk in VSphere can be a bunch of chained files that point to each other. there are comments while searching about "my thing is now 100 objects, how do I get it back to 1"
[16:53] <wpk> jam: yep, the file containts 'extents' section with block -> file
[16:53] <wpk> jam: so, I'll be doing it 'the template way'.
[16:53] <jam> wpk: it honestly does seem cleaner. hopefully its not a lot more effort
[16:55] <balloons> jam, ahh, interesting.
[16:56] <wpk> jam: hopefully create a VM, mark it as a template
[16:56] <balloons> wpk, will the template vm be reused as well, or will you make a new "template" each time?
[16:56] <wpk> reused
[16:57] <wpk> I'd create VM, clone it (to convert disk), then mark the clone as template.
[17:13] <balloons> wpk, so this is the same as before -- subsequent bootstraps would use the same template
[18:56] <wpk> balloons: not really, previously we had not template at all
[19:15] <jam> night all
[19:16] <jam> wpk: I thought it was more exporting a vm to a template
[19:16] <jam> anyway, still good
[19:54] <agprado> Team, does anybody know how to use testing.Isolation suite? And has a few minutes, for some questions?
[20:29] <balloons> agprado, I imagine APAC will be awake shortly :-)
[20:32] <agprado> balloons: ty, I know what I want, but I'm not sure how to make it run.
[21:46] <agprado> balloons: are you available?


[00:31] <tsimonq2> wxl: but I just took a nap... :P
[00:31] <tsimonq2> pleia: I'll work on summaries in a bit
[00:31]  * tsimonq2 makes food


[11:21] <gigix> Hi guys, I recently join the French translation team. Just asking whether you guys would need extra workforce for translating the ubuntu-manual in FR
[11:33] <thorwil> gigix: hi, most likely yes
[11:34] <thorwil> progress can be seen on https://translations.launchpad.net/ubuntu-manual
[11:35] <gigix> I have only got started TBH, did a couple of translations through Rosetta on the ubuntu-docs
[11:36] <gigix> so the ubuntu-manual has to be translated through Launchpad too ?
[11:36] <thorwil> gigix: i do not know how the french translators do organize themselves. in fact, i stay out of the whole translation business
[11:36] <thorwil> gigix: but i see that daker_ is invloved, so if/once he is around, conside having a chat with him
[11:37] <gigix> thorwil, thanks for the tip :)
[11:37] <thorwil> np