[16:21] <mup> Bug #1773671 opened: MAC address column should use mono font <MAAS:New> <https://launchpad.net/bugs/1773671>
[20:43] <mup> Bug #1773698 opened: observer-mdns fails on unicode issue <MAAS:New> <https://launchpad.net/bugs/1773698>


[06:19] <dstaley> Trying to setup Juju on Azure, but keep hitting a ForbiddenError. The cert file I'm using was pulled with the azure-cli, so I'm fairly certain it's correct. Any ideas?
[06:21] <dstaley> Ah, nevermind. Looks like the subscription ID needed to be in quotes, not angle brackets.
[06:24] <dstaley> Woo, new error: no OS images found for location "South Central US", series "precise", architectures ["amd64" "armhf" "i386"] (and endpoint: "https://management.core.windows.net/")
[06:33] <dstaley> Odd. Apparently switching my region to East US fixes that issue.


[01:28] <JanCBorchardt> mpt, could you approve Kirk to Ayatana-UX? He was greatly involved in the discussion about the testing suite: https://launchpad.net/~ayatana-ux/+members#proposed
[01:29] <godbyk> mpt's up late.
[01:50] <Burim> Hi all
[01:51] <Burim> i'm student working on a project where we are trying to redesign the interface for the One Hundred Paper Cuts website
[01:51] <Burim> i need to record some user tasks
[01:52] <Burim> from an actual user
[01:52] <Burim> it should not take more than 20min
[01:52] <Burim> at the end of the class we can make the ui we come up with publicly available
[01:53] <Burim> is there anyone that can help me?
[10:40] <klattimer> didrocks: can you get the hashtable free branch and other other merged in this bug; https://bugs.launchpad.net/indicator-application/+bug/569273
[10:40] <ubot5`> Launchpad bug 569273 in Application Indicators "memory leak in gnome-power-manager (affected: 60, heat: 314)" [Medium,In progress]
[10:40] <klattimer> they'll fix the leak
[10:41]  * klattimer hopes the older branch isn't a bit stale
[10:41] <didrocks> klattimer: great, looking at them :)
[10:45] <didrocks> klattimer: so, we need the dbusmenu fix too, right?
[10:45] <klattimer> yeah
[10:45] <klattimer> I believe so
[10:45] <klattimer> kenvandine would know for sure but he's away
[10:45] <klattimer> the hashtable fixed what I valgrinded
[10:46] <didrocks> right, hum, what a pitti ted didn't tell me to merge the dbusmenu fix in my latest upload. will check with him :)
[10:46] <didrocks> sponsoring your fix meanwhile
[10:47] <didrocks> klattimer: sorry, what's your merge again? seems that lp:~indicator-applet-developers/indicator-application/lucid  as already been merged a long time ago
[10:47] <klattimer> oh, ok, then just the hashtable fix
[10:47] <didrocks> ok, the dbusmenu one :)
[10:48] <klattimer> yeah
[10:48] <didrocks> seems to be merged already, checking
[10:50] <didrocks> yeah, already in ubuntu then
[10:50] <didrocks> updating bug status :)
[10:51] <didrocks> so, nothing to do in g-p-m, setting it invalid?
[12:34] <klattimer> didrocks: can you test and release the patch here https://bugs.launchpad.net/ayatana-ubuntu/+bug/619816 works for me
[12:34] <ubot5`> Launchpad bug 619816 in gnome-power-manager (Ubuntu) "Battery status line too long (affected: 2, heat: 20)" [Medium,New]
[12:34] <didrocks> klattimer: not right now (doing some paperwork for release meeting), but will do in an hour, thanks!
[12:35] <klattimer> k cheers
[12:35] <klattimer> needs translating potentially
[12:35] <klattimer> default translation could be %d:%02d
[14:19] <dpm> hey didrocks
[14:19] <didrocks> hey dpm
[14:20] <didrocks> dpm: klattimer: mpt: can you discuss here about bug #619816
[14:20] <ubot5`> Launchpad bug 619816 in Ubuntu Translations "Battery status line too long (affected: 2, heat: 22)" [Medium,Triaged] https://launchpad.net/bugs/619816
[14:20] <didrocks> as it seems it needs clarification
[14:20] <didrocks> and if it's something that needs to be in maverick or not
[14:21] <klattimer> it's upto mpt if the fix is approved, I've followed what mark wanted and what was buggy
[14:21] <klattimer> translation should be done on the strings not sure how much work that is
[14:21] <didrocks> klattimer: and your last comment on translation?
[14:21] <mpt> didrocks, dude, it's 29 days after UI freeze. Come on now.
[14:21] <mpt> I agree it's too long, and we'll fix it for Natty.
[14:21] <didrocks> mpt: that's what I keep telling to people :)
[14:21] <klattimer> well the bug fix is there regardless
[14:24] <dpm> klattimer, if an upload with a new translatable string is done, the translation work for translators will simply be to go to https://translations.edge.launchpad.net/ubuntu/maverick/+source/gnome-power-manager/ and translate the new string. That said, depending on when the upload is, it might be quite tight, as the deadline for submitting translations will be next week on the 30th
[14:25] <dpm> and a notification has to be sent to the translators list
[14:28] <didrocks> ok, but it's a change of ui, so if that can be delayed (which seems to be), let's delay it
[14:28] <didrocks> thanks :)
[14:29] <didrocks> klattimer: I'm adding your patch on a list for natty
[14:29] <klattimer> didrocks: it's only a minor change, and a bug fix
[14:30] <didrocks> klattimer: yeah, but it's changing the ui, screenshots and such
[14:30] <didrocks> that's why I'm not confortable with it
[14:32] <klattimer> well it's changing part of the UI back to what it was, and changing a rare condition to something usable
[14:45] <didrocks> klattimer: I think I'll discuss that on Monday with seb128, I'm not confident on that
[14:45] <klattimer> k
[14:45] <didrocks> in any case, it's not lost, and will be in natty :)
[23:06] <OwaisL> So who is the messaging menu ninja here?? need to clarify something about it.
[23:07] <OwaisL> jcastro, got some time?


[06:03] <chiluk> anyone know if there is some sort of metering on the kernel-team list?  I used git send-email to send a patch request about 30 minutes ago, and it still hasn't shown up.
[06:05] <chiluk> oh well, if it's not there by the morning I guess I'll resend.
[06:05] <chiluk> night all
[08:16] <ppisati> smb: moin
[08:16] <smb> ppisati, morning
[08:16] <smb> infinity, No, it actually uses other timer related functions which need librt. The configure script test was just wrong.
[08:52]  * smb reboots
[09:12] <apw> chiluk, it is moderated if you are not a member, so if you use the wrong email addy ...
[09:18] <apw> smb, ppisati, moin
[09:18] <smb> apw, morning
[09:22]  * apw flags already
[09:22] <ppisati> apw: moin
[09:23] <apw> ppisati, i am going to look at your arm -arm branch today, it needs some serious reading
[09:23] <ppisati> apw: ack
[09:24] <ppisati> apw: since i'll pull more patches in the future, another option is that we spin an arm-multiplatform topic branch
[09:25] <ppisati> apw: that will predate the omap4 branch
[09:25] <ppisati> apw: so i'll have more freedom to pull in patches from upstream and vendors
[09:25] <ppisati> apw: without hurting master (and the stable team)
[09:25] <apw> ppisati, it is quite close right now, it would be a shame to miss the chance to have them in one, but i can see your desire too
[09:26] <ppisati> apw: yep, just wait until bjf complains :)
[09:26] <apw> ppisati, i assume versatile and the like will always be 'no delta'
[09:26] <apw> ppisati, so we could probabally have a -generic for arm with whatever is close, and then if something gets too big we could split that off
[09:26] <ppisati> apw: yes, versatile is 100% upstream
[09:26] <apw> ppisati, anyhow either way the branch contains the same stuff :)
[09:27] <apw> so the review and test side is not about the destination
[09:28] <apw> ppisati, i suspect we will try it as part of master for the experience and make a judgement nearer release if we want to pull some or all out
[09:29] <ppisati> apw: i agree
[09:33] <apw> and indeed leann has pulled it in already :)  now to re-review it
[10:13] <psivaa> apw: Would like to know if there is any update/feedback on bug 1100386 pls
[10:13] <ubot2> Launchpad bug 1100386 in linux (Ubuntu) "Raring server installations on VMs fail to reboot after the installations" [High,Confirmed] https://launchpad.net/bugs/1100386
[10:17] <apw> psivaa, hmmm, no, i think we know what to do about that iirc, what did i decide i needed
[10:20] <smb> apw, I think that was the cirrus vs. efi fb issue
[10:20] <apw> smb, yeah.  and i think i had a change for that, somewhere, dammit
[10:23] <psivaa> apw: smb: ok thanks, it would also help if you could comment on/assign the bug please
[10:30] <ppisati> brb
[12:03] <apw> psivaa, done
[12:03] <apw> ogasawara, i am reviewing the ppisati pull you applied
[12:09] <psivaa> apw: thank you
[12:12] <ogra_> is the handling of DTB in our packages documented somewhere ? i get asked frequently about how we handle that by arm people that rol their own kernel packages
[12:53] <tjaalton> I have a fresh quantal installation, ran dist-upgrade on it and it didn't pull the latest headers, although linux-headers-generic got updated
[12:54] <tjaalton> now 'apt-get --fix-policy install' would fix the situation, but how is it possible to get in this situation? I enabled fglrx for testing stuff and things were "broken" :)
[12:54] <tjaalton> -situation
[12:55] <tjaalton> maybe not the right channel to ask
[12:58] <ogra_> tjaalton, well, do you have the metapackage installed ?
[12:58] <ogra_> linux-generic ?
[12:58] <tjaalton> ogra_: no
[12:59] <ogra_> why ?
[12:59] <tjaalton> but linux-headers-generic, which depends on
[12:59] <tjaalton> ..the headers package
[12:59] <tjaalton> it's a fresh install, it doesn't seem to pull it
[12:59] <ogra_> its a requirement
[12:59] <tjaalton> how so?
[12:59] <tjaalton> l-h-g did get updated, but it didn't pull the dependency
[13:00] <ogra_> linux-$flavour is what gets installed during the build process
[13:00] <ogra_> and this pulls in everything else (including the headers)
[13:00]  * henrix -> lunch
[13:00] <ogra_> its very weird if you dont have it after a fresh install, thats definitely a bug
[13:00] <tjaalton> it's a tree of metapackages, l-h-g is installed and that alone should've pulled the real one
[13:01] <ogra_> well, linux-$flavour missing wil break on dist-upgrades at some point, it has to be there
[13:01] <tjaalton> --fix-policy suggests a bunch of other packages too, like ecryptfs-utils etc
[13:02] <tjaalton> it just depends on l-i-$f, l-h-$f
[13:02] <ogra_> well, i dont get how you got into that situation at all
[13:02] <tjaalton> me neither :)
[13:02] <ogra_> linux-$flavour cant tecnically be missing on a fresh install unless you forcefully remove it
[13:03] <tjaalton> dpkg.log doesn't show it being removed
[13:04] <ogra_> you should talk to the guys fiddling with the UEFI stuff, i bet it is related to changes there, but technically if linux-$flavour is missing you have a bigger prob
[13:04] <tjaalton> I'll ask on -release
[13:04] <ogra_> ++
[13:15] <apw> tjaalton, i am interested
[13:15] <apw> tjaalton, could you paste which packages you do have installed
[13:16] <apw> oh i might have an idea, what is causeing it
[13:16] <apw> tjaalton, so i need the list of headers packages and versions you have so i can check
[13:18] <tjaalton> apw: http://paste.ubuntu.com/1589593/
[13:19] <tjaalton> one thing that might cause issues is that I did change it to use my local mirror before the dist-upgrade, and it doesn't have i386 mirrored
[13:19] <apw> so waht do you think is missing
[13:20] <tjaalton> nothing anymore :)
[13:20] <tjaalton> I can reinstall it to check again
[13:21] <tjaalton> actually, l-h-3.5.0-17-generic isn't installed
[13:21] <tjaalton> which should be there from the installation? dpkg.log shows it
[13:22] <apw> yeah i would have expected it to be, but i don't think i can be to blame for removing it
[13:22] <apw> oh and i bet it is too old
[13:22] <apw> so it doesn't have the Suggests: from linux-image which would normally
[13:23] <apw> stop it being deinstalled (in later kernels in that series and in raring0
[13:23] <apw> so that is a known 'corner case' where apt-get autoremove can zap some of your headers
[13:23] <apw> but it should be older headers not newer ones
[13:23] <tjaalton> ah
[13:23] <apw> and you should have gotten the new one installed without effort
[13:23] <tjaalton> funny that dpkg.log doesn't show the removals
[13:23] <apw> and that if not working is worrying
[13:40] <brendand> henrix, ping
[13:41] <henrix> brendand: hey!
[13:42] <brendand> henrix, i was thinking, it would be useful if we could get an email when our task in the tracking bugs goes to Confirmed. is it possible to implement that in your scripts?
[13:42] <brendand> henrix, it's just bug mail so easily gets lost
[13:44] <henrix> brendand: right, this would require changing the bot, which is maintained mainly by herton.
[13:45] <herton> brendand, let me know which email you want a notification sent and I'll add
[13:45] <henrix> brendand: i use mailfilters myself ;)
[13:47] <brendand> henrix, sure - but getting a whole team all set up with the proper mail filters...
[13:47] <henrix> :)
[14:09] <apw> ppisati, this -omap merge, if i build that does it work on omap4 as well ?
[14:09] <ppisati> apw: yes
[14:09]  * apw will test that
[14:09] <ppisati> apw: audio, video, usb, srial, etcetc
[14:10] <apw> ppisati, great
[14:10] <ppisati> apw: beware that you'll have to use the hdmi output close to the edge of the board, they swapped it in 3.5
[14:11] <apw> ppisati, thanks for the warning, piece of junk
[14:46] <apw> sforshee, i am assiging you the cnd delta review, cause they sound like your kind of patches and you acked at least one :)  could you have a look and try and figure out if they still make sense
[14:46] <sforshee> apw, ack
[14:47] <apw> sforshee, on https://blueprints.launchpad.net/ubuntu/+spec/hardware-r-kernel-delta-review
[14:51] <sabari> Hi
[14:52] <sabari> I am running Ubuntu 12.04 and when I run Oprofile to understand the CPU Utilization, I found that more time is spent on mem_cgroup_uncharge_common
[14:52] <sabari> can some one explain what this is?
[14:53] <sabari> We want our processes to be run effectively and more than 50% of the cpu is currently used by the system
[14:56] <sabari> I also see free_pcppages_bulk as well
[14:59] <ohsix> when the system is mostly sleeping, the apparent cpu usage of the things it's doing between sleeps will be higher
[15:00] <sabari> Ohsix is this for me?
[15:01] <ohsix> yes
[15:02] <sabari> I did profile the process which said that it is using 100% CPU
[15:30] <bjf> brendand, can't your email client filter for those specific bug emails and flag them for you?
[15:30] <bjf> brendand, i'm not wild about special casing bot code for individuals
[15:32] <brendand> bjf, ok - i'll see what i can do to avoid it
[15:43]  * ogasawara back in 20
[16:04] <qengho> ppetraki: Hi hi.  I'm trying to boot a Pandaboard with a raring desktop image.  ogra_ suggested I talk to you about today's image on cdimage not starting or kernel hanging or something.
[16:05] <qengho> Er, ppisati, sorry, I meant you.  ^
[16:06] <ogra_> ppisati, could anything regarding the changes you work on be at fault here (do we need to switch the builds to new kernels or so)
[16:06] <ppisati> qengho: nope, since the R kernel is a Q kernel
[16:07] <ppisati> qengho: do you have serial output?
[16:08] <qengho> ppisati: Er, no.  I haven't even seen a DB9 cable this decade.  :(
[16:09] <ppisati> qengho: did you first try a Q image on that board? did it work?
[16:10] <ppisati> qengho: anyhow, modify uEnv.txt and delete "quiet splash", if you are lucky you should get some output on the lcd
[16:10] <ppisati> qengho: or was it preEnv.txt? don't remember, check both
[16:11] <ogra_> the latter
[16:11] <qengho> ppisati: Er, okay.  I don't get any HDMI output at all, even a sync signal, at present.  FWIW.
[16:11] <ogra_> ppisati, the heartbeat LED gets stuck
[16:11] <ogra_> that sounds like its even before initrd
[16:12] <ogra_> could be the bootloader indeed, hard to say without info from serial
[16:12] <qengho> I'll try to find a Q image.  Pointers accepted.
[16:12] <ogra_> but afaik the bootloader hasnt changed since precise or so
[16:13] <ppisati> qengho: don't you get a purple screen?
[16:14] <ppisati> qengho: http://releases.ubuntu.com/quantal/ubuntu-12.10-desktop-armhf+omap4.img
[16:16] <ppetraki> qengho, it happens a lot :)
[16:17] <cnd> sforshee: apw: I can help review the patch delta
[16:17] <cnd> is there a list of the patches somewhere?
[16:17] <sforshee> cnd, https://wiki.ubuntu.com/KernelTeam/Specs/RaringKernelDeltaReview
[16:18] <sforshee> cnd, I'd appreciate the help. It looks like a couple of patches that stalled when you tried to upstream them.
[16:18] <cnd> sure, let me take a look
[16:20] <sforshee> herton, there's a patch that's been posted for stable that improves wireless performance during background scans. I don't think there's been a backport to 3.5, but the patch for 3.4 applies cleanly.
[16:20] <sforshee> herton<EMAIL_ADDRESS>[16:22] <herton> sforshee, ack, will look into queuing it
[16:22] <sforshee> herton, thanks. It really does help a lot. I had posted an equivalent patch before finding out about that one.
[16:24] <cnd> sforshee: so those two synaptics patches are meant to make the 3 or 4 year old dell mini netbooks with a two-button clickpad work properly
[16:24] <cnd> superm1 told me those types of trackpads will never be made again, because they were terrible
[16:24] <sforshee> heh
[16:25] <cnd> and yeah, it looks like it stalled due to people not following up upstream
[16:25] <cnd> I have one of these netbooks, and I'd rather say at this point it's practically so slow as to be unusable
[16:25] <cnd> and I have the newer model :)
[16:25] <cnd> so I guess at this point we can decide to keep the patches to keep the machines humming along alright
[16:26] <cnd> but either now or later we might as well drop the patches
[16:26] <cnd> the patches merely set an informational property bit
[16:26] <cnd> and users can still manually enable clickpad mode in the X synaptics drivers
[16:27] <sforshee> hmm... they're easy enough to keep around I guess
[16:28] <sforshee> it doesn't sound like there's much use in trying to further pursue it upstream though
[16:29] <sforshee> cnd, thanks for the help. I guess I'll recommend hanging onto them as long as they keep applying cleanly.
[16:30] <cnd> k
[16:30] <sforshee> maybe some people are still trying to run ubuntu on those machines, who knows
[16:30] <cnd> you never know
[16:30]  * ppisati rushes out, be back later
[16:46] <sforshee> apw, I updated the raring delta review suggesting that we keep cnd's patches as long as they aren't causing any problems and mark them no-up. Anything else I need to do to follow up?
[16:55] <ogasawara> sforshee: thanks for that, I'll go ahead and mark em no-up.  that should take care of the review, go ahead and mark that as done.
[16:55] <sforshee> ogasawara, ack
[18:58] <apw> sforshee, hey ... fancy checking another patch for me, it seems we have "input: fix weird issue of synaptics psmouse sync lost after resume" which needs looking at as well
[18:58] <apw> that would close out another wi
[19:51] <ogasawara> jdstrand: thanks for the wi tip
[19:51] <jdstrand> heh, sure
[19:52] <jdstrand> I was surprised how fast the response hit my inbox and now even more surpised how fast you read it :)
[22:18] <antarus> arges: Curious what the status is on https://bugs.launchpad.net/ubuntu/+source/unity/+bug/806248 and if there is anything I can do to move it along?
[22:18] <ubot2> Ubuntu bug 806248 in unity (Ubuntu Precise) "unity::TimeUtil::TimeDelta returns an int value which overflows after 24 days of uptime" [High,In progress]
[22:18] <antarus> (SRU for P)
[22:19] <arges> antarus: hi
[22:19] <arges> antarus: i'm waiting on somebody to upload it
[22:19] <arges> antarus: so we just need a sponsor
[22:22] <antarus> ok
[22:26] <antarus> but ubuntu-sponsors are not even CC'd?
[22:26] <arges> hmm thought i added that
[22:27] <antarus> you probably did but there was some schenanigans with the debdiff
[22:27] <antarus> peopel seem to hate on them lately
[22:27] <antarus> which sucks because bzr is awful ;p
[22:28] <arges> yea, i usually am submitting kernel patches or debdiffs. so trying to learn the bzr workflow too
[22:28] <antarus> I'll see if I can bribe spamaps to upload it
[22:29] <antarus> he seems to be wednesday's sponsor de jure
[22:29] <arges> antarus: awesome thanks


[08:40] <IdleOne> try it and let us know :)
[10:20] <lordievader> Good morning.
[10:24] <damascene> lordievader, Good morning
[10:26] <lordievader> Hey damascene, how are you?
[10:26] <damascene> great thank, how are you?
[10:32] <lordievader> Doing good here :)
[11:42] <zzarr> hello! I'm having problems upgrading 15.10 to 16.04
[11:43] <zzarr> this are the problems Setting up linux-signed-generic (<IP_ADDRESS>.6) ... Error in function:
[11:46] <zzarr> can I save the situation some how?
[12:14] <zzarr> I have installed ubuntu-sdk on a Xenial host (16.04) but I can't select "Framework-16.04" when creating a new click target, can I fix this some how?
[12:33] <zzarr> I'm guessing that Framework-16.04 isn't ready yet


[07:14] -queuebot:#ubuntu-release- Unapproved: rejected snapd [source] (focal-proposed) [2.46+20.04]
[07:48] -queuebot:#ubuntu-release- Unapproved: accepted snapd [source] (focal-proposed) [2.46.1+20.04]
[07:49] -queuebot:#ubuntu-release- Unapproved: rejected snapd [source] (bionic-proposed) [2.46+18.04]
[07:50] -queuebot:#ubuntu-release- Unapproved: accepted snapd [source] (bionic-proposed) [2.46.1+18.04]
[07:53] -queuebot:#ubuntu-release- Unapproved: rejected snapd [source] (xenial-proposed) [2.46]
[08:16] -queuebot:#ubuntu-release- Unapproved: accepted snapd [source] (xenial-proposed) [2.46.1]
[08:29] <rbalint> LocutusOfBorg, instead of hinting systemd haveged should be fixed to not start in lxc
[08:51] <juliank> rbalint: what's the matter?
[08:51] <juliank> We install it by design, not by accident
[08:51] <juliank> AFAIUI
[08:53] <rbalint> juliank, it is ok, it just should not start in lxc because it can't and fails
[08:55] <Laney> rbalint: this is amd64, not lxc ... or are the tests using that internally?
[08:56] <rbalint> juliank, Laney yes, i just realizes i was wrong, haveged fails outside of lxc
[08:56] <juliank> maybe it fails because I install both rng-tools and haveged since a week or two ago?
[08:56] <juliank> maybe you can only have one
[08:56] <rbalint> juliank, this makes sense
[08:57] <juliank> (but not all our clouds support rng-tools)
[08:57] <juliank> Ah, also we don't install inside container
[08:58] <rbalint> juliank, i've patched glibc to ignore the test failure due to lack of entropy, so i'm ok with reverting adding haveged
[08:59] <juliank> rbalint: we've installed haveged for ages
[08:59] <juliank> We're trying to switch to rng-tools
[08:59] <rbalint> juliank, then rng-tools
[08:59] <Laney> no wait
[08:59] <Laney> https://autopkgtest.ubuntu.com/packages/systemd/groovy/amd64
[08:59] <Laney> it used to pass with haveged, the same commit of autopkgtest
[09:00] <Laney> then we started consistently failing on the 5th, so ... what?
[09:00] <juliank> ok
[09:00] <juliank> Laney: well, maybe rng-tools started working, idk?
[09:00] <juliank> Well it should have worked before that I suppose
[09:01] <rbalint> Laney, 2020-09-05 , new haveged landed
[09:01] <Laney> ah
[09:01] <Laney> and this fails to start in the cloud or something?
[09:02] <juliank>  haveged.service loaded failed failed Entropy Daemon based on the HAVEGE algorithm'
[09:02] <Laney> let's see
[09:02] <juliank> there's no status or journalctl
[09:05] <Laney> https://paste.ubuntu.com/p/4Jg83htdf4/
[09:05] <Laney> seems bad
[09:06] <rbalint> Laney, at least we caught it :-)
[09:07] <Laney> not at the right time, but better than nothing
[09:08] <Laney> bah
[09:08] <Laney> haveged's autopkgtests just build it and run 'make check', that is not good
[09:09] <Laney> thinking of reverting this, thoughts?
[09:09] <rbalint> Laney, +1
[09:10] <rbalint> ddstreet, haveged ^^^
[09:10] <Laney> I'll file a bug, just a second
[09:10] <Laney> testing in a sid vm
[09:10] <Laney> lxc launch --vm ♥ ♥ ♥
[09:13] <Laney> "active (running)"
[09:13] <Laney> guess we lose :-)
[09:25] <rbalint> Laney, do you have some time today to check the glibc ffe?
[09:25] <Laney> yeah, I started typing a reply, will send it after haveged
[09:25] <rbalint> Laney, thanks!
[09:33] <LocutusOfBorg> xnox, are you aware that your ghc 8.8.3-1ubuntu1 and 8.8.3-1ubuntu2 can't be published because they will trigger a full transition on armhf? last time I changed  optc--param -optcggc-min-expand=10 on an a single architecture I had to rebuild the world... (and it was a leaf package)
[09:33] <LocutusOfBorg> so, please don't hit publish.
[09:33] <LocutusOfBorg> if we have to do a 1k transition better use 8.8.4, that is a minor bugfix release
[09:46] <Laney> rbalint: would you keep an eye on 'rmadison systemd' and retry the tests once it's published please?
[09:48] <rbalint> Laney, rmadison haveged?
[09:50] <Laney> yeah, you know what I m ean
[09:51] <rbalint> Laney, sure
[09:59] <xnox> LocutusOfBorg:  I am aware of that, but also ghc ftbfs on armhf is holding up 145+ package ffi transition.
[09:59] <xnox> LocutusOfBorg:  something is wrong with either the way we build the new compiler, or how the current one in groovy-release was built.
[10:00] <xnox> LocutusOfBorg:  cause in debian/previously it only took 12-15h or so to build. Yet now, it never finishes for us after going for 4d+ on armhf. Despite taking 12-15h on arm64.
[10:01] <xnox> LocutusOfBorg:  is there something broken in our llvm, or ghc, such that we might need to rebootstrap it off debian again?
[10:02] <Laney> Try asking IS to have a look at the builder, see if it's too overcommitted or weirdly IO bound or something
[10:04] <xnox> well somehow the build is now cancelled.
[10:04] <xnox> not sure why
[10:05] <Laney> doesn't look like it to me https://launchpad.net/ubuntu/+source/ghc/8.8.3-3build1/+build/19872603
[10:06] <cjwatson> Also cancelling is only ever manual - it wouldn't happen automatically
[10:06] <xnox> ah, sorry, got confused in my tabs
[10:06]  * xnox slurps more coffee
[10:06] <xnox> even if it completes building, the build-time there is not acceptable. something is broken.
[10:07] <Laney> no more GHCs for groovy after this I'd say ;-)
[10:07] <xnox> <<ghc: 45287392 bytes, 19 GCs, 6117865/12278732 avg/max bytes residency (4 samples), 31M in use, 0.003 INIT (0.003 elapsed), 13.981 MUT (14.080 elapsed), 0.371 GC (0.375 elapsed) :ghc>>
[10:07] <xnox> not sure if this is good, bad or what it is.
[10:08] <cjwatson> Once it eventually finishes you might find something interesting by diffing build logs
[10:09] <cjwatson> Or what Laney suggested above, though I'd be cautious to avoid accidentally killing something by incautious manual poking
[10:09] <xnox> yeah that =/
[10:10] <Laney> Launchpad being able to use bos01 would probably help a little, too, if it is a problem with overcommit
[10:10] <Laney> as an instance of a general "get more arm hardware" solution
[10:12] <xnox> LocutusOfBorg:  but 8.8.4 hasn't migrated in debian yet.
[10:19] <cjwatson> My vague memory of why we don't currently use bos01 is that we haven't ported the base image building machinery to new keystone or similar, but I could be wrong
[10:19] <cjwatson> wgrant would probably remember
[10:19] <Laney> Yeah, keystone v3, we had to do some light porting for autopkgtest
[10:19] <Laney> it wasn't too bad, but still, work
[10:22] -queuebot:#ubuntu-release- New binary: linux-signed-oem-5.6 [amd64] (focal-proposed/main) [5.6.0-1027.27] (no packageset)
[10:30] -queuebot:#ubuntu-release- New: accepted linux-signed-oem-5.6 [amd64] (focal-proposed) [5.6.0-1027.27]
[10:37] <LocutusOfBorg> xnox, 8.8.4 hasn't migrated because of slow new queue, we already have such leaf stuff here :)
[10:37] <rbalint> Laney, if we kill all glibc ppa autopkgtests on arm64/armhf that could help with the load
[10:37] <LocutusOfBorg> I took haskell-gi-harfbuzz from new queue and uploaded into groovy
[10:38] <rbalint> Laney, i would be ok with that, i think the aready ran tests are convincing enough for the ffe
[10:38] <Laney> rbalint: ok, if that's what you want!
[10:39] <rbalint> Laney, if you won't complain later for not enough tests ;-)
[10:40] <Laney> all gone
[10:41] -queuebot:#ubuntu-release- Unapproved: grub2 (focal-proposed/main) [2.04-1ubuntu26.3 => 2.04-1ubuntu26.4] (core)
[10:45] <LocutusOfBorg> btw we should according to the build log, be near the end of the armhf build
[10:47] <LocutusOfBorg> xnox, we should (once the build is over) diff the log as Colin said, between 8.8.3-1build1 and 8.8.3-1ubuntu2
[10:48] <LocutusOfBorg> also, can anybody try to test haskell-hoogle/armhf on big_packages?
[10:49] <LocutusOfBorg> its still a libffi blocker
[10:49] <xnox> compared with arm64, it's like at 89% of the buildlog.
[10:49] <xnox> but that's like still hours to get there, i guess.
[10:50] <Laney> I'll make sure to use this ghc a lot :-)
[10:50] <LocutusOfBorg> not on armhf, too slow also in compiling stuff...
[11:04] -queuebot:#ubuntu-release- Unapproved: grub2-signed (focal-proposed/main) [1.142.5 => 1.142.6] (core)
[11:05] <xnox> bdmurray:  grub2 & grub2-signed in focal-proposed are the ones you want to unblock lts->lts upgrades.
[11:18] <rbalint> bdmurray, wsl1 users should also wait for glibc
[11:41] <seb128> could someone update the reset hint for spice on ppc?
[11:41] <seb128> there was one lucky success and it's back to failing and blocking things
[11:43] <Laney> I did it already
[12:03] <seb128> Laney, thanks!
[12:07] <LocutusOfBorg> ubuntu-archive: cat-bat is NBS-proposed on armhf, can anybody please clean it up? depends on diamond-aligner, NBS there
[12:09] -queuebot:#ubuntu-release- New: accepted haskell-shake [amd64] (groovy-proposed) [0.19.1-2]
[12:09] -queuebot:#ubuntu-release- New: accepted haskell-shake [armhf] (groovy-proposed) [0.19.1-2]
[12:09] -queuebot:#ubuntu-release- New: accepted haskell-shake [riscv64] (groovy-proposed) [0.19.1-2]
[12:09] -queuebot:#ubuntu-release- New: accepted haskell-shake [arm64] (groovy-proposed) [0.19.1-2]
[12:09] -queuebot:#ubuntu-release- New: accepted haskell-shake [s390x] (groovy-proposed) [0.19.1-2]
[12:09] -queuebot:#ubuntu-release- New: accepted haskell-shake [ppc64el] (groovy-proposed) [0.19.1-2]
[13:02] <LocutusOfBorg> is it possible ubuntu-archive to remove swt4-gtk on armhf? it is NBS also in Debian...
[14:00] -queuebot:#ubuntu-release- Unapproved: snapcraft (focal-proposed/universe) [3.0ubuntu1 => 3.0ubuntu1.1] (no packageset)
[14:26] <bdmurray> rbalint: the upgrade process doesn't distinguish between wsl1 users or not
[14:27] <ddstreet> Laney rbalint latest haveged upstream is 1.9.13, but debian is still at 1.9.8, would you prefer 1) package 1.9.13 and ask debian to accept it and put it into groovy, or 2) just package 1.9.13 and put it into groovy and worry about debian later, or 3) revert groovy back to the really old 1.9.1, or 4) backport the specific fix for the segfault from upstream into 1.9.8
[14:27] <rbalint> bdmurray, well would better do of glibc should be out before letting them to do release upgrade
[14:32] <Laney> ddstreet: I did (3) already; I would do (1) + (2) or (4) next but I don't have a particular opinion on what because I don't know haveged particularly well
[14:32] <Laney> also beefing up the autopkgtest, as I said
[14:32] <ddstreet> Laney right re: #3 what i meant was give up entirely on a newer haveged for groovy, i.e. touch nothing else
[14:32] <ddstreet> yeah, unfortunately the previous 'dieharder' test wouldn't have failed either, as it only segfaults with --Foreground
[14:33] <bdmurray> rbalint: Is there a bug regarding the glibc update?
[14:33] <rbalint> ddstreet, Laney if 1.9.13 is good i'd go with 2), because tests are still failing because broken haveged is in the image as i see
[14:34] <ddstreet> 1.9.13 works for me, doesn't segfault
[14:34] <rbalint> ddstreet, Laney and getting .13 in is faster than waiting for new images, i think
[14:34] <Laney> ah yeah new images /o\
[14:34] <rbalint> Laney, i forgot about those, too :-)
[14:35] <rbalint> ddstreet, then i think going ahead with .13 is the best, i think
[14:35] <Laney> I don't know the first thing about .13, so I refuse to have an opinion :p
[14:36] <rbalint> bdmurray, glibc is pending sru with several bugs
[14:36] <Laney> but if you're going to package it, also proposing it to Debian would be the decent thing to do
[14:37] <ddstreet> yep i'll definitely open a salsa MR, but presumably it would take time for debian to merge, if we want it in ubuntu immediately to fix breakage probably shouldn't wait for debian
[14:37] <rbalint> Laney, sure
[14:37] <Laney> sure
[14:38] <rbalint> ddstreet, i see bump soname in haveged changelog
[14:39] <rbalint> ddstreet, but there are no reverse deps
[14:39] <ddstreet> yep, seemed nothing but haveged uses libhavege1/2
[14:43] <rbalint> ddstreet, Laney  seems almost only bugfix release, so i think it can be uploaded without an ffe
[14:45]  * rbalint afk a bit
[15:06] <bdmurray> rbalint: when updating hints for a stable release we use ubuntu-sru not ubuntu-release
[15:11] <rbalint> bdmurray, thanks, why is that? it is harder to cherry-pick, not that bzr supported that in the past
[15:11] <cjwatson> bzr supports it just as much as git does
[15:12] <cjwatson> bzr merge -c<revision> has basically the same semantics as git cherry-pick <commit>
[15:13] <rbalint> cjwatson, thanks
[15:13] <cjwatson> and the branch ownership is different because when a series is released responsibility for managing it is effectively handed over from ~ubuntu-release to ~ubuntu-sru
[15:14] <cjwatson> it shouldn't have any particular effect on cherry-picking; it's a different branch either way
[15:19] <rbalint> bdmurray, ok, so the question is even more valid, why using the ubuntu-sru file when the branch is different already and cherry-picking would work using the same file even with brz?
[15:20] <bdmurray> rbalint: I don't recall the reasoning behind it but I think it has to do with separating things pre and post release
[15:22] <rbalint> bdmurray, ok, that's not needed after the migration to git, because the release clearly branches off after release
[15:22] <cjwatson> It's about ownership/permissions, not about branching
[15:23] <rbalint> cjwatson, i thought the o/p is per branch
[15:23] <cjwatson> bzr vs. git has very little to do with it
[15:24] <cjwatson> Oh, you're talking about the actual file name in the branch and not the URL of the branch, I see
[15:24] <rbalint> cjwatson, yes
[15:24] <cjwatson> Still, the bzr/git business isn't relevant
[15:25] <rbalint> cjwatson, did bzr have something like git lot --graph master focal showing where the bzr branch forked off?
[15:25] <cjwatson> I'm not your bzr manual :-)
[15:26] <cjwatson> There are certainly ways to get equivalent information, but I'm not going to go hunting for an exact UI equivalent
[15:26] <rbalint> cjwatson, so seemed to be very good at reminding how historical sw worked :-)
[15:26] <cjwatson> (Worst case, "bzr help revisionspec")
[15:28] <cjwatson> AFAICS the hint permissions for ubuntu-sru and ubuntu-release are identical, so shouldn't be a problem there
[15:28] <rbalint> bdmurray, so how about just updating the ubuntu-release file instead of ubuntu-sru because it will be easier going forward?
[15:29] <rbalint> bdmurray, like not maintaining the hits per user which also used to be a practice
[15:30] <rbalint> cjwatson, good, i've prepared the switch to git for some time, one less thing to worry about
[15:31] <rbalint> bdmurray, also there is a commit to the 'freeze' file which separates pre- and post release
[15:33] <ddstreet> rbalint Laney fyi, haveged 1.9.13 failed on arm64 in my test ppa because it didn't like its self-test results...i'm retrying it but best case there is its self-tests are flaky, so i'm gonna look at just backporting the startup segfault fix in 1.9.8 for groovy
[15:40] -queuebot:#ubuntu-release- Unapproved: squid3 (xenial-proposed/main) [3.5.12-1ubuntu7.13 => 3.5.12-1ubuntu7.14] (ubuntu-server)
[15:40] <rbalint> bdmurray, also in bionic hints there were commits to ubuntu-release and to per user files
[16:28] <Laney> rbalint: I rebuilt the images, now the new old haveged should really be there
[16:28] <Laney> downgrading packages, just say no!
[16:31] <Laney> and now I have retried systemd again
[16:31] <Laney> this looks like we're mashing the button, but we're not, honest
[16:40] <rbalint> Laney, i was not looking , but good!
[17:31] <vorlon> LocutusOfBorg: swt4-gtk seems to have quite a few reverse-build-deps on armhf, what do we do with those?
[17:34] -queuebot:#ubuntu-release- Unapproved: gdm3 (focal-proposed/main) [3.34.1-1ubuntu1 => 3.36.3-0ubuntu<IP_ADDRESS>] (desktop-core)
[17:35] <vorlon> LocutusOfBorg: also why are you copying in a new upstream version of swt4-gtk post-FF anyway
[17:37] <bdmurray> Can somebody remove sbuild-launchpad-chroot from bionic-proposed as it FTBFS.
[17:39] <bdmurray> paride: Did something go wrong with your tag editing of bug 1874362? You did verify it correct?
[17:41] <Laney> bdmurray: done
[17:42] <bdmurray> thanks
[17:45] -queuebot:#ubuntu-release- Unapproved: corosync-qdevice (focal-proposed/universe) [3.0.0-4ubuntu1 => 3.0.0-4ubuntu1.1] (no packageset)
[17:58] -queuebot:#ubuntu-release- Unapproved: rejected nvme-cli [source] (focal-proposed) [1.9-1ubuntu0.1]
[18:02] -queuebot:#ubuntu-release- Unapproved: accepted rhythmbox-plugin-alternative-toolbar [source] (focal-proposed) [0.19.3-1.1]
[18:06] <bdmurray> Could python-pip also be removed from xenial-proposed as it fails its autopkgtests?
[18:15] -queuebot:#ubuntu-release- Unapproved: rejected libvirt [source] (focal-proposed) [6.0.0-0ubuntu8.4]
[18:25] <teward> whoever approved the late-sync of xca (unless it's 'soft freeze' right now) thank you.  (that fixes a couple bugs AND lets me say "fixed in Groovy, SRU these fixes to Focal" now.
[18:26] <teward> Laney: remind me, if I try and upload direct to -backports will it prohbit me or go via NEW or something?  Looking to backport `xca` to Focal backports :P
[18:26] <teward> also planning the same for nginx but never got a reply from you
[18:44] -queuebot:#ubuntu-release- Unapproved: accepted nvme-cli [source] (focal-proposed) [1.9-1ubuntu0.1]
[18:45] <ddstreet> rbasak could you import haveged into git-ubuntu? also i forget if there's a process for asking for pkgs to be git-ubuntu imported...
[18:46] <ahasenack> it's fine here, when someone is looking :)
[18:46] <ahasenack> I highlight on git-ubuntu
[18:46] <LocutusOfBorg> vorlon,
[18:46] <LocutusOfBorg>  	2020-09-06 14:33:46 CEST	Published	Groovy	proposed	universe	misc	4.16.0-2
[18:46] <LocutusOfBorg>  	2020-09-06 14:33:54 CEST	Superseded	Groovy	proposed	universe	misc	4.16.0-1
[18:46] <LocutusOfBorg> I copied -2 over -1, hoping to fix something, I didn't copy any new release
[18:46] <LocutusOfBorg> anyway, Debian removed them I presume?
[18:49] <LocutusOfBorg> I did reverse-depends -r sid   src:swt4-gtk, rmadison for all the reverse-dependencies, and they are all source:all architecture
[18:50] <LocutusOfBorg> so no reverse-dependencies on armhf?
[18:50] <ahasenack> ddstreet: importing
[18:51] <ddstreet> thanks!
[18:53] -queuebot:#ubuntu-release- Unapproved: php7.4 (focal-proposed/main) [7.4.3-4ubuntu2.2 => 7.4.3-4ubuntu2.3] (i386-whitelist)
[19:01] -queuebot:#ubuntu-release- Unapproved: accepted snapcraft [source] (focal-proposed) [3.0ubuntu1.1]
[19:13] <LocutusOfBorg> vorlon, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962915
[19:30] <ahasenack> ddstreet: https://code.launchpad.net/ubuntu/+source/haveged done, and it will be kept up-to-date now
[20:30] -queuebot:#ubuntu-release- Unapproved: accepted horizon [source] (bionic-proposed) [3:13.0.3-0ubuntu1]
[20:36] -queuebot:#ubuntu-release- Unapproved: accepted cinder [source] (bionic-proposed) [2:12.0.10-0ubuntu1]
[20:40] -queuebot:#ubuntu-release- Unapproved: accepted neutron [source] (bionic-proposed) [2:12.1.1-0ubuntu1]
[20:42] -queuebot:#ubuntu-release- Unapproved: accepted neutron-fwaas [source] (bionic-proposed) [1:12.0.2-0ubuntu1]
[20:52] -queuebot:#ubuntu-release- Unapproved: accepted munin [source] (xenial-proposed) [2.0.25-2ubuntu<IP_ADDRESS>]


[00:00] <Gusj> [    29.405] (**) Option "xkb_model" "pc105"
[00:00] <Gusj> [    29.405] (**) Option "xkb_layout" "us"
[00:01] <well_laid_lawn> line 4003 has your webcam as a keyboard
[00:02] <well_laid_lawn> line 403 has your webcam as a keyboard
[00:02] <Gusj> When I have added the 'atkbd.reset' to the grub file that is the only time when I have seen something have any effect, when the machine booted and I logged in and the NUMLOCK LIGHT was off,
[00:03] <Gusj> @well_laid_lawn let me see..
[00:04] <Gusj> @well_laid_lawn Wow I see that.. but I did not do that, I can see is that the udev rule you asked before?
[00:09] <well_laid_lawn> I can't find anyone else on the net haing the issue you are so it seems to be local to you
[00:09] <well_laid_lawn> try a bios reset and see if that helps
[00:12] <Gusj> @well_laid_lawn  Amazing, there is some ppl that have keyboard not working. yes I already tried that bios reset, even the battery out, power button pressed for a minute, bios to defaults,
[00:18] <well_laid_lawn> nothing about the c55 and keyboard - lots of vvids about replacing keyboards though...
[00:19] <well_laid_lawn> maybe someone else will hve a clue
[00:34] <xubuntu48w> Hello; xubuntu live disk doesn't load
[00:34] <xubuntu48w> Loading just runs in an endless circle
[00:36] <Gusj> @well_laid_lawn Thank you for your help in seeing the log files and of all
[00:38] <well_laid_lawn> luck
[00:40] <xubuntu48w> Everyone other distro I tried at least shows some status rather than just endlessly loading
[00:40] <Gusj> @well_laid_lawn do you think something like 'Boot-Repair' would be able to help?
[00:43] <well_laid_lawn> Gusj:  It boots ok so not really
[00:43] <well_laid_lawn> I'm pretty coninced it's a hardware issue
[00:43] <well_laid_lawn> I'm pretty coninvced it's a hardware issue
[00:45] <Gusj> @well_laid_lawn but if they work correctly inside the Bios, the kybrd and trackpad, and then stop working when lubuntu boots, how can it be hardware?
[00:45] <Unit193> xubuntu48w: You can drop 'quiet splash' from the boot options to get more detail when booting.
[00:48] <Chay> I checked disk for errors no error found
[00:50] <Gusj> Is there an utility I could run to determine if it is indeed hardware related?
[00:51] <Chay> Seems mint xfce installer works much better
[00:51] <Gusj> @Chay  were you just in this channel with the nickname 'xubuntu48w' ?
[00:53] <Chay> Ya I'm on my phone irc dumped me
[00:54] <Chay> I was able to boot in by disabling by switching from peg to igpu
[00:54] <Chay> Now at step updates and other software I selected third party software and ubi-part an failed 141
[00:54] <Gusj> @Chay a msg for you right before u left:
[00:55] <Gusj> @Chay  Unit193 xubuntu48w: You can drop 'quiet splash' from the boot options to get more detail when booting.
[00:55] <Chay> Oh thanks sorry that irc dumped me when I unlocked my phone earlier...
[00:56] <Chay> It just seems. To hate my 2080 like most distros
[00:56] <Gusj> @well_laid_lawn and when you say hardware, it is the part in the motherboard that controls the laptop keyboard and trackpad, is that it?
[00:58] <Chay> The installer on installation type doesn't detect the other operating systems either
[01:03] <Chay> The partition manager is very poor compared to gparted
[01:19] <Chay> I have a drive that is encrypted by another distro how can I format it?
[01:58] <Regor> where is disk-managing utility in xubuntu bionic ?
[02:11] <Bashing-om> Regor: Gparted ? on the installer.
[02:27] <Regor> no gparted
[02:39] <krytarik> Regor: "sudo apt install gparted" - if you want it on an installed system.
[02:57] <Regor> i wanted to know that no disk utility is available after installation ?  i installed fdisk though
[03:16] <Regor> i removed many default packages that i dont use  like pidgin,thunderbird,parole after installation . so i had doubt whether it removed disk-utility also !! .
[03:21] <Regor> i am using cmus/ neomutt/ weechat and vlc
[03:22] <Regor> xubuntu bionic is excellent :D
[04:39] <tomreyn> Regor: you probably referred to gnome-disk-utility. "apt search disk-utility" will say whether it's "[installed]"
[05:04] <Chay> I have xubuntu fully installed now; but having issue with themes, I've tried several themes from https://www.xfce-look.org/ but they never seem to load right
[05:05] <Chay> I just want a flat black
[05:11] <Unit193> I believe one of the 'Arc' themes from the repositories has a darker skin.  xfce-look ones might not be compatible with current gtk3.
[05:11] <Unit193> Urgh...
[05:43] <Regor> tomreyn:
[05:43] <Regor> Sorting... Done
[05:43] <Regor> Full Text Search... Done
[05:43] <Regor> gnome-disk-utility/bionic-updates 3.28.3-0ubuntu1~18.04.1 i386
[05:43] <Regor>   manage and configure disk drives and media
[05:48] <Regor> my question is whats is default disk-utility in xubuntu 18.04 LTS ?
[05:57] <tomreyn> Regor: i don't really know, but you could look through the dependencies of the xubuntu.desktop package, it may tell
[05:57] <tomreyn> * xubuntu-desktop
[05:59] <tomreyn> so: apt-cache show xubuntu-desktop | grep ^Depends:
[05:59] <Unit193> Live ships with gparted, but there's no graphical one in the installed system.  Also, that'd miss all the recommends of that package.
[06:00] <tomreyn> apt-cache show xubuntu-core | grep -E '^(Depends|Recommends|Suggests):'
[06:01] <tomreyn> or   apt-rdepends xubuntu-desktop
[06:03] <Unit193> Regardless, the answer remains the same: No graphical one, just fdisk, gdisk, and parted.
[06:03] <Unit193> (Unless you're talking about live, then gparted too.)
[06:27] <Regor> interesting :)
[06:30] <Regor> thanks tomreyn Unit193
[06:35] <tomreyn> you're welcome, Regor :)
[06:50] <Regor> parted is installed i just checked
[06:53] <Regor> installed gparted now !
[06:59] <Regor> ***Need to get 1,176 kB of archives.
[06:59] <Regor> After this operation, 5,776 kB of additional disk space will be used
[07:00] <Regor> :)
[08:43] <Regor> how to change permissions on disk ?   i formatted usb to ext4 by gparted . but it has only root access
[08:46] <Regor> another 80 gb ntfs partition i want automount
[08:48] <diogenes_> Regor, use gnome-disk-utility.
[08:51] <Regor> ok
[08:55] <Regor> thanks :) all solved !  diogenes_
[08:56] <diogenes_> Regor, solved how?
[08:56] <Regor> using gnome-disk-utility
[08:56] <diogenes_> ok
[14:32] <bashtux> hi guys, tell are any of you using this mouse with Linux, and how are you finding it if you are?
[14:32] <bashtux>  Logitech MX Anywhere 2S
[14:34] <bashtux> i have a shitty Microsoft Bluetooth mouse that has a really laggy feeling in any distro.
[14:34] <GridCube> i use wireless mouses but they are all dedicated not bluthoot
[14:35] <bashtux> the model above has both 2g wireless with usb dogle and bluetooth.....i have ordered it....its quite expensive though
[14:35] <bashtux> and i see Logi dont support Linux or have software/drivers on their site for it
[14:35] <GridCube> my experience with wireless mouses has been rather nice all way around
[14:36] <GridCube> but again, never used bluethoot ones
[14:36] <bashtux> hope the more premium one ive ordered works better on BT, as i have a dell XPS that only has USB C ports.....so i dont really want to use a dock just for the mouse :(
[14:37] <GridCube> oh
[14:37] <GridCube> well that's silly, you shouldn't buy computers without proper usb support
[14:39] <bashtux> lol it has proper USB but only if i use the USB C to USB A hub. i wanted the high end Dell for the performance specs it has, plus most new high end devices only come with USB C now....at least what ive seen
[14:40] <genii> I had problems before with Logitech MX500 under linux, every second boot the computer wouldn't see the hardware
[14:41] <gnrp> bashtux: I have the first one and there were reported errors of that hardware with Linux
[14:42] <gnrp> I mean, with Bluetooth. Search for the old one (without the 2S), I do not remember my issues anymore. But it was afair a kernel thing
[14:42] <bashtux> hmmmm :/
[14:42] <gnrp> I do not remember the issue anymore now and don't have the link, maybe you will find a fix though
[14:43] <bashtux> guess ill find out on Thursday when it arrives :)
[14:43] <bashtux> just hope its better than this crappy el-cheapo Microsoft 1800 something bluetooth i have
[14:44] <bashtux> response times are terrible
[14:45] <bashtux> feels like im moving the mouse cursor though honey...LOL
[14:45] <bashtux> *through
[15:07] <xubuntu88w> hello all, having a huge issue cannot load grub, cannot boot
[15:08] <xubuntu88w> have a link of what issues are at  http://paste.ubuntu.com/p/YfWCkT2vNZ/
[15:26] <Gusj> @xubuntu88w did you disable Secure Boot in the bios? reset the bios and try again..
[16:41] <swift110> hey
[17:45] <xubuntu44w> hi all, quick question
[17:45] <xubuntu44w> I am using Xubuntu 18.04 and having issues setting up a samba share
[17:46] <xubuntu44w> I tried installing the samba package
[17:46] <xubuntu44w> then clicking Menu > Settings > Samba gives me an error "failed to execute gksu system-config-samba"
[17:47] <xubuntu44w> what other packages do I need?
[17:47] <xubuntu44w> or is there a clear simple way to set it up? perhaps a tutorial you know of, etc
[17:54] <GridCube> is gksu still a thing?
[17:55] <GridCube> pretty sure that's not a thing anymore, try running system-config-samba from a terminal
[17:55] <sublevel> I don't have gksu or gksudo on 18.04
[17:55] <xubuntu44w> thx good idea
[17:56] <GridCube> yeah last time gksu was shipped was in 16.04
[17:56] <xubuntu44w> tried "sudo system-config-samba", complained about missing /etc/libuser.conf
[17:57] <xubuntu44w> did a "touch /etc/libuser.conf"
[17:57] <xubuntu44w> now sudo works
[17:57] <xubuntu44w> thanks, problem solved
[21:14] <xubuntu40w> hello?
[21:33] <swift110> hey
[21:40] <sublevel> swift110: no need to wait for a hello back before you jump into saying/asking things  (but greetings to you anyway!)
[21:43] <swift110> cool sublevel how are you?
[21:43] <swift110> ]
[21:44] <sublevel> I'm enjoying my recent upgrade to xubuntu 18.04


[09:20] <al-maisan> Hello there, anybody there to take a look at https://code.edge.launchpad.net/~al-maisan/launchpad/conflict-resolution-20100228/+merge/20301 ?
[09:20] <al-maisan> BjornT or gmb maybe?


[02:07] <genii> Since about 12-14 hours ago: W: Failed to fetch gzip:/var/lib/apt/lists/partial/ddebs.ubuntu.com_dists_saucy_main_binary-amd64_Packages  Hash Sum mismatch       on apt-get update. Cleared the list file a few times and re-ran occasionally during the day to see if it had been fixed but not yet.
[02:09] <IdleOne> genii: ddebs.
[02:09] <IdleOne> there is an extra d there
[02:09] <genii> IdleOne: Debug debs
[02:10] <IdleOne> ah
[02:10] <IdleOne> never mind me then
[02:11] <genii> IdleOne: They have the debug symbols for packages that don't have a -dbg
[04:55] <Ari-Yang> hi, I came here to ask something...
[04:55] <Ari-Yang> will 13.10 ship with libg3dvl-mesa? :|
[11:09] <rapid> Sub-process /usr/bin/dpkg returned an error code (1)     hi all , what to do ?
[11:10] <rapid> nedd help - i m using linux since a half year . my known is like a beginner.
[11:11] <rapid> can someone help please what to do in console
[11:13] <rapid> using xubuntu 13.10 beta 64bit
[11:13] <rapid> someone?
[11:14] <rapid> i prefer help in german . my english is bad - i know
[12:25] <sdn3rd> has anyone ever used an HDMI to DisplayPort cable on Ubuntu?
[12:26] <sdn3rd> i have one but xandr shows the port unplugged
[12:26] <sdn3rd> when i plug it in
[13:01] <BluesKaj> Hi folks
[13:07] <philinux> Bluefoxicy: howdy, how's kde going in 13.10
[13:08] <philinux> BluesKaj: ^^^ wrong user
[13:08] <philinux> damn tab complete lol
[13:16] <BluesKaj> yup , 13.10 is going fine so far here , however I don't use any PIM apps. If I did things might be diffeent.
[13:16] <BluesKaj> philinux,^
[13:18] <philinux> BluesKaj: pim's - I only use evolution with google calendar
[13:19] <xrfang> I cannot install 13.10 dailybuild (20131008) on my HP G32 laptop.  The problem is that installer just stop working, it does not crash, but just do nothing after all files seems copied, and stay there forever
[13:19] <BluesKaj> On kde , philinux ?
[13:22] <BluesKaj> xrfang, complete clean install , or install to / ?
[13:24] <xrfang> BluesKaj: not complete clean, I have 3 partitions /, /home, /opt, I only formated /.
[13:26] <BluesKaj> xrfang, why /opt ?
[13:27] <xrfang> BluesKaj: I store my virtualbox vm there.
[13:27] <xrfang> i.e. only data no programs
[13:29] <philinux> BluesKaj: vanilla ubuntu
[13:30] <BluesKaj> never tried that kind of setup , so i can't say much other than it seems unusual , but afiak it shouldn't affect ubiquity ...could be HW recognition
[13:30] <BluesKaj> xrfang,^
[13:36] <xrfang> BluesKaj: I installed 13.04 again, it is ok, and this laptop also works for all previous Ubuntu since 11.04
[13:39] <BluesKaj> xrfang, perhaps waiting til the official release , then upgrade by internet , that's my suggestion , or upgrade by internet now.  sudo do-release-upgrade -d
[13:40] <BluesKaj> rather than the daily build image , ubiquity does seem to have unusual install problems in some cases
[14:03] <xrfang> BluesKaj: yes, I will try internet upgrade after it is released.
[14:05] <philinux> xrfang: final freeze and RC tomoz too. Only a milestone though. Also an internet upgrade from 13.04 takes ages even on a good connection
[14:05] <BluesKaj> xrfang, i had a similar problem with 12.04 and 12.10 , so the internet upgrade was my only choice other than installing the server edition , which is a text based install,  then adding a desktop
[14:07] <BluesKaj> philinux, depends on the number of installed packages packages
[14:09] <BluesKaj> oops  repeating myself again again :)
[14:10] <philinux> lol
[14:11] <philinux> BluesKaj: even from just a vanilla install it takes yonks compared to a clean install
[14:12] <xrfang> philinux: I have two 13.04 installation now, I will let it upgrade for a whole night :)
[14:13] <BluesKaj> a couple of hrs , start it and walk away , do something else , it's worth it , not having to fight with ubiquitie's quirks in my experience.
[14:13] <BluesKaj> err ubitiquity's
[14:13] <philinux> coffee and more coffee
[14:14] <BluesKaj> well, I don't hang around , i usually find something else to do , and peroidically check on the install
[14:17] <philinux> BluesKaj: dont you remember all those pop up prompts that you need to answer or is there a -y switch
[14:18] <BluesKaj> at first here are a few , but the main part of the install doesn't require much attnention
[14:19] <BluesKaj> since mosy of the conf files a re already there
[14:20] <BluesKaj> anyway it's worth doing IMO , it gets the OS installed and that's the only thing that matters IMO
[14:22] <philinux> BluesKaj: must be a hardware thingy. Ubiquity behaves here. Acer 1410 and a bog standard pc with nvidia gt8600
[14:26] <BluesKaj> philinux, yes , and at first i thought it had to do with amd cpus because the forums at the time seemed to have a majority of complaints about them, but later on there were more and more probs with intel cpu based machines too.
[14:27] <BluesKaj> ubiquity definitely has some bugs that aren't ironed out yet
[14:27] <philinux> BluesKaj: lappy is intel desktop is amd
[14:30] <philinux> brb
[15:01] <lnxslck> new ubuntu 13.10 brings support for apple wireless keyboard battery indicator, does anyone know the name of tha package that does this?
[15:03] <philinux> back
[15:42] <brendand> lnxslck, i would say it's likely to be in the kernel (linux) package
[15:42] <brendand> lnxslck, at least if you're trying to file a bug on it that would be the first place i'd go
[15:50] <lnxslck> brendand, not really to file a bug, instead just realize which package provides it
[15:51] <lnxslck> brendand, it's an improvement over 13.04, and a damn good one, i was just wanted to know wich package/process did that
[16:51] <jorn_> Hi! I have upgraded to ubuntu 13.10 and everything seems good except that the desktop-background is black and there is no context-menu if I right-click on the desktop... I've tried finding answers with google but it seems I'm the only one with this issue.. Another thing I noticed is that the minimize/maximize buttons are on the right side and that the Gnome-theme is the default in the apperance-settings.. Is there a way to reset the unity-settings?
[16:53] <lnxslck> are you running unity or gnome?
[16:54] <jorn_> I'm running unity
[16:54] <jorn_> I had gnome-shell and gnome-panel installed but uninstalled them
[16:56] <lnxslck> maybe something went wrong there
[16:56] <lnxslck> did you face that problem after the removal of gnome-panel and shell?
[16:58] <jorn_> No I had the issue just after I upgraded... Tried to uninstall to see if Gnome was making the issue appear
[17:01] <bjsnider> jorn_, you could check .xsession-errors for useful stderr
[17:02] <jorn_> Only this : Script for ibus started at run_im.
[17:02] <jorn_> Script for auto started at run_im.
[17:02] <jorn_> Script for default started at run_im.
[17:03] <jorn_> Is it safe to delete all the hidden gnome settings folders in my home folder? ( .gnome/* etc)
[17:27] <JediMaster> hi all, has anyone got cinnamon from the ubuntu official repo working on saucy? I keep getting JS errors saying that a dbus include is missing, which is an upstream bug from debian which makes it unusable
[17:31] <johnjohn101> 8 more days!!  still getting some minor issues but overall doing great
[17:33] <JediMaster> I had the interesting issue today that app-armour was blocking dhcp, when I manually configured the interface and apt-get upgraded it was all fixed though =)
[21:49] <vexati0n> quick question --- in Ubuntu 13.10, using Gnome Shell, where is the "Sharing" option in Gnome Control Center? How do I enable receiving files via Bluetooth?
[23:09] <mattwj2002> hi people
[23:09] <mattwj2002> when is ubuntu 13.10 coming out again?


[12:17] <robertj> ..
[12:35] <lophyte> who declined it?
[01:07] <nkassi> Hey y'all
[01:07] <lophyte> hiya
[01:07] <nkassi> I reposting a question from ubuntu-server cause the channel seems dead
[01:08] <nkassi> I can't find the answer to why the slapd package in ubuntu and debian doesn't include SSL. Anyone knows ?
[01:08] <wasabi> It should.
[01:08] <wasabi> You of course have to enable and configure it with a certificate.
[01:08] <nkassi> It's not enabled by default
[01:08] <wasabi> Of course not. Ubuntu doesn't distribute a cert for you.
[01:08] <nkassi> From what I gather, it's not enable in the build
[01:09] <wasabi> It is.
[01:09] <wasabi> checking though.
[01:09] <nkassi> hum, weird, after setting the TLS* config params and all and starting the ldap server, 636 is unused.
[01:09] <wasabi> TLS != SSL.
[01:09] <nkassi> port 636 I mean
[01:09] <nkassi> Oh yeah sorry.
[01:10] <wasabi> TLS is Transport Layer Security.
[01:10] <wasabi> ie a socket is transformed to SSL on the fly.
[01:10] <nkassi> Isn't TLS the SSL replacement ?
[01:10] <wasabi> After an unsecured hand shake.
[01:10] <nkassi> oh ok.
[01:10] <wasabi> Yes, but it doesn't require a new port.
[01:10] <nkassi> Me stupid.
[01:10] <nkassi> ;-)
[01:10] <wasabi> The handshake happens in plain text, over the normal port.
[01:11] <nkassi> thanks for the info.
[01:11] <wasabi> I'm going to guess since libssl-dev is a build-dep, that it's enabled.
[01:11] <wasabi> And also, that I use it.
[01:12] <nkassi> hehe
[01:12] <nkassi> that would be a give away ;-)
[01:12] <nkassi> I was wondering because I saw a lot of issues documents about enabling this in debian
[01:13] <wasabi> Well, plain ol' SSL isn't really needed or desired anymore.
[01:13] <wasabi> And TLS requires you creating a cert.
[01:13] <wasabi> So it's not really something that can work out of the box.
[01:13] <nkassi> That makes sens.
[01:14] <wasabi> And I'm all for using Kerberos anyways.
[01:14] <nkassi> How hard would it be to create one automagically when the openldap server is installed ?
[01:14] <wasabi> Which provides transport encryption on it's own.
[01:14] <nkassi> I guess that would be another option.
[01:14] <wasabi> nkassi: Could create a self signed one, but that is completely unoptimal.
[01:14] <wasabi> I'd rather have the creation of a proper CA be part of our LDAP server plans.
[01:14] <nkassi> Except I would like to use it to allow thunderbird to look up contacts
[01:15] <nkassi> sound decent.
[01:15] <nkassi> sounds decent. I mean
[01:15] <wasabi> All of this is pretty far off imo
[01:15] <wasabi> Unless mark gets a hankering and pays for it
[01:17] <nkassi> Well that was something I was hoping to work on. ;-) I'm tired of hearing my friends complain about how AD is so much easier ;0)
[01:19] <nkassi> I was really happy when I saw the ubuntu movement towards this.
[01:19] <wasabi> We need C coders. =)
[01:20] <nkassi> Hehe,  I thought the project would mostly be in python seeing the Ubuntu commitment to python.
[01:22] <wasabi> The project consists of pam/nss modules and stuff. =)
[01:22] <nkassi> Dusting off my C programming language book right now :0)
[01:22] <wasabi> All the really big stuff imo, from the client side, is fixing up the pam/nss infrastructure.
[01:22] <wasabi> and nscd
[01:22] <wasabi> and then, yeah, a nice python wizard to configure it all.
[01:22] <wasabi> But still, all the heavy actual work is in C.
[01:23] <sbalneav> What needs to be done in C?
[01:23] <nkassi> Yeah is there going to be a sort of todo list somewhere ?
[01:23] <wasabi> I'm working on a plan.
[01:23] <wasabi> http://wiki.ubuntu.com/NetworkAuthentication/Client.
[01:23] <wasabi> Client comes first, unless somebody else starts working on the server independently.
[01:25] <sbalneav> Hmm, not subscribed to that one, which is odd, seeing as how I need this spec implemented for the LTSP side of things.
[01:25] <nkassi> Was there any discussion about adapting the already existing tools on fedora ?
[01:25] <sbalneav> I may be of use here, as I was the fellow who originally added openldap support for shadow components into pam_ldap :)
[01:27] <wasabi> There was, but we don't really like their tools I don't think.
[01:27] <wasabi> And have some good ideas of our own.
[01:27] <wasabi> And ajmitch already has a codebase that works.
[01:28] <wasabi> sbalneav: Sounds super insecure. ;)
[01:28] <wasabi> Check out that wiki page then, change what you think.
[01:29] <wasabi> I'm going to add a new table to NSS.
[01:29] <wasabi> "realm"
[01:29] <wasabi> And do it right.
[01:29] <wasabi> So, it'll be a lot of work to do it right. =)
[01:30] <wasabi> Also I've been thinking about new async getpwent and such APIs
[01:38] <bmonty> wasabi: a lot of the work can be done in python
[01:39] <wasabi> Sure, the wizard, which spits out a pam and nss file.
[01:39] <wasabi> And creates the remote objects and all that cool stuff.
[01:39] <wasabi> But that's not the hard part. That's scripting.
[01:40] <wasabi> The hard part is reducing blocking in nss, or coming up with a good cache stragity, or putting cross realm support into libnss-ldap, or fallback, recover, walking the SRV records.
[01:40] <bmonty> I've been using LDAP+Kerberos for awhile now, and the PAM and NSS code needs some updating
[01:40] <wasabi> Yup.
[01:41] <bmonty> there is essentially no viable caching as far as I'm concerned
[01:41] <wasabi> Right now there isn't.
[01:41] <wasabi> Right now I use nss-updatedb =)
[01:41] <bmonty> ncsd doesn't seem to work at all, and I can't figure out why it doesn't cache any of my users or groups from the LDAP server
[01:41] <nkassi> I didn't know the whole spec was so extensive. So you really want to make this similar to the windows way.
[01:41] <wasabi> nkassi: I want it to work right, anyways.
[01:41] <nkassi> hehe
[01:42] <wasabi> Yeah nscd is broken.
[01:42] <bmonty> nkassi: that is how I read it....
[01:42] <bmonty> i.e. LDAP+Kerberos
[01:42] <wasabi> Well, obviously, the most important goal from a marketing point is joining AD.
[01:42] <wasabi> Since they are so prevailant.
[01:42] <nkassi> true.
[01:43] <wasabi> But luckily it's a super-set of Kerberos+LDAP.
[01:43] <bmonty> wasabi: can't you already join an AD with samba?
[01:43] <bmonty> I think using NTLM
[01:43] <wasabi> Yeah, but it's not really integrated.
[01:43] <wasabi> We really want pam_krb5.
[01:43] <nkassi> I've had my share of head ache trying to do this exact thing ;-) We had to buy a commercial set of pam modules
[01:43] <bmonty> I agree
[01:43] <wasabi> And server-based UIDs
[01:44] <bmonty> has anyone thought about which kerberos server Ubuntu is going to use?  Heimdal or MIT?
[01:44] <wasabi> Not really.
[01:45] <wasabi> I suspect when the dust clears we'll be using Heimdal.
[01:45] <wasabi> Simlpy because the Samba guys are pushing so much new stuff into it.
[01:45] <bmonty> supposedly the MIT server will be able to use LDAP for its user database in the near future
[01:45] <wasabi> Yeah, and Heimdal can now.
[01:45] <wasabi> I am totally convinced that server work is far off.
[01:45] <wasabi> A server without a good client is useless.
[01:45] <bmonty> does the existing pam-krb5 work with heimdal?
[01:45] <wasabi> bmonty: There's a heimdal compile of it.
[01:46] <bmonty> wasabi: don't you think that the server should be worked out before you get the client side going?
[01:46] <wasabi> Not really.
[01:46] <wasabi> We know what we're targetting.
[01:46] <lophyte> wasabi: the main goal is to get an AD-compliant client, right?
[01:46] <wasabi> The first goal, yes.
[01:46] <lophyte> I figured
[01:46] <wasabi> An AD compliant client that relies as much as possible on Krb5/LDAP
[01:47] <wasabi> So the client works with whatever we choose for our own server.
[01:47] <bmonty> I thought the goal was to have the server architecture for AD-like authentication and authorization as well as an update server
[01:47] <wasabi> THat's massive long term.
[01:47] <bmonty> obviously you need a client side for that as well
[01:47] <wasabi> If you've used AD you know the issues involved with that.
[01:48] <bmonty> I use LDAP+Kerberos and I know there are plenty of issues there
[01:48] <wasabi> The scope of work with AD is huge.
[01:48] <lophyte> I wish the SSO howto on the wiki wasn't half done
[01:48] <wasabi> I mean, what, it took MS 4 years and a 100 person team?
[01:49] <lophyte> working full time, no less
[01:49] <wasabi> Kerb5 at every level, LDAP schema defiinition, third party integration.
[01:49] <wasabi> Long term support, upgradability.
[01:49] <wasabi> Replication of schema.
[01:49] <wasabi> A custom CA.
[01:49] <wasabi> Domains, forests.
[01:49] <lophyte> indeed
[01:49] <bmonty> ..figuring out how to lock customers into their solution
[01:49] <wasabi> Pssh. That took them 2 minutes.
[01:50] <lophyte> haha
[01:50] <wasabi> "oh lets add 1 field to krb5"
[01:50] <nkassi> hehe.
[01:50] <wasabi> Other than that, it's plain LDAP/Kerberos.
[01:50] <Burgundavia> lophyte: which sso howto?
[01:50] <lophyte> http://help.ubuntu.com/community/SingleSignOn
[01:51] <bmonty> I started writing that SSO howto, but I ran out of time to document all of the issues I was running in to
[01:51] <Burgundavia> lophyte: didn't even know that existed
[01:51] <Burgundavia> https://help.ubuntu.com/community/LDAPClientAuthentication
[01:51] <Burgundavia> I used that one
[01:51] <Burgundavia> need to update it
[01:51] <lophyte> I wanna set up a server, though
[01:51] <lophyte> ldap+krb5
[01:51] <wasabi> Go for it.
[01:52] <lophyte> I don't know how.. that's the problem :P
[01:52] <wasabi> I do it for all my client machines.
[01:52] <bmonty> lophyte: the server part is mosty complete
[01:52] <wasabi> I have two KDCs, two LDAP servers.
[01:52] <bmonty> except for how to add users
[01:52] <wasabi> Replicating over the inet. ;)
[01:53] <lophyte> ergh..
[01:53] <wasabi> Heh. If you're telling me slapd can replicate between 500 peers, you've suprised me.
[01:53] <wasabi> Until it can do that, it can't comprae to AD. ;)
[01:53] <lophyte> my computer sucks with 2 Xen guests..
[01:53] <wasabi> lophyte: vmware.
[01:53] <wasabi> oh just ram?
[01:53] <wasabi> You get xen working?
[01:53] <lophyte> it sucks just as bad with vmware, lol
[01:53] <lophyte> yeah, works fine now
[01:53] <lophyte> my biggest issue was networking.. using NAT, it works fine
[01:54] <bmonty> I haven't seen it documented anywhere, but there is a big issue with udev and having group info on the LDAP server
[01:54] <bmonty> especially with edgy
[01:54] <wasabi> Should be fine... you just need to know how to configure nss right.
[01:54] <wasabi> ie NSS *must never block ever*
[01:55] <wasabi> Since all apps make an assumption that it never will.
[01:55] <bmonty> wasabi: that is one issue
[01:55] <wasabi> The only way to accomplush that is to drive NSS from a pure cache.
[01:55] <bmonty> the second is that the network isn't available when udev assigns groups to the devices it creates
[01:55] <wasabi> You should't need the network for local groups.
[01:55] <wasabi> try this:
[01:55] <wasabi> passwd:         compat db
[01:55] <wasabi> group:          compat db
[01:56] <wasabi> And use nss_updatedb (package nss-updatedb) to update teh DB files from the ldap module.
[01:56] <lophyte> bmonty: there's no instructions for configuring OpenLDAP.. I think that's the biggest issue
[01:56] <bmonty> wasabi: I want to have those groups stored in LDAP directly
[01:56] <wasabi> They are.
[01:57] <wasabi> cronjob, runs once an hour, that refreshes the cache.
[01:57] <bmonty> lophyte: good point, I have an OpenLDAP config file if you are interested
[01:57] <Burgundavia> lophyte: I am going to write some openLDAP stuff coming up next week or so
[01:57] <bmonty> wasabi: then you have a consistency issue
[01:57] <lophyte> bmonty: where do you configure the sasl binds, in the slapd config?
[01:57] <wasabi> bmonty: Yup. Until nss gets an async API, there is no solution.
[01:57] <wasabi> bmonty: But this one makes the box work. ;)
[01:58] <bmonty> lophyte: yes, you have to configure SASL in slapd.conf
[01:58] <wasabi> You cannot have a network query go out for every group lookup. NSS is always used single threaded.
[01:58] <lophyte> bmonty: ah, alright..
[01:58] <wasabi> The best option I have is a daemon which keeps the local cache uptodate, by subscribing to LDAP notifications.
[01:59] <wasabi> ANd that daemon's name might be nscd in the future. heh
[01:59] <bmonty> lophyte: the two directives are sasl-secprops and sasl-regexp
[02:00] <bmonty> wasabi: can I get a copy of your nss config file?
[02:00] <lophyte> I need to get more RAM, so I can create a virtual network of computers to tinker with this stuff
[02:00] <bmonty> I've never been able to solve the issues with nss, or find good info on the net
[02:00] <bmonty> lophyte: www.newegg.com
[02:00] <lophyte> american site.. costs for shipping :P
[02:01] <lophyte> its probably cheaper to shop locally
[02:01] <bmonty> its isn't here :)
[02:02] <nkassi> hehe
[02:02] <bmonty> lophyte: you can use a pretty much stock LDAP config, but you have to add a couple of things for SASL to work correctly
[02:02] <nkassi> yeah, there nothing local around here that is cheaper than newegg + shipping ;-)
[02:02] <lophyte> oi..
[02:03] <bmonty> I've also found that SASL binds do not work on 64-bot machines
[02:03] <lophyte> $60 for 512mb
[02:03] <lophyte> not bad
[02:04] <bmonty> I still have to check and see if that is true with edgy though
[02:04] <wasabi> I have a 64 bit machine which binds using SASL just fine.
[02:04] <wasabi> It's not a server though.
[02:04] <lophyte> alright, i gotta go..
[02:05] <lophyte> perhaps later tonight I'll have some time to set this up
[02:05] <bmonty> wasabi: what is the architecture of your server machine?
[02:05] <lophyte> bbl
[02:05] <wasabi> em64t
[02:05] <wasabi> But it's windows. =)
[02:05] <bmonty> ok, I'm running OpenLDAP on i386, and SASL binds cause a segfault on the 64-bit machines
[02:06] <wasabi> 64bit clients?
[02:06] <bmonty> wasabi: yes
[02:07] <wasabi> Hmm.
[02:07] <wasabi> dapper?
[02:07] <bmonty> yeah with dapper
[02:07] <wasabi> oh well. core dump, post a bug.
[02:07] <bmonty> I haven't tested with edgy yet
[02:07] <bmonty> dist upgrading to edgy completly hosed my machine due to the LDAP/Kerberos setup I had
[02:08] <wasabi> heh
[02:08] <bmonty> it wouldn't boot even in "safe mode"
[02:08] <wasabi> Just set up NSS differently.
[02:09] <bmonty> wasabi: yeah, I wish I had known that
[02:09] <bmonty> once I did the dist upgrade though it was too late
[02:09] <wasabi> livecd + fix
[02:09] <wasabi> or init=/bin/bash
[02:09] <bmonty> where can I find info about setting up nss?
[02:09] <wasabi> Not really anywhere.
[02:09] <wasabi> me =)
[02:09] <bmonty> wasabi: too late, I already rebuilt the box :)
[02:10] <wasabi> ahh. you neve rhave to rebuild a linux box.
[02:10] <wasabi> You can always just boot with init=/bin/bash, get a shell, fix the problem, and reboot.
[02:10] <bmonty> do you have a working nss config file I can copy?
[02:10] <Burgundavia> soon, I am going to rewrite the LDAPclient stuff
[02:10] <wasabi> bmonty: Use libnss-db + nss-updatedb
[02:10] <Burgundavia> which will fix all the issues
[02:10] <wasabi> It's the only reasonable way to remove the issue.
[02:10] <bmonty> BTW, other stuff I have been working on is a python binding for libkrb5
[02:10] <wasabi> Oh that's you?
[02:10] <wasabi> I saw somebody post about that someplace.
[02:11] <bmonty> and I also started a python-based LDAP user config utility
[02:11] <bmonty> both are still very experimental
[02:11] <Burgundavia> isn't the latter just n-a?
[02:11] <bmonty> my python-krb5 is based on MIT's code, so it will require some modification if the decision is to use heimdal
[02:12] <wasabi> bmonty: What's your goal with that?
[02:12] <wasabi> What are you binding?
[02:12] <wasabi> GSSAPI or ?
[02:12] <bmonty> wasabi: so you can use the krb5 library directly from python
[02:12] <wasabi> To do what?
[02:12] <wasabi> kadmin?
[02:12] <bmonty> whatever you want
[02:13] <wasabi> Just wondering what sort of program you would build that uses that.
[02:13] <bmonty> kadmin uses the krb5 lib to do its functions
[02:13] <bmonty> I have a rewrite of klist in python using my bindings
[02:13] <bmonty> I don't have enough of the API to do kadmin...yet
[02:14] <bmonty> for a lot of client side stuff you probably want to use GSSAPI
[02:14] <bmonty> but I think if you want to have a tool that can manage a LDAP+Kerberos server you need to use the krb5 lib
[02:15] <bmonty> ...and if you want to write in C there is no problem with that
[02:15] <bmonty> if you want to use python do develop your solution you are stuck since there is currently no binding to the krb5 libs that python can use
[02:16] <wasabi> Well, doesn't help much with AD.
[02:16] <wasabi> That I can see.
[02:16] <Burgundavia> interesting: http://lists.debian.org/debian-devel/2006/10/msg01177.html
[02:16] <bmonty> why do you say that?
[02:16] <wasabi> Since you don't use anything resembling kadmin to manage principals.
[02:17] <bmonty> krb5 tools can talk to AD
[02:17] <wasabi> And there's no need for client management of kerberos at all.
[02:17] <wasabi> It should work silently and transparently.
[02:17] <bmonty> wasabi: you are assuming that I'm running AD on a windows box, correct?
[02:17] <wasabi> No.
[02:17] <wasabi> I'm just comparing MS's solution to our potential one.
[02:18] <wasabi> Which is that I don't want our users dealing with krb5 principals. ;)
[02:18] <wasabi> New User, type the name, done.
[02:18] <wasabi> The only interface component we should need on the desktop is a notification tray that says "You're authentication has expired. Please click here to renew. *button*"
[02:19] <whiprush> wasabi: ajforgue has a little ticket applet thing he wrote.
[02:19] <wasabi> Yeah. I hope we don' thave to show it to users ever. ;0
[02:20] <Burgundavia> wasabi: do we have pieces of software in universe that needs to migrate to main?
[02:20] <bmonty> wasabi: what are you using to manage users and groups in your setup?
[02:20] <wasabi> GQ mostly.
[02:21] <wasabi> Burgundavia: Probably will.
[02:21] <bmonty> which is a decent tool, but can't manage kerberos principals
[02:21] <wasabi> Yeah. I don't want to expose kerberos princs to users.
[02:22] <wasabi> I sort of want them to be stored in LDAP.
[02:22] <bmonty> I was thinking that eventually we need a tool that can manage users in the LDAP directory and the krb5 database
[02:22] <wasabi> Also I'd be worried about the security/policy issues of seperating the two.
[02:22] <bmonty> wasabi: I want that as well
[02:22] <wasabi> ie an admin user could potentially compromise the integrity of the relation between the two.
[02:22] <wasabi> Once, again, pulling another example from windows. THey have discrete APIs to create a user... which handes the kerberos part and ldap part together.
[02:22] <wasabi> ANd makes sure all suceeds.
[02:23] <bmonty> is there an open source solution that can do that?
[02:23] <wasabi> Not yet.
[02:23] <bmonty> hence the need for tools to manage those
[02:23] <wasabi> Yes, new tools... which don't use kadmin.
[02:23] <wasabi> Consider this. Im my company, HR creates users.
[02:23] <wasabi> Because HR hires and fires them.
[02:24] <bmonty> yup, which requires that you can link in the krb5 lib...
[02:24] <wasabi> Nope.
[02:24] <wasabi> So, the HR users have permissions to create users. Not permissions to create principals.
[02:24] <nkassi> Does this tool require a seperate spec ? Cause work on that could be started pretty much now. It would be extremely useful currently.
[02:24] <wasabi> Not permissions to create LDAP objects.
[02:24] <wasabi> but discrete permissions to issue a CreateUser RPC call to the server.
[02:24] <wasabi> The logic of that lives on the server, where it can't be subverted.
[02:24] <wasabi> If the user himself could create a principal, he could create one, and link it to any object.
[02:25] <wasabi> Or rename it independently.
[02:25] <wasabi> Or assign permissiosn to it he didn't otherwise have the permission to assign.
[02:25] <wasabi> HR can create users, but they cannot touch anything critical. THey are not systems admins.
[02:25] <bmonty> that all makes sense to me
[02:25] <wasabi> It's something we're missing.
[02:25] <wasabi> Completely.
[02:26] <bmonty> we are missing it in that there are currently no tools that implement that process
[02:26] <bmonty> I think the software that is available has features that could be used to make that work
[02:26] <bmonty> without rewriting a whole ton of stuff
[02:27] <wasabi> Sure, but I don't htink allow kadmin access from a client machine solves it.
[02:28] <bmonty> wasabi: I agree, I never proposed that
[02:29] <bmonty> BTW, can I take a look at your nss config file?
[02:29] <bmonty> and what were the other nss packages you said I needed to install?
[02:31] <wasabi> nss-updatedb
[02:31] <wasabi> my config file is "passwd: compat db"
[02:32] <wasabi> group: compat db
[02:32] <wasabi> nothing else
[02:32] <bmonty> and this basically copies the users and groups from the LDAP server to the local machine?
[02:36] <ajmitch> hey bmonty
[02:37] <bmonty> hi ajmitch
[02:39] <ajmitch> whiprush: you around?
[02:39] <ajmitch> bmonty: coming to MV?
[02:39] <bmonty> ajmitch: no
[02:39] <ajmitch> unfortunate
[02:40] <bmonty> yeah...I'm way too busy at work
[02:42] <bmonty> ajmitch: is this going to get discussed at MV?
[02:43] <ajmitch> definitely
[02:44] <ajmitch> write up anything else you think we need
[02:44] <bmonty> ok
[02:48] <Burgundavia> bmonty: I have been using lat instead of gq
[02:48] <Burgundavia> a little crashy, but a much nicer UI
[02:48] <whiprush> ajmitch: yeah
[02:48] <ajmitch> whiprush: got the hotel details?
[02:48] <whiprush> dang, not on me, I did it old school. (pen and paper)
[02:48] <ajmitch> ok
[02:48] <whiprush> oh
[02:49] <whiprush> let me find it on the map
[02:49] <Burgundavia> I just lie
[02:49] <ajmitch> mainly just the address
[02:49] <ajmitch> Burgundavia: I also want to know where it is
[02:49] <whiprush> http://www.choicehotels.com/ires/en-us/html/HotelInfo?hotel=CA679&promo=gglocal
[02:49] <whiprush> booya
[02:49] <ajmitch> nice, I wonder how dodgy it is
[02:50] <whiprush> one of my friends works at google and said that it was nice.
[02:50] <whiprush> not like, omg nice. but a nice normal hotel for a decent price
[02:50] <ajmitch> that's excellent
[02:51] <ajmitch> aha, found it on google maps
[02:51] <ajmitch> nice & close to google HQ
[02:51] <whiprush> yep
[02:52] <whiprush> learned my lesson after staying all far at the boston summit
[02:52] <ajmitch> right by the freeway though
[02:52] <ajmitch> like *right* beside it, by the look of the map
[02:53] <whiprush> are you concerned about the noise?
[02:54] <ajmitch> it shouldn't be too bad, I guess
[02:54] <Burgundavia> ajmitch: whiprush's melodious snoring will drown out all
[02:54] <wasabi> bmonty: "nss-updatedb ldap"   will retrieve the entire passwd/group tables from the libnss-ldap module, and store them in a bdb database.
[02:54] <wasabi> bmonty: the "db" nss module will read from those.
[02:54] <ajmitch> whiprush: that's what I expect
[02:54] <wasabi> You schedule nss-updatedb to be run, using GSSAPI/SASL binding, every hour or something reasonable.
[02:54] <wasabi> As root.
[02:54] <ajmitch> whiprush: looks like we get free google wifi
[02:55] <whiprush> ajmitch: don't worry, it's california, the cars don't actually move on the freeway
[02:55] <whiprush> it's more of a parking lot.
[02:55] <wasabi> I wish I could drive.
[02:55] <bmonty> wasabi: ok, thanks
[02:56] <ajmitch> haha
[02:56] <ajmitch> whiprush: what are the arrangements for the airport? shall I try & get a shuttle in?
[02:57] <whiprush> ajmitch: I recommend the train
[02:57] <whiprush> the BART
[02:58] <ajmitch> but the BART doesn't go down that way, does it?
[02:58] <whiprush> but we should probably ask someone from mountain view
[02:58] <whiprush> it goes to mountain view
[02:58] <whiprush> then you can cab from there
[02:01] <ajmitch> either that or if I catch a shuttle in,  mpt & infinity are on the same flight as I am
[02:02] <Burgundavia> from sfo there is a train
[02:02] <Burgundavia> whiprush: we caught that
[02:02] <ajmitch> caltrain
[02:02] <Burgundavia> however, google runs buses from downtown
[02:02] <Burgundavia> and I presume the airport
[02:02] <Burgundavia> they may be running buses for us
[02:02] <ajmitch> canonical sponsored people have been told that there's a shuttle
[02:02] <ajmitch> not google-provided
[02:03] <Burgundavia> ah
[02:03] <ajmitch> Supershuttle http://www.supershuttle.com/. >From San Francisco, it would
[02:03] <ajmitch> be about $40-45.00 one way.
[02:03] <ajmitch> expensive
[02:05] <Burgundavia> you are landing at sfo?
[02:05] <ajmitch> yeah
[02:06] <Burgundavia> sfo is on the caltrain run
[02:06] <ajmitch> so I saw
[02:06] <Burgundavia> I would take that to mtv, and then take a taxi from there
[02:06] <ajmitch> I'd have to check where it stops in MV
[02:06] <Burgundavia> downtown
[02:06] <Burgundavia> about 20 minutes from google
[02:06] <ajmitch> ok
[02:06] <Burgundavia> this is the train we took for ubucon
[02:07] <ajmitch> how much does it cost?
[02:07] <Burgundavia> caltrain? $10?
[02:07] <ajmitch> k
[02:08] <ajmitch> whiprush: when do you get to the hotel?
[02:08] <whiprush> damn, all these questions!
[02:08] <whiprush> sec
[02:08] <ajmitch> heh
[02:09] <ajmitch> we like to plan ahead :)
[02:11] <whiprush> probably 8-ish on Saturday the 4th.
[02:11] <whiprush> 8pm
[02:12] <whiprush> I'll have your name on the room if you get there before we do.
[02:12] <ajmitch> much earlier
[02:12] <ajmitch> flight lands at 11:15AM
[02:12] <whiprush> ok
[02:12] <whiprush> when I finalize the reservation I'll let them know you'll be coming in first
[02:13] <ajmitch> I can probably fill in the time :)
[02:13] <ajmitch> thanks
[02:13] <whiprush> I am sure there will be people around to hang out with
[02:13] <whiprush> google is open on the weekends, I wonder if people will be hanging out there.
[02:13] <ajmitch> I wonder how long it'll take to walk to google
[02:14] <whiprush> ajmitch: hopefully my friend will be our ride in everyday, heh.
[02:14] <ajmitch> yeah, but I may go for a walk anyway
[02:15] <whiprush> oh
[02:17] <ajmitch> besides, I need to wander into MV about 5pm or so
[02:20] <whiprush> I wouldn't mind walking everyday if it's like, less than 45 minutes or something
[02:20] <ajmitch> looks like it may be, but the tricky part is where to cross the freeway
[02:21] <whiprush> I am trying to remember if it's an elevated freeway
[02:21] <whiprush> let me ask my google friend
[02:22] <Burgundavia> got a linky to the map?
[02:22] <Burgundavia> I might be able to remember
[02:22] <whiprush> http://maps.google.com/maps?f=q&hl=en&q=hotel+Mountain+View,+CA&ie=UTF8&z=14&ll=37.40746,-122.082739&spn=0.04568,0.114326&om=1&iwloc=H
[02:22] <ajmitch> just looking at google maps
[02:23] <whiprush> I remember driving by that airbase multiple times
[02:23] <ajmitch> we're at H on that map
[02:24] <lophyte> actually I've never been out of Canada...
[02:24] <lophyte> or Ontario at that
[02:25] <ajmitch> took me awhile to get out of NZ
[02:26] <bmonty> just clicked on the map link...I've actually been there before :)
[02:26] <lophyte> alrighty.. I'm gonna go through the SSO howto
[02:26] <ajmitch> bmonty: the hotel, or the area?
[02:26] <bmonty> the area
[02:27] <bmonty> I think the hotel I stayed at was right down the street
[02:27] <bmonty> I remember thinking that the place was set up to get around really easy without a car
[02:28] <ajmitch> lophyte: I know how it is
[02:28] <ajmitch> bread & water for me for the week :)
[02:29] <lophyte> lol
[02:29] <lophyte> I really need to find a job..
[02:30] <whiprush> ajmitch: my friend says it's 10-20 minute walk!
[02:30] <ajmitch> oh if I get paid this week I'd have about $2K USD by the weekend, and I'd be fine
[02:30] <lophyte> I don't get paid.. so..
[02:30] <lophyte> this is all I have
[02:30] <ajmitch> whiprush: wonderful :)
[02:30] <ajmitch> whiprush: I could probably walk from the train station too :)
[02:31] <whiprush> that was like a 15 minute drive
[02:31] <whiprush> but the area down there is nice
[02:31] <ajmitch> ok
[02:31] <whiprush> you could probably walk around the shopping areas and whatnot if you're bored
[02:32] <ajmitch> the train station looks closer than google does
[02:32] <ajmitch> it's a walk straight down moffett blvd
[02:33] <ajmitch> yeah, since I can't get to mass on the sunday, I'll be going on saturday, so that'll take some time
[02:33] <ajmitch> conveniently that's right beside the train station
[03:49] <whiprush> Burgundavia: where can I find channel logs?
[03:49] <whiprush> is it still on people.something?
[03:49] <Burgundavia> whiprush: for this channel?
[03:49] <whiprush> ya
[03:49] <Burgundavia> people.ubuntu.com/~fabbione/irclogs
[03:49] <whiprush> ta
[06:21] <wasabi> So I've been thinking about the caching problem.
[06:21] <wasabi> Number of different solutions.
[06:22] <wasabi> either fix nscd, or use/write something else.
[06:22] <wasabi> The db idea is pretty appealing.
[06:27] <wasabi> Guess I'd be worried about db corruption though.
[06:27] <wasabi> hmmmmmmmmmmm
[06:34] <wasabi> I guess it would be reasonable for remote users to simply not exist until nscd starts.
[06:34] <whiprush> wasabi: also I thought about something while driving around today
[06:34] <whiprush> that RH cert server isn't oss.
[06:36] <wasabi> They have a cert server?
[06:36] <whiprush> yep
[06:36] <wasabi> I've heard some good things about OpenCA.
[06:36] <whiprush> I was driving around and was like "oh shit, we're going to need one of those."
[06:36] <wasabi> Yeah.
[06:36] <wasabi> Thought about it earlier.
[06:36] <wasabi> Again, this is why server-side is a huge project. ;)
[06:37] <wasabi> So many pieces that all tie in together.
[06:37] <wasabi> And are huge on their own.
[06:38] <wasabi> I've sort of got a game plan for where I will start work at. I've already got a broken patch to add a realm table to nss.
[06:38] <wasabi> I'll get that done, then start digging into libnss.
[06:38] <wasabi> -ldap that is
[06:40] <wasabi> Or whatever. To be honest, I don't have enought time for this.
[06:41] <wasabi> me->bed
[03:47] <lophyte> morning all
[04:03] <wasabi> moni
[04:15] <wasabi> Does anybody want to be responsible for seperating server stuff out of NetworkAuthentication?
[04:16] <MagnusR> you mean in the specification?
[04:16] <wasabi> just the wiki.
[04:16] <wasabi> it needs cleanup
[04:17] <MagnusR> I can give it a try. Shall I create a new page NetworkAuthenticationServer to put things that are cleand out until we now where to put it?
[04:18] <wasabi> https://wiki.ubuntu.com/NetworkAuthentication/Client   is client stuff
[04:18] <wasabi> So, I'd imagine /Server would be server stuff.
[04:20] <MagnusR> Hmm seams that we have three diferent pages today: https://wiki.ubuntu.com/NetworkAuthentication https://wiki.ubuntu.com/NetworkAuthentication/Client https://wiki.ubuntu.com/NetworkAuthentication/ScratchPad
[04:20] <wasabi> ScratchPad was some stuff I was just braindumping too
[04:20] <wasabi> It can be ignored. =)
[04:23] <tepsipakki> wasabi: was it you that had some ideas about an offline "cache" (using bzr) for a networked filesystem?
[04:24] <wasabi> yeah
[04:24] <tepsipakki> do you know about FS-Cache? it only provides the basic support for caching stuff but the offline-use is left to the fs itself
[04:24] <wasabi> Not a networked file system.
[04:25] <MagnusR> What about using ifolders?
[04:26] <alp> anyone familiar with the novell ldap stuff?
[04:26] <wasabi> Not really. Never had a chance to touch it.
[04:26] <alp> i think we have a good c# ldap stack
[04:27] <alp> that should be "they"
[04:28] <alp> don't know if their directory services are based on that, think it's all new
[04:30] <tepsipakki> ald: do you mean eDirectory?
[04:30] <tepsipakki> alp: ^^
[04:30] <MagnusR> I think the c#-bindings are used to connect new things to the old NDS stuff.
[04:33] <alp> http://developer.novell.com/wiki/index.php/Ldapcsharp <- looks standards based and pretty active
[04:43] <lophyte> wtf :\
[04:43] <lophyte> kadmin: Improper format of Kerberos configuration file while initializing krb5 library
[04:45] <wasabi> Novell's LDAP C# libraries are fine.
[04:45] <wasabi> But I suspect nobody here is going to use them.
[04:45] <bmonty> lophyte: check your krb5.conf file, especially the part that tells the lib how to contact the kadmin server
[04:46] <lophyte> why do I get the feeling these locale errors are reeking havoc
[04:48] <alp> wasabi: oh, what's the game plan?
[04:49] <alp> when i put together the mono debian packages and policy all those years ago this is exactly the kind of neat project i had in mind :-)
[04:50] <alp> i am unfamiliar with the python libraries though, it's quite possible they're more suitable
[04:52] <MagnusR> I think Apple have released Python Bindings for parts of kerberos.
[04:53] <bmonty> MagnusR: do you have a link?
[04:54] <alp> i have done some work with managed pam plugins and nss
[04:55] <wasabi> Yeah, but whatever we do, I want to have uptake on every distro.
[04:55] <wasabi> And there's a political situation that matters.
[04:55] <wasabi> Managed NSS sounds sorta wonky too. A CLR in every process instance?
[04:56] <wasabi> Unless it's a shim to an out of process CLR or something.
[04:57] <alp> the nss stuff was just for configuration
[04:59] <wasabi> I think we've got a pretty good plan on where to go from here for client side stuff. I think now I'll just do some little work before UMV to make sure it's reasonable, then have the full conversation at UMV.
[04:59] <wasabi> Unless mark pays some people, it's not going to happen... I suspect. =)
[05:00] <alp> i think it would be doable in a few months if it didn't aim to interoperate with AD, use ldap properly and so on
[05:00] <wasabi> ALl that's needed to interoperate with AD is LDAP.
[05:00] <wasabi> And Kerberos.
[05:00] <wasabi> AD isn't very special.
[05:01] <MagnusR> bmonty: It is called python-kerberos in debian unstable.  It's under Apachel License
[05:01] <bmonty> MagnusR: thanks
[05:02] <alp> apparently integrating the c# ldap libraries with kerberos is on the novell todo list, though that means it's not around now (http://forge.novell.com/modules/xfmod/newsportal/article.php?group_id=1318&msg_id=981&group=novell.devsup.ldapcsharp)
[05:04] <lophyte> ergh.. why won't the kdc run..
[05:04] <wasabi> Error?
[05:04] <lophyte> nothing at all
[05:04] <wasabi> Well, it has logs. =)
[05:05] <lophyte> yeah, but there's no logs either
[05:05] <wasabi> /var/log/krb5kdc i think
[05:05] <lophyte> yeah nothing there
[05:05] <wasabi> well, try to start it without the init script.
[05:06] <wasabi> then strace it.
[05:10] <lophyte> krb5kdc: cannot initialize realm BLINDUTOPIA.COM - see log file for details
[05:10] <lophyte> but there's no log file
[05:10] <wasabi> Heh.
[05:11] <lophyte> that's helpful
[05:11] <lophyte> stupid kdc
[05:12] <wasabi> Interesting. Looks like Heimdal and MIT both have PKINIT support, and so does pam_krb5.
[05:12] <wasabi> I think our pam-krb5 is diverged.
[05:15] <wasabi> Yeah. Completely.
[05:18] <tepsipakki> pam_krb5 from redhat?
[05:18] <wasabi> Yeah. Looks like the two bases diveraged years ago.
[05:19] <wasabi> Ours seems to be maintained still, theirs is only maintained internally.
[05:19] <tepsipakki> yep
[05:19] <lophyte> oi.
[05:19] <wasabi> http://www.stacken.kth.se/lists/heimdal-discuss/2006-10/msg00034.html
[05:19] <tepsipakki> oh, there are tools in fedora/rhel that notify about expired tickets
[05:20] <wasabi> We got PKINIT patches just a few days ago.
[05:20] <wasabi> Looks like Nalin from RH is participating in the conversation (I talked to him a few years ago, he mainted libpam-krb5 internallt)
[05:20] <wasabi> so I bet they'll merge again
[05:21] <lophyte> this is silly
[05:22] <MagnusR> I have started to move server things from https://wiki.ubuntu.com/NetworkAuthentication to https://wiki.ubuntu.com/NetworkAuthentication/Server. Please add and comment.
[05:22] <wasabi> Nice. Thanks.
[05:23] <tepsipakki> slapd is from openldap? how about fedora directory server?
[05:24] <tepsipakki> oh, it was mentioned
[05:24] <tepsipakki> =)
[05:24] <tepsipakki> (on the wiki)
[05:25] <MagnusR> Fedora DS has alot of nice webbinterfaces. So I think it should be evaluated. Unfoutunately it takes more resources.
[05:25] <tepsipakki> I remember seeing an ITP of it
[05:25] <MagnusR> Any one knows if there are any deb:s for it.
[05:25] <wasabi> There aren't.
[05:25] <wasabi> Few people here were workingon it
[05:26] <wasabi> The interfaces require Sun's JRE.
[05:26] <MagnusR> That's bad
[05:26] <lophyte> hrm
[05:26] <tepsipakki> but we have that now :)
[05:26] <lophyte> so I got the kdc to start..
[05:26] <lophyte> but now kadmin fails
[05:30] <wasabi> Think I'm going to try to migrate my kerberos to LDAP
[05:30] <tepsipakki> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315297
[05:30] <tepsipakki> that's the ITP
[05:31] <MagnusR> wasabi: But with only ldap you do not get the SSO possibility.
[05:31] <wasabi> Huh?
[05:31] <tepsipakki> magnusR: does fds have a kdc as well?
[05:32] <wasabi> Didn't say replace Kerberos.
[05:32] <wasabi> Store keys in LDAP
[05:32] <MagnusR> wasabi: ok, missunderstod you
[05:32] <MagnusR> tepsipakki: no
[05:34] <lophyte> ugh.. okay, I give up
[06:01] <wasabi> Anybody aware how to enable simple bind in slapd only over ldapi?
[06:11] <wasabi> Interesting. When creating a new principal, it doesn't search for existing objects.
[06:11] <wasabi> THat's not so good.
[06:41] <lophyte> hrm..
[06:45] <lophyte> yay, more errors
[06:56] <lophyte> how do I add a host principal in krb5?
[07:01] <wasabi> kadmin
[07:01] <wasabi> host/fqdn
[07:01] <lophyte> how do you use kadmin without already having a principal set up, though?
[07:01] <wasabi> kadmin -l
[07:01] <lophyte> ah.
[07:02] <lophyte> ..eh, there is no l option
[07:02] <wasabi> kadmin.local then with MIT
[07:02] <lophyte> hehe, no kadmin.local either :P
[07:02] <wasabi> Beats me then. ;)
[07:03] <wasabi> one of the two should be present.
[07:03] <lophyte> or do I need krb5-admin-server installed
[07:04] <lophyte> meh.. i have to go
[07:05] <lophyte> I'll look for a complete howto later
[10:21] <siretart> can you guys recommend a tutorial and/or good documentation for MIT Kerberos in edgy?
[10:23] <wasabi> Nope.
[10:39] <Burgundavia> ajmitch, wasabi: would one of you mind responding to that -directory announce post on -devel and answer those peoples questions?
[10:40] <wasabi> looking
[10:40] <wasabi> oh. missed all that
[10:41] <tepsipakki> I tried tp3 a week ago
[10:42] <tepsipakki> shared libraries are broken, so I couldn't run the provisioning script
[10:42] <tepsipakki> or program, actually
[10:43] <tepsipakki> that's samba-4.0.0tp3 I was talking about :)
[10:44] <ajmitch> yep
[10:44] <ajmitch> I saw your post on the samba list :)
[10:45] <tepsipakki> oh :)
[10:46] <tepsipakki> the packaging needed some tweaks to get through
[10:46] <ajmitch> yes
[10:47] <tepsipakki> anyway, I'm looking forward to the beta
[10:48] <tepsipakki> whenever that is released..
[10:48] <ajmitch> yep
[10:58] <wasabi> What do I want to respond to? heh
[11:07] <wasabi> What do I want to respond to? heh
[11:14] <lophyte> Burgundavia: I don't think I have time now to finish up the -ca approval.. I've got some things that need to be taken care of offline at the moment