[09:41] <inetpro> good mornins
[11:44] <theblazehen> hi inetpro
[11:45] <gremble> Afternoon everyone
[11:45] <theblazehen> hi gremble
[11:46] <gremble> How are you theblazehen
[11:46] <theblazehen> Good and you gremble ?
[11:46] <gremble> I am well thank you
[11:46] <theblazehen> That's good
[11:46] <theblazehen> So, I'm considering hosting a mirror for a bunch of FOSS projects..
[11:47] <theblazehen> Planning Arch, Arch ARM, fedora, centos, ubuntu and derivatives, mint. Any that I missed that will get a decent amount of traffic?
[11:50] <gremble> Perhaps some software projects?
[11:50] <theblazehen> gremble: Any ideas?
[11:51] <theblazehen> WIll also run TOR node, and bitcoin node
[11:51] <gremble> Hmm Wait, that's silly. You'd already be mirroring them in the repos
[11:51] <gremble> so it should be fine
[11:51] <theblazehen> Yeah
[11:52] <gremble> You seem to have a lot of spare bandwidth
[11:52] <gremble> haha
[11:52] <theblazehen> Heh, http://unmetered.com
[11:52] <theblazehen> 500mbit dedicated, 1gbit burst for 36 hours/month
[11:53] <theblazehen> $124 per month
[11:53] <gremble> That is not bad
[11:54] <theblazehen> 16 GB RAM, 4TB HDD, 128GB SSD and quad core Xeon
[11:55] <theblazehen> I like digitalocean. unmetered 1gbit full duplex, 512MB RAM, 20GB SSD for $5/month
[11:56] <theblazehen> UNfortunately you can't get more storage easily
[11:56] <gremble> I considered getting a small droplet for DO to pop my blog on, set up a vps and an irc bouncer. But first I need to find a non-shitty job
[11:56] <theblazehen> heh, yeah
[11:57] <gremble> Working at exclusive books is not really educational
[11:57] <theblazehen> I can imagine. If you want, you can sign up with my referral, get $10 free. thats 2 months on the 512MB plan then
[11:58] <gremble> I have $100 of credit with them
[11:58] <gremble> I just need a credit card to actually sign on with
[11:58] <theblazehen> AH, nice. You can't use paypal? I do that
[11:58] <gremble> Oh. I have paypal now. I can do that.
[11:59] <theblazehen> You get that from the github student thing, I'm guessing?
[11:59] <gremble> Yes
[11:59] <gremble> I'm still fighting with namecheap
[11:59] <gremble> xD
[11:59] <theblazehen> Nice
[11:59] <theblazehen> What trouble are you having? For me they work well
[11:59] <gremble> Github sent me an email like three weeks ago that they are working on namecheap giving me my domain :P
[12:00] <gremble> Namecheap is fantastic
[12:00] <theblazehen> Oh, lol. Yeah, they're great
[12:00] <gremble> I have them for my .xyz dommain
[12:00] <gremble> They just don't accept tha I am a student
[12:00] <theblazehen> .xyz is a free one IIRC?
[12:00] <gremble> .me is the free one
[12:00] <theblazehen> Ah, guessing you don't have an .edu email or what?
[12:00] <theblazehen> Oh, okay
[12:00] <gremble> Yes
[12:01] <gremble> Perhaps I can twist their arm to get my the .xyz free instead. Once they resolve their issues
[12:01] <theblazehen> Yeah
[12:02] <gremble> Ha. Because .me is like 8.99 and my xyz is 2.88
[12:02] <theblazehen> Hmm, okay
[12:03] <gremble> I lie
[12:03] <gremble> xyz is $1
[12:03] <gremble> Literally the cheapest novelty tld
[12:04] <theblazehen> Nice. My .com is like $10.73 / year
[12:04] <gremble> .sucks is somewhat expensive though.
[12:04] <theblazehen> Heh.  I came from Bela Bela yesterday though, so might have just gotten used to the high temperatures
[13:49] <Kilos> ah
[13:49] <Kilos> im mbusy ragging the tunisians in the africa channel but no one is biting
[13:51] <theblazehen> Cool
[13:52] <Kilos> hey theblazehen you allowed to join us there hey
[13:52] <Kilos> and on lp as well
[13:52] <theblazehen> Yeah, I will
[13:52] <Kilos> https://launchpad.net/~ubuntu-africa
[18:45] <Kilos> night all. sleep tight
[19:21] <squish101> ....
[19:22] <squish101> just a random question. Do you think a golf GTi is too young a car for a 40+ year old?
[20:21] <inetpro> hmm...


[00:25] <Razican> Is there a solution?
[00:25] <Razican> Hello, I have a problem with Wake On Lan in Ubuntu Server 10.04. When I shutdown the computer, it doesn't keep the interfaces on. In ethtool it says wake-on: g
[00:26] <qman__> Razican, I don't know about the ubuntu side of it, but you have to enable said feature in the BIOS first
[00:27] <qman__> if the BIOS does not support wake on LAN, you will not be able to shut down, only sleep to RAM
[00:28] <qman__> though pretty much anything 2002 or newer should support it
[00:29] <Razican> I have in BIOS ACPI shutdown: S3 | S5: enabled | Wake on LAN: enabled
[00:55] <JasonMSP1> .
[00:58] <LowValueTarget> is this proper cron syntax ( the minutes designation ).... i know it can be done easier, just trying to solve an argument
[00:58] <LowValueTarget> 0,5,10,15,20,25,30,35,40,45,50,55 * * * *    ( cd /usr/wp ; ./admin wpcron ) 2>&1 > /dev/null
[00:59] <JasonMSP1> as a sudoer how do I ssh-keygen and output that for a different user?
[01:00] <LowValueTarget> JasonMSP1: you'll want to `su - username` then run it
[01:00] <JasonMSP1> ah!  thx!
[01:00] <LowValueTarget> then you can type exit to un-su
[01:00] <JasonMSP1> wait what if the user doesn't have sudo?
[01:02] <LowValueTarget> you are user1.... you are in the sudoers file..... you want to generate user2's ssh-keys
[01:03] <LowValueTarget> su - && su - user2 && ssh-keygen && exit && exit
[01:03] <JasonMSP1> ok thanks!
[01:03] <LowValueTarget> That will sudo you to root
[01:03] <LowValueTarget> then you sudo to the other user
[01:03] <LowValueTarget> create their keys as if you were them
[01:03] <LowValueTarget> you could use sudo too
[01:03] <LowValueTarget> i just always work as root
[01:05] <JanC> you could just sudo to the other user, of course...
[01:06] <JanC> (and su doesn't work by default)
[01:07] <LowValueTarget> JanC: knows more than me ;)
[01:07] <JasonMSP1> how bout sudo -i?
[01:08] <LowValueTarget> 0,5,10,15,20,25,30,35,40,45,50,55 * * * *    ( cd /usr/wp ; ./admin wpcron ) 2>&1 > /dev/null
[01:08] <LowValueTarget> Is that minute designation correct?
[01:08] <LowValueTarget> i know you can specify */5
[01:08] <LowValueTarget> but otherwise, is that correct?
[01:09] <JasonMSP1> su - user2 says, "this account is currently not available"  Is it because shell is set /usr/sbin/nologin???
[01:10] <JanC> JasonMSP1: sudo -i runs the default shell for that user, so if there isn't a real shell available...  ;)
[01:11] <JasonMSP1> sudo -i works to get me to root.  su - user2 is coming up account not available.
[01:16] <JanC> JasonMSP1: try "sudo -i -u <user> -s /bin/bash" or "sudo -i -u <user> ssh-keygen" or some such (or just create a key and copy it over and set the ownership & permissions correctly)
[01:18]  * JanC goes to sleep (have to promote Ubuntu tomorrow at a computer fair ;) )
[01:43] <RudyValencia> OK, I accidentally entered the wrong partition specifier to format when doing mke2fs, I canceled it during the first part of the process (creating tables). Is there a chance I can still recover data from the partition?
[02:04] <JasonMSP1> im setting up sftp.  I have a group for ssh logins and that is the only group listed in AllowGroups in sshd_config.  For SFTP access does my FTP user group need to be added to that?  I do not want these users to have shell access.  What do I do?
[02:50] <maddhat1> Hi all, i have 3 hard drives (shared through SMB) but id like to create just one share and have the files show up in one master list. is there a way to do this?  i was thinking symlinks but wasnt sure how to get it to update when files are added/deleted from one of the drives
[03:03] <qman__> maddhat, symlinks are by their very definition dynamic
[03:04] <qman__> and therefore always up to date
[03:04] <qman__> you will, however, need to enable wide links in samba on that share
[03:04] <qman__> which, if the share is writable, is a security risk
[03:06] <qman__> if that's a problem, you can mount them within a shared directory instead
[03:28] <maddhat> qman__: thanks for the additional info.!
[04:49] <wildem> Where does this command download the files to? scp -r user@host:/home/user/directory /
[04:49] <wildem> Note the space before the slash
[05:07] <ChmEarl> nowhere  since you don't use sudo
[06:27] <intel352> anyone know of a good hosted service for load testing a server?
[06:27] <intel352> distributed hosted service ideally, so multiple different points hitting the server
[06:30] <joschi> intel352: amazon ec2 with VMs in different country zones are be practical for that purpose
[06:31] <intel352> joschi, i'm looking for something hosted that will provide stats, graphs, etc, and allow to compare servers
[06:31] <intel352> not manual :-)
[07:16] <jjk9> looks quite here but I'l ask anyway: for samba 3.4.7 on 10.04 LTS server, to do AD authentication using LDAP do I need LDAPSAM to get ACLs working from windows or is it enough to use another passwd db and install LDAP locally to store the daya from the central LDAP?
[07:18] <oracle> anyone here?
[07:21] <jjk9> yep
[07:24] <jjk9> oracle:  I think Iit's just u and me
[07:24] <oracle> slow channel
[07:24] <jjk9> oracle: do u know: for samba 3.4.7 on 10.04 LTS server, to do AD authentication using LDAP do I need LDAPSAM to get ACLs working from windows or is it enough to use another passwd db and install LDAP locally to store the daya from the central LDAP?
[07:26] <oracle> never messed with that
[07:27] <oracle> ##linux guys may know
[07:27] <jjk9> oracle:  ahhh maybe I try there, but it is realy ubuntu specific as it seems ubuntu samba does not have ldapsam compiled in
[07:30] <masshuu> I am missing the postgres script in /etc/init.d/   Is there a way to restore this?
[07:31] <jjk9> masshuu:  I think I may have a copy on one of my servers if u want
[07:32] <masshuu> why not
[07:32] <masshuu> :p
[07:33] <jjk9> masshuu:  wait one while I go copy and pastbin...
[07:33] <masshuu> yay! i love copypasta
[07:34] <jjk9> masshuu:  arrgh mind muddle: dont have postgres sorry... :(
[07:36] <WinstonSmith> masshuu, look here : http://pastebin.com/3bRGqY2d
[07:37] <masshuu> ty
[07:37] <masshuu> :D
[07:39] <WinstonSmith> yw
[08:36] <loganlhp> hello, does anyone know how to find my machine's INTERNET IP address under ubuntu server? the kind of result you would get going to www.whatismyip.com,
[08:37] <loganlhp> anyone?
[08:38] <joschi> loganlhp: wget -qO - http://icanhazip.com/
[08:38] <joschi> loganlhp: or just visit www.whatsmyip.com with wget/curl/...
[08:39] <loganlhp> hmm...its showing the same exact address my macbook is showing doing it on that..is that normal?
[08:39] <joschi> loganlhp: or `dig +short @<IP_ADDRESS> myip.opendns.com`
[08:40] <joschi> loganlhp: if you have the same public ip address, sure
[08:40] <joschi> loganlhp: ie. use the same dialup account through a router
[08:41] <loganlhp> ok, so if i wanted to use that address for dyndns.com it would work?
[08:41] <joschi> loganlhp: depends on what you want to achieve.
[08:41] <joschi> loganlhp: that's your public ip address, so if you wanted to know that, it'll work
[08:41] <loganlhp> web serving..from home without having to go through static ip
[08:42] <joschi> but you could simply use a dyndns client which will automatically update your settings
[08:42] <joschi> no need to do that manually
[08:43] <loganlhp> im still required to signup through dyndns though, correct?
[08:45] <joschi> yes
[08:56] <loganlhp> ok i got my dyndns account and ddclient running, however when i access my dyndns url in a browser, it gets the default index.html page from my mac and not my ubuntu server..how do i get it to point only to the server and not any other device on using the same public ip address on my network?
[08:58] <yaboo_> trying to rebuild my raid array getting the message no superblock, how do I overcome this???
[09:07] <joschi> loganlhp: configure port forwarding on your router
[09:07] <joschi> loganlhp: but that's not ubuntu related at all ;)
[09:07] <loganlhp> haha
[09:08] <loganlhp> port 80?
[10:09] <loganlhp> is someone willing to test me web server setup for me really quick and just tell me if they see the index.html i put on there?
[10:09] <loganlhp> test my*
[10:11] <loganlhp> please?
[10:15] <alex_joni> without a link surely no-one will try
[10:16] <loganlhp> http://lhpnetwork.redirectme.net/index.html
[10:16] <loganlhp> tell me what the first line says
[10:17] <yaboo> any raid guru
[10:17] <yaboo> s
[10:17] <yaboo> about
[10:17] <loganlhp> what?
[10:17] <yaboo> rebooted my machine and got inactive md0 now
[10:18] <yaboo> get superblock errors
[10:18] <yaboo> any reason why
[10:25] <alex_joni> loganlhp: Uhhh hey baby huhuh
[10:25] <loganlhp> haha good it works
[10:25] <loganlhp> thanks
[10:57] <scar__> my server rebooted a few hours ago, I did not tell it to do so, when I checked "last -d reboot" it shows "reboot   system boot  <IP_ADDRESS>          Sun Sep  5..." how do I find out what caused it to reboot?
[11:16] <Pupeno> I can run the program bundler as pupeno, and as root, but when I do sudo bundler I get command not found. Any ideas why?
[11:26] <joschi> Pupeno: wrong $PATH when running `sudo`. try using the complete path to `bundler`
[11:26] <Pupeno> joschi: I cannot modify the command line.
[11:27] <joschi> Pupeno: the modify $PATH for the user you try to run bundler with (probably root?)
[11:28] <Pupeno> joschi: well, as I said, the path was correct for both my user and root, I can run bundler as both, just not using sudo. This works: sudo -i  and then bundler
[11:29] <joschi> Pupeno: does the message say `bundler` not found or does bundler call an executable which can't be found.
[11:31] <Pupeno> It says:  bundler: command not found
[11:32] <joschi> Pupeno: what's the output of `which bundler` and `sudo which bundler`
[11:33] <Pupeno> joschi: at the moment I'm reinstalling it... just a second.
[11:46] <RoyK> scar__: check the logs
[11:46] <RoyK> scar__: /var/log/messages is a good start
[11:48] <scar__> will do thanks
[11:53] <scar__> looks like someone has been trying to hack me through ebox
[11:55] <scar__> not entirely sure, could also be ebox itself going crazy. I'll firewall it for now and see how it goes
[12:10] <RoyK> scar__: can you pastebin some of the logs?
[12:11] <RoyK> if someone has tried to get in there - run chkrootkit on it to see if that finds anything - download it from http://www.chkrootkit.org/ directly instead of using apt-get in case that's been tampered with
[12:14] <scar__> ran krhunter right after reboot
[12:14] <scar__> it didn't find anything :)
[12:16] <RoyK> try chkrootkit, fresh install
[12:16] <RoyK> rkhunter may have been tampered with....
[12:17]  * RoyK is just paranoid, but paranoia can help sometimes
[12:17] <scar__> yeah rather safe...
[12:18] <scar__> at lest the box is here it home, though it's only been running for a few days publicly and it's already being tested
[12:18] <RoyK> this lists a few tools :) http://www.cyberciti.biz/faq/howto-check-linux-rootkist-with-detectors-software/
[12:19] <scar__> sshd[833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184-106-198-140.static.cloud-ips.com  user=root
[12:19] <scar__> got a few of those lines, seems it's time to disable text logins
[12:20] <RoyK> just install fail2ban or denyhosts
[12:21] <RoyK> both scans logs to stop intruders
[12:22] <RoyK> fail2ban can use iptables or hosts.deny and can be configured to scan for intrusion on other services than ssh, whereas AFAIK denyhosts only (currently) work for ssh, but then, it can use a distributed list of denied hosts
[12:22] <RoyK> denyhosts uses hosts.deny
[12:23] <RoyK> sshd reads that
[12:24] <scar__> I'll try the denyhosts think that was the simple one
[12:24] <RoyK> they're both quite simple to setup
[12:25] <RoyK> just remember to enable synchronisation with denyhosts - it's disabled by default
[12:27] <scar__> I'll also monitor the connections via the firewall, it should be really easy since there's only 2 people using this box
[12:29] <RoyK> still, that's manual work - fail2ban/denyhosts will work automatically, and ssh attacks rarely succeed in the first few attempts unless you have bogus passwords
[12:46] <scar__> awesome thanks RoyK, denyhosts is already doing it's job :) by the way the reason why I'm putting rules in place on the firewall is to check if my server tries to send out spam or tries to attack other hosts
[12:52] <RoyK> scar__: nice
[12:53] <RoyK> scar__: you might want to change denyhosts' settings - it normally bans IPs for some days, whereas the defaults in fail2ban is an hour or so. A ban for days may be bad if something goes wrong somewhere
[13:00] <scar__> I'll maybe set the ban longer, since there's always someone close to the box. If push comes to shove, I've got static ips at work that I can add to hosts.allow.
[13:02] <scar__> made sure that allow has higher priority than deny, so it's all good :)
[13:49] <touch-e> hi all
[13:49] <touch-e> i need help about tomcat and ssl activation
[13:50] <touch-e> please :)
[13:50] <touch-e> (i have read the doc and do as the quick step, but i seems not be activate)
[13:50] <touch-e> it seems*
[14:04] <incorrect> other than chkrootkit what else can i use to see if my system was compromised?
[14:18] <joschi> incorrect: rkhunter for example
[14:19] <joschi> incorrect: but if you need them check your system, it's already too late actually.
[14:19] <joschi> incorrect: a proper IDS and IPS from the start would have been useful then
[14:20] <incorrect> joschi, i am not too sure how far they got
[14:21] <joschi> incorrect: you should check your binaries with `debsums` and a clean package db
[14:22] <incorrect> nothing adverse has happened, the account they got into didn't have sudo
[14:33] <incorrect> weird chkroot kit thinks my /sbin/init has been compromised
[14:34] <yaboo> ok, how do I fix a raid5 array
[14:35] <incorrect> yaboo, mdadm?
[14:35] <yaboo> incorrect: done this to no avail, getting superblock errors
[14:37] <incorrect> i just used sfdisk and dumped my partition table from another disk, then used --force to copy it onto the new disk
[14:37] <incorrect> then added the new partitions back into the array
[14:37] <yaboo> ah ok
[14:37] <incorrect> wasn't a big deal
[14:38] <incorrect> i guess your partitions are the wrong size or something
[14:38] <yaboo> incorrect: power failure, rebooted, and array went from md0 to md_d0
[14:38] <incorrect> errr
[14:38] <incorrect> check your config
[14:39] <yaboo> got a inactive sdd1[2](s) in proc/mdstat
[14:39] <incorrect> maybe udev got screwed
[14:39] <yaboo> ok
[14:39] <yaboo> udev?
[14:40] <incorrect> this is weird /sbin/init still reports and infected even if i copy over one from a system that isn't infected
[14:44] <yaboo> incorrect: can I just use fdisk instead of sfdisk
[14:45] <incorrect> yaboo, depends if you want to spend 10 seconds copying over the partition table
[14:46] <yaboo> incorrect: ok
[14:47] <yaboo> incorrect: getting permission denied with sfdisk
[14:48] <yaboo> sfdisk -d /dev/sdb | /dev/sdd
[14:50] <incorrect> weird
[14:50] <incorrect> i must admit i did put it to a file first
[14:50] <yaboo> ok
[14:53] <incorrect> wow this guy really tried to get into my system
[14:53] <yaboo> mdadm -A -f /dev/md0 /devsd[bcd]1
[14:53] <yaboo> mdadm: cannot open device /devsd[bcd]1: No such file or directory
[14:53] <yaboo> mdadm: /devsd[bcd]1 has no superblock - assembly aborted
[14:53] <yaboo> incorrect: is there a fix to this
[14:53] <incorrect> i've not had this problem
[14:53] <yaboo> setup the correct partition in the sdd
[14:54] <incorrect> hmm, i wonder why chkrootkit thinks /sbin/init is compromised
[14:58] <incorrect> ah its a bug in ckrootkit, others have it too
[14:59] <incorrect> maybe i should leave a VM running outside of my internal network
[15:05] <incorrect> am i still here?
[15:22] <yaboo> can't find a answer to fix my raid array
[15:30] <yaboo> incorrect: you about
[15:52] <SpaceBass> hey folks
[15:52] <SpaceBass> rank amateur question - but how do I find out which /dev/ a pic card is assigned to?
[15:53] <SpaceBass> I see it when I do an lspci - v
[16:00] <kees> SpaceBass: I always look in /sys, but i bet there is a better way
[16:00] <SpaceBass> kees, thats where I started too...in /sts
[16:00] <SpaceBass> sys
[16:08] <oxi> hi
[16:09] <oxi> I'm having huge trouble with my neworking setup which I've been trying to solve for hours
[16:10] <oxi> I would very much appreciate if anyone could help
[16:10] <oxi> at the moment I have inbound traffic working but not outbound
[16:11] <oxi> this is my routing setup: http://pastebin.com/faHK6Htq
[16:14] <oxi> I can't ping or wget the outside from it
[16:22] <SpaceBass> oxi openvpn?
[16:23] <oxi_> SpaceBass: yes
[16:23] <SpaceBass> oxi_, can you pastebin your ovpn config?
[16:23] <oxi_> SpaceBass: thank you very much!
[16:25] <SpaceBass> dont think me yet - blind leading the blind here :D
[16:25] <SpaceBass> oxi, <IP_ADDRESS> is your local IP?
[16:26] <oxi> that's my vps
[16:26] <oxi> SpaceBass: here: http://pastebin.com/99ZTMmV2
[16:27] <oxi> the exact same "proplay.conf" config file is working on osx and windows for outbound traffic (ping google.com/traceroute google.com/wget googl.com/...)
[16:27] <savid> Anyone know how to get mod_vhost_alias installed on apache?  I can't find the package, and a2enmod says it's not found.
[16:28] <SpaceBass> oxi, looking now...
[16:28] <oxi> SpaceBass: I've been trying for hours to figure out what's wrong on my ubuntu server, why I can't achieve it there
[16:29] <SpaceBass> oxi, can you pastebin the ovpn logs?
[16:29] <oxi> SpaceBass: where do I find those? :-)
[16:29] <oxi> SpaceBass: from the client or from the server?
[16:29] <SpaceBass> oxi, not entirely sure... I use OpenVPN on BSD :D ...try /var/logs/openvpn
[16:30] <SpaceBass> oxi, both would be helpful, but lets start with the client
[16:31] <SpaceBass> savid, apt-cache search <keyword>
[16:31] <SpaceBass> savid, also: sudo apt-file search <filename>
[16:31] <savid> SpaceBass, yeah, that's what I did first :-P
[16:32] <SpaceBass> savid, then you are ahead of me :D
[16:32] <savid> SpaceBass,  That's what I meant when I said I couldn't find the package
[16:33] <coder> hi, is there any 10.04 sparc tftp image out there? I can't find it
[16:35] <oxi> SpaceBass: client: http://pastebin.com/bgGvfm3E
[16:38] <oxi> SpaceBass: server: http://pastebin.com/DfAKkSiJ
[16:38] <SpaceBass> oxi, did you manually adjust the routing table?
[16:38] <coder> no tftp image for sparc? really?
[16:38] <oxi> SpaceBass: are you using OVPN on FreeBSD?
[16:39] <SpaceBass> oxi, yeah, and osx
[16:39] <oxi> SpaceBass: yes
[16:39] <oxi> nice
[16:39] <SpaceBass> oxi, mostly I use it b/t two BSD routers, for a site-to-site vpn
[16:39] <oxi> very nice
[16:40] <oxi> I'm trying to have an ubuntu box route to a vps
[16:40] <oxi> SpaceBass: I can give you ssh access if that helps
[16:40] <SpaceBass> oxi, your problem is clearly in the routing table - what happens if you don't adjust it yourself? clean reboot?
[16:40] <oxi> SpaceBass: the routing table of my client or my server?
[16:41] <SpaceBass> oxi, thanks for the vote of trust :D but I wouldn't go around offering SSH access to internet people ;)
[16:41] <SpaceBass> I had a buddy do that in college, long story short, he still has an FBI record b/c of what the guy did once he was in the network
[16:41] <oxi> SpaceBass: it's only a sandboxed VM :-)
[16:41] <SpaceBass> ah :D
[16:42] <SpaceBass> oxi, so the server is trying to push the route options to the client (which is standard ovpn) and the client is saying that the route command failed due to conflict
[16:42] <oxi> SpaceBass: @buddy: hehe! ... :-)
[16:42] <SpaceBass> my guess is that conflict is b/c you altered the routing table... which doesn't look right to begin with...gateways are all wrong
[16:42] <oxi> SpaceBass: ah!!!!
[16:42] <oxi> SpaceBass: that is extremely helpfull
[16:43] <oxi> now at least I realize what I'm facing
[16:43] <SpaceBass> in the sever logs, see lines 870 and  871
[16:43] <oxi> I can't believe I was stepping into the wrong direction for so long!
[16:43] <oxi> I'll reboot my client
[16:43] <SpaceBass> on the client logs look at 2414-2417
[16:46] <oxi> SpaceBass: I did a fresh reboot. Does that seem wrong?: http://pastebin.com/FWxJJ0V3
[16:47] <SpaceBass> oxi, can you ping the outside world now from that box?
[16:47] <oxi> yes
[16:47] <SpaceBass> oxi, if it is a VM, is the networking setup as nat or bridged?
[16:47] <oxi> yes, bridged
[16:48] <SpaceBass> whew! nat would be a nightmare
[16:48] <oxi> but I have a windows bux using the exact same bridged vmware adapter and using the exact same openvpn config in the same network ... which is working
[16:48] <oxi> SpaceBass: yeah, NAT would be a real nightmare!
[16:49] <SpaceBass> try to bring up the ovpn client now
[16:54] <oxi> SpaceBass: the traceroute seems weird to me: http://pastebin.com/Me5tq8f6
[16:54] <oxi> I'll fire up ovpn
[16:55] <SpaceBass> what seems odd? that the traceroute failed?
[16:56] <SpaceBass> whats the IP of the host that is running the VM?
[17:00] <oxi> SpaceBass: http://pastebin.com/frq9SPuW
[17:00] <oxi> SpaceBass: @traceroute: yeah, it seemed odd that it failed, but I think it doesn't have much to do with my trouble
[17:02] <oxi> SpaceBass: the VM Host has ip <IP_ADDRESS>
[17:03] <SpaceBass>  ok, so the tunnel is up/open - can you ping across it?
[17:03] <oxi> yes
[17:03] <SpaceBass> so you can reach the server?
[17:03] <oxi> yes
[17:03] <oxi> but I can't ping the outside from it
[17:03] <oxi>
[17:04] <SpaceBass> ah
[17:04] <oxi> SpaceBass: <IP_ADDRESS>
[17:04] <oxi> I can get in, but not out :-)
[17:05] <SpaceBass> ok... one-way routing :D
[17:05] <oxi> hehe, yep
[17:05] <oxi> I trying to figure out how I can find out more about the iptables config push collision
[17:06] <SpaceBass> oxi, can you pastebin the openvpn config file from the server?
[17:07] <oxi> SpaceBass: sure, hold on :-)
[17:09] <oxi> SpaceBass: there's not much kungfu in there: http://pastebin.com/kdRcBxFG
[17:10] <SpaceBass> oxi, there are some clues, like "push redirect-gateway"
[17:12] <SpaceBass> whats the lan IP of the server?
[17:12] <oxi> SpaceBass: there's also some other iptables lines on the vps server:
[17:13] <oxi> http://pastebin.com/NFa3Amu8
[17:14] <oxi> the server has ip <IP_ADDRESS> and <IP_ADDRESS> and <IP_ADDRESS> for my vm which has <IP_ADDRESS> and <IP_ADDRESS>
[17:14] <SpaceBass> ok
[17:14] <oxi> the config works for openvpn in windows and in osx
[17:14] <SpaceBass> try this - comment out the line server <IP_ADDRESS> <IP_ADDRESS>
[17:15] <oxi> I guess there's something special about my ubuntu box, even though I picked a default install from a fresh iso
[17:15] <SpaceBass> Im not so sure it is with the ubuntu client ... windows openvpn does some stuff on the networking stack differently than linux
[17:15] <SpaceBass> what client are you using on osx?
[17:16] <oxi> Tunnelblick
[17:16] <SpaceBass> great app!
[17:16] <oxi> yeah, it's cool :-)
[17:18] <SpaceBass> its interesting, the tun0 is getting the right info on the client
[17:20] <SpaceBass> hang on, I'm setting up a new server and client similar to yours to test
[17:20] <oxi> I took out that line
[17:20] <oxi> it didn't work
[17:21] <oxi> SpaceBass: I'm using http://www.turnkeylinux.org/blog/core-lucid-beta
[17:21] <oxi> I wanted something very small and widespread supported :-)
[17:21] <SpaceBass> sorry, that line was correct :D
[17:22] <SpaceBass> brb
[17:22] <oxi> the server is also ubuntu, but an openvz template running in a computational centre :-)
[17:22] <oxi> nevermind, I'll kick that line in again :-)
[17:27] <SpaceBass> hummm I'm afraid I'm running out of ideas :(
[17:28] <SpaceBass> have you tried in #openvpn?
[17:31] <oxi> SpaceBass: here's a successfull connect from OS X, to the same server: http://pastebin.com/e1fcT4jb
[17:31] <oxi> SpaceBass: yeah, also tried #openvpn
[17:32] <oxi> :-)
[17:32] <oxi> me too - I have no idea what's going on
[17:36] <bjaanes> Hey, i was wondering: I got my DHCP/DNS server going now with ddns-update (updating the DNS every time i give out a lease). But now that I have reserved an IP in the DHCP - why won't it update the DNS with that info? Is that something i have to do manually, or can it be done with some configuration?
[18:21] <oxi> SpaceBass: I rebooted the server and it worked!
[18:22] <SpaceBass> oh wow!
[18:22] <SpaceBass> thats great news oxi
[18:22] <SpaceBass> wonder what changed?
[18:22] <oxi> it seems that there was an old iptables rule present which kept it from working
[18:22] <oxi> that rule was probably present from previous tries
[18:23] <oxi> I prabably had a typo and therefore routed ougoing traffic with the wrong rewrite
[18:24] <oxi> I assumed that when I enter a iptables rule again it would overreide
[18:24] <oxi> I guess it ne
[18:24] <oxi> ver overr
[18:24] <oxi> eide
[18:24] <oxi> I guess it never overrided
[18:24] <oxi> how do I list all present iptables rules?
[18:25] <oxi> SpaceBass: what's your paypal account? :-)
[18:25] <SpaceBass> oxi, glad it is working!
[18:25] <SpaceBass> I know how fustrating VPN issues can be!
[18:26] <oxi> yeah, I was tapping in myany wrong directions - it just seems that I was uncareful somewhere, but the configuration was fine
[18:26] <oxi> it had nothing to do with the client :-)
[18:27] <oxi> and I debugged the client for hours .-)
[18:38] <MrUrbanity> disablind X in 10.04 anyone?  Or converting a Desktop install to a Server install ?
[18:40] <MrUrbanity> disablind = disable.
[18:49] <Pici> !nox | MrUrbanity
[18:59] <MrUrbanity> ah ok.. well too late, i ripped gdm, xserver-xorg out via aptitude and rebooted, all works as I expected.
[19:15] <Patrickdk> all you have to do is a apt-get remove ubuntu-desktop :)
[19:16] <Patrickdk> or maybe even an: apt-get remove .*-desktop
[19:19] <MrUrbanity> no that didnt do it all, i did that first.  Must of been a while since I messed with this because 10.04 has some weird stuff going on.  I was update-rc.d -f gdm remove and it was still booting.  had to try and read about the new startup stuff but not a lot on it around.
[19:19] <MrUrbanity> eventual had to do ubuntu-desktop, gdm and xserver-xorg to get all the junk to stop from starting..
[19:20] <Patrickdk> well, that marks them all as unneeded
[19:20] <Patrickdk> then a apt-get autoremove will clean them up
[19:20] <MrUrbanity> ah ok.
[19:20] <Patrickdk> unless you marked something for forced install
[19:20] <MrUrbanity> nah, pretty much a default fresh instlal.. just didnt have a server disk handy.
[19:20] <Patrickdk> then you would have to do a forced uninstall
[19:21] <Patrickdk> I install everything as a generic, barebone install
[19:21] <Patrickdk> then install ubuntu-desktop, or server stuff
[19:21] <MrUrbanity> yeah I should have too but it is a low PC and it took about 15 minutes just to get to the install screen.
[19:21] <MrUrbanity> slow.
[19:21] <Patrickdk> that is cause you used desktop :)
[19:21] <MrUrbanity> lol.. yep.
[19:21] <Patrickdk> the netbook/minimalcd/servercd is much much faster
[19:22] <Patrickdk> netbook/network :)
[19:22] <MrUrbanity> yeah.. last time i did this (ie used the wrong disk) was a while back and i could just swap between them.. but that has been removed.
[19:23] <MrUrbanity> i had a 8.10 server disk sitting there.. might have been faster to use that and upgrade. lol
[19:29] <Pupeno> I have this content http://gist.github.com/566218 in /etc/cron.d/projectx and it seems it's not being run. Any ideas how to find out why?
[19:56] <silentwater77_> hi i ran into trouble upgrading mountal on lucid minimal. could someone pls be so kind and explain me http://paste.ubuntu.com/488861/
[20:33] <Aison> hello, I have got 4 ubuntu servers, now I installed an 5th older server that should run as backup server. So all 4 server should backup their system and defined user data to the backup server nightly
[20:34] <Aison> is there some good backup software or do I have to create my own scripts with rsync or so?
[22:11] <silentwater77_> Hello there, is anyone willing to help me with my problem with not loading daemons after reboot?
[22:13] <RudyValencia> What's the easiest way to back up everything on an internal drive mounted at /srv to an external USB hard drive mounted at /media/backup ?
[22:15] <stgraber> RudyValencia: "sudo rsync --delete -avP /srv/ /media/backup/" that's going to copy everything that's in /srv and not in /media/backup and remove anything that's in /media/backup and not /srv (so they are going to be exact copies with anything that was only in /media/backup being removed)
[22:15] <RudyValencia> Ah.
[22:15] <RudyValencia> Can I cron that?
[22:15] <stgraber> sure
[22:15] <RudyValencia> (add it to crontab as a root job done every... maybe 48 hours?)
[22:16] <stgraber> yep, you should then trop the -v so it won't show you progress information (not so useful when runnning from cron)
[22:16] <RudyValencia> ...and also got to do something about automounting the USB drive.
[22:27] <jjk9_> silentwater77_:  which daemons?


[14:22] <kai> hi folks
[14:24] <kai> I'm trying to teach the supybot in #gsoc to support sending factoids at specific people like ubottu can do. I don't see an extra module in the ubuntu-bots repo for that, though, any idea what I'm missing?
[14:24] <Pici> kai: Its the encyclopedia plugin that does that.
[14:25] <kai> ah
[14:27] <kai> Pici: and in order to add factoids with the encyclopedia plugin, people need to be registered with the bot, I gather from the readme file?
[14:28] <Pici> kai: Yes.
[14:28] <kai> not much of an issue, but currently we allow anybody to add factoids. in reality of course it's only a handful of people doing so
[14:28] <kai> thanks a lot :)


[08:06] <mpt> Spam comments in merge proposals now? Haven’t seen that before.
[08:12] <mpt> And bug commenters who don’t realize that quoting an entire spam message is exactly as bad as sending the original spam \o/
[11:40] <pipedream> I thought this was our corrupt debmirror cache on campus:     E: Failed to fetch http://ppa.launchpad.net/aims/sagemath/ubuntu/pool/main/s/sagemath-upstream-binary/sagemath-upstream-binary_7.2~aimsppa1_amd64.deb  Size mismatch
[11:41] <pipedream> However, I am getting independent reports from other users in other countries of the same
[11:41] <pipedream> the deb should be 600M, the downloaded deb is something like 200M
[11:41] <pipedream> https://launchpad.net/~aims/+archive/ubuntu/sagemath/+packages says 600M
[11:42] <pipedream> (trusty 64bit)
[11:42] <pipedream> the package was copied (use existing binaries) from ppa:aims/sagemath-dev (where it did not exhibit this problem)
[11:42] <pipedream> any idea?
[12:03] <pipedream> hmm, repeated debmirror downloads and apt installs got bad package. But firefox coudl download the deb manually from direct link
[12:03] <pipedream> that dpkg -i OK
[12:04] <pipedream> am deleting deb, and later copying in again
[12:04] <pipedream> on launchpad
[12:05] <wgrant> pipedream: Hm, there was a one-off issue last week which could have explained the file being truncated on disk, but if firefox was able to download it from ppa.launchpad.net successfully then that's not it.
[12:05] <wgrant> Can you confirm it was a successful full download from ppa.launchpad.net, not launchpadlibrarian.net?
[12:05] <pipedream> yea
[12:05] <pipedream> uhm
[12:06] <pipedream> https://launchpadlibrarian.net/261359749/sagemath-upstream-binary_7.2~aimsppa1_amd64.deb <- from firefox download history
[12:06] <wgrant> Ah
[12:06] <pipedream> looks like launchpadlibrarian
[12:06] <wgrant> So it may be the issue we saw last week.
[12:06] <wgrant> Yeah
[12:06] <wgrant> Delete + copy won't directly fix, unless you wait at least six hours between the delete and copy.
[12:06] <wgrant> (the file won't be removed from the pool for a few hours after the deletion)
[12:07] <pipedream> is there a better way?
[12:07] <pipedream> or should I just do that
[12:08] <wgrant> This is only the third file that we know to be affected. Have you checked if the other binaries for that package are OK?
[12:08] <pipedream> no
[12:08] <pipedream> don't have quick access to do that now
[12:10] <pipedream> do you want to have a look / investigate before I delete them?
[12:12] <wgrant> pipedream: Delete away. Unfortunately there's not much we can discover from the files on disk.
[12:12] <wgrant> We have a fix in progress to prevent it from happening again, though we don't totally understand the underlying cause.
[12:13] <pipedream> okey dokey
[12:13] <wgrant> We suspect an OpenStack swift overload condition resulting in truncated downloads, but it's a bit more complicated somehow.
[12:19] <pipedream> thanks! happy debugging


[00:00] <bkerensa> slangasek: anyways yeah all the Server, Juju, Cloud, Marketing folks mostly and Bus Dev and sabdfl
[00:00] <slangasek> jamespage is currently in the Debian NM queue
[00:01] <bkerensa> nathwill: u signup for the HP party or no?
[00:05] <bkerensa> slangasek: there is a shuttle at 6:10pm from the Convention Center if that adds any convenience for anyone going
[00:05] <slangasek> bkerensa: well, that's certainly not more convenient for me, and everyone else should have read the webpage already ;)
[00:07] <bkero> bkerensa: wuz going on?
[00:08] <blkperl> nathwill: passed along to katzen
[00:08] <slangasek> bkero: ITYM http://www.youtube.com/watch?v=8QOMsWVbge8
[00:10] <bkero> OOLLLDDDDDDD
[00:10] <slangasek> yes
[04:19] <bkerensa> bkero: idk writing a blog post about Firefox Sync and Cloud
[16:03] <MarkDude> bkerensa: pingy
[16:03] <MarkDude> You got some response on your G+ post
[16:04] <MarkDude> Nevermind, you are busy
[16:04] <MarkDude> unping


  O_o
[17:16] <thelinuxer> don't provoke me ... I have power issues :D
[17:16] <elacheche_anis> Hey guys :p
[17:16] <thelinuxer> hi elacheche_anis
[17:16] <thelinuxer> ashams: np I was there with him
[17:16] <Tux-Tn> elacheche_anis said that egypt loco team is not doing his job
[17:16] <ashams> great, thanks man
[17:17] <Tux-Tn> kick him :D
[17:17] <thelinuxer> O_o!!!
[17:17] <thelinuxer> He said that!?!
[17:17] <Tux-Tn> yes
[17:17] <Tux-Tn> of course
[17:17] <thelinuxer> I guess this is a pretty good reason
[17:17] <elacheche_anis> Nope thelinuxer
[17:17] <elacheche_anis> loool
[17:17] <Tux-Tn> he didn't exactly said that but it was a kind of
[17:17] <ashams> Tux-Tn, let elacheche_anis go to #ubuntu-sa and he will thank GOD
[17:17]  * thelinuxer kick elacheche_anis
[17:18] <thelinuxer> ashams: stop mocking them man!
[17:18] <thelinuxer> they just need time and things will get better
[17:18] <ashams> thelinuxer, you say it cuz you don't live here
[17:19] <ashams> I know, ~100000 yrs
[17:19] <ashams> ok, I'll stop now
[17:19] <Tux-Tn> ashams, hope you like the king
[17:19] <thelinuxer> ashams: you have to accepted as a group member (you know like with the gorillas), be one of them. Then you can make the change
[17:20] <ashams> thelinuxer, the gorilla part says that you have just started to imagine the situation
[17:20] <ashams> oh crap, I started again
[17:20] <Tux-Tn> https://groups.google.com/forum/?fromgroups#!topic/ubuntu-sa/QMRk1JElaYI <- omg
[17:20] <thelinuxer> THIS IS NOT WHAT I MEANT!!
[17:21] <thelinuxer> Tux-Tn: completely off-topic, we arabs have to learn to respect the main topic that gather us
[17:22] <thelinuxer> but we also get a bad posting from time to time
[17:22] <Tux-Tn> thelinuxer, yes for sure
[17:22] <ashams> oh, true
[17:22] <thelinuxer> and here is one of the answers "This group is Ubuntu related and not for random subjects. Please refrain from sending such emails to this group. "
[17:23] <ashams> thelinuxer, NICE :D
[17:25] <Tux-Tn> i think it's ashams answer
[17:25] <thelinuxer> Tux-Tn: no, it's from someone else :D
[17:25] <thelinuxer> I have a question here
[17:26] <thelinuxer> in a society like ours
[17:26] <Tux-Tn> thelinuxer, we have a society?
[17:26] <ashams> what is society?
[17:26] <thelinuxer> if we try to prevent postings like these they think are abusing our power
[17:26] <Tux-Tn> we are not gorillas?
[17:26] <thelinuxer> I mean societies in Arabic countries
[17:26] <ashams> I love gorillas
[17:26] <thelinuxer> Tux-Tn: can we please forget about the gorillas :D
[17:26] <thelinuxer> ?
[17:26] <Tux-Tn> i love gorillas :(
[17:26] <Tux-Tn> but ok
[17:26] <ashams> ok
[17:27] <thelinuxer> I mean people think that sharing such stuff should considered a second nature
[17:27] <thelinuxer> and there should be no rules against it
[17:27] <thelinuxer> and people get mad when we intervene
[17:28] <ashams> thelinuxer, imho, in such situation, we need to make pppl understand why we do waht we do
[17:28] <ashams> then use the seiflotfy strategy "let other ppl fight for you"
[17:28] <ashams> if you explain it clear
[17:28] <ashams> others will understand
[17:29] <ashams> and thus if the concerned person didn't comply
[17:29] <thelinuxer> ashams: you know how it gets in reality, usually people fight back, which means they are not satisfied
[17:29] <ashams> others will attack him
[17:29] <ashams> I understand
[17:54] <ashams> thelinuxer, what is your answer?
[17:54] <thelinuxer> ashams: answer to what ?
[17:54] <thelinuxer> to the problem ?
[17:54] <thelinuxer> no answer I was just raising the issue
[17:54] <thelinuxer> :D
[17:56] <ashams> thelinuxer, why you think they're not satisfied?
[17:56] <thelinuxer> ashams: not me I mean people posting this type of posts
[17:56] <thelinuxer> how can we make them happy and also apply the rules ?
[17:57] <ashams> prepare and announce the rules pre to any issue
[17:57] <ashams> and get ppl accept it
[17:57] <thelinuxer> momken
[17:57] <ashams> and accept who is going to apply it
[17:57] <ashams> so, when something happens, you'll get the whold crowd with you
[18:02] <os_> ممكن أن أتكلم بالأوردو هنا؟
[18:03] <os_> can i speak aurdu here?
[18:07] <ashams> os_, yes you can for sure :P
[18:07] <os_> لم تفهم المغزى؟
[19:13] <thelinuxer> os_: yes you can if people will understand you