[03:01] <incentifit> I've created a user, developer, that is a member of 'publisher' group.  I set ownership of /var/www to root:publisher.  Then, as developer, I make a new directory in /var/www.  I think I want that new directory to be owned by root:publisher.  Is that reasonable and possible?
[03:22] <twb> billybigrigger: why wouldn't you use the existing www-data group?
[03:22] <twb> You want /var/www to be setgid, I think.
[03:22] <billybigrigger> eh?
[03:23] <billybigrigger> twb, i think you meant incentifit but he's gone
[03:23] <twb> Sorry.
[03:23] <billybigrigger> np
[03:23]  * twb fetches coffee
[03:23] <billybigrigger> im sipping a tea
[03:23] <billybigrigger> tastes good
[03:28] <billybigrigger> anyone aware of a decent apache log analyzer?
[03:28] <billybigrigger> or is it still a battle between awstats and webalizer? i haven't set one up in awhile and was wondering if something new has sprouted
[03:29] <twb> You could probably run them both
[03:29] <twb> IIRC they're both straightforward to set up
[03:30] <billybigrigger> yes i know, just wondering if something else with a nicer graphing or anything
[03:30] <billybigrigger> newer
[03:30] <billybigrigger> fresh
[03:30] <billybigrigger> :)
[03:31] <twb> NFI
[04:15] <maxagaz> is there a way to check what was the last upgraded packages on a system ?
[04:17] <twb> maxagaz: /var/log/aptitude and /var/log/dpkg.log
[04:41] <HFSPLUS> !ops
[04:47] <ScottK> Not anymore.
[04:48]  * foxbuntu is glad he stays inside the Ubuntu community most of the time... #python makes him crazy everytime
[04:52] <twb> foxbuntu: eh, if #python is the most annoying channel, #ubuntu is second-most
[04:53] <twb> I was glad when I found the SNR in here acceptable, because sometimes I can't reproduce Ubuntu bugs on Debian (and thus use #debian on OFTC).
[04:56] <foxbuntu> twb, I would agree there
[05:24] <ninnypants> I'm running a postfix mail server, and when I send mail the from name defaults to my mailserver url instead of the value I get in php any idea why that is?
[05:24] <ScottK> That's a sign you aren't setting it properly in your php.  Postfix will only do that if From is missing.
[05:25] <ninnypants> my php is set correctly "From: ".$mail_from."<".$mail_email.">"
[05:27] <ninnypants> and it's only the mail from variable that changes the actual email address it's sent from goes through correctly
[05:29] <ScottK> Well I guess you know more about it than me and will figure it out then.
[05:33] <ninnypants> I certainly wouldn't say that I know more than you but I had this section of code working before, and after 2 or so emails were sent correctly with it the problem started
[05:47] <billybigrigger> anyone familiar with certificates and csrs?
[05:48] <billybigrigger> im trying to create an insecure key for my mailserver and it's asking for a passphrase, just hitting enter repeats the question
[05:48] <billybigrigger> is it not possible to create a server.key without a password?
[06:22] <ninnypants> I'm having trouble with the from value on my emails not setting correctly. I'm using postfix and the wordpress mail function http://codex.wordpress.org/Function_Reference/wp_mail
[06:24] <ninnypants> my code is: wp_mail($email, $mail_subject, $message, "From: $mail_from <$mail_email>"); but all of my emails show the from value as mydomain.com
[06:32] <Dessan> ninnypants, it shows right on that page you listed how the header section is supposed to be included. Your code is not correct.
[06:35] <ninnypants> not sure what you mean. my From: header is in the correct paramater slot am I missing something?
[06:36] <Dessan> $headers = 'From: My Name<EMAIL_ADDRESS>. "\r\n\\"
[06:39] <ninnypants> it still didn't change anything still shows it being from mailserverdomain.com
[06:43] <Dessan> hmm how to debug this then.... Show me what you have now as code?
[06:43] <ninnypants> could it be something with postfix because it was sending correctly for 2 emails or so before the problem started
[06:43] <Dessan> oooh fun
[06:43] <ninnypants> $headers = "From: $mail_from <$mail_email> \r\n\\"; wp_mail($email, $mail_subject, $message, $headers);
[06:44] <ninnypants> that's the code
[06:44] <billybigrigger> while we're on the postfix topic....i can't seem to get 250-AUTH=LOGIN PLAIN to show when i pass the ehlo localhost command while telneting into my server...any ideas?
[06:44] <billybigrigger> no errors in mail.log
[06:45] <Dessan> I haven't used postfix with my web app servers in a while. also the  . "\r\n\\" is important I would leave that as is and not include it in the ""
[06:45] <ninnypants> could be a slow server before I upgraded my ram it took a long time for it to respond to telnet
[06:48] <ninnypants> still no dice trying $headers = 'From: '.$mail_from.' <'.$mail_email.'>'."\r\n\\";
[06:49] <ninnypants> just curious what is the importance of the \r\n\\ I've never had to use it when writeing my own code other than to seperate paramaters with \r\n
[06:49] <Dessan> awesome. Well now that I'm sure its not you lets see what we can find. What do the email settings in WP look like?
[06:50] <ninnypants> in the wp_mail function?
[06:51] <Dessan> in the dashboard of WP under settings there should be a tab that says email
[06:56] <ninnypants> nope nothing
[06:58] <ninnypants> no tab that is
[07:10] <ninnypants> I also just tried using ini_set to set the sendmail_from setting in the php.ini to the email address I want it to show up as being from with no luck
[07:13] <ninnypants> Dessan: you there still?
[10:33] <Omahn> Is it possible to use packemaker-openais in Karmic to run a load balancer with LVS or does it still have some essential parts of the clustering stack missing?
[11:36] <hjm> Tried to install open LDAP on 9.10 server. I am not being asked for a password at installation, cannot query anything. How can I set the database password?
[11:38] <alvin> hjm: See bug #447099 for that information
[11:38] <uvirtbot`> Launchpad bug 447099 in openldap "No password set on install of slapd-2.4.18-0ubuntu1" [Undecided,Invalid] https://launchpad.net/bugs/447099
[12:14] <ahasenack> hjm: in 9.10 the local root user is also the ldap root user as long as ldapi:// is used
[12:24] <hjm> Thanx thats it
[13:23] <benedikt> Im trying to follow this guide on mail filtering but it doesnt seem like spamassin is ever invoked. http://doc.ubuntu.com/ubuntu/serverguide/C/mail-filtering.html
[13:31] <benedikt>  /etc/default/spamassin has "ENABLED=1" and I have followed the guide but no X-Spam headers show up in the message headers.
[14:13] <benedikt> A X-virus-scanned header appears, so amvisvd seems to work and calles ClamAV successfully..
[15:50] <VSpike> After an upgrade from 8.10 -> 9.04, my server fails a FS check at boot.  It's using a RAID1, which seems to be failing...
[15:59] <mathiaz> kirkland: hi!
[15:59] <mathiaz> kirkland: what was the outcome of the virt-manager demotion discussion at UDS?
[16:05] <soren> mdeslaur: I heard back Gemalto people. Their tokens are only usable with Amazon :(
[16:05] <mdeslaur> soren: darn :(
[16:06] <soren> Insert "from the" at an appropriate place in that sentence. I don't know how that went wrong.
[16:07] <mdeslaur> soren: I guess amazon subsidizes part of the token price, which is why they're so cheap
[16:07] <soren> mdeslaur: Probably.
[16:07] <soren> mdeslaur: If only "some other" company would do the same.... :)
[16:08] <mdeslaur> hehe
[16:14] <VSpike> what does this mean? http://pastebin.com/d2f650fe7
[16:15] <pavelm> is anyone here familiar with UML ?
[16:15] <pavelm> i'm getting the following error
[16:15] <pavelm> I am getting the following error  http://pastebin.com/m26a90af8
[16:15] <VSpike> even stranger http://pastebin.com/d7ffea8a6
[16:16] <VSpike> The raid should be comprised of /dev/sdb and /dev/sdc
[16:16] <VSpike> So what is md_d0?
[16:17] <VSpike> THis seems relevant http://ubuntuforums.org/showthread.php?t=1168360&page=2
[17:11] <Artimus> I've been following https://help.ubuntu.com/community/LDAPClientAuthentication to setup LDAP authentication. The problem is, only users with posixAccount objectClass are able to login. Is there anyway to get around that? I don't really have access to modify the LDAP.
[17:12] <uvirtbot`> New bug: #487696 in samba (main) "[Samba] Error fcntl_lock: lock failed & cached_login don't run" [Undecided,New] https://launchpad.net/bugs/487696
[17:46] <zroysch> why is it that every few minutes my connection, gmpc to mpd server and icecast stream all cut off when connected from the internet. but i can still ping
[17:46] <zroysch> ssh connection
[17:47] <freefall> Hi. just wondering how to create a alias for postfix i.e. mail sent to<EMAIL_ADDRESS>is sent to<EMAIL_ADDRESS>[17:47] <freefall> Is there anyone nice enough to point me to docs on this subject?
[17:48] <ScottK> freefall: Start with man postalias
[17:48] <ScottK> I suspect that's what you want.
[17:48] <lamont> or even man aliasees
[17:48] <lamont> man aliases that is
[17:49] <freefall> k thx!
[17:50] <freefall> again thank you Scottk and Lamont, that exactly what I'm looking for, cheers!
[17:54] <Deeps> hi, i've just installed 9.10 using the virtual machine option at boot time
[17:55] <Deeps> trying to use iptables now, looks like the iptables package wasn't installed by default, installed it and getting fatal errors about missing modules
[17:55] <Deeps> FATAL: Module ip_tables not found.
[17:57] <Deeps>  i've tried installing linux-server and still getting the same error
[17:58] <Bilge> >Deeps
[17:59] <Bilge> DOOOOOOOOOO HO HO HO HO HO
[17:59] <Deeps> i lie, i neglected to to actually install linux-server, my bad
[17:59] <Bilge> derp
[17:59] <Deeps> nm
[18:02] <zroysch> where is ubuntu server's ssh log
[18:03] <zroysch> i set sshd_config to LogLevel VERBOSE
[18:09] <kane___> zroysch: have you read https://help.ubuntu.com/community/SSH/OpenSSH/Configuring ?
[18:11] <middleman> add-apt-repository is not installed on 9.10
[18:11] <zroysch> kane___: no, but I have checked the /var/log/auth.log file.
[18:11] <zroysch> and it seems to not provide much reasons for why i continually get disconnected
[18:12] <kane___> zroysch: intuitively i'd assume keep alive
[18:12] <zroysch> i have keep alive set.
[18:12] <kane___> and interval to somethin reasonable?
[18:13] <zroysch> furthermore, i'm currently ssh'd into a centos server on the same lan, still across the internet, from the same lan
[18:13] <zroysch> it doesnt disconnect unless i tell it to
[18:13] <zroysch> KeepAlive yes
[18:13] <zroysch> ServerAliveInterval 120
[18:15] <zroysch> is what my /etc/ssh/ssh_config looks like
[18:15] <freefallden> zroysch: are you using a public/private key authentication?
[18:15] <zroysch> also its not just ssh that breaks down
[18:15] <zroysch> the mpd connection and icecast stream also cut out
[18:15] <zroysch> all happens at the same time
[18:16] <zroysch> seems like tcp fails. ping works even during the downtime
[18:16] <kane___> zroysch: you want your sshD_config, set keepalive there too, and clientaliveinterval
[18:16] <kane___> zroysch: ah, ok, not just localized to ssh then
[18:18] <zroysch> kane___: right. and the centos machine has no clientkeepalive line, and it stays up all the time
[18:20] <zroysch> is there any way to find out why tcp connections across the internet seemingly fail for this one server
[18:20] <zroysch> when i'm connected at home, on the same lan, its all good
[18:22] <kane___> zroysch: just so i get this right; from your client machine, somewhere outside on the internet, you can ssh to 2 machines: an ubuntu and a centos one. the centos one behaves as you expect, but the ubuntu one sometimes drops all tcp traffic?
[18:23] <zroysch> it seems so, i'm estimating that it is all tcp. i only connect with ssh, mpd, and an icecast stream to that server
[18:23] <zroysch> i know icmp stays up during the 30sec-1min downtime, i can still ping it
[18:23] <zroysch> well
[18:23] <zroysch> scratch that its pinging the firewall not the server behind it
[18:24] <middleman> Ubuntu server doesnt have "add-apt-repository" installed, how can I install it?
[18:25] <zroysch> kane___: another point of interest is that when I connect to the ubuntu problem server from the office windows server (using putty, still across the internet) it appears to remain connected. (i am currently at school where i usually make my connections)
[18:48] <billybigrigger> how come i've been waiting almost 24 hours for my A record and MX records to change to my servers new ip?
[18:48] <billybigrigger> i thought a 1 hour TTL meant changes happen after an hour?
[18:57] <benedikt> billybigrigger: there are a lot more factors to it
[18:58] <benedikt> e.g. the negative ttl (how long before the dns server will be queried again for a record it has failed to find before)
[18:58] <benedikt> anybody good with spamassasin/amisvd?
[19:00] <ScottK> benedikt: What's the question?  Just ask it.
[19:00] <android6011> >	a have a 1tb drive with serveral gbs of pictures and videos(some small clips others a few gb). Data recovery in case of failure could be crucial. Which filesystem would be best for me to use? it is not high performance drive so i dont think speed would be a factor
[19:04] <zroysch1> http://pastebin.ca/1685806
[19:04] <zroysch1> does any of this tell us WHY it is disconnecting?
[19:10] <Italian_Plumber1> android: I would use ext3
[19:11] <Italian_Plumber1> zroysch: what do you see there that's disconnecting?
[19:27] <benedikt> ScottK: i asked earlier, i consider reposting to be rude. But i followed the server guide for mail filtering and spamassisin doesnt seem to be invoked, there are no X-Spam-* headers in mails
[19:27] <benedikt> android6011: ext3. And if it is important data you should back it up, preferrably automaticly.
[19:30] <RoAkSoAx> kirkland, what do you think on having testdrive doing something like "testdrive -t desktop" or "testdrive -t desktop -a i386" instead of having another executable to select a default iso image, or maybe both can be kept
[19:35] <Maelos> Is there anything in ufw which would throttle traffic?
[19:36] <Maelos> I added a couple masq/forwarding rules and am seeing horrible performance.  It could certainly be the network but thought I'd ask about ufw.
[19:37] <benedikt> Maelos: how is the perfoance to and from the internet directly on the firewall machine?
[19:40] <Maelos> benedikt: No issues there
[19:41] <benedikt> Maelos: and check again with the machines behind it. Could have been a termpoary thing
[19:42] <Maelos> I checked numerous times, it's definitely reproducable by putting the machines behind my Ubuntu server.
[19:42] <ScottK> benedikt: My first thought is double check your configs as it doesn't take much to get things off kilter.
[19:42]  * ScottK is sure you've done that, but do it again.
[19:43] <benedikt> kilter...?
[19:43] <benedikt> anything I didnt do as described in the guide is installing the spf pakage or dkim things, i use neither of those.
[19:45] <ScottK> off kilter == bad.
[19:45] <benedikt> ah. Ill go through it once again.
[19:49] <benedikt> ScottK: also one thing that confuses me. in postfix/main.cf, content_filter is set to <IP_ADDRESS>:10025 but in master.cf there is something set to listen to 10025 .
[19:50] <benedikt> now everuthing is quadruple-checked
[19:50] <zroysch> is there a gnome/linux application that will let me easily upload photographs to a site like imgur/imageshack ? like right click the file and upload or something in gimp
[19:51] <blackxored> what's the iptables command to redirect one local port to another local port?
[19:51] <ScottK> benedikt: Do you know for sure the mail is going into amavisd-new?
[19:52] <benedikt> ScottK: the mails have a X-virus-scanned header
[19:52] <ScottK> benedikt: OK, then we need to look in the amavisd-new config, not postfix.
[19:52] <blackxored>  what's the iptables command to redirect one local port to another local port?
[19:54] <benedikt> ScottK: pastebin from mail.log when a message arrived
[19:54] <benedikt> http://pastebin.com/m64f2f09c
[19:54] <ScottK> Looking
[19:55] <benedikt> when the message get relayed to localhost:10024, its amavisd-new recieving the message
[19:56] <soren> blackxored: iptables -t nat -I PREROUTING -p tcp --dport someport -j DNAT --to-destination the.other.ip
[19:57] <ScottK> OK.
[19:57] <benedikt> at least it is the amavis process listening on 10024
[19:58] <blackxored> soren, to my own box from one port to another, just that
[19:58] <ScottK> benedikt: Pastebin your amavis config where spamassassin is enabled?
[19:58] <soren> blackxored: Oh, sorry, I misread your question.
[19:59] <benedikt> ScottK: /etc/amavis/conf.d/15-content_filter_mode ?
[19:59] <blackxored> soren, so?
[19:59] <soren> blackxored: iptables -t nat -I PREROUTING -p tcp --dport someport -j DNAT --to-destination :otherport
[19:59] <soren> blackxored: I think.
[19:59] <ScottK> benedikt: Also, silly question, I imagine, but you do have spamassassin installed, right?
[19:59] <benedikt> ScottK: yep :-)
[19:59] <ScottK> benedikt: If that's where you changed it, yes.
[19:59] <benedikt> ScottK: the guide states "First activate spam and antivirus detection in Amavisd-new by editing /etc/amavis/conf.d/15-content_filter_mode".
[20:00] <benedikt> ScottK: http://pastebin.com/m3753a6ca
[20:00] <ScottK> benedikt: Yes, but the config files waterfall, so you can also do it later, for example in 50-user.
[20:01] <ScottK> I agree that looks correct.
[20:02] <benedikt> just for reference, this is the guide
[20:02] <benedikt> http://doc.ubuntu.com/ubuntu/serverguide/C/mail-filtering.html
[20:02] <ScottK> benedikt: When you receive mail can you check using top or your favorite ps invocation to see if the spamassassin process runs?
[20:02] <ScottK> That's the one to be using.
[20:06] <benedikt> ScottK: it ran (spamd)
[20:06] <djveer> what would be the best way to set up a basic Ubuntu web server with two machines that are identical? any suggestions?
[20:15] <ScottK> benedikt: OK. then the problem is not adding headers, not not running.  For that you need to look at spamassassin configuration.
[20:16] <RoAkSoAx> djveer, u mean a cluster?
[20:16] <uvirtbot`> New bug: #487795 in samba (main) "Samba does not start well" [Undecided,New] https://launchpad.net/bugs/487795
[20:18] <djveer> RoAkSoAx: Is that an option?
[20:19] <djveer> i'm looking for some way to use both machines for high availability
[20:19] <djveer> rather than just having one machine that could fail
[20:20] <RoAkSoAx> djveer, so yes, clustering... HA Clustering. Have one machine active and the other passive waiting for the first one to fail... to take control of the service
[20:20] <benedikt> ScottK: already did, didnt find any pre-specified options for that. im reading manuals so ill probably be able to sort this out
[20:20] <djveer> RoAkSoAx: Is there any Ubuntu documentation on that?
[20:21] <RoAkSoAx> djveer, we are working on having that, but yes :) this miught help you nout: https://wiki.ubuntu.com/UbuntuHighAvailabilityTeam/Heartbeat
[20:21] <ScottK> benedikt: OK.  So it's narrowed down.  Once you get it sorted, would you let me know so we can get it added to the server guide?
[20:22] <benedikt> ScottK: of corse i will. im not sure i have time to sort this out tonight but ill let you know
[20:22] <djveer> RoAkSoAx: thanks very much :)
[20:22] <ScottK> Thanks
[20:23] <RoAkSoAx> djveer, are you running karmic?
[20:23] <benedikt> who maintain the Server Guide? is it canonical/canonical employees or volunteers from the community?
[20:24] <djveer> RoAkSoAx: um... i'm likely going to be running 8.04 LTS
[20:24] <djveer> not sure what the codename for it is
[20:24] <djveer> hehe
[20:24] <djveer> i've been doing testing on 9.10 though.. which i'm sure is Karmic Koala
[20:25] <RoAkSoAx> djveer, ok so the tutorial should suit you... since from karmic there are ongoing changes to the cluster packages and things work slightly different. Feel free to ping me if you need help
[20:25] <djveer> RoAkSoAx: will do, thanks a million
[20:25] <zul> benedikt: volunteers
[20:25] <zul> benedikt: or volunteer (sommer)
[20:26] <ScottK> benedikt: sommer is the person to talk to about server guid (and he's community, not Canonical)
[20:29] <benedikt> zul and ScottK: thanks
[20:35] <thenetduck> hi, I need help creating a new mysql user on my hardy heron server?
[20:36] <benedikt> thenetduck: if you are a beginner with mysql i would suggest phpMyAdmin
[20:37] <exitcode1> seconded. takes all the guesswork out of mundane admin tasks (like adding users)
[20:38] <benedikt> i just recond only making it availble through https
[20:42]  * ScottK points at the security record of phpMyAdmin and suggets thinking about it.
[20:43] <benedikt> wich is way i suggested using only https
[20:45] <thenetduck> benedikt: I have a rails server set up. I can access mysql via command line, I just don't know what to put in haha
[20:46] <exitcode1> http://lmgtfy.com/?q=mysql+create+user&l=1
[20:47] <thenetduck> thank you exitcode1
[20:48] <axisys> how do I auto create a user's, who is in /etc/passwd, a home dir at first ssh login ? i am using pam_radius_auth to authenticate
[20:48] <thenetduck> exitcode1: I however have searched google and don't understand it
[20:48] <ahe> can i change the ip addresses of a eucalyptus cc and nc after they have been setup?
[20:48] <axisys> here is my pam.d/sshd file looks like http://pastebin.com/f6e97a75
[20:49] <exitcode1> okay, whelp... what do you have, what are you expecting, and what happens instead?
[20:49] <axisys> actually better yet how do I do it even w/o having a entry in /etc/passwd ?
[20:49] <axisys> users authenticates using radius
[20:53] <thenetduck> exitcode1: i'm confused by the second part. CREATE USER user [IDENTIFIED BY [PASSWORD] 'password']
[20:53] <thenetduck>     [, user [IDENTIFIED BY [PASSWORD] 'password']]
[20:54] <thenetduck> exitcode1: do I have to enter the user and password twice?
[20:54] <thenetduck> or is this example of how to make two users?
[20:58] <benedikt> ScottK: this doesnt seem to be an issue, the headers are now showing. I have no idea way, I have backed every single step i have made, but they are still there. My best guess is that spamd has somehow been started with the wrong parameters and restarting the deamon fixed that.
[20:58] <ScottK> benedikt: OK.  It's officially weird then.
[20:58] <ScottK> Let us know if you figure something out.
[20:59] <benedikt> I will.. But this doesnt make any sense. I am probably doing another very similar setup in the next few days, ill see how that one behaves
[20:59] <ScottK> Great.
[21:00] <benedikt> Now i just have to add a nice rbl to the config
[21:01] <exitcode1> thenetduck: nah thats just for one user. they wanted you to be able to have the word PASSWORD as a label before the password for readability, just like the mandatory USER before the new user's name. has an example: http://dev.mysql.com/doc/refman/5.1/en/adding-users.html
[21:02] <thenetduck> oh ok thanks
[21:05] <thenetduck> so I have question about privileges,
[21:06] <thenetduck> what kinds of privileges should I give a user so it can read/write for my website?
[21:06] <thenetduck> for mysql
[22:44] <mupp> lo
[22:45] <mupp> Am I in the channel now?
[22:45] <Dessan> depends on where you want to be
[22:45] <Dessan> :P
[22:46] <mupp> "This is NOT #ubuntu. | You have been sent to this channel because you are using a proxy service...."
[22:46] <mupp> strange, Im not using any proxys
[22:49] <mupp> anyways, I'm annoyed at tasksel, I thought you'd select what you want to install and not what to uninstall. And now all my programs are lost, including sshd...
[22:50] <mupp> ****
[22:50] <mupp> should be a warning
[22:51] <mupp> o_O well, nothing to do about it now
[23:20] <dknight> hello would iptables/ufw questions be better answered in #ubuntu?
[23:34] <billybigrigger> why does apache2 not support phtml?
[23:38] <jdstrand> Maelos: ufw does nothing with throttling traffic
[23:45] <ivoks> billybigrigger: phtml?
[23:46] <ivoks> isn't phtml just another name for php?
[23:46] <ivoks> or you are talking about embedded perl?