[02:17] <soy_el_pulpo> hi, any idean when openfire 3.8.2 will be available in the repos? thanks
[02:18] <sarnold> soy_el_pulpo: it might be a while, I don't see it in debian (packages.debian.org/openfire) and that's the easiest way to get it into ubuntu..
[02:20] <soy_el_pulpo> sarnold: hi, thanks. I really like the fact that is part of repos, it make keeping things updated a lot easier
[02:21] <soy_el_pulpo> have you noticed my nick is in parenthesis? do you know why?
[02:59] <sarthor> I have installed cups on ubuntu-server, printer is shared on some windows 7 machine, Printer name/model is SureMark 4610, after telling to my service via browser, "smb://<IP_ADDRESS>" for adding printer, press continue ..in the make list-->IBM--SureMark 4610 is not listed, What I have to do in here now?
[03:37] <soy_el_pulpo> !stats
[06:33] <BroUnicorn> Hello
[06:33] <BroUnicorn> I need some ssh help
[06:40] <BroUnicorn> Can anyone help me with my ubuntu server?
[06:40] <soy_el_pulpo> hi BroUnicorn
[06:40] <soy_el_pulpo> yes?
[06:41] <BroUnicorn> I keep getting a "connection refused" when trying to ssh into my server
[06:41] <BroUnicorn> I can ssh into it locally
[06:41] <BroUnicorn> but I can't from outside the local network
[06:42] <soy_el_pulpo> locally you mean from you internal lan?
[06:43] <soy_el_pulpo> and from the outside, from a machine not in the same network?
[06:44] <soy_el_pulpo> BroUnicorn: hello?
[06:44] <BroUnicorn> Yes
[06:44] <BroUnicorn> That is correct
[06:44] <soy_el_pulpo> ok
[06:44] <BroUnicorn> except I'm attempting to connect from the outside as if I'm not inside of the network
[06:44] <soy_el_pulpo> you are discussing this same topic on the #ubuntu channel
[06:45] <soy_el_pulpo> how are you trying to ssh into your server form the outside?
[06:46] <BroUnicorn> It's on a computer inside the network
[06:46] <BroUnicorn> but I'm trying to connect through the router's public ip
[06:46] <BroUnicorn> so that I can simulate connecting from a computer not in the network
[06:47] <soy_el_pulpo> which ip you are using to connect internally?
[06:47] <BroUnicorn> <IP_ADDRESS>
[06:47] <BroUnicorn> which is my server's ip
[06:47] <soy_el_pulpo> and form the outside? <IP_ADDRESS> ?
[06:47] <soy_el_pulpo> from
[06:47] <BroUnicorn> Yes
[06:48] <soy_el_pulpo> have you opened a port on your internet router?
[06:48] <BroUnicorn> Yes
[06:48] <BroUnicorn> I have attempted to
[06:48] <soy_el_pulpo> that will allow request to port 23 to go to the correct server?
[06:49] <soy_el_pulpo> it seems that it is not setup properly
[06:49] <BroUnicorn> 23
[06:49] <BroUnicorn> ?
[06:49] <BroUnicorn> I have it set to 22
[06:49] <BroUnicorn> I also have DMR on
[06:49] <BroUnicorn> could it be in my /etc/network/interfaces file?
[06:49] <soy_el_pulpo> ss22
[06:50] <soy_el_pulpo> 22, my bad
[06:50] <BroUnicorn> it being the "error"
[06:50] <soy_el_pulpo> why?
[06:51] <soy_el_pulpo> ssh is port 22
[06:51] <soy_el_pulpo> if your network works it should be fine.
[06:51] <BroUnicorn> idk
[06:51] <BroUnicorn> my internal network does
[06:51] <soy_el_pulpo> ok...
[06:51] <BroUnicorn> but I changed my port at one point
[06:51] <BroUnicorn> and decided to change it back
[06:51] <soy_el_pulpo> i tried to ssh and it gave me a time out
[06:51] <BroUnicorn> I tried to assign a static ip
[06:51] <soy_el_pulpo> port of?
[06:52] <BroUnicorn> I changed the sshd_config file back to port 22
[06:52] <soy_el_pulpo> where it was?
[06:52] <BroUnicorn> huh?
[06:53] <soy_el_pulpo> you changed from what to what?
[06:53] <soy_el_pulpo> your /etc/ssh/sshd_config
[06:54] <BroUnicorn> I changed port 22 to another number originally
[06:54] <soy_el_pulpo> if you can ssh from another machine from your network it should be fine
[06:54] <BroUnicorn> then I changed it back
[06:54] <soy_el_pulpo> ok
[06:54] <BroUnicorn> but then
[06:54] <soy_el_pulpo> ...
[06:55] <BroUnicorn> in the /etc/network/interfaces file I changed stuff
[06:55] <BroUnicorn> to try and add a static ip address
[06:55] <BroUnicorn> and I don't know if I did it correctly
[06:55] <soy_el_pulpo> did you kept a copy of the original file?
[06:56] <BroUnicorn> no I did not
[06:56] <BroUnicorn> haha
[06:56] <BroUnicorn> but
[06:56] <BroUnicorn> h/o
[06:56] <soy_el_pulpo> ?
[06:57] <BroUnicorn> I'm going to paste bin the file
[06:57] <soy_el_pulpo> ok
[06:57] <BroUnicorn> http://pastebin.com/Ugj1H0JA
[06:58] <BroUnicorn> except for gateway and name server are <IP_ADDRESS>
[06:58] <soy_el_pulpo> 2.4 is your router?
[06:58] <soy_el_pulpo> so you have already changed those 2 on your current file?
[06:58] <soy_el_pulpo> on the serve
[06:58] <soy_el_pulpo> r
[06:58] <BroUnicorn> yes, except it's now 2.1
[06:59] <BroUnicorn> yes
[06:59] <soy_el_pulpo> ok
[06:59] <soy_el_pulpo> have you restarted the network after those changes?
[06:59] <BroUnicorn> yes I did
[06:59] <soy_el_pulpo> ok
[06:59] <BroUnicorn> Is that the incorrect way to do it?
[06:59] <BroUnicorn> Or are you unsure
[06:59] <soy_el_pulpo> can you ping your router?
[07:00] <soy_el_pulpo> unsure of what?
[07:00] <soy_el_pulpo> right after restarting the network, did you restart the sshd server?
[07:00] <BroUnicorn> whether that file is correct or not
[07:00] <BroUnicorn> no
[07:00] <BroUnicorn> I don't know how to restart the sshd server
[07:00] <soy_el_pulpo> if it has the las changes you said it is fine
[07:01] <soy_el_pulpo> "/etc/init.d/ssh restart"
[07:01] <three18ti> anyway to blink the led on a drive?
[07:01] <three18ti> e.g. I want to blink /dev/sdd because it needs to be replaced.
[07:01] <three18ti> no raid.
[07:02] <soy_el_pulpo> for the network: "/etc/init.d/networking restart"
[07:03] <soy_el_pulpo> can we solve the ssh first
[07:03] <soy_el_pulpo> ?
[07:04] <BroUnicorn> Yes please
[07:04] <soy_el_pulpo> ok...
[07:04] <BroUnicorn> I restarted the network and the ssh
[07:04] <soy_el_pulpo> good...
[07:04] <BroUnicorn> ssh before the network though
[07:05] <soy_el_pulpo> network should be first, so the ssh now
[07:05] <soy_el_pulpo> do the ssh
[07:05] <soy_el_pulpo> and then ssh from anothe machine on your network
[07:06] <soy_el_pulpo> ok?
[07:07] <soy_el_pulpo> your server is connected directly to your internet router?
[07:09] <BroUnicorn> It is directly connected
[07:09] <soy_el_pulpo> ok
[07:10] <soy_el_pulpo> did you try from another machine? ssh to your server
[07:10] <soy_el_pulpo> after all we did
[07:10] <soy_el_pulpo> with this we will rule out server configuration
[07:10] <BroUnicorn> Not yet
[07:10] <soy_el_pulpo> please try
[07:10] <BroUnicorn> I have not yet
[07:10] <BroUnicorn> one second
[07:11] <soy_el_pulpo> also on the server do: netstat -atn|grep "22 "
[07:11] <soy_el_pulpo> while ssh'ing form the other machine
[07:11] <BroUnicorn> connection refused
[07:12] <BroUnicorn> or should I just ssh using the 192.168.2.XX IP address
[07:12] <BroUnicorn> I tried using my external IP
[07:12] <soy_el_pulpo> try using the internal one
[07:12] <soy_el_pulpo> then we will move to your router
[07:13] <BroUnicorn> I can ssh in locally
[07:13] <BroUnicorn> I could before though
[07:13] <BroUnicorn> I just cannot externally
[07:13] <soy_el_pulpo> do: netstat -atn|grep "22 "
[07:14] <soy_el_pulpo> paste the results please
[07:15] <soy_el_pulpo> also do: iptables -L
[07:15] <soy_el_pulpo> and paste the results
[07:15] <BroUnicorn> okay
[07:16] <soy_el_pulpo> (I am almost sure it is your internet router but I need to clear al this first)
[07:17] <soy_el_pulpo> ...
[07:17] <BroUnicorn> okay here's netstat
[07:17] <BroUnicorn> http://pastebin.com/yvVY4zPd
[07:17] <soy_el_pulpo> great
[07:18] <BroUnicorn> and here's the iptable
[07:18] <soy_el_pulpo> you see there your active internal connection, keep that command for the future
[07:18] <BroUnicorn> http://pastebin.com/4kXLFz8P
[07:19] <BroUnicorn> Sweet
[07:19] <soy_el_pulpo> good, so no fw on your server and ssh is listening to all
[07:19] <soy_el_pulpo> <IP_ADDRESS>:22 means that
[07:19] <soy_el_pulpo> ok
[07:19] <soy_el_pulpo> lets move to the router
[07:19] <soy_el_pulpo> brand and model please?
[07:20] <soy_el_pulpo> I check form here and port 22 is not open
[07:20] <BroUnicorn> okay
[07:20] <BroUnicorn> Belkin
[07:20] <BroUnicorn> model...
[07:20] <BroUnicorn> one second
[07:21] <BroUnicorn> F9K1103 v1 (01C)
[07:24] <soy_el_pulpo> i am checking the manual...
[07:24] <BroUnicorn> Thank you!
[07:24] <soy_el_pulpo> manual has nothing about port forwarding...
[07:25] <BroUnicorn> Check Virtual Servers
[07:25] <BroUnicorn> under Firewall
[07:26] <soy_el_pulpo> how you did it? check this guide: http://www.justanswer.com/mac-computers/6hj82-set-port-forwarding-belkin-f9k1103-osx-lion-serve.html
[07:27] <soy_el_pulpo> check the ip of your server
[07:27] <soy_el_pulpo> and the ports
[07:28] <soy_el_pulpo> !imagepastebin
[07:28] <BroUnicorn> Okay
[07:28] <BroUnicorn> the local ip of my server?
[07:29] <soy_el_pulpo> goto step 4
[07:29] <soy_el_pulpo> on the table
[07:29] <soy_el_pulpo> is there something already?
[07:29] <soy_el_pulpo> or it is empty?
[07:30] <soy_el_pulpo> Enable=yes
[07:30] <soy_el_pulpo> Description=Server ssh
[07:31] <soy_el_pulpo> helo?
[07:31] <BroUnicorn> There's something that I put there
[07:31] <soy_el_pulpo> !pastebin
[07:31] <soy_el_pulpo> use imagebin to show me a screenshot
[07:35] <soy_el_pulpo> ...
[07:35] <BroUnicorn> http://imagebin.org/259899
[07:36] <soy_el_pulpo> got it
[07:36] <soy_el_pulpo> inbound is wrong...
[07:37] <soy_el_pulpo> remove it..
[07:37] <soy_el_pulpo> and put "kronos ssh" on the description
[07:37] <soy_el_pulpo> will help in the future
[07:37] <BroUnicorn> Okay I removed it
[07:37] <soy_el_pulpo> save
[07:37] <BroUnicorn> Nvm
[07:37] <soy_el_pulpo> it
[07:37] <BroUnicorn> won't let me
[07:37] <BroUnicorn> Gave me an error
[07:38] <soy_el_pulpo> ok.. it says somethins that needs to be in between 1 and 6xxxxx?
[07:38] <BroUnicorn> No 1.The number in port entry box should be between 1 - 65535.
[07:38] <BroUnicorn> Yes
[07:38] <BroUnicorn> it does
[07:39] <soy_el_pulpo> put those numbers: 1-6xxxx
[07:39] <soy_el_pulpo> i do not remember the last number...
[07:40] <BroUnicorn> wait, put what?
[07:40] <soy_el_pulpo> inbound: "1-65000"
[07:40] <soy_el_pulpo> that means all incoming..
[07:42] <BroUnicorn> Okay I applied it
[07:42] <soy_el_pulpo> ok...
[07:43] <soy_el_pulpo> it did not ask to restart the router?
[07:44] <BroUnicorn> Nope!
[07:44] <BroUnicorn> Connection refused again though
[07:46] <soy_el_pulpo> that is correct..
[07:46] <soy_el_pulpo> bad but correct..
[07:46] <BroUnicorn> hmm
[07:48] <soy_el_pulpo> hold on
[07:49] <BroUnicorn> okay
[07:49] <soy_el_pulpo> can you send me the full screen capture of that page?
[07:49] <BroUnicorn> Of the router page?
[07:50] <soy_el_pulpo> yes please
[07:52] <BroUnicorn> http://imagebin.org/259900
[07:54] <soy_el_pulpo> can you click on more info?
[07:55] <BroUnicorn> It brought up a very large page
[07:55] <soy_el_pulpo> external link?
[07:55] <soy_el_pulpo> or from your router?
[07:57] <BroUnicorn> From my router
[07:57] <soy_el_pulpo> mmm does it say anything about incoming ports?
[07:57] <soy_el_pulpo> check your external ip: http://www.whatismyip.com/
[07:59] <soy_el_pulpo> if the ip still correct, my worst feeling is that your provider is blocking the access
[08:00] <soy_el_pulpo> also, may check if the firmware is upto date...
[08:00] <soy_el_pulpo> if not patch it and try again
[08:00] <soy_el_pulpo> but so far everything is right
[08:00] <BroUnicorn> okay well thanks anywayts
[08:00] <soy_el_pulpo> what the page syas?
[08:01] <soy_el_pulpo> said?
[08:01] <soy_el_pulpo> your ip still correct?
[08:02] <soy_el_pulpo> <IP_ADDRESS>?
[08:03] <soy_el_pulpo> is it?
[10:23] <RoyK> uh... umounting this xfs filesystem and running a check, xfs_check tells me it's still mounted?!?
[10:24] <ndee> I'm using htop to monitor my db-server. The server has 32GB RAM and is a dedicated db-server. 19.7G is used by mysql and that's about the main usage. http://screencast.com/t/1P6vu5wnom3 <-- that's a screenshot of the complete htop tree. What I don't understand is, why does the server still swap 189MB?
[10:24] <RoyK> linux starts swapping out garbage early
[10:25] <RoyK> better use the RAM for something useful than keeping stuff not in use in memory
[10:25] <RoyK> you can tune this with the vm.swappiness sysctl setting
[10:26] <RoyK> default is 60 (0-100). setting it to 1 or something will make linux only start swapping out when it really have to, but the default setting is probably good
[10:26] <ndee> RoyK, I just saw that most of it is mysql which uses the swap but that's not something I should worry about then?
[10:28] <RoyK> ndee: I don't think you can see what's using the swap
[10:28] <RoyK> iirc linux will normally swap out pages that hasn't been referenced much
[11:15] <sarthor> HI, CUPs intalled, but I am unable to add Epson LX-300 Dotmatrix printer to my ubuntu-server machine, Printer is shared on some Win7 Machine, and I can access via other ubuntu-Desktop machine, working fine.  Help please.
[11:20] <sarthor>  "Session setup failed: NT_STATUS_LOGON_FAILURE" where can I write login/password for the shared printer using cups?
[11:31] <RoyK> sarthor: dot matrix printer?!? like the ones we used in the eightees? ;)
[11:32] <RoyK> sarthor: anyway - sounds to me like a cups or samba issue - not sure
[11:33] <sarthor> RoyK: Yes. Why in Eightees.. its In now a days for multiple copies.
[11:34] <sarthor> this is the righ way for inter the url for the smb printer..   smb://[username:password@][workgroup/]server[:port]/printer
[11:40] <RoyK> looks right
[13:34] <maxagaz> hi
[13:35] <maxagaz> how do I have more and more "/usr/sbin/apache2 -k start" in my pa aux listing with the time ?
[13:36] <maxagaz> when I have too much it seems my websites get slower, and at some point I need to restart apache
[13:53] <Hans11> Want to export a ssl certificate to another server but it is not valid
[14:07] <rotten777> I'm having an issue creating a local repo... I've run the apt-mirror command and it downloaded the 95gb+ to the local drive, but it seems like parts of the mirror are missing when running `apt-get update`
[14:07] <rotten777> any help?
[14:07] <rotten777> I'm not sure if my entry in sources.list is bad or that the apt-mirror command needs some more parameters added
[14:08] <Hans11> Somebody experience with certificates and Nginx, need to convert it from another server
[15:33] <WouterNLD> Hi guys, I´m looking for an OS that can server as a home media NAS. It should be able to handle ZFS fylesystem, samba shares and should work with popular plugins such as Sickbeard/Transmission/Couchpotato. Am i in the right place?
[15:34]  * ball wonders what plug-ins are.
[15:34] <WouterNLD> Ah, it´s the dumbed down way of saying software :)
[15:35] <ball> WouterNLD: I'm about to build something along those lines myself.
[15:35] <ball> Tried to buy a case for it yesterday but the local computer shop was out of stock.
[15:35] <WouterNLD> Heres the deal, I used to be on OpenMediaVault NAS software, wich was based on linux and was fine. I used to have 2 disks and that was all good. Mirror raid > no problemo.
[15:35] <WouterNLD> I have a HP Microserver N40L with 8gb ram
[15:36] <WouterNLD> It does however not come with a hardware raid controller, so i´m stuck to software raid
[15:36] <ball> People seem to like the N40L.
[15:36] <WouterNLD> Yea it´s a neat little thing, and i got it really cheaply
[15:36] <ball> WouterNLD: Not having hardware RAID isn't much of a limitation.
[15:36] <ball> ...I know some people actually prefer it.
[15:36] <WouterNLD> i´ve upgraded the box to 4 disks. While mdadm is fine for 2 disks, it´s too processor intensive for a little 1.4 dual core AMD NEO processor
[15:37] <WouterNLD> And with the lack of battery pack of the box, Raid-5 is suicide
[15:37] <WouterNLD> So i decided to go with ZFS
[15:37] <ball> Shouldn't be processor intensive if you're doing RAID 1+0
[15:38] <WouterNLD> True however I think ZFS is secure enough and gives me more space
[15:38] <WouterNLD> Well, seeing as OMV doesn´t support zfs, i went to FreeNAS
[15:38] <WouterNLD> and to be honest,
[15:38] <WouterNLD> FreeBSD is a pain in the ass
[15:39] <WouterNLD> *mind the language*
[15:39] <WouterNLD> It´s nice as a basic nas with zfs, but as a media server is is simply horrific
[15:40] <WouterNLD> So i thought, why not ubuntu server. I like ubuntu, i like linux much better then freebsd, it´s easier, zfs is availble, i´m sure i can install some of the media software fairly easily because it´s around for the desktop version aswell
[15:40] <arrrghhh> zfs is available on Linux?
[15:40] <ball> WouterNLD: Ah, I have no idea about Ubuntu Server.  I was planning to use OpenIndiana.
[15:41] <arrrghhh> https://wiki.ubuntu.com/ZFS
[15:41] <arrrghhh> not sure I'd want to use ZFS in that state... just me.
[15:41] <WouterNLD> Yes i read https://wiki.ubuntu.com/ZFS, i don´t really see the downside?
[15:42] <arrrghhh> WouterNLD, it's not availalbe in Linux.  You have to use it as a FUSE module
[15:42] <arrrghhh> I guess you can add a kernel module... still would concern me that a file system is not natively supported.
[15:43] <WouterNLD> There is a native kernel module..?
[15:43] <arrrghhh> did you read that page?  lol
[15:43] <WouterNLD> What is the downside of a fuse module?
[15:43] <arrrghhh> it's not part of the OS
[15:43] <WouterNLD> arrrghhh, yes i did, lol -.-
[15:43] <arrrghhh> I used to access NTFS thru the FUSE module, was turrible.
[15:43] <WouterNLD> oo i remember using that
[15:43] <WouterNLD> yea that ain
[15:43] <WouterNLD> ´t good
[15:44] <arrrghhh> granted NTFS is also turrible
[15:44] <ball> Is mdadm the Linux software RAID thing?  I imagine that could do RAID 1+0 without too much CPU overhead.
[15:44] <arrrghhh> yes mdadm is the linux software raid doohickey
[15:44] <ball> Thanks.
[15:44] <tohuw> How can I output a description/visualization of my entire OpenLDAP tree, recursively?
[15:44] <tohuw> (Specifically, all DNs and objectClasses)
[15:45] <arrrghhh> WouterNLD, I would just be cautious about using ZFS.  It's a great concept, but until it's "part of" Linux, I wouldn't trust it with my critical data.
[15:45] <arrrghhh> tohuw, I know the CTO of OpenLDAP, but no clue how to use it xD  sorry
[15:45] <ball> Or you could run it on an OS that it /is/ part of.  ...just saying.
[15:45] <arrrghhh> trying to think if there's a better channel for that...
[15:45] <soy_el_pulpo> like REISER, he went crazy and now is in jail
[15:46] <soy_el_pulpo> real jail, not CHROOT one
[15:46] <arrrghhh> ReiserFS is promising
[15:46] <arrrghhh> Brtfs or whatever
[15:46] <arrrghhh> but yea the dev went nuts and murdered his wife
[15:46] <WouterNLD> Maybe what i´ll do is.. I have a 4 disk zfs pool and a 1 disk backup pool. I´ll run the 4 disks in zfs for linux and back it up to a 1 disk seperate disk (non raid)
[15:46] <tohuw> ReiserFS != Brtfs
[15:46] <soy_el_pulpo> he will kill his FS anytime!!!
[15:46] <soy_el_pulpo> with our files too
[15:47] <soy_el_pulpo> hi all btw
[15:47] <arrrghhh> tohuw, oh I thought brtfs came out of reiser?
[15:47] <arrrghhh> Btrfs also has "a number of the same design ideas that reiser3/4 had".
[15:49] <tohuw> No, not really. Chris Mason is the principal on btrfs, and while some inspiration from ReiserFS was taken, it bears little real resemblance. ReiserFS is effectively dead and not recommended.
[15:49] <arrrghhh> yes
[15:49] <arrrghhh> I realize this... lol
[15:49] <arrrghhh> I just thought some crap from btrfs was borne out of ideas used in ReiserFS... that's all.
[15:51] <WouterNLD> thanks for the input guys, off to a bbq :)
[15:51] <arrrghhh> n
[15:51] <arrrghhh> p
[15:52] <arrrghhh> wow.  so this is kinda OT, but related to what we were talking about... Reiser's wife was a mail-order bride bwhahaha
[15:52] <arrrghhh> I did not know it was a Russian mail-order bride...
[17:02] <RoyK> anyone that knows a decent SATA HBA that actually works? I have this old LSI 1068 controller, but my mobo won't detect it in the 16x pci-e bus. I just need something that works - no need for hw raid
[17:33] <qman__> RoyK, I have two of these in my file server: http://www.newegg.com/Product/Product.aspx?Item=N82E16816118112
[17:33] <qman__> the brackets are backwards though
[17:33] <RoyK> any idea if those will work in a standard desktop mobo's 16x slot?
[17:33] <qman__> wait, actually that one has the right bracket
[17:34] <qman__> I got mine from a different site with the wrong bracket
[17:34] <qman__> I'm using them in a gigabyte AMD desktop board
[17:34] <qman__> hold on, I'll find the exact one I bought
[17:34] <RoyK> thanks
[17:36] <qman__> http://www.atacom.com/program/print_html_new.cgi?Pagecode=SEARCH_ALL&Item_code=CONB_SUPE_SA_L8&USER_ID=www&cart_id=6436767_66_188_36_22
[17:36] <qman__> I got it from there because it's cheaper, but it's the same chipset
[17:36] <qman__> it just has a non-ATX bracket on it, had to do a little hacking
[17:39] <RoyK> qman__: http://www.ebay.com/itm/LSI-SAS-9211-8i-6Gbps-8-Ports-SAS-SATA-8-Port-PCI-e-RAID-Controller-Card-/190848825358?pt=US_Server_Disk_Controllers_RAID_Cards&hash=item2c6f79f80e ?
[17:46] <RoyK> qman__: any idea why this 1068 won't get detected by my mobo? perhaps some mobos have specially crafted 16x slots for display cards only?
[17:47] <qman__> I haven't run into that, but some of them have configuration on which slots to provide the lanes
[17:47] <qman__> many boards will have 2 or more x16 slot and be in a 16/4 or 8/8 configuration, and it may be manually configurable or autodetected
[17:48] <RoyK> this one only has one 16x slot
[17:48] <RoyK> card isn't even detected by bios
[17:48] <RoyK> seen posts about this issue other places on the net
[17:48] <qman__> hmm
[17:49] <qman__> maybe the card is 2.0 or 3.0 and not back compatible, the board is an older version?
[17:49] <qman__> the main difference between the versions is bandwidth
[17:50] <RoyK> mobo is pci-ex 1.0, I think, so is the hba
[17:51] <qman__> does the board have all the lanes?
[17:52] <RoyK> iirc the 1068 is 8 lanes
[17:53] <RoyK> I've used those rather a bit on some opensolaris servers
[17:53] <qman__> ok
[17:53] <qman__> I haven't seen any boards that will go less than 8 on the only x16 slot
[17:53] <RoyK> but then, on mobos with 8-lane slots
[17:54] <RoyK> the 16x slot works with a 2-lane card, though
[18:12] <nicekiwi_> hey, somethings happend to my VPS. I cant acces it anymore. And I have no idea why not.
[18:12] <sw> hi. how can I restore all the /etc/pam.d/common-* config files to their defaults?
[18:12] <arrrghhh> nicekiwi_, contact your provider?
[18:12] <nicekiwi_> Ubuntu 12.04 64bit, apache is runing wihtout issues, but I cant ping it or SSH into it anymore
[18:12] <sw> nicekiwi_: your best option is probably contacting your host, rather than wasting hours trying to figure out what's going on
[18:13] <arrrghhh> that's why you pay for it, right?  :P
[18:13] <nicekiwi_> unless its something I did?
[18:13] <sw> or, can someone paste them?
[18:14] <arrrghhh> sw, I don't think I've changed mine...
[18:14] <sw> arrrghhh: oh, could you maybe pastebin?
[18:14] <arrrghhh> nicekiwi_, we don't know what you've done :D
[18:14] <arrrghhh> sw, I will 1 sec
[18:14] <sw> -auth, -account, -password?
[18:15] <sw> nicekiwi_: what did you last do before things broke?
[18:16] <arrrghhh> sw, http://pastebin.com/FJg9MAEH
[18:16] <nicekiwi_> sw: disabled ufw and added a entry to my hosts file.
[18:17] <arrrghhh> sw, http://pastebin.com/qBuaxH2E
[18:17] <arrrghhh> sw, last one http://pastebin.com/AswW7BCU
[18:20] <Beltechs> o/
[18:20] <jacksonka> I am Running Ubuntu 12.04 on HPM110g6 on static ip address assigned by provider.  I would like to install Jabber2 starttls on port 5222 with MYSQL database.  Has anyone done something like this before?  Steps I have completed. 1) sudo apt-get install jabberd2 2)  ?
[18:21] <Beltechs> hello how long will S12.04 be supported?
[18:21] <arrrghhh> Beltechs, for a full matrix see here
[18:21] <arrrghhh> https://wiki.ubuntu.com/Releases
[18:22] <sw> arrrghhh: thanks! think you had some samba parts in there, I removed them and it seems to be working now *wipes forehead*
[18:22] <arrrghhh> server edition of 12.04 is April 2017
[18:22] <arrrghhh> sw, np ;)
[18:24] <Beltechs> so about 4 years left...
[18:25] <Beltechs> what a nightmare I just getting the hang of this and its time to switch up again.
[18:30] <jacksonka> I would like to see the Jabber2 info updated for the common deployment Jabberd2, MYSQL, require STARTLS,  jabber.mydomain.com ,port 5222 without register enable.  This setup should be in the guide for the SMB or SME market.
[18:33] <andol> jacksonka: Out of curiosity, what basis do you have for that being the common dployment?
[18:36] <jacksonka> Well, I think that a script to deploy this that would ask the questions and you provide the answers would make deployment straight forward.  Standard  deployment scenarios such as the one I just mentioned helps small business deploy world class solutions cost effectively.   Ubuntu did a great job with mail ie postfix-dovecot for example.
[18:37] <jacksonka> The postfix-dovecot package is the gold standard although manual installation is also possible.
[18:38] <jacksonka> This is was Ubuntu is all about.  sudo apt-get install bang!
[18:39] <andol> jacksonka: I don't doubt the benefit of such a thing, was mostly curious about the specifics, for example why a MySQL backend would be more common/better than say a sqlite, especially for the smaller setups you seem to be refering to.
[18:39] <jacksonka> Except crypto laws limit deployment efforts from providers
[18:41] <jacksonka> Here is the reason.  When an SMB runs Accounting, Sales, Inventory, CRM, etc on Mysql then having other services on the same db reduces learning curve and makes SQL reporting thru MYSQL beautiful.
[18:41] <jacksonka> Its all about solution topology.
[18:42] <jacksonka> So, SugarCRM, MYSQL, Postfix MYSQL, Jabberd2 Mysql, Drupal or news MYSQL etc.
[18:44] <jacksonka> When generating reports the sql programmer can access the MYSQL databases all collectively and generate a report on a resource such as an employee.  If I want a performance report on an employee I can create a query report to access ALL databases for that employees activities for the day.
[18:47] <jacksonka> By the way it doesn't have to be MYSQL but could be Oracle or sqlite or other db but most programs work well with MYSQL.
[18:48] <jacksonka> If you want to do statistics, sales forecasting, or similar analysis this is quite valuable.
[18:49] <jacksonka> They did a great job with mail I just thought in other services as well the guide could be improved.  Just a humble suggestion.
[18:51] <andol> jacksonka: Again, not arguing the main point, was mostly curious about that detail.
[18:52] <andol> Guess the main problem is finding that Someone motivated enough to do the actual legwork.
[18:54] <jacksonka> Ok detail.  MySQL has loadable storage engines, SSL on port 3306, high scalability, large records and table capability.
[18:57] <jacksonka> MySQL is already the defacto standard of the open source DB industry.  Would it not be sensible to take full advantage of this by providing MySQL and of course starttls in almost all the apps in the server guide.
[18:58] <RoyK> jacksonka: no, it's not. mysql is a lousy dbms compared to postgresql
[18:59] <jacksonka> I agree PostgreSql is more flamboyant but few company's standardize on it.  Facebook uses MYSQL MEMCACHE.
[19:00] <RoyK> I don't care what facebook uses
[19:00] <jacksonka> Alternatively, if the guide provided both MYSQL and POSTGRES scripts or options over starttls or ssl then presto.
[19:02] <jacksonka> For example, the guide provides lan and berkeley db install instructions yet today workers work at home and telecomute.  Oh, mobile is also very important.
[19:04] <jacksonka> If you deploy ssl or secure tunneling then public infrastructure can be used and workers would be free to engage clients and associates and more ergonomic, flexible and productive was.  This conserves office space.  Another plus!
[19:06] <jacksonka> This open computing idea synergizes well with Ubuntu Server, Desktop, Tablet, large screen tv and obviously Ubuntu phone.
[19:07] <jacksonka> I love the Ubuntu concept and would like to see it grow.
[19:10] <jacksonka> Anyway I will be attempting to manually install Jabberd2, MYSQL, STARTTLS port 5222 with no registry enabled.  Pre-registry by admin would be required in the DB.
[19:10] <jacksonka> I fill you guys in on my success or failure.
[21:01] <arrrghhh> hey all.  I'm trying to get my server, which is running OpenVPN as a client, to split traffic...
[21:01] <arrrghhh> as I can ssh just fine when the OpenVPN client is not running... but when the tunnel is up, I can't ssh from other remote locations
[21:14] <cppCzar> Hello
[21:18] <cppCzar> I need help with my server.
[21:18] <cppCzar> I cannot ssh to it through my router's external ip address, meaning that I cannot connect to it without a local connection
[21:19] <habr100> A music messaging session has been requested. Please click the MM icon to accept.
[21:19] <habr100> c:D
[21:21] <RoyK> cppCzar: if you can connect to it over the LAN, it's a problem with the router config
[21:21] <jacksonka> Only way is go to server with monitor and use password auth
[21:22] <cppCzar> use password auth?
[21:22] <cppCzar> for?
[21:22] <cppCzar> and okay RoyK
[21:22] <jacksonka> But, then you can enable ssh for both cert and pam etc for options
[21:22] <cppCzar> RoyK: Do I need to have a static ip address? and jacksonka what are vert and pam?
[21:23] <jacksonka> I use Elliptic Curve DSA encryption for ssh authentication.
[21:24] <jacksonka> Elliptic Curve DSA 521 is military grade encryption approved by the United States government for top secret classification e docs.
[21:24] <jacksonka> Cert is certificate authentication so you don't have to use a password to log in.
[21:25] <jacksonka> Ubuntu currently recommends ECDSA certificate authentication for Ubuntu Servers.
[21:25] <jacksonka> Use Openssh and google to find sesson on ECDSA521
[21:26] <cppCzar> Okay! Could you help me to set that up (once I get it connectable worldwide)?
[21:26] <jacksonka> Yes you just need the script which you can get of the net.
[21:26] <jacksonka> It is very fast
[21:26] <cppCzar> Sounds great. But I'm still having trouble figuring this problem out
[21:27] <jacksonka> I don't remember the exact procedure but it is easy to find on the net.
[21:27] <jacksonka> You must go to the server with a monitor and cable and log in through localhost
[21:28] <cppCzar> I can ssh in locally
[21:28] <jacksonka> You must be physically at the server.
[21:28] <cppCzar> but I'm also physically at the server
[21:28] <jacksonka> oh
[21:28] <cppCzar> I'm logged onto the server
[21:28] <jacksonka> good
[21:28] <jacksonka> Ok I will find session for you on net.  One minute
[21:29] <jacksonka> First,  sudo vim /etc/ssh/sshd_config
[21:30] <jacksonka> This is the daemon configuration file.
[21:30] <cppCzar> okay
[21:30] <jacksonka> Be careful.
[21:30] <jacksonka> Here you can use alt ports
[21:30] <jacksonka> Instead of port 22 you can use port 2222
[21:30] <jacksonka> or any other to improve security.
[21:31] <cppCzar> Okay
[21:31] <cppCzar> cool
[21:31] <cppCzar> I have it at 22
[21:31] <jacksonka> So if you want standard port leave it at 22
[21:31] <cppCzar> I had changed it to something else last night
[21:32] <jacksonka> But everyone knows it is 22
[21:32] <cppCzar> but I changed it back because I couldn't ssh into the server over internet outside of local
[21:32] <cppCzar> then I'll change it again
[21:32] <jacksonka> OK sudo apt-get install nmap
[21:33] <cppCzar> on my server?
[21:33] <jacksonka> very important
[21:33] <jacksonka> yes
[21:33] <jacksonka> or on your pc client laptop or server
[21:33] <cppCzar> Cool, that's the port searcher correct?
[21:33] <jacksonka> yes
[21:33] <jacksonka> It will tell you whether the port is listening.
[21:34] <cppCzar> hmm
[21:34] <cppCzar> I'm getting errors
[21:34] <jacksonka> after install then nmap mydomain.com
[21:34] <jacksonka> what is the error
[21:34] <cppCzar> a bunch of lines saying "Failed to fetch http://"...
[21:35] <cppCzar> with different websites
[21:35] <jacksonka> absolutely
[21:35] <jacksonka> because you are not on the internet
[21:35] <cppCzar> but I managed to install openssh
[21:35] <cppCzar> O.o
[21:35] <jacksonka> you need to reboot dsl or cable modem or other ip access
[21:35] <cppCzar> how do I reboot dsl?
[21:36] <cppCzar> and should I just turn off my modem and router and turn them back on?
[21:36] <cppCzar> Or do I need to reboot something in command line?
[21:36] <jacksonka> yes
[21:36] <jacksonka> hard
[21:36] <jacksonka> hardware
[21:36] <cppCzar> okay
[21:36] <jacksonka> then wait
[21:36] <jacksonka> and pray
[21:36] <jacksonka> shut down everything gracefully if you can.
[21:39] <cppCzar_> Hey
[21:39] <cppCzar_> I'm back now
[21:40] <jacksonka> k
[21:40] <cppCzar_> I restarted it
[21:40] <cppCzar_> I have an important question though
[21:40] <cppCzar_> I have a wireless card on my server
[21:40] <jacksonka> ping a public domain
[21:40] <cppCzar_> and in the installation I have no idea if it installed using the wireless or the lan
[21:40] <cppCzar_> it being the server
[21:41] <jacksonka> Never use wireless on a server
[21:41] <jacksonka> ALWAYS USE TOP QUALITY ETHER CABLES CONNECT DIRECTLY TO YOUR UBUNTU SERVER.
[21:41] <cppCzar_> Right
[21:41] <cppCzar_> so I want to change that
[21:41] <cppCzar_> and disable it from command line
[21:41] <cppCzar_> :O
[21:41] <jacksonka> NO DOUBT
[21:42] <cppCzar_> Can you help me do that?
[21:42] <jacksonka> FIRST ORDER OF BUSINESS SB TO hardwire your box to your router
[21:42] <cppCzar_> I have it locally connected
[21:43] <jacksonka> Do you have a ether cable going from your server to your router
[21:43] <cppCzar_> I had it locally connected when I installed it, but I also had the wireless card inserted and on
[21:43] <cppCzar_> Yes
[21:43] <jacksonka> turn of the wireless card
[21:43] <jacksonka> you do not need it
[21:43] <cppCzar_> Okay, but how?
[21:44] <cppCzar_> Do I just need to completely take it out of the computer?
[21:44] <jacksonka> I s your machine an actual server or just a desktop?
[21:44] <cppCzar_> desktop
[21:44] <jacksonka> That is the problem.  Servers don't come with wireless garbo
[21:44] <cppCzar_> ^.^
[21:44] <cppCzar_> lol
[21:45] <jacksonka> Ok, but you can still improvise server services
[21:45] <cppCzar_> Okay, so do I need to completely remove it from the desktop, or is there a way to disable wireless from CLI?
[21:45] <jacksonka> Completely remove the wireless card from the server.
[21:46] <jacksonka> Unless your internet service is wireless.
[21:46] <cppCzar_> Okay
[21:46] <jacksonka> Your service sb from dsl or cable modem with a static ip address for server class operations.
[21:46] <cppCzar_> sb?*
[21:46] <cppCzar_> What is sb?
[21:46] <jacksonka> should be
[21:47] <cppCzar_> Okay, how can I make sure it has a static ip address?
[21:47] <cppCzar_> I will begin removing the wireless card
[21:47] <jacksonka> It should cost more from your provider and they should have given you a fixed ip if you requested one.
[21:47] <jacksonka> Mine is $10 a month.
[21:48] <cppCzar_> Ah, I haven't requested one
[21:48] <jacksonka> No free lunches.  This is real world class internet services bud.
[21:49] <jacksonka> If your are on dynamic stop right here and get a fixed ip.  I will help you with everything else.  Where are you from ccpCzar
[21:49] <cppCzar_> United states
[21:50] <cppCzar_> How do I get a fixed ip?
[21:50] <cppCzar_> I assume I have to contact my isp
[21:50] <jacksonka> yep
[21:50] <cppCzar_> Do I just call and ask? haha
[21:51] <jacksonka> You want IPV4 with four octets something like <IP_ADDRESS>
[21:51] <cppCzar_> And they won't give the server a static IP, but they'll give the router a static ip right?
[21:51] <cppCzar_> well when I look at my Network setting under TCP/IP
[21:51] <jacksonka> No they usually give you two one for the router and one for the server
[21:51] <cppCzar_> I have an IPV4 address
[21:52] <jacksonka> fixed?
[21:52] <cppCzar_> on my laptop, not the server
[21:52] <cppCzar_> What do you mean?
[21:52] <jacksonka> no you want to configure the server for the fixed ip not the laptop
[21:52] <jacksonka> sudo vim /etc/network/interfaces
[21:52] <cppCzar_> I know, but I don't know how since it's only command line
[21:53] <cppCzar_> I'm not sure if it's right though
[21:53] <jacksonka> The router provides DHCP Dynamic Host Controller Program services for ip leases.
[21:53] <cppCzar_> because it's like, <IP_ADDRESS>
[21:54] <cppCzar_> Okay, so what does that mean?
[21:54] <jacksonka> What is your public fixed ip address given from your ip provider?
[21:54] <jacksonka> Not 192.168......
[21:55] <jacksonka> Fixed public ip
[21:55] <cppCzar_> I'm not sure
[21:55] <cppCzar_> how do I find out
[21:55] <jacksonka> Call your ip service provided to ensure they gave you one or ask them to.
[21:55] <cppCzar_> Oh this is the 10$ a month thing?
[21:55] <jacksonka> yes
[21:56] <jacksonka> bottom line
[21:56] <cppCzar_> So just because we have internet doesn't mean we have a public fixed ip address
[21:56] <jacksonka> correct
[21:56] <cppCzar_> Alright. Do I just ask for a public fixed ip address?
[21:56] <jacksonka> yes
[21:57] <jacksonka> Make sure it is ip4
[21:57] <jacksonka> ipv4
[21:57] <cppCzar_> okay
[21:57] <cppCzar_> well I guess I'll come back when I do that
[21:57] <cppCzar_> haha
[21:57] <cppCzar_> thank you
[21:57] <jacksonka> k
[21:57] <jacksonka> bye
[21:59] <tohuw> Can someone assist me in understanding why apparently none of the entries in this LDIF load? http://pastebin.ca/2387803 contains the LDIF. The ldapadd syntax and error messages are at http://pastebin.ca/2387804. This is a freshly installed slapd from the provided package for Ubuntu 12.04.
[22:08] <enraged> I failed to enter my LVM decryption phrase in time and I was presented with an initramfs tool called BusyBox. Could anyone help me with, A, shutting down the computer from this terminal, and B, reinitiating the LVM decryption process without restarting my machine?
[22:33] <arrrghhh> hey all.  I'm trying to get my server, which is running OpenVPN as a client, to split traffic...
[22:33] <arrrghhh> as I can ssh just fine when the OpenVPN client is not running... but when the tunnel is up, I can't ssh from other remote locations
[22:48] <VSpike> Is open vpn adding a default route via the tunnel?
[22:49] <arrrghhh> VSpike, yes.  It appears to add a route for it, and put a metric of 100 on my "normal" default route
[22:49] <arrrghhh> this is fine, I would prefer it to tunnel by default... but there's a few services like ssh and ddclient perhaps that I would like to place "outside" of this tunnel
[22:55] <qman__> arrrghhh, do you mean incoming connections only?
[22:56] <arrrghhh> qman__, well for example... if I force dyndns.org to point to my actual IP instead of the tunnel IP
[22:56] <arrrghhh> I can 'see' the SSH connections coming in... but it never establishes a connection.
[22:56] <arrrghhh> if I tear down tun0, all is well.
[22:56] <qman__> so what's happening is, the connection comes in directly, but your default route is over the tunnel and it sends the return traffic out that way
[22:57] <qman__> if you tweak routing settings the same way you would for dual wan, it will fix that problem
[22:58] <arrrghhh> correct.  can you help me with this, or perhaps show me a guide to do this?
[22:58] <arrrghhh> I would think a separate routing table would do this, and I would mark the packets with iptables?
[22:58] <qman__> http://lartc.org/howto/lartc.rpdb.multiple-links.html
[22:59] <arrrghhh> cool
[22:59] <qman__> that's obviously the way to do it live, you'd have to add it with the appropriate additions in /etc/network/interfaces to get it on boot
[23:00] <arrrghhh> hm ok
[23:00] <arrrghhh> qman__, can I do this with a dynamic tun0 address?
[23:00] <arrrghhh> eth0 is static, but tun0 gets a new address everytime the tunnel is started
[23:00] <qman__> you could, might have to do some tricks putting it in if-up.d for that interface or something
[23:01] <arrrghhh> well the vpn is started with a init.d script
[23:02] <qman__> then you could just add it to the end of that
[23:02] <qman__> you can do something like this to get your IP in the script
[23:02] <qman__> ip a s tun0 | grep inet\  | awk {'print $2'}
[23:14] <arrrghhh> qman__, does this guide work for Ubuntu Server?
[23:14] <arrrghhh> Maybe I'm not understanding how to enter these routes (entirely possible, I am a routing n00b)
[23:14] <qman__> it's generally applicable to the linux kernel
[23:16] <arrrghhh> qman__, the first route add command is failing...
[23:16] <arrrghhh> sudo ip route add <IP_ADDRESS> dev eth0 src <IP_ADDRESS> table T1
[23:17] <qman__> that's because you're not giving it a network address
[23:17] <qman__> if you're in a class C, it should be <IP_ADDRESS>/24
[23:17] <arrrghhh> giving what a network address?
[23:17] <arrrghhh> oh
[23:17] <arrrghhh> right, I needed the mask
[23:18] <arrrghhh> hm.  I still get "Error: argument "T1" is wrong: "table" value is invalid"
[23:18] <arrrghhh> derp, remove the T
[23:19] <qman__> so basically what you're doing is telling linux to return traffic from whence it came, instead of just using the default route
[23:19] <qman__> and then configuring your default route to be over your actual preferred interface
[23:26] <enraged> I failed to enter my LVM decryption phrase in time and I was presented with an initramfs tool called BusyBox. Could anyone help me with, A, shutting down the computer from this terminal, and B, reinitiating the LVM decryption process without restarting my machine?
[23:27] <qman__> ctrl+alt+del should reboot it
[23:28] <qman__> if you've been dropped to busybox, I don't think you can go back and continue
[23:28] <qman__> I honestly don't know why they put it in there, I have yet to find any use for it at all
[23:29] <enraged> Ability to manually choose which drivers get loaded
[23:29] <enraged> Atleast, that's my understanding of it
[23:29] <enraged> But yeah, thanks for that cad, I'll give it a go next time.
[23:30] <enraged> On the reinitiating the decryption, well, it seems to start in initramfs so there must be a way
[23:30] <arrrghhh> qman__, sorry not sure what messages went thru.  do I only need to setup ths return path on the non-tunnel interface?  and does this ensure all other traffic is still tunneled..?
[23:32] <qman__> arrrghhh, it needs to be set up for each interface which has a gateway
[23:32] <qman__> so, how I'd try it
[23:33] <qman__> add the part that creates a table for the interface to the main interface's config
[23:33] <qman__> and have it select that as the default route from the beginning
[23:33] <qman__> then, in the VPN config, have it set up the second table on tun0 and then select that one as the default instead
[23:34] <arrrghhh> hm.  I wonder if I need more complicated policy rules...
[23:35] <arrrghhh> I want to make sure the tunnel is the default for everything else, except ssh
[23:35] <arrrghhh> I already removed ddclient and put it on the router
[23:38] <arrrghhh> oh well, I'll have to come back to this.  thx for the help!
[23:55] <enraged> Ok, is there a way to use a PAM module when you use keys to login via ssh instead of a password?


[06:30] <mapps> hi;)
[07:00] <AuroraAvenue> G Morning at 8am !
[07:22] <brobostigon> morning boys and girls.
[07:29] <DJones> morning
[07:34] <brobostigon> morning
[07:55] <AuroraAvenue> I doubt mark will do a post 'bout it ... but here it is : http://fossforce.com/2016/03/busy-week-ubuntubsd-freenas-9-10-released/
[07:55] <AuroraAvenue> nice cross-over
[08:17] <knightwise> hmm. running the beta for 16.04
[08:17] <knightwise> cant move the launcher to the bottom (
[08:17] <popey> have you updated to latest?
[08:17] <popey> and how are you moving it?
[08:18] <knightwise>  i was looking at the system settings
[08:18] <knightwise> just downloaded the dailt
[08:18] <knightwise> daily
[08:18] <popey> its not in system settings
[08:19] <knightwise> aha .. drag and drop also isnt an option, right ?
[08:21] <popey>  gsettings set com.canonical.Unity.Launcher launcher-position Bottom
[08:21] <popey> https://plus.google.com/u/0/+MarcoTrevisan/posts/X46usgf7gSk
[08:25] <knightwise> worked :)
[08:25] <knightwise>  FINALLY ! )
[08:25] <knightwise> After SIX years :)
[09:02] <JamesTait> Good morning all!  Happy Mon^WTuesday, and happy Smoke And Mirrors Day! 😃
[09:04] <foobarry> knightwise: i had it in 2011 ;) https://www.youtube.com/watch?v=kYH13qQZZe8
[09:05] <foobarry> although rather unofficial
[09:07] <selinuxium> Hey guys, are there any plans for a release party this time around?
[09:33]  * zmoylan-pi comtemplates entering a pcworld and installing ubuntu on as many systems as possible before getting kicked out... :-P
[09:34] <knightwise> zmoylan-pi: terrorist :p
[09:34] <zmoylan-pi> tux liberation army... :-P
[10:13] <Oli> Anybody here on 16.04 with a Nvidia 9xx having suspend issues?  Give it a go.
[10:22] <selinuxium_> http://pastebin.ubuntu.com/15550566/ Is a one line code that logs out all users other than root.
[10:23] <selinuxium_> I would like to be able to put another user in the exclude.
[10:23] <selinuxium_> I might of just worked it out...  :)
[10:24] <Oli> Yeah just change the regex to /(root|oli)/
[10:24] <selinuxium_> Yup :)
[10:25] <Oli> If performance matters, it'd be better to just use string matches (eg $1 != "root" && $1 != "oli" { ... }) but that's probably not important here.
[10:26] <Oli> Seems super unlikely... But I still can't stop myself mentioning it.
[10:30] <selinuxium_> All good, Thank you. :)
[11:32] <foobarry> just realised that boty mcboatface should actually be called DROP TABLES PORTS;
[11:32] <foobarry> and break every ship tracking website on the net
[11:33] <zmoylan-pi> great for a warship... enemies ship locks on, identifies target and... reboots...
[11:38] <zmoylan-pi> or point them at a flash enabled malware site...
[14:52] <diddledan> just sent-off a WordPress plugin to a client \o/
[15:02] <daftykins> you fiend
[15:02] <daftykins> will it be exploited tomorrow? :)
[15:12] <diddledan> probably :-p
[15:12] <Seeker`> that long?
[15:13] <daftykins> Seeker`: easter fallout ;D
[15:15]  * diddledan falls out
[15:15] <diddledan> oh dear
[15:43] <diddledan> this is interesting: http://appimage.org/
[15:44] <diddledan> single-file applications containing all dependencies in an ISO9660 image which is also executable as an ELF binary with mounts itself as a loopback ISO9660 and runs the program inside
[15:45] <Oli> It's just a shame you have to make it executable and that it's not interpreted by xdg-open
[15:46] <Oli> A .deb is more user friendly than telling new users you have to give something permission to execute (execute what? my files?!)
[15:47] <Oli> It is potentially a nice idea. Especially if you can better sandbox the app off from the rest of the system too, lock down device permissions, etc. I'm not sure if it goes that far yet but it should. Desktops are starting to lag a long way behind mobile security.
[15:47] <diddledan> Oli: why is "run this binary" less user friendly than "open your package manger, install this app (don't forget to become root), find the app in the menu and run it from there"
[15:47] <directhex> it's worse than that
[15:47] <directhex> double-click action is to try to open in gedit
[15:48] <directhex> which then crashes at the 50mb input
[15:48] <directhex> buuuuuuuut
[15:49] <directhex> i am actually very interested in this, as an ISV
[15:49] <diddledan> it's nice that you don't need to install anything, and there's no dependency-hell - I get the impression that click packages are kind of a similar idea
[15:49] <directhex> cross-distro is super interesting to me here
[15:50] <diddledan> but ubuntu has isolated clicks nicely (on the phone)
[15:50] <diddledan> yeah, that's nice
[15:50] <diddledan> if all your dependencies are internal to your package then you can run pretty much anywhere that supplies glibc
[15:51] <directhex> i have *serious* problems right now with dependencies
[15:51] <directhex> for monodevelop
[15:51] <diddledan> :-(
[15:51] <diddledan> ah
[15:51] <diddledan> yeah. suckynuts
[15:51] <directhex> so build against 12 distros, or...
[15:51] <directhex> i am curious to experiment with this
[15:51]  * diddledan interested to see what xamarin+MS ideas are going to be introduced at build
[15:52] <directhex> NDA'd!
[15:52]  * directhex keeps quiet
[15:52] <diddledan> indeed!
[15:52] <diddledan> I figured you were restrained
[15:52] <diddledan> I'll be watching the livestream
[16:23] <directhex> so, 2 issues w/ appimage
[16:23] <directhex> 1) no support at all for .net stuff (just literally deletes your downloaded packages & bails out)
[16:23] <directhex> 2) doesn't have a good solution for security - i have to bundle libssl from $old_distro
[16:24] <ali1234> does any app bundle system have a good solution to the security issues?
[16:24] <ali1234> i mean it seems like in order to fix it you'd have to not bundle all the dependencies
[16:25] <ali1234> but then you won't have a bundle
[16:31] <directhex> ali1234: basically no - but you could CI the build, if it didn't need heavy manual handholding for non-trivial arrangements
[16:31] <directhex> i didn't look into how it handles dbus
[16:32] <diddledan> yeah that's what I'm worried about with these containers-are-the-future delivery mechanisms. it requires that every ISV/project maintain their own security patching of things like libssl where that's usually handled by the distro security team once instead of being done 15bajillion times because you've installed 15bajillion apps
[16:32] <directhex> and those occasions when Gtk has broken ABI
[16:50] <awilkins> gtk breaking ABI <<<<<< Ugh, total PITA, broke MySQL Workbench
[18:17] <diddledan> widdling it down
[18:17] <diddledan> God must have left the tap running
[18:18] <daftykins> the water companies must be miffed, they've still yet to receive a forwarding address
[18:24] <diddledan> BST is weird. it's too bright
[18:25] <diddledan> winter is better for us hermits
[18:25] <daftykins> any drama from the storm in your parts? geographically that is, no oversharing please sir
[18:26] <diddledan> not that I've seen, pretty mundane in terms of damage. though I did use the toilet a lot yesterday
[18:27] <daftykins> what did the easter bunny do to you?
[18:27] <diddledan> the bunny gave me one. a big one. or two.
[18:28] <daftykins> i went to two whole shops and found none for purchase both Sunday and Monday :(
[18:28] <diddledan> :-(
[18:28] <diddledan> sainsbury's had a lot on sale here yesterday
[18:29] <diddledan> there were a lot of chavs clammouring for the cheap eggs
[18:32] <diddledan> I discovered this the other day: https://github.com/ryanoasis/nerd-fonts
[18:33] <diddledan> the hacked fonts make great replacements for the equivalent in the terminal
[18:33] <daftykins> what a delightfully judgmental and yet wholly accurate market sample ;D
[18:36] <diddledan> check these lines: https://www.dropbox.com/s/vknr38lukf6j85s/Screenshot%20from%202016-03-29%2019-34-55.png?dl=0
[18:36] <ali1234> what is the point of patching fonts? unicode replacement should handle it if you have the appropriate fonts installed
[18:37] <ali1234> what terminal emulator are you using that can actually render that without gaps?
[18:37] <diddledan> ali1234: I don't know how that works. this is simple download and apply
[18:38] <diddledan> I'm using the stock terminal that buntu provides ootb
[18:38] <diddledan> gnome terminal according to help->about
[18:38] <ali1234> so libvte
[18:41] <diddledan> I'm using the nerdfont variant of droid-sans-mono
[19:37] <diddledan> when did cyber start to mean something other than "naughty chat with bald bloke pretending to be 16year-old girl"?
[19:38] <diddledan> I'm assuming cyber security is protection either for or against said baldies?
[19:38]  * diddledan misses the 90s
[19:39] <diddledan> of course if it were the 90s we'd have to put-up with randoms yelling "BLINK182?"
[19:40] <diddledan> and "I AM THE REAL SLIM SHADY"
[19:40] <daftykins> at a minimum, perhaps
[19:41] <diddledan> and of course those other randoms that think justin timberlake is going to obviously frequent #ubuntu
[19:41] <diddledan> is he still a real person or did someone manage to debunk that myth yet?
[19:55] <ali1234> wat
[20:22] <celesteh> Hello, I think I'm having a problem with libraries/ffmpeg. I'm using python and cv2 to generate a video, but when i try to save it, the file is always 5.7kb with no content. A google search indicates that cv2 relies on ffmpeg to encode output. How can I tell if I'm missing a codec or something?
[20:29] <daftykins> i thought ffmpeg got turned into avconv in 'buntu land
[20:34] <celesteh> the project forked and ffmpeg was missing from the repos for a couple of versions, but now seems to be back
[20:35] <celesteh> avconv has no advantages, has a different syntax, and loads of projects rely on ffmpeg...
[20:39] <daftykins> ah right
[20:39] <daftykins> i never did truly understand the reason
[21:06] <celesteh> ffmpeg had an annoying lead dev. the project forked. he quit being annoying. somebdy in debian is friends of the lead dev of the fokred project. somebody at debian decoided to list ffmpeg as deprecated instead of forked, cuasing massive fud. ffmpeg sorted itself out and is now the better project and tons of people think it no longer exists
[21:26] <Azelphur> Gah, why does the NHS keep getting worse. Had my gf move in with me and she needs to see a doctor, they won't let her register as she doesn't have proof of address, despite the fact that the NHS website clearly says not having proof of ID is not grounds for refusal of treatment or registration :@
[21:31] <christel> your GP surgery?
[21:31] <Azelphur> yup
[21:31] <christel> even if she didn't live with you she should be able to see a GP when visiting
[21:31] <christel> there's a temporary resident thing if you are somewhere fore more than 24 hours and less than three months iirc
[21:31] <christel> so you can register as a temporary patient for up to that period
[21:32] <christel> and then if you stay permanently you can register with the practice permanently
[21:32] <christel> (i am sure i am not making this up, let me check)
[21:32] <Azelphur> Yea, we didn't get far, the conversation went "Hello we'd like to register" "ok IDs please" "I have ID but she only has national insurance" "We need proof of address it's practice policy" "NHS Website says you don't need ID" "We don't care it's practice policy *walks away from counter*"
[21:32] <Azelphur> that's a summary of the interaction I had, but it really didn't last long
[21:33] <christel> http://www.nhs.uk/chq/Pages/how-do-i-register-as-a-temporary-resident-with-a-gp.aspx she should be able to do that at least until such time that she gets letters/whatever to the new address
[21:33] <christel> that is madness, i would complain to the practice manager
[21:33] <Azelphur> christel: you're not, I called NHS England and they told me that I should be able to register, even with me standing at the counter with NHS England on the phone telling me I am allowed to register, they still refused us
[21:33] <popey> GP Receptionists: Awful people since 1948
[21:33] <christel> that's awful :/
[21:33] <Azelphur> yea
[21:34] <popey> So, you register, make appointment, Speak to GP
[21:34] <daftykins> where's the next nearest?
[21:34] <popey> Tell GP
[21:34] <Azelphur> yea, maybe register elsewhere
[21:34] <popey> they trump receptionists every day of the week
[21:34] <christel> i hate calling to make an appointment because of this new receptionist triaging "IS IT URGENT?" "WHAT IS IT FOR?" i am always tempted to make up some really bizarre symptoms
[21:35] <daftykins> it does seem quite personal, yeah
[21:35] <Azelphur> for the full story, here's what I send to NHS England: http://pastebin.com/dCG8DB0f
[21:35] <daftykins> glad we're not NHS :>
[21:35] <christel> jersey healthcare ftw? :)
[21:36] <daftykins> *gasp*
[21:36] <daftykins> Guernsey!
[21:36] <daftykins> Jersey is little England ;)
[21:37] <christel> Oh! Guernsey! sorry
[21:37] <christel> haha
[21:37] <Azelphur> christel: the full story is even worse, honestly I felt like I was talking to angsty teenagers rather than receptionists
[21:37] <christel> i knew it was one of them because kitten went through a phase of talking about you and your island nonstop!
[21:37] <daftykins> i'll let you off this time, christel :>
[21:37] <daftykins> christel: haha, oh that ended did it? XD
[21:38] <christel> Azelphur: that is so sad!
[21:38] <christel> daftykins: hahaha it is not quite as constant, or perhaps i have gotten better at zoning out ;)
[21:38] <Azelphur> Indeed, tempted to take it to an MP or something, Margate is a poorer area, imagine there's lots of people around here with no passport/drivers license. Lots of people with mental health issues too - they really shouldn't be doing that
[21:39] <christel> Azelphur: yeah, i don't think that's a bad idea, especially if you don't get very far with the practice manager
[21:39] <popey> "NHS rules obviously superceed practice policy"
[21:39] <popey> says who>?
[21:39] <popey> that's an assumption on your part to be fair
[21:39] <Azelphur> popey: NHS England pays for the practice to exist, NHS England made it very clear to me on the phone that I was correct
[21:40] <Azelphur> honestly the guy from NHS England was very surprised to hear they were refusing me treatment and said he would deal with it
[21:40] <popey> Hah
[21:40] <christel> true, although i suspect the wording on the NHS page where it says you wont be denied treatment if you don't have ID, etc. sort of indicates that it should apply to all NHS surgeries/centres/whateveries
[21:40] <popey> Speak to one of the doctors
[21:40] <popey> not the tool on the front desk
[21:40] <popey> she is doing what she's told
[21:40] <popey> it's like getting angry at a waiter
[21:40] <Azelphur> christel: the NHS page is actually specifically in reference to GPs
[21:40] <popey> not her fault
[21:40] <Azelphur> popey: yea I guess so, as I say will call tomorrow and try and get the practice manager to sort it out.
[21:40] <popey> the partners in the practice are the people to sort the issue
[21:41] <Azelphur> along with NHS England to see how the complaint is going
[21:41] <popey> I wouldn't burn my bridges at my local GP
[21:41] <popey> an amicable solution with a doctor would do better than swinging a sword around from NHS
[21:42] <Azelphur> yea, didn't really want nor expect to burn bridges. I can always get a different GP that said
[21:42] <Azelphur> I was honestly hoping NHS England would just call them and say "Yea...you have to accept the registration" and that would be that, but it has been drawn out.
[21:43] <christel> are you currently registered with another local GP? as in, might you have more luck with your existing GP surgery?
[21:43] <christel> (if she needs to be seen semi-urgently i mean)
[21:43] <daftykins> https://gamechangercharity.donordrive.com/index.cfm?fuseaction=donate.event&eventID=520 - Tomb Raider for PC, for $1 o0
[21:43] <Azelphur> christel: yea I am registered, I could well do, it's a bit of a mission (I moved away, it's in the next town over now)
[21:43] <christel> aha
[21:44] <Azelphur> NHS England suggested we go to a walk in, that's 30 minutes on the train though which isn't great :/
[21:44] <christel> i know it was easy to get an appointment with my inlaws GP once when i needed to see a doctor while visiting them but i don't know if that was just luck or whether it was because she called up and said "my daughter in law is visiting and needs to see a doctor"
[21:45] <christel> (incidentally they didn't ask for any proof of ID, they asked for my name and my temporary address while visiting and my dob but didn't check any of the data i gave them so i could probably have said whatever i fancied and still been seen)
[21:46] <christel> so i guess practice policy may differ wildly between surgeries
[21:46] <daftykins> sounds like it, fair point to consider the healthcare angle when abroad, i'll have to remember that
[21:47] <daftykins> who knows how us odd rock dwellers handle things
[21:48] <Azelphur> indeed


[06:17] <Kilos> helloooo africa
[11:36] <melodie> hi
[11:36] <melodie> Kilos !!!
[11:36] <melodie> I have to "see" you!
[11:36] <melodie> bonjour tout le monde
[11:36] <Kilos> hi melodie
[11:36] <Kilos> how are you?
[11:36] <melodie> Kilos you might have the so missing Burkina Faso in your lists in a near future!
[11:37] <melodie> this is what I've come to tell you
[11:37] <Kilos> oh my what is happening
[11:37] <melodie> do you have someone in your team who can translate for you?
[11:37] <melodie> from French
[11:37] <Kilos> yes but not today only tomorrow
[11:37] <melodie> well in Toulouse, one hour drive from my home, we have a 4 days Fablabs festival
[11:37] <melodie> yes, no hurry
[11:38] <melodie> you know what Fablabs are, don't you?
[11:38] <Kilos> nope
[11:38] <Kilos> i am just an irc cruiser trying to revive locos that have become inactive
[11:39] <melodie> There are places meant to unleach the people's creativity, and help each other create projects using open source tools
[11:39] <Kilos> ok
 i am just an irc cruiser trying to revive locos that have become inactive || and you can also inspire the creation of new ones, don't you?
[11:40] <Kilos> yes i try
[11:40] <melodie> Well at Ougadougou, they have created a whole building using the ancesters methods of the nubien vault
[11:40] <melodie> to make the Fablab inside
[11:40] <Kilos> cool
[11:40] <melodie> they asked money to the crowd at Kisskissbank and received over 7000 euros to make it
[11:41] <Kilos> great
[11:41] <melodie> now the initiator of the project is at the Fablabs festival in Toulouse, and one of the members of my newly created LUG in my area is a friend of his, and will bring him along in our very 1st grand opening meeting inauguration in 2 weeks !
[11:42] <melodie> and the guy who initiates this fablab is also a Linux user! \o>
[11:42] <melodie> \o/ !
[11:42] <Kilos> yay
[11:42] <melodie> so I'll tell him about your african network and ask him to reach to you and join in!
[11:42] <melodie> That's not all
[11:43] <Kilos> wonderrful ty
[11:43] <melodie> no problem my greatest pleasure :D
[11:43] <melodie> and it's not all
[11:43] <Kilos> you have been a busy lady
[11:43] <Kilos> tell more
[11:43] <melodie> it's probably very hot in your place lately?
[11:43] <Kilos> nope winter is coming fast
[11:44] <melodie> omg
[11:44] <Kilos> what?
[11:45] <Kilos> northern hemisphere is getting summer now
[11:45] <melodie> in Burkina Faso there is also a guy who I know who leads a Spirulina farm, he just returned from there (I've seen him at his home neaby mine, with his wife) and they have 46°C there now.
[11:45] <Kilos> oh my
[11:46] <melodie> I asked him how he bears it, he told me he didn't. then asked him how natives bear it, he sayd, litterally "they don't.  Just they don't know what they are dying from"
[11:46] <Kilos> 46°c is hot
[11:47] <melodie> now I see this guy who creates the fablab at Ouagadougou and his co-creators have knowledge about the Nubien vault construction method ( see http://www.lavoutenubienne.org/en ) and this is very important for all countries where it's very hot, because it's ecologic, very strong, and keeps the temperature low when it's hot, and higher when it's cold!
[11:48] <melodie> so when my friend says "they die", he talks about hundreds of people dying and the rest around are helpless :-[
[11:49] <Kilos> yes
[11:50] <melodie> this is where I can give it a hinch : I'll make them both contact each other. My friend has his spirulina farm not far from Ouagadougu, and they have to meat and work together to share their respective knowledge!
[11:50] <Kilos> that link is very slow
[11:50] <melodie> yes, it can be, it's far from you
[11:50] <Kilos> the answer to most problems is in working together
[11:51] <melodie> do you want me to send you the pdf of the Ouagadougou project by mail? Or is there someone in your organisation who you would want me to send it? (someone with more bandwidth credits)
[11:51] <melodie> Kilos and connecting the relevant people in that purpose
[11:52] <Kilos> how big is it melodie
[11:52] <melodie> you know my dear, I'm myself searching for a lasting solution to earn my living, while doing what I love, which is helping finding solutions to issues. And I am aging too, so I'd better find it fast.
[11:52] <melodie> let me check
[11:52] <melodie> it's 1,6 Mio, (1 703 466 octets)
[11:53] <melodie> 7 pages, textes and pictures
[11:53] <Kilos> what is that in megabytes
[11:53] <melodie> This is about 1.7 MB
[11:53] <melodie> almost
[11:53] <Kilos> thats fine love
[11:53] <melodie> so I send it to you by mail?
[11:53] <Kilos> you can mail it to me
[11:53] <melodie> ok I do that right away
[11:54] <Kilos> ty
[11:54] <melodie> please give me your mail address again, my mail client can't find it
[11:54] <Kilos> hehe im much older than you
[11:55] <urbanslug> haha
[11:55] <melodie> Kilos you might be, however I don't want to be stopped by age. Only society will (which in France would make me a pre-retired, which I refuse to be!)
[11:56] <Kilos> do you see it in pm melodie
[12:23] <Kilos> https://framadrop.org/r/keFdj79tAs#kEOzQwyj66NM5iC7kMKzXc1pneuTu+AlTEKAh555v8U=
[12:24] <Kilos> for the french speaking african peeps
[12:24] <Kilos> hi MarwenDo
[12:24] <MarwenDo> hi Kilos
[12:24] <MarwenDo> how are doing ?
[12:24] <Kilos> good ty and you
[12:24] <Kilos> https://framadrop.org/r/keFdj79tAs#kEOzQwyj66NM5iC7kMKzXc1pneuTu+AlTEKAh555v8U=
[12:30] <MarwenDo> i'm fine :)
[12:31] <Kilos> getting hotter by you guys now
[12:31] <Kilos> we are going into winter
[12:33] <melodie> Kilos tell them what it is : a Fablab being created in Burkina Faso, where no LUG is yet known! And the guy who is creating it is in France now, in Toulouse where there is an international Fablab Festival lasting 4 days! And this guy IS a Linux user!
[12:33] <melodie> so all you guys download that file! :D
[12:34] <melodie> and spread it around in all Africa! Yeah! \o/ !
[12:35] <Kilos> MarwenDo melodie is working to make things better for people in africa
[12:35] <MarwenDo> great :)
[12:38] <melodie> Kilos that's to say everywhere, because all have something to teach to others. Such as this Nubian Vault construction technique which is referred to in the pdf document, I've read about it before, and it's just the utmost best thing to know in any country where mud can be used for this purpose.
[12:39] <Kilos> yes
[12:39] <melodie> you can stop after the word "better". ;-)
[12:40] <melodie> "melodie is working to make things better" :D
[12:40] <Kilos> haha
[12:40] <Kilos> you have mud in france as well
[12:40] <melodie> always have
[12:40] <Kilos> hee hee
[12:40] <melodie> yes, in most places
[12:40] <melodie> some have mostly stones and rocs, so they build with stones and rocks, other places have wood, then they use wood
[12:40] <Kilos> i remember from watching old war movies
[12:41] <melodie> aha !
[12:41] <melodie> I'm still writing that mail to you
[12:41] <Kilos> no rush girl im not going anywhere
[12:45] <melodie> how do you say "inauguration" in English? Is that the same word?
[12:45] <Kilos> QA spell inauguration
[12:45] <QA> Kilos: Yup, that's a word all right
[12:46] <Kilos> hha yes same in english melodie
[12:51] <melodie> Kilos thanks my friend.
[12:51] <Kilos> anytime
[14:49] <melodie> wb MarwenDo
[14:49] <MarwenDo> hi melodie
[14:50] <melodie> :)
[14:50] <melodie> which country do you live in?
[14:51] <MarwenDo> I'm from Tunisia :D
[14:51] <MarwenDo> you ?
[14:52] <melodie> south France
[14:52] <MarwenDo> nice to meet you
[14:52] <melodie> South West that is
[14:53] <melodie> nice to meet you too
[16:29] <melodie> I'm wondering if the "no phased updates" thing that it spreading around the web as a feature actually exists and works, I have set it up on one of my machines and I'm not sure I see a difference, and in man apt.conf and in the file "/usr/share/doc/apt/examples/configure-index.gz" which is talked about in the man (man apt.conf) I don't see a clue about it? Here are the posts about phased updates:
[16:29] <melodie> http://askubuntu.com/questions/369722/update-manager-does-not-show-all-updates
[16:29] <melodie> http://www.murraytwins.com/blog/?p=127
[16:29] <melodie> someone has any idea about it?
[17:18] <Kilos> hi CraigZim
[17:18] <Kilos> hows things there
[17:26] <Kilos> melodie those links were for 13.10 i dont think that is valid anymore
[17:36] <melodie> those links where "starting from 13.10" which means we don't know if they are, or not, valid anymore. :)
[17:36] <melodie> it's possible that the docs and man were never updated either.
[17:37] <Kilos> the guys on phills channel should know
[17:42] <CraigZim> Hi Kilos sorry been busy. things here deteriorating
[17:42] <CraigZim> cash had to get
[17:42] <Kilos> everywhere lad
[17:43] <Kilos> the whole world is upside down
[17:49] <CraigZim> no cash money no notes avail money in bank
[17:49] <Kilos> oh my
[18:04] <Kilos> CraigZim how are you guys surviving
[18:07] <CraigZim> still carrying on,we always seem to find a way :)
[18:07] <Kilos> whew
[19:09] <Kilos> night africa, rest well