Postfix + Amavis + Spamassassin question

2009-11-17 Thread Andrew Hodgson
Hi,

I am trying to replace a spam appliance system here with a Ubuntu system 
running Postfix + Amavis + Spamasssassin.  I followed the guide at:

https://help.ubuntu.com/9.10/serverguide/C/mail-filtering.html

Everything went ok, though I don't see any Spamassassin in headers generated by 
the server, though I can see the Amavis Received: and X-Virus-Scanned headers.  
When I look in the mail.info log, I see the following:

Nov  16 09:27:29 mail amavis[30720]: (30720-14) Passed CLEAN, LOCAL 
[192.168.1.126] [192.168.1.126]  -> 
, Message-ID: [...], mail_id: [...], Hits: -1.895, 
size: 3125, queued_as: [...], 11083 ms

I removed my system out of the Mynetworks section in /etc/postfix/main.cf, but 
still the system seems to think the message is local?

Thanks.
Andrew.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


RE: Interface bonding

2009-06-18 Thread Andrew Hodgson
Soren Hansen wrote:

>On Thu, Jun 18, 2009 at 11:14:03AM +0100, Andrew Hodgson wrote:
>> I originally had the line:
>> post-up ifenslave bond0 eth0 eth1
>> replaced with:
>> slaves eth0 eth1
 
>> However did not get consistent operations.

>That is the recommended way to set up bonded interfaces. If it does not work 
>as intended, that's a >bug we need to fix. Can you file a bug on Launchpad 
>about your problems?

I will see if I can build up a test machine next week for this.

Thanks.
Andrew.

-- 
allpay achieved PCI DSS and ISO 27001 certification in 2008
Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88.

Telephone: 0844 225 5729, Fax: 0844 557 8350. 
Website: www.allpay.net Email: enquir...@allpay.net

This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity 
to whom it is addressed. If you have received this email in error please notify 
the allpay Information Security 
Manager at the number above.


-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


RE: Interface bonding

2009-06-18 Thread Andrew Hodgson
Hi,

I have several servers using the bond configuration on 8.04.  I found the most 
effective way to enable this was to do the modprobe configuration (though the 
URL you posted has better instructions than I did), then I make the following 
in the interfaces file:

auto bond0
iface bond0 inet static
   address 10.10.10.10
   netmask 255.255.255.0
   gateway 10.10.10.1
   post-up ifenslave bond0 eth0 eth1

I originally had the line:
post-up ifenslave bond0 eth0 eth1
replaced with:
slaves eth0 eth1 

However did not get consistent operations.

I am using mode 1 for all teams.

Thanks.
Andrew.

-Original Message-
From: ubuntu-server-boun...@lists.ubuntu.com 
[mailto:ubuntu-server-boun...@lists.ubuntu.com] On Behalf Of Serge van 
Ginderachter
Sent: 18 June 2009 10:43
To: ubuntu-server
Subject: Interface bonding

Hi all,


I have been following https://help.ubuntu.com/community/UbuntuBonding
to set up a bond of two network interfaces, and it seems to me this
documentatuoin has certain flaws.

No problem with the Module Alias Configuration. AFAIK this
configuration will already make sure that the bonding module is probed
and loaded. I then have some remarks on the interface configuration
part.

* loading and unloading the module through pre-up and post-down
statements is not necessary, as the loading already happens in de
modproe.d config, and might even be unwanted in tha case were one has
multiple bonds configured, which would (try to) unload the module
after bringing one bond down, whilst it still being in use for another
one.
* configuring the bond  (ifenslave bond0 eth1 eth2) in the (post-)up
statements didn't work for me: it seemed (post-)up happens after
configuring an ip, but at that time the bond is not configured yet,
and configuring the ip results in an error. I'm not totally sure if
this is eneral logical behaviour or if I just messed something up at
one point in my config trial and error.
* finally, this howto does not mention the by far easier method
explained in /usr/share/doc/ifenslave-2.6/README.Debian: it's just
enough to use the "slaves eth0 eth1" in the iface bond0 stanza


It might be interesting to have those remarks reviewed, to check if my
evaluation is correct.



 Met vriendelijke groet,

 Serge van Ginderachter

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

-- 
allpay achieved PCI DSS and ISO 27001 certification in 2008
Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88.

Telephone: 0844 225 5729, Fax: 0844 557 8350. 
Website: www.allpay.net Email: enquir...@allpay.net

This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity 
to whom it is addressed. If you have received this email in error please notify 
the allpay Information Security 
Manager at the number above.


-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


RE: Newbie JEOS question

2009-02-14 Thread Andrew Hodgson
Gaute Amundsen wrote:

>Hi

>We are just about to set up two virtual servers to replace one physical.
>Now running Zope, apache, haproxy, varnish, postfix, ++ on quad Xeon 3GHz 12 G 
>ram, and often struggling during peak traffic.

>We have decided to switch from rhel4 to ubuntu server, and we immediately 
>thought jeos 8.04 lts would be the thing, being optimized for VMWare and all.

>However the use of the term "virtual appliance" in the marketing materials has 
>me slightly worried. To me, that implies small simple and lightweight, which 
>these servers will most certainly not be.

I always thought (not necessarily correctly) that Jeos was for running on top 
of the virtual environments, and thus it did not contain all the required 
drivers (such as NIC, storage etc), that the server version used.  Virtual 
appliances are usually lightweight Linux builds, but that doesn't mean they 
aren't subjected to heavy loads.

Thus I would also go with Jeos if you were using a virtualization platform 
underneath that.

Thanks.
Andrew.



-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


File sharing system

2008-12-19 Thread Andrew Hodgson
Hi,

I would like to provide a way of sending work related files to other users via 
a Ubuntu 8.04 server.  The system would need the following requirements:


-  Allow accounts to be only created by designated super 
users/administrators.

-  Allow auto delete of files.

-  Allow restriction of size/file type (eg remove zip, mp3 etc).

-  Email link to user who is sending the file and to the recipient.

Anyone have any suggestions that come with Ubuntu already?

Thanks.
Andrew.
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

RE: Report: Sun Open Storage

2008-11-18 Thread Andrew Hodgson
Hi,

Maybe I am still wet behind the ears (only having around 6 years 
exposure to enterprise IT environments), but I am slightly more excited 
about this type of technology.

For me, I like to be able to choose the kit that various applications 
run on, and pick the relevant hardware for the job.  In the past, we 
looked at expensive storage systems such as EMC and NetApp arrays, 
however, was put off these because we have to purchase similar expensive 
hardware wherever we need to deploy the storage.  So, for example, we 
have a NetApp box at our main site, and have to buy the same models of 
storage at our backup or remote sites in order to gain such features as 
replication, even though ordinarily we wouldn't want to buy such an 
expensive array at the remote locations.

With virtualised storage, we would be able to deploy a high grade array 
for the backend at our main site, but use a less expensive array at the 
remote or backup site.  If the storage is managed by the same 
applications (such as Sun or Falconstor) at all the sites, then we can 
do the replication and other fancy stuff that have traditionally been 
only associated with sticking with one vender's expensive storage arrays 
throughout, causing vender lockin for the expensive parts of the system.

I would be slightly more excited about this if they could talk about 
virtualising the storage appliance itself, which is what Falconstor have 
done with the Vmware work.  I would be extatic if someone could make a 
system like this that could run in a regular operating system (eg in a 
Ubuntu or Windows server), with other applications running in the same 
session, but previous attempts to do this (eg with SanMelody) have not 
received good reviews, and I feel the current trend atm is to "vmware" 
everything, until we will be in an environment where you have 10 or more 
Vmware "appliances" in the environment, each doing a specific micro 
task, and all running a Linux kernel, so they can claim open source!


Andrew.

-Original Message-
From: Onno Benschop [mailto:[EMAIL PROTECTED] 
Sent: 18 November 2008 08:19
To: Ubuntu Server Team
Subject: Report: Sun Open Storage

Today I attended a Sun presentation called "Open Storage Systems". I
attended both for my "day-job", that is, an IT consultant, as well as
wearing my "Ubuntu Server hat". I'm not able to provide you with a
word-for-word, blow-by-blow account of my morning, nor am I wanting to
either promote or bag the presentation. The intent of my email to the
group is to report on a development that I thought might
interact/intersect or be of interest to the team.

Some disclaimers up front. I am an IT consultant, that is, I solve weird
and wonderful problems for weird and wonderful clients all around the
world, but mostly rural and remote Australia. I've been in this industry
for over 26 years, so I'm probably a lot cynical about "revolutionary"
things. I've never bought any Sun hardware, though a Sparc station did
land on my desk some years ago where I coerced it into running Debian at
the time. I've never deployed a storage system, never bought one and
until recently never needed one. If anything in what I write here is
contradicted by what Sun says, perhaps you should ask Sun before relying
on what I said.

The presentation attracted me because it was touted as an Open Source
solution and I was interested to know how Sun was dealing with this and
how this might relate to anything I was doing either as a consultant or
as a member of the server team.

The opening remarks were along the lines of "each CPU in a data centre
achieves about 15% utilisation, and each storage solution is closed,
proprietary, firmware driven hardware that requires additional licenses
and subscriptions to activate new features. Sun has a solution that is
open and will save you up to 90% in your storage deployments".

At this point I thought, cool, let's see what you got.

The release discussed the Sun Storage 7000 series which is basically a
Sun box that runs Open Solaris that offers a web-based GUI that allows
you to manage this. The drives are spread among SATA/SAS/SSD (and if I
recall correctly, SCSI as well). A big deal was made of the time that it
takes to get data off a drive and how SSD storage in between the CPU and
the drive would handle this by caching the data in smart ways. (This is
being handled by ZFS.)

The box is built using Intel and/or AMD processors - the talk was
sponsored by AMD, but I was unclear if the Intel reference was
compatibility, as in an AMD processor that is compatible, or if it was
because Intel also contributes hardware - in any case, I don't think it
matters that much - but I'm sure that there are some reading this who
are cringing at that thoughtless remark - I'm sorry, educate me please 
:)

Much was made of services that can be activated, NFS, CIFS, HTTP, FTP,
WebDAV, DNS, NTP, AntiVirus and many others.

The box is "certified" for MySQL, Oracle, Microsoft, VMware, blah, blah

RE: Tripwire Enterprise on Ubuntu

2008-10-18 Thread Andrew Hodgson
Onno Benschop wrote:

>On 17/10/08 20:53, Andrew Hodgson wrote:
>> I configured this at first, however, it cannot speak to our central 
>> enterprise Tripwire server, and so the security team are not happy.
I 
>> am still trying to argue that if we use the OS version of Tripwire,
and 
>> get emailed reports sent to us, then that will meet the requirements.
>   
>I'm not intimately familiar with tripwire, but your comment makes me
ask
>the following:

>Do you know why "it cannot speak to our central enterprise Tripwire
server"?

Due to the fact that the version packaged with Ubuntu is the open source
version, and we are using Tripwire Enterprise <http://www.tripwire.com>.
I have now had it confirmed that Tripwire Enterprise will only work on
RedHat Enterprise and Suse, so we will have to see what our security
department thinks of using the open source version, as it pretty much
does what the enterprise version does, only without the pretty GUI in
front of it, and without the consolidated reports.

The only reason we are doing this is to provide PCI (payment card
industry) compliance to our servers, as the servers we wish to convert
to Ubuntu will be taking customers credit card details (although will
not store those details).

Thanks.
Andrew.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


RE: Tripwire Enterprise on Ubuntu

2008-10-17 Thread Andrew Hodgson
Ozgur Karataswrote:

>Hello,

[...]

>[EMAIL PROTECTED]:~$ apt-cache search tripwire
>tripwire - file and directory integrity checker

I configured this at first, however, it cannot speak to our central 
enterprise Tripwire server, and so the security team are not happy.  I 
am still trying to argue that if we use the OS version of Tripwire, and 
get emailed reports sent to us, then that will meet the requirements.

Thanks.
Andrew. 

--
allpay.net Limited, Fortis et Fides, Whitestone Business Park, Whitestone, 
Hereford, HR1 3SE. 
Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88. 

Telephone: 0870 243 3434, Fax: 0870 243 6041. 
Website: www.allpay.net
Email: [EMAIL PROTECTED] 

This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity to whom it is addressed. If you 
have received this email in error please notify the allpay.net Information 
Security Manager at the number above.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


RE: Tripwire Enterprise on Ubuntu

2008-10-17 Thread Andrew Hodgson
MJang wrote:

>On Fri, 2008-10-17 at 10:47 +0100, Andrew Hodgson wrote:
>> Hi,
>> 
>> Has anyone installed Tripwire Enterprise 7.5 on Ubuntu Hardy?  The 
Linux 
>> .bin installer seems to be an RPM.  We want to upgrade some of our 
>> RedHat LAMP servers (which need to be PCI compliant) to Ubuntu to 
take 
>> advantage of later PHP builds, but without this Tripwire we may have 
to 
>> rethink.

>Have you tried converting to a .deb with the 

I first tried installing using RPM after getting the RPM package.  It 
fails:

[EMAIL PROTECTED]:~$ sudo rpm -i te_agent.rpm
error: Failed dependencies:
/bin/sh is needed by TWeagent-7.1-0.i386

Then I tried using alien:

[EMAIL PROTECTED]:~$ sudo alien --to-deb --scripts te_agent.rpm
Package build failed. Here's the log:
dh_testdir
dh_testdir
dh_testroot
dh_clean -k -d
dh_installdirs
dh_installdocs
dh_installchangelogs
find . -maxdepth 1 -mindepth 1 -not -name debian -print0 | \
xargs -0 -r -i cp -a {} debian/tweagent
dh_compress
dh_makeshlibs
dh_installdeb
dh_shlibdeps
sh: gcc: not found
dpkg-shlibdeps: warning: Couldn't determine gcc system type, falling 
back to default (native compilation)
dpkg-shlibdeps: failure: couldn't find library libdl.so.2 needed by 
debian/tweagent/usr/local/tripwire/te/agent/jre/lib/i386/client/libjsig.
so (its RPATH is '').
Note: libraries are not searched in other binary packages that do not 
have any shlibs or symbols file.
To help dpkg-shlibdeps find private libraries, you might need to set 
LD_LIBRARY_PATH.
dh_shlibdeps: command returned error code 512
make: [binary-arch] Error 1 (ignored)
dh_gencontrol
sh: gcc: not found
dpkg-gencontrol: warning: Couldn't determine gcc system type, falling 
back to default (native compilation)
dpkg-gencontrol: error: current host architecture 'amd64' does not 
appear in package's architecture list (i386)
dh_gencontrol: command returned error code 65280
make: *** [binary-arch] Error 1
find: TWeagent-7.1: No such file or directory

I could attempt to sort this out, but would probably end up with an 
unsupported configuration.  Added to this that the installer for TE is a 
.bin file, which seems to run some other program for the initial 
install, with specific parameters etc.

Thanks.
Andrew. 


--
allpay.net Limited, Fortis et Fides, Whitestone Business Park, Whitestone, 
Hereford, HR1 3SE. 
Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88. 

Telephone: 0870 243 3434, Fax: 0870 243 6041. 
Website: www.allpay.net
Email: [EMAIL PROTECTED] 

This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity to whom it is addressed. If you 
have received this email in error please notify the allpay.net Information 
Security Manager at the number above.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Tripwire Enterprise on Ubuntu

2008-10-17 Thread Andrew Hodgson
Hi,

Has anyone installed Tripwire Enterprise 7.5 on Ubuntu Hardy?  The Linux 
.bin installer seems to be an RPM.  We want to upgrade some of our 
RedHat LAMP servers (which need to be PCI compliant) to Ubuntu to take 
advantage of later PHP builds, but without this Tripwire we may have to 
rethink.

I have contacted Tripwire about this also.

Thanks.
Andrew.

--
allpay.net Limited, Fortis et Fides, Whitestone Business Park, Whitestone, 
Hereford, HR1 3SE. 
Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88. 

Telephone: 0870 243 3434, Fax: 0870 243 6041. 
Website: www.allpay.net
Email: [EMAIL PROTECTED] 

This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity to whom it is addressed. If you 
have received this email in error please notify the allpay.net Information 
Security Manager at the number above.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


RE: Ubuntu 8.10 Beta released

2008-10-02 Thread Andrew Hodgson
Hi,

Just curious about why Mailman 2.1.11 didn't make this release?  I was hoping 
to use this for hosting some mailing lists, and wanted to be using this release 
- I compiled Mailman 2.1.11 from source, and have also used the Debian package 
in testing, and had no problems.

Thanks.
Andrew.

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Langasek
Sent: 02 October 2008 21:08
To: [EMAIL PROTECTED]
Subject: Ubuntu 8.10 Beta released

The Ubuntu team is pleased to announce the beta release of Ubuntu 8.10
Desktop and Server.  Codenamed "Intrepid Ibex", 8.10 continues Ubuntu's
proud tradition of integrating the latest and greatest open source
technologies into a high-quality, easy-to-use Linux distribution.

Ubuntu 8.10 Desktop Edition delivers the features you need for an
increasingly mobile digital life, including 3G wireless support and
guest sessions that lets users temporarily share computers without
compromising security.

Ubuntu 8.10 Server consolidates its support for virtualization with an
integrated Virtual Machine builder, and brings with it a fully-supported
Java stack and support for per-user directory encryption.

The Ubuntu 8.10 family of variants, Kubuntu, Xubuntu, UbuntuStudio, and   
Mythbuntu, also reach beta status today.

Desktop features


Xorg 7.4 brings improved support for automatic configuration of input
hardware, such as keyboards and mice.

3G support: Network Manager 0.7 comes with a number of greatly anticipated
features, including management of 3G connections (GSM/CDMA) and PPP/PPPoE
connnections.

Guest sessions: the User Switcher panel applet provides a new option for
starting a Guest session.  This creates a temporary, password-less user 
account with restricted privileges - perfect for lending out your laptop for
a quick email check.

Please see http://www.ubuntu.com/testing/intrepid/beta for details.

Server features
---

Encrypted private directories: the installer now offers the option to
configure a secret encrypted folder for each user, to be unlocked and
mounted at login time, using ecryptfs.

Virtualization: Ubuntu 8.10 ships with a Virtual Machine builder that allows 
complete Virtual Machines to be built from the command line in less than
five minutes, with support for scripting custom virtual images.

Java: a complete free Java™ stack is supported in Ubuntu 8.10, including
OpenJDK and Apache Tomcat 6.0, making Ubuntu a great choice for Java
development and deployment.

Kubuntu features


Kubuntu builds on the groundwork of the Kubuntu 8.04 KDE 4 Remix to provide 
a fully-supported KDE 4 desktop in Kubuntu 8.10.

Please see https://wiki.kubuntu.org/IntrepidIbex/Beta/Kubuntu for details.

Xubuntu features


Xubuntu comes with the light-weight Xfce 4.4.2 desktop environment for those
who want a desktop that is easy to use, but places particular emphasis on
conserving system resources.  

UbuntuStudio features
-

Ubuntu Studio includes the updates to input hardware and sound device
management from Ubuntu Desktop, and includes a complete suite of tools for
generation of audio, video, and graphic content.

Mythbuntu features
--

See http://mythbuntu.org/8.10/beta for information about the Mythbuntu beta
release.

Other
-

* On the Desktop: KDE 4.1.2, GNOME 2.24, OpenOffice.org 2.4.1, X.org 7.4

* On the Server: Apache 2.2, PostgreSQL 8.3, PHP 5.2.6, LTSP 5.1

* "Under the hood": GCC 4.3.2, glibc 2.8, Linux 2.6.27, Python 2.5

The full release notes can be found at
http://www.ubuntu.com/testing/intrepid/beta

About Ubuntu


Ubuntu is a full-featured Linux distribution for desktops, laptops, and
servers, with a fast and easy installation and regular releases.  A
tightly-integrated selection of excellent applications is included, and
an incredible variety of add-on software is just a few clicks away.

Professional technical support is available from Canonical Limited and
hundreds of other companies around the world.  For more information about
support, visit http://www.ubuntu.com/support

To Get Ubuntu 8.10 Beta
---

Download Ubuntu 8.10 Beta here (choose the mirror closest to you):

  Africa:

* http://ubuntu.mirror.ac.za/ubuntu-release/8.10 (South Africa)

  Asia:

* http://ftp.daum.net/ubuntu-releases/8.10 (Korea, Republic of)
* http://ftp.tcc.edu.tw/iso/Ubuntu/8.10 (Taiwan)
* http://tw.releases.ubuntu.com/8.10 (Taiwan)

  Europe:

* http://ubuntu.mirrors.proxad.net/8.10 (France)
* http://ftp.uni-kl.de/pub/linux/ubuntu.iso/8.10 (Germany)
* http://nl.releases.ubuntu.com/releases/8.10 (Netherlands)
* http://se.releases.ubuntu.com/8.10 (Sweden)

  North America:

* http://mirror.anl.gov/pub/ubuntu-iso/CDs/8.10 (United States)
* http://mirrors.gigenet.com/ubuntu/8.10 (United States)
* http://ubuntu.cs.utah.edu/releases/8.10 (United States)

  Oceania

Re: Creating a encrypted directory during the server installation

2008-09-22 Thread Andrew Hodgson

Mathias Gug wrote:

>On Mon, Sep 22, 2008 at 05:07:59PM +0100, Andrew Hodgson wrote:
>> 
>> I doubt I would choose this for my servers - I may add it on at a
later
>> time through a command or set of commands.
>> 

>I think that the work done by Dustin is excellent, useful and worth
>advertising as much as possible. The process to set up encrypted
>directories has been streamlined a lot thanks to his work. 

Yes; I completely understand this, and definitely believe that this
feature is a real boon to the operating system and the community.

I was merely pointing out that I doubt I would use this on any of the
machines I administer, but actually thinking about your case - a file
server, or shell access server with users having encrypted parts of
their home directories, I may be tempted to set this up if I knew what
exactly was going on, rather than to just answer a yes/no question.  I
haven't seen the technology working, so can't comment on the usability,
but when faced with any question about encryption (like I was with the
option to encrypt the LVM volume), my first thoughts are to how easy the
encryption keys are to back up and restore should anything go wrong, and
what extra steps may I need to take to get it working in a streamlined
and safe way.  I would probably hit no at the first couple of times of
installation, then possibly look at it again later.  

However, I do like the idea of a tasksel option, because I can always
run that again in the future, after doing the research, and this is
where I believe it may be possible to win more people over.

Thanks.
Andrew.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


RE: Creating a encrypted directory during the server installation

2008-09-22 Thread Andrew Hodgson
Hi,

I doubt I would choose this for my servers - I may add it on at a later
time through a command or set of commands.

Andrew.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thierry
Carrez
Sent: 22 September 2008 17:04
To: ubuntu-server@lists.ubuntu.com
Subject: Re: Creating a encrypted directory during the server
installation

fenris wrote:
> for me it make sense to secure the home user directory from other user
> in the server

Note that when the user is logged in, the data is decrypted and
protected by file system permissions (700), so the goal of setting up
the encrypted directory is more to protect the data against computer
theft than against other simultaneous users of the server (and the
installer question is very clear about that).

-- 
Thierry Carrez
Ubuntu server team

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Hostname in 8.04

2008-09-18 Thread Andrew Hodgson
Hi all,

I am relatively new to Ubuntu but have used Debian.

I installed a couple of servers for use with LAMP projects.  On the 
first server I installed, when asked for the hostname, I entered in the 
FQDN of the server.

I noticed afterwards that doing hostname -f gave 
server.domain.com.domain.com, and thus when I do some package installs, 
they are thinking the FQDN is the same.  I did a new install on a 
different server, and just entered in the hostname without the domain, 
then ensured that /etc/resolv.conf was configured correctly, and now get 
the expected output.

Is this normal behaviour, and is the recommendation to have the 
/etc/hostname set to just the server name (without the domain)?

Thanks.
Andrew.

--
allpay.net Limited, Fortis et Fides, Whitestone Business Park, Whitestone, 
Hereford, HR1 3SE. 
Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88. 

Telephone: 0870 243 3434, Fax: 0870 243 6041. 
Website: www.allpay.net
Email: [EMAIL PROTECTED] 

This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity to whom it is addressed. If you 
have received this email in error please notify the allpay.net Information 
Security Manager at the number above.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


RE: Ubuntu 8.04 as LAMP machine?

2008-06-09 Thread Andrew Hodgson
Luke L wrote:

>Ubuntu gets its packages for new releases from Debian unstable.
>However, the community is large and any bugs are taken care of
>promptly, esp. on the server side.

Ok.  That is what I imagined.

>Hardy, being an LTS release, will receive regular updates and support
>for the next 5 years.

I am aware of that.

>As far as the diff between Deb and Ubuntu AMP packages, well, Ubuntu
>will have a later version. Also, Ubuntu's AMP install is very easy to
>get up and running. It is toggled at OS install time, or by running
>"tasksel" at console. Within minutes you'll have MySQL, PHP, and
>apache2 running on your server.

What is the difference between using tasksel and apt-get install apache2
php5 php5-mysql etc?

I just got up a VM on my machine at home with a standard 8.04 install,
with the LAMP option installed by the install script.  It gave me this:

Server: Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.1 with Suhosin-Patch

SO I need to check with the webdevs that the patch will work ok with our
apps, though it looks like this is going on with 5.2.4 PHP builds in
Lenny also...

What is the difference between a standard Debian network install (with
no extra packages chosen), and a default Ubuntu install with no options
in Tasksel chosen?

Andrew.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


RE: Ubuntu 8.04 as LAMP machine?

2008-06-09 Thread Andrew Hodgson
L.M.J wrote:

Sent: 09 June 2008 21:45
To: ubuntu-server@lists.ubuntu.com
Subject: Re: Ubuntu 8.04 as LAMP machine?

>Le Mon, 9 Jun 2008 20:19:08 +0100,
>"Andrew Hodgson" <[EMAIL PROTECTED]> a écrit :

>> What is the general stability of the Ubuntu packages such as Apache 
>> etc like?  I took a brief look at the server, and it seems like some 
>> of the packages are coming from Lenny?  What are the differences 
>> between the Debian and Ubuntu Apache/PHP/MySQL packages?

>  I'm running an huge intranet server under Ubuntu LAMP. I have to stay it's 
> just stable. Well, I have to admit >I haven't found any commun Linux distro 
> unstable so far...

Ok.  I will be running around 20-30 public facing websites from this box.

Thanks. 
Andrew.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Ubuntu 8.04 as LAMP machine?

2008-06-09 Thread Andrew Hodgson
Hi,

 

Posted this to Ubuntu-users to start off with, but got redirected here.

 

I am interested in deploying Ubuntu as a LAMP machine.  I have mostly in
the past used Debian machines, but some of our web developers want to
use a higher version of PHP (at least 5.2.4), and Etch comes with an
older release.

 

What is the general stability of the Ubuntu packages such as Apache etc
like?  I took a brief look at the server, and it seems like some of the
packages are coming from Lenny?  What are the differences between the
Debian and Ubuntu Apache/PHP/MySQL packages?

 

Thanks.

Andrew.

 

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam