Re: choosing desired os to boot over ssh

2012-02-11 Thread Tapas Mishra
What I am looking for is some thing like a service console similar to IDRAC
of Dell Power edge (if available for Ubuntu)
or any software where in Wake On Lan with a special key combination can
boot my desired OS.

On Sat, Feb 11, 2012 at 9:00 PM, Pandu Poluan  wrote:

> Similar to Neal, I'm scratching my head as to exactly what @Tapas wanted...
>
> The only other possibility would be to install a hypervisor (XenServer
> comes to mind) and access the VM's virtual console output using VNC or
> whatever the management app the hypervisor uses (XenCenter in case of
> XenServer). This will enable you to actually choose which OS to boot in the
> grub menu.
>
> If that still doesn't answer your needs, then I give up :-P
>
> PS: grub is actually capable of booting non-grub-using OS like Windows;
> you'll have to decipher the proper incantations for "chainloading" (plus
> all the complexities of juggling partitions - Windows its wickedly invasive
> and greedy in that regard), but it's doable.
>
> Rgds,
> On Feb 11, 2012 9:21 PM, "Neal McBurnett"  wrote:
>
>> It seems to me that grub-reboot does what you asked for.  You do have to
>> modify /etc/default/grub *one time* to set the "saved" option, but after
>> that you just quickly run grub-reboot before a reboot and it boots the one
>> you picked, on just the next reboot.  If on that boot, you DON'T run
>> grub-reboot, it will reboot the time after that with your default, safe
>> boot option.  If you're worried about testing odd kernels and panics, you
>> can also set a boot option like "panic=30" so it reboots into a safe kernel
>> after a panic.
>>
>> If that isn't what you wanted, can you clarify in more detail what you're
>> looking for?
>>
>> You could set up a serial console connected to a separate computer let
>> you connect to it at boot time, but it is much more complicated and
>> expensive.
>> I guess if you need to boot into OS's that don't use grub, a serial
>> console boot would be more convenient than rebooting to the default one
>> that does do grub, and then choosing the one you really want next via
>> grub-reboot from there.
>>
>> Neal McBurnett http://neal.mcburnett.org/
>>
>> On Sat, Feb 11, 2012 at 05:54:30PM +0530, Tapas Mishra wrote:
>> > No this is not what I want.I am aware of these options.
>> >
>> >
>> > On Sat, Feb 11, 2012 at 3:39 PM, Pandu Poluan 
>> wrote:
>> >
>> >
>> > Go here:
>> >
>> > https://help.ubuntu.com/community/Grub2
>> >
>> > find grub-set-default and grub-reboot. These commands will be
>> available if
>> >     you set grub.cfg according to the procedure in the section.
>> >
>> > Rgds,
>> >
>> > On Feb 11, 2012 3:39 PM, "Tapas Mishra" 
>> wrote:
>> >
>> > I forgot to mention in previous message I do not want to be
>> manually
>> > editing the grub.cfg file each time if I have to frequently
>> switch
>> > between different OS.
>> >
>> > On Sat, Feb 11, 2012 at 2:04 PM, Tapas Mishra <
>> mightydre...@gmail.com>
>> > wrote:
>> >
>> > I have a machine which is multiple boot.For sysadmin kind
>> of work I
>> > have to boot into different different Operating System's.
>> Main Os
>> > is Ubuntu 11.10 with grub2.
>> >
>> > Each time if I reboot then I want to be able to select
>> desired
>> > operating system to boot while remotely logged in via ssh
>> as we do
>> > when we are physically present on that machine by moving
>> the up
>> > down arrow keys.I want to do some thing similar via ssh or
>> if
>> > possible by some other protocol.
>> > Is it possible some how.Is there any package available for
>> the
>> > same?
>> >
>> > --
>> >
>> >
>> >
>> >
>>
>> > --
>> > ubuntu-server mailing list
>> > ubuntu-server@lists.ubuntu.com
>> > https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
>> > More info: https://wiki.ubuntu.com/ServerTeam
>>
>


-- 
8960770858
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

Re: choosing desired os to boot over ssh

2012-02-11 Thread Tapas Mishra
No this is not what I want.I am aware of these options.


On Sat, Feb 11, 2012 at 3:39 PM, Pandu Poluan  wrote:

> Go here:
>
> https://help.ubuntu.com/community/Grub2
>
> find grub-set-default and grub-reboot. These commands will be available if
> you set grub.cfg according to the procedure in the section.
>
> Rgds,
>  On Feb 11, 2012 3:39 PM, "Tapas Mishra"  wrote:
>
>> I forgot to mention in previous message I do not want to be manually
>> editing the grub.cfg file each time if I have to frequently switch between
>> different OS.
>>
>> On Sat, Feb 11, 2012 at 2:04 PM, Tapas Mishra wrote:
>>
>>> I have a machine which is multiple boot.For sysadmin kind of work I have
>>> to boot into different different Operating System's. Main Os is Ubuntu
>>> 11.10 with grub2.
>>>
>>> Each time if I reboot then I want to be able to select desired operating
>>> system to boot while remotely logged in via ssh as we do when we are
>>> physically present on that machine by moving the up down arrow keys.I want
>>> to do some thing similar via ssh or if possible by some other protocol.
>>> Is it possible some how.Is there any package available for the same?
>>>
>>> --
>>>
>>>
>>>
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

Re: choosing desired os to boot over ssh

2012-02-11 Thread Tapas Mishra
I forgot to mention in previous message I do not want to be manually
editing the grub.cfg file each time if I have to frequently switch between
different OS.

On Sat, Feb 11, 2012 at 2:04 PM, Tapas Mishra wrote:

> I have a machine which is multiple boot.For sysadmin kind of work I have
> to boot into different different Operating System's. Main Os is Ubuntu
> 11.10 with grub2.
>
> Each time if I reboot then I want to be able to select desired operating
> system to boot while remotely logged in via ssh as we do when we are
> physically present on that machine by moving the up down arrow keys.I want
> to do some thing similar via ssh or if possible by some other protocol.
> Is it possible some how.Is there any package available for the same?
>
> --
>
>
>
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

choosing desired os to boot over ssh

2012-02-11 Thread Tapas Mishra
I have a machine which is multiple boot.For sysadmin kind of work I have to
boot into different different Operating System's. Main Os is Ubuntu 11.10
with grub2.

Each time if I reboot then I want to be able to select desired operating
system to boot while remotely logged in via ssh as we do when we are
physically present on that machine by moving the up down arrow keys.I want
to do some thing similar via ssh or if possible by some other protocol.
Is it possible some how.Is there any package available for the same?

--
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

Re: mails from list are coming with warning on gmail

2011-09-16 Thread Tapas Mishra
On Tue, Sep 6, 2011 at 12:47 PM, Jared Norris  wrote:
> On 6 September 2011 17:07, Tapas Mishra  wrote:
>> All the mails coming from Ubuntu users mailing list (this one) are
>> coming to my mail box with a warning from gmail.
>> The warning is
>>
>> "This message may not have been sent by: u...@gmail.com  Learn more
>> Report phishing "
>>
>>
>> Where the address u...@gmail.com is some one who posted question to the list.
>> Some one who is moderating this list please have a look.
>>
>> --
>> --
>>
>> On 6 September 2011 17:07,Jared Norris   wrote:

> Thanks for bringing this up, it has been reported to the Canonical
> staff running the mailing lists a couple of weeks ago. It is across
> all *@lists.ubuntu.com mailing lists and is being worked on. From what
> I've been told it's not going to be a quick fix either but at least
> they are aware of it and working towards a solution.
>
> --
> Regards,
>
> Jared Norris JP(Qual) BBehSc(Psych)
> https://wiki.ubuntu.com/JaredNorris
>

Some additional help from my side which you can forward to the
concerned staff.(Not sure if this exactly is the case hoping that this
might be the case)

here is the header at my end  http://pastebin.com/Q5Hut1pD
 this is a header which is from mail which came as  response

Gmail signed Jared Norris' mail with DKIM when he sent it; the mailing
list modified the headers (and maybe the body too); gmail got the
message from the mailing list, tried to verify the DKIM signature and
verification failed. Since it's modifying messages, the mailing list
software on ubuntu.com should be configured to strip DKIM signature
headers, and maybe to add their own signature.


--

Tapas

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


some thing over wrote apache2 init script

2011-07-05 Thread Tapas Mishra
Hi,
this is one problem with one of our servers I noticed today morning,
we are running a private cloud on Ubuntu server with KVM as hypervisor.

The URL is  http://openitup.in

The Dom0 on KVM instance where all the Apache settings are
I noticed

the apache2 file /etc/init.d/apache2 was blank
due to which rest of the internal sites were not accessible.

Also I noticed that there were other files

/etc/init.d/apache2.1
/etc/init.d/apache2.2
/etc/init.d/apache2.3
/etc/init.d/apache2.4

which were different instances of same file but these files were also blank.
Right now I have fixed it by copying the apache2 init script from one
of the internal machines.
So things started working back on track.

How ever on the machines running on LAN where our apps are there was
no such issue.

Let me know what can be the cause for such a thing  or what do I need
to investigate.
The problem happened recently.Though I have fixed it I want to know
what could have been a
possible reason for such a thing to happen.


--

Tapas
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: problem in making applications accessible after a shutdown of server for 2 months

2011-03-30 Thread Tapas Mishra
On Wed, Mar 30, 2011 at 5:14 PM, Carsten Aulbert
 wrote:
> Hi
>
> not /var/log/apt, but /var/log/apache2 (!)
>
> carsten
>
Hmm since apache was not able to start as daemon
so the requests never reached my web server.
Which I had verified in Apache log as I checked openitup.in I did not
saw any request being logged in /var/log/apache2 access.log or
error.log hence I had pasted the /var/log/apt/*

how ever there are 3-4 lines on this server in question which were
repetition of following

PHP Warning:  PHP Startup: Unable to load dynamic library
'/usr/lib/php5/20090626/pdo_mysql.so' -
/usr/lib/php5/20090626/pdo_mysql.so: cannot open shared object file:
No such file or directory in Unknown on line 0

I am not using any mysql on this machine so this line should not be
present or be a reason for the problem
(correct me if I am wrong)

I also checked the daemon.log
http://pastebin.com/c64Vhk4u
could not find any thing suspicious for creation of a different
version of /etc/init.d/apache to /etc/init.d/apache2.2

So I had pasted the apt logs.
--
Tapas

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: problem in making applications accessible after a shutdown of server for 2 months

2011-03-30 Thread Tapas Mishra
On Wed, Mar 30, 2011 at 3:49 PM, Carsten Aulbert
 wrote:
> Hi
>
> On Wednesday 30 March 2011 12:16:06 Tapas Mishra wrote:
>> Ok after further digging this problem I see apache is not able to
>> start on the machine in question for some unknown reason I do not see
>> apache pid in ps out put so now what can be done for this?
>
> As always, look into the log files or start the daemon in stand-alone mode,
> i.e. not forking and with a lot of debugging output.
>
> Logfiles: /var/log/apache/* /var/log/daemon.log /var/log/syslog ...
>
daemon.log
http://pastebin.com/w1XMhNHL
syslog
http://pastebin.com/RdN6bjUm
/var/log/apt/term.log.1.gz
http://pastebin.com/cGi1a3BM

/var/log/apt/term.log.2.gz
http://pastebin.com/riYcXDFY

/var/log/apt/term.log
http://pastebin.com/1YicC1Cv

/var/log/apt/history.log.2.gz
http://pastebin.com/hZFib5Xh

/var/log/apt/history.log.1.gz
http://pastebin.com/yE3XK222

/var/log/apt/history.log
http://pastebin.com/XgKekqsg


the entries from 30th march on both the links are the ones which some
one might be willing to look.
My problem is solved as I mentioned in my previous message that there
were 2 extra files with name apache present in
/etc/init.d directory and using one of them was what had worked,but I
want to investigate this issue further as why did I needed to do this
? What was the reason that another file apache2.2. was present in
/etc/init.d and using that had worked and not /etc/init.d/apache2 .
My guess is some update might have over written (but I am not having
any facts to support my argument)
let me know what do I investigate ?Or some one can point to some thing
by looking at any other log even I will post.
Because this over writing or creation of files did not happened in the
virtual machines which were also lucid servers on this machine where I
reported this problem.

--
Tapas

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: problem in making applications accessible after a shutdown of server for 2 months

2011-03-30 Thread Tapas Mishra
On Wed, Mar 30, 2011 at 2:49 PM, Tapas Mishra  wrote:
> Hi all,
> one of my server was shutdown for 2 months and today only it has been
> switched on.
> Here are the links
> http://openitup.in
> http://software.openitup.in
> http://social.openitup.in
> http://research.openitup.in
>
> When we powered on the machine the virtual machines on top of it are
> running but they are not accessible from internet.
> Every thing 2 months back before shutting down was running.This is a
> reverse proxy setup and I do not see the requests reaching
> the Dom0 itself in Apache log.
> What can be primary reason for this and what should I follow to trace it?


Ok after further digging this problem I see apache is not able to
start on the machine in question for some unknown reason I do not see
apache pid in ps out put so now what can be done for this?
-- 
--
Tapas

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


problem in making applications accessible after a shutdown of server for 2 months

2011-03-30 Thread Tapas Mishra
Hi all,
one of my server was shutdown for 2 months and today only it has been
switched on.
Here are the links
http://openitup.in
http://software.openitup.in
http://social.openitup.in
http://research.openitup.in

When we powered on the machine the virtual machines on top of it are
running but they are not accessible from internet.
Every thing 2 months back before shutting down was running.This is a
reverse proxy setup and I do not see the requests reaching
the Dom0 itself in Apache log.
What can be primary reason for this and what should I follow to trace it?
--
Tapas
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


debugging udev for runnin Xen

2011-03-16 Thread Tapas Mishra
Hi,
I am trying to run Xen-4.0 on one of our machines.Where I had got some
errors in creating virtual machines on Xen.
I am trying to debug this problem and want to know
 how to make sure if udev is running (some related stuff)
if some one can give a relevant link.
I Googled it
http://www.google.co.in/search?hl=en&client=ubuntu&hs=9ER&channel=cs&q=how+to+check+udev+is+running+ubuntu&aq=f&aqi=&aql=&oq=
but I think I did not reached any thing useful.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: debugging udev on ubuntu

2011-03-10 Thread Tapas Mishra
On Thu, Mar 10, 2011 at 5:41 PM, Michael Zoet  wrote:
>
> Am Do, 10.03.2011, 11:00 schrieb Tapas Mishra:
>> Hi, one of my Ubuntu machines  where I am trying to create Xen based
>> virtualizaton setup (as the machine is non VT)
>>
>>  I am not able to create guest Operating system on it.Having digged
>> through the logs which can be seen here
>
> What OS (and Version) do you want to install? I had once problems
> installing an Ubuntu 10.04 VM on a 8.04 Xen server.
I am trying Ubuntu 10.04 32 bit on Ubuntu 10.04 64 Desktop using
Xen-4.0.1 and pv-ops dom0 kernel from Jeremy's Tree the kernel version
2.6.32.27

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


debugging udev on ubuntu

2011-03-10 Thread Tapas Mishra
Hi, one of my Ubuntu machines  where I am trying to create Xen based
virtualizaton setup (as the machine is non VT)

 I am not able to create guest Operating system on it.Having digged
through the logs which can be seen here
/var/log/xen/domain-builder-ng.log
http://pastebin.com/8W45hjCV

/var/log/xen/xend-debug.log
http://pastebin.com/634FaJQP

/var/log/xen/xend.log
http://pastebin.com/y7wWs19K

/var/log/xen/qemu-dm-ubuntu.vm.log
 http://pastebin.com/cRNqUGRf

/var/log/xen/xen-hotplug.log is empty

xend.log also seems weird. It should show something like

[2011-03-10 14:58:12 7832] DEBUG (XendDomainInfo:1891)
XendDomainInfo.handleShutdownWatch
[2011-03-10 14:58:12 7832] DEBUG (DevController:139) Waiting for devices vif2.
[2011-03-10 14:58:12 7832] DEBUG (DevController:139) Waiting for devices vif.
[2011-03-10 14:58:12 7832] DEBUG (DevController:144) Waiting for 0.
[2011-03-10 14:58:12 7832] DEBUG (DevController:628)
hotplugStatusCallback /local/domain/0/backend/vif/6/0/hotplug-status.
[2011-03-10 14:58:12 7832] DEBUG (DevController:628)
hotplugStatusCallback /local/domain/0/backend/vif/6/0/hotplug-status.
[2011-03-10 14:58:12 7832] DEBUG (DevController:642) hotplugStatusCallback 1.
[2011-03-10 14:58:12 7832] DEBUG (DevController:139) Waiting for devices vscsi.
[2011-03-10 14:58:12 7832] DEBUG (DevController:139) Waiting for devices vbd.
[2011-03-10 14:58:12 7832] DEBUG (DevController:144) Waiting for 51712.
[2011-03-10 14:58:12 7832] DEBUG (DevController:628)
hotplugStatusCallback
/local/domain/0/backend/vbd/6/51712/hotplug-status.
[2011-03-10 14:58:13 7832] DEBUG (DevController:628)
hotplugStatusCallback
/local/domain/0/backend/vbd/6/51712/hotplug-status.
[2011-03-10 14:58:13 7832] DEBUG (DevController:642) hotplugStatusCallback 1.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for
devices ioports.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for devices irq.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for devices vkbd.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for devices vfb.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for
devices console.
[2011-03-10 14:58:13 7832] DEBUG (DevController:144) Waiting for 0.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for devices pci.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for devices tap2.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for devices tap.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for devices vusb.
[2011-03-10 14:58:13 7832] DEBUG (DevController:139) Waiting for devices vtpm.
[2011-03-10 14:58:13 7832] INFO (XendDomain:1206) Domain ubuntu (6) unpaused.


While  it simply shows

[2011-03-10 13:30:04 1705] DEBUG (DevController:628)
hotplugStatusCallback /local/domain/0/backend/vif/1/0/hotplug-status.
[2011-03-10 13:31:44 1705] DEBUG (XendDomainInfo:3053)
XendDomainInfo.destroy: domid=1

Perhaps udevd is dead?


I am not able to understand how do I trouble shoot it.
Can any one help in debugging this part as what more should I look in?

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: options to create guest OS in virt-manager are greyed out on Lucid 10.04 64 bit

2011-03-03 Thread Tapas Mishra
On Tue, Mar 1, 2011 at 2:53 PM, Tapas Mishra  wrote:
> Hi,
> I just installed a pv-ops Dom0 2.6.32.27 Kernel on a 64 bit non VT machine.
> Following instructions here
> http://wiki.xensource.com/xenwiki/Xen4.0
> for 64 bit Ubuntu 10.04
>
> apt-get install bcc bin86 gawk bridge-utils iproute libcurl3
> libcurl4-openssl-dev bzip2 module-init-tools transfig tgif texinfo
> texlive-latex-base texlive-latex-recommended texlive-fonts-extra
> texlive-fonts-recommended pciutils-dev mercurial build-essential
> make gcc libc6-dev zlib1g-dev python python-dev python-twisted
> libncurses5-dev patch libvncserver-dev libsdl-dev libjpeg62-dev iasl
> libbz2-dev e2fslibs-dev git-core uuid-dev ocaml libx11-dev bison flex
>
> apt-get install gcc-multilib
> apt-get install xz-utils
>
> make xen
> make tools
> make install-xen
> make install-tools PYTHON_PREFIX_ARG=
>
> I did not do  make install-stubdom.
>
>
>
> It is a Ubuntu Desktop 10.04 amd64 bit version.
> Then as  mentioned here on this guide
> http://bderzhavets.wordpress.com/2010/03/26/virst-installvirt-manager-at-xen-4-0-rc8-2-6-32-10-pvops-dom0-on-top-ubuntu-karmic-koala-server/
> (I did not follow the above guide strictly)
>
> Commented out (xend-unix-server yes) in  /etc/xen/xend-config.sxp  ,
> here is my xend-config.sxp
> http://pastebin.com/M8CfrqBc
> Then  exported variable   VIRSH_DEFAULT_CONNECT_URI=”xen:///”
> in root’s .bashrc.
> Then :-
> # apt-get install ubuntu-virt-server ubuntu-virt-mgmt
>
> Now when I open virt-manager the option to install from Local ISO or
> PXE are greyed out.
> virt-manager version is 0.8.2
>
>
> Let me know if there is any possibility of improvement so that I can
> get the option of install from Local ISO here.
> Even in case of http install from local machine things did not worked.
> Let me know what log you people would like to see to understand this
> problem as I right now do not have any clue for this problem for
> virt-manager.
>
>
Tried the command line also

virt-install -n LucidPVG -r 512 --paravirt --vnc -f /dev/sda9 -c
/home/tapas/Documents/ISO\'s/ubuntu-10.04.1-desktop-i386.iso --debug

Tue, 01 Mar 2011 23:19:51 DEBUG Launched with command line:
/usr/bin/virt-install -n LucidPVG -r 512 --paravirt --vnc -f /dev/sda9
-c /home/tapas/Documents/ISO's/ubuntu-10.04.1-desktop-i386.iso --debug
Tue, 01 Mar 2011 23:19:51 DEBUG Requesting libvirt URI default
Tue, 01 Mar 2011 23:19:51 DEBUG Received libvirt URI xen:///
Tue, 01 Mar 2011 23:19:51 DEBUG Requesting virt method 'xen', hv
type 'default'.
Tue, 01 Mar 2011 23:19:51 DEBUG Received virt method 'xen'
Tue, 01 Mar 2011 23:19:51 DEBUG Hypervisor name is 'xen'
Tue, 01 Mar 2011 23:19:51 DEBUG Could not open
"/etc/sysconfig/keyboard" [Errno 2] No such file or directory:
'/etc/sysconfig/keyboard'
Tue, 01 Mar 2011 23:19:51 DEBUG Could not open
"/etc/X11/xorg.conf": [Errno 2] No such file or directory:
'/etc/X11/xorg.conf'
Tue, 01 Mar 2011 23:19:51 ERROR Paravirtualized guests cannot
install off cdrom media.


I am already running a Ubuntu server cloud on a VT machine using KVM.
My purpose of this experiment is to create a cloud  on a non VT
hardware so using Xen.
But the above errors are getting a bit difficult to trace.
Let me know if I any one has some suggestions here.As why can I not
create PV guests
from ISO of 32 bit lucid on a host which is also lucid 64 bit.
To have a 64 bit guest on 64 bit host VT is must but here I am trying
to create 32 bit guest on 64 bit host and that too
a PV guest.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: finding changes made to configurations

2011-03-03 Thread Tapas Mishra
On Thu, Mar 3, 2011 at 8:44 PM, Steven Miano  wrote:

> Did they clear out their history?
>
> /home/user/.bash_history would seemingly be a pretty good place to start.
> Also you could check out their username in /var/log, and see all instances
> of what they might have done
>
> .bash_history will not  tell you what change was made exactly.
It will tell you which file was opened.But inside that file what was
modified it wont tell you.
I am looking not only to track the exact change which might be in a location
other than
etc also if some kind of script  or .so file or some thing similar was
added.
One way I understand is do an ls on / and store the result in a file and
then after the changes have been done where some files are delete again do
an ls on / (root) and compare the results to what files are added or
deleted.
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

finding changes made to configurations

2011-03-03 Thread Tapas Mishra
Hi,
I wanted to know if on a server 2-3 people have SSH access and one of
the person does some changes and leaves the job.
Is there any tracking tool which can track what things were installed or
what changes were made by team individuals at a later date.

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: .screenrc entries to show always the windows in bottom

2011-03-03 Thread Tapas Mishra
Thanks I did not knew about this one.
By the time I saw this message I had following which had helped me

hardstatus alwayslastline
#hardstatus string '%{= mK}%-Lw%{= KW}%50>%n%f* %t%{= mK}%+Lw%< %{=
kG}%-=%D %d %M %Y %c:%s%{-}'
hardstatus string '%{= kG}[ %{G}%H %{g}][%= %{=
kw}%?%-Lw%?%{r}(%{W}%n*%f%t%?(%u)%?%{r})%{w}%?%+Lw%?%?%= %{g}][%{B}
%d/%m %{W}%c %{g}]'


On Thu, Mar 3, 2011 at 3:23 PM, C S Shyam Sundar
 wrote:
> Have you used byobu ? You default installation should have it installed.,
> your function keys to create and navigate between them.
> C S Shyam Sundar
>
>
>
> 2011/3/3 Tapas Mishra 
>>
>> I added following to my .screenrc
>> caption always “%H %c | %-w%{=}%n-%t%{-}%+w”
>>
>> but when I execute screen then only for some initial seconds I can see
>> the window name and some other details in bottom.
>> How can I set it to permanently view?
>> There is one more file .screen
>> which has
>> hardstatus alwayslastline
>>
>> In my .screenrc what should I modify?
>> --
>> Regards
>> Tapas
>>
>> --
>> ubuntu-server mailing list
>> ubuntu-server@lists.ubuntu.com
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
>> More info: https://wiki.ubuntu.com/ServerTeam
>
>
> --
> ubuntu-server mailing list
> ubuntu-server@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
> More info: https://wiki.ubuntu.com/ServerTeam
>



-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


.screenrc entries to show always the windows in bottom

2011-03-03 Thread Tapas Mishra
I added following to my .screenrc
caption always “%H %c | %-w%{=}%n-%t%{-}%+w”

but when I execute screen then only for some initial seconds I can see
the window name and some other details in bottom.
How can I set it to permanently view?
There is one more file .screen
which has
hardstatus alwayslastline

In my .screenrc what should I modify?
--
Regards
Tapas

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


options to create guest OS in virt-manager are greyed out on Lucid 10.04 64 bit

2011-03-01 Thread Tapas Mishra
Hi,
I just installed a pv-ops Dom0 2.6.32.27 Kernel on a 64 bit non VT machine.
Following instructions here
http://wiki.xensource.com/xenwiki/Xen4.0
for 64 bit Ubuntu 10.04

apt-get install bcc bin86 gawk bridge-utils iproute libcurl3
libcurl4-openssl-dev bzip2 module-init-tools transfig tgif texinfo
texlive-latex-base texlive-latex-recommended texlive-fonts-extra
texlive-fonts-recommended pciutils-dev mercurial build-essential
make gcc libc6-dev zlib1g-dev python python-dev python-twisted
libncurses5-dev patch libvncserver-dev libsdl-dev libjpeg62-dev iasl
libbz2-dev e2fslibs-dev git-core uuid-dev ocaml libx11-dev bison flex

apt-get install gcc-multilib
apt-get install xz-utils

make xen
make tools
make install-xen
make install-tools PYTHON_PREFIX_ARG=

I did not do  make install-stubdom.



It is a Ubuntu Desktop 10.04 amd64 bit version.
Then as  mentioned here on this guide
http://bderzhavets.wordpress.com/2010/03/26/virst-installvirt-manager-at-xen-4-0-rc8-2-6-32-10-pvops-dom0-on-top-ubuntu-karmic-koala-server/
(I did not follow the above guide strictly)

Commented out (xend-unix-server yes) in  /etc/xen/xend-config.sxp  ,
here is my xend-config.sxp
http://pastebin.com/M8CfrqBc
Then  exported variable   VIRSH_DEFAULT_CONNECT_URI=”xen:///”
in root’s .bashrc.
Then :-
# apt-get install ubuntu-virt-server ubuntu-virt-mgmt

Now when I open virt-manager the option to install from Local ISO or
PXE are greyed out.
virt-manager version is 0.8.2


Let me know if there is any possibility of improvement so that I can
get the option of install from Local ISO here.
Even in case of http install from local machine things did not worked.
Let me know what log you people would like to see to understand this
problem as I right now do not have any clue for this problem for
virt-manager.


-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: restricting ssh login based on IP

2011-02-28 Thread Tapas Mishra
On Mon, Feb 28, 2011 at 7:36 PM, Scott Moser  wrote:
> On Mon, 28 Feb 2011, Serge E. Hallyn wrote:
>
>> Quoting Michael Zoet (michael.z...@zoet.de):
>> >
>> > -BEGIN PGP SIGNED MESSAGE-
>> > Hash: SHA1
>> >
>> > Am 26.02.2011 10:21, schrieb Tapas Mishra:
>> > > On Sat, Feb 26, 2011 at 1:39 PM, Dan Sheffner  
>> > > wrote:
>> > >> Like Michael said I would accomplish this with two users. Just off the 
>> > >> top
>> > >> of my head I would do:
>> > > No not two users it has to be same user who has to be restricted based
>> > > on IP from which he logs in.
>> >
>> > Normally I would say it is impossible, but I do not know everything
>> > about PAM, jails and so on. The file system persmissions are not based
>> > on the IP a user came from, so you need to tweak a lot! If I really
>> > had to do such things I would write a shell script that looks up from
>> > where the user came and setup the enviromnet accordingly and make this
>> > shell script the login shell. But this is lot of work and someone has
>> > to be very carefull...
>>
>> Right - giving details to match those in the requirements :), two ways
>> you could do this include (1) creating a container for the readonly
>> user, give it the second IP (or fwd the second IP to it), and make
>> /home/$user a recursive readonly bind mount of the real home.  And
>> (2) you could presumably use an apparmor rule.  First thought is
>> write your own trivial pam module to set the user's apparmor context
>> based on login.
>
> I've done something like this before, jailing into a given root based on a
> login name.  There was really only 1 user, but 2 entries in /etc/passwd, so
> you could get in as 'user-jailed' or 'user'.  or some such.  The key was
> that the user had their shell in /etc/passwd as '/bin/my-jail-user' or
> something like that.  That was a program that decided to jail or not and
> then executed the appropriate "real" shell.
>
> I think that you could probably do something like this.  The only thing
> I'm not really sure how to do with more digging is to find the source IP
> address of the ssh connection.  I'm sure it can be done.
>
Thanks for this information.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: restricting ssh login based on IP

2011-02-27 Thread Tapas Mishra
On Sun, Feb 27, 2011 at 7:23 AM, Steven Miano  wrote:

> If you can do it with two users, this would be a good time to use the
> permission system.
>
> Owner having 7 (read/write/execute), and Group having 5 (read and
> execute).
>
> I think everyone on the list would like to know the reasoning behind using
> the same user account.
>
It is a requirement of one of my projects.
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

what is equivalent to syslog.conf for ubuntu

2011-02-26 Thread Tapas Mishra
I am searching for syslog.conf equivalent for Ubuntu what file is that?
Basically I am trying to create a gtalk like application which can
alert a user as
an SSH connection is established to his server with the machine using
xmphp library.


-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: how to reduce time of git pulling each time when you do a make world on Xen source

2011-02-26 Thread Tapas Mishra
On Sat, Feb 26, 2011 at 4:06 PM, Tapas Mishra  wrote:
> I am compiling xen from source and each time I do a `make world`
> it basically gives some or the other error
> my problem are not those errors ( I am trying to debug them)
> but the problem is each time when I do a `make world`
>
> Xen basically pulls things from git repository
>
>    + rm -rf linux-2.6-pvops.git linux-2.6-pvops.git.tmp
>    + mkdir linux-2.6-pvops.git.tmp
>    + rmdir linux-2.6-pvops.git.tmp
>    + git clone -o xen -n
> git://git.kernel.org/pub/scm/linux/kernel/git/jeremy/xen.git
> linux-2.6-pvops.git.tmp
>    Initialized empty Git repository in
> /usr/src/xen-4.0.1/linux-2.6-pvops.git.tmp/.git/
>    remote: Counting objects: 1941611, done.
>    remote: Compressing objects: 100% (319127/319127), done.
> remote: Total 1941611 (delta 1614302), reused 1930655 (delta 1604595)
> **Receiving objects: 20% (1941611/1941611), 98.17 MiB | 87 KiB/s, done.**
>
>
> and if you notice the last line it is still consuming my bandwidth
> pulling things from internet.How can I stop this step each time and
> use existing git repository?
>
> --
When I searched an answer to this question I came across a link
http://lists.xensource.com/archives/.../msg00476.html
http://web.archiveorange.com/archive...CfIzdpcmkWRz5w

but I am not able to clearly understand where Boris mentions

Quote:
make xen etc.
"Then clone JF's Git Repo, checkout git branch as you want and build
corresponding
kernel.That's all i always do."
Which kernel is he referring to is it Dom0?
--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


how to reduce time of git pulling each time when you do a make world on Xen source

2011-02-26 Thread Tapas Mishra
I am compiling xen from source and each time I do a `make world`
it basically gives some or the other error
my problem are not those errors ( I am trying to debug them)
but the problem is each time when I do a `make world`

Xen basically pulls things from git repository

+ rm -rf linux-2.6-pvops.git linux-2.6-pvops.git.tmp
+ mkdir linux-2.6-pvops.git.tmp
+ rmdir linux-2.6-pvops.git.tmp
+ git clone -o xen -n
git://git.kernel.org/pub/scm/linux/kernel/git/jeremy/xen.git
linux-2.6-pvops.git.tmp
Initialized empty Git repository in
/usr/src/xen-4.0.1/linux-2.6-pvops.git.tmp/.git/
remote: Counting objects: 1941611, done.
remote: Compressing objects: 100% (319127/319127), done.
remote: Total 1941611 (delta 1614302), reused 1930655 (delta 1604595)
**Receiving objects: 20% (1941611/1941611), 98.17 MiB | 87 KiB/s, done.**


and if you notice the last line it is still consuming my bandwidth
pulling things from internet.How can I stop this step each time and
use existing git repository?

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: restricting ssh login based on IP

2011-02-26 Thread Tapas Mishra
On Sat, Feb 26, 2011 at 1:39 PM, Dan Sheffner  wrote:
> Like Michael said I would accomplish this with two users.  Just off the top
> of my head I would do:
No not two users it has to be same user who has to be restricted based
on IP from which he logs in.
I need some more information on PAM approach if some one can give
about it which direction should I be heading for that approach.
> user 1) has full read/write access to /home/user1
> user 2) has read only access to /home/user2
>
> schedule cron to rsync from /home/user1 to /home/user2 and make everything
> read only for the /home/user2.
>
> Dan
>
> On Sat, Feb 26, 2011 at 2:04 AM, Michael Zoet  wrote:
>>
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> Am 26.02.2011 06:32, schrieb Tapas Mishra:
>> > Hi,
>>
>> Hi Tapas,
>>
>> >
>> > I would like to allow a user to login through SSH but with different
>> > permission coming from different ipaddress.
>> >
>> > For example, a user "tester" login to SSH through 192.168.1.1 and
>> > another user login with the same login id "tester" but from different
>> > ip 192.168.1.2.
>> >
>> > How do I restrict 192.168.1.2 to only allow for viewing the content in
>> > the home directory while giving 192.168.1.1 full access?
>>
>> Why do you have to use the same user? Viewing the contents of a
>> directory has nothing to do with SSH and you need to use some other
>> methods. So using different users to login would be the easiest to
>> accomplish this. Then you need only to change the permissions on the
>> filesystem. And if you are using POSIX ACLs you have more options than
>> you will ever need for this situation. Keep it simple is the best way
>> for system administration.
>>
>>
>> >
>> >
>> > I got a suggestion from some one
>> >
>> > Approach 1)
>> > Based on the ip you change the shell. If it's just for read only a
>> > jail would be fine.
>> >
>> > but how do I change shell based on IP?
>> >
>> > Approach 2)
>> >
>> > to have two ssh instances. Let's say port 22 and port 24. Port 22 is
>> > for read only, while port 24 is for full access
>> >
>> > so how can it be possible to give port 22 only read only access to SSH
>> >
>> >
>>
>> Maybe you can tweak PAM and do some shell scripting to achieve both
>> aproaches. But why? If you do it not right you might break your
>> system. I really do not know what this could be good for... Using 2
>> users is the easiest way.
>>
>> Bye,
>>
>> Michael
>>
>>
>>
>>
>>



-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


restricting ssh login based on IP

2011-02-25 Thread Tapas Mishra
Hi,

I would like to allow a user to login through SSH but with different
permission coming from different ipaddress.

For example, a user "tester" login to SSH through 192.168.1.1 and
another user login with the same login id "tester" but from different
ip 192.168.1.2.

How do I restrict 192.168.1.2 to only allow for viewing the content in
the home directory while giving 192.168.1.1 full access?


I got a suggestion from some one

Approach 1)
 Based on the ip you change the shell. If it's just for read only a
jail would be fine.

but how do I change shell based on IP?

Approach 2)

 to have two ssh instances. Let's say port 22 and port 24. Port 22 is
for read only, while port 24 is for full access

so how can it be possible to give port 22 only read only access to SSH


-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: tomcat startup script not working at boot

2011-02-24 Thread Tapas Mishra
On Thu, Feb 17, 2011 at 7:33 PM, Tapas Mishra  wrote:
> I am having problems in starting tomcat at boot time with an automated
> script of mine.
> The Tomcat I am using is 5.5 since Sakai installation of mine depends
> on 5.5 version on any other version it will break.
> So /opt/apache-tomcat-5.5.31 is where every thing is and in that
> bin/startup.sh is what I am trying to start each time at boot.
> After writing the script I have done update-rc.d defaults
> and I checked from command line
> /etc/init.d/tomcatstart
> /etc/init.d/tomcat stop
>
> does work
> where myscript above refers to the script below
>
> but the same does not work when I reboot the system.
>
> #!/bin/bash
> #
> # tomcat
> #
> # chkconfig:
> # description: Start up the Tomcat servlet engine.
>
> # Source function library.
> . /lib/lsb/init-functions
>
> RETVAL=$?
> CATALINA_HOME="/opt/apache-tomcat-5.5.31"
>
> case "$1" in
> start)
> if [ -f $CATALINA_HOME/bin/startup.sh ];
> then
> echo $"Starting Tomcat"
> /opt/apache-tomcat-5.5.31/bin/startup.sh
>
> fi
> ;;
> stop)
> if [ -f $CATALINA_HOME/bin/shutdown.sh ];
> then
> echo $"Stopping Tomcat"
> /opt/apache-tomcat-5.5.31/bin/shutdown.sh
> fi
> ;;
> *)
> echo $"Usage: $0 {start|stop}"
> exit 1
> ;;
> esac
> exit $RETVAL
>
>
> any pointers?
>
>
> --
My script has finally worked.
For some weired reason the script was not working after reboot and it
turns out that this Tomcat was not able to pick JAVA_HOME from .bashrc
at the boot time.So when I defined JAVA_HOME in the above script also
then it did worked.
I do not know why Tomcat could not pick it from .bashrc at boot time
because once the thing completely booted then
/etc/init.d/tapas-script start
was working but to make sure it survives reboots I had to add
JAVA_HOME in this script also (though it was defined in .bashrc)



http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: how to do auto redirection of a tomcat application

2011-02-24 Thread Tapas Mishra
On Thu, Feb 24, 2011 at 12:08 PM, Paul Graydon  wrote:


> Yes we do, we use both rules in combination on probably most of the
> subdomains we host (approximately 70-80 applications under 20-30 subdomains)
>
> A few of our apps are named ROOT to allow them to work from /, but in most
> cases we'll have multiple apps for a particular subdomain so they have
> distinctive names.
So in that case those apps must also be generating URL at context root
/app1 and relative to it.
If 2 of your applications start generating URIs which begin with / and
not /app1 or /app2
then I think even you will need a different ServerName or DNS entry so
that send that request which forwards the root of site in ProxyPass to
internal machine.
I am very sure this situation depends upon how the application is
generating URLs.

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: how to do auto redirection of a tomcat application

2011-02-23 Thread Tapas Mishra
On Thu, Feb 24, 2011 at 12:08 PM, Paul Graydon  wrote:
> On 2/23/2011 7:36 PM, Tapas Mishra wrote:
>>
>> On Thu, Feb 24, 2011 at 3:53 AM, Paul Graydon
>>  wrote:
>>>
>>> On 02/23/2011 11:30 AM, Tapas Mishra wrote:
>>>>
>>>> I have a site http://social.openitup.in
>>>> right now what you are seeing is a default Tomcat6 page.
>>>> I am using mod_ajp as a front end and Apache vhost configuration for
>>>> same
>>>> is
>>>>
>>>> 
>>>>
>>>>         ServerName social.openitup.in
>>>>         ServerAdmin webmaster@localhost
>>>>
>>>>         ProxyRequests off
>>>>         
>>>>         Order deny,allow
>>>>         Allow from all
>>>>         
>>>>         ProxyPreserveHost On
>>>>
>>>>         ProxyPass / ajp://192.168.1.19:8009/
>>>>         ProxyPassReverse / ajp://192.168.1.19:8009/
>>>>
>>>>
>>>> 
>>>>
>>>>
>>>>
>>>>
>>>> How ever I have an application running on it
>>>> http://social.openitup.in/olat
>>>> what I want to do is when some one opens
>>>> http://social.openitup.in
>>>> then rather than seeing Tomcat6 home page from
>>>> /var/lib/tomcat6/webapps/ROOT/index.html
>>>> the person is  redirected to olat application which is in
>>>> /var/lib/tomcat6/webapps/olat
>>>> how can this be achived?
>>>>
>>>> The machine where OLAT is and where the above Reverse Proxy
>>>> configuration is are physically different machines.
>>>>
>>> Hi Tapas,
>>>
>>> We're using straight http, rather than ajp for proxying to our tomcat
>>> servers (though I'm hoping to transition at some stage),
>>
>> Ok so the rule which you mentioned
>>>
>>>    What we tend to do is use a rewrite:
>>>
>>> RewriteEngine On
>>> RewriteRule ^/$ /olat/ [redirect,last]
>>>
>>> The have our proxypass lines:
>>>
>>> ProxyPass /olat ajp://192.168.1.19:8009/olat
>>> ProxyPassReverse /olat ajp://192.168.1.19:8009/olat
>>>
>> you use RewriteRule in combination with ProxyPass.
>> I just want to know this for sake of understanding.
>> I solved the current problem by renaming the application in webapps
>> /var/lib/tomcat6/webapp/olat to
>> /var/lib/tomcat6/webapp/ROOT
>> and it worked you can check http://olat.openitup.in
>> let me know if you use ReWriteRule in combination with ProxyPass
>> directive.
>
> Yes we do, we use both rules in combination on probably most of the
> subdomains we host (approximately 70-80 applications under 20-30 subdomains)
>
> A few of our apps are named ROOT to allow them to work from /, but in most
> cases we'll have multiple apps for a particular subdomain so they have
> distinctive names.  RewriteRule is usually used in combination with
> ProxyPass to direct traffic appropriately if they come in at the wrong
> point.
>
> Paul
Ok this is some thing new for me.
I was not clear on this part that when some one is using
module_proxy.c
then how can they actually use ProxyPass also with it.
Which you made clear.

I basically  have 2 applications
http://sakai.openitup.in
http://olat.openitup.in
we  wanted both of these to be accessible on
http://research.openitup.in/sakai
http://research.openitup.in/olat
and a website http://reserach.openitup.in which is separate from both of these
but what I found was if I proxy root of these apps (sakai and olat)
using a different URL
then things work.But if I use

ProxyPass /sakai ajp://192.168.1.19:8009/
ProxyPassReverse /sakai ajp://192.168.1.19:8009/

ProxyPass /olat ajp://192.168.1.20:8009/
ProxyPassReverse /olat ajp://192.168.1.20:8009/

in the vhost of research.openitup.in then they are not accessible.

Since the application sakai and olat generate URLs which work if I forward the
root / to respective tomcat connectors so I went ahead and created two
DNS entries
http://sakai.openitup.in
http://olat.openitup.in

Let me know if you feel you have any suggestion for this situation as
we would like to access them
on /sakai or /olat sort of thing only if possible.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: how to do auto redirection of a tomcat application

2011-02-23 Thread Tapas Mishra
On Thu, Feb 24, 2011 at 3:53 AM, Paul Graydon  wrote:
> On 02/23/2011 11:30 AM, Tapas Mishra wrote:
>>
>> I have a site http://social.openitup.in
>> right now what you are seeing is a default Tomcat6 page.
>> I am using mod_ajp as a front end and Apache vhost configuration for same
>> is
>>
>> 
>>
>>         ServerName social.openitup.in
>>         ServerAdmin webmaster@localhost
>>
>>         ProxyRequests off
>>         
>>         Order deny,allow
>>         Allow from all
>>         
>>         ProxyPreserveHost On
>>
>>         ProxyPass / ajp://192.168.1.19:8009/
>>         ProxyPassReverse / ajp://192.168.1.19:8009/
>>
>>
>> 
>>
>>
>>
>>
>> How ever I have an application running on it
>> http://social.openitup.in/olat
>> what I want to do is when some one opens
>> http://social.openitup.in
>> then rather than seeing Tomcat6 home page from
>> /var/lib/tomcat6/webapps/ROOT/index.html
>> the person is  redirected to olat application which is in
>> /var/lib/tomcat6/webapps/olat
>> how can this be achived?
>>
>> The machine where OLAT is and where the above Reverse Proxy
>> configuration is are physically different machines.
>>
> Hi Tapas,
>
> We're using straight http, rather than ajp for proxying to our tomcat
> servers (though I'm hoping to transition at some stage),
Ok so the rule which you mentioned
>   What we tend to do is use a rewrite:
>
> RewriteEngine On
> RewriteRule ^/$ /olat/ [redirect,last]
>
> The have our proxypass lines:
>
> ProxyPass /olat ajp://192.168.1.19:8009/olat
> ProxyPassReverse /olat ajp://192.168.1.19:8009/olat
>
you use RewriteRule in combination with ProxyPass.
I just want to know this for sake of understanding.
I solved the current problem by renaming the application in webapps
/var/lib/tomcat6/webapp/olat to
/var/lib/tomcat6/webapp/ROOT
and it worked you can check http://olat.openitup.in
let me know if you use ReWriteRule in combination with ProxyPass directive.

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


how to do auto redirection of a tomcat application

2011-02-23 Thread Tapas Mishra
I have a site http://social.openitup.in
right now what you are seeing is a default Tomcat6 page.
I am using mod_ajp as a front end and Apache vhost configuration for same is



ServerName social.openitup.in
ServerAdmin webmaster@localhost

ProxyRequests off

Order deny,allow
Allow from all

ProxyPreserveHost On

ProxyPass / ajp://192.168.1.19:8009/
ProxyPassReverse / ajp://192.168.1.19:8009/







How ever I have an application running on it
http://social.openitup.in/olat
what I want to do is when some one opens
http://social.openitup.in
then rather than seeing Tomcat6 home page from
/var/lib/tomcat6/webapps/ROOT/index.html
the person is  redirected to olat application which is in
/var/lib/tomcat6/webapps/olat
how can this be achived?

The machine where OLAT is and where the above Reverse Proxy
configuration is are physically different machines.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


problem in using AOLServer and Apache on same machine at different ports

2011-02-23 Thread Tapas Mishra
I am using a Ubuntu virtual machine.Where I installed OpenACS which
depends upon AOLServer.
To do so I had first shutdown Apache on this machine.
Then following instructions given here

http://openacs.org/xowiki/ubuntu

Step 1)
 aptitude install postgresql

Step 2)
 aptitude install openacs

I had to shutdown Apache to do above installation.
Now the installation finishes.So I can access http://localhost:8000

but when ever I try to start Apache on this machine which was shutdown
during installation I see the error
 service apache2 start
  * Starting web server apache2

  (98)Address already in use: make_sock: could
not bind to address 0.0.0.0:80
no listening sockets available, shutting down
Unable to open logs


So I thought may be OpenACS installs AOLServer so Aolserver might be
listening on port 80 I check
 /etc/aolserver4/conf.d/openacs.sh
and here

 AOL_USER=www-data
AOL_GROUP=www-data
AOL_ADDRESS=192.168.1.15
AOL_PORT=8000
RUN_DAEMON=yes


So AOLServer is not listening on port 80 upto here it is confirmed.

  netstat -tualp  | grep 80
tcp  0  0 somemachine.somedimain.:8000 *:*   LISTEN   21321/aolserver4-ns

so netstat shows only 8000 in  use.
Then why am I unable to start Apache in this case?

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: where to drop war files in tomcat6

2011-02-22 Thread Tapas Mishra
On Tue, Feb 22, 2011 at 12:40 PM, Michael Zoet  wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Am 22.02.2011 03:50, schrieb Tapas Mishra:
>> I installed on a VM tomcat6 (apt-get install tomcat6)
>> as far as I understand if I need to install or deply a .war file in
>> tomcat6 I should put it in webapps folder
>> I did a find then find / -name 'tomcat*'
>> but I do not see any folder webapps here
>>
>> ...
>>
>> So does apt-get install of tomcat not have webapps directory and here
>> the method of deploying applications different?
>
> No! For my Tomcat6 the webapp dir is in /var/lib/tomcat6/webapps/ If
> someone puts a .war file in it, it gets deployed. If it is not there
> just create it.
>
> Michael
>
>
Thanks Michael for this message.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


where to drop war files in tomcat6

2011-02-21 Thread Tapas Mishra
I installed on a VM tomcat6 (apt-get install tomcat6)
as far as I understand if I need to install or deply a .war file in
tomcat6 I should put it in webapps folder
I did a find then  find / -name 'tomcat*'
but I do not see any folder webapps here

/tmp/tomcat6-tmp
/var/lib/update-rc.d/tomcat6
/var/lib/tomcat6
/var/lib/dpkg/info/tomcat6.postrm
/var/lib/dpkg/info/tomcat6.md5sums
/var/lib/dpkg/info/tomcat6.list
/var/lib/dpkg/info/tomcat6.conffiles
/var/lib/dpkg/info/tomcat6.postinst
/var/lib/dpkg/info/tomcat6-common.list
/var/lib/dpkg/info/tomcat6-common.md5sums
/var/lib/dpkg/info/tomcat6.prerm
/var/run/tomcat6.pid
/var/log/tomcat6
/var/cache/apt/archives/tomcat6_6.0.24-2ubuntu1.6_all.deb
/var/cache/apt/archives/tomcat6-common_6.0.24-2ubuntu1.6_all.deb
/var/cache/tomcat6
/usr/share/doc/tomcat6-common
/usr/share/doc/tomcat6
/usr/share/maven-repo/org/apache/tomcat
/usr/share/ubuntu-serverguide/html/C/tomcat.html
/usr/share/tomcat6
/usr/share/tomcat6/bin/tomcat-juli.jar
/usr/share/tomcat6/lib/tomcat-i18n-es.jar
/usr/share/tomcat6/lib/tomcat-i18n-ja.jar
/usr/share/tomcat6/lib/tomcat-coyote.jar
/usr/share/tomcat6/lib/tomcat-i18n-fr.jar
/usr/share/java/tomcat-i18n-es-6.0.24.jar
/usr/share/java/tomcat-coyote-6.0.24.jar
/usr/share/java/tomcat-i18n-es.jar
/usr/share/java/tomcat-juli-6.0.24.jar
/usr/share/java/tomcat-i18n-ja-6.0.24.jar
/usr/share/java/tomcat-i18n-fr-6.0.24.jar
/usr/share/java/tomcat-i18n-ja.jar
/usr/share/java/tomcat-coyote.jar
/usr/share/java/tomcat-juli.jar

/usr/share/tomcat6/lib/tomcat-i18n-es.jar
/usr/share/tomcat6/lib/tomcat-i18n-ja.jar
/usr/share/tomcat6/lib/tomcat-coyote.jar
/usr/share/tomcat6/lib/tomcat-i18n-fr.jar
/usr/share/java/tomcat-i18n-es-6.0.24.jar
/usr/share/java/tomcat-coyote-6.0.24.jar
/usr/share/java/tomcat-i18n-es.jar
/usr/share/java/tomcat-juli-6.0.24.jar
/usr/share/java/tomcat-i18n-ja-6.0.24.jar
/usr/share/java/tomcat-i18n-fr-6.0.24.jar
/usr/share/java/tomcat-i18n-ja.jar
/usr/share/java/tomcat-coyote.jar
/usr/share/java/tomcat-juli.jar
/usr/share/java/tomcat-i18n-fr.jar
/etc/cron.daily/tomcat6
/etc/default/tomcat6
/etc/init.d/tomcat6
/etc/tomcat6
/etc/tomcat6/tomcat-users.xml


So does apt-get install of tomcat not have webapps directory and here
the method of deploying applications different?
-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: actual IP not logged when requests come forwarded by a reverse proxy

2011-02-18 Thread Tapas Mishra
On Fri, Feb 18, 2011 at 9:57 PM, Dan Sheffner  wrote:
> Tapas,
>
> http://stderr.net/apache/rpaf/
>
> you want to enable this module and configure it correctly.
>
Really awesome information Dan.I did not knew it.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


actual IP not logged when requests come forwarded by a reverse proxy

2011-02-18 Thread Tapas Mishra
My apache2.conf
http://pastebin.com/uTVKt1wD
and apacche vhost file
http://pastebin.com/QDd3LDZ4
the apche2.conf and vhost file I gave the link are the machine on LAN
where site is actually hosted.
When some one from internet access the site then I expect a log of IP in
access.log
instead of which I see the IP of machine which is working as Reverse
Proxy server for all such requests.
What mistake did I do above.

--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: tomcat startup script not working at boot

2011-02-17 Thread Tapas Mishra
On Thu, Feb 17, 2011 at 7:43 PM, Peter Matulis
 wrote:
> On 11-02-17 09:03 AM, Tapas Mishra wrote:
>> I am having problems in starting tomcat at boot time with an automated
>> script of mine.
>
> [...]
>
> Why do you need a custom startup script?
>
> --
> Peter
>

Then how will it work?
I looked here
http://packages.ubuntu.com/lucid/all/tomcat6/filelist
can I see the file mentioned /etc/init.d/tomcat6
some where so that I understand where is my script failing?
--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


tomcat startup script not working at boot

2011-02-17 Thread Tapas Mishra
I am having problems in starting tomcat at boot time with an automated
script of mine.
The Tomcat I am using is 5.5 since Sakai installation of mine depends
on 5.5 version on any other version it will break.
So /opt/apache-tomcat-5.5.31 is where every thing is and in that
bin/startup.sh is what I am trying to start each time at boot.
After writing the script I have done update-rc.d defaults
and I checked from command line
/etc/init.d/tomcatstart
/etc/init.d/tomcat stop

does work
where myscript above refers to the script below

but the same does not work when I reboot the system.

#!/bin/bash
#
# tomcat
#
# chkconfig:
# description: Start up the Tomcat servlet engine.

# Source function library.
. /lib/lsb/init-functions

RETVAL=$?
CATALINA_HOME="/opt/apache-tomcat-5.5.31"

case "$1" in
start)
if [ -f $CATALINA_HOME/bin/startup.sh ];
then
echo $"Starting Tomcat"
/opt/apache-tomcat-5.5.31/bin/startup.sh

fi
;;
stop)
if [ -f $CATALINA_HOME/bin/shutdown.sh ];
then
echo $"Stopping Tomcat"
/opt/apache-tomcat-5.5.31/bin/shutdown.sh
fi
;;
*)
echo $"Usage: $0 {start|stop}"
exit 1
;;
esac
exit $RETVAL


any pointers?


-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: how to change mysql database encoding from latin to utf8

2011-02-17 Thread Tapas Mishra
On Thu, Feb 17, 2011 at 5:55 PM, Norbert Tretkowski
 wrote:
> Am Donnerstag, den 17.02.2011, 16:55 +0530 schrieb Tapas Mishra:
>> So how to achieve it.
>
> It's all documented in the MySQL Reference Manual:
>
> http://dev.mysql.com/doc/refman/5.1/en/charset.html
>
>
Thanks

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


how to change mysql database encoding from latin to utf8

2011-02-17 Thread Tapas Mishra
I checked
mysql> create database sakai;
Query OK, 1 row affected (0.00 sec)

mysql> show create database sakai;
+--+--+
| Database | Create Database  |
+--+--+
| sakai| CREATE DATABASE `sakai` /*!40100 DEFAULT CHARACTER SET latin1 */ |
+--+--+
1 row in set (0.00 sec)

Now section 7.0 of following page
https://confluence.sakaiproject.org/display/DOC/Sakai+2.7
says I should be having
CHARACTER SET utf8 */ |

for mysql on sakai to run.
So how to achieve it.
This is mysql 5.1+ on lucid 64 bit.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: [ubuntu-cloud] Cloud Setup

2011-02-12 Thread Tapas Mishra
On Fri, Feb 4, 2011 at 3:15 PM, Mark Shuttleworth  wrote:
> On 04/02/11 04:15, Ashok Kumar wrote:
>> How can we setup a private cloud for my organization.  Please  let me
>> know which OS and Server, we should use for it.
>
> Ashok, you're in the right place. The standard Ubuntu server install
> should work on most common x86 servers, there's a list of certified ones
> at http://www.ubuntu.com/certification/search/?search=server
while accessing above 12 feb 10:22 PM I got
Proxy Error

The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request GET /certification/search/.

Reason: Error reading from remote server
-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: recovery of virtual machines on KVM

2011-02-12 Thread Tapas Mishra
On Sat, Feb 12, 2011 at 10:15 PM, Tapas Mishra  wrote:
> On Thu, Feb 10, 2011 at 4:39 AM, Ahmed Kamal  
> wrote:
>> On 02/09/2011 08:39 PM, Tapas Mishra wrote:
>>>
>>> I  am having a virtualization setup via KVM on a Ubuntu 10.04 64 bit
>>> server.
>>>
>>> A recent dbus update cause a crash of my Host OS.It was a post install
>>> script of dbus which ultimately brought everything down.
>>>
>>> Now I have to basically format the host OS.My cause of concern are the
>>> virtual machines which were running on it when the environment was
>>> stable.Which were in separate LVM partitions.
>>>
>>> Some thing like
>>>
>>> /dev/virtualization/vm1
>>> /dev/virtualization/vm2
>>> /dev/virtualization/vm3
>>> /dev/virtualization/vm4
>>> If some one has experienced recovery of this sort in past let me know
>>> what did they do to get things back. All my Virtual Machines were on
>>> separate partition and in same VolumeGroup this volume group was on
>>> Host OS. Will formatting of HOST os clear the Virtual Machines also in
>>> my situation or just be re installing the host and importing the
>>> Virtual Machines via a tool such as virt-manager I will be able to get
>>> them back.
>>
>> It depends, if the VG is stored on the same disk and you reinstall you might
>> indeed destroy the VMs. Please don't proceed until you're sure of what
>> you're doing
>>
>
> Well I can not escape from restoring the production environment Ahmed.
>
> How ever by the time of writing this message I have restored every thing.
> I am sharing it here might help some one who are into similar mess.
>
> When you insert the Ubuntu CD it will ask you for partitioning schemes
> chose the guided partitioning scheme  what you have to make sure is
> not to format the volume group on which all the virtual machines
> reside.
>
> While creating these guests their locations were
> /etc/libvirt/qemu/*.xml
>
> To restore the Virtual Machine go to the /etc/libvirt/ directory of
> USB backup and which ever file  you find missing on the fresh install
> copy it after you have copied them
>
> virsh define /path/to/vm.xml to define that VM in new environment (you
> will see the VM might run without this but it is
> advisable to do above thing)
> My problem was a bit more difficult as the back I had was even buggy
> so the restoration did not      went very smooth.When  you are restoring
> the VMs then I noticed  some how permissions and        softlinks had
> broken.
>
>        Once you have finished copying the virtual machines permissions of
> xml files in
>        /etc/libvirt/qemu/
>        should be changed to 644 any other file if you see has permission 777
> needs to be 644 but the
>        same does not applies to directories.
Sorry here the permissions need to be 700 and  644 as I previously told.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: recovery of virtual machines on KVM

2011-02-12 Thread Tapas Mishra
On Thu, Feb 10, 2011 at 4:39 AM, Ahmed Kamal  wrote:
> On 02/09/2011 08:39 PM, Tapas Mishra wrote:
>>
>> I  am having a virtualization setup via KVM on a Ubuntu 10.04 64 bit
>> server.
>>
>> A recent dbus update cause a crash of my Host OS.It was a post install
>> script of dbus which ultimately brought everything down.
>>
>> Now I have to basically format the host OS.My cause of concern are the
>> virtual machines which were running on it when the environment was
>> stable.Which were in separate LVM partitions.
>>
>> Some thing like
>>
>> /dev/virtualization/vm1
>> /dev/virtualization/vm2
>> /dev/virtualization/vm3
>> /dev/virtualization/vm4
>> If some one has experienced recovery of this sort in past let me know
>> what did they do to get things back. All my Virtual Machines were on
>> separate partition and in same VolumeGroup this volume group was on
>> Host OS. Will formatting of HOST os clear the Virtual Machines also in
>> my situation or just be re installing the host and importing the
>> Virtual Machines via a tool such as virt-manager I will be able to get
>> them back.
>
> It depends, if the VG is stored on the same disk and you reinstall you might
> indeed destroy the VMs. Please don't proceed until you're sure of what
> you're doing
>

Well I can not escape from restoring the production environment Ahmed.

How ever by the time of writing this message I have restored every thing.
I am sharing it here might help some one who are into similar mess.

When you insert the Ubuntu CD it will ask you for partitioning schemes
chose the guided partitioning scheme  what you have to make sure is
not to format the volume group on which all the virtual machines
reside.

While creating these guests their locations were
/etc/libvirt/qemu/*.xml

To restore the Virtual Machine go to the /etc/libvirt/ directory of
USB backup and which ever file  you find missing on the fresh install
copy it after you have copied them

virsh define /path/to/vm.xml to define that VM in new environment (you
will see the VM might run without this but it is
advisable to do above thing)
My problem was a bit more difficult as the back I had was even buggy
so the restoration did not  went very smooth.When  you are restoring
the VMs then I noticed  some how permissions andsoftlinks had
broken.

Once you have finished copying the virtual machines permissions of
xml files in
/etc/libvirt/qemu/
should be changed to 644 any other file if you see has permission 777
needs to be 644 but the
same does not applies to directories.

When this was not there I noticed surprisingly the ssh connections to
the VMs after copying the   respective XML files back were dropping.By
the time I wrote down this it was confirmed the backup I had
permissions problem.

Files  in /etc/libvirt/qemu/*.xml on backup had permissions 777

where in the correct permissions should be 700 for these XMLs.
I want to mention 2 links if some comes across this thread should help them

https://www.redhat.com/archives/virt-tools-list/2011-February/msg00074.html

by changing the above xml files permission I observed our SSH
connection drop problem also got resolved.
How ever due to a DNS resolution failure the DomU social was failing
to restart many teams after each reboot of Dom0.So I had to manually
login and start it.
By  now I have successfully restored all the environment.



https://www.redhat.com/archives/virt-tools-list/2011-February/msg00060.html

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: want to use dnsmasq to resolve on localhost

2011-02-11 Thread Tapas Mishra
On Fri, Feb 11, 2011 at 4:27 PM, C S Shyam Sundar
 wrote:
> Your configuration is correct. However, Im unable to understand what you
> exactly need.
> Remove 127.0.0.1 in /etc/resolv.conf from the server which has dnsmasq
> installed. ( i presume, it is 192.168.1.2 ). Add other dns like 8.8.8.8 to
> query other servers from internet.
> In all the other nodes ( the vm's ) - add 192.168.1.2 in the
> /etc/resolv.conf in the first line.
> Im not sure if this solved your problem. If not, please elaborate on what
> you exactly want on this configuration.

Well you are right that line
nameserver 127.0.0.1
 was automatically getting deleted from /etc/resolv.conf
I wanted the localhost to respond to DNS queries which Apache was
sending to port 53.
I was not clear as how it will work
So in previously dnsmasq.conf I had uncommented it
listen-address=127.0.0.1
but now I have commented it.As you mentioned.
The error in my case I was having is due to a wrong mapping in /etc/hosts file.
 I had mapped 2 IPs to same VM which I after analysing with tcpdump
found where the requests were
going.
 I am in a DMZ where the requests do not go out of localhost to get resolved.
Hence I was in trouble as this is a production server.Thanks for your help.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


want to use dnsmasq to resolve on localhost

2011-02-10 Thread Tapas Mishra
I installed dnsmasq on my server but the query is still not being
answered from localhost.
In /var/log/syslog I see following

dnsmasq[1094]: no servers found in /var/run/dnsmasq/resolv.conf, will retry


Feb 10 16:17:44  dnsmasq[1094]: reading /var/run/dnsmasq/resolv.conf
Feb 10 16:17:44  dnsmasq[1094]: using nameserver 192.168.1.2#53

which is querying the DNS on Lan which does not have entries for the
Virtual Machines running on top of my server.

In my /etc/resolv.conf I have following when
nameserver 127.0.0.1
search somedomain.corporate.org

where as I want in /etc/resolv.conf

nameserver 127.0.0.1
nameserver 192.168.1.2
search somedomain.corporate.org

there are some queries which have to be answered only via localhost.It
is a reverse proxy situation.

The /etc/hosts file reads as follows

127.0.0.1   localhost
192.168.100.14  someserver
192.168.1.13  domu1.tapas.domain
192.168.1.14  domu2.tapas.domain
192.168.1.15  domu3.tapas.domain
192.168.1.16  domu4.tapas.domain
# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

Where 192.168.100.14 is the machine on which all this has to be done.
So what more should I be doing?
-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


error installing dnsproxy on Lucid

2011-02-10 Thread Tapas Mishra
I have a server in a DMZ where I do not have DNS entries so dnsproxy
is what I want to use here is what I did
the situation looks similar to this bug
https://bugs.launchpad.net/ubuntu/+source/dnsproxy/+bug/567008
but the fix I used did not helped me.


tapas@tapas:~# aptitude install pdnsd

Reading package lists... Done

Building dependency tree

Reading state information... Done

Reading extended state information

Initializing package states... Done

The following NEW packages will be installed:

  pdnsd resolvconf{a}

The following partially installed packages will be configured:

  dnsproxy

0 packages upgraded, 2 newly installed, 0 to remove and 0 not upgraded.

Need to get 354kB of archives. After unpacking 1,020kB will be used.

Do you want to continue? [Y/n/?] Y

Writing extended state information... Done

Get:1 http://us.archive.ubuntu.com/ubuntu/ lucid/universe pdnsd
1.2.7-par-1.1 [298kB]

Get:2 http://us.archive.ubuntu.com/ubuntu/ lucid/universe resolvconf
1.45ubuntu1 [56.4kB]

Fetched 354kB in 1s (254kB/s)

Preconfiguring packages ...

Selecting previously deselected package pdnsd.

(Reading database ... 50988 files and directories currently installed.)

Unpacking pdnsd (from .../pdnsd_1.2.7-par-1.1_amd64.deb) ...

Selecting previously deselected package resolvconf.

Unpacking resolvconf (from .../resolvconf_1.45ubuntu1_all.deb) ...

Processing triggers for man-db ...

Processing triggers for ureadahead ...

Setting up dnsproxy (1.15-6build1) ...

 * Starting dnsproxy dnsproxy

 /usr/sbin/dnsproxy: symbol lookup error:
/usr/sbin/dnsproxy: undefined symbol: event_sigcb



  [fail]

invoke-rc.d: initscript dnsproxy, action "start" failed.

dpkg: error processing dnsproxy (--configure):

 subprocess installed post-installation script returned error exit status 1

Setting up pdnsd (1.2.7-par-1.1) ...

 * Not starting pdnsd (disabled in /etc/default/pdnsd)



Setting up resolvconf (1.45ubuntu1) ...

mkdir: created directory `/var/run/resolvconf'

mkdir: created directory `/var/run/resolvconf/interface'

update-rc.d: warning: resolvconf stop runlevel arguments (none) do not
match LSB Default-Stop values (0 6)



Errors were encountered while processing:

 dnsproxy

E: Sub-process /usr/bin/dpkg returned an error code (1)

A package failed to install.  Trying to recover:

Setting up dnsproxy (1.15-6build1) ...

 * Starting dnsproxy dnsproxy

 /usr/sbin/dnsproxy: symbol lookup error:
/usr/sbin/dnsproxy: undefined symbol: event_sigcb



  [fail]

invoke-rc.d: initscript dnsproxy, action "start" failed.

dpkg: error processing dnsproxy (--configure):

 subprocess installed post-installation script returned error exit status 1

Errors were encountered while processing:

 dnsproxy

Reading package lists... Done

Building dependency tree

Reading state information... Done

Reading extended state information

Initializing package states... Done

Writing extended state information... Done









Tried to follow
http://ubuntuforums.org/showthread.php?t=82293
got following error

/etc/init.d/pdnsd restart

 * Stopping pdnsd

  [ OK ]

 * Not starting pdnsd (disabled in /etc/default/pdnsd)




 dpkg -s dnsproxy

Package: dnsproxy

Status: install ok half-configured

Priority: optional

Section: net

Installed-Size: 128

Maintainer: Ubuntu Developers 

Architecture: amd64

Version: 1.15-6build1

Depends: libc6 (>= 2.4), libevent-1.4-2 (>= 1.4.11-stable), adduser, lsb-base

Conffiles:

 /etc/dnsproxy.conf bb35257420128d7467aa5c607567fbb4

 /etc/default/dnsproxy 84b67faac53ebe6ce3ce376e2bae94f2

 /etc/init.d/dnsproxy 3f6547b5d88fc6fb2a46afb94ed84f42

Description: proxy for DNS queries

 dnsproxy forwards DNS queries to two previously configured nameservers:

 one for authoritative queries and another for recursive queries.

 The received answers are sent back to the client unchanged.

 No local caching is done.

 .

 Primary motivation for this project was the need to replace Bind servers with

 djbdns in an ISP environment. These servers get recursive queries from

 customers and authoritative queries from outside at the same IP address.

 Now it is possible to run dnscache and tinydns on the same machine with

 queries dispatched by dnsproxy.

 .

 Another possible scenario is a firewall where proxy queries should be

 forwarded to the real server in a DMZ.

Original-Maintainer: Patrick Schoenfeld 

Homepage: http://wolfermann.org/dnsproxy.html






dpkg --configure dnsproxy

Setting up dnsproxy (1.15-6build1) ...

 * Starting dnsproxy dnsproxy

 /usr/sbin/dnsproxy: symbol lookup error:
/usr/sbin/dnsproxy: undefined symbol: event_sigcb



  [fail]

invoke-rc.d: initscript dnsproxy, action "start" failed.

dpkg: error processing dnsproxy (--configure):

 subprocess installed post-installation script returned error exit status 1

Errors were encountered while processing:

 dnspro

Re: ssh connections dropping

2011-02-10 Thread Tapas Mishra
On Thu, Feb 10, 2011 at 4:43 PM, Tapas Mishra  wrote:
> Here is a situation I have just restored Ubuntu server which had kvm
> running on it.
> Every thing went fine and I copied the /etc/libvirt/qemu/vm.xml from
> backup to new installation where it was previously running.
> But this time I see that SSH connections to the guest drop after some time.
> Even a reboot does not help.
> I have to shut down the guest and wait for a second or two and the power it 
> on.
>
> The error that I get is
>
> ssh -vvv root@192.168.1.5
> OpenSSH_5.1p1 Debian-5ubuntu1, OpenSSL 0.9.8g 19 Oct 2007
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug2: ssh_connect: needpriv 0
> debug1: Connecting to 192.168.1.5 [192.168.1.5] port 22.
> debug1: connect to address 192.168.1.5 port 22: No route to host--
>
>
>
> The sshd_config file on guest is here
>
> # Package generated configuration file
> # See the sshd_config(5) manpage for details
>
> # What ports, IPs and protocols we listen for
> Port 22
> # Use these options to restrict which interfaces/protocols sshd will bind to
> #ListenAddress ::
> #ListenAddress 0.0.0.0
> Protocol 2
> # HostKeys for protocol version 2
> HostKey /etc/ssh/ssh_host_rsa_key
> HostKey /etc/ssh/ssh_host_dsa_key
> #Privilege Separation is turned on for security
> UsePrivilegeSeparation yes
>
> # Lifetime and size of ephemeral version 1 server key
> KeyRegenerationInterval 3600
> ServerKeyBits 768
>
> # Logging
> SyslogFacility AUTH
> LogLevel INFO
>
> # Authentication:
> LoginGraceTime 120
> PermitRootLogin yes
> StrictModes yes
>
> RSAAuthentication yes
> PubkeyAuthentication yes
> #AuthorizedKeysFile %h/.ssh/authorized_keys
>
> # Don't read the user's ~/.rhosts and ~/.shosts files
> IgnoreRhosts yes
> # For this to work you will also need host keys in /etc/ssh_known_hosts
> RhostsRSAAuthentication no
> # similar for protocol version 2
> HostbasedAuthentication no
> # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
> #IgnoreUserKnownHosts yes
>
> # To enable empty passwords, change to yes (NOT RECOMMENDED)
> PermitEmptyPasswords no
>
> # Change to yes to enable challenge-response passwords (beware issues with
> # some PAM modules and threads)
> ChallengeResponseAuthentication no
>
> # Change to no to disable tunnelled clear text passwords
> #PasswordAuthentication yes
>
> # Kerberos options
> #KerberosAuthentication no
> #KerberosGetAFSToken no
> #KerberosOrLocalPasswd yes
> #KerberosTicketCleanup yes
>
> # GSSAPI options
> #GSSAPIAuthentication no
> #GSSAPICleanupCredentials yes
>
> X11Forwarding yes
> X11DisplayOffset 10
> PrintMotd no
> PrintLastLog yes
> TCPKeepAlive yes
> #UseLogin no
>
> #MaxStartups 10:30:60
> #Banner /etc/issue.net
>
> # Allow client to pass locale environment variables
> AcceptEnv LANG LC_*
>
> Subsystem sftp /usr/lib/openssh/sftp-server
>
> # Set this to 'yes' to enable PAM authentication, account processing,
> # and session processing. If this is enabled, PAM authentication will
> # be allowed through the ChallengeResponseAuthentication and
> # PasswordAuthentication.  Depending on your PAM configuration,
> # PAM authentication via ChallengeResponseAuthentication may bypass
> # the setting of "PermitRootLogin without-password".
> # If you just want the PAM account and session checks to run without
> # PAM authentication, then enable this but set PasswordAuthentication
> # and ChallengeResponseAuthentication to 'no'.
> UsePAM yes
>
>
>
> Reboot of the guest OS does not help I have to shutdown
>  it and after waiting for some time I start it again.
>


Carsten Aulbert 

On Thu, Feb 10, 2011 at 4:51 PM, Carsten Aulbert
 wrote:
> Hi
>
> On Thursday 10 February 2011 12:13:16 Tapas Mishra wrote:
>> debug1: Connecting to 192.168.1.5 [192.168.1.5] port 22.
>> debug1: connect to address 192.168.1.5 port 22: No route to host--
>
> This indicates your client don't know how to talk to 192.168.1.5 (or the
> "network" in-between doesn't know).
Yes I understand this part that is why I am concerned.
> Is the machine really fully running? Is the network working?  Is routing
> correct?
This part is correct I can confirm here.






On Thu, Feb 10, 2011 at 5:00 PM, Hugo Serrano  wrote:
> Hi.
>
> Check the IP address in the guest machine.
>
> Do you got static IP?
Yes
> Is there any dhclient process running?
No

Any other suggestions here?

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: recovery of virtual machines on KVM

2011-02-10 Thread Tapas Mishra
On Thu, Feb 10, 2011 at 1:40 PM, Alvin  wrote:
> On Wednesday 09 February 2011 19:39:57 Tapas Mishra wrote:
>> I  am having a virtualization setup via KVM on a Ubuntu 10.04 64 bit
>> server.
>>
>> A recent dbus update cause a crash of my Host OS.It was a post install
>> script of dbus which ultimately brought everything down.
>>
>> Now I have to basically format the host OS.My cause of concern are the
>> virtual machines which were running on it when the environment was
>> stable.Which were in separate LVM partitions.
>>
>> Some thing like
>>
>> /dev/virtualization/vm1
>> /dev/virtualization/vm2
>> /dev/virtualization/vm3
>> /dev/virtualization/vm4
>> If some one has experienced recovery of this sort in past let me know
>> what did they do to get things back. All my Virtual Machines were on
>> separate partition and in same VolumeGroup this volume group was on
>> Host OS. Will formatting of HOST os clear the Virtual Machines also in
>> my situation or just be re installing the host and importing the
>> Virtual Machines via a tool such as virt-manager I will be able to get
>> them back.
>
> Before your reinstall, dump the configuration of your virtual machines like
> this:
> $ virsh dumpxml vm1 > vm1.xml
> After reinstall, redefine the machines
> $ virsh define vm1.xml
>
> It's that simple, but of course you have to leave your LVM volumes in place
> and make sure your host has the same network interfaces (as defined in the
> xml).
>
Not possible because the host OS where I was getting this problem I
was not even able to login.
So what I did is a fresh install and copied the xml files from a
backup I had on a USB is that not the correct way to do?
I just noticed I am unable to connect to guest OS after this i.e. when
the host OS reboots and then I immedialtely do an SSH to the guest
from any machine within my network I am able to do so but after 5-10
minutes if I again do an ssh to the same guest then I get host not
found error.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


ssh connections dropping

2011-02-10 Thread Tapas Mishra
Here is a situation I have just restored Ubuntu server which had kvm
running on it.
Every thing went fine and I copied the /etc/libvirt/qemu/vm.xml from
backup to new installation where it was previously running.
But this time I see that SSH connections to the guest drop after some time.
Even a reboot does not help.
I have to shut down the guest and wait for a second or two and the power it on.

The error that I get is

ssh -vvv root@192.168.1.5
OpenSSH_5.1p1 Debian-5ubuntu1, OpenSSL 0.9.8g 19 Oct 2007
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to 192.168.1.5 [192.168.1.5] port 22.
debug1: connect to address 192.168.1.5 port 22: No route to host--



The sshd_config file on guest is here

# Package generated configuration file
# See the sshd_config(5) manpage for details

# What ports, IPs and protocols we listen for
Port 22
# Use these options to restrict which interfaces/protocols sshd will bind to
#ListenAddress ::
#ListenAddress 0.0.0.0
Protocol 2
# HostKeys for protocol version 2
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_dsa_key
#Privilege Separation is turned on for security
UsePrivilegeSeparation yes

# Lifetime and size of ephemeral version 1 server key
KeyRegenerationInterval 3600
ServerKeyBits 768

# Logging
SyslogFacility AUTH
LogLevel INFO

# Authentication:
LoginGraceTime 120
PermitRootLogin yes
StrictModes yes

RSAAuthentication yes
PubkeyAuthentication yes
#AuthorizedKeysFile %h/.ssh/authorized_keys

# Don't read the user's ~/.rhosts and ~/.shosts files
IgnoreRhosts yes
# For this to work you will also need host keys in /etc/ssh_known_hosts
RhostsRSAAuthentication no
# similar for protocol version 2
HostbasedAuthentication no
# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
#IgnoreUserKnownHosts yes

# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords no

# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication no

# Change to no to disable tunnelled clear text passwords
#PasswordAuthentication yes

# Kerberos options
#KerberosAuthentication no
#KerberosGetAFSToken no
#KerberosOrLocalPasswd yes
#KerberosTicketCleanup yes

# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes

X11Forwarding yes
X11DisplayOffset 10
PrintMotd no
PrintLastLog yes
TCPKeepAlive yes
#UseLogin no

#MaxStartups 10:30:60
#Banner /etc/issue.net

# Allow client to pass locale environment variables
AcceptEnv LANG LC_*

Subsystem sftp /usr/lib/openssh/sftp-server

# Set this to 'yes' to enable PAM authentication, account processing,
# and session processing. If this is enabled, PAM authentication will
# be allowed through the ChallengeResponseAuthentication and
# PasswordAuthentication.  Depending on your PAM configuration,
# PAM authentication via ChallengeResponseAuthentication may bypass
# the setting of "PermitRootLogin without-password".
# If you just want the PAM account and session checks to run without
# PAM authentication, then enable this but set PasswordAuthentication
# and ChallengeResponseAuthentication to 'no'.
UsePAM yes



Reboot of the guest OS does not help I have to shutdown
 it and after waiting for some time I start it again.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


recovery of virtual machines on KVM

2011-02-09 Thread Tapas Mishra
I  am having a virtualization setup via KVM on a Ubuntu 10.04 64 bit server.

A recent dbus update cause a crash of my Host OS.It was a post install
script of dbus which ultimately brought everything down.

Now I have to basically format the host OS.My cause of concern are the
virtual machines which were running on it when the environment was
stable.Which were in separate LVM partitions.

Some thing like

/dev/virtualization/vm1
/dev/virtualization/vm2
/dev/virtualization/vm3
/dev/virtualization/vm4
If some one has experienced recovery of this sort in past let me know
what did they do to get things back. All my Virtual Machines were on
separate partition and in same VolumeGroup this volume group was on
Host OS. Will formatting of HOST os clear the Virtual Machines also in
my situation or just be re installing the host and importing the
Virtual Machines via a tool such as virt-manager I will be able to get
them back.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: server keeps updating openjdk

2011-02-09 Thread Tapas Mishra
On Wed, Feb 9, 2011 at 3:25 PM, Michael Zoet  wrote:
>
> Am Di, 8.02.2011, 19:38 schrieb Tapas Mishra:
> ...
>>>
>> Michael thanks for your message.I do not want to do any more
>> experiment on my system.
>> I do have an old backup with all old copies which is about 15-20 days
>> old with an old kernel.
>> Right now every thing on my server is working perfectly fine.So I am
>> taking a strong backup right now.
>>
>> Though right now every thing is working very fine.So I do not have any
>> plans of any more upgrades.
>>  Will restoring the old backup make any sense for my case or should I
>> leave it at this stage.
>>
>
> Really no one can answer you that questions for you! It all depends on how
> you handle things. If you ask for my personal opinion: I would do
> everything to avoid a reinstall of a Unix/Linux server system, that is in
> production use. Even writing back old backups. Your problem with the dbus
> and kernel packages seems solvable for me. If your server works regardless
> of the package problems I would take the time to resolve these problems.
>
> I know you will try to ask me, what you can do ;-). When I have the time I
> will post you the corresponding "dpkg -i --forc-XYZ ..." command lines
> that might do the trick. But it might be faster if you read something
> about the package manager tools aptitude, apt-get and dpkg.
>
> Michael
>
>
> --
Ok I have posted this problem here
and followed completely
https://answers.launchpad.net/ubuntu/+question/144560
seems it has worked.
Waiting for the last messages.
This seems to be a bug in in dbus as explained here
https://bugs.launchpad.net/ubuntu/+source/dbus/+bug/552404
and a patch here
https://launchpad.net/~ts.sch.gr/+archive/ppa/+sourcepub/1450007/+listing-archive-extra
but in the patch which one should I install I am not clear with that part.

What I did to solve this is

Looking at dbus.postinst, commented

/var/lib/dpkg/info/dbus.postinst
 following 2 lines

 dbus-uuidgen --ensure

  dbus-send --print-reply --system --type=method_call \
--dest=org.freedesktop.DBus \
/ org.freedesktop.DBus.ReloadConfig > /dev/null

and then dpkg-configure -a
and aptitude safe-upgrade has gone without any errors.

It seems a bug in dbus script which is on Lucid 10.04 server editions
luckily has been fixed.
---

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


package manager trouble shooting

2011-02-08 Thread Tapas Mishra
I had a problem with some upgrades of mine.So I am following a guide here
https://help.ubuntu.com/community/PackageManagerTroubleshootingProcedure
the question is posted here
https://answers.launchpad.net/ubuntu/+question/144560
Please have a look if some one can suggest any thing.
It is a production server.


--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: server keeps updating openjdk

2011-02-08 Thread Tapas Mishra
On Tue, Feb 8, 2011 at 9:14 PM, Michael Zoet  wrote:
>
> Am Di, 8.02.2011, 13:39 schrieb Tapas Mishra:
>
>>
>>
>>
>>> (2) What did you do to get into this situation?
>> I do an aptitude safe-upgrade (which should just install the latest
>> packages of same release I do not want to change version of OS)
>>
>
> I think you misunderstood the use of safe-upgrade! A normal aptitude (or
> apt-get or synaptic or dselect or what ever package management tool you
> use) will NEVER (really NEVER) install a new major Ubuntu Version by
> itself! That is something you have to trigger. Everytime you want to
> update to a major you (or a script) has to change the sources.list for
> that!
>
> I think in your case by using the safe-upgrade option there where some
> package dependency problems. You should have tried the full-upgrade
> option! But now with a messed up kernel package it is a little bit
> difficult to clean it up.
>
> In your case I would download the kernel and dbus package manually and
> install it with "dpkg -i  --force-XYZ>". There are various
> force options to force the package installation when an error occurred.
> But be aware that this can be very dangerous to your system! Read the
> manpage of dpkg carefully, especially the force options.
>
> Hope this helps,
>
> Michael
>
>
>
>
>
Michael thanks for your message.I do not want to do any more
experiment on my system.
I do have an old backup with all old copies which is about 15-20 days
old with an old kernel.
Right now every thing on my server is working perfectly fine.So I am
taking a strong backup right now.

Though right now every thing is working very fine.So I do not have any
plans of any more upgrades.
 Will restoring the old backup make any sense for my case or should I
leave it at this stage.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: server keeps updating openjdk

2011-02-08 Thread Tapas Mishra
On Tue, Feb 8, 2011 at 4:04 PM, Carsten Aulbert
 wrote:
> Hi
>
> On Tuesday 08 February 2011 11:29:00 Tapas Mishra wrote:
>>
>> I have searched this problem but I am not able to understand what to
>> do in this situation.
>
> I think to find out you need to generate the "correct" error message.
>
> List of questions:
Ok thanks for pointing these out


> (1) What apt sources are you using? (/etc/apt/sources.list plus possibly
> anything under /etc/apt/sources.list.d)
To be able to have this message readable I posted the output here
or sources.list
http://paste.ubuntu.com/564379/
my sources.list.d file is blank


> (2) What did you do to get into this situation?
I do an aptitude safe-upgrade (which should just install the latest
packages of same release I do not want to change version of OS)

> (3) do you see anything in the files under /var/log indicating what's wrong?
I notice in daemon.log

 15:41:19mountd[1506]: Caught signal 15, un-registering and exiting.
Feb  6 00:04:03init: ssh main process (17340) terminated with status 255
Feb  8 15:54:27dnsmasq[13683]: started, version 2.52 cachesize 150
Feb  8 15:54:27dnsmasq[13683]: compile time options: IPv6
GNU-getopt DBus I18N DHCP TFTP
Feb  8 15:54:27dnsmasq-dhcp[13683]: DHCP, IP range 192.168.122.2
-- 192.168.122.254, lease time 1h
Feb  8 15:54:27dnsmasq[13683]: failed to access /etc/resolv.conf:
Permission denied
Feb  8 15:54:27dnsmasq[13683]: failed to load names from
/etc/hosts: Permission denied
Feb  8 15:54:30init: eucalyptus-nc main process ended, respawning

Feb  8 17:38:32init: last message repeated 29 times
Feb  8 17:39:32init: last message repeated 29 times
Feb  8 17:40:32init: last message repeated 29 times
Feb  8 17:41:32init: last message repeated 29 times
Feb  8 17:42:32init: last message repeated 29 times
Feb  8 17:43:32init: last message repeated 29 times
Feb  8 17:44:32init: last message repeated 29 times
Feb  8 17:45:32init: last message repeated 29 times
Feb  8 17:46:32init: last message repeated 29 times
Feb  8 17:47:33init: last message repeated 29 times
Feb  8 17:48:33init: last message repeated 30 times
Feb  8 17:49:33init: last message repeated 29 times
Feb  8 17:50:33init: last message repeated 29 times
Feb  8 17:51:33init: last message repeated 29 times


in /var/log/cron-apt/log

CRON-APT LINE: /usr/bin/apt-get update -o quiet=2
W: Failed to fetch
http://us.archive.ubuntu.com/ubuntu/dists/lucid-updates/universe/binary-amd64/Packages.bz2
 Hash Sum mismatch
W: Failed to fetch
http://us.archive.ubuntu.com/ubuntu/dists/lucid-updates/universe/source/Sources.bz2
 Hash Sum mismatch
E: Some index files failed to download, they have been ignored, or old
ones used instead.

and a file /var/log/apt/history.log

Start-Date: 2011-02-08  15:08:37
Install: linux-image-2.6.32-28-server (2.6.32-28.55)
Upgrade: linux-server (2.6.32.21.22, 2.6.32.28.32), smbfs
(3.4.7~dfsg-1ubuntu3.2, 3.4.7~dfsg-1ubuntu3.3), at (3.1.11-1ubuntu5,
3.1.11-1ubuntu5.1), libwbclient0 (3.4.7~dfsg-1ubuntu3.2,
3.4.7~dfsg-1ubuntu3.3), icedtea-6-jre-cacao (6b18-1.8-0ubuntu1,
6b20-1.9.5-0ubuntu1~10.04.1), openjdk-6-jre-headless
(6b18-1.8-0ubuntu1, 6b20-1.9.5-0ubuntu1~10.04.1), linux-firmware
(1.34, 1.34.3), samba-common (3.4.7~dfsg-1ubuntu3.2,
3.4.7~dfsg-1ubuntu3.3), samba (3.4.7~dfsg-1ubuntu3.2,
3.4.7~dfsg-1ubuntu3.3), linux-image-server (2.6.32.21.22,
2.6.32.28.32), samba-common-bin (3.4.7~dfsg-1ubuntu3.2,
3.4.7~dfsg-1ubuntu3.3)
Error: Sub-process /usr/bin/dpkg returned an error code (1)
End-Date: 2011-02-08  15:10:19

Start-Date: 2011-02-08  15:17:25
Error: Sub-process /usr/bin/dpkg returned an error code (1)
End-Date: 2011-02-08  15:17:44

Start-Date: 2011-02-08  15:18:15
Error: Sub-process /usr/bin/dpkg returned an error code (1)
End-Date: 2011-02-08  15:18:34

Start-Date: 2011-02-08  15:25:19
Error: Sub-process /usr/bin/dpkg returned an error code (1)
End-Date: 2011-02-08  15:25:38



> (4) what is 'dpkg --configure -a' complaining about?
here is the output of above command


Setting up dbus (1.2.16-2ubuntu4.1) ...
The system user `messagebus' already exists. Exiting.
Setting up grub-pc (1.98-1ubuntu10) ...
Setting up linux-image-2.6.32-28-server (2.6.32-28.55) ...
Failed to open connection to "system" message bus: Did not receive a
reply. Possible causes include: the remote application did not send a
reply, the message bus security policy blocked the reply, the reply
timeout expired, or the network connection was broken.
dpkg: error processing dbus (--configure):
 subprocess installed post-installation script returned error exit status 1
dpkg: dependency problems prevent configuration of hal:
 hal depends on dbus (>= 0.61); however:
  Package dbus is not configured yet.
dpkg: error processing hal (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems

Re: server keeps updating openjdk

2011-02-08 Thread Tapas Mishra
On Tue, Feb 8, 2011 at 3:38 PM, Michael Zoet  wrote:
>
> Am Di, 8.02.2011, 10:56 schrieb Tapas Mishra:
> ...
>>
>>
>> I did as you said here and then again did aptitude safe-upgrade things
>> finished with some errrors,
>
> Why are you doing a safe-upgrade!!! In previous mails you should have
> realized that safe-upgrade is sometimes a bad choice! Do not use it if you
> have problems! First of all you need to fix your dbus installation problem
> on this system and after that you can go on. There are so much package
> dependencies for dbus that resolving this must be you priority.
>
I have searched this problem but I am not able to understand what to
do in this situation.

--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: server keeps updating openjdk

2011-02-08 Thread Tapas Mishra
On Tue, Feb 8, 2011 at 3:51 PM, Carsten Aulbert
 wrote:
> Hi
>
> On Tuesday 08 February 2011 11:13:50 Michael Zoet wrote:
>
>> Nothing of that! Tapas needs first to fix his package dependency problems!
>> libvirt does not work because there are some unresolved package
>> dependencies...
>
> sh** I should have read the error message properly.
>
> Question remains what Tapas wanted to perform in the first place, is this an
> upgrade attempt from karmic to lucid or why could dbus break so badly?
It is already a lucid server I do not want to perform an update from
lucid to maverick just want to update the packages.
I have no clue to the dbus failed problem in my previous message.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: server keeps updating openjdk

2011-02-08 Thread Tapas Mishra
On Tue, Feb 8, 2011 at 3:31 PM, Carsten Aulbert
 wrote:
> Hi
>
> On Tuesday 08 February 2011 10:56:31 Tapas Mishra wrote:
>
>> The unfortunate part is all the Virtual Machines running on it are
>> production machines.
>> So this really needs to be resolved.
>
> and now I'm probably not being of much help anymore as I've never user virt-
> manager in production, only on one machine where it automatically broke the
> networking seriously.
>
> My guess is that virt-manager is currently not running or need to be
> configured somehow, but more than that, I do not know.
>
> Sorry
>
May be some one from Ubuntu server team watching this thread may note this

currently what is happening is when I do aptitude safe-upgrade
then following errors are being encountered

Reading package lists...
Building dependency tree...
Reading state information...
Reading extended state information...
Initializing package states...
The following partially installed packages will be configured:
  avahi-daemon avahi-utils consolekit dbus dbus-x11 eucalyptus-cc
  eucalyptus-cloud eucalyptus-common eucalyptus-gl eucalyptus-java-common
  eucalyptus-nc eucalyptus-sc eucalyptus-walrus gnome-keyring grub-pc hal
  libvirt-bin linux-image-2.6.32-28-server linux-image-server linux-server
  udisks uec-component-listener
0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0B of archives. After unpacking 0B will be used.
Setting up linux-image-2.6.32-28-server (2.6.32-28.55) ...
Running depmod.
update-initramfs: Generating /boot/initrd.img-2.6.32-28-server
Running postinst hook script /usr/sbin/update-grub.
Generating grub.cfg ...
Found linux image: /boot/vmlinuz-2.6.32-28-server
Found initrd image: /boot/initrd.img-2.6.32-28-server
Found linux image: /boot/vmlinuz-2.6.32-21-server
Found initrd image: /boot/initrd.img-2.6.32-21-server
Found memtest86+ image: /boot/memtest86+.bin
/etc/grub.d/README: 2: All: not found
/etc/grub.d/README: 4: 00_*:: not found
/etc/grub.d/README: 5: 10_*:: not found
/etc/grub.d/README: 6: Syntax error: "(" unexpected
User postinst hook script [/usr/sbin/update-grub] exited with value 2
dpkg: error processing linux-image-2.6.32-28-server (--configure):
 subprocess installed post-installation script returned error exit status 2
Setting up dbus (1.2.16-2ubuntu4.1) ...
The system user `messagebus' already exists. Exiting.
Failed to open connection to "system" message bus: Did not receive a
reply. Possible causes include: the remote application did not send a
reply, the message bus security policy blocked the reply, the reply
timeout expired, or the network connection was broken.
dpkg: error processing dbus (--configure):
 subprocess installed post-installation script returned error exit status 1
dpkg: dependency problems prevent configuration of avahi-daemon:
 avahi-daemon depends on dbus (>= 1.2.16-0ubuntu3); however:
  Package dbus is not configured yet.
dpkg: error processing avahi-daemon (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of avahi-utils:
 avahi-utils depends on avahi-daemon; however:
  Package avahi-daemon is not configured yet.
dpkg: error processing avahi-utils (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of consolekit:
 consolekit depends on dbus (>= 1.1.2); however:
  Package dbus is not configured yet.
dpkg: error processing consolekit (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of dbus-x11:
 dbus-x11 depends on dbus; however:
  Package dbus is not configured yet.
dpkg: error processing dbus-x11 (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of gnome-keyring:
 gnome-keyring depends on dbus-x11; however:
  Package dbus-x11 is not configured yet.
dpkg: error processing gnome-keyring (--configure):
 dependency problems - leaving unconfigured
Setting up grub-pc (1.98-1ubuntu10) ...
Installation finished. No error reported.
Generating grub.cfg ...
Found linux image: /boot/vmlinuz-2.6.32-28-server
Found initrd image: /boot/initrd.img-2.6.32-28-server
Found linux image: /boot/vmlinuz-2.6.32-21-server
Found initrd image: /boot/initrd.img-2.6.32-21-server
Found memtest86+ image: /boot/memtest86+.bin
File descriptor 3 (pipe:[15520517]) leaked on lvs invocation. Parent
PID 28870: /bin/sh
/etc/grub.d/README: 2: All: not found
/etc/grub.d/README: 4: 00_*:: not found
/etc/grub.d/README: 5: 10_*:: not found
/etc/grub.d/README: 6: Syntax error: "(" unexpected
dpkg: error processing grub-pc (--configure):
 subprocess installed post-installation script returned error exit status 2
dpkg: dependency problems prevent configuration of hal:
 hal depends on dbus (>= 0.61); however:
  Package dbus is not configured yet.
dpkg: error processing

Re: server keeps updating openjdk

2011-02-08 Thread Tapas Mishra
On Tue, Feb 8, 2011 at 3:21 PM, Carsten Aulbert
 wrote:
> Hi
>
> On Tuesday 08 February 2011 10:46:09 Tapas Mishra wrote:
>>
>> Yes this does work for me and I have the file with me.
>> But where do I put it?
>>
>
> /var/cache/apt/archives
>
> Cheers
>
> Carsten
>


I did as you said here and then again did aptitude safe-upgrade things
finished with some errrors,
my virt-manager stopped working here

 dependency problems - leaving unconfigured
Errors were encountered while processing:
 dbus
 hal
 libvirt-bin
 udisks
 consolekit
 dbus-x11
 grub-pc
 linux-image-2.6.32-28-server
 avahi-daemon
 uec-component-listener
 avahi-utils
 eucalyptus-common
 eucalyptus-java-common
 gnome-keyring
 eucalyptus-walrus
 eucalyptus-nc
 eucalyptus-gl
 eucalyptus-cc
 eucalyptus-cloud
 linux-image-server
 linux-server
 eucalyptus-sc
Reading package lists... Done
Building dependency tree
Reading state information... Done
Reading extended state information
Initializing package states... Done
Writing extended state information... Done


Now after this update when do an SSH to the system and
type virt-manager
I get following error





Unable to open a connection to the libvirt management daemon.

Libvirt URI is: qemu:///system

Verify that:
 - The 'libvirt-bin' package is installed
 - The 'libvirtd' daemon has been started
 - That you have access to '/var/run/libvirt/libvirt-sock'



after this I checked


 dpkg -s libvirt-bin
Package: libvirt-bin
Status: install ok unpacked
Priority: optional
Section: admin
Installed-Size: 2000
Maintainer: Ubuntu Developers 
Architecture: amd64
Source: libvirt
Version: 0.7.5-5ubuntu27.8
Config-Version: 0.7.5-5ubuntu27
Depends: libapparmor1, libavahi-client3 (>= 0.6.16), libavahi-common3
(>= 0.6.16), libblkid1 (>= 2.15~rc2-1ubuntu1), libc6 (>= 2.8),
libcap-ng0, libdevmapper1.02.1 (>= 2:1.02.20), libgcrypt11 (>= 1.4.2),
libgnutls26 (>= 2.7.14-0), libparted0debian1 (>= 2.2-1), libpciaccess0
(>= 0), libreadline6 (>= 6.0), libsasl2-2, libudev0 (>= 147), libuuid1
(>= 2.16), libvirt0 (= 0.7.5-5ubuntu27.8), libxen3, libxml2 (>=
2.7.4), upstart-job, adduser, logrotate, hal, bridge-utils,
netcat-openbsd, dnsmasq-base (>= 2.46-1), iptables
Recommends: qemu-kvm (>= 0.11.0-0ubuntu6)
Suggests: policykit-1, apparmor (>= 2.3+1289-0ubuntu14)
Enhances: kvm, qemu, xen
Conffiles:
 /etc/apparmor.d/abstractions/libvirt-qemu eeda906157a83d5a4ff3f6b4314c4fec
 /etc/apparmor.d/libvirt/TEMPLATE b0dfa704c6297fd9a4e68f0137c6be88
 /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper 3ccee9d22c44130f58f8ceb3518c4135
 /etc/apparmor.d/usr.sbin.libvirtd 183e34e548d52d8fa919768d95703219
 /etc/cron.daily/libvirt-bin 8a6518c8f8082e9b2203f34215f8898e
 /etc/init/libvirt-bin.conf e0b61b177a91d459e7a7cfad8381b640
 /etc/default/libvirt-bin f40696fff3196096b3056c46f7c7ad23
 /etc/logrotate.d/libvirtd dad6136fdb3db0b781839a43f865fed9
 /etc/libvirt/libvirtd.conf aa61a2fe31f47c351927fbc38aefc9f2
 /etc/libvirt/lxc.conf d9ffe9ac12b7fb251fc5a7ab64775397
 /etc/libvirt/qemu/networks/default.xml b104f600c0e029c3d3412f5df6090a31
 /etc/libvirt/qemu.conf e727fc0f281be72a136d713872a96b54
 /etc/sasl2/libvirt.conf ef5f31dd25967d2de2a830bef486f97c
Description: the programs for the libvirt library
 Libvirt is a C toolkit to interact with the virtualization capabilities
 of recent versions of Linux (and other OSes). The library aims at providing
 a long term stable C API for different virtualization mechanisms. It currently
 supports QEMU, KVM, XEN, OpenVZ, LXC, and VirtualBox.
 .
 This package contains the supporting binaries to use with libvirt
Homepage: http://libvirt.org
Original-Maintainer: Debian Libvirt Maintainers


The unfortunate part is all the Virtual Machines running on it are
production machines.
So this really needs to be resolved.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: server keeps updating openjdk

2011-02-08 Thread Tapas Mishra
On Tue, Feb 8, 2011 at 3:06 PM, Carsten Aulbert
 wrote:
> Hi
>
> On Tuesday 08 February 2011 10:28:45 Tapas Mishra wrote:
>> Like this the above output grows till I got 70th time
>> Get:70 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
>> openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
>> then I had to forcefully stop the update from happening.
>> What is causing this problem?
>
> This looks like a download problem, I just tested and both amd64 and i386
> files download fine manually:
>
> wget http://us.archive.ubuntu.com/ubuntu/pool/main/o/openjdk-6/openjdk-6-jre-
> headless_6b20-1.9.5-0ubuntu1~10.04.1_amd64.deb
>
> can you test if that works for you?
Yes this does work for me and I have the file with me.
But where do I put it?
> in principle you could work around this by placing the manually downloaded
> file into the appropriate place and /var but that won't tell you/us why apt
> failed here.


--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


server keeps updating openjdk

2011-02-08 Thread Tapas Mishra
I logged in as root on a server of mine and did aptitude saf-upgrade

>From one hour I am seeing the server is just doing an openjdk update
and after installing it ,it starts downloading that again and keeps on
doing
I have no idea as what has caused this error.


aptitude safe-upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Reading extended state information
Initializing package states... Done
Writing extended state information... Done
Resolving dependencies...
The following NEW packages will be installed:
  linux-image-2.6.32-28-server{a}
The following packages will be upgraded:
  at icedtea-6-jre-cacao libwbclient0 linux-firmware
linux-image-server linux-server openjdk-6-jre-headless samba
samba-common samba-common-bin smbfs
The following partially installed packages will be configured:
  avahi-daemon avahi-utils consolekit dbus dbus-x11 eucalyptus-cc
eucalyptus-cloud eucalyptus-common eucalyptus-gl
eucalyptus-java-common eucalyptus-nc
  eucalyptus-sc eucalyptus-walrus gnome-keyring grub-pc hal
libvirt-bin udisks uec-component-listener
11 packages upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 79.6MB/82.6MB of archives. After unpacking 135MB will be used.
Do you want to continue? [Y/n/?] Y
Writing extended state information... Done
Get:1 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:2 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:3 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:4 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:5 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:6 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:7 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:8 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:9 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:10 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:11 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:12 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:13 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
Get:14 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]


Like this the above output grows till I got 70th time
Get:70 http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main
openjdk-6-jre-headless 6b20-1.9.5-0ubuntu1~10.04.1 [25.6MB]
then I had to forcefully stop the update from happening.
What is causing this problem?

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: dependency problem while doing safe-upgrade

2011-02-04 Thread Tapas Mishra
On Fri, Feb 4, 2011 at 4:21 PM, Michael Zoet  wrote:
> Am Fr, 4.02.2011, 09:11 schrieb Tapas Mishra:
>> I executed aptitude safe-upgrade on 10.04 64 bit server here are the
>> dependency problems I met
>>
>> http://paste.ubuntu.com/562399/
>>
>> Let me know if some one can point out what should I be checking.
>>
>
> You should check why the dbus packages makes problems. The simples would
> be doing a launchpad bug search and see if other have (or had) the same
> problem. Most of the time there is a solution posted.
>
> Michael
>
>
> P.S.: you have always the option to install a package with "dpkg -i ..."
> and using various force options. But as always you should know what you
> are doing.
>
>
I did aptitutde safe-upgrade and that is where all these things
started happening.
I am not clear with what should I search.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


dependency problem while doing safe-upgrade

2011-02-04 Thread Tapas Mishra
I executed aptitude safe-upgrade on 10.04 64 bit server here are the
dependency problems I met

http://paste.ubuntu.com/562399/

Let me know if some one can point out what should I be checking.
--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_3.6.13+build3+nobinonly-0ubuntu0.10.04.1_amd64.deb

2011-02-01 Thread Tapas Mishra
On Tue, Feb 1, 2011 at 2:54 PM, Nicolas Barcet
 wrote:
> On 02/01/2011 09:56 AM, Tapas Mishra wrote:
>> I got following error when I did apt-get install firefox on a Ubuntu
>> server 10.04 64 bit.
>>
>> Processing triggers for python-support ...
>> Processing triggers for python-central ...
>> E: Failed to fetch
>> http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_3.6.13+build3+nobinonly-0ubuntu0.10.04.1_amd64.deb:
>> Could not connect to security.ubuntu.com:80 (91.189.92.167). - connect
>> (111: Connection refused) [IP: 91.189.92.167 80]
>> Reading package lists... Done
>
> [...]
>
>> What do I need to check?
>
> That you have connectivity to http://security.ubuntu.com/.  What to you
> get when you do:
>
> wget
> http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_3.6.13+build3+nobinonly-0ubuntu0.10.04.1_amd64.deb
>
> If you have an error, I would guess someone is filtering this along the
> way...
>
> Nick
Nick thanks for the message the command you mentioned worked without
any problem.
I rebooted the server and started things again every thing worked smoothly.
I have no idea as why it went wrong the first time.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Failed to fetch http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_3.6.13+build3+nobinonly-0ubuntu0.10.04.1_amd64.deb

2011-02-01 Thread Tapas Mishra
I got following error when I did apt-get install firefox on a Ubuntu
server 10.04 64 bit.

Processing triggers for python-support ...
Processing triggers for python-central ...
E: Failed to fetch
http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_3.6.13+build3+nobinonly-0ubuntu0.10.04.1_amd64.deb:
Could not connect to security.ubuntu.com:80 (91.189.92.167). - connect
(111: Connection refused) [IP: 91.189.92.167 80]
Reading package lists... Done


Here are the libraries it requested total 294 Mb which I clicked yes to it

 aptitude install firefox
Reading package lists... Done
Building dependency tree
Reading state information... Done
Reading extended state information
Initializing package states... Done
The following NEW packages will be installed:
  apt-xapian-index{a} apturl{a} apturl-common{a} aspell{a}
aspell-en{a} dbus-x11{a} defoma{a} dictionaries-common{a}
docbook-xml{a} esound-clients{a}
  esound-common{a} firefox firefox-branding{a} fontconfig{a} gamin{a}
gconf2{a} gconf2-common{a} ghostscript{a} gksu{a} gnome-icon-theme{a}
gnome-keyring{a}
  gnome-mime-data{a} gsfonts{a} gvfs{a} gvfs-backends{a}
hicolor-icon-theme{a} hunspell-en-us{a} indicator-application{a}
launchpad-integration{a}
  libappindicator0{a} libarchive1{a} libart-2.0-2{a} libaspell15{a}
libatasmart4{a} libatk1.0-0{a} libatk1.0-data{a} libaudiofile0{a}
libavahi-glib1{a}
  libbluetooth3{a} libbonobo2-0{a} libbonobo2-common{a}
libbonoboui2-0{a} libbonoboui2-common{a} libcairo-perl{a} libcairo2{a}
libcdio-cdda0{a}
  libcdio-paranoia0{a} libcdio10{a} libcroco3{a} libcups2{a}
libcupsimage2{a} libdatrie1{a} libdbusmenu-glib1{a}
libdbusmenu-gtk1{a} libenchant1c2a{a} libesd0{a}
  libexif12{a} libfontenc1{a} libgail18{a} libgamin0{a} libgconf2-4{a}
libgcr0{a} libgdu0{a} libgksu2-0{a} libglade2-0{a} libglib-perl{a}
libgnome-keyring0{a}
  libgnome2-0{a} libgnome2-canvas-perl{a} libgnome2-common{a}
libgnome2-perl{a} libgnome2-vfs-perl{a} libgnomecanvas2-0{a}
libgnomecanvas2-common{a}
  libgnomeui-0{a} libgnomeui-common{a} libgnomevfs2-0{a}
libgnomevfs2-common{a} libgnomevfs2-extra{a} libgomp1{a} libgp11-0{a}
libgphoto2-2{a} libgphoto2-port0{a}
  libgs8{a} libgsf-1-114{a} libgsf-1-common{a}
libgstreamer-plugins-base0.10-0{a} libgstreamer0.10-0{a}
libgtk2-perl{a} libgtk2.0-0{a} libgtk2.0-bin{a}
  libgtk2.0-common{a} libgtop2-7{a} libgtop2-common{a}
libgudev-1.0-0{a} libgvfscommon0{a} libhunspell-1.2-0{a} libicu42{a}
libidl0{a} libimobiledevice0{a}
  libindicator0{a} libjasper1{a} libjson-glib-1.0-0{a}
liblaunchpad-integration1{a} liblcms1{a} libltdl7{a} liblzma1{a}
libmagickcore2{a} libmagickwand2{a}
  libnspr4-0d{a} libnss3-1d{a} libntfs10{a} libopenobex1{a}
liborbit2{a} libpam-gnome-keyring{a} libpango-perl{a} libpango1.0-0{a}
libpango1.0-common{a}
  libpaper-utils{a} libpaper1{a} libpixman-1-0{a} libplist1{a}
libpolkit-agent-1-0{a} libpolkit-backend-1-0{a} libproxy0{a}
librarian0{a} librsvg2-2{a}
  librsvg2-common{a} libsgutils2-2{a} libsmbclient{a}
libsoup-gnome2.4-1{a} libsoup2.4-1{a} libstartup-notification0{a}
libtalloc2{a} libthai-data{a} libthai0{a}
  libtiff4{a} libusb-1.0-0{a} libusbmuxd1{a} libvte-common{a}
libvte9{a} libwbclient0{a} libwebkit-1.0-2{a} libwebkit-1.0-common{a}
libxcb-atom1{a} libxcb-aux0{a}
  libxcb-event1{a} libxcb-render-util0{a} libxcb-render0{a}
libxcomposite1{a} libxcursor1{a} libxdamage1{a} libxfixes3{a}
libxfont1{a} libxft2{a} libxinerama1{a}
  libxrandr2{a} libxrender1{a} libxslt1.1{a} libxt6{a} mtools{a}
ntfsprogs{a} obex-data-server{a} policykit-1{a} policykit-1-gnome{a}
psfontmgr{a} python-cairo{a}
  python-debian{a} python-glade2{a} python-gtk2{a}
python-software-properties{a} python-vte{a} python-webkit{a}
python-xapian{a} rarian-compat{a} scrollkeeper{a}
  sgml-data{a} software-properties-gtk{a} synaptic{a} ubufox{a}
udisks{a} usbmuxd{a} x-ttcidfont-conf{a} xfonts-encodings{a}
xfonts-utils{a}
0 packages upgraded, 185 newly installed, 0 to remove and 0 not upgraded.
Need to get 35.0MB/70.8MB of archives. After unpacking 294MB will be used.

What do I need to check?

--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


application which can give pop up messages when ever some one accesses my server

2011-01-31 Thread Tapas Mishra
Hi all I am not sure as what should I be looking on Google hence
asking here.I have a Ubuntu server with Public IP on which I have a
few websites and SSH accounts.I want to know if there is any
application/daemon which I can install so that when ever some one does
an SSH connection to my server I get a pop up on my laptop that is
like gtalk messages which just gives me  some one pop up with a
message that user so and so loged in to server.Or some other
application which can also tell me when ever http requests are made to
my server so that I can be aware or if some one tries a DOS (in this
case requests might be difficult to detect) but I get a pop up which
says that so and so services is trying to access your server from
outside.Other than checking log files is there any way for these
things which I asked?

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: some confusion regarding package updates

2011-01-19 Thread Tapas Mishra
On Wed, Jan 19, 2011 at 7:36 PM, Imre Gergely  wrote:
>
> On Wed, 19 Jan 2011 17:57:25 +0530, Tapas Mishra wrote:
>>
>> On Wed, Jan 19, 2011 at 5:55 PM, Carsten Aulbert
>>  wrote:
>>>
>>> Hi
>>>
>>> On Wednesday 19 January 2011 13:21:44 Tapas Mishra wrote:
>>>>
>>>> How ever I have installed cron-apt which has scheduled an update for
>>>> daily morning 4 o clock,
>>>> So does this message mean that it is not getting updated.
>>>
>>> From the package description of cron-apt:
>>>
>>> [..]
>>> Contains a tool that is run by a cron job at regular intervals. By
>>> default it
>>>  just updates the package list and downloads new packages without
>>> installing.
>>>  You can instruct it to run anything that you can do with apt-get
>>>  (or aptitude).
>>> [..]
>>
>> Ohh thanks its my fault I missed that part.
>>>
>>> Thus you possibly need to configure it, to run the updates automatically
>>> - but
>>> I'm not sure if that is a good thing because it could break the system or
>>> you
>>> won't get an updates kernel live as this might require a reboot.
>>
>> You are correct as I have experienced this in past.
>> I have a test machine for doing this to see if every thing is working.
>> I can try if you suggest any thing on that.So that before I deploy it
>> on a production machine
>> I am sure that things are working.
>
> I'm using apt-cron also and I set it to just download the packages and send
> me an email if there's something to update. Then I log in and do the update
> manually (apt-get upgrade / dist-upgrade).
> If you have lots of servers, that wouldn't be practical I guess. But for 1-2
> servers I think it's not a big deal (IF you look at your emails fairly
> often, like once a day?).

I fully understand your point and this is not  so difficult to do an
ssh and do an apt-get upgrade if it is only one server.(Which is the
case).But the situation I am in is,
 I am not a permanent employee who would take care of this environment.
I have created this environment for some one who is interested to work
on this (with perspective of end user and not a sys admin). So I want
to make sure that if I leave things working perfectly.Even for a
novice.
So before I  make a cron job entry for this I thought of asking here.

--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: some confusion regarding package updates

2011-01-19 Thread Tapas Mishra
On Wed, Jan 19, 2011 at 5:55 PM, Carsten Aulbert
 wrote:
> Hi
>
> On Wednesday 19 January 2011 13:21:44 Tapas Mishra wrote:
>> How ever I have installed cron-apt which has scheduled an update for
>> daily morning 4 o clock,
>> So does this message mean that it is not getting updated.
>
> From the package description of cron-apt:
>
> [..]
> Contains a tool that is run by a cron job at regular intervals. By default it
>  just updates the package list and downloads new packages without installing.
>  You can instruct it to run anything that you can do with apt-get
>  (or aptitude).
> [..]
Ohh thanks its my fault I missed that part.
>
> Thus you possibly need to configure it, to run the updates automatically - but
> I'm not sure if that is a good thing because it could break the system or you
> won't get an updates kernel live as this might require a reboot.
You are correct as I have experienced this in past.
I have a test machine for doing this to see if every thing is working.
I can try if you suggest any thing on that.So that before I deploy it
on a production machine
I am sure that things are working.

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


some confusion regarding package updates

2011-01-19 Thread Tapas Mishra
I have some confusion regarding a server of mine.
When ever I ssh into it I see following message

  Graph this data and manage this system at https://landscape.canonical.com/

125 packages can be updated.
77 updates are security updates.

You have new mail.
Last login: Tue Jan 11 16:09:06 2011 from

How ever I have installed cron-apt which has scheduled an update for
daily morning 4 o clock,
So does this message mean that it is not getting updated.
If yes then let me know what should I be checking.
Because when I do an ssh into the server and manually do an aptitude update
I see messages like this

Hit http://us.archive.ubuntu.com lucid/universe Packages
Hit http://us.archive.ubuntu.com lucid/universe Sources
Hit http://packages.medibuntu.org jaunty/free Packages
Hit http://us.archive.ubuntu.com lucid/multiverse Packages
Hit http://us.archive.ubuntu.com lucid/multiverse Sources
Hit http://us.archive.ubuntu.com lucid-updates/main Packages
Hit http://us.archive.ubuntu.com lucid-updates/restricted Packages
Hit http://us.archive.ubuntu.com lucid-updates/main Sources
Hit http://us.archive.ubuntu.com lucid-updates/restricted Sources
Hit http://us.archive.ubuntu.com lucid-updates/universe Packages
Hit http://packages.medibuntu.org jaunty/non-free Packages
Hit http://us.archive.ubuntu.com lucid-updates/universe Sources
Hit http://us.archive.ubuntu.com lucid-updates/multiverse Packages
Hit http://us.archive.ubuntu.com lucid-updates/multiverse Sources
Hit http://archive.canonical.com lucid Release.gpg
Ign http://archive.canonical.com/ubuntu/ lucid/partner Translation-en_US
Hit http://archive.canonical.com lucid Release
Hit http://archive.canonical.com lucid/partner Packages
Hit http://archive.canonical.com lucid/partner Sources
Fetched 20.2kB in 2min 48s (120B/s)
Reading package lists... Done


So what do I missed here?
--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: invalid response from Proxy dns lookup failure in my domains

2011-01-10 Thread Tapas Mishra
On Mon, Jan 10, 2011 at 10:50 PM, Michael Zoet  wrote:
>
> Am Mo, 10.01.2011, 17:18 schrieb Tapas Mishra:
>
>>
>> I feel there should be some thing which tells in resolv.conf not to
>> look to corporate DNS for the entries in /etc/hosts
>> as those entries will not be put by sys admins of organization.
>
> There are several ways to achieve this! You can define other hostnames in
> /etc/hosts and these names can you use in your Apache proxy configuration.
> The clue is not to use names, that your company DNS resolves, just names
> your Apache Server knows.
>
>> But I need the Corporate DNS also.
>> So is there some way where I can give priority to entries in
>> /etc/hosts on my server to the Corporate DNS and also use
>> the corporate DNS (which is where I get connected to internet also)
>
> Yes! Take a look at /etc/nsswitch.conf and read the documentation about it.
>
> You can also use tools like dnsmasq. Read about it, too
>
> MIchael
>
>
>
> --
The unfortunate part is all these things look correctly configured.
I know when you say to know about hosts.conf or nsswitch.conf as to
what you are pointing to.
But things are not working.
Here is nsswitch.conf entry

hosts:  files mdns4_minimal [NOTFOUND=return] dns mdns4

You can note files is mentioned before dns (I think this is what you
wanted to point)
and in same way
/etc/hosts.conf is
order hosts,bind
multi on

So things upto here are perfect but it still does not work and I don't
understand why.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: invalid response from Proxy dns lookup failure in my domains

2011-01-10 Thread Tapas Mishra
On Mon, Jan 10, 2011 at 9:00 PM, Dan Sheffner  wrote:
> A work around the DNS is editing the /etc/hosts file and hard coding your
> servers there.  Do you have access to this file?
>
That is the only thing that came to my mind also.(Yes I have access to
this file)
Believe me there are corresponding entries.
As follows in /etc/hosts

127.0.0.1   localhost
192.168.1.10  myserver.com
192.168.1.16  site4.myserver.com
192.168.1.13  site1.myserver.com
192.168.1.14  site2.myserver.com
192.168.1.15  site3.myserver.com

Here is my /etc/resolv.conf entries

search company.public.com
nameserver 

I feel there should be some thing which tells in resolv.conf not to
look to corporate DNS for the entries in /etc/hosts
as those entries will not be put by sys admins of organization.
But I need the Corporate DNS also.
So is there some way where I can give priority to entries in
/etc/hosts on my server to the Corporate DNS and also use
the corporate DNS (which is where I get connected to internet also)
My feeling is that when ever a website is proxy passed

ProxyPass /something http://site1.myserver.com:8080something
ProxyPassReverse /something http://site1.myserver.com:8080something

then the above site1.myserver.com is not getting resolved which is why
I am getting these errors.
I do not know how does Apache queries i.e. wether it looks for
/etc/hosts first or /etc/resolv.conf
to find out the Domain Names and thus I am getting an error that proxy
is unable to handle the /something

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: invalid response from Proxy dns lookup failure in my domains

2011-01-10 Thread Tapas Mishra
On Mon, Jan 10, 2011 at 5:31 PM, Tapas Mishra  wrote:
> Hi all.
> The problem I am reporting is not very clearly evident to me.
> I have a virtualization setup where in I had configured in 4 virtual
> machines (which serve 4 different websites)  available to internet via
> a
> Reverse Proxy on the Host OS (bare metal) I use Ubuntu 10.04 64 bit
> server edition and kvm for this setup.
>
> We have not changed any of the server configurations from past 6
> months since things were working properly without any problem on this
> server.
> The sites are available to people as
>
>
> http://site1.myserver.com <-- No problem
> http://site1.myserver.com/app1 <-- Gives problem till weekend there
> was no problem
>
> http://site4.myserver.com   <--Is also giving problem till this Sunday
> 9 Jan there were no problem.
>
> Here are the error messages which I see in Apache logs
>
> Mon Jan 10 17:07:05 2011] [error] [client 172.21.100.250] proxy: DNS
> lookup failure for: site4.myserver.com returned by /
> [Mon Jan 10 17:07:06 2011] [error] [client 172.21.100.250] proxy: DNS
> lookup failure for: site4.myserver.com returned by /
>
> and for site1.myserver.com/app1 also I get same error
>
> [Mon Jan 10 17:06:01 2011] [error] [client 172.21.100.250] proxy: DNS
> lookup failure for: site1.myserver.com returned by /app1/
> [Mon Jan 10 17:06:01 2011] [error] [client 172.21.100.250] proxy: DNS
> lookup failure for: site1.myserver.com returned by /app1/
> [Mon Jan 10 17:06:02 2011] [error] [client 172.21.100.250] proxy: DNS
> lookup failure for: site1.myserver.com returned by /app1/
>
>
> How ever when some one tries to access http://site1.myserver.com there
> is no error at all.
> Also if I access  http://site5.somebody_server.com (which is same as
> http://site4.myserver.com pointing to same public IP) but on some body
> elses server
> then there is no problem at all and the site is very clearly visible.
>
>
> Let me know what more should I look for I have no clue of this problem.
> Because these error messages which I just report in this thread were
> not at all present until today  morning.
>
>
>
> --
>

Ok after having a long trouble shooting hours found the root cause
 my proxy pass entries look as follows

  ProxyPass /app1 http://192.168.1.3:8080/app1
  ProxyPass / http://192.168.1.3
  ProxyPassReverse /app1 http://192.168.1.3:8080/app1
  ProxyPassReverse / http://192.168.1.3

If I use the entries as above then some one from internet is able to
access the sites.But from within LAN people are unable to access it.

How ever if I use

  ProxyPass /app1 http://site1.myserver.com:8080/app1
  ProxyPass / http://site1.myserver.com
  ProxyPassReverse /app1 http://site1.myserver.com:8080/app1
  ProxyPassReverse / http://site1.myserver.com

then things work on LAN but from internet it is not accessible and
errors are the ones I mentioned above in the thread.

What can be a solution in this case as I do not have a DNS at my
disposal I am simply not allowed to have one.
Can some one suggest any thing?

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


invalid response from Proxy dns lookup failure in my domains

2011-01-10 Thread Tapas Mishra
Hi all.
The problem I am reporting is not very clearly evident to me.
I have a virtualization setup where in I had configured in 4 virtual
machines (which serve 4 different websites)  available to internet via
a
Reverse Proxy on the Host OS (bare metal) I use Ubuntu 10.04 64 bit
server edition and kvm for this setup.

We have not changed any of the server configurations from past 6
months since things were working properly without any problem on this
server.
The sites are available to people as


http://site1.myserver.com <-- No problem
http://site1.myserver.com/app1 <-- Gives problem till weekend there
was no problem

http://site4.myserver.com   <--Is also giving problem till this Sunday
9 Jan there were no problem.

Here are the error messages which I see in Apache logs

Mon Jan 10 17:07:05 2011] [error] [client 172.21.100.250] proxy: DNS
lookup failure for: site4.myserver.com returned by /
[Mon Jan 10 17:07:06 2011] [error] [client 172.21.100.250] proxy: DNS
lookup failure for: site4.myserver.com returned by /

and for site1.myserver.com/app1 also I get same error

[Mon Jan 10 17:06:01 2011] [error] [client 172.21.100.250] proxy: DNS
lookup failure for: site1.myserver.com returned by /app1/
[Mon Jan 10 17:06:01 2011] [error] [client 172.21.100.250] proxy: DNS
lookup failure for: site1.myserver.com returned by /app1/
[Mon Jan 10 17:06:02 2011] [error] [client 172.21.100.250] proxy: DNS
lookup failure for: site1.myserver.com returned by /app1/


How ever when some one tries to access http://site1.myserver.com there
is no error at all.
Also if I access  http://site5.somebody_server.com (which is same as
http://site4.myserver.com pointing to same public IP) but on some body
elses server
then there is no problem at all and the site is very clearly visible.


Let me know what more should I look for I have no clue of this problem.
Because these error messages which I just report in this thread were
not at all present until today  morning.



--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


virt manager migration option greyed out on Ubuntu 10.04 server edition

2011-01-06 Thread Tapas Mishra
I am testing server migration on a Ubuntu 10.04 LTS server
edition.Where I have virt-manager installed.
How ever when I choose a VM and try attempt for migration of hot vm I
see the option of migration greyed out.
Is this feature not supported currently in virt-manager?
Do I necessarily need to connect to another server.
I am also looking for converting the Guest OS in LVM to qemu image
where in I can export this qemu image
or some other format which is suitable to be used on some other
hypervisor.Is it not possible to achieve that in currently  in
virt-manager.
virt-manager 0.8.2

--

Tapas
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: problem in mounting an nfs export on a USB disk

2011-01-06 Thread Tapas Mishra
On Thu, Jan 6, 2011 at 10:35 AM, Tapas Mishra  wrote:
> On Wed, Jan 5, 2011 at 10:03 PM, Serge Hallyn
>  wrote:
>> Quoting Tapas Mishra (mightydre...@gmail.com):
>>> the entries which after your msg I noticed in /var/log/syslog are
>>>
>>> Jan  5 14:12:14 tapas mountd[1577]: refused mount request from
>>> 192.168.1.14 for /media/vol2 (/media/vol2): unmatched host
>>> Jan  5 14:13:16 tapas mountd[1577]: refused mount request from
>>> 192.168.1.14 for /media/vol2 (/media/vol2): unmatched host
>>
>> That seems to confirm that an entry like
>>
>>        /media/vol2 192.168.1.0/24(rw)
>>
>> in /etc/exports should work.  Please try that (of course making sure
>> to restart with 'exportfs -ra' after making the change on the server).
>>
>> thanks,
>> -serge
>>
>
>
> Ok I changed * by IP as you said and it did worked.
> I was able to mount the said nfs share on client machine lets say its
> hostname is client_hostname
> but I was not able to go inside the mounted folder.
>
> On the client machine
>
> mount -t nfs :/media/vol2 /mnt/nfs
>
> this did worked
>
> but when from client machine I do
> cd /mnt/nfs I get permission denied.
>
> When I see a ls -l then I see an owner different than root (infact
> username:groupname) shows me client machines hostname
>
> here is out put of said nfs mount on client machine
>
> drwx--  1 client_hostname client_hostname 20480 2011-01-03 17:43 nfs
>
> on the nfs server which is my laptop the directory which I exported
> its permissions are
>
> drwx-- 1 tapas tapas 20480 2011-01-03 17:43 vol2
>
>
> So thinking that this might be the problem I tried to change the
> permissions on nfs-server folder itself
>
> How ever this attempt to change permissions (as root) on the nfs-server 
> failed.
>
>
>
>
> --

>

Things have worked I was exporting as root and had forgotten
no_root_squash option

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: Please help me for install xen kernel on ubuntu 10.10

2011-01-06 Thread Tapas Mishra
https://help.ubuntu.com/community/Xen
As per above article
"It's also worth noting that the Xen 3.3 hypervisor is also included
in jaunty. However, at the time of this writing, Xen is not officially
supported in Lucid; consider using KVM instead. "

Now coming to your question Glossary section on this link
https://help.ubuntu.com/community/Xen
does talk of 10.10.
But I have not installed in 10.10 so I wont be able to comment on
correctness of it.

 I am sharing some  experiences if you are starting with Xen hoping
they help you.


1) I would suggest to ask this on Xen mailing list.
   http://lists.xensource.com/mailman/listinfo/xen-users
(Just for better response if you get it done here that would be awesome)

2) Once you have Xen installed start with some thing known as libvirt
and virt-manager and then proceed with GUI to what ever you want.It
will save you a lot of time (trust me on this one).

3) In case you are completely new to Xen I would suggest you start with CentOS.
(CentOS) has Xen shipped on DVD so you wont  need to struggle as a newbie.
Also you must be aware CentOS is nothing but RHEL with properietary
softwres of RHEL and logo removed.
Have a look at virtualization section on
http://www.linux.com/archive/articles/61498

4) A link I feel you should have this
http://www.google.com/url?sa=t&source=web&cd=1&ved=0CBYQFjAA&url=http%3A%2F%2Flists.xensource.com%2Farchives%2Fhtml%2Fxen-users%2F2009-10%2Fpdf3cfxeYbytr.pdf&ei=MXMlTYTlO8PIrQeSxPSADQ&usg=AFQjCNElvNlGaHsFiVN3Qox9q9r17oEvkw&sig2=-Yt9r5sXPMfHoh9NF3V4Yg


5) I remember a long time back I had struggled with Xen (a lot of
hardware issues)
So if you need to urgently do that go ahead with CentOS.

6) A lot of links on Xen wiki page of Ubuntu are helpful.
How ever some one on this list might point to right thing.

7) 
http://blog.codefront.net/2007/06/26/installing-xen-on-ubuntu-feisty-fawn-the-complete-newbies-guide/

8) I have struggled some time back have a look on threads I had
started for Xen in most of my threads if I solve I surely post
solutions too.

http://.ubuntuforums.org/showthread.php?t=1319850
http://ubuntuforums.org/showthread.php?t=1320189

9) You will need to compile Xen (hypervisor) from source to be able to
use on 10.10.(Some one can correct if I am wrong here) other wise if
you just do apt-get install ubuntu-xen-server it will install an old
version (you might try with that if you are new)

10) Do post the results when you are done even if it seems no one is
reading/replying on list.I usually read all threads.
It will help many of us who have used on some old version but would be
interested to know for the new version on Ubuntu.

11) How ever in a production environment I have sticked with KVM on a
Ubuntu LTS Server edition.Using GUI will make your life very simple.


Tapas

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: problem in mounting an nfs export on a USB disk

2011-01-05 Thread Tapas Mishra
On Wed, Jan 5, 2011 at 10:03 PM, Serge Hallyn
 wrote:
> Quoting Tapas Mishra (mightydre...@gmail.com):
>> the entries which after your msg I noticed in /var/log/syslog are
>>
>> Jan  5 14:12:14 tapas mountd[1577]: refused mount request from
>> 192.168.1.14 for /media/vol2 (/media/vol2): unmatched host
>> Jan  5 14:13:16 tapas mountd[1577]: refused mount request from
>> 192.168.1.14 for /media/vol2 (/media/vol2): unmatched host
>
> That seems to confirm that an entry like
>
>        /media/vol2 192.168.1.0/24(rw)
>
> in /etc/exports should work.  Please try that (of course making sure
> to restart with 'exportfs -ra' after making the change on the server).
>
> thanks,
> -serge
>


Ok I changed * by IP as you said and it did worked.
I was able to mount the said nfs share on client machine lets say its
hostname is client_hostname
but I was not able to go inside the mounted folder.

On the client machine

mount -t nfs :/media/vol2 /mnt/nfs

this did worked

but when from client machine I do
cd /mnt/nfs I get permission denied.

When I see a ls -l then I see an owner different than root (infact
username:groupname) shows me client machines hostname

here is out put of said nfs mount on client machine

drwx--  1 client_hostname client_hostname 20480 2011-01-03 17:43 nfs

on the nfs server which is my laptop the directory which I exported
its permissions are

drwx-- 1 tapas tapas 20480 2011-01-03 17:43 vol2


So thinking that this might be the problem I tried to change the
permissions on nfs-server folder itself

How ever this attempt to change permissions (as root) on the nfs-server failed.




-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: problem in mounting an nfs export on a USB disk

2011-01-05 Thread Tapas Mishra
On Wed, Jan 5, 2011 at 7:55 PM, Serge Hallyn  wrote:
> Quoting Tapas Mishra (mightydre...@gmail.com):
>> On Wed, Jan 5, 2011 at 7:27 PM, Serge Hallyn  
>> wrote:
>> > Quoting Tapas Mishra (mightydre...@gmail.com):
>> >> I have a USB disk which has 2 partitions.I exported one of them (on NFS)
>> >> and now I am trying to mount it at client machine.
>> >> Each time it gets error
>> >>
>> >> mount -t nfs 192.168.1.19:/media/vol2 /mnt/nfs/
>> >> mount.nfs: access denied by server while mounting 192.168.1.19:/media/vol2
>> >>
>> >> Here is the /etc/exports file entry
>> >>
>> >> showmount -e on nfs server gives
>> >> Export list for tapas:
>> >> /media/vol2 */24
>> >
>> > If I'm not mistaken, you are only supposed to use '*' with fully qualified
>> > domain names, and '*.*' must be specified for 'google.com' (not '*').  So
>> > ISTM that both using '*' and then specifyin /24 are wrong.
>> >
>> > Try 0.0.0.0/24?
>> >
>> > -serge
>> >
>>
>>
>> Before posting here I had tried the IP of client where I have put the *
>
> Also I'm not sure if showmounts output would show this, but is the (options)
> after ip address required?  For instance, cat /etc/exports would give:
>
>        /media/vol2 0.0.0.0/24(rw)
>
> If that still doesn't work, you could try
>
>        /media/vol2 (rw)
>
> to check whether addressing is the problem.  But I think we'll need to
> see whether there are any relevant messages in /var/log/syslog.
>
> (You're using the nfs kernel server, right?)
>
Yes I am away from my office right now.But do let me know what logs do
you want to see or I should see.
It will take me 15 hours due to time zone difference but I will update
this thread as the USB with which I reported this problem is not with
me.
How ever the nfs-server is on my laptop only so if there is some thing
you want to see(from this) I will be able to post.

the entries which after your msg I noticed in /var/log/syslog are

Jan  5 14:12:14 tapas mountd[1577]: refused mount request from
192.168.1.14 for /media/vol2 (/media/vol2): unmatched host
Jan  5 14:13:16 tapas mountd[1577]: refused mount request from
192.168.1.14 for /media/vol2 (/media/vol2): unmatched host

do let me know what more should I check try.Due to time zone
difference I may not be able to report immediately in an hour or so
but I will update if you stick with the thread.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: problem in mounting an nfs export on a USB disk

2011-01-05 Thread Tapas Mishra
On Wed, Jan 5, 2011 at 7:27 PM, Serge Hallyn  wrote:
> Quoting Tapas Mishra (mightydre...@gmail.com):
>> I have a USB disk which has 2 partitions.I exported one of them (on NFS)
>> and now I am trying to mount it at client machine.
>> Each time it gets error
>>
>> mount -t nfs 192.168.1.19:/media/vol2 /mnt/nfs/
>> mount.nfs: access denied by server while mounting 192.168.1.19:/media/vol2
>>
>> Here is the /etc/exports file entry
>>
>> showmount -e on nfs server gives
>> Export list for tapas:
>> /media/vol2 */24
>
> If I'm not mistaken, you are only supposed to use '*' with fully qualified
> domain names, and '*.*' must be specified for 'google.com' (not '*').  So
> ISTM that both using '*' and then specifyin /24 are wrong.
>
> Try 0.0.0.0/24?
>
> -serge
>


Before posting here I had tried the IP of client where I have put the *

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: problem in mounting an nfs export on a USB disk

2011-01-05 Thread Tapas Mishra
> On Wed, Jan 5, 2011 at 12:42 PM, Tapas Mishra 
> wrote:
>>
>> I have a USB disk which has 2 partitions.I exported one of them (on NFS)
>> and now I am trying to mount it at client machine.
>> Each time it gets error
>>
>> mount -t nfs 192.168.1.19:/media/vol2 /mnt/nfs/
>> mount.nfs: access denied by server while mounting 192.168.1.19:/media/vol2
>>
>> Here is the /etc/exports file entry
>>
>> showmount -e on nfs server gives
>> Export list for tapas:
>> /media/vol2 */24
>>
>> On the client machine nfs-client package is installed.
>> What more I need to check?
>> Is it logged some where?


On Wed, Jan 5, 2011 at 2:28 PM, Ashok Kumar
 wrote:
> you should provide the permission on folder.
>
I am root and checked permissions after your msg

 ls -l
total 26
drwxrwxrwx 2 tapas tapas  2048 2010-02-12 04:12 HPLAUNCHER
drwx-- 7 tapas tapas  4096 1970-01-01 05:30 vol1
drwx-- 1 tapas tapas 20480 2011-01-03 17:43 vol2

I have not mounted them as above.When ever I connect the USB it
automatically is getting mounted as above.
As root I try on vol2 of above

chown 755 /media/vol2
but when I now check the permissions there is no change.
when I do ls -l I get
drwx-- 1 tapas tapas 20480 2011-01-03 17:43 vol2
same thing.
How is this that chown is not working even as root?

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


problem in mounting an nfs export on a USB disk

2011-01-04 Thread Tapas Mishra
I have a USB disk which has 2 partitions.I exported one of them (on NFS)
and now I am trying to mount it at client machine.
Each time it gets error

mount -t nfs 192.168.1.19:/media/vol2 /mnt/nfs/
mount.nfs: access denied by server while mounting 192.168.1.19:/media/vol2

Here is the /etc/exports file entry

showmount -e on nfs server gives
Export list for tapas:
/media/vol2 */24

On the client machine nfs-client package is installed.
What more I need to check?
Is it logged some where?

--

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


upon installing ia32-libs I get some error

2011-01-03 Thread Tapas Mishra
I used
apt-get install ia32-libs
on
Linux myserver 2.6.32-21-server #32-Ubuntu SMP Fri Apr 16 09:17:34 UTC
2010 x86_64 GNU/Linux
and got following error.
http://pastebin.com/HdsZhakA
I was testing vmware converter as instructions here mention
http://linhost.info/2009/04/vmware-converter-installation-on-ubuntu-linux/

How ever upon installation I got error

The installation of the VMware VmPerl Scripting API succeeded.

Generating SSL Server Certificate
Unable to get the last modification timestamp of the destination file
/etc/vmware/ssl/rui.key.

So based on this thread
http://www.geniv.net/unable-to-get-the-last-modification-timestamp-of-the-destination-file-vmware-installation-errors/2009/01/
I started installing ia32-libs on Lucid 64 bit server edition.
Where I got the error I mentioned above on pastebin.
So what can I do to get rid of this error and why is that coming?

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: converting lvm based Virtual Machine to qcow image.

2011-01-03 Thread Tapas Mishra
On Mon, Jan 3, 2011 at 3:42 PM, Carsten Aulbert
 wrote:
> Hi
>
> On Monday 03 January 2011 11:03:31 Tapas Mishra wrote:
>> I would like to know do I need to shut down the VM to be able to use
>> the above command.
>
> I don't know, but you should do that anyway as you will most certainly not be
> able to restore the backup safely if you used such an inconsistent source...
>

I asked because if I have to shut them down then I need to inform many
people about this.How ever I do have the LVM
backups on another hardisk (external USB) which I did via rsync.

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


converting lvm based Virtual Machine to qcow image.

2011-01-03 Thread Tapas Mishra
A long time back I had asked as how to back up OS running on KVM in an
LVM setup.
Here are the excerpts from the message

"One way to take a backup is to convert the LVM volumes to compressed qcow2
images, like this:
# qemu-img convert -c -f raw -O qcow2 /dev/nintendo/lvm1 /backup/lvm1.img"

I would like to know do I need to shut down the VM to be able to use
the above command.


-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: port scan detection on server

2010-11-20 Thread Tapas Mishra
On Fri, Nov 19, 2010 at 8:53 PM, Mark Foster  wrote:
>>
> http://sourceforge.net/projects/sentrytools/
>
Ok I was reading some thing more about guides available on internet
here I found a useful page
http://www.ossramblings.com/using_iptables_rate_limiting_to_prevent_portscans
but for the above link some one suggested me

"if you do go down this path then you should make sure you have TCP
SYN cookies enabled (while understanding the implications), and that
your rules match SYN packets specifically (not just packets in state
NEW). Otherwise, you'd have created a brand new denial-of-service
vulnerability on your server."

Is that correct?
What is the harm in going the IPTABLES way of stopping port scans.(I
have rate limited IPTABLES)
-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


port scan detection on server

2010-11-18 Thread Tapas Mishra
On this page
http://packages.ubuntu.com/pl/lucid/psad it mentions psad works on 2.2
kernels and 2.4 does it not work on 2.6 kernels.
Is there any other way to block port scan attempts on server.

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: how to save bandwidth while package upgrades

2010-11-16 Thread Tapas Mishra
Many thanks to both of you ya this did help me.

---
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


how to save bandwidth while package upgrades

2010-11-16 Thread Tapas Mishra
Here is a mail in /var/mail/root which I received in my server logs
http://paste.ubuntu.com/532866/
I see same packages downloaded many times again and again.
The servers which are upgrading are total 5 (4 virtual machines and one host)
so is there a way I can save bandwidth on this sort of setup.

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: weekly report for server setup

2010-11-08 Thread Tapas Mishra
On Mon, Nov 8, 2010 at 3:48 PM, Tapas Mishra  wrote:
>> If you have a monitoring system, you could send a periodic report of warning
>> and criticals alerts. If you don't have it, you could evaluate Ubuntu
>> Landscape or other monitoring systems "as a service".
> Ok this was a good suggestion,
>
I am aware of some thing known as BMC Patrol on Solaris machines.
Is there some thing equivalent to it?I wish to write such a sentence in report

"The cluster has ample resources to handle the peak workload. The
fault tolerant hardware helps to ensure that the cluster will continue
to provide service in the event of a hardware failure. "
How can put the above sentence with facts supporting my argument in
report any sort of log analyzers?

When did system had maximum load when minimum load.
Who is using the computer and how they use ?
A batch job to create resource usage reports and use this data to
create graphs. The horizontal axis is time, the vertical axis is
percent of resource usage, different color lines represent memory,
cpu, network traffic, disk i/o, etc.
Report could include a judgment about the ability of the machine to
handle the workload on an hourly, daily, weekly, and peak use basis.
That way the person would be clear and confident that the system would
keep running.

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: weekly report for server setup

2010-11-08 Thread Tapas Mishra
On Fri, Nov 5, 2010 at 6:23 PM, Lorenzo Salvadorini
 wrote:
Asking the boss might not be possible.

> If you have a monitoring system, you could send a periodic report of warning
> and criticals alerts. If you don't have it, you could evaluate Ubuntu
> Landscape or other monitoring systems "as a service".
Ok this was a good suggestion,

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


weekly report for server setup

2010-11-05 Thread Tapas Mishra
I have setup a cluster for some one.Which is basically a few Virtual
Machines running and the applications running in them which are
accessible on internet.
The host os is Ubuntu and  Vms are some ubuntu/debian and some
Fedora/Redhat based servers.
He has asked me to send him a weekly report of this work.
I am sys admin guy who understands ssh,telnet,ftp,tftp,TCP
I am not able to understand what should I write in report.Because all
the servers are perfectly running and applications are also running on
top of them and I am done with this.So basically from my part I do not
have any ssh or ftp to write in a report like this.Can some one give
me a link if there is some sample report that I should send.I am not
able to understand what do I need to Google for the same.
Are there any tools for doing such stuff?

-- 
http://mightydreams.blogspot.com

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


how do rate limited IPTABLEs treat a screen session on ssh after disconnection

2010-11-03 Thread Tapas Mishra
Take this scenario If I have rate limited the connections to 4.(i.e if
you attempt 4th connection you wont be able to login for some time.)
If in a minute I get disconnected 3 times
while I was already logged in on the server with a screen session,
will I be able to login or I need to keep quite for a minute?

-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m
recent --update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j
DROP
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m
recent --set --name DEFAULT --rsource

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: restarting ssh sshd[5678]: error: Bind to port 22 on :: failed: Address already in use.

2010-10-30 Thread Tapas Mishra
On Fri, Oct 29, 2010 at 12:48 PM, Paul Graydon  wrote:
>>
> Are you confident that it's actually restarted ultimately?  What start
> date/time does it show when you do:
Yes

> ps waxu | grep [s]shd
>
> ?  If it can't bind to port 22 it does suggest that sshd never properly
> terminates (if it ever does)

netstat -plan | grep ssh
tcp0  0 0.0.0.0:22  0.0.0.0:*
LISTEN  28576/sshd
tcp6   0  0 :::22   :::*
LISTEN  28576/sshd

But by the time I posted second reply I do not see this error any more
when I restart ssh.
sudo service ssh restart

The only real thing I can think of is that ssh wasn't letting go of
port 22 when I restarted it.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


restarting ssh sshd[5678]: error: Bind to port 22 on :: failed: Address already in use.

2010-10-29 Thread Tapas Mishra
I restart ssh on Ubuntu 10.04 64 bit server edition and I see
following line in auth.log

sshd[5678]: error: Bind to port 22 on :: failed: Address already in use.

when ever I restart ssh I see the above line.
That is a headless server.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


invalid login attempts not refused using deny hosts and conf of denyhost not working as expected

2010-10-28 Thread Tapas Mishra
I am using denyhosts on a server ( I know IPTABLE rate limiting etc
just testing this one)
so in a config file
/etc/denyhosts.conf
the following value is set
DENY_THRESHOLD_INVALID = 3

which as per their configuration file says
DENY_THRESHOLD_INVALID: block each host after the number of failed login
# attempts has exceeded this value.  This value applies to invalid
# user login attempts (eg. non-existent user accounts)

but when I checked the log (I deleted previous entries and disabled
firewall for some time to test denyhosts thing)
and
got following logs
http://pastebin.com/fyH3qJeR
I see a last line
refused connect from 125.46.63.134 (125.46.63.134)
but only after 10 attempts to try to login.
Now the question which is puzzling me is in denyhosts.conf I have set

DENY_THRESHOLD_INVALID = 3

so after third attempt the script should have denied the IP in
question any request to connect.
Is this not the case.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


iptables rate limiting for bridged connection (kvm created bridge)

2010-10-27 Thread Tapas Mishra
I have a bridged network setup ifconfig -a
gives following output

br0   Link encap:Ethernet  HWaddr 00:26:b9:82:42:38
  inet addr:192.168.1.1  Bcast:172.21.100.255  Mask:255.255.255.0
  inet6 addr: fe80::226:b9ff:fe82:4238/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:150779 errors:0 dropped:0 overruns:0 frame:0
  TX packets:25649 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:0
  RX bytes:109293717 (109.2 MB)  TX bytes:13045804 (13.0 MB)

eth0  Link encap:Ethernet  HWaddr 00:26:b9:82:42:34
  BROADCAST MULTICAST  MTU:1500  Metric:1
  RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000
  RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
  Interrupt:36 Memory:d600-d6012800

eth1  Link encap:Ethernet  HWaddr 00:26:b9:82:42:36
  BROADCAST MULTICAST  MTU:1500  Metric:1
  RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000
  RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
  Interrupt:48 Memory:d800-d8012800

eth2  Link encap:Ethernet  HWaddr 00:26:b9:82:42:38
  inet6 addr: fe80::226:b9ff:fe82:4238/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:153417 errors:0 dropped:0 overruns:0 frame:0
  TX packets:27103 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000
  RX bytes:106427544 (106.4 MB)  TX bytes:13644205 (13.6 MB)
  Interrupt:32 Memory:da00-da012800

eth3  Link encap:Ethernet  HWaddr 00:26:b9:82:42:3a
  BROADCAST MULTICAST  MTU:1500  Metric:1
  RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000
  RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
  Interrupt:42 Memory:dc00-dc012800

loLink encap:Local Loopback
  inet addr:127.0.0.1  Mask:255.0.0.0
  inet6 addr: ::1/128 Scope:Host
  UP LOOPBACK RUNNING  MTU:16436  Metric:1
  RX packets:426584 errors:0 dropped:0 overruns:0 frame:0
  TX packets:426584 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:0
  RX bytes:106667150 (106.6 MB)  TX bytes:106667150 (106.6 MB)

vnet0 Link encap:Ethernet  HWaddr 12:7f:c9:1b:4b:55
  inet6 addr: fe80::107f:c9ff:fe1b:4b55/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:4796 errors:0 dropped:0 overruns:0 frame:0
  TX packets:124800 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:500
  RX bytes:4919136 (4.9 MB)  TX bytes:102875453 (102.8 MB)

vnet1 Link encap:Ethernet  HWaddr 26:c0:8d:f2:14:29
  inet6 addr: fe80::24c0:8dff:fef2:1429/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:3868 errors:0 dropped:0 overruns:0 frame:0
  TX packets:126231 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:500
  RX bytes:2911695 (2.9 MB)  TX bytes:102792920 (102.7 MB)

vnet2 Link encap:Ethernet  HWaddr 3e:0d:34:3e:24:3f
  inet6 addr: fe80::3c0d:34ff:fe3e:243f/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:523 errors:0 dropped:0 overruns:0 frame:0
  TX packets:123086 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:500
  RX bytes:144288 (144.2 KB)  TX bytes:102302055 (102.3 MB)

vnet3 Link encap:Ethernet  HWaddr 6e:13:93:c4:44:49
  UP LOOPBACK RUNNING  MTU:16436  Metric:1
  RX packets:426584 errors:0 dropped:0 overruns:0 frame:0
  TX packets:426584 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:0
  RX bytes:106667150 (106.6 MB)  TX bytes:106667150 (106.6 MB)

vnet0 Link encap:Ethernet  HWaddr 12:7f:c9:1b:4b:55
  inet6 addr: fe80::107f:c9ff:fe1b:4b55/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:4796 errors:0 dropped:0 overruns:0 frame:0
  TX packets:124800 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:500
  RX bytes:4919136 (4.9 MB)  TX bytes:102875453 (102.8 MB)

vnet1 Link encap:Ethernet  HWaddr 26:c0:8d:f2:14:29
  inet6 addr: fe80::24c0:8dff:fef2:1429/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:3868 errors:0 dropped:0 overruns:0 frame:0
  TX packets:126231 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:500
  RX bytes:2911695 (2.9 MB)  TX bytes:102792920 (102.7 MB)

vnet2 Link encap:E

Re: using one authorized_keys file to another account

2010-10-25 Thread Tapas Mishra
Yes you were right thanks.

2010/10/25 Serge van Ginderachter :
> Check the permissions and ownership of this file:
>
>> home/newaccount/.ssh/authorized_keys
>
>
> --
> Met vriendelijke groet,
> Serge van Ginderachter
>
> Stuiver 32, B-9950 Waarschoot
> M +32.473.525.010  T +32.9.378.31.73
>

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


using one authorized_keys file to another account

2010-10-25 Thread Tapas Mishra
I have an access to a machine on lan via ssh and I am  using key based
authentication on it.
I created one more account on the remote machine and copied


cp home/oldaccount/.ssh/authorized_keys
home/newaccount/.ssh/authorized_keys

Now when I tried to login to the other account via ssh from my laptop
it did not worked.
Though the copy of keys from laptop .ssh/id_rsa.pub to
remote machine new account .ssh/authorized keys did worked.

I was wondering I had added same keys to old account so why did simple
copying the authorized keys from one account to another did not
worked.
Because when I did cat id_rsa.pub > authorized_keys in new account I
had created same file which was in old account.
Why is this happening or my observation is wrong.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: Sharing hosts.deny

2010-10-25 Thread Tapas Mishra
On Mon, Oct 25, 2010 at 5:21 PM, James Gray  wrote:
>
> OK - so theres a little gem :)  DONT try to filer services on a guest at the 
> hypervisor layer!  The hypervisor (VMware) >couldn't care less about the 
> traffic destined for a guest, its firewall is only concerned about traffic 
> destined for the >hypervisor.  Filter the guests' traffic on the GUEST, and 
> only the guest.
Ok
> If you have a virtual switch you might want to do some fancy VLAN tagging 
> voodoo to do pseudo-hypervisor filtering, but >that's probably heading into 
> the "why bother" end of the discussion.  Just filter the traffic for the 
> guest on the guest's >firewall and all will be well with the world :)
Yes I logged on to guest machine and
did same what you are saying in fact the reason I started this
discussion was same thing you mentioned I saw all network activity on
guest stopping no communication with any thing what so ever.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: Sharing hosts.deny

2010-10-25 Thread Tapas Mishra
On Mon, Oct 25, 2010 at 4:42 PM, Ahmed Kamal  wrote:
> Don't know what the general consensus is, but I've almost never really
> used hosts.deny in real production. iptables just does everything I
> need. OP might want to consider this
>
Yes I do want to use IPTABLES but I noticed using IPTABLES to deny
services on Virtual Machines which run on Vmware causes the VMs to
disconnect from internet.Not sure what port Vmware needs to be open so
that the VM (Virtual Machine) can be accessed from outside.
I use IPTABLES on host and guest both.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


Re: Sharing hosts.deny

2010-10-24 Thread Tapas Mishra
On Mon, Oct 25, 2010 at 7:11 AM, Michael  wrote:
>
> I have a bunch of entries in my hosts file with the 127.0.0.1 line
> added.  I have always seen the hosts.deny and hosts.allow files  but
> never know how to use them.  When I google hosts.deny it says something
> about blocking a range of IP addresses.  Is it safe to assume that using
> hosts.deny is more effective/better than just adding entries to the
> hosts file?
>
hosts.deny and hosts are different files for different purposes.

-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam


  1   2   >