Re: [Bug 462172] Re: [SRU] samba Too many files are currently in use.

2010-02-19 Thread Martin Pitt
Thank you for testing!

Besterino [2010-02-18 22:35 -]:
 One further observation (but don't know whether that is related to the
 new package)

So the slowdown is not a regression then?

Thanks, Martin

-- 
Martin Pitt| http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)

-- 
[SRU] samba Too many files are currently in use.
https://bugs.launchpad.net/bugs/462172
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524147] Re: UEC NC failed to fetch preseed.conf from CC using lucid-server-amd64-20100218

2010-02-19 Thread Thierry Carrez
Sounds like something has been advertising itself as UEC-TEST1 and
your CC advertised itself under the same name and got published as UEC-
TEST1 #2. That confused the logic in Colin's get_component which failed
to parse the IP from the announcement.

So there may be a bug in that last part, but I suspect the cause was a
duplicate avahi announcement for the same cluster name. Can you
reproduce it ?

** Changed in: eucalyptus (Ubuntu)
   Importance: Undecided = High

** Changed in: eucalyptus (Ubuntu)
   Status: New = Incomplete

-- 
UEC NC failed to fetch preseed.conf from CC using lucid-server-amd64-20100218
https://bugs.launchpad.net/bugs/524147
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to eucalyptus in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id - retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Thierry Carrez
Even small, that's a new feature, so it requires FFe and should probably
not be accepted as a papercut (only bugfixes).

-- 
ssh-import-id - retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 517871] Re: euca-describe-volumes fails in lucid

2010-02-19 Thread Scott Moser
@Thierry,
 You're right. I forgot that. I think its valid to keep it open, but my guess 
is its fixed-released in current released version of euca2ools, but leave that 
up to Eucalyptus people.

-- 
euca-describe-volumes fails in lucid
https://bugs.launchpad.net/bugs/517871
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524101] Re: optionally fetch public ssh keys from Launchpad when starting an instance

2010-02-19 Thread Scott Moser
cloud-config does support passing in ssh keys. Look at
http://bazaar.launchpad.net/%7Ecloud-init-dev/cloud-
init/trunk/annotate/head%3A/doc/examples/cloud-config.txt for
'ssh_authorized_keys'.

I think what you're suggesting is what Dustin realized can be done.  He
opened bug 524226 ., with 'ssh-import-id' on it.  That script would live
inside the image, and then could easily be told to add authorized_keys
on boot via cloud-config.  The 'runcmd' format of cloud-config would
make this trivial:

#cloud-config
runcmd:
 - [ su , -c, ssh-import-id smoser kirkland, ubuntu ]

-- 
optionally fetch public ssh keys from Launchpad when starting an instance
https://bugs.launchpad.net/bugs/524101
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to eucalyptus in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 520707] Re: euca-describe-snapshots invalid literal for int() with base 10

2010-02-19 Thread Thierry Carrez
Unnominating eucalyptus task for lucid (doesn't mean it shouldn't be
fixed)

** Changed in: eucalyptus (Ubuntu Lucid)
   Status: New = Won't Fix

-- 
euca-describe-snapshots invalid literal for int() with base 10
https://bugs.launchpad.net/bugs/520707
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to eucalyptus in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 487919] Re: use avahi-publish to publish an A record without conflicting PTR record

2010-02-19 Thread Thierry Carrez
Closing as invalid since we no longer publish IP addresses. Please
reopen if you disagree...

** Changed in: eucalyptus (Ubuntu Lucid)
   Status: Incomplete = Invalid

-- 
use avahi-publish to publish an A record without conflicting PTR record
https://bugs.launchpad.net/bugs/487919
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to eucalyptus in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 462140] Re: maximum 61 running instances, others shutting down

2010-02-19 Thread Thierry Carrez
Unnominating for lucid, can't be reproduced so far...

** Changed in: eucalyptus (Ubuntu Lucid)
   Status: Incomplete = Won't Fix

-- 
maximum 61 running instances, others shutting down
https://bugs.launchpad.net/bugs/462140
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to eucalyptus in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 494634] Re: node-preseed is not present on cc that are installed manually

2010-02-19 Thread Thierry Carrez
Unnominating for lucid, per previous comment.

** Changed in: eucalyptus (Ubuntu Lucid)
   Status: Triaged = Won't Fix

-- 
node-preseed is not present on cc that are installed manually
https://bugs.launchpad.net/bugs/494634
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to eucalyptus in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 494618] Re: avahi announce should be made on all configured interface in eucalyptus-cc-publication-ip.conf

2010-02-19 Thread Thierry Carrez
Closing as invalid since we no longer publish IP addresses. Please
reopen if you disagree...

** Changed in: eucalyptus (Ubuntu Lucid)
   Status: Incomplete = Invalid

-- 
avahi announce should be made on all configured interface in 
eucalyptus-cc-publication-ip.conf
https://bugs.launchpad.net/bugs/494618
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to eucalyptus in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 522292] Re: euca-bundle-image fails to use symbolic links

2010-02-19 Thread Thierry Carrez
** Summary changed:

- Lucid UEC image 20100215 unable to start on UEC
+ euca-bundle-image fails to use symbolic links

** Changed in: euca2ools (Ubuntu Lucid)
   Status: New = Confirmed

** Changed in: euca2ools (Ubuntu Lucid)
   Importance: Undecided = Low

-- 
euca-bundle-image fails to use symbolic links
https://bugs.launchpad.net/bugs/522292
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524318] Re: Keyboard mapping is not correct in the guest

2010-02-19 Thread Ara Pulido

** Attachment added: BootDmesg.txt
   http://launchpadlibrarian.net/39396448/BootDmesg.txt

** Attachment added: CurrentDmesg.txt
   http://launchpadlibrarian.net/39396449/CurrentDmesg.txt

** Attachment added: Dependencies.txt
   http://launchpadlibrarian.net/39396450/Dependencies.txt

** Attachment added: Lspci.txt
   http://launchpadlibrarian.net/39396451/Lspci.txt

** Attachment added: Lsusb.txt
   http://launchpadlibrarian.net/39396452/Lsusb.txt

** Attachment added: ProcCpuinfo.txt
   http://launchpadlibrarian.net/39396453/ProcCpuinfo.txt

** Attachment added: ProcInterrupts.txt
   http://launchpadlibrarian.net/39396454/ProcInterrupts.txt

** Attachment added: ProcModules.txt
   http://launchpadlibrarian.net/39396455/ProcModules.txt

** Attachment added: RelatedPackageVersions.txt
   http://launchpadlibrarian.net/39396456/RelatedPackageVersions.txt

** Attachment added: UdevDb.txt
   http://launchpadlibrarian.net/39396457/UdevDb.txt

** Attachment added: UdevLog.txt
   http://launchpadlibrarian.net/39396458/UdevLog.txt

** Also affects: qemu
   Importance: Undecided
   Status: New

-- 
Keyboard mapping is not correct in the guest
https://bugs.launchpad.net/bugs/524318
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu-kvm in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524318] [NEW] Keyboard mapping is not correct in the guest

2010-02-19 Thread Ara Pulido
Public bug reported:

Binary package hint: qemu-kvm

Using latest qemu-kvm package in Lucid, with both Ubuntu Server 8.04 and
latest Lucid Ubuntu Server as guests.

During the installation of the guest OS, I select Spain - Spain as the
keyboard mapping. When the installation finishes and I reboot in the new
installed system, the keyboard mapping is not 100% correct.

*Example of a mapping working correctly:*
ñ, as special character in Spanish, and it is mapped correctly

*Example of a mapping NOT working correctly:*
In a Spanish keyboard, pressing Shift+0, should type =, but in KVM it types 
something different.
In general, every special and punctuation characters (_, ., ;, @,..., 
...) are not mapped correctly.

I wonder if this happens in other keyboard mapping as well.

ProblemType: Bug
Architecture: i386
CheckboxSubmission: a08fd14ff73f03f0a48f9e6d0af6c8e2
CheckboxSystem: bb422ca46d02494cdbc459927a98bc2f
Date: Fri Feb 19 10:44:01 2010
DistroRelease: Ubuntu 10.04
InstallationMedia: Ubuntu 9.10 Karmic Koala - Release i386 (20091028.5)
KvmCmdLine: Error: command ['ps', '-C', 'kvm', '-F'] failed with exit code 1: 
UIDPID  PPID  CSZ   RSS PSR STIME TTY  TIME CMD
MachineType: LENOVO 7664R5G
NonfreeKernelModules: nvidia
Package: qemu-kvm 0.12.2-0ubuntu7
PccardctlIdent:
 Socket 0:
   no product info available
PccardctlStatus:
 Socket 0:
   no card
ProcCmdLine: BOOT_IMAGE=/boot/vmlinuz-2.6.32-13-generic 
root=UUID=d72973b5-9d42-4204-a98d-6705012b09bb ro quiet splash
ProcEnviron:
 LANG=en_US.utf8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.32-13.18-generic
SourcePackage: qemu-kvm
Uname: Linux 2.6.32-13-generic i686
dmi.bios.date: 08/15/2008
dmi.bios.vendor: LENOVO
dmi.bios.version: 7LETC4WW (2.24 )
dmi.board.name: 7664R5G
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: 
dmi:bvnLENOVO:bvr7LETC4WW(2.24):bd08/15/2008:svnLENOVO:pn7664R5G:pvrThinkPadT61:rvnLENOVO:rn7664R5G:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 7664R5G
dmi.product.version: ThinkPad T61
dmi.sys.vendor: LENOVO

** Affects: qemu
 Importance: Undecided
 Status: New

** Affects: qemu-kvm (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: apport-bug i386 lucid

-- 
Keyboard mapping is not correct in the guest
https://bugs.launchpad.net/bugs/524318
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu-kvm in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 523131] Re: mysql command line do not accept host param

2010-02-19 Thread Daniele Smartango
in the orginal message, this:
mysql -h myhost.com -u root -proot
ERROR 2005 (HY000): Unknown MySQL server host '' (2)

represent command line, followed by return message, that means: specify 
anything else than localhost mysql client shell utility give the message:
ERROR 2005 (HY000): Unknown MySQL server host '' (2)

It appear that /usr/bin/mysql do not parse command line.
It is the same specifying --host=... or -hmyhost.com

1 step to reproduce: mysql command with host not equal to localhost

-- 
mysql command line do not accept host param
https://bugs.launchpad.net/bugs/523131
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 185729] Re: nautilus is unable to copy folders from samba

2010-02-19 Thread Roel
rylleman, thanks!

-- 
nautilus is unable to copy folders from samba
https://bugs.launchpad.net/bugs/185729
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524341] Re: [FFE] Add amavisd-new-postfix package

2010-02-19 Thread Ante Karamatić

** Patch added: amavisd-new-postfix debdiff
   http://launchpadlibrarian.net/39397909/amavisd-new.debdiff

-- 
[FFE] Add amavisd-new-postfix package
https://bugs.launchpad.net/bugs/524341
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to amavisd-new in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524341] [NEW] [FFE] Add amavisd-new-postfix package

2010-02-19 Thread Ante Karamatić
Public bug reported:

Binary package hint: amavisd-new

Please accept this feature for Ubuntu 10.04. Provided debdiff adds new
package (amavisd-new-postfix) to amavisd-new source, which integrates
amavis, postfix, spamassassin and clamav configurations.

Package builds, installs and works as expected.

Details are available at
https://blueprints.edge.launchpad.net/ubuntu/+spec/server-lucid-more-
mail-integration

Thank you

** Affects: amavisd-new (Ubuntu)
 Importance: Undecided
 Status: New

-- 
[FFE] Add amavisd-new-postfix package
https://bugs.launchpad.net/bugs/524341
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to amavisd-new in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524341] Re: [FFE] Add amavisd-new-postfix package

2010-02-19 Thread Ante Karamatić
Binary should be in universe cause it depends on package from universe.
But since the source is in main, I'm subscribing ubuntu-release. MIRs
will be requested once package is in universe.

-- 
[FFE] Add amavisd-new-postfix package
https://bugs.launchpad.net/bugs/524341
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to amavisd-new in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 41745] Re: amavisd-new does not integrate with Postfix

2010-02-19 Thread Ante Karamatić
Watch bug 41745.

-- 
amavisd-new does not integrate with Postfix
https://bugs.launchpad.net/bugs/41745
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to amavisd-new in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 462172] Re: [SRU] samba Too many files are currently in use.

2010-02-19 Thread Besterino
@Martin:

Don't know exactly what you mean with regression. Before installation
of the patch transfer speed of the 2GB file started at approx. 119MB/sec
and quickly dropped to approx 75-80MB/sec (and stayed there until the
file is copied). With the patch copying of the 2GB file still starts at
approx. 119MB/s and then quickly drops to 60-65MB/sec.

With a large number of rather small files (thousands of html-files
around 55kb), the speed goes down at some point to 3.6-5MB/sec after a
while. Did not pay attention to the exact time when, but I assume speed
goes down significantly when the open file limit is reached.

Read speeds with the 2GB file did not change (approx 50-55MB/sec - which
I consider a bit weird since lower than write speeds, but that's
probably a different story).

Some background info: I'm running the smb-share on a raid5 consisting of
4 consumer 1TB samsung HDD (spinning at 5400rpm). The raid is
exclusively used for hosting files for samba (and the FTP-server, which
was of course not used during testing).

Unfortunately I am away over the weekend but will do some more testing
next week. Happy to test different settings to narrow it down - just let
me know what I should try.

-- 
[SRU] samba Too many files are currently in use.
https://bugs.launchpad.net/bugs/462172
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 521397] Re: Unable to mount shares from Windows ME

2010-02-19 Thread David Lee Lambert
I upgraded to kernel '2.6.28-18-generic'.  Now the general symptom is
the same,  but the exact error-messages are a little bit different.

# ping -c 10 PurpleComputer
...
10 packets transmitted, 10 received, 0% packet loss, time 8999ms
rtt min/avg/max/mdev = 0.446/0.456/0.472/0.028 ms

# smbclient -N -L //PurpleComputer
...
Sharename   Type  Comment
-     ---
...
DQFILES Disk  (password required)
...

# mount /purple/dqfiles
mount error(112): Host is down
Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)
# dmesg
...
[302613.664316]  CIFS VFS: No response for cmd 114 mid 1
[302613.664356]  CIFS VFS: cifs_mount failed w/return code = -112

-- 
Unable to mount shares from Windows ME
https://bugs.launchpad.net/bugs/521397
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 517478] Re: remotely executed netcat (nc) uses -q option which is not universally supported

2010-02-19 Thread Martin Emrich
Same here (Client: Ubuntu 9.10, libvirt server: CentOS 5.4). The patch
in Bug #474107 fixes it for me.

** Changed in: libvirt (Ubuntu)
   Status: New = Confirmed

-- 
remotely executed netcat (nc) uses -q option which is not universally supported
https://bugs.launchpad.net/bugs/517478
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 521397] Re: Unable to mount shares from Windows ME

2010-02-19 Thread David Lee Lambert
OK,  I found a message on the Samba mailing-list that helped.

http://lists.samba.org/archive/linux-cifs-
client/2007-February/001720.html

Using that,  I figured out a work-around:

# mount.cifs //PurpleComputer/DQFILES /purple/dqfiles/ -o 
rw,file_mode=0660,dir_mode=0770,gid=dq,credentials=/root/for-PurpleComputer.cred,ip=192.168.15.6,servernetbiosname=PURPLECOMPUTER
(success)

Having to hard-code the IP address is an annoyance,  but in my case it
is in fact a static IP address.  If it wasn't,  I could put the
following in a script:

mount.cifs //PurpleComputer/DQFILES /purple/dqfiles/ -o
rw,file_mode=0660,dir_mode=0770,gid=dq,credentials=/root/for-
PurpleComputer.cred,ip=`nmblookup PurpleComputer | grep '00' | cut -f
1 -d ' '`,servernetbiosname=PURPLECOMPUTER

-- 
Unable to mount shares from Windows ME
https://bugs.launchpad.net/bugs/521397
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 521397] Re: No longer able to mount shares from Windows ME without knowing IP address

2010-02-19 Thread David Lee Lambert
** Summary changed:

- Unable to mount shares from Windows ME
+ No longer able to mount shares from Windows ME without knowing IP address

-- 
No longer able to mount shares from Windows ME without knowing IP address
https://bugs.launchpad.net/bugs/521397
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 510171] Re: connection from windows clients only works using IP, not using hostname

2010-02-19 Thread Enrique Belarte
I have exactly the same problem on 9.10.

-- 
connection from windows clients only works using IP, not using hostname
https://bugs.launchpad.net/bugs/510171
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 523188] Re: Make it possible again to let dhcp server set the client hostname

2010-02-19 Thread Chuck Short
Thanks for the bug report Ill have a look at this. If possible can you
check to see if this is fixed on lucid?

Regards
chuck

** Changed in: dhcp3 (Ubuntu)
   Importance: Undecided = Medium

** Changed in: dhcp3 (Ubuntu)
   Status: New = Confirmed

-- 
Make it possible again to let dhcp server set the client hostname
https://bugs.launchpad.net/bugs/523188
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dhcp3 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524450] [NEW] smbd panic using root postexec

2010-02-19 Thread Chris Weiss
Public bug reported:

Binary package hint: samba

Using ubuntu 9.04, samba 3.3.2, package version 2:3.3.2-1ubuntu3.3
I have some shares for which I use a root preexec and root postexec to loop 
mount and unmount an ISO for so I can share some CDrom instead of carrying them 
all over the place or extracting them (I also mount them from VMWare so i want 
to keep them as ISO's) and this setup has been working great on 8.04 with samba 
3.0.28a.

on 9.04, the preexec works, but on disconnecting from the share the
postexec doesn't seem to fire (or at least the loop mounted ISO  doesn't
get unmounted) and smbd panics.  Running my postexec script manually
does work.  I've attached the log that shows the panic.

in the log you can me trying 2 shares, both are defined the same way,
but the 2nd has a force user=root in an attempt to see if it's an odd
permissions issue.

** Affects: samba (Ubuntu)
 Importance: Undecided
 Status: New

-- 
smbd panic using root postexec
https://bugs.launchpad.net/bugs/524450
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524450] Re: smbd panic using root postexec

2010-02-19 Thread Chris Weiss

** Attachment added: log.chrisww.gz
   http://launchpadlibrarian.net/39404792/log.chrisww.gz

-- 
smbd panic using root postexec
https://bugs.launchpad.net/bugs/524450
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524447] [NEW] virsh save is very slow

2010-02-19 Thread Chris Bainbridge
Public bug reported:

As reported here: http://www.redhat.com/archives/libvir-
list/2009-December/msg00203.html

virsh save is very slow - it writes the image at around 1MB/sec on my
test system.

(I think I saw a bug report for this issue on Fedora's bugzilla, but I
can't find it now...)

Confirmed under Karmic.

** Affects: libvirt (Ubuntu)
 Importance: Undecided
 Status: New

-- 
virsh save is very slow
https://bugs.launchpad.net/bugs/524447
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 523148] Re: virsh console does not work (/dev/pts/1: Permission denied)

2010-02-19 Thread Chuck Short
http://libvirt.org/git/?p=libvirt.git;a=blobdiff;f=src/qemu/qemu_monitor_text.c;h=5b9ced21402fe1712f0e4db89bdf9f1d695159ff;hp=ab361c6f2b528592d1f96bb1846483fdf80536b1;hb=c0a9b6a5338e54b64a4a28415ffbdb6bcc2b38c5;hpb=aee70b7482b4eb7c69f5cacfeb364000294300aa

Is the supposed fix.

** Changed in: libvirt (Ubuntu)
   Importance: Undecided = Medium

** Changed in: libvirt (Ubuntu)
   Status: New = Triaged

-- 
virsh console does not work (/dev/pts/1: Permission denied)
https://bugs.launchpad.net/bugs/523148
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


Re: [Bug 524318] Re: Keyboard mapping is not correct in the guest

2010-02-19 Thread Dustin Kirkland
Ara-

Could you have a look at Bug #524439 and see if it's the same issue?

-- 
Keyboard mapping is not correct in the guest
https://bugs.launchpad.net/bugs/524318
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu-kvm in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id - retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Thierry Carrez
Additional comment to my comment 6 above, just to make clear that the
fact that it requires FFe and fails to meet papercuts criteria doesn't
prevent this from being a good idea.

I think it would be a very valuable feature for our cloud images, as
long as we get the security issues around it right. Since it's a
standalone feature, it doesn't affect the stability of the product so
I'd support an early FFe for it.

-- 
ssh-import-id - retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id - retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Jamie Strandboge
While I can see the utility of this script in certain situations, I'm
not sure it is generally useful enough to put in openssh, or even cloud-
init. It really feels like it should be in its own package. Also, I
think we can assume that someone will one day want to run this as root,
since the idea is to share the VM, and people will likely want to share
all of it. As such, I reviewed the script and feel several improvements
should be made. I don't claim this as an exhaustive review and may have
missed something. These are in no particular order. I hope others will
review it as well.

1. there is no input validation for the '-u' url. Combined with the
'printf' this is a format string vulnerability. I haven't thought about
what all you could do with it, but you really only want %s anyway, so
enforce it.

2. only '$i' is url encoded. Since -u contains untrusted input, you
should url encode it as well

3. there is no input validation for the '-d' option. I can then do -d
'/etc/cron.daily' (or any number of fun things). Note there is no
privilege escalation, but there is also no reason why the script should
write to '/etc/cron.daily'. I suggest rather than using a directory, you
specify a local user. Then use 'getent passwd $local_user' to get the
$HOME directory, then tack '.ssh' on to that. You can then do fascist
input validation on $local_user. You can look at adduser for hints on
valid user names

4. http or any cleartext protocol *must not* be allowed otherwise very
serious man in the middle scenarios are easily possible

5. There is no validation for '$pubkey', which could lead to an invalid
entry in the authorized keys file. This is particularly worrisome since
the script trusts the response from the server completely. There are all
kinds of things that can happen here, from a DoS with 'from=..,!you'
to multiple keys being downloaded.

6. there is a TOCTOU issue on the mkdir and then later with file. For the 
mkdir, use this instead (I left out '-p' intentionally, since if the user's 
$HOME as seen through 'getent' doesn't exist, it is probably for a reason): 
mkdir -m 0700 $dir 2/dev/null || true
test -d $dir || fail failed to make ${dir}

For file, I suggest doing something like (notice we can perform validation on 
the tmp file before committing to authorized keys):
tmp=`mktemp`
trap rm -f $tmp EXIT HUP INT QUIT TERM
...
echo $pubkey   $tmp || fail failed to write to ${file}
validate_authorized_keys $tmp || fail Invalid entry. Aborting
mv -f $tmp $file

7. the script should use 'set -e'

8. this line should probably be broken up, with each failure being reported on 
its own:
if url_encode $i  cururl=$(printf $url ${_RET}) 
   pubkey=$(wget --quiet -O- $cururl)  [ -n ${pubkey} ]; then

9. I'd like to see enforcement of valid ssl certs from the server,
otherwise we can be man-in-the-middled

10. Due to the nature of the script, I'd recommend scrubbing the
environment in some way (perhaps 'env -i' before the commands or change
to bash and use 'set -p'). If you used bash, you could maybe even get
away with using '-r' (restricted shell) if you got rid of the '' and
used wget to append to the tmp file instead. I've not tested any of
these suggestions.

TBH, after reviewing the code and thinking a little about what could go
wrong, my initial reaction is that this is too scary for openssh and
cloud-init (and potentially main, but I'll let the MIR team comment on
that). Also, since this is being thought of as helpful with the cloud,
it is easy to imagine this command  being used in ways for which the
script is not currently designed to handle, such as in combination with
a web service of some sort. Integration into these types of environments
would require even more scrutiny and careful planning.

-- 
ssh-import-id - retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id - retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Dustin Kirkland
Colin-

Thanks for the comment.  I agree that such a script should undergo a
*thorough* review before being accepted into our openssh-server package.

I also see your point, that ssh-copy-id is doing it's work over ssh
itself.

In the default configuration, ssh-import-id works against Launchpad.net,
over SSL, with a valid certificate.  SSL should prevent both
eavesdropping and tampering, end-to-end, between the client and the
server, and the server should be authenticated to the client (assuming a
valid certificate and a 3rd party certificate authority).  An invalid
certificate will fail the wget, and prevent a key from being written.
This would mean that we'd need to keep our certificate current for
Launchpad.net, which I'd hope is a safe assumption.  And anyone
modifying their URL parameter would need to expect the same from their
keyserver.

The SSL assumption is a safe one (in my opinion), as it is the same
assumption we make as we conduct all sorts of private, critical business
over https everyday.

Also, this script runs as a non-privileged user, modifying their own
authorized_keys file, obviously something they could do on their own.  I
don't think it does anything special, tricky, or exceptional in this
way.

Finally, I'd argue that the utility is non-intrusive.  It doesn't change
the behavior of anything else in SSH, or interrupt any other operations.

I'm certainly willing to work the FFe end of this and try to get it
accepted ASAP (Alpha3?), as it's something I really believe can make our
Ubuntu Server EC2/UEC images stand out among available images.  If that
means this script should live in one of our cloud-* packages for Lucid,
so be it.

I just thought that openssh-server would be the appropriate home for
such a utility (eventually), and I thought I'd start a conversation
here.

Thanks,
:-Dustin

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id - retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Dustin Kirkland
Kees-

  * May I ask for your opinion?
  * Do we want it to remain non-trivial to add public keys to authorized_keys?  
Is there a security reason for doing so?
  * Is this ssh-import-id utility just a bad idea?
  * Do you have security concerns about the key retrieval method?
  * Is SSL and/or Launchpad unsuitable for this sort of thing?
  * Would there be any reason to force the client to authenticate with the 
server too?  (I'd think not, as this is a public key, and an open URI).
  * Is it inadvisable to put such a utility in /usr/bin such that it's 
discoverable in the default path?  Would it be better to hide it away in 
/usr/lib or something?
  * Is openssh-server the right/wrong place for this utility?  Does the answer 
to that question change whether we're talking about Lucid or Lucid+1?
  * Does this open up new opportunities for abuse somehow?

:-Dustin

** Summary changed:

- ssh-import-id - retrieve a key from a public keyserver and add to the 
authorized_keys file
+ ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 257153] Re: TLS: peer cert untrusted or revoked (0x82) error in Hardy's version of ldap-utils

2010-02-19 Thread kommissar
I'm trying to figure out what's wrong with my OpenLDAP setup.  I have
the same problem that gdowle had, but I'm already using an x509 V3 CA
Certificate using sha1WithRSAEncryption as a Signing Algorithm.  Here's
some relevant information:

openssl s_client -connect serv1.myorganization.com:636 -showcerts -CAfile
/etc/openldap/ssl/cacert.pem

The output is a bunch of certificate information and then at the end:

New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 1024 bit
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol  : TLSv1
Cipher: AES256-SHA
Session-ID: 816212B370246B17944C3E6F39017C8413643AF164EFC3EDD240CD751D370FFB
Session-ID-ctx: 
Master-Key: 
5970251BDBD2A821813659ECCF6FA2A04EF13C8D386817E15F093475488B510AFDF984D850C5B1ADA776067D8D879F91
Key-Arg   : None
Start Time: 1266594131
Timeout   : 300 (sec)
Verify return code: 0 (ok)
---
DONE

but this does not work:

gnutls-cli --print-cert -p 636 --x509cafile /etc/openldap/ssl/cacert.pem
serv1.myorganization.com

Connecting to 'XXX.XXX.XXX.XXX:636'...
- Certificate type: X.509
 - Got a certificate list of 2 certificates.
 - Certificate[0] info:

-BEGIN CERTIFICATE-
...
-END CERTIFICATE-

 # The hostname in the certificate matches 'serv1.myorganization.com'.
 # valid since: Tue Apr 28 10:55:23 EDT 2009
 # expires at: Fri Apr 26 10:55:23 EDT 2019
 # fingerprint: B1:A0:5F:02:C0:72:BE:2C:7F:AC:3E:B1:05:74:93:A1
 # Subject's DN: ...

 - Certificate[1] info:


-BEGIN CERTIFICATE-
...
-END CERTIFICATE-

# valid since: Tue Apr 28 10:46:26 EDT 2009
 # expires at: Fri Apr 26 10:46:26 EDT 2019
 # fingerprint: 0D:1C:D5:AA:BC:3B:23:4F:95:51:1C:7F:78:1D:49:B7
 # Subject's DN:...

- Peer's certificate is NOT trusted
- Version: TLS 1.0
- Key Exchange: RSA
- Cipher: AES 256 CBC
- MAC: SHA
- Compression: DEFLATE
*** Verifying server certificate failed...


I thought that this bug might have been relevant, but gdowle's fix was to 
create an x509 v3 certificate using the Signature
Algorithm sha1With RSAEncryption, but that's what we have already...

openssl x509 -in /etc/openldap/ssl/cacert.pem -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 0 (0x0)
Signature Algorithm: sha1WithRSAEncryption
Issuer:...
Validity
Not Before: Apr 28 14:46:26 2009 GMT
Not After : Apr 26 14:46:26 2019 GMT
Subject: ...
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit): ...
Exponent: ...
X509v3 extensions:
X509v3 Basic Constraints: 
CA:FALSE
Netscape Comment: 
OpenSSL Generated Certificate
X509v3 Subject Key Identifier: 
3D:B9:10:D1:81:97:38:04:6C:5D:7C:6C:6C:7B:FE:8B:DF:BA:E3:B4
X509v3 Authority Key Identifier: 

keyid:3D:B9:10:D1:81:97:38:04:6C:5D:7C:6C:6C:7B:FE:8B:DF:BA:E3:B4

Signature Algorithm: sha1WithRSAEncryption


One thing that worries me is this:
X509v3 extensions:
X509v3 Basic Constraints: 
CA:FALSE

The CA was made by 
openssl req -new -keyout private/cakey.pem -out careq.pem
openssl ca -out cacert.pem -in careq.pem -days 3650 -keyfile private/cakey.pem 
-selfsign

but some guides I see say to generate it with openssl req -new -x509
-days 3650 -extensions v3_ca -keyout private/cakey.pem -out cacert.pem
-config /etc/ssl/openssl.cnf

Was the CA made incorrectly?

-- 
TLS: peer cert untrusted or revoked (0x82) error in Hardy's version of 
ldap-utils
https://bugs.launchpad.net/bugs/257153
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Jamie Strandboge
I couldn't remember if wget would error out on an invalid certification, but 
reading the man page for wget, it seems that as long as wget is compiled with 
openssl, it will error out (good).
As of Wget 1.10, the default is to verify the server's certificate against the 
recognized certificate authorities, breaking the SSL handshake and aborting the 
download if the verification fails.  Although this provides more secure 
downloads, it does break interoperability with some sites that worked with 
previous Wget versions, particularly those using self-signed, expired, or 
otherwise invalid certificates.

I do also want to mention that most of the coding issues I brought up
are not significant in the expected usage of a regular user running the
command and giving the appropriate options (ie, it is a lot easier to
just create a directory with authorized_keys in it rather than
subverting this script). Running as root brings a few more concerns, but
really it is if/when this script becomes part of a larger system that
the issues I pointed out can become serious. Since we don't know how
people will be using it, IMHO it is important to program as defensively
as possible.

I think it's vitally important to enforce https and to validate the new
authorized_keys file, ideally with fingerprint and confirmation (and
what about ssh-vulnkey for good measure? Perhaps overkill, but certainly
doable).

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


Re: [Bug 524226] Re: ssh-import-id - retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Dustin Kirkland
On Fri, Feb 19, 2010 at 8:47 AM, Jamie Strandboge ja...@ubuntu.com wrote:
 While I can see the utility of this script in certain situations, I'm
 not sure it is generally useful enough to put in openssh, or even cloud-
 init. It really feels like it should be in its own package. Also, I
 think we can assume that someone will one day want to run this as root,
 since the idea is to share the VM, and people will likely want to share
 all of it. As such, I reviewed the script and feel several improvements
 should be made. I don't claim this as an exhaustive review and may have
 missed something. These are in no particular order. I hope others will
 review it as well.

Thanks for the review, Jamie.

 1. there is no input validation for the '-u' url. Combined with the
 'printf' this is a format string vulnerability. I haven't thought about
 what all you could do with it, but you really only want %s anyway, so
 enforce it.

Actually, I would like to drop the -u parameter altogether for the
first cut of the utility.  Localize the variable entirely, forcing
Launchpad.net as the only valid URL.  Users wanting another URL would
need to copy the script and edit it locally.

 2. only '$i' is url encoded. Since -u contains untrusted input, you
 should url encode it as well

Agreed.  Moot point, though, if we drop -u.

 3. there is no input validation for the '-d' option. I can then do -d
 '/etc/cron.daily' (or any number of fun things). Note there is no
 privilege escalation, but there is also no reason why the script should
 write to '/etc/cron.daily'. I suggest rather than using a directory, you
 specify a local user. Then use 'getent passwd $local_user' to get the
 $HOME directory, then tack '.ssh' on to that. You can then do fascist
 input validation on $local_user. You can look at adduser for hints on
 valid user names

Good suggestion.  But I'd also like to drop -d for now too, in the
interest of simplicity.  I was only using it for testing.  I think the
assumption should be that only the user running the script can write
to their own $HOME/.ssh/authorized_keys file (which presumably they
can do already).

 4. http or any cleartext protocol *must not* be allowed otherwise very
 serious man in the middle scenarios are easily possible

Agreed.  The wget I used enforces certificates, and fails if
certificate is invalid.  Again, if we drop the -u parameter, and force
the https://launchpad.net... URL, I think we're safe here.

 5. There is no validation for '$pubkey', which could lead to an invalid
 entry in the authorized keys file. This is particularly worrisome since
 the script trusts the response from the server completely. There are all
 kinds of things that can happen here, from a DoS with 'from=..,!you'
 to multiple keys being downloaded.

Great point.  This should be fixed.

 6. there is a TOCTOU issue on the mkdir and then later with file. For the 
 mkdir, use this instead (I left out '-p' intentionally, since if the user's 
 $HOME as seen through 'getent' doesn't exist, it is probably for a reason):
 mkdir -m 0700 $dir 2/dev/null || true
 test -d $dir || fail failed to make ${dir}

Thanks, agreed.

 For file, I suggest doing something like (notice we can perform validation on 
 the tmp file before committing to authorized keys):
 tmp=`mktemp`
 trap rm -f $tmp EXIT HUP INT QUIT TERM
 ...
 echo $pubkey   $tmp || fail failed to write to ${file}
 validate_authorized_keys $tmp || fail Invalid entry. Aborting
 mv -f $tmp $file

Agreed.

 7. the script should use 'set -e'

Ah, now I see...  You're looking at Scott's script, and not mine.  I
used set -e.  He used a bunch of fancier stuff, including the -u and
-d parameters, and did not use set -e.

 8. this line should probably be broken up, with each failure being reported 
 on its own:
 if url_encode $i  cururl=$(printf $url ${_RET}) 
           pubkey=$(wget --quiet -O- $cururl)  [ -n ${pubkey} ]; then

Right.

 9. I'd like to see enforcement of valid ssl certs from the server,
 otherwise we can be man-in-the-middled

Hmm, I thought this was already done?  The wget will fail without a
valid cert, and thus it should not be written to auth_keys.

 10. Due to the nature of the script, I'd recommend scrubbing the
 environment in some way (perhaps 'env -i' before the commands or change
 to bash and use 'set -p'). If you used bash, you could maybe even get
 away with using '-r' (restricted shell) if you got rid of the '' and
 used wget to append to the tmp file instead. I've not tested any of
 these suggestions.

Yes, good call.

 TBH, after reviewing the code and thinking a little about what could go
 wrong, my initial reaction is that this is too scary for openssh and
 cloud-init (and potentially main, but I'll let the MIR team comment on
 that). Also, since this is being thought of as helpful with the cloud,
 it is easy to imagine this command  being used in ways for which the
 script is not currently designed to handle, such as in combination with
 a web service 

[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Marc Deslauriers
Standard practice would be to display the ssh key's fingerprint and ask
the user to validate it before importing it automatically.

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524143] Re: #522797

2010-02-19 Thread Draycen DeCator
*** This bug is a duplicate of bug 522797 ***
https://bugs.launchpad.net/bugs/522797

Thank you for taking the time to report this bug and helping to make
Ubuntu better. This particular bug has already been reported and is a
duplicate of bug 522797, so it is being marked as such. Please look at
the other bug report to see if there is any missing information that you
can provide, or to see if there is a workaround for the bug.
Additionally, any further discussion regarding the bug should occur in
the other report.  Please continue to report any other bugs you may
find.

** Changed in: postfix (Ubuntu)
   Status: New = Confirmed

** This bug has been marked a duplicate of bug 522797
   Cancelled the Postfix configuration window. It then crashed.

-- 
#522797
https://bugs.launchpad.net/bugs/524143
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to postfix in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Dustin Kirkland
Marc-

I think that's true if you're receiving an arbitrary key from an
untrusted source (such as the first time you log into a remote server).

However, in this case, I think:
 a) You're communicating over SSL with a server and a valid certificate (hence, 
the server is authenticated and attested)
 b) The user who's keys you are retrieving had to authenticate themselves with 
Launchpad in order to upload their key, all of which was conducted over SSL.

In this case, I think the chain of trust comes down to:
 a) Are you sure you're talking to Launchpad.net?
 b) Are you sure that the user who's key you're retrieving authenticated with 
Launchpad when uploading these keys?

I believe these are assumptions you and I safely make every day, in the
course of our daily work through firefox, dput, apt-get, and various
other utilities.

:-Dustin

** Attachment removed: ssh-import-id
   http://launchpadlibrarian.net/39387619/ssh-authorize

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Dustin Kirkland
Attaching updated version based on Jamie's excellent feedback.  I
believe I have addressed the concerns that he has raised so far.

** Attachment added: ssh-copy-id (kirkland's version)
   http://launchpadlibrarian.net/39410267/ssh-import-id

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 513135] Re: MySQL logrotate script returns with error when server isn't running

2010-02-19 Thread C de-Avillez
** Bug watch added: Debian Bug tracker #544013
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544013

** Also affects: mysql-server via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544013
   Importance: Unknown
   Status: Unknown

-- 
MySQL logrotate script returns with error when server isn't running
https://bugs.launchpad.net/bugs/513135
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Marc Deslauriers
Dustin,

Now that you've removed the ability to specify an arbitrary URL, I think
that's a fair assumption.

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524594] [NEW] [FFE] Please sync drbd8 from ubuntu-ha PPA

2010-02-19 Thread Ante Karamatić
Public bug reported:

Please sync drbd-8.3.7-1ubuntu1 from ubuntu-ha PPA:

https://edge.launchpad.net/~ubuntu-ha/+archive/lucid-cluster

** Affects: drbd8 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
[FFE] Please sync drbd8 from ubuntu-ha PPA
https://bugs.launchpad.net/bugs/524594
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to drbd8 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524594] Re: [FFE] Please sync drbd8 from ubuntu-ha PPA

2010-02-19 Thread Ante Karamatić
There were no significant upstream changes comparing to current version
in lucid, except configuration split into .d directory and build
procedure.

-- 
[FFE] Please sync drbd8 from ubuntu-ha PPA
https://bugs.launchpad.net/bugs/524594
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to drbd8 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Jamie Strandboge
Dustin,

Thanks for your work on this. I have a couple of small nits and a bug fix:
1. in url_encode(), error(), warn() and info() you use something like 'printf 
ERROR: $...@\n'. It would be better to use something like 'printf ERROR: 
%s\n $@'

2. env -i isn't doing what you want here. You prefix env -i at the beginning of 
a command. Eg, compare the difference between these commands:
$ env -i sh -c set
$ sh -c set

I think it is probably overkill to do this for every command. The only one I 
would probably use it on is 'wget', since we are trusting it to handle the ssl 
certificate properly. Even this is probably a bit pedantic. But, it wouldn't 
hurt:
if env -i wget --quiet -O- $url  $tmp; then...

3. there is a bug when calculating 'lines' in validate_keys(). wc returns 0 if 
it doesn't have a newline, which the wget response may not. I suggest doing:
echo   $tmp # needed for wc
if ! validate_keys $tmp; then
...

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 368323] Re: dovecot refuses connection after upgrade

2010-02-19 Thread Chuck Short
We are closing this bug report because it lacks the information we need
to investigate the problem, as described in the previous comments.
Please reopen it if you can give us the missing information, and don't
hesitate to submit bug reports in the future. To reopen the bug report
you can click on the current status, under the Status column, and change
the Status back to New. Thanks again!

** Changed in: dovecot (Ubuntu)
   Status: Incomplete = Invalid

-- 
dovecot refuses connection after upgrade
https://bugs.launchpad.net/bugs/368323
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dovecot in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 484807] Re: module blacklisting not respected

2010-02-19 Thread AmenophisIII
kvm was patched so that it does not block other VMMs, if it is just loaded but 
not used.
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=10474ae8945ce08622fd1f3464e55bd817bf2376
this is afaik included in 2.6.33 (eventually released in the next days).

-- 
module blacklisting not respected
https://bugs.launchpad.net/bugs/484807
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu-kvm in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 516738] Re: image store broken on Lucid

2010-02-19 Thread Scott Moser
The patch applied here broke reading of user config file.

+   user_eucarc = None
+   if 'HOME' in os.environ:
+   os.path.join(os.getenv('HOME'), .eucarc)

should be:

+   user_eucarc = None
+   if 'HOME' in os.environ:
+   user_eucarc = os.path.join(os.getenv('HOME'), .eucarc)

-- 
image store broken on Lucid
https://bugs.launchpad.net/bugs/516738
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to image-store-proxy in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524652] [NEW] euca2ools do not read $HOME/.eucarc

2010-02-19 Thread Scott Moser
Public bug reported:

Binary package hint: euca2ools

the fix for bug 516738 regressed bug 485106.

The fix should have been:
+ user_eucarc = None
+ if 'HOME' in os.environ:
+ os.path.join(os.getenv('HOME'), .eucarc)

should be:

+ user_eucarc = None
+ if 'HOME' in os.environ:
+ user_eucarc = os.path.join(os.getenv('HOME'), .eucarc)

user_eucarc is never set to anything other than None, as a result, no
$HOME/.eucarc is ever read.

** Affects: eucalyptus
 Importance: Undecided
 Status: New

** Affects: euca2ools (Ubuntu)
 Importance: Medium
 Status: Confirmed

** Affects: euca2ools (Ubuntu Lucid)
 Importance: Medium
 Status: Confirmed

** Also affects: eucalyptus
   Importance: Undecided
   Status: New

** Changed in: euca2ools (Ubuntu)
   Status: New = Confirmed

** Changed in: euca2ools (Ubuntu)
   Importance: Undecided = Medium

-- 
euca2ools do not read $HOME/.eucarc
https://bugs.launchpad.net/bugs/524652
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524652] Re: euca2ools do not read $HOME/.eucarc

2010-02-19 Thread Dustin Kirkland
** Also affects: euca2ools (Ubuntu Lucid)
   Importance: Medium
   Status: Confirmed

-- 
euca2ools do not read $HOME/.eucarc
https://bugs.launchpad.net/bugs/524652
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524652] Re: euca2ools do not read $HOME/.eucarc

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:~smoser/ubuntu/lucid/euca2ools/lucid

-- 
euca2ools do not read $HOME/.eucarc
https://bugs.launchpad.net/bugs/524652
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Dustin Kirkland
Jamie,

Thanks again.

 (1) printf ...  Got it, thanks.  Fixed in new upload.
 (2) env ...  Ah, I see.  Also, fixed in new upload.
 (3) Got it, good catch.

One more thing I found/fixed...  The grep for existing keys wasn't
working properly.  So I fixed it with a unique sort on the file (to make
the script idempotent on the same id or multiple identical keys).

** Attachment added: ssh-import-id
   http://launchpadlibrarian.net/39429267/ssh-import-id

** Attachment removed: ssh-import-id (kirkland's version)
   http://launchpadlibrarian.net/39410267/ssh-import-id

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 512975] Re: mail_location not set and autodetection failed: Mail storage autodetection failed with home=/home/USERNAME

2010-02-19 Thread Launchpad Bug Tracker
This bug was fixed in the package dovecot - 1:1.2.9-1ubuntu3

---
dovecot (1:1.2.9-1ubuntu3) lucid; urgency=low

  * debian/patches/fix-mbox-autodetection.patch: Allow mailbox creation when 
autodetecting.
(LP: #512975)
 -- Chuck Short zul...@ubuntu.com   Fri, 19 Feb 2010 15:04:29 -0500

** Changed in: dovecot (Ubuntu Lucid)
   Status: Confirmed = Fix Released

-- 
mail_location not set and autodetection failed: Mail storage autodetection 
failed with home=/home/USERNAME
https://bugs.launchpad.net/bugs/512975
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to dovecot in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Dustin Kirkland

** Attachment removed: ssh-import-id (kirkland's version)
   http://launchpadlibrarian.net/39429267/ssh-import-id

** Attachment added: ssh-import-id (kirkland's version)
   http://launchpadlibrarian.net/39429418/ssh-import-id

** Attachment removed: ssh-import-id (kirkland's version)
   http://launchpadlibrarian.net/39429418/ssh-import-id

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Dustin Kirkland

** Attachment added: ssh-import-id (kirkland's version)
   http://launchpadlibrarian.net/39429482/ssh-import-id

** Attachment removed: ssh-import-id (kirkland's version)
   http://launchpadlibrarian.net/39429482/ssh-import-id

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524226] Re: ssh-import-id: retrieve a key from a public keyserver and add to the authorized_keys file

2010-02-19 Thread Dustin Kirkland

** Attachment added: ssh-import-id (kirkland's version)
   http://launchpadlibrarian.net/39429538/ssh-import-id

-- 
ssh-import-id: retrieve a key from a public keyserver and add to the 
authorized_keys file
https://bugs.launchpad.net/bugs/524226
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524652] Re: euca2ools do not read $HOME/.eucarc

2010-02-19 Thread Neil Soman
Fixed in revno 255.

-- 
euca2ools do not read $HOME/.eucarc
https://bugs.launchpad.net/bugs/524652
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 462172] Re: [SRU] samba Too many files are currently in use.

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/samba

-- 
[SRU] samba Too many files are currently in use.
https://bugs.launchpad.net/bugs/462172
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 328874] Re: getent group crashes winbindd on domain controller

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/samba

-- 
getent group crashes winbindd on domain controller
https://bugs.launchpad.net/bugs/328874
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 260687] Re: Purging samba breaks login (pam_smbpass.so segfaults)

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/samba

-- 
Purging samba breaks login (pam_smbpass.so segfaults)
https://bugs.launchpad.net/bugs/260687
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 247087] Re: samba init script status action

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/samba

-- 
samba init script status action
https://bugs.launchpad.net/bugs/247087
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 241448] Re: Playing from Samba SMB shared folder now is not possible (it could be done until last upgrade).

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/samba

-- 
Playing from Samba SMB shared folder now is not possible (it could be done 
until last upgrade).
https://bugs.launchpad.net/bugs/241448
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 112839] Re: I/O error on access to SMB shares of OS/2 Warp 4 host mounted in Ubuntu 7.04

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/samba

-- 
I/O error on access to SMB shares of OS/2 Warp 4 host mounted in Ubuntu 7.04
https://bugs.launchpad.net/bugs/112839
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 32067] Re: public Samba SMB shares cannot be accessed anonymously from Windows XP, a password prompt appears

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/samba

-- 
public Samba SMB shares cannot be accessed anonymously from Windows XP, a 
password prompt appears
https://bugs.launchpad.net/bugs/32067
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 241448] Re: Playing from Samba SMB shared folder now is not possible (it could be done until last upgrade).

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/dapper-security/samba

** Branch linked: lp:ubuntu/feisty-updates/samba

** Branch linked: lp:ubuntu/gutsy-security/samba

** Branch linked: lp:ubuntu/hardy-updates/samba

-- 
Playing from Samba SMB shared folder now is not possible (it could be done 
until last upgrade).
https://bugs.launchpad.net/bugs/241448
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 502878] Re: [SRU] Samba 3.4.0 won't let win98 clients to connect

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/karmic-proposed/samba

-- 
[SRU] Samba 3.4.0 won't let win98 clients to connect
https://bugs.launchpad.net/bugs/502878
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 500457] Re: [SRU] Please backport fix for pointprint samba support

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/karmic-proposed/samba

-- 
[SRU] Please backport fix for pointprint samba support
https://bugs.launchpad.net/bugs/500457
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 479955] Re: [SRU] winbind authentication fails after karmic upgrade

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/karmic-proposed/samba

-- 
[SRU] winbind authentication fails after karmic upgrade
https://bugs.launchpad.net/bugs/479955
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 462172] Re: [SRU] samba Too many files are currently in use.

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/karmic-proposed/samba

-- 
[SRU] samba Too many files are currently in use.
https://bugs.launchpad.net/bugs/462172
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 467426] [NEW] openssh package installation crashed when installed via synaptic package manager

2010-02-19 Thread Launchpad Bug Tracker
You have been subscribed to a public bug:

When installing openssh-server via Synaptic Package Manager, the
installer returned an error. Unfortunately, I cannot detail the
situation, since that happened yesterday. I could not report the bug at
that exact time, because the bug reporting system asked me to verify my
e-mail address and my e-mail password is stored in a truecrypt
container, so I had to install truecrypt first and then I forgot about
it, but, in any case, a second attempt at installing the package was
successful.

Perhaps the administrators and contributors to the Ubuntu bug reporting
engine should think about a truly automatic error reporting solution,
without user accounts, email checking and so on. Just a window asking
for some additional details from the user and, afterwards, automatic
submitting of that data.

ProblemType: Package
Architecture: i386
Date: Fri Oct 30 19:05:56 2009
DistroRelease: Ubuntu 9.10
ErrorMessage: subprocess new pre-installation script killed by signal 
(Segmentation fault)
InstallationMedia: Ubuntu 9.10 Karmic Koala - Release i386 (20091028.5)
Package: openssh-server 1:5.1p1-6ubuntu2
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
SourcePackage: openssh
Title: package openssh-server 1:5.1p1-6ubuntu2 failed to install/upgrade: 
subprocess new pre-installation script killed by signal (Segmentation fault)
Uname: Linux 2.6.31-14-generic i686

** Affects: openssh (Ubuntu)
 Importance: Undecided
 Status: Incomplete


** Tags: apport-package i386
-- 
openssh package installation crashed when installed via synaptic package manager
https://bugs.edge.launchpad.net/bugs/467426
You received this bug notification because you are a member of Ubuntu Server 
Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524696] [NEW] imdb smart url fails to work

2010-02-19 Thread arky
Public bug reported:

Binary package hint: elinks

Searching for imdb titles with 'imdb keyword' no longer works.

ProblemType: Bug
Architecture: i386
Date: Sat Feb 20 04:09:19 2010
DistroRelease: Ubuntu 10.04
Package: elinks 0.12~pre5-2ubuntu1
ProcEnviron:
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.32-6.8-generic
SourcePackage: elinks
Uname: Linux 2.6.32-6-generic i686

** Affects: elinks (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: apport-bug i386 lucid

-- 
imdb smart url fails to work
https://bugs.launchpad.net/bugs/524696
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to elinks in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524696] Re: imdb smart url fails to work

2010-02-19 Thread arky

** Attachment added: Dependencies.txt
   http://launchpadlibrarian.net/39431799/Dependencies.txt

-- 
imdb smart url fails to work
https://bugs.launchpad.net/bugs/524696
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to elinks in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 467426] Re: openssh package installation crashed when installed via synaptic package manager

2010-02-19 Thread Jean-Baptiste Lallement
Thanks for your report.

The relevant error is
===
Unpacking openssh-server (from .../openssh-server_1%3a5.1p1-6ubuntu2_i386.deb) 
...
dpkg: error processing 
/var/cache/apt/archives/openssh-server_1%3a5.1p1-6ubuntu2_i386.deb (--unpack):
 subprocess new pre-installation script killed by signal (Segmentation fault)

reaffecting to openssh.

Is it still an issue ?

** Package changed: synaptic (Ubuntu) = openssh (Ubuntu)

** Changed in: openssh (Ubuntu)
   Status: New = Incomplete

-- 
openssh package installation crashed when installed via synaptic package manager
https://bugs.launchpad.net/bugs/467426
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 495306] [NEW] dpkg-reconfigure slapd does not let enter password

2010-02-19 Thread Launchpad Bug Tracker
You have been subscribed to a public bug:

Binary package hint: synaptic

I try to follow instructions (
https://help.ubuntu.com/8.10/serverguide/C/openldap-server.html ) to
configure ldap, but fail on first step:

sudo dpkg-reconfigure slapd

It does not ask for password and does not create database.

ProblemType: Bug
Architecture: amd64
Date: Fri Dec 11 14:05:18 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/sbin/synaptic
NonfreeKernelModules: nvidia
Package: synaptic 0.62.7ubuntu6
ProcEnviron:
 SHELL=/bin/bash
 PATH=(custom, no user)
 LANG=en_AU.UTF-8
 LANGUAGE=
 lc_time=en...@time.utf-8
ProcVersionSignature: Ubuntu 2.6.31-15.50-generic
SourcePackage: synaptic
Uname: Linux 2.6.31-15-generic x86_64

** Affects: openldap (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: amd64 apport-bug
-- 
dpkg-reconfigure slapd does not let enter password
https://bugs.edge.launchpad.net/bugs/495306
You received this bug notification because you are a member of Ubuntu Server 
Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 495306] Re: dpkg-reconfigure slapd does not let enter password

2010-02-19 Thread Jean-Baptiste Lallement
Thank you for taking the time to report this bug and helping to make
Ubuntu better. This bug did not have a package associated with it, which
is important for ensuring that it gets looked at by the proper
developers.  You can learn more about finding the right package at
https://wiki.ubuntu.com/Bugs/FindRightPackage.  I have classified this
bug as a bug in openldap.

When reporting bugs in the future please use apport, either via the
appropriate application's Help - Report a Problem menu or using
'ubuntu-bug' and the name of the package affected.  You can learn more
about this functionality at https://wiki.ubuntu.com/ReportingBugs.

** Package changed: synaptic (Ubuntu) = openldap (Ubuntu)

-- 
dpkg-reconfigure slapd does not let enter password
https://bugs.launchpad.net/bugs/495306
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524652] Re: euca2ools do not read $HOME/.eucarc

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:~smoser/eucalyptus/euca2ools-1.0.dev

-- 
euca2ools do not read $HOME/.eucarc
https://bugs.launchpad.net/bugs/524652
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 522292] Re: euca-bundle-image fails to use symbolic links

2010-02-19 Thread Launchpad Bug Tracker
** Branch linked: lp:~smoser/eucalyptus/euca2ools-1.0.dev

-- 
euca-bundle-image fails to use symbolic links
https://bugs.launchpad.net/bugs/522292
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 524652] Re: euca2ools do not read $HOME/.eucarc

2010-02-19 Thread Scott Moser
** Changed in: eucalyptus
   Status: New = Fix Committed

-- 
euca2ools do not read $HOME/.eucarc
https://bugs.launchpad.net/bugs/524652
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 218315] Re: setting up fancontrol is way too hard

2010-02-19 Thread omac777
First off I just want to say ubuntu rocks!

This bug came about because I did an update from ubuntu 9.04 to ubuntu
9.10 and the fancontrol stopped working and now the fan is running at
its maximum noisy speed.   This bug isn't the most critical because the
machine is still running, but it is highly irritable for anyone with
sensitive hearing.

sensors-detect found it87 chipset on the motherboard, 
but pwmconfig did not see a loaded it87 device driver so it reported:
/usr/sbin/pwmconfig: No sensors found! (modprobe sensor modules?)

In dmesg it says:
it87: Found IT8705F chip at 0x290, revision 3
(09:53:31 AM) omac: [  557.065124] ACPI: I/O resource it87 [0x295-0x296] 
conflicts with ACPI region IP__ [0x295-0x296]
(09:53:31 AM) omac: [  557.065130] ACPI: If an ACPI driver is available for 
this device, you should use it instead of the native driver.

From what I understand, the address memory it87 wanted has already been 
allocated to the ACPI device driver.
But I don't know how to load/use the relevant acpi-it87 driver.

Thank you for listening.

-- 
setting up fancontrol is way too hard
https://bugs.launchpad.net/bugs/218315
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lm-sensors in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 112631] Re: [apport] package slapd failed to install/upgrade:

2010-02-19 Thread murray
Can I join this problem?

I've upgraded from Edgy to Karmic - this is a development machine so I'm
not too worried failure, however everything seemed to work okay which
was pretty amazing as I came through a number of EOL supported releases.

Anyways, the point of doing this upgrade was to test my my application
with OpenLDAP, however my LDAP system won't now run.

PS I did have the LDAP server working on Edgy before this started...

Through the upgrade I was getting errors about SLAPD regarding
schemacheck and checkpoint not being valid directives... so I
commented them out. And tried to continue.  Then I was getting errors
about the database can't be opened so I tried to remove the package and
then --reinstall and now I'm getting a version error:

r...@rimu:~# sudo apt-get install slapd ldap-utils
Reading package lists... Done
Building dependency tree
Reading state information... Done
slapd is already the newest version.
ldap-utils is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1 not fully installed or removed.
After this operation, 0B of additional disk space will be used.
Setting up slapd (2.4.18-0ubuntu1) ...
  Backing up /etc/ldap/slapd.conf in /var/backups/slapd-2.2.26-5ubuntu3.3... 
done.
failed.

Migrating slapd.conf file (/etc/ldap/slapd.conf) to slapd.d failed with the 
following error while running slaptest:
bdb(dc=myfocus,dc=com): Program version 4.7 doesn't match environment 
version 0.33
bdb_db_open: database dc=myfocus,dc=com cannot be opened, err -30971. 
Restore from backup!
backend_startup_one (type=bdb, suffix=dc=myfocus,dc=com): bi_db_open 
failed! (-30971)
slap_startup failed (test would succeed using the -u switch)
dpkg: error processing slapd (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 slapd
E: Sub-process /usr/bin/dpkg returned an error code (1)

I just want to get OpenLDAP working again.  How can I now get to a fresh
install of this package???  Any attempt to remove or install now results
in this same error!

HHHEEELLLPPP  I'm absolutely stuck with no where to go well, maybe
with the exception of some other Linux version...

PS I'll upload my slapd.conf as well.  Let me know if you need anything
else.

Cheers
Murray

-- 
[apport] package slapd failed to install/upgrade: 
https://bugs.launchpad.net/bugs/112631
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 112631] Re: [apport] package slapd failed to install/upgrade:

2010-02-19 Thread murray

** Attachment added: Murray's slapd.conf (no passwords)
   http://launchpadlibrarian.net/39441242/slapd.conf

-- 
[apport] package slapd failed to install/upgrade: 
https://bugs.launchpad.net/bugs/112631
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs