[Bug 1773956] Re: [apparmor] missing entry for CLUSTERIP (used by strongswan HA plugin)

2018-11-29 Thread Andreas Hasenack 
@xooloo, can you please show the actual apparmor DENIED messages from
your logs? A simple configuration setup that is enough to show them
would also be extremely helpful. I'm hoping there is no need to
establish a vpn with another node to show this issue.

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1773956

Title:
  [apparmor] missing entry for CLUSTERIP (used by strongswan HA plugin)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1773956/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 201786] Re: ssh Agent admitted failure to sign using the key on big endian machines

2018-11-29 Thread Andreas Hasenack 
According to
https://bugs.launchpad.net/ubuntu/+source/seahorse/+bug/1420522 it's
fixed in seahorse 3.30, which is present in ubuntu cosmic and later.

>From https://bugzilla.redhat.com/show_bug.cgi?id=1435924, this should 
>reproduce the problem:
1. Generate a ssh key using the keytype ed25519 and enter a password when 
creating the key:
$ ssh-keygen -t ed25519
2. Log out from your computer and log in again
3. Start a ssh session to a remote host:
$ ssh u...@domain.tld

I tried that with bionic, which has seahorse 3.20.0

Comment #88 hints that trusty is affected and also broke, can someone
confirm that please? trusty has seahorse 3.10.2-0ubuntu1

Releases older than trusty are EOL by now.

** Bug watch added: Red Hat Bugzilla #1435924
   https://bugzilla.redhat.com/show_bug.cgi?id=1435924

** Changed in: openssh (Ubuntu)
   Status: Confirmed => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/201786

Title:
  ssh Agent admitted failure to sign using the key on big endian
  machines

To manage notifications about this bug go to:
https://bugs.launchpad.net/seahorse/+bug/201786/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1805178] Re: Apparmor should include letsencrypt directory for Slapd

2018-11-29 Thread Andreas Hasenack 
I'm removing apparmor from the affected list because the apparmor
profile is shipped with slapd.

** No longer affects: apparmor (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to openldap in Ubuntu.
https://bugs.launchpad.net/bugs/1805178

Title:
  Apparmor should include letsencrypt directory for Slapd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1805178/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1805178] Re: Apparmor should include letsencrypt directory for Slapd

2018-11-29 Thread Andreas Hasenack 
Thanks for filing this bug in Ubuntu.

First, let me suggest that any local modifications to apparmor profiles
be made in /etc/apparmor.d/local instead of the profile in
/etc/apparmor.d, otherwise you will get dpkg conf prompts with every
upgrade. For slapd, for example, you have
/etc/apparmor.d/local/usr.sbin.slapd

Second, what is the structure of files and directories in
/etc/letsencrypt? Is it separated by user, service, or do all certs go
in there? It would be good if we could come up with a rule that's a bit
more specific.

** Changed in: openldap (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to openldap in Ubuntu.
https://bugs.launchpad.net/bugs/1805178

Title:
  Apparmor should include letsencrypt directory for Slapd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1805178/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1805115] Re: problem with (ubuntu/cosmic)mawk /^[[:space:]]*

2018-11-29 Thread Andreas Hasenack 
Confirmed working with gawk, failing with mawk.

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to mawk in Ubuntu.
https://bugs.launchpad.net/bugs/1805115

Title:
   problem with (ubuntu/cosmic)mawk /^[[:space:]]*https://bugs.launchpad.net/ubuntu/+source/mawk/+bug/1805115/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1805115] Re: problem with (ubuntu/cosmic)mawk /^[[:space:]]*

2018-11-29 Thread Andreas Hasenack 
Fails from trusty onwards, all the way to disco.

use this to test:
printf %s '; 
rel="next", ; 
rel="last"' | mawk '
BEGIN { RS=", "; FS="; "; OFS=": " }
{
sub(/^rel="/, "", $2); sub(/"$/, "", $2)
sub(/^[[:space:]]*$/, "", $1)
print "Link_" $2, $1
}'

Output should have no "<" char before the http link.

** Changed in: mawk (Ubuntu)
   Status: New => Triaged

** Changed in: mawk (Ubuntu)
   Importance: Undecided => Low

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to mawk in Ubuntu.
https://bugs.launchpad.net/bugs/1805115

Title:
   problem with (ubuntu/cosmic)mawk /^[[:space:]]*https://bugs.launchpad.net/ubuntu/+source/mawk/+bug/1805115/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1805017] Re: package mysql-server-5.7 5.7.24-0ubuntu0.18.04.1 failed to install/upgrade: installed mysql-server-5.7 package post-installation script subprocess returned error exit status 1

2018-11-29 Thread Andreas Hasenack 
Thanks for filing this bug in Ubuntu.

This is the error:
Paramétrage de mysql-server-5.7 (5.7.24-0ubuntu0.18.04.1) ...
update-alternatives: utilisation de « /etc/mysql/mysql.cnf » pour fournir « 
/etc/mysql/my.cnf » (my.cnf) en mode automatique
Renaming removed key_buffer and myisam-recover options (if present)
ERROR: Unable to start MySQL server:
mysqld: Can't read dir of '/etc/mysql/conf.d/' (Errcode: 2 - No such file or 
directory)
mysqld: [ERROR] Fatal error in defaults handling. Program aborted!
Please take a look at https://wiki.debian.org/Teams/MySQL/FAQ for tips on 
fixing common upgrade issues.
Once the problem is resolved, run apt-get --fix-broken install to retry.
dpkg: erreur de traitement du paquet mysql-server-5.7 (--configure) :
 installed mysql-server-5.7 package post-installation script subprocess 
returned error exit status 1

and

Préparation du dépaquetage de 
.../mysql-server-5.7_5.7.24-0ubuntu0.18.04.1_amd64.deb ...
grep: /etc/mysql/: Aucun fichier ou dossier de ce type


Looks like your mysql removal broke some dependencies, because 
/etc/mysql/conf.d/ is provided by mysql-common which is definitely a dependency.


I suggest you make sure mysql-common is installed, or reinstalled, and then run 
"sudo apt -f install".

** Changed in: mysql-5.7 (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to mysql-5.7 in Ubuntu.
Matching subscriptions: main
https://bugs.launchpad.net/bugs/1805017

Title:
  package mysql-server-5.7 5.7.24-0ubuntu0.18.04.1 failed to
  install/upgrade: installed mysql-server-5.7 package post-installation
  script subprocess returned error exit status 1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mysql-5.7/+bug/1805017/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1790430] Re: Nonce issues with auth_digest when running behind an reverse proxy

2018-11-29 Thread Andreas Hasenack 
I'm sorry, but I need a better reproducer case. You said initial auth is
happening at the apache reverse proxy, and that is a rhel machine if I
understood you correctly, so not applicable here.

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to apache2 in Ubuntu.
https://bugs.launchpad.net/bugs/1790430

Title:
  Nonce issues with auth_digest when running behind an reverse proxy

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1790430/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1805791] Re: package samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.5 failed to install/upgrade: installed samba package post-installation script subprocess returned error exit status 1 The error message com

2018-11-29 Thread Andreas Hasenack 
Thanks for filing this bug in Ubuntu.

This seems to be a duplicate of bug #1731502, where there was no network
available when nmbd was restarted:

   Status: "nmbd: No local IPv4 non-loopback interfaces available,
waiting for interface ..."

This is weird, because you say the error happens everytime you upgrade
packages, which seems to indicate network is available.

Please try following commands, making sure the network is available:

sudo apt update
sudo apt -f install

If the error still happens, I'll need the following:
ip route
ip a
ip route get 8.8.8.8

Thanks!


** Changed in: samba (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/1805791

Title:
  package samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.5 failed to
  install/upgrade: installed samba package post-installation script
  subprocess returned error exit status 1  The error message comes up
  any time packages are updated but connection to synology NAS still
  works

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1805791/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs