Re: SSL by default for all packaged web apps?

2011-03-01 Thread Etienne Goyer
Re-reading my email, I think I got a bit too snarky toward the end. While I think my arguments are sound, the discussion does not have to be confrontational. My apologies to Marc and the list for the tone I used earlier. On 11-03-01 09:01 PM, Etienne Goyer wrote: > On 11-03-01 06:39 PM, Marc Desl

Re: SSL by default for all packaged web apps?

2011-03-01 Thread Dan Sheffner
+1 for SSL of packages. A compromise would just be to run the entire mirror both http & https with a self signed cert and leave the default http. The packages that are coming from the ubuntu mirror are very important especially since so many companies use ubuntu in production environments. As fo

Re: SSL by default for all packaged web apps?

2011-03-01 Thread Etienne Goyer
On 11-03-01 06:39 PM, Marc Deslauriers wrote: > On Tue, 2011-03-01 at 18:04 -0500, Etienne Goyer wrote: >>> We should not turn on SSL by default with self-signed certificates. That >>> is insecure and is not a configuration that should be encouraged. >> >> There is two things there: >> >> 1. Encryp

Re: SSL by default for all packaged web apps?

2011-03-01 Thread Marc Deslauriers
On Tue, 2011-03-01 at 18:04 -0500, Etienne Goyer wrote: > > We should not turn on SSL by default with self-signed certificates. That > > is insecure and is not a configuration that should be encouraged. > > There is two things there: > > 1. Encrypting communication between the client and the serv

Re: SSL by default for all packaged web apps?

2011-03-01 Thread Etienne Goyer
On 11-03-01 05:20 PM, Marc Deslauriers wrote: > On Tue, 2011-02-22 at 14:56 -0800, Clint Byrum wrote: >> This bug was opened recently: >> >> https://bugs.launchpad.net/bugs/695857 >> >> It suggests that packages should configure themselves to require SSL by >> default. >> >> I think this is actuall

Re: SSL by default for all packaged web apps?

2011-03-01 Thread Marc Deslauriers
On Tue, 2011-02-22 at 14:56 -0800, Clint Byrum wrote: > This bug was opened recently: > > https://bugs.launchpad.net/bugs/695857 > > It suggests that packages should configure themselves to require SSL by > default. > > I think this is actually a good idea, and I am wondering how this would > be

Re: restricting ssh login based on IP

2011-03-01 Thread Rafael Skodlar
On 02/26/2011 12:09 AM, Dan Sheffner wrote: Like Michael said I would accomplish this with two users. Just off the top of my head I would do: user 1) has full read/write access to /home/user1 user 2) has read only access to /home/user2 schedule cron to rsync from /home/user1 to /home/user2 and

Ubuntu-Server Team Membership

2011-03-01 Thread matt rosenberg
Hello, My name is Matt. I am interested in joining the ubuntu-server team on launchpad. I currently run ubuntu on 2 Desktops 1 Netbook 1 Server(in house) and 4 Desktops remote(family admin through ssh and dyndns). I am fairly good with Networking and the cli although I'm no master, google is my be

SSL by default for all packaged web apps?

2011-03-01 Thread Clint Byrum
This bug was opened recently: https://bugs.launchpad.net/bugs/695857 It suggests that packages should configure themselves to require SSL by default. I think this is actually a good idea, and I am wondering how this would be received by the greater community. I am marking the bug as "Opinion" a

Re: PHP5-FPM is missing in Natty

2011-03-01 Thread Chuck Short
On Mon, 21 Feb 2011 09:23:26 -0500 Arnaud Soyez wrote: > Hey all, > > Saturday I noticed that PHP5-FPM was missing from Natty. I reported > the issue on launchpad and then I talked with a MOTU to see if we > could prioritize it in order to have it fixed before featurefreeze. > He told me to cont

Re: JeOS and ISCSI ISO testcases moved to optional

2011-03-01 Thread Robbie Williamson
On 02/17/2011 01:15 PM, Etienne Goyer wrote: > I am not volunteering for taking responsibilities for the test (ah!), Perfect! I'm assuming you mean just the iscsi stuff, not JeOS, right? -Robbie -- Robbie Williamson Canonical USA "You can't be lucky all the time, but you can be smart everyday

Re: virsh editor

2011-03-01 Thread jurgen . depicker
Hi Carsten. Thanks for your swift, to the point reply! According to http://ss64.com/bash/export.html , "An average user will saturate their cognitive capacity if they have more than seven things to remember" . I may not be average, but still forgot to remember the export indeed :-). > From:

Re: virsh editor

2011-03-01 Thread Michael Zoet
Am Di, 1.03.2011, 14:36 schrieb jurgen.depic...@let.be: > Hi guys; Hi, > > I have a small question: whenever I fire up virsh and want to edit a > domain, it launches vi and I would like it to be nano. Although i > configured .bashrc to contain EDITOR=/usr/bin/nano and > VISUAL=/usr/bin/nano ,

Re: virsh editor

2011-03-01 Thread Carsten Aulbert
Hu Jurgen On Tuesday 01 March 2011 14:36:59 jurgen.depic...@let.be wrote: > I have a small question: whenever I fire up virsh and want to edit a > domain, it launches vi and I would like it to be nano. Although i > configured .bashrc to contain EDITOR=/usr/bin/nano and > VISUAL=/usr/bin/nano , v

virsh editor

2011-03-01 Thread jurgen . depicker
Hi guys; I have a small question: whenever I fire up virsh and want to edit a domain, it launches vi and I would like it to be nano. Although i configured .bashrc to contain EDITOR=/usr/bin/nano and VISUAL=/usr/bin/nano , virsh seems not to care. So I need to launch 'EDITOR=/usr/bin/nano v

options to create guest OS in virt-manager are greyed out on Lucid 10.04 64 bit

2011-03-01 Thread Tapas Mishra
Hi, I just installed a pv-ops Dom0 2.6.32.27 Kernel on a 64 bit non VT machine. Following instructions here http://wiki.xensource.com/xenwiki/Xen4.0 for 64 bit Ubuntu 10.04 apt-get install bcc bin86 gawk bridge-utils iproute libcurl3 libcurl4-openssl-dev bzip2 module-init-tools transfig tgif texin