This site is now 100% read-only, and retired.

XML Logo

Posted by lykwydchykyn on Mon 14 Feb 2011 at 17:13
Tags: none.
I've been upgrading my debian servers to squeeze over the last few weeks. Everything goes fine when I upgrade servers on the VM system, or here in the building.

For some reason, every time I do a remote upgrade, the system fails to come back up after reboot. Every time. I have to go out or send someone out to power off the server and cold boot it. After that it works fine.

I can't seem to reproduce the problem back at the office, and I'm getting nervous because the two I have left to upgrade do DHCP and DNS for some fairly large (and distant) facilities.

Can anyone hazard a guess as to why this is happening (apart from murphy's law)?

 

Posted by lykwydchykyn on Wed 25 Feb 2009 at 15:09
Tags: none.
I'm stumped. Problem solved, yay!

Let me lay out the situation. I have a legacy app written in gtksharp that communicates directly to a mysql server. The users of the app are all on subnet A. The server is on subnet B. Most users are running this app in windows xp, but I run it in Ubuntu intrepid and another person runs it on Ubuntu Hardy.

After upgrading the server (Dell 2950) to Lenny and MySQL 5.051a, the program is unusably slow. When I say "slow", I don't mean "a little sluggish", I mean it takes literally 10 minutes for the program to load up, and 2-3 minutes to do even the smallest things in it. For all practical purposes it doesn't work.

However, I soon discovered that not everyone had this problem. So let me lay out the facts in this case as I have discovered them.
- It is slow on my computer, running Ubuntu Intrepid
- It is not slow on the Hardy heron computer
- Downgrading to the hardy version of mono/gtksharp did not fix it on my computer.
- It is slow on Windows XP running in virtualbox on my computer, running the exact same version of mono as the other (non-virtual) Windows XP boxes on Subnet A.
- It is slow on fresh installs of Lenny or Intrepid on subnet A.
- It is not slow on Lenny boxes on subnet B (can't put an intrepid box on subnet B).
- It is not slow on my Intrepid box if I change to a test server on Subnet A, also running Lenny and MySQL 5.051a with the same data dumped in.
- It is not slow when a Lenny box on Subnet B is using said test server on Subnet A.
EDIT: new info
- It is slow on a fresh install of Windows XP on subnet A.
- It is slow on a different Lenny server on subnet B for all scenarios that were slow pointing to the first server.
END EDIT
I have checked syslog, the mysql logs, and dmesg, but I don't see anything different being logged when a slow machine connects. I have run a packet sniffer on the server, and haven't seen any different traffic when a slow machine connects. I've run a program trace on the client app, and while I noticed a lot of socket exceptions being thrown, it was that way on the ones working correctly as well.

I don't realistically expect anyone to have an idea of how to fix this, but if you have any thoughts on the next thing to investigate, I'm all ears.

 

Posted by lykwydchykyn on Fri 19 Dec 2008 at 18:01
Tags: none.
When building packages from source downloaded with apt-get source or apt-src, sometimes debuild fails with errors like this:
****************************************
/usr/bin/make install DESTDIR=/home/alanm/packages/jwm-2.0.1/debian/jwm prefix=/home/alanm/packages/jwm-2.0.1/debian/jwm
make[1]: Entering directory `/home/alanm/packages/jwm-2.0.1'
/usr/bin/make -C src all
make[2]: Entering directory `/home/alanm/packages/jwm-2.0.1/src'
make[2]: Nothing to be done for `all'.
make[2]: Leaving directory `/home/alanm/packages/jwm-2.0.1/src'
/usr/bin/make -C src install
make[2]: Entering directory `/home/alanm/packages/jwm-2.0.1/src'
install -d /usr/bin
install jwm /usr/bin/jwm
install: cannot remove `/usr/bin/jwm': Permission denied
make[2]: *** [install] Error 1
make[2]: Leaving directory `/home/alanm/packages/jwm-2.0.1/src'
make[1]: *** [install] Error 2
make[1]: Leaving directory `/home/alanm/packages/jwm-2.0.1'
make: *** [install] Error 2
dpkg-buildpackage: failure: fakeroot debian/rules binary gave error exit status 2
*******************************

It's as though "make install" is trying to install to /usr/bin instead of the build directory. Am I missing a step here?

 

Posted by lykwydchykyn on Fri 19 Dec 2008 at 17:57
Tags: none.
When building packages from source downloaded with apt-get source or apt-src, sometimes debuild fails with errors like this:
****************************************
/usr/bin/make install DESTDIR=/home/alanm/packages/jwm-2.0.1/debian/jwm prefix=/home/alanm/packages/jwm-2.0.1/debian/jwm
make[1]: Entering directory `/home/alanm/packages/jwm-2.0.1'
/usr/bin/make -C src all
make[2]: Entering directory `/home/alanm/packages/jwm-2.0.1/src'
make[2]: Nothing to be done for `all'.
make[2]: Leaving directory `/home/alanm/packages/jwm-2.0.1/src'
/usr/bin/make -C src install
make[2]: Entering directory `/home/alanm/packages/jwm-2.0.1/src'
install -d /usr/bin
install jwm /usr/bin/jwm
install: cannot remove `/usr/bin/jwm': Permission denied
make[2]: *** [install] Error 1
make[2]: Leaving directory `/home/alanm/packages/jwm-2.0.1/src'
make[1]: *** [install] Error 2
make[1]: Leaving directory `/home/alanm/packages/jwm-2.0.1'
make: *** [install] Error 2
dpkg-buildpackage: failure: fakeroot debian/rules binary gave error exit status 2
*******************************

It's as though "make install" is trying to install to /usr/bin instead of the build directory. Am I missing a step here?

 

Posted by lykwydchykyn on Tue 25 Nov 2008 at 19:58
Tags: none.
I have several Debian and SLES apache servers that have directories authenticating to our Netware eDirectory via authnz_ldap. It works fine when it's not encrypted, but when I try to use TLS encryption, only the SLES servers work.

The Debian boxes all log this error:
[LDAP: ldap_start_tls_s() failed][Connect error]

When I try doing an ldapsearch from the Debian boxes over TLS, I get this:
SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

The Apache documentation seems to suggest that I need to point to a certificate using something like LDAPTrustedGlobalCert, but I don't see the SLES servers doing this anywhere, and they appear to be working.

Can anyone give me a shove in the right direction here?

 

Posted by lykwydchykyn on Tue 15 Apr 2008 at 17:38
Tags: none.
I have several debian machines running at remote sites on older hardware. Occasionally the hard drive gives out on one of these machines and I have to build a replacement. When I do this, I usually stage the HD at my office using qemu or a spare workstation, then bring just the HD out to stick in the remote machine.

The biggest problem with this is that while staging the machine at my office, whatever NIC (real or virtual) in the staging machine becomes eth0. When I put the HD in the actual final machine, it becomes eth1. Is there some way to make debian forget about the original NIC so that the final NIC will be eth0?

I guess I can just plan ahead and set up eth1, but it doesn't seem clean to me to have eth0 assigned to a card that the instance will never see again.

 

Posted by lykwydchykyn on Fri 8 Feb 2008 at 05:05
Tags: none.
Our Novell sales rep came to the office yesterday to talk up all their latest products and sell us everything. He was talking up Linux a lot, getting my Netware-loving coworkers all excited about SLES. They told him I was the "linux guy". He asks what distro I run, but before I could tell him he says:

"Let me guess: Debian?" I confirm.

He says "I thought so. Everyone I talk to who has run Linux for a long time runs Debian."

I wonder what that says, that anyone who has actually worked with Linux for a decent amount of time tends to run Debian. I wonder if he thought about what it means.

 

Posted by lykwydchykyn on Mon 28 Jan 2008 at 17:38
I'm trying to set up a PXE netinstall server to put etch on some old laptops that don't have CDROM drives.

I have successfully set up tftp and dhcpd so that the clients boot to the installer, there's no problem there.

The trouble starts when I want to hit a repository. My plan originally was to have a local apt-mirror repository on the netinstall server and keep the whole process on its own subnet. For some reason, it wasn't working. When I point the installer to the repository, it keeps telling me it can't find a valid release file. I can pop over to another terminal and wget the release file, but the installer is saying it's not valid.

So I enabled routing on the server, and pointed it to another local mirror which I know works with network installation because I use it all the time with netinstall CD's. Still telling me it couldn't download the release file, even though I can wget the file from a second terminal.

But since I'm routing anyway, I decided to try hitting an actual debian repository, so I pointed it to the default US repo. Success! It works. But what I really want is to use my local apt-mirror, for speed reasons (and to save the debian project a little bandwidth).

Anyone know why this wouldn't work with the PXE netinstall when it does just fine with the CD netinstall?

 

Posted by lykwydchykyn on Wed 9 Jan 2008 at 20:13
Tags: none.
Trying to set up a proxy filtering server using pure, clean install of etch, and I've found that dansguardian will only start if I turn off the antivirus feature in dansguardian.conf. I'm not an expert at this setup, though I have successfully set it up on Ubuntu and Sarge machines using the same recipe.

My setup is squid + dansguardian + clamav. I've tried updating clamav out of debian-volatile but it does the same. It gives no errors, either at the terminal or in any log file I can find. When I try to restart the init script, it just sits there for a minute or so then silently times out. There are no dansguardian processes running after that.

But if I turn of av scanning, all is well (apart from no virus scanning).

Anyone successfully set this up? I've googled every which way, but I appear to be the "only one having this problem"(TM) (on multiple machines, I might add).

 

Posted by lykwydchykyn on Tue 2 Oct 2007 at 16:43
Tags: none.
I have about 15 Linux servers that I need to change the passwords for root and another account on. Is there a reasonably secure way to do this all at once? I've read up on cfengine but it is more than my feeble addlebrain can comprehend.