Re: Need help configuring box as router
On Sun, 2003-02-23 at 12:27, Nathan E Norman wrote: On Sun, Feb 23, 2003 at 11:13:24AM -0500, Scott Ehrlich wrote: [ top posting SUCKS ] [ self-righteousness SUCKS ] Other than the Firwall HOWTO I referenced, what other areas of my install should I look at, and how should the files/configuration appear? screw the firewall howto, look at this: http://www.netfilter.org/documentation/HOWTO//NAT-HOWTO.html What you want is called NAT, or Network Address Translation. If you want the low-cholesterol version, check: http://www.netfilter.org/documentation/HOWTO//NAT-HOWTO-4.html#ss4.1 Of course, you _could_ let this 'ipmasq' package do it for you, and it probably does as good of a job as my own scripts, but it's good to know what's under the hood (and it ain't much). I'm first looking to establish successful routing.Once that is done, I'll worry about filtering, if desired. From the aforementioned page: 4.1 I just want masquerading! Help! This is what most people want. If you have a dynamically allocated IP PPP dialup (if you don't know, this is you), you simply want to tell your box that all packets coming from your internal network should be made to look like they are coming from the PPP dialup box. # Load the NAT module (this pulls in all the others). modprobe iptable_nat # In the NAT table (-t nat), Append a rule (-A) after routing # (POSTROUTING) for all packets going out ppp0 (-o ppp0) which says to # MASQUERADE the connection (-j MASQUERADE). iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE # Turn on IP forwarding echo 1 /proc/sys/net/ipv4/ip_forward Note that you are not doing any packet filtering here: for that, see the Packet Filtering HOWTO: `Mixing NAT and Packet Filtering'. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Other Unix'es
forget the url? ;p On Mon, 2003-02-10 at 14:46, René Seindal wrote: Hi, I just happened to stumble over this, which is a rather amusing list of other uses of the name Unix. It is a part of Dennis Ritchie's personal homepage. Sorry if this has been around before. -- René Seindal ([EMAIL PROTECTED])http://sights.seindal.dk/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Evolution/Courier-IMAP acting strange
Heya all.. I've got a server running Debian woody with courier-imap-ssl (just moved over from uw-imap this morning). Everything is working great (esp. in comparison to uw), but for some reason after the first couple of times I open INBOX, Evolution says 'This folder cannot contain messages', although it recognizes that there are ~350 messages in INBOX. If I delete and re-add my IMAP account to Evolution, it will work fine again for a few minutes and then do the same thing. Using Squirrelmail, everything is fine.. Thanks in advance for any help! -Justin -- Justin Ryan [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Evolution/Courier-IMAP acting strange
On Sun, 2002-12-29 at 13:09, Pete Billson wrote: Justin, I am running the same setup here (Evolution 1.0.8) and Woody with courier-imap-ssl and just tried going in and out of my IMAP inbox without trouble. I am running maildir (not mbox) so that may be a difference and I also do not have 350 message in my inbox! :-) I am using Maildir, and as I said it works _just_ fine if I delete and re-add the account. Also works fine via Squirrelmail (which is an imap client). I wasn't aware that courier supported mbox mailboxes at all (it only sees the Maildirs in my ~/Maildir). If you send step-by-step how to create your problem, I can see if I can reproduce it here. I had an INBOX.default maildir in ~/mail, along with tons of other folders. I converted to courier this morning and moved ~/Mail to ~/Maildir, renamed all folders from foo to .foo, and moved tmp, cur, and new from ~/Maildir/INBOX.default to ~/Maildir/ so that the hierarchy that courier prefers would all be in place. All seemed well until I noticed after surfing through some of my mailing lists that I couldn't open INBOX (~/Maildir) anymore. I can send new messages and see the new message count increment, but I can't access it. Will unsubscribing and then resubscribing to the IMAP folders fix the problem also? nope.. I was about to say that I thought you couldn't unsubscribe from INBOX, but oddly enough I was never subscribed to INBOX (when I first added the IMAP account, INBOX shows up as per default). I did try subscribing to it, which doesn't change the behavior. Have you tried an inbox with fewer messages to see if that will solve your problem? I s'pose I could try this, but I'm afraid I'll split off messages between two inboxes and have trouble merging them. I have run into problems using Outlook with Courier and very large mbox files. Once again, using maildir this shouldn't be an issue. My INBOX has the least messages of all, compared to ~6 months of debian-* lists, lugs, etc.. I'm wondering if extraneous files in ~/Maildir could be a problem. There are msgid.lock and msgid.cache files from procmail/formail keeping track of duplicate messages - should these be moved to ~/.procmail ? Thanks! -J -- Justin Ryan [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Evolution/Courier-IMAP acting strange
On Sun, 2002-12-29 at 13:58, Pete Billson wrote: Justin, 1) The extraneous files should not affect things - I just tried adding them to my ~/Maildir to confirm this and still everything works OK. good.. think I may move them to ~/.procmail soon just for tidyness.. 2) There should be a ~/Maildir/courierimapuiddb file that lists the contents of your INBOX. Does this exist? Yes - also, I was able to unsubscribe from all 50 or so of my folders, including INBOX, close Evo, then start it back up and subscribe to them all again (INBOX first). seems to be ok now, but we'll see how long. Also, my wife's account had this same problem this morning after the switch-over. I was able to fix hers by unsubscribing from all folders, removing the account, and setting it up from scratch. 3) There should also be a ~/Maildir/courierimapsubscribed file which listed your subscribed folders. yep. It did not list INBOX earlier when I was subscribed - I tried adding it manually to no avail. 4) All sub-mailboxes should also have the new,cur,tmp directories (i.e. ~/Maildir/.debianlists/new) and they should have there own courierimapuiddb file. yep.. I converted all of my folders to maildir over the last couple of weeks hoping to kill uw-imap and go to courier (uw slo). 5) Logs show anything? I'm figuring it's an Evolution oddity. We'll see if the problem pops up again, perhaps I'll bring it up on an Evolution discussion list and see if I can reproduce the problem. I'm fairly sure it's nothing to do with courier at this point -- as I said, Squirrelmail works just fine :) Thanks! -J -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Evolution/Courier-IMAP acting strange
On Sun, 2002-12-29 at 15:16, Thomas Lamy wrote: Hi, just a quick guess, but maybe Evolution tries to open too many parallel imap connections. The courier default is max 4 connections per IP, you can change this is /etc/courier/imapd (parameter name is MAXPERIP) Hrm.. This seems possible, but if I shut down and re-open Evolution, it doesn't fix the problem - I have to unsubscribe from all folders, remove the account, and re-add it. Is there a way to monitor the currently active IMAP connections? From Evolution's behavior, it doesn't seem as if it has simultaneous IMAP connections - it won't view a folder until it has 'stored' the previously viewed folder.. Thanks! -J -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Evolution/Courier-IMAP acting strange
I just tried it an got exactly the same behaviour. I'm running Debian unstable, I have courier-imap 1.6.1-2 and evolution 1.2.0-4. Normally I use kmail so I never noticed that evolution was having trouble. Hrm.. makes me feel a bit more sane, but does confuse the matter a bit more - it seems to be working now and I thought perhaps it was simply b/c my account was holding funkiness of uw-imap behind.. I tried removing and recreating the account with no success, I then tried removing various evolution config files and directories. That led to an interesting observation ... even when removing ~/evolution, ~/.gnome/ and ~/.gconf/ evolution still knew my email settings. I hunted around for the phantom config files that evolution was obviously reading but found none, finally I did an strace. Evolution (at least in Debian unstable) reads the directory /tmp/orbit-username/ ... After an rm -rf /tmp/orbit-fraser/ I started Evolution and actually got a clean slate. Yes, All GNOME apps use ORBIT - this isn't really the issue though, as I could remove the account and have it be gone. I will try this, though. I suggest you try removing /tmp/orbit-whoever to see if it cleans up the problem, evolution might be grabbing some outdated config information from there. I'll try this if the problem pops up again.. Thanks! -J -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: slowwww IMAP
In any case, I'm trying to find a way to make my IMAP access faster. I've considered converting to Maildir format but can't find an easy way to convert my existing mailboxes. Debians' uw-imapd package already has the maildir patches the other respondent was talking about applied. So an easy way to do this would be to: 1. Create a new mailbox as a maildir. 2. Using your mail client, move all the messages from the old folder to the new one. The IMAP server will take care of the format conversion for you. Hrmf, this seems like it would work. Unfortunately, when I try to drag messages from an mbox folder to a maildir folder, only one of them is moved (thank gnu for Undelete ;p). I'm running the latest uw-imap available for woody/stable.. FWIW, I also tried getting courier working (though it doesn't seem like it would do this for me), but couldn't get it to authenticate me against pam or shadow.. go figure.. Thanks for all past, present, and future help.. -Jus -- Justin Ryan [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: Demon's (isp) debian mirror
On Sat, 2002-12-07 at 09:06, Jeff Penn wrote: My closest mirror is my ISP (Demon), but it has taken some time for the mirror to update since Woody was released. Is it worthwhile changing my sources now, or are these problems not unusual for this site? Jeff, I have a similar problem, my nearest mirror is at a local university. I run unstable, so whether they update weekly or daily they are bound to be behind on something all the time. Here's what I do: deb http://natasha.stmarytx.edu/debian unstable main contrib non-free deb http://http.us.debian.org/debian unstable main contrib non-free so it pulls from my local mirror unless the main debian mirror has a newer version of the package.. seems to work fine :) -Jus -- Justin Ryan [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: slowwww IMAP
It's possible but not the real problem. the real problem is inherent in the mbox format, all the messages are kept in one file and the entire file has to be read into memory. Maildir helps because each message is a seperate file. (But the downside is it could waste more space on disk though this can be worked around with by using file systems like reiserfs.) Certainly.. this was just a workaround without changing how anything worked, as 6 months of mail and logs written to the /var and /home partitions definitely became quite fragmented.. maildir stuff shouldn't have this problem -- and I am using reiserfs, so regardless of the fact that I have ~13GB of free space to waste, I don't think the 4k thing will be a problem. In any case, I'm trying to find a way to make my IMAP access faster. I've considered converting to Maildir format but can't find an easy way to convert my existing mailboxes. Debians' uw-imapd package already has the maildir patches the other respondent was talking about applied. So an easy way to do this would be to: 1. Create a new mailbox as a maildir. Hrmf, how do I do this? Can't find any decent documentation, except on the basic _format_ of maildir.. I tried creating ~/Maildir, ~/.Maildir, ~/maildir, and ~/.maildir and a folder inside each called '.lists.debian-user' but I am unable to subscribe to this folder in any of the cases mentioned.. Read some info on the uw-imap maildir patch, but there appear to be several patches, all of which build on each other, and I don't know which Debian uses.. perhaps I need to change from sendmail to postfix first, as one of the patches suggested that if INBOX is a maildir, it will _then_ create new folders as maildir.. 2. Using your mail client, move all the messages from the old folder to the new one. The IMAP server will take care of the format conversion for you. although I've forgotten the exact voodoo right now, it is in fact easy to make procmail deliver to maildirs. apparently all that's necessary is changing: :0: to :0 since maildir doesn't require locking, and adding a / to the end of mailbox names, i.e.: :0 * ^List-Id.*[EMAIL PROTECTED] .lists.debian-user/ If there are ways that I can improve performance _without_ mucking my config around, it would be preferred, How about deleting some of your mail? :) NEVER!!! :) I have considered archiving some of it, but would prefer to consider this a future project after making _general_ performance more reasonable.. Thanks! -Justin -- Justin Ryan [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: slowwww IMAP
Have you done a search on google for either mbox to maildir or mbox2maildir? Both give some good results immediately (the latter is a qmail tool that I used myself when converting from mbox to maildir -- though I was doing so so that my MTA [postfix] could deliver to maildir so Courier-IMAP could be used). I have taken a look at a couple of the tools but thought that I'd do better off asking generally about converting than 'how do i use tool foo'.. I'm also much more concerned with getting my MTA and IMAP/POP server(s) to deal with the change than the _actual_ change (other much less comp literate folks use my server and would kill me if pop went down for any extended amount of time, or if people told them that mail bounced because I was fooling with my MTA ;p) This depends to great degree on whether or not you replace your MTA (sendmail). I currently use Postfix as my MTA, and have Courier-IMAP (note: not the Courier MTA) running as my IMAP server; with this setup, procmail works just fine, and delivers mails efficiently to my maildir setup. Migration from sendmail to postfix was somewhat non-trivial, but not terribly so; modifying my conf files in postfix to deliver to maildir was a one-liner. I've actually _really_ wanted to replace sendmail with postfix. Unfortunately, running an MTA without SMTP AUTH is not a possibility for me, and I have spent countless hours wrestling with the Debian postfix packages and SMTP AUTH to no avail. Several folks have told me they have it working with no problem, but that only adds to my frustration, as I've followed about 10 different sets of instructions.. Have you got SMTP AUTH working? on debian woody? I used uw-imap for about a month, and found it _much_too_slow_. Changing to Courier-IMAP, and the subsequent migration to maildir format, sped things up tremendously. Doing so did NOT require changing my underlying MTA, only the mailbox format (and also the recipe format in procmail, but that was fairly trivial). what changes to the recipe format were necessary? There are patches available for uw-imap to enable maildir support (google for uw-imap maildir), but I haven't tested any of these. I presume that this might also help your speed problems, but you'll have to try it yourself. I'd rather replace the whole setup than try mucking with some cruddy patch to uw-imap, which I have been running only out of laziness and lack of time to get something better going.. Thanks so much! -J -- Justin Ryan [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
slowwww IMAP
Hiya Debian-users, On my mail server running Debian Woody with UW-IMAP and Sendmail, I've got ~200M of mail archived into several mbox folders in ~/Mail that I check both with IMAP and with mutt. As the folders have gotten larger, access has slowed significantly. I beleive part of this was due to the data becoming fragmented on disk, and so I stopped all mail services, created a tar of ~/Mail, moved ~/Mail to ~/Mail.old, and untarred the files back into ~/Mail. This caused a significant increase.for a short while. In any case, I'm trying to find a way to make my IMAP access faster. I've considered converting to Maildir format but can't find an easy way to convert my existing mailboxes. I've also evaluated moving from UW-IMAP to Courier, which would probably help as well. What I'm asking is, essentially, if there is any good documentation on moving from a very basic setup (unix mbox, sendmail going to unix accounts, etc..) to what seems to be a more complex setup. As I understand it, courier likes to use its' own account database, and it would not be simple for procmail to filter into Maildirs. If there are ways that I can improve performance _without_ mucking my config around, it would be preferred, though I am pretty much convinced at this point that I need to tear it up and start from scratch :) Any help would be much appreciated :) -Justin -- Justin Ryan [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
Re: clearing the screen
On Thu, 2002-12-05 at 17:43, Simon Law wrote: On Thu, Dec 05, 2002 at 03:40:19PM -0800, Dominic Iadicicco wrote: How do I set it up in bash, so that when I logout it will clear the screen first? Use the .bash_logout file to declare what you want to do when logging out. Unless you aren't using bash ;p Someone on #debian once told me how to handle this in a more elegant manner... Unfortunately, I can't remember - but it was a system-wide config file.. Anyone know what I'm talking about? Perhaps the pertinent maintainer could be asked to place this as a default, as it is not uncommon to expect the system to clear the screen when you logout, and can be a security risk if you do not.. -Justin -- Justin Ryan [EMAIL PROTECTED] signature.asc Description: This is a digitally signed message part
RE: Apache (PHP not working)
If you're just installing a precompiled kernel (from a package or something) just add the modules name 8139 to /etc/modules I beleive it'll be 8139too - in any case, it should be the same as 2.4.18-bf2.4 :) edit your /etc/apache/httpd.conf and uncomment: #php AddType application/x-httpd-php .php AddType application/x-httpd-php-source .phps Erm, these are uncommented :) Perhaps the PHP scripts are not correctly printing the Content-Type header? try something like this at the beginning of your script(s): print Content-Type: text/html\n\n; Have fun :) -Jus signature.asc Description: This is a digitally signed message part
gpg backwards compatability
Hello all, I'm trying to get my gpg key working on another system (my web/mail server). I generated the key using gpg 1.2.1 on sid (my workstation). The server runs woody, and has gpg 1.0.6. I can encrypt a file just fine, but if I try to sign a file, the following happens: - snip - justinrack:~/src$ gpg --armor --sign file.tmp file.tmp.gpg gpg: protection algorithm 254 is not supported gpg: no default secret key: unknown cipher algorithm gpg: signing failed: unknown cipher algorithm - snip - From the GPG FAQ: - snip - 6.12) Older gpg binaries (e.g., 1.0) have problems with keys from newer gpg binaries ... As of 1.0.3, keys generated with gpg are created with preferences to TWOFISH (and AES since 1.0.4) and that also means that they have the capability to use the new MDC encryption method. This will go into OpenPGP soon, and is also suppoted by PGP 7. This new method avoids a (not so new) attack on all email encryption systems. This in turn means that pre-1.0.3 gpg binaries have problems with newer keys. Because of security and bug fixes, you should keep your GnuPG installation in a recent state anyway. As a workaround, you can force gpg to use a previous default cipher algo by putting: cipher-algo cast5 into your options file. - snip - Welp, I thoght this might be pertinent, but I am running 1.0.6 and even adding the line it mentions to the options file does not help. Anyone have any idears? -Jus signature.asc Description: This is a digitally signed message part
Re: anyone get kernel 2.5 to compile?
Any ideas about the below error? It is from the kernel.org download 2.5.44? if not, recommend you grab the latest.. make menuconfig make -f scripts/Makefile.build obj=scripts lxdialog scripts/Makefile.build:10: .config: No such file or directory make[1]: *** No rule to make target `.config'. Stop. make: *** [menuconfig] Error 2 funky.. I had no problem with menuconfig but there seem to be some general dependency problems. I tried a few times last night to compile 2.5.44 and had several unrelated errors that were fixed by selecting or deselecting certain options. Cheers, -Justin signature.asc Description: This is a digitally signed message part
Re: two more architectures?
you are also assuming Debian devels have access to such hardware. I am personally still using a pII 400. Our users tend to have better hardware than we do these days. IANAD, but afaik all source packages are/can be built on all available archs using debian's machines.. One maintainer mentioned recently that his package built on the Debian/s390 although he had no direct access to such a machine. Flame me if I'm wrong ;p -Justin signature.asc Description: This is a digitally signed message part
Re: postfix 101
On Fri, 2002-10-25 at 20:19, Tom Allison wrote: I would like to be able to set up some accounts that are accessable by POP only, yet have a HOME directory so that they can have a procmail/bogofilter configuration for each. Not a problem.. But I guess I need to have something like: User, shell=/bin/false, password - disabled. (I'll manage what they need to of the procmail files) Actually, the password that you set should be the one used for POP.. Yet still have access via POP. I am using postfix as my SMTP server. Is there some way that I can do this without setting up each user in /etc/passwd. No, not if they are each to have a procmail config afaik.. If this goes to 80- 100 users, will this be a problem? Shouldn't be, IIRC you can (but should not generally) have thousands of users in an /etc/passwd file.. Cheers, -Justin signature.asc Description: This is a digitally signed message part
Re: A little daemon
I need it for a small KDE application wich needs to execute some privileged procecesses (like mount) WITHOUT password promting to the user. The KDE app itself can't run as root (casue that needs an extra enviroment and i don't want that) and setuid root is not a good idea cause of the kdelibs (and also here a root env would be necessary). some of the previous suggestions (i.e. add the user to sudoers) seem reasonable.. for simple stuff like mount, you can give the user a home in the 'cdrom' and 'disk' groups.. You can also ssh to localhost using key-based authentication.. ssh-keygen -t dsa append ~/.ssh/id_dsa.pub to /root/.ssh/authorized_keys, make sure that sshd allows root logins, and you can run commands as 'ssh rootlocalhost command' This will have root environment and should be just as easy as having a perl daemon listen on a given port.. if it's an app for multiple distributions / mass distribution, you may want to write multiple methods for doing this into the app and strongly recommend against all but the most secure method.. Hope this is helpful! -Justin signature.asc Description: This is a digitally signed message part
Re: postfix relaying for approved users
Curtis : do you already have authentication working? On Wed, 2002-10-16 at 16:29, Curtis Vaughan wrote: So, I now have postfix up and running. Unfortunately, users can only relay mail to those domains that I indicate in main.cf under virtual_domains. Attached it my main.cf file. What do I need to do in order to allow authenticated users to relay to whomever they wish. signature.asc Description: This is a digitally signed message part
Re: mail server of a sorts
I'm guessing that I'll need to run either a POP3 or IMAP server on Box 001 in order for the 3 clients - ward, wally and beaver - to be able to retrieve their mail. Is this correct? And if so, could you please recommend a good yet lightweight mail client, as Box 001 only has about 1 gig of free space (it's an old Sparc with small hard drives). install uw-imapd, create accounts on box 001 for each user, and set up /etc/fetchmailrc to stick mail for each remote user into each local user's mailbox (removing teh need for fetchmail to separate users' mail out - though it can still put it in pretty imap folders :)) that should be all there is to it.. I have a similar set up on my personal mail server to grab mail out of my work email (pop account). I use imap so that I can read mail from both/any accounts from anywhere (imap client, squirrelmail/web, etc..). Cheers! -Justin signature.asc Description: This is a digitally signed message part
Apache / SUEXEC on woody...
Heya all.. I'm having trouble with Apache/SUEXEC on my woody system.. I have some vhosts that need to run their own cgi scripts. This all works fine, until I add User/Group directives into the VirtualHost configuration. I have a ScriptAlias directive and Options +ExecCGI on the directory's options (have also tried with only one of each, instead of both). The files are owned by the user/group that I am trying to have them run as, but I get the following error in suexec.log: [2002-10-14 01:29:28]: info: (target/actual) uid: (justin/justin) gid: (justin/justin) cmd: index.py [2002-10-14 01:29:28]: error: command not in docroot (/site.com/cgi-bin/index.py) The DocumentRoot in this case would be /site.com/www/, and the ScriptAlias /site.com/cgi-bin/. Any help would be much appreciated! :) -Justin signature.asc Description: This is a digitally signed message part
Re: Apache / SUEXEC on woody...
Not sure, but I think you should arrange all vhosts under the docroot of the main server. Extract from suexec docs: For security and efficiency reasons, all suexec requests must remain within either a top-level document root for virtual host requests, or one top-level personal document root for userdir requests. For example, if you have four VirtualHosts configured, you would need to structure all of your VHosts' document roots off of one main Apache document hierarchy to take advantage of suEXEC for VirtualHosts. (Example forthcoming.) I suspected as much - but this seems insecure, as all sites must be in a world-readable location.. while on the subject, does User/Group only control suexec, or does apache take on that user's identity when accessing files? -Justin signature.asc Description: This is a digitally signed message part
Re: Apache mod_ssl problem. Don't get https...
Hello Marc, Unfortunately, I beleive this is due to a problem with Apache's handling of the global server configuration when Virtual Hosts are defined - if there are Virtual Hosts, the default site is the first listed host (not the globally configured server). Seems funky, but you just need to configure a basic VirtualHost for port 80: VirtualHost 1.2.3.4 ServerName my.host.com DocumentRoot /var/www/html CustomLog /var/log/access.log combined /VirtualHost you get the idea.. On Sun, 2002-10-06 at 11:02, Marc Dreher wrote: Hi, I am stuck here. I used apt-get to install apache and mod_ssl. Then I edited httpd.conf to run one server serving http on port 80 and https on port 443 via a virtual host. The problem is, when I start apache I only get http, no https. But when I use Port 443 instead of Port 80 in httpd.conf I only get https only. So ssl is working ok, but I do not get it working together. I can't see an error in my configuration but there probably is and thats why I am asking :-) signature.asc Description: This is a digitally signed message part
CVS questions
Heya all.. I've got a small project in CVS and am having some trouble. The problem is, when I try to add files to the project, although all other files are at revision 0.2.1.x, it adds files as revision 1.1.1.x.. When I try: cvs add apache.py cvs commit -r 0.2.1 I get: cvs commit: cannot add file `apache.py' with revision `0.2.1'; must be on trunk what am I doing wrong? -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: everybuddy 0.4.2 on testing
On Sun, 2002-10-06 at 12:17, Charles Baker wrote: Has anyone else noticed strange behaviour from everybuddy? I'm using 0.4.2 on testing. Lately, the main everybuddy window listing contacts will become blank. Also, everybuddy will shut down for no apparent reason. Any clues? I used to use everybuddy, started having misc. problems with it, and was informed by someone of the following: gaim supports more protocols and more features than everybuddy, is used by more people, and tends to work better. :) I'd say just ditch everybuddy and switch to gaim, the difference is negligible.. Cheers, -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
viewcvs + py2html ?
Anyone using ViewCVS with py2html to highlight syntax in python code? Howabout enscript? I downloaded the py2html.py and PyFontify.py modules and placed them in /usr/lib/python2.1/viewcvs, where the viewcvs modules live (default configuration's location for py2html is '.'). I tried placing them in /var/lib/python2.1/ and /var/lib/python2.1/site-packages. No dice. I can run python and import both PyFontify and py2html, but ViewCVS just won't use em.. When I enable enscript and set the enscript_path to /usr/bin/ (which is where enscript lives), I start getting Python errors from my pages (seems that ViewCVS is using an invalid syntax, as I tried using it from the cmdline and got errors). I'd like to have ViewCVS show nice highlighted code, but it just doesn't look like it's in the cards.. any help? -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: viewcvs + py2html ?
alright so i suppose i'm kinda answering my own question here :)
I downloaded the py2html.py and PyFontify.py modules and placed them in
/usr/lib/python2.1/viewcvs, where the viewcvs modules live (default
configuration's location for py2html is '.'). I tried placing them in
/var/lib/python2.1/ and /var/lib/python2.1/site-packages. No dice. I
can run python and import both PyFontify and py2html, but ViewCVS just
won't use em..
first of all, py2html.py and PyFontify.py are included in the debian
viewcvs package..
second, the line which connects .py files to the function that uses
py2html was commented out:
markup_streamers = {
# '.py' : markup_stream_python,
}
When I enable enscript and set the enscript_path to /usr/bin/ (which is
where enscript lives), I start getting Python errors from my pages
(seems that ViewCVS is using an invalid syntax, as I tried using it from
the cmdline and got errors).
this still doesn't make sense..
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
KVM problems
Heya all.. I use a 4-way belkin KVM and it seems to screw up my mouse when I switch away from and back to my debian machine. I can usually fix the problem by switching to a VT and back into X, but the mouse wheel scrolling doesn't work right anymore (I can scroll down but not up). Has anyone else experienced this? Oddly enough, when I had a 2-way belkin KVM i had no problems - just the 4-way.. Thanks in advance! -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: The Real Problem With Debian
The Real Problem With Debian is that it is MANUAL. Everything must be done manually, now although there may be a script or two to ease things along, these often DON'T WORK. I have spent two weeks fighting slackware, trying to The problem with Debian is that there is a mix of manual and pseudo-manual stuff made for folks like yourself.. The problem with Mandrake and related distros is that they lean entirely towards your side. It may be extremely easy to get Mandrake up and running the first time, but as many said you'll get sick of it eventually and wander back to Debian or Slack or somesuch.. What I like about Debian is that I can install it on my workstation at work, my PC at home, and my mail/web server.. The only difference is that I am more adventurous on the desktop machines and run the unstable distro, but my server essentially works _the same_ as my workstations.. I can test stuff on a workstation and then implement a change on my server in the same way and generally expect to have little or no problems.. Do that with Mandrake.. :) -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Mozilla 1.0.1 builds for Woody?
It has the new feature that you can open an URL in a new tab remotely, which is Very Important[tm] when using it with other apps. That's why I'm asking. I'm currently running 1.1 from Sid, and it works OK, but I'm setting up Woody on another box now, and I'd like to avoid getting things from sarge/sid in there. I use mozilla-snapshot by adding this to my sources.list: #testing mozilla deb http://pandora.debian.org/~kitame/mozilla ./ deb-src http://pandora.debian.org/~kitame/mozilla ./ Seems to be less often than weekly nowadays, but still newer than 'mozilla'.. Note that you can have 'mozilla' and 'mozilla-snapshot' installed and managed with alternatives, and it's not such a bad idea - if something breaks in snapshot you can fall back to mozilla :) happy mozilla'ing :) -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: wheel mouse
Option Protocol ImPS/2 This is the important part - it's using the IntelliMouse protocol, but should work with most wheel mice (works with my logitech just fine). If you configure X with dpkg-reconfigure xserver-xfree86, you can select 'enable scrolling for mouse wheel' or somesuch and be kosher.. -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Unattended installation...
I am trying to do some unattended installation of debian boxes using There is a package prepared by Progeny called 'autoinst' which will manage this for you.. I haven't had success with it, but haven't spent much time with it either.. I'd like to be able to do this, though - as I'm trying to convince my employer that we should offer debian to our hosting customers and we need an auto install comperable to RH's kickstart to be able to work it.. Cheers.. -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
funky lockup
Heya all.. Every so often, my sound will lock up - sometimes the sound will lock up the whole system and I will have to power cycle or ssh in and kill off all my X processes.. This happens almost without fail (If I leave an mp3 playing for an entire day, it will hang). Also, sometimes the im sounds from gaim will screw it up and it will just echo the first fraction of a second (im thinking maybe whatever portion is buffered) I'm using GNOME2 (only as of a few days ago - this problem has been ongoing for months) with esound. the 'esd' process tends to lock up the emu10k1 driver (i.e. i can kill xmms, i can kill esd, but i cannot rmmod emu10k1 to try and re-init the sound card). I beleive the problem persists without esound/esd.. I'm running Debian/sid (kernel 2.4.18) on a system with: 2xCeleron 533 (Abit BP6) 384MB PC100 Adaptec 2940U2W + 9GB (root/home/main fs) + 8x4x24 CDRW 46GB ATA/66 SBLive! 3Dfx Voodoo3 3500TV (AGP) Thanks in advance for any help! -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Apache Child Segfaults
Oops, missed the list the first reply around.. On Sun, 2002-09-29 at 12:52, Matthew Daubenspeck wrote: On Sun, Sep 29, 2002 at 12:37:23PM -0500, Justin Ryan wrote: what version of apache are you running ? there is a known vuln that can root a box on 64-but unix and windows and causes the child to die oni 32-bit unix.. $ apache -version Server version: Apache/1.3.26 (Unix) Debian GNU/Linux Am I to assume that all updates are applied? mod_ssl, OpenSSL? any related logs? can you cross-reference times to accesses of URLs? Perhaps a script is causing it somehow.. I'll end this with a great big Hrm.. :) -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
LDAP Authentication
Anyone using LDAP authentication? The OpenLDAP howto has me a bit confused (Seems to assume a bit of knowledge of LDAP and suggest the differences with an openldap implementation). I'd really like to get this going, as I've been ranted and raved to about it by lots of folks that I've known (i.e. 'how would i..' 'USE LDAP OF COURSE!!!') so i'd like to get my boxen talking LDAP to each other.. Any suggestions of a reasonable doc would be much appreciated. Otherwise, if I can get help setting it up I'll write one myself :) Thanks all! -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Apache Child Segfaults
Am I to assume that all updates are applied? mod_ssl, OpenSSL? Yup, all updated and as current as 'sarge' permits :) what versions? since testing doesn't have security updates, it's possible that these are lagging.. any SSL related log entries? any related logs? can you cross-reference times to accesses of URLs? Perhaps a script is causing it somehow.. That it is in the error logs. There was a standard 404 error now and then, I thought it may have something to do with it. I fixed the 404, and the problem still persists. what I meant to ask was, can you cross reference the times with the access_log and find anything interesting? grab 10 or so of them and grep for the time (as well as one minute before/after just in case) to see if anything common is being accessed.. it's possible (though unlikely) that something which apache would not log as a specific error would cause the child to die.. -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
IMAP folder listing
Heya all.. Anyone know of a way to set IMAP's root to ~/Mail/ as opposed to ~/ ? When I go to subscribe to IMAP folders I see my entire home dir which is a bit messy - especially for users/customers who are not familiar (nor want to be) with the UNIX dir stricture. also adds an unnecessary level to the tree in my IMAP client (INBOX is top-level, all the rest are in Mail/). Also, I see two entries for INBOX in the IMAP listing, any idear what these might be? Possibly /var/mail/user and /var/spool/mail/user (I'm using wu-imapd on Debian 3.0/woody and /var/spool/mail is a symlink to /var/mail). Thanks in advance for any help! -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Apache Child Segfaults
what versions? since testing doesn't have security updates, it's possible that these are lagging.. any SSL related log entries? $ dpkg -l apache ||/ NameVersion Description +++-===-===-== ii apache 1.3.26-1.1 Versatile, high-performance HTTP server howabout openssl, libapache-mod-ssl? if openssl is 0.9.6e check the changelog and reference against the most recent DSA's on openssl. other than that, im stumped.. anything in error.log that looks like: Received Signal Segmentation Fault (11) -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Setting up Sendmail
On Thu, 2002-09-26 at 22:07, Jason Majors wrote: Try exim. It's easier to set up. Anyone know if exim supports SMTP AUTH? I've been using Sendmail on my woody box simply because I could not get SMTP AUTH working with postfix. any luck with either? BTW - if you check the bug tracking database, sendmailconf is broken in woody. You should be able to install the package from sid just fine (this is what I'm running). AUTH seems to work on it as well, which didn't on woody. -Justin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Cannot find Ncurses when I run make menuconfig
It might be a good idea to install 'build-essential' You have to have the libncurses dev package as it actually need the header files of libncurses. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
