Re: [e-smith-devinfo] IMP/Webmail security advisory for e-smith 4.1.2
On Sun, Aug 19, 2001 at 11:18:00AM +1100, Bertrand CHERRIER [EMAIL PROTECTED] wrote: Hello Gordon Rowell, I've done the upgrade, with not a single problem, but then my php-nuke on the primary ibay gives me this : Unable to select database I thought the pb was with MySQL, but all others databases are available, I can get to my nuke database via phpMyAdmin, and the user used to access it as full privileges (it's on an Intranet, behind a firewall) and my webmail is working just fine but not in french anymore :) PHPnuke is not part of e-smith and is unsupported. We also only currently support MySQL as the backend for webmail. These upgrades have been tested on a standard e-smith 4.1.2 machine with all available official updates. So if anyone has any idea of where it could be coming from ... I'll defer to the other people on the list with more PHP/MySQL/PHPNuke experience. Gordon -- Gordon Rowell[EMAIL PROTECTED] VP Engineering Network Server Solutions Group http://www.e-smith.com Mitel Networks Corporation http://www.mitel.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] Problem with ipsec: ip_demasq_esp()
On Fri, Aug 17, 2001 at 09:03:55AM +0200, Philippe Pache [EMAIL PROTECTED] wrote: Thanks for your answer. I tried, the link is up but the routing is not working anymore. I have the same configuration as before, but it is not possible to ping or doing anything else. Then i switched masq on and it was working as before do you have any tips ?? It sounds like the ipsec module and/or templates you are using are not opening the packet filters correctly when the ipsec_masq module is not loaded. I suggest you contact the author or live with the (copious) logging in /var/log/messages. Gordon -- Gordon Rowell[EMAIL PROTECTED] VP Engineering Network Server Solutions Group http://www.e-smith.com Mitel Networks Corporation http://www.mitel.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] Multple Domains
This issue was already addressed in a very thorough manner on this mailing list a little while ago. Check here for Darrell May's HowTo for doing just that: http://netsourced.com/servers/docs/vdomain-alias-howto.html -Original Message- From: Patrick O'Donnell [mailto:[EMAIL PROTECTED]] Sent: August 17, 2001 11:48 AM To: [EMAIL PROTECTED] Subject: [e-smith-devinfo] Multple Domains Hello, We currently are trying to host multiple domains with esmith, and obviously are having the issue of not being able to distinguish a user from domain1.com from domain2.com and have the drop to completely seperate mail box's. Has anyone developed a solution for that? And if not, any idea who may being doing it now? or what it would cost to have a solution developed for it?? This server seems like a robust solution, unfortunately, it seems like e-smith made it limited by only allowing it to effectively handle email for one domain with one set of users. Thanks --Patrick -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re[2]: [e-smith-devinfo] IMP/Webmail security advisory for e-smith 4.1.2
Hello Gordon Rowell, Thanks for the reply ! I've done some work myself :) and I work out the pb, the file config.php gets unreadable if modified via the admin page ! So the trick is to configure it via the console, and chmod 444 ! You've got a golden product, it seems unreal what I can do with my box in just a few moves ! Again thanks for such a great disto ! lundi 20 août 2001, 19:37:54, vous avez écrit: GR PHPnuke is not part of e-smith and is unsupported. We also only GR currently support MySQL as the backend for webmail. GR These upgrades have been tested on a standard e-smith 4.1.2 machine with GR all available official updates. So if anyone has any idea of where it could be coming from ... GR I'll defer to the other people on the list with more PHP/MySQL/PHPNuke GR experience. -- Best regards, Bertrand [EMAIL PROTECTED] http://www.linux-nc.org Linux, il y a moins bien, mais c'est plus cher ! -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] IMP/Webmail security advisory for e-smith 4.1.2
On Mon, Aug 20, 2001 at 08:40:57PM +1100, Bertrand CHERRIER [EMAIL PROTECTED] wrote: Hello Gordon Rowell, Thanks for the reply ! I've done some work myself :) and I work out the pb, the file config.php gets unreadable if modified via the admin page ! So the trick is to configure it via the console, and chmod 444 ! In general, this would be a bad thing to do. You don't want configuration files to be readable except by the applications which need to read them. You've got a golden product, it seems unreal what I can do with my box in just a few moves ! Tell your friends :-) Again thanks for such a great disto ! Thanks - it's always good to hear this. Gordon -- Gordon Rowell[EMAIL PROTECTED] VP Engineering Network Server Solutions Group http://www.e-smith.com Mitel Networks Corporation http://www.mitel.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] Server monitoring module ready for download
Hi all, this fits with my symptoms. For the record my set-up is 4.1.2 on a 166mmx 64M 4.3gig. Is the symptom occurring on higher spec machines? I don't know, I don't have one :-) We are testing on a Celeron 733 with 256 MB RAM, under very light load (just for testing). I guess thats why we are not getting this kind of errors. The problem is a number of synchronisation problems with the way that the data is collected. What you have is cron running a perl script, which runs lots of commands, then updates a database. And every minute it does the same thing. And it tries to do the same thing for three different monitors (plus one every fifteen minutes). Exactly :) This could make the machine a lot busier than it otherwise is, and the commands meminfo.pl etc might take more than a minute to run. If that happens, then two instances of meminfo.pl may finish in the same second, and try to update the database with new memory info timestamped at that same second. And this is what rrdupdate is complaining about. Even more now that it has a test -e command and if you have a loaded /proc/dev/net you might need to update a lot of databases every minute. The solutions to this are twofold: - run a long lasting perl program which becomes active every minute, and takes and logs a new sample. (This will save the perl interpreter/compiler startup time, lots of times). I agree. This was pointed to us some time ago privatelly from another colister. We agree thats the way to go. We will remake the collecting side of e-smith monitor in this way (version 2.0) - be very lightweight in the way you take the samples. Most of the data can be read straight out of the /proc filesystem, without running the sar command, for instance. I have given some suggestions on this in a different branch in the list. You could remove the test -e command as long as you install the package carefully (with all the interfaces present in /proc/dev/net), and even reduce the sar command from 3 iterations to just 1. BTW, we use the sar command as we don't know of any value in the /proc structure that gives us the same info (yep, you could use the same info as the uptime command but thats not a % but a relative measure). We will love to use that value as this will reduce package dependencies and be a lot faster but we don't know wich one to use. In response to this same email, Richard has said: Ahh, mutual exclusion - maybe some form of semaphore handling or transaction queuing and locking? Well, I believe this is completely out of our reach. As I said my perl knowledge is very light and my friend's is not too much from mine. Using this kind of techniques would be too much for us, at least now. We will try other possibilities first. Regards. -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] I want to write Post Nuke How-To
How about a how-to on myPHPnuke? - Original Message - From: J-L Boers [EMAIL PROTECTED] To: E-Smith Devinfo list [EMAIL PROTECTED] Sent: Sunday, August 19, 2001 10:47 PM Subject: [e-smith-devinfo] I want to write Post Nuke How-To I just got done installing post nuke (mutant release) on my ESSG using the primary i-bay. During the entire process (which took the better part of a day for me) i found numerous references and tips, links etc. I hosed my first ESSG doing this and decided to build a second one until I knew how to do it. Well I finally got it!!! yeah! Anyhow I found it difficult to find all the steps to get it going and decided to write a how-to on installing it. I did not see a single how-to for e-smith anywhere on the phorums although there were a lot of helpful tips. problem was. another person would correct someone elses tips etc. etc. What I would like is for a few of you folks to offer to look it over before I publish it. If someone would offer (Dan? Tim L?), please send me an email ( [EMAIL PROTECTED] )and I will start putting my notes together for your review. I think Post-Nuke is a worthwhile project and it seems to have an interest amonst the new ESSG users. Sincerely, J-L Boers [EMAIL PROTECTED] now on to configuring the new site! -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.273 / Virus Database: 143 - Release Date: 8/16/2001 -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] I want to write Post Nuke How-To
lbBB, I don't follow Do you have a How-To for myPHPnuke available for me or You would like me to write a How-To for myPHPnuke. J-L Quoting little bark BIG BYTE [EMAIL PROTECTED]: How about a how-to on myPHPnuke? - Original Message - From: J-L Boers [EMAIL PROTECTED] To: E-Smith Devinfo list [EMAIL PROTECTED] Sent: Sunday, August 19, 2001 10:47 PM Subject: [e-smith-devinfo] I want to write Post Nuke How-To I just got done installing post nuke (mutant release) on my ESSG using the primary i-bay. During the entire process (which took the better part of a day for me) i found numerous references and tips, links etc. I hosed my first ESSG doing this and decided to build a second one until I knew how to do it. Well I finally got it!!! yeah! Anyhow I found it difficult to find all the steps to get it going and decided to write a how-to on installing it. I did not see a single how-to for e-smith anywhere on the phorums although there were a lot of helpful tips. problem was. another person would correct someone elses tips etc. etc. What I would like is for a few of you folks to offer to look it over before I publish it. If someone would offer (Dan? Tim L?), please send me an email ( [EMAIL PROTECTED] )and I will start putting my notes together for your review. I think Post-Nuke is a worthwhile project and it seems to have an interest amonst the new ESSG users. Sincerely, J-L Boers [EMAIL PROTECTED] now on to configuring the new site! -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.273 / Virus Database: 143 - Release Date: 8/16/2001 -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] I want to write Post Nuke How-To
I'll finish the Post-Nuke one first. Then maybe compare a myPHPnuke install to that How-To. J-L Quoting little bark BIG BYTE [EMAIL PROTECTED]: would like to see one written. lbBB, I don't follow Do you have a How-To for myPHPnuke available for me or You would like me to write a How-To for myPHPnuke. J-L Quoting little bark BIG BYTE [EMAIL PROTECTED]: How about a how-to on myPHPnuke? -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] I want to write Post Nuke How-To
I setup Post-Nuke in a secondary I-bay and it went off without a hitch except for having to move the files up one directory level and chmod a few things. What type of problems did you run into with the primary? bh J-L Boers wrote: I just got done installing post nuke (mutant release) on my ESSG using the primary i-bay. During the entire process (which took the better part of a day for me) i found numerous references and tips, links etc. I hosed my first ESSG doing this and decided to build a second one until I knew how to do it. Well I finally got it!!! yeah! -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
[e-smith-devinfo] Named server not responding
Has anyone else seen this. It happened amongst my flurry of upgrades this weekend. Now I cannot resolve any DNS names. # ping www.e-smith.com ping: unknown host www.e-smith.com # service named status ndc: error: ctl_client: evConnect(fd 3): Connection refused ndc: error: cannot connect to command channel (/var/run/ndc) Thanks, Justin -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] Named server not responding
You will get this if 1. named is not running. 2. named did not create the control socket due to syntax errors in named.conf. Check your logs. 3. you have told named (via named.conf) to use a different socket. ndc -c /new/path/to/control/socket status -Original Message- From: Justin Funke [mailto:[EMAIL PROTECTED]] Sent: maandag 20 augustus 2001 17:22 To: '[EMAIL PROTECTED]' Subject: [e-smith-devinfo] Named server not responding Has anyone else seen this. It happened amongst my flurry of upgrades this weekend. Now I cannot resolve any DNS names. # ping www.e-smith.com ping: unknown host www.e-smith.com # service named status ndc: error: ctl_client: evConnect(fd 3): Connection refused ndc: error: cannot connect to command channel (/var/run/ndc) Thanks, Justin -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] Named server not responding
You will get this if 1. named is not running. 2. named did not create the control socket due to syntax errors in named.conf. Check your logs. 3. you have told named (via named.conf) to use a different socket. ndc -c /new/path/to/control/socket status Thanks - I read that also. Further to my investigation I do have named running in some sort of capacity. # ps aux | grep named named29011 0.0 0.9 2724 580 ?SAug19 0:01 named -u named Which seems to eliminate option 1. Syslog reports, Aug 20 10:14:36 cendium named[29011]: sysquery: nlookup error on ? Justin. -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] Named server not responding
On Mon, 20 Aug 2001, Justin Funke wrote: Has anyone else seen this. It happened amongst my flurry of upgrades this weekend. Now I cannot resolve any DNS names. After any package upgrades, unless you know specific less disruptive command, you should always do: /sbin/e-smith/signal-event post-upgrade /sbin/e-smith/signal-event reboot Those commands will configure all services, then start them all in the correct sequence (after the reboot). Charlie Brady [EMAIL PROTECTED] Lead Product Developer Network Server Solutions Grouphttp://www.e-smith.com/ Mitel Networks Corporationhttp://www.mitel.com/ Phone: +1 (613) 368 4376 or 564 8000 Fax: +1 (613) 564 7739 -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] Named server not responding
On Mon, 20 Aug 2001, Charlie Brady wrote: On Mon, 20 Aug 2001, Justin Funke wrote: Has anyone else seen this. It happened amongst my flurry of upgrades this weekend. Now I cannot resolve any DNS names. After any package upgrades, unless you know specific less disruptive command [...] Since you have a problem with named, you could try: /etc/e-smith/events/actions/conf-named /etc/e-smith/events/actions/restart-named This is a subset of, for example: /sbin/e-smith/signal-event console-save Charlie Brady [EMAIL PROTECTED] Lead Product Developer Network Server Solutions Grouphttp://www.e-smith.com/ Mitel Networks Corporationhttp://www.mitel.com/ Phone: +1 (613) 368 4376 or 564 8000 Fax: +1 (613) 564 7739 -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] Signal-Events (was Named server not responding)
What is the difference between signal-event console-save and post-upgrade? Why would I use one over the other? Trev. -Original Message- From: Charlie Brady [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 10:16 AM To: Justin Funke Cc: '[EMAIL PROTECTED]' Subject: Re: [e-smith-devinfo] Named server not responding On Mon, 20 Aug 2001, Justin Funke wrote: Has anyone else seen this. It happened amongst my flurry of upgrades this weekend. Now I cannot resolve any DNS names. After any package upgrades, unless you know specific less disruptive command, you should always do: /sbin/e-smith/signal-event post-upgrade /sbin/e-smith/signal-event reboot Those commands will configure all services, then start them all in the correct sequence (after the reboot). Charlie Brady [EMAIL PROTECTED] Lead Product Developer Network Server Solutions Grouphttp://www.e-smith.com/ Mitel Networks Corporationhttp://www.mitel.com/ Phone: +1 (613) 368 4376 or 564 8000 Fax: +1 (613) 564 7739 -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] Signal-Events (was Named server not responding)
Trevor Ouellette [EMAIL PROTECTED] said: What is the difference between signal-event console-save and post- upgrade? Just visit /etc/e-smith/events/console-save and /etc/e-smith/events/post- upgrade and compare the lists of actions executed. Why would I use one over the other? Based on the actions you are wanting to execute you would choice the event that best meets your needs. -- Darrell May DMC NETSOURCED.COM http://netsourced.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] Named server not responding
Another clue, (the not working server) named31585 0.0 2.6 2724 1672 ?S11:09 0:00 named -u named (my other regular working server) dns 1622 0.0 0.9 3052 2072 ?S11:01 0:00 /usr/sbin/named - - Both named startup scripts are identical in between the two servers in init.d -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] Named server not responding
On Mon, 20 Aug 2001, Justin Funke wrote: Has anyone else seen this. It happened amongst my flurry of upgrades this weekend. Now I cannot resolve any DNS names. # ping www.e-smith.com ping: unknown host www.e-smith.com # service named status ndc: error: ctl_client: evConnect(fd 3): Connection refused ndc: error: cannot connect to command channel (/var/run/ndc) service named status won't work. Neither will start/stop/restart/reload variants. This is because we run named chrooted, and start it from /etc/inittab, not via an /etc/rc.d/init.d startup script. Check that you haven't somehow modified /etc/resolv.conf. Check what appears in /var/log/messages after you do killall named. -- Charlie Brady [EMAIL PROTECTED] Lead Product Developer Network Server Solutions Grouphttp://www.e-smith.com/ Mitel Networks Corporationhttp://www.mitel.com/ Phone: +1 (613) 368 4376 or 564 8000 Fax: +1 (613) 564 7739 -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
[e-smith-devinfo] Samba PDC W2k
Hello, I'm wondering if E-Smith developers was thinking of a package which the users could install and have a PDC for windows 2k ? I tried 2 differents rude way to do it but it didnt work and I had to reinstall my server I dont like the idea my server is a trash :) Thanx - Un PC sans Windows c'est comme un gâteau au chocolat sans moutarde -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
[e-smith-devinfo] - Solution - RE: [e-smith-devinfo] Named server not responding
Turns out a Microsoft solution fixed my e-smith server :) Microsoft TechNet Knowledge Base Article 000-1 When all else fails reboot the server. Everything working now. The interesting side note on this was that I had thought I was remotely rebooting the server on several other occasions after my upgrades just to be sure everything re-started properly. This was not the case... life-lesson The problem was that my server was not responding to the (shutdown -r now) command. Turns out this is a relatively common problem. I issued a simple (reboot) from the command line and everything came back up 100% after the reboot. /life-lesson There was probably nothing wrong with the server but since I was using the wrong commands for the chroot environment (service start/stop/restart/status) etc. I hadn't properly re-started the named service. Thanks to Charlie and Jelmer for their help. Justin. -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
[e-smith-devinfo] Taper Interface ?
-Taper is a backup and restoration program with a friendly user interface. How does one access the interface? I have installed the rpm. I have 4.1.2 I cnan only find the cmd line interface Thanks Dave -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] Multple Domains
Anyone actually have this page located somewhere else or saved? It seems that this site is based on a cable modem connection...I should have printed or saved the page when I had a chance... Thanks again! - Original Message - From: [EMAIL PROTECTED] To: Patrick O'Donnell [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Monday, August 20, 2001 4:04 AM Subject: RE: [e-smith-devinfo] Multple Domains This issue was already addressed in a very thorough manner on this mailing list a little while ago. Check here for Darrell May's HowTo for doing just that: http://netsourced.com/servers/docs/vdomain-alias-howto.html -Original Message- From: Patrick O'Donnell [mailto:[EMAIL PROTECTED]] Sent: August 17, 2001 11:48 AM To: [EMAIL PROTECTED] Subject: [e-smith-devinfo] Multple Domains Hello, We currently are trying to host multiple domains with esmith, and obviously are having the issue of not being able to distinguish a user from domain1.com from domain2.com and have the drop to completely seperate mail box's. Has anyone developed a solution for that? And if not, any idea who may being doing it now? or what it would cost to have a solution developed for it?? This server seems like a robust solution, unfortunately, it seems like e-smith made it limited by only allowing it to effectively handle email for one domain with one set of users. Thanks --Patrick -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] Granite Canyon
I used themthey are down very often...use zoneedit.com - Original Message - From: Des Dougan [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, August 15, 2001 6:36 PM Subject: [e-smith-devinfo] Granite Canyon Does anyone know what is happening at Granite Canyon? It looks like the site is down. Anyone else use them for DNS? Des Dougan -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] Samba PDC W2k
Brossin Pierrick wrote: I'm wondering if E-Smith developers was thinking of a package which the users could install and have a PDC for windows 2k ? I'm not one of the e-smith developers, but have you tried my how-to? It's at http://www.familybrown.org/howtos/samba-upgrade-howto.html. I've recently updated it to reflect a more appropriate Samba RPM. If you had problems, post here and we can see if we can make it work. Any solution that will allow e-smith to be a PDC will necessarily involve upgrading Samba; it's just a question of whether I have the best way of doing it, or if there's a better way somewhere. -- Dan Brown, KE6MKS, [EMAIL PROTECTED] Meddle not in the affairs of dragons, for you are crunchy and taste good with ketchup. -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] I want to write Post Nuke How-To
J-L Boers wrote: think Post-Nuke is a worthwhile project and it seems to have an interest amonst the new ESSG users. Just curious, as somebody who hasn't paid a whole lot of attention to these sorts of things, what are the practical differences between phpnuke/myphpnuke/postnuke/etc? They all seem to look about the same, have similar features, similar requirements, and so on (and they all seem a lot like slashdot). Why might I prefer one over another? -- Dan Brown, KE6MKS, [EMAIL PROTECTED] Meddle not in the affairs of dragons, for you are crunchy and taste good with ketchup. -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] I want to write Post Nuke How-To
Dan, I am not sure of Post Nuke, but I have used both PhpNuke and MyPhpNuke. I currently run myphpnuke mainly due to the versatility of Menu Box placements. I have not seen the latest version 5.0 of Nuke, but I understand they were working on more versatility of main page boxes. Myphpnuke seemed to have a few more add-ons that I needed at the time as well so I switched to myphpnuke. I found also that myphpnuke installed much easier than nuke. The full package has a nice install.php file to set most everything up and create the mysql database needed. Also myphpnuke has forums built in the full package and a very nice admin screens. You can see myphpnuke in operation at my personal site http://www.wa4bro.net and in the downloads section there is a download link to the myphpnuke full package at http://www.wa4bro.net/download.php file name: myphpnuke-full.zip 73's yet another Dan -Original Message- From: Dan Brown [mailto:[EMAIL PROTECTED]] Sent: Monday, August 20, 2001 6:21 PM To: J-L Boers Cc: E-Smith Devinfo list Subject: Re: [e-smith-devinfo] I want to write Post Nuke How-To Just curious, as somebody who hasn't paid a whole lot of attention to these sorts of things, what are the practical differences between phpnuke/myphpnuke/postnuke/etc? They all seem to look about the same, have similar features, similar requirements, and so on (and they all seem a lot like slashdot). Why might I prefer one over another? -- Dan Brown, KE6MKS, [EMAIL PROTECTED] Meddle not in the affairs of dragons, for you are crunchy and taste good with ketchup. -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
RE: [e-smith-devinfo] VPN Question
Do you know a site where i could find a howto in creating VPN? I tried it in e-smith but it wont work, maybe i miss some configs. pls help ** Original Subject: RE: [e-smith-devinfo] VPN Question ** Original Sender: Alexander Wallace [EMAIL PROTECTED] ** Original Date: Fri, 17 Aug 2001 21:40:48 +0800 ** Original Message follows... If what you want to do is have PPTP clients (windows 9x/me/2k/nt) connect to your e-smith, It's a very easy thing... -You need to set the number or connections allowed in the e-smith-manager in section Security/remote access for PPTP -Create the usernames that will be used by you VPN clients... -Your windows clients need to have 128 bit encription -Create your VPN connections in the clients following the windows instructions and providing the IP to your e-smith server... And you are ready to go... I'm not sure on how to create an IPSec connection, but I'm sure it can be done... On 17 Aug 2001 [EMAIL PROTECTED] wrote: Hello to all e-smith masters, Id like to setup VPN in my e-smith 4.1.2 server, but where should i start? anyone can help me pls. Best Regards, Glynn S. Condez Technical Specialist Technical Operations Textron Corporation +632 718/7267701 email: [EMAIL PROTECTED] Website: http://www.itextron.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org ** - End Original Message --- ** Best Regards, Glynn S. Condez Technical Specialist Technical Operations Textron Corporation +632 718/7267701 email: [EMAIL PROTECTED] Website: http://www.itextron.com -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
Re: [e-smith-devinfo] Samba PDC W2k
On Mon, 20 Aug 2001, Dan Brown wrote:
Brossin Pierrick wrote:
I'm wondering if E-Smith developers was thinking of a package which the
users could install and have a PDC for windows 2k ?
I'm not one of the e-smith developers, but have you tried my how-to?
It's at http://www.familybrown.org/howtos/samba-upgrade-howto.html.
I've recently updated it to reflect a more appropriate Samba RPM. If
you had problems, post here and we can see if we can make it work.
Any solution that will allow e-smith to be a PDC will necessarily
involve upgrading Samba; it's just a question of whether I have the best
way of doing it, or if there's a better way somewhere.
Dan, I'm quite sure that you don't have the best way.
I've been meaning to get in touch with you about that, so let's get onto
the issues now.
Before proceeding, you'll want to back up your /etc/smbpasswd file, or you
may lose its contents. This would cause authentication to fail from Windows
clients:
[root@e-smith /root]# cp /etc/smbpasswd /etc/smbpasswd.old
This is sound advice, but should not be necessary. If you change the way
that you upgrade the samba RPMs (and use different samba RPMS), you won't
lose the old smbpasswd file.
Before you can install this file, you will need to remove the
currently-installed Samba packages. This is because e-smith ships with
three separate packages (samba, samba-client, and samba-common) which
are all included in the file you just downloaded.
Then you can install the new package.
[root@e-smith /root]# rpm -e --nodeps samba samba-client samba-common
We try very hard to avoid using --nodeps or --force unless we are sure why
we are using them, and that they are safe and necessary. In this case, I'm
not sure why you need them. In any case, I would suggest that you should
update the samba RPMS, rather than removing them.
This is where you were losing your /etc/smbpasswd file. It will be removed
if you remove
[root@e-smith /root]# rpm -Uvh samba-2.2.1a-20010713.i386.rpm
I have an alternative RPM set to suggest, which I found using rpmfind:
ftp://ftp.redhat.com/pub/redhat/linux/rawhide/i386/RedHat/RPMS/
which is mirrored at:
ftp://speakeasy.rpmfind.net/linux/rawhide/1.0/i386/RedHat/RPMS/
I found the mirror site to be more available.
Here you can find:
samba-common-2.2.1a-4.i386.rpm
samba-2.2.1a-4.i386.rpm
samba-client-2.2.1a-4.i386.rpm
We strongly discourage anyone from installing the samba-swat RPM.
Grab these three RPMs, then do:
rpm -Uhv samba{,-client,-common}-2.2.1a-4.i386.rpm
which is shorthand for:
rpm -Uhv samba-2.2.1a-4.i386.rpm samba-client-2.2.1a-4.i386.rpm \
samba-common-2.2.1a-4.i386.rpm
What you will see when you do this is something like:
error: failed dependencies:
initscripts = 5.54-1 is needed by samba-2.2.1a-4.i386.rpm
libreadline.so.4 is needed by samba-client-2.2.1a-4.i386.rpm
Now here you may have to take my word for the fact that the version of
initscripts used in e-smith 4.1.2 is perfectly compatible with
samba-2.2.1a, so the specified version is not a real dependency. And you
don't need to take my word for the fact that libreadline.so.4 is already
installed, just take a look in /usr/lib. It seems there is a bug in RPM
there.
So this time, you can use --nodeps with my blessing:
rpm -Uhv --nodeps samba{,-client,-common}-2.2.1a-4.i386.rpm
Because Samba 2.2.x expects some files to be in different places than 2.0.x
does, you'll need to move some files around:
[root@e-smith /root]# cd /etc/samba
[root@e-smith samba]# mv * ..
This could have been where you were losing your original smbpasswd file.
[root@e-smith samba]# ln -s ../smbpasswd smbpasswd
[root@e-smith samba]# ln -s ../smb.conf smb.conf
[root@e-smith samba]# ln -s ../MACHINE.SID MACHINE.SID
[root@e-smith samba]# ln -s ../smbusers smbusers
[root@e-smith samba]# ln -s ../lmhosts lmhosts
By using the RedHat RPMS you will find that these steps are unnecessary,
and in any case, we'd strongly discourage anyone from moving files around
unless it is absolutely clear that it is both safe and necessary.
For security reasons, we'll want to edit the smbusers file to remove the
user mappings:
[root@e-smith samba]# pico smbusers
Place a semicolon at the beginning of each line in this file, then save
it.
This step is not absolutely necessary, as the smbusers file is not used
unless it is referenced in the smb.conf file. It is not referenced in the
e-smith managed version of that file, so you can either ignore it, remove
it, or replace it altogether with, say:
echo # We don't map any users, so this file is unused \
/etc/samba/smbusers
[root@e-smith samba]# mkdir -p /etc/e-smith/templates-custom/etc/smb.conf
[root@e-smith samba]# pico \
/etc/e-smith/templates-custom/etc/smb.conf/12adduserscript
Enter this one line:
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false \
-M %u
and then save the file.
Use this with extreme caution.
