debian-user-digest Digest V2007 #2576

Content-Type: text/plain

debian-user-digest Digest Volume 2007 : Issue 2576

Today's Topics:

  Re: postgres install fails on sid     [ John Masters  ]
  Re: stereo on mp3 playback            [ andy  ]
  Re: lvreduce - no such file or direc  [ Andy Hardy  ]
  Re: postgres install fails on sid     [ Florian Kulzer  ]
  Re: stereo on mp3 playback            [ Florian Kulzer  ]
  PCIe Video and Open source 3D driver  [ Wakko Warner  ]
  Re: postgres install fails on sid     [ John Masters  ]
  Re: PCIe Video and Open source 3D dr  [ "Kelly Clowers"  ]
  stunnel4 and Debian                   [ Tom Allison  ]

Date: Sun, 7 Oct 2007 16:35:44 +0000
From: John Masters <johnmasters@oxtedonline.net> To: debian-user@lists.debian.org
Subject: Re: postgres install fails on sid

Message-ID: <20071007163544.GB23564@oxtedonline.net>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On 16:04 Sun 07 Oct     , Florian Kulzer wrote:

What is the c part of the permissions and how do you set it? I have googled and searched my books but all I can find is that it is a character device file but no mention of how to set the attribute. Would it be OK to just chmod 666?

--
Regards, John

Date: Sun, 7 Oct 2007 12:11:11 -0400 From: Wayne Topa <linuxone@intergate.com> To: debian-user@lists.debian.org Subject: Re: aptitude configuration question Message-ID: <20071007161111.GA26710@buddy.mtntop.home> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Jude DaShiell(jdashiel@shellworld.net) is reported to have said:
> What can I put into the .aptituderc file to adjust aptitude so the
> recommended downloads and suggested downloads get downloaded with an
> aptitude dist-upgrade?
The aptitude man page (-r) option says you recommends options in /etc/apt/apt.conf. I don't see and mention of a .aptituderc file. WT -- It is easier to write an incorrect program than understand a correct one. _______________________________________________________

Date: Sun, 07 Oct 2007 18:08:10 +0100 From: andy <geek_show@dsl.pipex.com> To: debian-user@lists.debian.org Subject: Re: stereo on mp3 playback Message-ID: <4709127A.3070102@dsl.pipex.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Florian Kulzer wrote:
> On Sun, Oct 07, 2007 at 15:21:50 +0100, andy wrote:
>
>> Hi >> >> When playing CDs on my Lenny system, I get great stereo. However, whenever >> playing mp3s - even those that I have ripped myself in stereo, I don't get >> stereo at all: music only comes out of the right speaker, no matter which >> application I am using for playback. I am using ALSA and as far as I can >> tell have the basic arrangement set up properly. I ran alsaconf and >> selected the correct card, and then alsamixer and adjusted the settings: >> the CD still plays in stereo, but the mp3 players not. >> >> Can anyone give me a steer in the right direction please? >> >
> The fact that direct CD playback is in stereo does not necessarily mean
> that ALSA is correctly configured for stereo playback of sound files.
>
> A better test is:
>
> speaker-test -t sine -c2
>
> This command should produce a (rather boring) sine wave output which
> switches between left and right channel every few seconds. Does that
> work?
>
>
Florian Thanks for the idea. Left front does not work - which is the speaker that is non-responsive when playing mp3s. I wonder if this is due to the new kernel upgrade recently: 2.6.22-2-686 A -- "If they can get you asking the wrong questions, they don't have to worry about the answers." - Thomas Pynchon, "Gravity's Rainbow"

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.debian.org Links debian-announce debian-apache debian-arm-changes debian-beowulf debian-boot debian-cd debian-cd-vendors debian-changes debian-changes-digest debian-isp debian-kde debian-laptop debian-mirrors-announce debian-news debian-security debian-security-announce debian-testing debian-user debian-user-digest Request more information about Pantek

Date: Sun, 07 Oct 2007 17:52:28 +0100 From: Andy Hardy <news_ldu@hardyfamily.org.uk> To: debian-user@lists.debian.org Subject: Re: lvreduce - no such file or directory? Message-ID: <13gi3mdk327to44@corp.supernews.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Wesley J. Landaker wrote:
> On Sunday 07 October 2007 07:46:42 Andy Hardy wrote:
>> debian:/home/andy# lvreduce -v -r -L -50g /dev/debian/home >> Finding volume group debian >> Executing: fsadm check /dev/debian/home (null) >> fsadm: execlp failed: No such file or directory >> fsadm failed: 2 >> debian:/home/andy#
>
> You don't give it a device, you give it a vg and lv name, so:
>
> $ lvreduce -v -r -L -50g debian/home
I get the same error.
> But you'd better be sure you've already shrunk the *filesystem* itself, or
> you're going to lose all of your data.
Isn't the -r (resizefs) supposed to do this?

Date: Sun, 7 Oct 2007 13:34:03 -0400 From: Rick Pasotto <rick@niof.net> To: debian-user@lists.debian.org Subject: Re: lots of invalid email trying to come in Message-ID: <20071007173403.GE23783@niof.net> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sun, Oct 07, 2007 at 12:09:41AM -0500, Jude DaShiell wrote:
> It's time to join the procmail email list. You're being attacked by spam.
> If you had spamassassin properly installed you could save all of the
> invalid email to a probably-spam folder and use it to train your spam
> filter sa-learn --spam would do that but before I did that, I'd run
> sa-learn --ham ./mail/debian-user and do it on all of the other folders
> where you keep email so it can learn to distinguish one from the other.
You really should pay more attention. The messages were never received since exim rejected the initial contact. There was nothing for procmail or spamassassin to process. Besides, I have spamassassin installed at the system level so it looks at *every* message that exim handles. -- "It is not [merely] the breaking of his doors, & the rummaging of his drawers, that constitutes the essence of the offense; but it is the invasion of his indefeasible right of personal security, personal liberty & private property, where that right has never been forfeited by his conviction of some public offense..." -- Bradley 1886 in Boyd v US 116 US 616 @630 Rick Pasotto rick(at)niof.net http://www.niof.net

Date: Sun, 7 Oct 2007 19:14:45 +0200 From: Florian Kulzer <florian.kulzer+debian@icfo.es> To: debian-user@lists.debian.org Subject: Re: postgres install fails on sid Message-ID: <20071007171445.GA16095@localhost> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sun, Oct 07, 2007 at 16:35:44 +0000, John Masters wrote:
> On 16:04 Sun 07 Oct, Florian Kulzer wrote:
> > On Sun, Oct 07, 2007 at 13:49:11 +0000, John Masters wrote:
> > > I have posted this to the Postgres list also.
> > >
> > > Cannot get Postgres 8.2 working on Debian sid using the Debian package.
> > > At the config stage I get a message telling me to run:-
> > >
> > > pg_createcluster 8.2 main --start
> > >
> > > Doing this (as root) produces the following output:-
> > >
> > > Creating new cluster (configuration: /etc/postgresql/8.2/main, \
> > > data: /var/lib/postgresql/8.2/main)...
> > > sh: /dev/null: Permission denied
> >
> > I would start with the first problem that is reported: "sh: /dev/null:
> > Permission denied". What are the permissions of the /dev/null node on
> > your system? It should be writable by anyone:
> >
> > $ ls -l /dev/null
> > crw-rw-rw- 1 root root 1, 3 2007-10-07 14:28 /dev/null
> >
> Thanks, that seems to be the problem. permissions for /dev/null
> are -rw-r--r--
>
> What is the c part of the permissions and how do you set it? I have
> googled and searched my books but all I can find is that it is a
> character device file but no mention of how to set the attribute.
The "c" means that it is a special file to begin with; you cannot just set this property for an existing normal file. Such special files used to be created with the "mknod" command, but nowadays udev should take care of their creation.
> Would it be OK to just chmod 666?
The permission error will probably be gone then, but it would still be a normal file and not a real /dev/null, which is used to dump the output of all sorts of commands that are called in scripts. (The job of /dev/null is to swallow input without a trace.) I would remove (or rename) the file and run udevtrigger as root, followed by echo "xxx" > /dev/null That should force udev to create the device node. Afterwards you should see this: $ file /dev/null /dev/null: character special (1/3) If that does not work then something is wrong with your udev configuration. The first thing to check is if the relevant rules exist: $ grep null /etc/udev/* /etc/udev/links.conf:M null c 1 3 /etc/udev/permissions.rules:KERNEL=="null", MODE="0666" If all else fails then you could try to create the device node yourself (as root): mknod -m 0666 /dev/null c 1 3 However, if udev is active it will normally intercept this command and redirect the device node creation to /dev/.static/dev/null (AFAIK). -- Regards, | http://users.icfo.es/Florian.Kulzer Florian |

Date: Sun, 7 Oct 2007 13:38:59 -0400 From: Rick Pasotto <rick@niof.net> To: debian-user@lists.debian.org Subject: Re: lots of invalid email trying to come in Message-ID: <20071007173859.GF23783@niof.net> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sun, Oct 07, 2007 at 07:36:40AM -0700, Raquel wrote:
> On Sat, 6 Oct 2007 20:14:44 -0400
> Rick Pasotto <rick@niof.net> wrote:
>
> > Suddenly I'm getting lots of email to someuser@mywebsite.info
> > where 'someuser' can be most anything. They're coming from
> > different ips, some of which have no host name. ('mywebsite' is
> > not the real name.)
> >
> > What's going on? How can I stop it?
>
> Welcome to the Internet. You can't stop them from trying to get in
> (except by taking the machine off-line). You can only keep them
> from getting in.
Exim was doing a very good job of keeping them from getting in. The reason I posted was the fact of all the *different* ips trying to send to invalid users at the same host within a relatively short period of time. Does that mean that those ips are actually zombies that are being used to send email? If so, should their owners be notified? -- "Be more concerned with your character than with your reputation. Your character is what you really are while your reputation is merely what others think you are." -- Dale Carnegie Rick Pasotto rick(at)niof.net http://www.niof.net

Date: Sun, 7 Oct 2007 19:35:27 +0200 From: Florian Kulzer <florian.kulzer+debian@icfo.es> To: debian-user@lists.debian.org Subject: Re: stereo on mp3 playback Message-ID: <20071007173527.GB16095@localhost> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sun, Oct 07, 2007 at 18:08:10 +0100, andy wrote:
> Florian Kulzer wrote:
>> On Sun, Oct 07, 2007 at 15:21:50 +0100, andy wrote: [ snip: problems with stereo playback of mp3 files ] >> The fact that direct CD playback is in stereo does not necessarily mean >> that ALSA is correctly configured for stereo playback of sound files. >> A better test is: >> >> speaker-test -t sine -c2 >> >> This command should produce a (rather boring) sine wave output which >> switches between left and right channel every few seconds. Does that >> work? >>
> Thanks for the idea. Left front does not work - which is the speaker that
> is non-responsive when playing mp3s. I wonder if this is due to the new
> kernel upgrade recently: 2.6.22-2-686
It is possible that a module upgrade introduced a regression. Did the stereo playback of mp3 files work before, or did you only listen to CD playback up to now? In any case, I think you should first check the alsa mixer settings. Post the output of: amixer | egrep '^( .*Left|[^ ])' -- Regards, | http://users.icfo.es/Florian.Kulzer Florian |

Date: Sun, 7 Oct 2007 14:57:07 -0300 From: Khristian <der.kosak@gmail.com> To: debian-user@lists.debian.org Subject: alsa and alc883 audio codec Message-ID: <d9cfeecd0710071057l2a4e940dp7ace2611b10fb8e7@mail.gmail.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 Content-Disposition: inline SGkgdGhlcmUuCkkgaW5zdGFsbGVkIERlYmlhbiBFdGNoIG9uIG15IGFjZXIgNTEwMndsbWkgbm90 ZWJvb2sgeWVzdGVyZGF5LCBpbiBhCnRlbXBvcmFyeSBwYXJ0aXRpb24gKEkgYWxyZWFkeSBoYWQg VWJ1bnR1IGluc3RhbGxlZCwgYW5kIHdhbnRlZCB0bwpnaXZlIERlYmlhbiBhIHRyeSBiZWNhdXNl IG9mIFVidW50dScgcyBpbnNhbmVseSBzbG93IGJvb3RpbmcgcHJvY2VzcykuClNvLCBhZnRlciBi b290aW5nLCBJIGxldCB0aGUgc3lzdGVtIHVwZGF0ZSB0aGUga2VybmVsIGFuZCByZWJvb3QuCldv cmtpbmcgZmluZS4gV2hlbiBJIHRlc3RlZCB0aGUgc291bmQgc3lzdGVtLCBzdXByaXNlISBJdCB3 b3JrcyEgRm9yCnRoZSBmaXJzdCB0aW1lIGluIG1vbnRocyBJIGNhbiByZWNvcmQgc291bmQgb24g bXkgbGFwdG9wLiBJIHdhcyBhYmxlCnRvIHVzZSBhbHNhbWl4ZXIgLCBhbmQgcmVjb3JkIHNvdW5k IGZyb20gYm90aCB0aGUgYnVpbHQtaW4gbWljIGFuZCB0aGUKZXh0ZXJuYWwgbWljIEkgaGF2ZS4K U2luY2UgbXkgVWJ1bnR1IEd1dHN5IGluc3RhbGxhdGlvbiB3YXMgYSBiaXQgdG9vIHNsb3cgYW5k Cm1pc2NvbmZpZ3VyZWQsIEkgd2lwZWQgaXQgb3V0LCBjcmVhdGVkIGEgbGFyZ2VyIHBhcnRpdGlv biBmb3IgRGViaWFuLAphbmQgaW5zdGFsbGVkIGl0IHdpdGggdGhlIG5ldGluc3QgZGlzYy4KQnV0 IG5vdywgc291bmQgcmVjb3JkaW5nIGRvZXNuJyB0ICB3b3JrIGFueW1vcmUuIEFsc2FtaXhlciBm YWlscwpnaXZpbmcgdGhlIG1lc3NhZ2UgImFsc2FtaXhlcjogZnVuY3Rpb24gc25kX21peGVyX2xv YWQgZmFpbGVkOiBJbnZhbGlkCmFyZ3VtZW50IiAsIGFuZCBhbWl4ZXIgZmFpbHMgdG9vLgpBbnkg Y2x1ZXM/IEknbSBnb2luZyB0byBnZXQgdGhlIGFsc2Egc291cmNlIGFuZCB0cnkgY29tcGlsaW5n IGl0IG15c2VsZiwgbm93LgpUSUEsCgoKCi0tIApLaHJpc3RpYW4gQWxleGFuZGVyIFNjaMO2bnJv Y2sKaHR0cDovL2FnaWxpemFuZG8uYmxvZ3Nwb3QuY29tIC0gTm90w61jaWFzIFF1ZW50aW5oYXMg ZGUgVGVjbm9sb2dpYSEKaHR0cDovL2Rlcmtvc2FrLmJsb2dzcG90LmNvbSAtIE1ldSBibMOzZ3Vl IQo=

Date: Sun, 7 Oct 2007 13:33:58 -0400 From: Wakko Warner <wakko@animx.eu.org> To: debian-user@lists.debian.org Subject: PCIe Video and Open source 3D drivers Message-ID: <20071007173358.GA16057@animx.eu.org> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Please keep me CC'd, I've not subscribed to the list yet. I've been thinking about upgrading one of my computers but I've had difficulties figuring out if any PCIe video cards have open source 3D drivers. My current system is using an ATI FireGL X1 graphics card (R300 I think). I'm looking for a graphics card comparible or faster that is PCIe that open source 3D drivers are available. I came across free3d.org but was unsure if the drivers are already available. I read the X800 radeons were supported. According to some texts I've found, a FireGL V7100 has the X800 chip. Does anyone know if this will work? I'm using SID on this machine. -- Lab tests show that use of micro$oft causes cancer in lab animals Got Gas???

Date: Sun, 7 Oct 2007 18:05:42 +0000 From: John Masters <johnmasters@oxtedonline.net> To: debian-user@lists.debian.org Subject: Re: postgres install fails on sid Message-ID: <20071007180542.GC23564@oxtedonline.net> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On 19:14 Sun 07 Oct , Florian Kulzer wrote:
> On Sun, Oct 07, 2007 at 16:35:44 +0000, John Masters wrote:
> > On 16:04 Sun 07 Oct, Florian Kulzer wrote:
> > > On Sun, Oct 07, 2007 at 13:49:11 +0000, John Masters wrote:
> > > > I have posted this to the Postgres list also.
> > > >
> > > > Cannot get Postgres 8.2 working on Debian sid using the Debian package.
> > > > At the config stage I get a message telling me to run:-
> > > >
> > > > pg_createcluster 8.2 main --start
> > > >
> > > I would start with the first problem that is reported: "sh: /dev/null:
> > > Permission denied". What are the permissions of the /dev/null node on
> > > your system? It should be writable by anyone:
> > >
> > > $ ls -l /dev/null
> > > crw-rw-rw- 1 root root 1, 3 2007-10-07 14:28 /dev/null
> > >
> > Thanks, that seems to be the problem. permissions for /dev/null
> > are -rw-r--r--
> >
> > What is the c part of the permissions and how do you set it? I have
> > googled and searched my books but all I can find is that it is a
> > character device file but no mention of how to set the attribute.
>
> The "c" means that it is a special file to begin with; you cannot just
> set this property for an existing normal file. Such special files used
> to be created with the "mknod" command, but nowadays udev should take
> care of their creation.
>
> > Would it be OK to just chmod 666?
>
> The permission error will probably be gone then, but it would still be a
> normal file and not a real /dev/null, which is used to dump the output
> of all sorts of commands that are called in scripts. (The job of
> /dev/null is to swallow input without a trace.)
>
>
I've chmod 666 /dev/null and now postgres installs OK. However I hesitate to go further as this server is on a VPS. Could that be why the perms were not set properly? I have been running this server for about 3 weeks just with a basic mail setup - Postfix/Courier/Procmail passing all mail through Spamassassin on another server, so some of the obvious spam I have been sending to /dev/null which seems to work. I am unfamiliar with the deployment of VPS's, I just use them, so I assume this should have been setup when the VPS was created. -- Regards, John

Do you need more help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.debian.org Links debian-announce debian-apache debian-arm-changes debian-beowulf debian-boot debian-cd debian-cd-vendors debian-changes debian-changes-digest debian-isp debian-kde debian-laptop debian-mirrors-announce debian-news debian-security debian-security-announce debian-testing debian-user debian-user-digest Request more information about Pantek

Date: Sun, 07 Oct 2007 19:08:37 +0100 From: andy <geek_show@dsl.pipex.com> To: debian-user@lists.debian.org Subject: [SOLVED] Re: stereo on mp3 playback Message-ID: <470920A5.1050805@dsl.pipex.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Florian Kulzer wrote:
> On Sun, Oct 07, 2007 at 18:08:10 +0100, andy wrote:
>
>> Florian Kulzer wrote: >> >>> On Sun, Oct 07, 2007 at 15:21:50 +0100, andy wrote: >>> >
> [ snip: problems with stereo playback of mp3 files ]
>
>
>>> The fact that direct CD playback is in stereo does not necessarily mean >>> that ALSA is correctly configured for stereo playback of sound files. >>> A better test is: >>> >>> speaker-test -t sine -c2 >>> >>> This command should produce a (rather boring) sine wave output which >>> switches between left and right channel every few seconds. Does that >>> work? >>> >>> >> Thanks for the idea. Left front does not work - which is the speaker that >> is non-responsive when playing mp3s. I wonder if this is due to the new >> kernel upgrade recently: 2.6.22-2-686 >> >
> It is possible that a module upgrade introduced a regression. Did the
> stereo playback of mp3 files work before, or did you only listen to CD
> playback up to now?
>
> In any case, I think you should first check the alsa mixer settings.
> Post the output of:
>
> amixer | egrep '^( .*Left|[^ ])'
>
>
Hi Yes, the mp3s did play in stereo before. In any event, I rebooted and while the machine was shutting down, I heard a "pop" sound from the left speaker and upon reboot all is well. I don't know what happened, but suspect that it was perhaps a module not loading properly in the kernel. I appreciate that rebooting is not the most elegant solution, nor even the most practical, so this thread will be useful to keep just in case. What would I be looking for in the output of amixer | egrep '^( .*Left|[^ ])' just so that I can keep this in mind for future reference if there is a recurrence? Thanks Florian. Andy -- "If they can get you asking the wrong questions, they don't have to worry about the answers." - Thomas Pynchon, "Gravity's Rainbow"

Date: Sun, 7 Oct 2007 11:35:46 -0700 From: "Kelly Clowers" <kelly.clowers@gmail.com> To: debian-user@lists.debian.org Cc: "Wakko Warner" <wakko@animx.eu.org> Subject: Re: PCIe Video and Open source 3D drivers Message-ID: <1840f6970710071135n49ee71b1o91f3971bd9537dd1@mail.gmail.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline On 10/7/07, Wakko Warner <wakko@animx.eu.org> wrote:
> Please keep me CC'd, I've not subscribed to the list yet.
>
> I've been thinking about upgrading one of my computers but I've had
> difficulties figuring out if any PCIe video cards have open source 3D
> drivers.
>
> My current system is using an ATI FireGL X1 graphics card (R300 I think).
> I'm looking for a graphics card comparible or faster that is PCIe that open
> source 3D drivers are available. I came across free3d.org but was unsure if
> the drivers are already available. I read the X800 radeons were supported.
> According to some texts I've found, a FireGL V7100 has the X800 chip.
>
> Does anyone know if this will work? I'm using SID on this machine.
If a card is supported, it shouldn't matter if it is AGP or PCIe, just as with older cards, it does not matter if they are PCI or AGP. I have not really heard anything about using FireGL cards, but if they use the same chips as the consumer cards, I guess they should work. http://dri.freedesktop.org/wiki/ATIRadeon is probably the best place to see what is supported. AMD recently began releasing specs for ATI cards, and is working with Open Source devs to create good drivers for all modern ATI card, but it will be a while before there are results for end users. Cheers, Kelly

Date: Sun, 7 Oct 2007 14:59:55 -0400 From: Kevin Mark <kevin.mark@verizon.net> To: debian-user@lists.debian.org Subject: Re: [SOLVED] Re: stereo on mp3 playback Message-ID: <20071007185955.GL18665@horacrux> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sun, Oct 07, 2007 at 07:08:37PM +0100, andy wrote:
> Hi
>
> Yes, the mp3s did play in stereo before. In any event, I rebooted and while
> the machine was shutting down, I heard a "pop" sound from the left speaker
> and upon reboot all is well.
>
> I don't know what happened, but suspect that it was perhaps a module not
> loading properly in the kernel.
> That word 'pop' awoke something. I recall that some speakers have a automatic volume adjustment whereby if they get a sudden loud burst, they stop the sound until being powered down. So maybe you have these kind of speakers? Are they 'powered' or hooked up to a reciever? -- | .''`. == Debian GNU/Linux == | my web site: | | : :' : The Universal |mysite.verizon.net/kevin.mark/| | `. `' Operating System | go to counter.li.org and | | `- http://www.debian.org/ | be counted! #238656 | | my keyserver: subkeys.pgp.net | my NPO: cfsg.org | |join the new debian-community.org to help Debian! | |_______ Unless I ask to be CCd, assume I am subscribed _______|

Date: Sun, 07 Oct 2007 15:09:37 -0400 From: Tom Allison <tom@tacocat.net> To: DBMail mailinglist <dbmail@dbmail.org>, Debian User List <debian-user@lists.debian.org> Subject: stunnel4 and Debian Message-ID: <47092EF1.3030704@tacocat.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit I'm trying to set up a new dbmail box which should only use stunnel4 for access. I'm running into a number of problems with this set up and I'm not getting any message back from various applications, which makes it kind of hard to manage. First. /etc/init.d/dbmail start doesn't nothing. No errors, no running applications. nothing. And it doesn't seem to have an ENABLE=0 flags anywhere in the typical locations (often seen in Debian). And there's no logs generated at /var/log/dbmail/ -- the directory is there, but no logs. Nothing on STDOUT, STDERR, or syslog either. This is a big fat "help!" Second. I'm trying to set this up using stunnel4. I've followed the various directions and such to the best that make sense but I keep getting the same sets of errors, depending on what I do with them. When I start stunnel4 I get an error that I need to specify a pid= in my stunnel.conf file. Well, there is one. It's default and it says 'pid=/stunnel.pid' which is confusing. If I try to connect to the inetd defined port, I get lots of messages (debug is on) and this is what the client sees: 2007.10.07 14:54:32 LOG7[2525:47548886098000]: Snagged 64 random bytes from /dev/urandom 2007.10.07 14:54:32 LOG7[2525:47548886098000]: RAND_status claims sufficient entropy for the PRNG 2007.10.07 14:54:32 LOG7[2525:47548886098000]: PRNG seeded successfully 2007.10.07 14:54:32 LOG7[2525:47548886098000]: Certificate: /etc/stunnel/stunnel.pem 2007.10.07 14:54:32 LOG7[2525:47548886098000]: Certificate loaded 2007.10.07 14:54:32 LOG7[2525:47548886098000]: Key file: /etc/stunnel/stunnel.pem 2007.10.07 14:54:32 LOG7[2525:47548886098000]: Private key loaded 2007.10.07 14:54:32 LOG7[2525:47548886098000]: SSL context initialized for service pop3s 2007.10.07 14:54:32 LOG7[2525:47548886098000]: Certificate: /etc/ssl/certs/alpha.just-email.com.pem 2007.10.07 14:54:32 LOG7[2525:47548886098000]: Certificate loaded 2007.10.07 14:54:32 LOG7[2525:47548886098000]: Key file: /etc/stunnel/stunnel.pem 2007.10.07 14:54:32 LOG3[2525:47548886098000]: SSL_CTX_use_RSAPrivateKey_file: B080074: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch the syslog is a little different: Oct 7 14:52:42 alpha stunnel: LOG5[2499:47678091272272]: stunnel 4.18 on x86_64-pc-linux-gnu with OpenSSL 0.9.8c 05 Sep 2006 Oct 7 14:52:42 alpha stunnel: LOG5[2499:47678091272272]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP Oct 7 14:52:42 alpha stunnel: LOG5[2499:47678091272272]: 500 clients allowed Oct 7 14:52:42 alpha stunnel: LOG3[2499:47678091272272]: Error binding imaps to 0.0.0.0:993 Oct 7 14:52:42 alpha stunnel: LOG3[2499:47678091272272]: bind: Address already in use (98) cd /etc/ssl/certs PEMFILE="servername.foobar.com.pem" openssl req -new -x509 -nodes -days 365 -out $PEMFILE -keyout $PEMFILE chmod 600 $PEMFILE [ -e temp_file ] && rm -f temp_file dd if=/dev/urandom of=temp_file count=2 openssl dhparam -rand temp_file 512 >> $PEMFILE ln -sf $PEMFILE `openssl x509 -noout -hash < $PEMFILE`.0 which was graciously stolen from the dbmail wiki. complete loss here. The keys should match because I just created them. I use one .pem file for both cert and key. I created them thusly: End of debian-user-digest Digest V2007 Issue #2576 ************************************************** Received on Sun Oct 7 15:31:02 2007