From lvl at omnitec.net Wed May 7 15:56:50 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Wed, 7 May 2014 14:56:50 -0500 (CDT) Subject: [GRLUG] Email testing w/sasl Message-ID: We inherited a system some years ago, and it is setup as follows: * Local users send email to the internal server * Emails are copied to am archive * then Relayed to an external, public server with sasl authenciation There are 20+ users operating correctly, but one user cannot authenticate (his [sasl] password to the external is valid). Using testsasld does show that user does not authenticate, .. ***BUT*** no OTHER users authenticate with testsasld either! Possible clue - there are log messages that PAM authentication is failing for that one user? Does anyone have a thought on proper usage of testsasld for testing (or a different way to test)? I am unsure how/why PAM is involved at all. Thanks! Lee From justin.denick at gmail.com Wed May 7 17:10:06 2014 From: justin.denick at gmail.com (Justin Denick) Date: Wed, 7 May 2014 17:10:06 -0400 Subject: [GRLUG] Email testing w/sasl In-Reply-To: References: Message-ID: <9B005939-9907-49F2-B81F-2488AA2FAE13@gmail.com> You might try specifying the realm. This is assumed when a domain is included, as in an email address. Local User John and john at domain.tld are not the same depending on your sasl mechanisms and virtual domain setup. -j > On May 7, 2014, at 3:56 PM, "L. V. Lammert" wrote: > > We inherited a system some years ago, and it is setup as follows: > > * Local users send email to the internal server > * Emails are copied to am archive > * then Relayed to an external, public server with sasl authenciation > > There are 20+ users operating correctly, but one user cannot authenticate > (his [sasl] password to the external is valid). > > Using testsasld does show that user does not authenticate, .. ***BUT*** no > OTHER users authenticate with testsasld either! Possible clue - there are > log messages that PAM authentication is failing for that one user? > > Does anyone have a thought on proper usage of testsasld for testing (or a > different way to test)? I am unsure how/why PAM is involved at all. > > Thanks! > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Wed May 7 17:14:24 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Wed, 7 May 2014 16:14:24 -0500 (CDT) Subject: [GRLUG] Email testing w/sasl In-Reply-To: <9B005939-9907-49F2-B81F-2488AA2FAE13@gmail.com> References: <9B005939-9907-49F2-B81F-2488AA2FAE13@gmail.com> Message-ID: On Wed, 7 May 2014, Justin Denick wrote: > You might try specifying the realm. This is assumed when a domain is included, as in an email address. > I had tried with and without, .. there's something else going on that I do not understand with the PAM errors. TFTR! Lee From jdenick at rtl.org Wed May 7 20:12:45 2014 From: jdenick at rtl.org (Justin Denick) Date: Wed, 7 May 2014 20:12:45 -0400 Subject: [GRLUG] Email testing w/sasl In-Reply-To: References: <9B005939-9907-49F2-B81F-2488AA2FAE13@gmail.com> Message-ID: <1527C9F5-7FC1-4EBF-8B65-6C5A97A7251E@rtl.org> Look in the sasl/smtp.conf file, you may be using PAM as a pwcheck method. For shits and giggles, can you add a new user (not a local user) with saslpasswd -c -u and test that user with smtptest -u UserName -r domainName On May 7, 2014, at 5:14 PM, L. V. Lammert wrote: > On Wed, 7 May 2014, Justin Denick wrote: > >> You might try specifying the realm. This is assumed when a domain is included, as in an email address. >> > I had tried with and without, .. there's something else going on that I do > not understand with the PAM errors. > > TFTR! > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From mikemol at gmail.com Thu May 8 09:08:00 2014 From: mikemol at gmail.com (Michael Mol) Date: Thu, 8 May 2014 09:08:00 -0400 Subject: [GRLUG] GRLUG Friday After Five Message-ID: We here at Virtual Interconnect are hosting the Grand Rapids Linux User's Group for weekly socials. Kyle and myself will serve as anchors; at least one of us will be here during the event. You have no obligation to show up. If you show up, there's no obligation to show up again. There's no obligation to show up for the entire time. (It seems weird that I have to say this this way, but it's always been a recurring set of questions, so...) Time: 5PM-7PM Fridays, every week Location: 315 Richard Terrace, Grand Rapids MI 49506 (Not handicapped-accessible, sorry.) Google Street View: http://goo.gl/maps/CDOzO Parking: Parking lot on the south side of the building. Food: Popcorn and water are free. Anything else is BYOB (No alcohol), although something else may be arranged for in the future. Bus routes: The #6 runs right in front of us, the #5 and #19 come close. Nearest stops: http://bit.ly/QyS7RY Entry: The door is always locked, unless it's propped open. Ring the doorbell if it's shut. Loitering: When Kyle and I have to go, we have to go. There are restaurants, cafes and bookstores all around, though. -- :wq From patrick at upmerchants.com Thu May 8 09:37:55 2014 From: patrick at upmerchants.com (Patrick Goupell) Date: Thu, 08 May 2014 09:37:55 -0400 Subject: [GRLUG] Postfix server setup Message-ID: <536B88B3.8030607@upmerchants.com> Hello All, Using debian wheezy for this project. I am setting up my first postfix email server using a tutoriial from howtoforge.com [Virtual Users and Domains With Postfix, Courier, MySQL and SquirrelMal (Debian Wheezy)] and it works fine. The postfix install uses a self signed ssl certifiacate. I am now trying to set up an ssl certifiacte from godaddy.com. I have not been able to find instructions or a howto on setting this up correctly From goddady.com I ordered a certificate for an apache2 server. I did not see any kind of selection for a postfix mail server. Did I order the wrong type of certifiacate? What I got from godaddy was 2 files: "myservername.crt" and "gd_bundle-g2-g1.crt". So where do I put these files and what do I have to tell postfix/courier to find and use them? Thank you. -- Patrick Goupell Are you free? Find out at http://www.sedm.org/ Income taxes? Find out at http://www.whatistaxed.com From lvl at omnitec.net Thu May 8 11:57:52 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Thu, 8 May 2014 10:57:52 -0500 (CDT) Subject: [GRLUG] Email testing w/sasl In-Reply-To: <1527C9F5-7FC1-4EBF-8B65-6C5A97A7251E@rtl.org> References: <9B005939-9907-49F2-B81F-2488AA2FAE13@gmail.com> <1527C9F5-7FC1-4EBF-8B65-6C5A97A7251E@rtl.org> Message-ID: On Wed, 7 May 2014, Justin Denick wrote: > Look in the sasl/smtp.conf file, you may be using PAM as a pwcheck method. > wcheck_method: saslauthd mech_list: PLAIN LOGIN saslauthd_path: /var/spool/postfix/var/lib/sasl2/mux Looks like pwcheck is normal sasl, .. > For shits and giggles, can you add a new user (not a local user) with > saslpasswd -c -u > and test that user with > smtptest -u UserName -r domainName > Would that be Cyrus smtptest? There is no MUA on this box, .. is there a way to grab it separately? TFTR!! Lee From megadave at gmail.com Thu May 8 13:41:06 2014 From: megadave at gmail.com (Dave Chiodo) Date: Thu, 8 May 2014 13:41:06 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: <536B88B3.8030607@upmerchants.com> References: <536B88B3.8030607@upmerchants.com> Message-ID: Did you generate a CSR on your server and submit it to godaddy? An SSL cert is basically a public key thats been signed by the cert authority - you should still have the "private" key somewhere (that you keep secure and accessible only by your server) I couldnt tell you anything about postfix directly (never used it, I'm an exim user), but you can always use openssl to handle it. It will accept the "SSL" connection from a client, and then relay it locally to the non-SSL service. On Thu, May 8, 2014 at 9:37 AM, Patrick Goupell wrote: > Hello All, > > Using debian wheezy for this project. > > I am setting up my first postfix email server using a tutoriial from > howtoforge.com [Virtual Users and Domains With Postfix, Courier, MySQL > and SquirrelMal (Debian Wheezy)] and it works fine. > > The postfix install uses a self signed ssl certifiacate. > > I am now trying to set up an ssl certifiacte from godaddy.com. > > I have not been able to find instructions or a howto on setting this up > correctly > > From goddady.com I ordered a certificate for an apache2 server. I did > not see any kind of selection for a postfix mail server. Did I order the > wrong type of certifiacate? > > What I got from godaddy was 2 files: "myservername.crt" and > "gd_bundle-g2-g1.crt". > > So where do I put these files and what do I have to tell postfix/courier > to find and use them? > > Thank you. > > -- > Patrick Goupell > > Are you free? Find out at http://www.sedm.org/ > Income taxes? Find out at http://www.whatistaxed.com > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From patrick at upmerchants.com Thu May 8 14:16:21 2014 From: patrick at upmerchants.com (Patrick Goupell) Date: Thu, 08 May 2014 14:16:21 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: References: <536B88B3.8030607@upmerchants.com> Message-ID: <536BC9F5.6000406@upmerchants.com> On 05/08/2014 01:41 PM, Dave Chiodo wrote: > Did you generate a CSR on your server and submit it to godaddy? > > An SSL cert is basically a public key thats been signed by the cert > authority - you should still have the "private" key somewhere (that > you keep secure and accessible only by your server) > > I couldnt tell you anything about postfix directly (never used it, I'm > an exim user), but you can always use openssl to handle it. It will > accept the "SSL" connection from a client, and then relay it locally > to the non-SSL service. > > Yes, I sent the CSR to godaddy.com. I got back the 2 files as I said. -- Patrick Goupell Are you free? Find out at http://www.sedm.org/ Income taxes? Find out at http://www.whatistaxed.com From godwin at grandrapids-lug.org Thu May 8 23:22:26 2014 From: godwin at grandrapids-lug.org (Godwin) Date: Thu, 8 May 2014 23:22:26 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: <536BC9F5.6000406@upmerchants.com> References: <536B88B3.8030607@upmerchants.com> <536BC9F5.6000406@upmerchants.com> Message-ID: Hi Patrick, Yes, Godaddy's certificate will work on Apache, Postfix, Cyrus IMAP (or anything else that requires a cert - I suspect). This site has quick reference to common OpenSSL command like generating a key, csr, cert, etc. http://www.sslshopper.com/article-most-common-openssl-commands.html To add your cert to Postfix, you'll need the key you generated (prior to the CSR you generated), and both the domain cert and CA cert you got from Godaddy. Here's how to use them in Postfix's "*main.cf *" file: smtp_use_tls = yes smtp_tls_note_starttls_offer = yes # The two lines above allows us to ask for TLS on connecting to other servers. smtpd_use_tls = yes smtpd_tls_auth_only = no # Use this to force TLS (problem is, then no TLS sessions will be rejected) #smtpd_tls_security_level = encrypt smtpd_tls_cert_file = /etc/postfix/ssl/yourdomain.com-cert.crt smtpd_tls_key_file = /etc/postfix/ssl/yourdomain.com.key smtpd_tls_CAfile = /etc/postfix/ssl/gd_bundle-g2-g1.crt smtpd_tls_loglevel = 3 smtpd_tls_received_header = yes smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for # information on enabling SSL in the smtp client. Others can scrutinize this, but that's the gist of if. cheers, Godwin On Thu, May 8, 2014 at 2:16 PM, Patrick Goupell wrote: > > On 05/08/2014 01:41 PM, Dave Chiodo wrote: > >> Did you generate a CSR on your server and submit it to godaddy? >> >> An SSL cert is basically a public key thats been signed by the cert >> authority - you should still have the "private" key somewhere (that you >> keep secure and accessible only by your server) >> >> I couldnt tell you anything about postfix directly (never used it, I'm an >> exim user), but you can always use openssl to handle it. It will accept the >> "SSL" connection from a client, and then relay it locally to the non-SSL >> service. >> >> >> > Yes, I sent the CSR to godaddy.com. I got back the 2 files as I said. > > > -- > Patrick Goupell > > Are you free? Find out at http://www.sedm.org/ > Income taxes? Find out at http://www.whatistaxed.com > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -- Ubber::Geek http://grlug.org/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From godwin at grandrapids-lug.org Thu May 8 23:30:22 2014 From: godwin at grandrapids-lug.org (Godwin) Date: Thu, 8 May 2014 23:30:22 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: References: <536B88B3.8030607@upmerchants.com> <536BC9F5.6000406@upmerchants.com> Message-ID: BTW, after restarting Postfix, test with... (I omitted stuff and put dots). You'll notice the STARTTLS message. You type the stuff in RED (the "ehlo" is not misspelled). you at yourmailsrvr:/etc/postfix/ssl$ telnet localhost 25 Trying ::1... Connected to localhost. Escape character is '^]'. 220 mail.herenotthere.com ESMTP ehlo yourdomain.com . . . *250-STARTTLS* . . . quit 221 2.0.0 Bye Connection closed by foreign host. you at yourmailsrvr:/etc/postfix/ssl$ On Thu, May 8, 2014 at 11:22 PM, Godwin wrote: > Hi Patrick, > > Yes, Godaddy's certificate will work on Apache, Postfix, Cyrus IMAP (or > anything else that requires a cert - I suspect). This site has quick > reference to common OpenSSL command like generating a key, csr, cert, etc. > > http://www.sslshopper.com/article-most-common-openssl-commands.html > > To add your cert to Postfix, you'll need the key you generated (prior to > the CSR you generated), and both the domain cert and CA cert you got from > Godaddy. Here's how to use them in Postfix's "*main.cf *" > file: > > smtp_use_tls = yes > smtp_tls_note_starttls_offer = yes > # The two lines above allows us to ask for TLS on connecting to other > servers. > smtpd_use_tls = yes > smtpd_tls_auth_only = no > # Use this to force TLS (problem is, then no TLS sessions will be rejected) > #smtpd_tls_security_level = encrypt > smtpd_tls_cert_file = /etc/postfix/ssl/yourdomain.com-cert.crt > smtpd_tls_key_file = /etc/postfix/ssl/yourdomain.com.key > smtpd_tls_CAfile = /etc/postfix/ssl/gd_bundle-g2-g1.crt > smtpd_tls_loglevel = 3 > smtpd_tls_received_header = yes > smtpd_tls_session_cache_timeout = 3600s > tls_random_source = dev:/dev/urandom > smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache > smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache > # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for > # information on enabling SSL in the smtp client. > > Others can scrutinize this, but that's the gist of if. > > cheers, > Godwin > > > > > On Thu, May 8, 2014 at 2:16 PM, Patrick Goupell wrote: > >> >> On 05/08/2014 01:41 PM, Dave Chiodo wrote: >> >>> Did you generate a CSR on your server and submit it to godaddy? >>> >>> An SSL cert is basically a public key thats been signed by the cert >>> authority - you should still have the "private" key somewhere (that you >>> keep secure and accessible only by your server) >>> >>> I couldnt tell you anything about postfix directly (never used it, I'm >>> an exim user), but you can always use openssl to handle it. It will accept >>> the "SSL" connection from a client, and then relay it locally to the >>> non-SSL service. >>> >>> >>> >> Yes, I sent the CSR to godaddy.com. I got back the 2 files as I said. >> >> >> -- >> Patrick Goupell >> >> Are you free? Find out at http://www.sedm.org/ >> Income taxes? Find out at http://www.whatistaxed.com >> >> _______________________________________________ >> grlug mailing list >> grlug at grlug.org >> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug >> > > > > -- > > Ubber::Geek > http://grlug.org/ > -- Ubber::Geek http://grlug.org/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From jdenick at rtl.org Fri May 9 09:53:23 2014 From: jdenick at rtl.org (Justin Denick) Date: Fri, 9 May 2014 09:53:23 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: References: <536B88B3.8030607@upmerchants.com> <536BC9F5.6000406@upmerchants.com> Message-ID: Just a quick note. LogLevel 3 is pretty verbose. It actually spits our keys at that level, so using LogLevel 1 is probably safer. LogLevel 0 should be used in production. I, uh, left it on Level 3 once and created a helluva huge log file. On May 8, 2014, at 11:30 PM, Godwin wrote: > BTW, after restarting Postfix, test with... (I omitted stuff and put dots). You'll notice the STARTTLS message. You type the stuff in RED (the "ehlo" is not misspelled). > > you at yourmailsrvr:/etc/postfix/ssl$ telnet localhost 25 > Trying ::1... > Connected to localhost. > Escape character is '^]'. > 220 mail.herenotthere.com ESMTP > ehlo yourdomain.com > . > . > . > 250-STARTTLS > . > . > . > quit > 221 2.0.0 Bye > Connection closed by foreign host. > you at yourmailsrvr:/etc/postfix/ssl$ > > > > On Thu, May 8, 2014 at 11:22 PM, Godwin wrote: > Hi Patrick, > > Yes, Godaddy's certificate will work on Apache, Postfix, Cyrus IMAP (or anything else that requires a cert - I suspect). This site has quick reference to common OpenSSL command like generating a key, csr, cert, etc. > > http://www.sslshopper.com/article-most-common-openssl-commands.html > > To add your cert to Postfix, you'll need the key you generated (prior to the CSR you generated), and both the domain cert and CA cert you got from Godaddy. Here's how to use them in Postfix's "main.cf" file: > > smtp_use_tls = yes > smtp_tls_note_starttls_offer = yes > # The two lines above allows us to ask for TLS on connecting to other servers. > smtpd_use_tls = yes > smtpd_tls_auth_only = no > # Use this to force TLS (problem is, then no TLS sessions will be rejected) > #smtpd_tls_security_level = encrypt > smtpd_tls_cert_file = /etc/postfix/ssl/yourdomain.com-cert.crt > smtpd_tls_key_file = /etc/postfix/ssl/yourdomain.com.key > smtpd_tls_CAfile = /etc/postfix/ssl/gd_bundle-g2-g1.crt > smtpd_tls_loglevel = 3 > smtpd_tls_received_header = yes > smtpd_tls_session_cache_timeout = 3600s > tls_random_source = dev:/dev/urandom > smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache > smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache > # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for > # information on enabling SSL in the smtp client. > > Others can scrutinize this, but that's the gist of if. > > cheers, > Godwin > > > > > On Thu, May 8, 2014 at 2:16 PM, Patrick Goupell wrote: > > On 05/08/2014 01:41 PM, Dave Chiodo wrote: > Did you generate a CSR on your server and submit it to godaddy? > > An SSL cert is basically a public key thats been signed by the cert authority - you should still have the "private" key somewhere (that you keep secure and accessible only by your server) > > I couldnt tell you anything about postfix directly (never used it, I'm an exim user), but you can always use openssl to handle it. It will accept the "SSL" connection from a client, and then relay it locally to the non-SSL service. > > > > Yes, I sent the CSR to godaddy.com. I got back the 2 files as I said. > > > -- > Patrick Goupell > > Are you free? Find out at http://www.sedm.org/ > Income taxes? Find out at http://www.whatistaxed.com > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > > > > -- > > Ubber::Geek > http://grlug.org/ > > > > -- > > Ubber::Geek > http://grlug.org/ > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug -------------- next part -------------- An HTML attachment was scrubbed... URL: From patrick at upmerchants.com Sat May 10 11:29:50 2014 From: patrick at upmerchants.com (Patrick Goupell) Date: Sat, 10 May 2014 11:29:50 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: References: <536B88B3.8030607@upmerchants.com> <536BC9F5.6000406@upmerchants.com> Message-ID: <536E45EE.6070907@upmerchants.com> On 05/08/2014 11:22 PM, Godwin wrote: > Hi Patrick, > > Yes, Godaddy's certificate will work on Apache, Postfix, Cyrus IMAP > (or anything else that requires a cert - I suspect). This site has > quick reference to common OpenSSL command like generating a key, csr, > cert, etc. > > http://www.sslshopper.com/article-most-common-openssl-commands.html > > To add your cert to Postfix, you'll need the key you generated (prior > to the CSR you generated), and both the domain cert and CA cert you > got from Godaddy. Here's how to use them in Postfix's "*main.cf > *" file: > > smtp_use_tls = yes > smtp_tls_note_starttls_offer = yes > # The two lines above allows us to ask for TLS on connecting to other > servers. > smtpd_use_tls = yes > smtpd_tls_auth_only = no > # Use this to force TLS (problem is, then no TLS sessions will be > rejected) > #smtpd_tls_security_level = encrypt > smtpd_tls_cert_file = /etc/postfix/ssl/yourdomain.com-cert.crt > smtpd_tls_key_file = /etc/postfix/ssl/yourdomain.com.key > smtpd_tls_CAfile = /etc/postfix/ssl/gd_bundle-g2-g1.crt > smtpd_tls_loglevel = 3 > smtpd_tls_received_header = yes > smtpd_tls_session_cache_timeout = 3600s > tls_random_source = dev:/dev/urandom > smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache > smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache > # See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for > # information on enabling SSL in the smtp client. > > Others can scrutinize this, but that's the gist of if. > > cheers, > Godwin > > Thank you for the help. I have made the changes as noted and the "telnet" test show tls starting. I can access the email account using thunderbird on port 110, pop3. Now I am trying to set up thunderbird to use port 995, pop3 / ssl / tls I have courier on the mail server. When I try to connect with thunderbird I get the following error on the mail server: pop3d-ssl: couriertls: /etc/courier/pop3d.pem: error:0906D06C:PEM routines:PEM_read_bio:no start line Doing web searches I find references to .pem and .der certifiacates. I did a openssl x509 -in mycertifiacte.crt -text -noout and it shows the certificate text without error. So what do I do now? Patrick __ -------------- next part -------------- An HTML attachment was scrubbed... URL: From patrick at upmerchants.com Sat May 10 11:35:52 2014 From: patrick at upmerchants.com (Patrick Goupell) Date: Sat, 10 May 2014 11:35:52 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: <536E45EE.6070907@upmerchants.com> References: <536B88B3.8030607@upmerchants.com> <536BC9F5.6000406@upmerchants.com> <536E45EE.6070907@upmerchants.com> Message-ID: <536E4758.5010600@upmerchants.com> On 05/10/2014 11:29 AM, Patrick Goupell wrote: > > Thank you for the help. I have made the changes as noted and the > "telnet" test show tls starting. > > I can access the email account using thunderbird on port 110, pop3. > > Now I am trying to set up thunderbird to use port 995, pop3 / ssl / tls > > I have courier on the mail server. > > When I try to connect with thunderbird I get the following error on > the mail server: > > pop3d-ssl: couriertls: /etc/courier/pop3d.pem: error:0906D06C:PEM > routines:PEM_read_bio:no start line > > Doing web searches I find references to .pem and .der certifiacates. > > I did a openssl x509 -in mycertifiacte.crt -text -noout and it shows > the certificate text without error. > > So what do I do now? > > Patrick > I should have noted that I did a symlink ln -s /path/to/mycertificacte.crt /etc/courier/pop3d.pem Patrick -------------- next part -------------- An HTML attachment was scrubbed... URL: From andy at childrenofmay.org Sat May 10 14:42:31 2014 From: andy at childrenofmay.org (Andrew Cady) Date: Sat, 10 May 2014 14:42:31 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: <536E4758.5010600@upmerchants.com> References: <536B88B3.8030607@upmerchants.com> <536BC9F5.6000406@upmerchants.com> <536E45EE.6070907@upmerchants.com> <536E4758.5010600@upmerchants.com> Message-ID: <20140510184231.GF23438@jerkface.net> On Sat, May 10, 2014 at 11:35:52AM -0400, Patrick Goupell wrote: > I did a openssl x509 -in mycertifiacte.crt -text -noout and it > shows the certificate text without error. > I should have noted that I did a symlink ln -s > /path/to/mycertificacte.crt /etc/courier/pop3d.pem That confirms that the certificate is there. But it does not confirm that the private key is there. You need both. My guess is that the private key is not there. You can confirm it like so: $ openssl rsa -in /etc/courier/pop3d.pem ...assuming it's an RSA key. Or just a basic sanity check: $ grep PRIVATE /etc/courier/pop3d.pem -----BEGIN PRIVATE KEY----- -----END PRIVATE KEY----- If you don't see those two lines there, the solution is: $ cat the-private-key.pem >> /etc/courier/pop3d.pem From patrick at upmerchants.com Sat May 10 18:47:46 2014 From: patrick at upmerchants.com (Patrick Goupell) Date: Sat, 10 May 2014 18:47:46 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: <20140510184231.GF23438@jerkface.net> References: <536B88B3.8030607@upmerchants.com> <536BC9F5.6000406@upmerchants.com> <536E45EE.6070907@upmerchants.com> <536E4758.5010600@upmerchants.com> <20140510184231.GF23438@jerkface.net> Message-ID: <536EAC92.9010502@upmerchants.com> On 05/10/2014 02:42 PM, Andrew Cady wrote: > > That confirms that the certificate is there. But it does not confirm > that the private key is there. You need both. > > My guess is that the private key is not there. You can confirm it like > so: > > $ openssl rsa -in /etc/courier/pop3d.pem > > ...assuming it's an RSA key. > > Or just a basic sanity check: > > $ grep PRIVATE /etc/courier/pop3d.pem > -----BEGIN PRIVATE KEY----- > -----END PRIVATE KEY----- > > If you don't see those two lines there, the solution is: > > $ cat the-private-key.pem >> /etc/courier/pop3d.pem > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > > Making some progress. I did the cat the-private-key.pem >> etc/courier/pop3d.pem. Now when thunderbird tries to connect via port 995 the mail server now gives this error: mail pop3d-ssl: couriertls: /etc/courier/pop3d.pem: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch I tried searching the net but did not find anything that told me what key values might be missmatched. I was thinking maybe just regenerate the server private/public key pair and resubmit the csr. Any other suggestions? FYI, I am up in Presque Isle county all by myself so this is a learn as I go process. I also follow the greater lansing lug mailing list. Thank you. Patrick From andy at childrenofmay.org Sat May 10 19:40:44 2014 From: andy at childrenofmay.org (Andrew Cady) Date: Sat, 10 May 2014 19:40:44 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: <536EAC92.9010502@upmerchants.com> References: <536B88B3.8030607@upmerchants.com> <536BC9F5.6000406@upmerchants.com> <536E45EE.6070907@upmerchants.com> <536E4758.5010600@upmerchants.com> <20140510184231.GF23438@jerkface.net> <536EAC92.9010502@upmerchants.com> Message-ID: <20140510234044.GA23362@jerkface.net> On Sat, May 10, 2014 at 06:47:46PM -0400, Patrick Goupell wrote: > Making some progress. > > I did the cat the-private-key.pem >> etc/courier/pop3d.pem. > > Now when thunderbird tries to connect via port 995 the mail server now > gives this error: > > mail pop3d-ssl: couriertls: /etc/courier/pop3d.pem: > error:0B080074:x509 certificate routines:X509_check_private_key:key > values mismatch > > I tried searching the net but did not find anything that told me what > key values might be missmatched. I think it has to mean that the private key that you put into the file is not the same as the private key that generated the CSR (which corresponds to the public key signed by the CA). > I was thinking maybe just regenerate the server private/public key > pair and resubmit the csr. Any other suggestions? My guess is that that will fix it. From patrick at upmerchants.com Sun May 11 08:44:40 2014 From: patrick at upmerchants.com (Patrick Goupell) Date: Sun, 11 May 2014 08:44:40 -0400 Subject: [GRLUG] Postfix server setup In-Reply-To: <20140510234044.GA23362@jerkface.net> References: <536B88B3.8030607@upmerchants.com> <536BC9F5.6000406@upmerchants.com> <536E45EE.6070907@upmerchants.com> <536E4758.5010600@upmerchants.com> <20140510184231.GF23438@jerkface.net> <536EAC92.9010502@upmerchants.com> <20140510234044.GA23362@jerkface.net> Message-ID: <536F70B8.10901@upmerchants.com> On 05/10/2014 07:40 PM, Andrew Cady wrote: >> I was thinking maybe just regenerate the server private/public key >> pair and resubmit the csr. Any other suggestions? > My guess is that that will fix it. > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > > I got the reissued godaddy certificate installed and now thunderbird and the mail server are both working well together. Thank you for your help. Patrick From lvl at omnitec.net Sun May 11 16:22:42 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Sun, 11 May 2014 15:22:42 -0500 (CDT) Subject: [GRLUG] Debian "AutoYAST" Message-ID: In the SuSE world, the installer (YAST) can be automated by a script (AutoYAST), allowing for automated system installation packages, configuration settings, ... Is there an equivalent in the Debian world? Lee From patrick at upmerchants.com Sun May 11 17:15:46 2014 From: patrick at upmerchants.com (Patrick Goupell) Date: Sun, 11 May 2014 17:15:46 -0400 Subject: [GRLUG] Debian "AutoYAST" In-Reply-To: References: Message-ID: <536FE882.8040404@upmerchants.com> On 05/11/2014 04:22 PM, L. V. Lammert wrote: > In the SuSE world, the installer (YAST) can be automated by a script > (AutoYAST), allowing for automated system installation packages, > configuration settings, ... > > Is there an equivalent in the Debian world? > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > > I don't know about debian itself, but there is something called "Fully Automatic Installation" at http://fai-project.org/ From greg at gregfolkert.net Sun May 11 17:26:17 2014 From: greg at gregfolkert.net (Greg Folkert) Date: Sun, 11 May 2014 17:26:17 -0400 Subject: [GRLUG] Debian "AutoYAST" In-Reply-To: References: Message-ID: <1399843577.24618.2.camel@omg.gregfolkert.net> On Sun, 2014-05-11 at 15:22 -0500, L. V. Lammert wrote: > In the SuSE world, the installer (YAST) can be automated by a script > (AutoYAST), allowing for automated system installation packages, > configuration settings, ... > > Is there an equivalent in the Debian world? Please investigate these packages... just to name a few: unattended-upgrades - automatic installation of security upgrades auto-apt - package search by file and on-demand package installation tool aptitude-robot - Automate package choice management -- Greg Folkert From darrel at darrelclute.net Sun May 11 18:06:28 2014 From: darrel at darrelclute.net (Clute, Darrel) Date: Sun, 11 May 2014 16:06:28 -0600 Subject: [GRLUG] Debian "AutoYAST" In-Reply-To: <1399843577.24618.2.camel@omg.gregfolkert.net> References: <1399843577.24618.2.camel@omg.gregfolkert.net> Message-ID: Debian uses preseed as the analog of autoyast, kickstart, JumpStart, etc. Sincerely, Darrel Clute On May 11, 2014 3:26 PM, "Greg Folkert" wrote: > On Sun, 2014-05-11 at 15:22 -0500, L. V. Lammert wrote: > > In the SuSE world, the installer (YAST) can be automated by a script > > (AutoYAST), allowing for automated system installation packages, > > configuration settings, ... > > > > Is there an equivalent in the Debian world? > > Please investigate these packages... just to name a few: > > unattended-upgrades - automatic installation of security upgrades > > auto-apt - package search by file and on-demand package installation tool > > aptitude-robot - Automate package choice management > > -- > Greg Folkert > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From greg at gregfolkert.net Sun May 11 22:30:19 2014 From: greg at gregfolkert.net (Greg Folkert) Date: Sun, 11 May 2014 22:30:19 -0400 Subject: [GRLUG] Debian "AutoYAST" In-Reply-To: References: <1399843577.24618.2.camel@omg.gregfolkert.net> Message-ID: <1399861819.24618.7.camel@omg.gregfolkert.net> Gah, Misunderstood what he was asking. Automated installs... Darrel has you covered. On Sun, 2014-05-11 at 16:06 -0600, Clute, Darrel wrote: > Debian uses preseed as the analog of autoyast, kickstart, JumpStart, > etc. > > Sincerely, > > > Darrel Clute > > On May 11, 2014 3:26 PM, "Greg Folkert" wrote: > On Sun, 2014-05-11 at 15:22 -0500, L. V. Lammert wrote: > > In the SuSE world, the installer (YAST) can be automated by > a script > > (AutoYAST), allowing for automated system installation > packages, > > configuration settings, ... > > > > Is there an equivalent in the Debian world? > > Please investigate these packages... just to name a few: > > unattended-upgrades - automatic installation of security > upgrades > > auto-apt - package search by file and on-demand package > installation tool > > aptitude-robot - Automate package choice management > > -- > Greg Folkert > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug -- greg at gregfolkert.net PGP key 1024D/B524687C 2003-08-05 Fingerprint: E1D3 E3D7 5850 957E FED0 2B3A ED66 6971 B524 687C "The love of a mother is the veil of a softer light between the heart and the heavenly Father." -- Samuel Taylor Coleridge -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: This is a digitally signed message part URL: From lvl at omnitec.net Sun May 11 22:40:52 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Sun, 11 May 2014 21:40:52 -0500 (CDT) Subject: [GRLUG] Debian "AutoYAST" In-Reply-To: References: <1399843577.24618.2.camel@omg.gregfolkert.net> Message-ID: On Sun, 11 May 2014, Clute, Darrel wrote: > Debian uses preseed as the analog of autoyast, kickstart, JumpStart, etc. > Bingo - thanks!! Thanks also for the other suggestions, ... this is a great crowd! Lee From mikemol at gmail.com Wed May 14 15:25:01 2014 From: mikemol at gmail.com (Michael Mol) Date: Wed, 14 May 2014 15:25:01 -0400 Subject: [GRLUG] GRLUG Friday after Five Message-ID: We here at Virtual Interconnect are hosting the Grand Rapids Linux User's Group for weekly socials. Kyle and myself will serve as anchors; at least one of us will be here during the event. You have no obligation to show up. If you show up, there's no obligation to show up again. There's no obligation to show up for the entire time. (It seems weird that I have to say this this way, but it's always been a recurring set of questions, so...) Time: 5PM-7PM Fridays, every week Location: 315 Richard Terrace, Grand Rapids MI 49506 (Not handicapped-accessible, sorry.) Google Street View: http://goo.gl/maps/CDOzO Parking: Parking lot on the south side of the building. Food: Popcorn and water are free. Anything else is BYOB (No alcohol), although something else may be arranged for in the future. Bus routes: The #6 runs right in front of us, the #5 and #19 come close. Nearest stops: http://bit.ly/QyS7RY Entry: The door is always locked, unless it's propped open. Ring the doorbell if it's shut. Loitering: When Kyle and I have to go, we have to go. There are restaurants, cafes and bookstores all around, though. -- :wq From mikemol at gmail.com Tue May 20 10:03:28 2014 From: mikemol at gmail.com (Michael Mol) Date: Tue, 20 May 2014 10:03:28 -0400 Subject: [GRLUG] Friday after Five Message-ID: We here at Virtual Interconnect are hosting the Grand Rapids Linux User's Group for weekly socials. Kyle and myself serve as anchors; at least one of us will be here during the event. Time: 5PM-7PM Fridays, every week Location: 315 Richard Terrace, Grand Rapids MI 49506 (Not handicapped-accessible, sorry.) Google Street View: http://goo.gl/maps/CDOzO Commute: Parking is on the south side of the building, and The #6 bus route runs right in front of us, the #5 and #19 come close. Nearest stops: http://bit.ly/QyS7RY Food: Popcorn and water are free. Anything else is BYOB (No alcohol), although something else may be arranged for in the future. Entry: The door is always locked, unless it's propped open. Ring the doorbell if it's shut. Loitering: When Kyle and I have to go, we have to go. There are restaurants, cafes and bookstores all around, though. -- :wq From mikemol at gmail.com Tue May 20 13:09:23 2014 From: mikemol at gmail.com (Michael Mol) Date: Tue, 20 May 2014 13:09:23 -0400 Subject: [GRLUG] Anyone want a couple dozen old Linux Journal issues? Message-ID: I'd been keeping them as nostalgia/keepsakes, but, well, spring cleaning. Free to whoever wants them.... -- :wq From desertfrag at yahoo.com Tue May 20 13:31:46 2014 From: desertfrag at yahoo.com (desert frag) Date: Tue, 20 May 2014 10:31:46 -0700 (PDT) Subject: [GRLUG] Anyone want a couple dozen old Linux Journal issues? In-Reply-To: References: Message-ID: <1400607106.2242.YahooMailNeo@web163203.mail.gq1.yahoo.com> Speaking of linux issues, check out the ones PCLinuxOS does. ?They do a great job. On Tuesday, May 20, 2014 1:09 PM, Michael Mol wrote: I'd been keeping them as nostalgia/keepsakes, but, well, spring cleaning. Free to whoever wants them.... -- :wq _______________________________________________ grlug mailing list grlug at grlug.org http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug -------------- next part -------------- An HTML attachment was scrubbed... URL: From john at wesorick.com Thu May 22 15:37:50 2014 From: john at wesorick.com (John Wesorick) Date: Thu, 22 May 2014 15:37:50 -0400 Subject: [GRLUG] Sharing Samba 3 Shares via Samba 4 Message-ID: Okay, so here's a rather odd question. Does anyone have any idea how to share Samba 3 shares with Samba 4 for shares w/o security? I'm doing a migration from Samba3 /w OpenLDAP to straight up Samba4 running on a different server. I want to do a steady migration of users/servers from Samba3/OpenLDAP to Samba4. I was planning on mounting all of the Samba3 shares with a sort of file share super user who belongs to every group that is used for file share security on my Samba4 server and then setting up the mounts as shares on the Samba4 server. This is working well for all of my group-based file shares, but I have one share that is kind of a free-for-all and doesn't have any security. This free-for-all share shows up fine on the Samba4 server, and I can browse it and modify/delete files normally when I am on the actual server, but when I try to mount the Samba4 share from another PC the permissions are all set to the same thing (755) and I can't see anything in any folders. Does anyone have any idea why this isn't working? Samba3 smb.conf: [data] > comment = Data Drive > path = /srv/data > public = yes > writable = yes > create mask = 0660 > directory mask = 0770 > guest ok = yes > force user = localadmin > force group = localadmin > force create mode = 0660 > force directory mode = 0770 Samba4 smb.conf: [data] > comment = Data Drive > path = /srv/files/data > public = yes > writable = yes > create mask = 0660 > directory mask = 0770 > guest ok = yes > force user = migrator > force group = migrator > force create mode = 0660 > force directory mode = 0770 Samba4 fstab: //samba3/data /srv/files/data cifs > username=migrator,password=MyPass,_netdev 0 0 I've tried commenting out most options on Samba4 smb.conf to no avail and just using guest for the mount in fstab, but nothing i do seems to make a difference. I've also tried forcing localadmin on Samba4. -------------- next part -------------- An HTML attachment was scrubbed... URL: From john at wesorick.com Thu May 22 16:12:36 2014 From: john at wesorick.com (John Wesorick) Date: Thu, 22 May 2014 16:12:36 -0400 Subject: [GRLUG] Sharing Samba 3 Shares via Samba 4 In-Reply-To: References: Message-ID: Nevermind. If I add others read/write on the Samba3 filesystem it works fine. I'll just do that and remove it when I'm done. On Thu, May 22, 2014 at 3:37 PM, John Wesorick wrote: > Okay, so here's a rather odd question. Does anyone have any idea how to > share Samba 3 shares with Samba 4 for shares w/o security? I'm doing a > migration from Samba3 /w OpenLDAP to straight up Samba4 running on a > different server. I want to do a steady migration of users/servers from > Samba3/OpenLDAP to Samba4. I was planning on mounting all of the Samba3 > shares with a sort of file share super user who belongs to every group that > is used for file share security on my Samba4 server and then setting up the > mounts as shares on the Samba4 server. This is working well for all of my > group-based file shares, but I have one share that is kind of a > free-for-all and doesn't have any security. > > This free-for-all share shows up fine on the Samba4 server, and I can > browse it and modify/delete files normally when I am on the actual server, > but when I try to mount the Samba4 share from another PC the permissions > are all set to the same thing (755) and I can't see anything in any folders. > > Does anyone have any idea why this isn't working? > > Samba3 smb.conf: > > [data] >> comment = Data Drive >> path = /srv/data >> public = yes >> writable = yes >> create mask = 0660 >> directory mask = 0770 >> guest ok = yes >> force user = localadmin >> force group = localadmin >> force create mode = 0660 >> force directory mode = 0770 > > > Samba4 smb.conf: > > [data] >> comment = Data Drive >> path = /srv/files/data >> public = yes >> writable = yes >> create mask = 0660 >> directory mask = 0770 >> guest ok = yes >> force user = migrator >> force group = migrator >> force create mode = 0660 >> force directory mode = 0770 > > > Samba4 fstab: > > //samba3/data /srv/files/data cifs >> username=migrator,password=MyPass,_netdev 0 0 > > > I've tried commenting out most options on Samba4 smb.conf to no avail and > just using guest for the mount in fstab, but nothing i do seems to make a > difference. I've also tried forcing localadmin on Samba4. > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Thu May 29 15:06:20 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Thu, 29 May 2014 14:06:20 -0500 (CDT) Subject: [GRLUG] MySQL restore Message-ID: Restoring a MySQL database, .. but it borked - apparently there are version changes that prevent restoring from a total backup. I have restored the individual DBs involved, but I do not see a simple way to dump/restore *just* users permissions, as restoring the system DB hoses the system. Is there a simple way to dump & load user permissions? Cannot seem to find anythng searching. TIA! Lee From mfarver at mindbent.org Thu May 29 15:40:56 2014 From: mfarver at mindbent.org (Mark Farver) Date: Thu, 29 May 2014 15:40:56 -0400 Subject: [GRLUG] MySQL restore In-Reply-To: References: Message-ID: http://serverfault.com/questions/8860/how-can-i-export-the-privileges-from-mysql-and-then-import-to-a-new-server On May 29, 2014 3:06 PM, "L. V. Lammert" wrote: > Restoring a MySQL database, .. but it borked - apparently there are > version changes that prevent restoring from a total backup. > > I have restored the individual DBs involved, but I do not see a simple way > to dump/restore *just* users permissions, as restoring the system DB hoses > the system. Is there a simple way to dump & load user permissions? Cannot > seem to find anythng searching. > > TIA! > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Thu May 29 16:39:12 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Thu, 29 May 2014 15:39:12 -0500 (CDT) Subject: [GRLUG] MySQL restore In-Reply-To: References: Message-ID: On Thu, 29 May 2014, Mark Farver wrote: > http://serverfault.com/questions/8860/how-can-i-export-the-privileges-from-mysql-and-then-import-to-a-new-server > Interesting, .. thanks!! Lee From kyle at virtualinterconnect.com Thu May 29 17:04:37 2014 From: kyle at virtualinterconnect.com (Kyle Maas) Date: Thu, 29 May 2014 17:04:37 -0400 Subject: [GRLUG] Friday after Five Message-ID: <5387A0E5.8070008@virtualinterconnect.com> We here at Virtual Interconnect are hosting the Grand Rapids Linux User's Group for weekly socials. Mike and myself serve as anchors; at least one of us will be here during the event. Time: 5PM-7PM Fridays, every week Location: 315 Richard Terrace, Grand Rapids MI 49506 (Not handicapped-accessible, sorry.) Google Street View: http://goo.gl/maps/CDOzO Commute: Parking is on the south side of the building, and The #6 bus route runs right in front of us, the #5 and #19 come close. Nearest stops: http://bit.ly/QyS7RY Food: Popcorn and water are free. Anything else is BYOB (No alcohol), although something else may be arranged for in the future. Entry: The door is always locked, unless it's propped open. Ring the doorbell if it's shut. Loitering: When Mike and I have to go, we have to go. There are restaurants, cafes and bookstores all around, though. From lvl at omnitec.net Fri May 30 15:55:36 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Fri, 30 May 2014 14:55:36 -0500 (CDT) Subject: [GRLUG] Project Message-ID: Has anyone ever tried to port a straight C program to Linux? There apears to be a book in 1995, .. Main issues would be: * UI - the old system has an ANSI graphic UI * MT - it used ctask for multi-tasking * SER - it used two or three serial ports The main reason is that it is almost possible to create a MSC-6 environment to compile now, and I just realized that my machine from 20 years ago I have been keeping on the shelf for this eventuality is dead. TIA! Lee From awilliam at whitemice.org Fri May 30 17:05:06 2014 From: awilliam at whitemice.org (Adam Tauno Williams) Date: Fri, 30 May 2014 17:05:06 -0400 Subject: [GRLUG] Project In-Reply-To: References: Message-ID: <1401483906.3370.2.camel@linux-86wr.site> On Fri, 2014-05-30 at 14:55 -0500, L. V. Lammert wrote: > Has anyone ever tried to port a straight C program to Linux? A C application from MS-DOS or from UNIX. If from UNIX it may very well "just work", depending on a lot of things. > There apears > to be a book in 1995, .. > Main issues would be: > * UI - the old system has an ANSI graphic UI On UNIX this may mean "curses", which should work on LINUX without fuss. Curses is awesome. If this is an M$-DOS app.... forget about it. > * MT - it used ctask for multi-tasking No clue what you mean. > * SER - it used two or three serial ports Again, if coming from UNIX there is probably not much of an issue unless the app tries to do some funky flow control. > The main reason is that it is almost possible to create a MSC-6 > environment to compile now, and I just realized that my machine from 20 > years ago I have been keeping on the shelf for this eventuality is dead. By MSC do you mean Microsoft Quick C? -- Adam Tauno Williams GPG D95ED383 Systems Administrator, Python Developer, LPI / NCLA From mfarver at mindbent.org Fri May 30 17:58:30 2014 From: mfarver at mindbent.org (Mark Farver) Date: Fri, 30 May 2014 17:58:30 -0400 Subject: [GRLUG] Project In-Reply-To: References: Message-ID: Why not build a DOS 6 machine using OpenDOS... then you can use the same environment? You may even be able to run the DOS machine in a VM. I think some of the VM host environments allow emulated serial port access. On Fri, May 30, 2014 at 3:55 PM, L. V. Lammert wrote: > Has anyone ever tried to port a straight C program to Linux? There apears > to be a book in 1995, .. > > Main issues would be: > > * UI - the old system has an ANSI graphic UI > * MT - it used ctask for multi-tasking > * SER - it used two or three serial ports > > The main reason is that it is almost possible to create a MSC-6 > environment to compile now, and I just realized that my machine from 20 > years ago I have been keeping on the shelf for this eventuality is dead. > > TIA! > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From lvl at omnitec.net Fri May 30 18:03:20 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Fri, 30 May 2014 17:03:20 -0500 (CDT) Subject: [GRLUG] Project In-Reply-To: References: Message-ID: On Fri, 30 May 2014, Mark Farver wrote: > Why not build a DOS 6 machine using OpenDOS... then you can use the > same environment? > > You may even be able to run the DOS machine in a VM. I think some of > the VM host environments allow emulated serial port access. > I have a FreeDOS VM, .. but the bigger problem is maintaining the system with tools that are 20 years old. The multi-tasking was an issue to start with (many things just didn't work right), so if they want to improve the system, I would like to offer migrating to a much more stable and supportable environment. Thanks! Lee From megadave at gmail.com Fri May 30 18:35:50 2014 From: megadave at gmail.com (Dave Chiodo) Date: Fri, 30 May 2014 18:35:50 -0400 Subject: [GRLUG] Project In-Reply-To: References: Message-ID: I'll ask a question I've noticed no one has asked - what is this system what does it do? Could it be rewritten using something newer, using the existing code as a roadmap? On Fri, May 30, 2014 at 6:03 PM, L. V. Lammert wrote: > On Fri, 30 May 2014, Mark Farver wrote: > > > Why not build a DOS 6 machine using OpenDOS... then you can use the > > same environment? > > > > You may even be able to run the DOS machine in a VM. I think some of > > the VM host environments allow emulated serial port access. > > > I have a FreeDOS VM, .. but the bigger problem is maintaining the system > with tools that are 20 years old. The multi-tasking was an issue to start > with (many things just didn't work right), so if they want to improve the > system, I would like to offer migrating to a much more stable and > supportable environment. > > Thanks! > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From patrick at upmerchants.com Fri May 30 19:57:13 2014 From: patrick at upmerchants.com (Patrick Goupell) Date: Fri, 30 May 2014 19:57:13 -0400 Subject: [GRLUG] Project In-Reply-To: References: Message-ID: <53891AD9.1080400@upmerchants.com> +1, What is thiis system you have? On 05/30/2014 06:35 PM, Dave Chiodo wrote: > I'll ask a question I've noticed no one has asked - what is this > system what does it do? Could it be rewritten using something newer, > using the existing code as a roadmap? > > > On Fri, May 30, 2014 at 6:03 PM, L. V. Lammert > wrote: > > On Fri, 30 May 2014, Mark Farver wrote: > > > Why not build a DOS 6 machine using OpenDOS... then you can use the > > same environment? > > > > You may even be able to run the DOS machine in a VM. I think > some of > > the VM host environments allow emulated serial port access. > > > I have a FreeDOS VM, .. but the bigger problem is maintaining the > system > with tools that are 20 years old. The multi-tasking was an issue > to start > with (many things just didn't work right), so if they want to > improve the > system, I would like to offer migrating to a much more stable and > supportable environment. > > Thanks! > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > > > > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug -- Patrick Goupell Are you free? Find out at http://www.sedm.org/ Income taxes? Find out at http://www.whatistaxed.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From andross at gmail.com Sat May 31 12:15:32 2014 From: andross at gmail.com (andross at gmail.com) Date: Sat, 31 May 2014 12:15:32 -0400 Subject: [GRLUG] Project In-Reply-To: References: Message-ID: On Fri, May 30, 2014 at 3:55 PM, L. V. Lammert wrote: > Has anyone ever tried to port a straight C program to Linux? There apears > to be a book in 1995, .. > > Main issues would be: > > * UI - the old system has an ANSI graphic UI > There's no ANSI standard graphics library. I assume you meant a ASCII UI, but you might also mean one of the early graphics libraries provided by compilers, like the Borland Graphics Interface (graphics.h in Turbo C). If it's ASCII graphics, the ncurses library will do what you want. If it's polygon graphics, SDL will work fine (also great for handling user input). * MT - it used ctask for multi-tasking > You'd probably have to ditch that and use something more modern like pthreads (All hail RMS, deliverer of POSIX). > * SER - it used two or three serial ports > Again, POSIX saves the day. Opening a serial port using C on a GNU/Linux environment is criminally simple. We're talking `int fd = open("/dev/ttyS0", O_RDWR | O_NOCTTY | O_NDELAY);` simple. The main reason is that it is almost possible to create a MSC-6 > environment to compile now, and I just realized that my machine from 20 > years ago I have been keeping on the shelf for this eventuality is dead. > > TIA! > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Sat May 31 15:33:05 2014 From: lvl at omnitec.net (L. V. Lammert) Date: Sat, 31 May 2014 14:33:05 -0500 (CDT) Subject: [GRLUG] Project In-Reply-To: <53891AD9.1080400@upmerchants.com> References: <53891AD9.1080400@upmerchants.com> Message-ID: On Fri, 30 May 2014, Patrick Goupell wrote: > +1, What is thiis system you have? > It's an inkjet controller system, .. pretty hard to justify a rewrite, though we have done that with a different version. In this case the UI (ANSI graphic, similar t the look of nCurses, but in DOS) is the most complicated part. Lee