Language:
switch to room list switch to menu My folders
Go to page: [1] 2 3 4 5 ... Last
↑↑↑ Old messages ↑↑↑            ↓↓↓ New messages ↓↓↓
[#] Mon Sep 23 2013 09:56:07 EDT from Devdom @ Uncensored

Subject: Webcit on https

[Reply] [ReplyQuoted] [Headers] [Print]

Hi all, im new here so please bare with me if i ask stupid questions..:)

I have a running Citadel installation, everything work fine but now i would like to enable SSL on WebCit, and SSL/TLS on Citadel, I created a CSR file and received my certificates, replaced all files in the keys directory for Citadel and WebCit, when i load the page it shows my certificate in the address bar, but the page shows "Not Found" and will not load. when i change the url to HTTP there is no problem.

I am not running an Apache2 on this box, so it is using the internal Citadel/WebCit service, i reconfigured WebCit several times to no avail.

Can anyone please point me in the right direction to solve this issue?

Thanks in Advance,

Marcel

 



[#] Mon Sep 23 2013 16:37:31 EDT from Devdom @ Uncensored

Subject: Re: Webcit on https

[Reply] [ReplyQuoted] [Headers] [Print]

Some more info:

I installed a new VM with Ubuntu 12.04.03-desktop 64, installed Citadel and WebCit, no changes to the config, clean virgin install, tried opening https://127.0.0.1 and after accepting the certificate security exception, i get the exact same page stating "not found"

i start to believe this is a bug and not a configuration error.



[#] Mon Sep 23 2013 17:53:34 EDT from Devdom @ Uncensored

Subject: Re: Webcit on https

[Reply] [ReplyQuoted] [Headers] [Print]

 

Mon Sep 23 2013 09:56:07 EDT from Devdom @ Uncensored Subject: Webcit on https

Hi all, im new here so please bare with me if i ask stupid questions..:)

I have a running Citadel installation, everything work fine but now i would like to enable SSL on WebCit, and SSL/TLS on Citadel, I created a CSR file and received my certificates, replaced all files in the keys directory for Citadel and WebCit, when i load the page it shows my certificate in the address bar, but the page shows "Not Found" and will not load. when i change the url to HTTP there is no problem.

I am not running an Apache2 on this box, so it is using the internal Citadel/WebCit service, i reconfigured WebCit several times to no avail.

Can anyone please point me in the right direction to solve this issue?

Thanks in Advance,

Marcel

 



Well this is embarrassing, turns out that IExplorer 9 loads the WebCit page just fine on https, frell me dead, looks like this whole problem is a firefox issue, and i have to move my request to the firefox support crew.

 

Well thanks anyways,

Marcel



[#] Mon Sep 23 2013 21:49:55 EDT from New Citadel Using Guy @ Uncensored

Subject: Troubleshooting New Installation

[Reply] [ReplyQuoted] [Headers] [Print]

Hopefully this is a simple question for somebody, but all my searches so far have failed to find me an answer.

I've done a fresh install of Citadel on an Ubuntu 11.04 server. It's a pretty standard install, just your basic "apt-get install citadel-suite" and accept all the defaults. I tried it out first on a Linux Mint 15 installation running in a VM and it worked flawlessly, so I thought I'd move to the actual server I intend to run it on, and all I get when I try to browse to it is a page that says "This program was unable to connect or stay connected to the Citadel server. Please report this problem to your system administrator."

It seems that WebCit and Citadel-Server are running. If I do a "service webcit restart" and a "service citadel restart". I get "Restarting [OK]" on both. However, if I do a "dpkg-reconfigure citadel" (again, accepting all defaults), I end up with "Setup is finished, but the Citadel server failed to start. Go back and check your configuration."

Now the problem is, I'm totally new to Citadel and have no clue how to troubleshoot this. I'd love to look at a log file, but have no idea where to find one. There is a /var/log/webcit, but it just has an access log, not an error log. Plus it doesn't seem like WebCit is the problem, since I am getting a response in a browser. It seems to be the Citadel server that's not working.

Any ideas what might be wrong, or at least what I can do to figure it out?

Thanks.

New Citadel Using Guy

 



[#] Mon Sep 23 2013 23:55:26 EDT from Devdom @ Uncensored

Subject: Re: Troubleshooting New Installation

[Reply] [ReplyQuoted] [Headers] [Print]

I had the same problem, on my end it turned out to be that the test server i was installing citadel on was a 32Bit machine, and my VM was a 64Bit, it looks like the latest Citadel does not like 32 Bit servers.

After i rented a cloud box and installed Ubuntu server 64 on it installing citadel was a breeze...



[#] Tue Sep 24 2013 04:52:22 EDT from dothebart @ Uncensored

[Reply] [ReplyQuoted] [Headers] [Print]

 

Sun Sep 22 2013 20:19:16 EDT from Sig @ Uncensored
So what (IMAP?) client on Android are we using these days? I mostly connect via ssh as the mobile webcit experience is a little odd. For variety, I configured K9 over IMAP and it was okay, but not very intuitive nor quick for browsing the various rooms.

I assume I'm not the only one who might use cit via tablet. What works well?

i've been using MailDroid for a while now.



[#] Tue Sep 24 2013 05:04:42 EDT from dothebart @ Uncensored

Subject: Re: Troubleshooting New Installation

[Reply] [ReplyQuoted] [Headers] [Print]

 

Mon Sep 23 2013 21:49:55 EDT from New Citadel Using Guy @ Uncensored Subject: Troubleshooting New Installation

Hopefully this is a simple question for somebody, but all my searches so far have failed to find me an answer.

I've done a fresh install of Citadel on an Ubuntu 11.04 server. It's a pretty standard install, just your basic "apt-get install citadel-suite" and accept all the defaults. I tried it out first on a Linux Mint 15 installation running in a VM and it worked flawlessly, so I thought I'd move to the actual server I intend to run it on, and all I get when I try to browse to it is a page that says "This program was unable to connect or stay connected to the Citadel server. Please report this problem to your system administrator."

It seems that WebCit and Citadel-Server are running. If I do a "service webcit restart" and a "service citadel restart". I get "Restarting [OK]" on both. However, if I do a "dpkg-reconfigure citadel" (again, accepting all defaults), I end up with "Setup is finished, but the Citadel server failed to start. Go back and check your configuration."

Now the problem is, I'm totally new to Citadel and have no clue how to troubleshoot this. I'd love to look at a log file, but have no idea where to find one. There is a /var/log/webcit, but it just has an access log, not an error log. Plus it doesn't seem like WebCit is the problem, since I am getting a response in a browser. It seems to be the Citadel server that's not working.

Any ideas what might be wrong, or at least what I can do to figure it out?

Thanks.

New Citadel Using Guy

 



edit

/etc/default/webcit

and change these two lines:

export WEBCIT_CITADEL_IP='uds'
export WEBCIT_CITADEL_PORT='/var/run/citadel/'

restart webcit again.



[#] Tue Sep 24 2013 08:12:01 EDT from Freakdog @ Dog Pound BBS II

Subject: Re: Webcit on https

[Reply] [ReplyQuoted] [Headers] [Print]

 

Mon Sep 23 2013 04:37:31 PM EDT from Devdom @ Uncensored Subject: Re: Webcit on https

Some more info:

I installed a new VM with Ubuntu 12.04.03-desktop 64, installed Citadel and WebCit, no changes to the config, clean virgin install, tried opening https://127.0.0.1 and after accepting the certificate security exception, i get the exact same page stating "not found"

i start to believe this is a bug and not a configuration error.

Perhaps this is a silly question, but have you confirmed that:

  1. Citadel and Webcit are running
  2. Which IP and port Webcit is running on?

The default port for Webcit is actually 2000...you have to configure the init script to actually start it on 80 and 443 if you want to connect on the standard http/https ports.



[#] Tue Sep 24 2013 23:45:12 EDT from New Citadel Using Guy @ Uncensored

Subject: Re: Troubleshooting New Installation

[Reply] [ReplyQuoted] [Headers] [Print]

Thanks for the tip. My server is running 32-bit Linux, and the VM I experimented on was 64-bit. I can install a 64-bit OS on the server, but it'll take some planning and effort, so I can't do that right away.

Thanks again.

 



[#] Fri Sep 27 2013 07:41:17 EDT from IGnatius T Foobar @ Uncensored

Subject: Re: Troubleshooting New Installation

[Reply] [ReplyQuoted] [Headers] [Print]


Citadel should run fine on a 32-bit Linux, even if running on a 64-bit capable computer (or virtual machine). The instance of Citadel you are logged into right now is like that.

[#] Fri Sep 27 2013 11:17:27 EDT from Devdom @ Uncensored

Subject: Webcit / Citadel SSL issue

[Reply] [ReplyQuoted] [Headers] [Print]

good day to you all....

I think I need some help setting up my citadel/webcit with ssl/tls,
when I remove all keys and certificates then restart, it generates a self-signed key /certificate, all this works, next I remove all the files in /etc/ssl/webcit and /etc/ssl/citadel
then I run openssl genrsa -out citadel-key 2048
this generates the key
Start openssl req -new -key citadel.key -out citadel.crt
This generates the request form for Geotrust
I use this crt code to request a certificate using server Apache+OpenSSL
I get 2 codes back, an intermediate certificate code and the certificate code for the server; I rename those in citadel.cer and intermediate.cer
Then move those two files to the server in webcit and citadel
Restart the server, and the certificates are not recognized...
Am i missing a step here? Something obvious perhaps? I tried this sequence 4 times now....
help would be appreciated.

Thanks in advance,

Marcel



[#] Sat Sep 28 2013 06:56:51 EDT from whiskers75 @ Uncensored

Subject: Any calendar privacy?

[Reply] [ReplyQuoted] [Headers] [Print]

Hi,

Is there any privacy for calendars? ATM I can just subscribe to my calendar without any passwords. Also, is there CalDAV support?

Thanks,

-whiskers75



[#] Sun Sep 29 2013 10:28:46 EDT from Bouke J. Henstra @ Uncensored

Subject: Re: Citadel, SMTP and Bynari Outlook Connector

[Reply] [ReplyQuoted] [Headers] [Print]

Fri Sep 13 2013 15:38:26 EDTfrom dothebart @ Uncensored Subject: Re: Citadel, SMTP and Bynari Outlook Connector

hm, seems as if its getting a little bit out of order?

If you enable debug logging for smtp, what do you see in syslog for such a session?
I contacted Bynari support about this and gave them permission to run some tests on my Citadel server. They replied me with the following information. I hope this helps.
Hello,

We have found that the Citadel is the one that is causing the issue.  I have provided the full description between the client and server below with "S:" being the server and "C:" being the client.  I have provided a test case of both the Citadel server that you are using and our Bynari's Postfix server.

Both SMTP servers supports "plain text login" that the server responds with "AUTH LOGIN PLAIN" that you will see below.

The client request to use "AUTH PLAIN".  The server response is a "334" which mean "Authentication Ready" and the client will send the username and password authentication request.  Citadel return "235" which mean "Successful Authentication" and then immediately followed with a "502" error which mean "Command not implemented".  This is what causing the client (Outlook Connector) to not able to send the message because the 502 error.  As you can see below our postfix server does not return a 502.

I don't have any idea why Citadel server is retuning a 502 after a 235 which it shouldn't be doing that.  So you will need to contact somebody at Citadel to report this bug to have them stop sending a 502 on a successful response.

Citadel Server:
$ stunnel -n smtp -c -r server-1.nl:587
 1 S: 220 h2209385.stratoserver.net ESMTP Citadel server ready.
 2 C: EHLO [192.168.1.80]
 3 S: 250-Hello [192.168.1.80] (byn00143 [192.168.1.211])
 4 S: 250-HELP
 5 S: 250-SIZE 10485760
 6 S: 250-AUTH LOGIN PLAIN
 7 S: 250-AUTH=LOGIN PLAIN
 8 S: 250 8BITMIME
 9 C: AUTH PLAIN
10 S: 334
11 C: AHRlc3QwMQBNeU1haWxQVyMxJA==
12 S: 235 Hello, test01
13 S: 502 I'm afraid I can't do that.

Bynari's Postfix server:
$ stunnel -n smtp -c -r samadams:25
 1 S: 220 samadams.bynari.net ESMTP Postfix
 2 C: EHLO [192.168.1.80]
 3 S: 250-samadams.bynari.net
 4 S: 250-PIPELINING
 5 S: 250-SIZE 20971520
 6 S: 250-VRFY
 7 S: 250-ETRN
 8 S: 250-AUTH PLAIN LOGIN
 9 S: 250-AUTH=PLAIN LOGIN
10 S: 250-ENHANCEDSTATUSCODES
11 S: 250-8BITMIME
12 S: 250 DSN
13 C: AUTH PLAIN
14 S: 334
15 C: BWaa3NAG22b3JaWNlAH3
16 S: 235 2.7.0 Authentication successful
17 C: RSET
18 S: 250 2.0.0 Ok
19 C: MAIL FROM:<alice@bynari.net>
20 S: 250 2.1.0 Ok
21 C: RCPT TO:<alice@bynari.net>
22 S: 250 2.1.5 Ok
23 C: DATA
24 S: 354 End data with <CR><LF>.<CR><LF>
25 C: Test Message
26 C: .
27 S: 250 2.0.0 Ok: queued as 903A32403E9
 
 


[#] Sun Sep 29 2013 12:09:32 EDT from sysmut @ Uncensored

Subject: webcit missing LSB tags ...

[Reply] [ReplyQuoted] [Headers] [Print]

On Debian 6:

apt-get install any_program .... yields error warnings: 

insserv: warning: script 'K15webcit' missing LSB tags and overrides
insserv: warning: script 'webcit' missing LSB tags and overrides
insserv: Starting webcit depends on rc.local and therefore on system facility `$all' which can not be true!
...


If the tag info is known, I can insert them into /etc/init.d/webcit and /etc/init.d/K15webcit

Any suggestions?



[#] Sun Sep 29 2013 12:24:40 EDT from chris-barry @ Uncensored

Subject: FROM address when relaying through an external SMTP server.

[Reply] [ReplyQuoted] [Headers] [Print]

I apologise if this has been asked before. I could not see a search facility.

Given that my server runs on server.private.domain and that it hosts email for users@public.domain. External email is relayed via a host set in "Smart hosts". A user sending external email will connect to the Citadel SMTP server to send a message. The FROM line of the header will specify user@public.domain. This message is then relayed via the external server. Connection and authentication are successful but the message is rejected because the FROM address has been changed to user@server.private.domain. The server responds: 550 ... Sender verification failed.

I have tried adding public.domain to the Masqueradable domains list but the address was still changed.

I think I may be able to instruct the external server to accept server.private.domain as a valid email domain, but this would not be satisfactory as error messages sent to that address would be lost.

My questions are:

1. What is the reason for this translation of address?

2. How can I make Citadel preserve the original address?

3. How can I make Citadel log its exchanges with the external server. I have added -x mail to the start up options but the information logged is still rather sparse. I had to resort to a packet sniffer to see exactly what was happening. I see messages in smtp_clienthandlers.c which I cannot find in any logs.

I am running version 8.16. I realise that this is not the latest, but I am reluctant to resort to a new build unless it will definitely fix the problem, as Citadel is working satisfactorily in other respects.

Thanks,

Chris.

 

 

 

 

 

 



[#] Sun Sep 29 2013 13:05:17 EDT from sysmut @ Uncensored

Subject: Re: webcit missing LSB tags ...

[Reply] [ReplyQuoted] [Headers] [Print]

I figured it out and all appears to run well.  Just insert the following header in /etc/init.d/webcit

#!/bin/sh 

### BEGIN INIT INFO
# Provides:  webcit
# Required-Start:
# Required-Stop:
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: Start daemon at boot time
# Description: Enable service provided by daemon.
### END INIT INFO

...

Please advise if this header info should be better customized.

More info at: https://wiki.debian.org/LSBInitScripts/DependencyBasedBoot

 

 

 

 

 

 

 

 



[#] Sun Sep 29 2013 13:17:11 EDT from chris-barry @ Uncensored

Subject: FROM address when relaying through an external SMTP server.

[Reply] [ReplyQuoted] [Headers] [Print]

I apologise if this has been asked before. I could not see a search facility.

Given that my server runs on server.private.domain and that it hosts email for users@public.domain. External email is relayed via a host set in "Smart hosts". A user sending external email will connect to the Citadel SMTP server to send a message. The FROM line of the header will specify user@public.domain. This message is then relayed via the external server. Connection and authentication are successful but the message is rejected because the FROM address has been changed to user@server.private.domain. The server responds: 550 ... Sender verification failed.

I have tried adding public.domain to the Masqueradable domains list but the address was still changed.

I think I may be able to instruct the external server to accept server.private.domain as a valid email domain, but this would not be satisfactory as error messages sent to that address would be lost.

My questions are:

1. What is the reason for this translation of address?

2. How can I make Citadel preserve the original address?

3. How can I make Citadel log its exchanges with the external server. I have added -x mail to the start up options but the information logged is still rather sparse. I had to resort to a packet sniffer to see exactly what was happening. I see messages in smtp_clienthandlers.c which I cannot find in any logs.

I am running version 8.16. I realise that this is not the latest, but I am reluctant to resort to a new build unless it will definitely fix the problem, as Citadel is working satisfactorily in other respects.

Thanks,

Chris.

 

 

 

 

 

 



[#] Sun Sep 29 2013 13:39:11 EDT from sysmut @ Uncensored

Subject: Re: FROM address when relaying through an external SMTP server.

[Reply] [ReplyQuoted] [Headers] [Print]

For #2, have you tried proxy_pass and ProxyPassReverse in your virtualhost directives?



[#] Sun Sep 29 2013 14:16:35 EDT from dothebart @ Uncensored

Subject: Re: Citadel, SMTP and Bynari Outlook Connector

[Reply] [ReplyQuoted] [Headers] [Print]

thanks for digging into this.

fixed by

http://code.citadel.org/?p=citadel.git;a=commit;h=741ca47eeffe7eb0ff30bec2f1e7963f41eeba83

Sun Sep 29 2013 10:28:46 EDT from Bouke J. Henstra @ Uncensored Subject: Re: Citadel, SMTP and Bynari Outlook Connector
Fri Sep 13 2013 15:38:26 EDTfrom dothebart @ Uncensored Subject: Re: Citadel, SMTP and Bynari Outlook Connector

hm, seems as if its getting a little bit out of order?

If you enable debug logging for smtp, what do you see in syslog for such a session?
I contacted Bynari support about this and gave them permission to run some tests on my Citadel server. They replied me with the following information. I hope this helps.
Hello,

We have found that the Citadel is the one that is causing the issue.  I have provided the full description between the client and server below with "S:" being the server and "C:" being the client.  I have provided a test case of both the Citadel server that you are using and our Bynari's Postfix server.

Both SMTP servers supports "plain text login" that the server responds with "AUTH LOGIN PLAIN" that you will see below.

The client request to use "AUTH PLAIN".  The server response is a "334" which mean "Authentication Ready" and the client will send the username and password authentication request.  Citadel return "235" which mean "Successful Authentication" and then immediately followed with a "502" error which mean "Command not implemented".  This is what causing the client (Outlook Connector) to not able to send the message because the 502 error.  As you can see below our postfix server does not return a 502.

I don't have any idea why Citadel server is retuning a 502 after a 235 which it shouldn't be doing that.  So you will need to contact somebody at Citadel to report this bug to have them stop sending a 502 on a successful response.

Citadel Server:
$ stunnel -n smtp -c -r server-1.nl:587
 1 S: 220 h2209385.stratoserver.net ESMTP Citadel server ready.
 2 C: EHLO [192.168.1.80]
 3 S: 250-Hello [192.168.1.80] (byn00143 [192.168.1.211])
 4 S: 250-HELP
 5 S: 250-SIZE 10485760
 6 S: 250-AUTH LOGIN PLAIN
 7 S: 250-AUTH=LOGIN PLAIN
 8 S: 250 8BITMIME
 9 C: AUTH PLAIN
10 S: 334
11 C: AHRlc3QwMQBNeU1haWxQVyMxJA==
12 S: 235 Hello, test01
13 S: 502 I'm afraid I can't do that.

Bynari's Postfix server:
$ stunnel -n smtp -c -r samadams:25
 1 S: 220 samadams.bynari.net ESMTP Postfix
 2 C: EHLO [192.168.1.80]
 3 S: 250-samadams.bynari.net
 4 S: 250-PIPELINING
 5 S: 250-SIZE 20971520
 6 S: 250-VRFY
 7 S: 250-ETRN
 8 S: 250-AUTH PLAIN LOGIN
 9 S: 250-AUTH=PLAIN LOGIN
10 S: 250-ENHANCEDSTATUSCODES
11 S: 250-8BITMIME
12 S: 250 DSN
13 C: AUTH PLAIN
14 S: 334
15 C: BWaa3NAG22b3JaWNlAH3
16 S: 235 2.7.0 Authentication successful
17 C: RSET
18 S: 250 2.0.0 Ok
19 C: MAIL FROM:<alice@bynari.net>
20 S: 250 2.1.0 Ok
21 C: RCPT TO:<alice@bynari.net>
22 S: 250 2.1.5 Ok
23 C: DATA
24 S: 354 End data with <CR><LF>.<CR><LF>
25 C: Test Message
26 C: .
27 S: 250 2.0.0 Ok: queued as 903A32403E9
 
 


 



[#] Sun Sep 29 2013 14:39:58 EDT from chris-barry @ Uncensored

Subject: FROM address when relaying through an external SMTP server.

[Reply] [ReplyQuoted] [Headers] [Print]

I apologise if this has been asked before. I could not see a search facility.

Given that my server runs on server.private.domain and that it hosts email for users@public.domain. External email is relayed via a host set in "Smart hosts". A user sending external email will connect to the Citadel SMTP server to send a message. The FROM line of the header will specify user@public.domain. This message is then relayed via the external server. Connection and authentication are successful but the message is rejected because the FROM address has been changed to user@server.private.domain. The server responds: 550 ... Sender verification failed.

I have tried adding public.domain to the Masqueradable domains list but the address was still changed.

I think I may be able to instruct the external server to accept server.private.domain as a valid email domain, but this would not be satisfactory as error messages sent to that address would be lost.

My questions are:

1. What is the reason for this translation of address?

2. How can I make Citadel preserve the original address?

3. How can I make Citadel log its exchanges with the external server. I have added -x mail to the start up options but the information logged is still rather sparse. I had to resort to a packet sniffer to see exactly what was happening. I see messages in smtp_clienthandlers.c which I cannot find in any logs.

I am running version 8.16. I realise that this is not the latest, but I am reluctant to resort to a new build unless it will definitely fix the problem, as Citadel is working satisfactorily in other respects.

Thanks,

Chris.

 

 

 

 

 

 



Go to page: [1] 2 3 4 5 ... Last