Language:
switch to room list switch to menu My folders
Go to page: 1 2 [3] 4 5 6 7 ... Last
[#] Thu Jan 26 2017 04:46:50 EST from hyperanalysis @ Uncensored

Subject: Re: Database Recovery Assistance

[Reply] [ReplyQuoted] [Headers] [Print]

...any help with this from anyone please? :-(



[#] Thu Jan 26 2017 04:47:49 EST from hyperanalysis @ Uncensored

Subject: Re: Database Recovery Assistance

[Reply] [ReplyQuoted] [Headers] [Print]

...with this I mean, sorry - can anyone give any pointers please?

Wed Jun 01 2016 05:40:37 EDT from hyperanalysis @ Uncensored Subject: Database Recovery Assistance

Greetings All,

Last night my server was accidentally restarted without shutting citadel down gracefully first. When it came back up citadel won't start, and it looks like my database is corrupt. I'm getting the following when attempting to restart the service:

citserver[3580]: cdb_fetch(9): BDB0075 DB_PAGE_NOTFOUND: Requested page not found

I've taken a backup copy of my data and logs directories, then attempted to run db_recover -cvf in the data directory, which gives me:
 
BDB2526 Finding last valid log LSN: file: 1 offset 28
 
I've also tried running the database_cleanup tool, which give me this:
 
Dumping cdb.00
db_dump: BDB0058 page 256: illegal page type or format
db_dump: BDB0061 PANIC: Invalid argument
db_dump: BDB0060 PANIC: fatal region error detected; run recovery
db_dump: BDB5117 close: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
db_dump: BDB1581 File handles still open at environment close
db_dump: BDB1582 Open file handle: /mnt/md1/citadel/data/cdb.00
db_dump: BDB0060 PANIC: fatal region error detected; run recovery
db_dump: dbenv->close: BDB0087 DB_RUNRECOVERY: Fatal error, run database recovery
Exiting.
 
At this stage I'm a bit lost, the recovery tools tell me to run the recovery tools? :-(
 
Any and all help would be greatly appreciated!!!
 
Kind regards,
Iain.


 



[#] Sun Jan 29 2017 11:30:04 EST from bennabiy @ Uncensored

Subject: Downgrade from latest git to previous version?

[Reply] [ReplyQuoted] [Headers] [Print]

Is it possible to downgrade from the latest git master to a previous tagged release (I am assuming not before release 902) to see if the bugs we are experiencing are due to the changes on the current master?

If I can fix these issues and help better the codebase, I would like to see that happen, but if not, I would like to revert back to a more stable situation. I am using LDAP as my authentication method, and I know it works because users are using it. 

My current issues are:

Global Address Book is unable to be edited by my aide user (the main admin account, not just a promoted aide). I am unable to make modifications to the information in the vcards.

I have attached a picture showing the display of the Global Address Book. I remember with previous versions that LDAP did not touch the GAB, and so it was not changed on each login by a client, but I noticed that even if I do update the GAB, once a client logs in, it reverts back.

 

Also, I currently cannot get certain configs to persist beyond a restart of citserver. I wonder if the changes are not making it to the database, but only persisiting in RAM. This includes things like Port number for the citadel networking, and settings like allowing self registration.

I have a few other issues, but if I could get these resolved it would make things leaps and bounds better.

 

Thank you.



Screenshot at 2017-01-25 22:13:18.png (image/png, 376733 bytes) [ View | Download ]
[#] Mon Jan 30 2017 13:45:04 EST from l-l @ Uncensored

Subject: Server hardening

[Reply] [ReplyQuoted] [Headers] [Print]

I'm setting up a Citadel server more as a private webmail server (exposed to the internet, but only private accounts allowed anywhere but the login screen) and am looking for information on hardening the server.

In addition to any existing best practices out there (where?) these are the things I'm looking to change/configure:

  • Change login page to not identify the system in use.
  • Stop Webcit login failures from displaying the difference between an incorrect password and an unknown username (this allows dictionary like attacks to enumerate user accounts on the server for spamming or other nefarious purposes.
  • Locate any existing fail2ban filters for Webcit and or Citadel to identify and eliminate brute force attacks against the login page and/or e-mail services. I can write the regexes myself but prefer not to reinvent the wheel if it has...already been invented.
  • Other ways to prevent Webcit/Citadel from identifying itself via service banners, etc. (I haven't looked into this one much, so not sure how much there is to do)
  • Any other security oriented settings you can think of.

Thanks



[#] Mon Jan 30 2017 14:04:53 EST from warbaby @ Uncensored

Subject: Re: Server hardening

[Reply] [ReplyQuoted] [Headers] [Print]

We should do some sharing of these fail2ban filters and talk about security. I have some things to share. This isn't probably the best place for it, developers mailing list probably not either..  I'll ask some of these gentlemen if we can get a citadel security list going.  But rather than just adding a public room here, I'd like to be able to post from my own client, so I don't have to log in to talk/answer questions.  If you want to talk in the meantime, hmu support@mailx3.com 

 

Mon Jan 30 2017 01:45:04 PM EST from l-l @ Uncensored Subject: Server hardening

I'm setting up a Citadel server more as a private webmail server (exposed to the internet, but only private accounts allowed anywhere but the login screen) and am looking for information on hardening the server.

In addition to any existing best practices out there (where?) these are the things I'm looking to change/configure:

  • Change login page to not identify the system in use.
  • Stop Webcit login failures from displaying the difference between an incorrect password and an unknown username (this allows dictionary like attacks to enumerate user accounts on the server for spamming or other nefarious purposes.
  • Locate any existing fail2ban filters for Webcit and or Citadel to identify and eliminate brute force attacks against the login page and/or e-mail services. I can write the regexes myself but prefer not to reinvent the wheel if it has...already been invented.
  • Other ways to prevent Webcit/Citadel from identifying itself via service banners, etc. (I haven't looked into this one much, so not sure how much there is to do)
  • Any other security oriented settings you can think of.

Thanks



 



[#] Mon Jan 30 2017 15:46:24 EST from l-l @ Uncensored

Subject: Re: Server hardening

[Reply] [ReplyQuoted] [Headers] [Print]

Thanks, sounds good.

 

Mon Jan 30 2017 14:04:53 EST from warbaby @ Uncensored Subject: Re: Server hardening

We should do some sharing of these fail2ban filters and talk about security. I have some things to share. This isn't probably the best place for it, developers mailing list probably not either..  I'll ask some of these gentlemen if we can get a citadel security list going.  But rather than just adding a public room here, I'd like to be able to post from my own client, so I don't have to log in to talk/answer questions.  If you want to talk in the meantime, hmu support@mailx3.com 

 

Mon Jan 30 2017 01:45:04 PM EST from l-l @ Uncensored Subject: Server hardening

I'm setting up a Citadel server more as a private webmail server (exposed to the internet, but only private accounts allowed anywhere but the login screen) and am looking for information on hardening the server.

In addition to any existing best practices out there (where?) these are the things I'm looking to change/configure:

  • Change login page to not identify the system in use.
  • Stop Webcit login failures from displaying the difference between an incorrect password and an unknown username (this allows dictionary like attacks to enumerate user accounts on the server for spamming or other nefarious purposes.
  • Locate any existing fail2ban filters for Webcit and or Citadel to identify and eliminate brute force attacks against the login page and/or e-mail services. I can write the regexes myself but prefer not to reinvent the wheel if it has...already been invented.
  • Other ways to prevent Webcit/Citadel from identifying itself via service banners, etc. (I haven't looked into this one much, so not sure how much there is to do)
  • Any other security oriented settings you can think of.

Thanks



 



 



[#] Tue Jan 31 2017 13:12:46 EST from bennabiy @ Uncensored

Subject: Admin unable to set vcards etc

[Reply] [ReplyQuoted] [Headers] [Print]

My admin user is able to make changes like adding floors etc, but is unable to make changes to users vcards (for setting aliases) in an LDAP environment.

Is there a way to look into the database at the settings directly, now that the configs are migrating into DB?

Also, users are unable to rename folders through IMAP client, or delete their mail folders.



[#] Fri Feb 03 2017 15:21:58 EST from Pingumann @ Uncensored

Subject: Mailng List does not first mail for new member

[Reply] [ReplyQuoted] [Headers] [Print]

Hi all,

I want to join the mailing list. I entered the info and have not received a mail with a link to join.

Is it normal behaviour?

BR Pingumann



[#] Fri Feb 03 2017 15:32:26 EST from Pingumann @ Uncensored

Subject: Re: Mailng List does not send first mail for new member

[Reply] [ReplyQuoted] [Headers] [Print]

 

Fri Feb 03 2017 15:21:58 EST from Pingumann @ Uncensored Subject: Mailng List does not first mail for new member

Hi all,

I want to join the mailing list. I entered the info and have not received a mail with a link to join.

Is it normal behaviour?

BR Pingumann



 



[#] Fri Feb 03 2017 17:38:50 EST from Pingumann @ Uncensored

Subject: Uninstall Citadel

[Reply] [ReplyQuoted] [Headers] [Print]

Hi all,

Citadel installed on a Ubuntu 16.04: Linux version 4.4.0-042stab120.16 (root@kbuild-rh6-x64.eng.sw.ru) (gcc version 4.4.6 20120305 (Red Hat 4.4.6-4) (GCC) ) #1 SMP Tue Dec 13 20:58:28 MSK 2016, Ubuntu 16.04.1 LTS, xenial.

The quick install (sudo ./install.sh) was followd with all the defaults. At the very ast, it exited with the line that listening on 80 is already by another application.

As the configuration files to set up a virtual site for citadel.conf in the:

1. /var/www/vhosts/default/htdocs and in the

2. /etc/citadel

were configured for port 80, it was expected to be able to be set up for port 2000. Nothing changed. (sudo service apache2 restart was done).

No files were found in:

3. /etc/apache2/sites-available and

4. /etc/apache2/sites-enabled.

The default virtual setup of Ubuntu 16.04 uses this config. Citadell did something quit of its own. Note that apache was selected as webserver in the install.

Then "sudo apt remove citadel-suite" was done.

It was reported to be done, and after that "sudo apt purge citadel-suite", "sudo apt update", and "sudo apt autoremove" was run to clean the system.

A new installation was strted. None of the options selections were asked again as was in the very first installation. It just runs te installation without any questions or options selection.

How can the very first installation state be started again?

 

 



[#] Fri Feb 03 2017 17:49:20 EST from Pingumann @ Uncensored

Subject: Uninstall or re-config citadel

[Reply] [ReplyQuoted] [Headers] [Print]

Hi all,


Citadel installed on a Ubuntu 16.04: Linux version 4.4.0-042stab120.16 (root@kbuild-rh6-x64.eng.sw.ru) (gcc version 4.4.6 20120305 (Red Hat 4.4.6-4) (GCC) ) #1 SMP Tue Dec 13 20:58:28 MSK 2016, Ubuntu 16.04.1 LTS, xenial.


At the very last, it exited with the line that listening on 80 is already by another application.


As the configuration files to set up a virtual site for citadel.conf in the:


1. /var/www/vhosts/default/htdocs and in the
2. /etc/citadel


were configured for port 80, it was expected to be able to be set up for port 2000. Nothing changed. (sudo service apache2 restart was done).

No files regarding citadel were found in:


3. /etc/apache2/sites-available and
4. /etc/apache2/sites-enabled.



The default virtual setup of Ubuntu 16.04 uses this config. Citadel did something quit of its own. Note that apache was selected as web-server in the install.
Then "sudo apt remove citadel-suite" was done.


It was reported to be done, and after that "sudo apt purge citadel-suite", "sudo apt update", and "sudo apt autoremove" was run to clean the system.
A new installation was started.


Then, none of the options and selections were asked as was in the very first installation. It just runs the installation without any questions or options selection.
It ends again without the errors about the port, but it cannot be reached because another app is using port 80.


How can the very first installation state be started again, or can the installation on Ubuntu 16.04 be configured to run on port 2000?



[#] Fri Feb 03 2017 17:57:06 EST from Pingumann @ Uncensored

Subject: IGNORE - Re: Uninstall Citadel

[Reply] [ReplyQuoted] [Headers] [Print]

 

Fri Feb 03 2017 17:38:50 EST from Pingumann @ Uncensored Subject: Uninstall Citadel

Hi all,

Citadel installed on a Ubuntu 16.04: Linux version 4.4.0-042stab120.16 (root@kbuild-rh6-x64.eng.sw.ru) (gcc version 4.4.6 20120305 (Red Hat 4.4.6-4) (GCC) ) #1 SMP Tue Dec 13 20:58:28 MSK 2016, Ubuntu 16.04.1 LTS, xenial.

The quick install (sudo ./install.sh) was followd with all the defaults. At the very ast, it exited with the line that listening on 80 is already by another application.

As the configuration files to set up a virtual site for citadel.conf in the:

1. /var/www/vhosts/default/htdocs and in the

2. /etc/citadel

were configured for port 80, it was expected to be able to be set up for port 2000. Nothing changed. (sudo service apache2 restart was done).

No files were found in:

3. /etc/apache2/sites-available and

4. /etc/apache2/sites-enabled.

The default virtual setup of Ubuntu 16.04 uses this config. Citadell did something quit of its own. Note that apache was selected as webserver in the install.

Then "sudo apt remove citadel-suite" was done.

It was reported to be done, and after that "sudo apt purge citadel-suite", "sudo apt update", and "sudo apt autoremove" was run to clean the system.

A new installation was strted. None of the options selections were asked again as was in the very first installation. It just runs te installation without any questions or options selection.

How can the very first installation state be started again?

 

 

Please ignore. See next post.

 



[#] Sat Feb 04 2017 12:02:49 EST from ura @ Uncensored

Subject: gentoo ebuild outdated

[Reply] [ReplyQuoted] [Headers] [Print]

Hi. I can't build citadel on gentoo. It give 404 error. Also it is very hard to find any versioning info. Please help installing latest (9.02??) release on gentoo. sunrise overlay is outdated

 



[#] Sat Feb 04 2017 20:00:16 EST from ura @ Uncensored

Subject: support email not working

[Reply] [ReplyQuoted] [Headers] [Print]

support email themgt@mail.ru  is not working - mail is returning. WTF with this project? Totally dead??? ebuilds dead, no any version info



[#] Sat Feb 04 2017 20:29:27 EST from warbaby @ Uncensored

Subject: Re: support email not working

[Reply] [ReplyQuoted] [Headers] [Print]

Whoa there big fella..  try ezinstall.. 

wget -q -O - http://easyinstall.citadel.org/install | sh
 

 

Sat Feb 04 2017 08:00:16 PM EST from ura @ Uncensored Subject: support email not working

support email themgt@mail.ru  is not working - mail is returning. WTF with this project? Totally dead??? ebuilds dead, no any version info



 



[#] Sat Feb 04 2017 20:48:47 EST from platonov @ Uncensored

Subject: Re: support email not working

[Reply] [ReplyQuoted] [Headers] [Print]

This project is basically dead and has been virtually dead for years.

There are so many problems with it that you can write a book size list of it.

There is only one guy, the original developer, who answers some questions once in a while, but it looks like the guy is too old and has no longer any energy to carry the entire complexity of myriads of quite comlex issues.

When I see all these questions that show up here and are emailed to me, most of the time those hopeless messages arrive at exactly the worst time possible when I am facing some urgent issue, and then, all of a sudden, my email client shows a popup about the email arriving. When I look at it, it is something between a pity and laughable, when you see them asking all the esoteric questions about the pretty complex issues that by themselves require years of experience and expertice.

It is pretty sad because I still think that the basic idea is excellent: to unite email server with blogs, groups and email types of info display in a single, very easily configurable and installable package.

But it looks to me the architecture is fundamentally wrong and the code was developed as a bunch of patch work "features" and so on. We even have a nearly a battle with one of devs who does not show up here for years where he tried to prove that the mechanism of exceptions is just a pile of crap. He prolly did not have a clue that precisely becasue of exceptions the IBM was commonly recognized as the most stable O/S there is.

Just to display a web page via Webcit interface you'd have to wait for minutes, probably simply because to load a single page thay are loading tens of various pages a dozen of "highly specialized" style sheets and so on. So, when you switch to your server tab for Citadel, get ready to waste a half an hour if you want to review and/or move around some pages.

To this day, the server works for me only one way, like it can send an email, but can not receive or vice versa, don't remember now and do not wish even to bother to see it. Now, if I would ask a question here why is it happening, I'd probably get some "answer" that needs a PhD in CS and system development level or at least a sysadmin with 5 years of experience.

So, after all these years, I can not trust my own email server and use it instead of using some external email server, which was one of the first reasons why I chose to install precisely a Citadel server - prolly the easiest email server install I have ever seen.

So, looks like the time has come to call things by their name and tell all those who have all sorts of issues, and they are truck loads of them, straight in their face and be honest about it.

Once dead, just face it and stop pretending that it is alive and you can actually resolve those tons of issues, which will require quite a team of fresh devs full of energy to actually do something and who have enough understanding and competence in terms of system architecture, performance, reliability and so on.

Sat Feb 04 2017 20:00:16 EST from ura @ Uncensored Subject: support email not working

support email themgt@mail.ru  is not working - mail is returning. WTF with this project? Totally dead??? ebuilds dead, no any version info



 



[#] Sat Feb 04 2017 21:20:20 EST from warbaby @ Uncensored

Subject: Re: support email not working

[Reply] [ReplyQuoted] [Headers] [Print]

Man the main thing here to keep in mind, it's free software.  If ti's not working for you, you know, how much can you really complain? 

I won't deny your perspective outright, but let's be realistic. Not every one should be running a mail server.

The project is certainly not dead in any way.. Small proj, understaffed okay, but not even close to being dead.  a new webcit is on the way and last git check-in for citserver was Wednesday. http://code.citadel.org/?p=citadel.git;a=summary .. if anything, some documentation needs updating.  That's mainly what you're seeing. 

I'm a Citadel user. It's a community. I've made small contributions and do what I can to help, but can't recreate everyone's custom Gentoo environment or whatever. There are only a few C programmers on the project. Distros upgrade and change packages and break things.  So, we make some suggestions.  If someone wants to go with it, great.  If they can't handle it, they should go to a gmail account or something else. No one is being forced to install Citadel.  So, it's pointless to be upset at it.  If the software doesn't meet your expectations, find something that does. 

But for those who hang in there, get to know it's quirks... it's a great, free, high-performance mail server.

 

 

 

Sat Feb 04 2017 08:48:47 PM EST from platonov @ Uncensored Subject: Re: support email not working

This project is basically dead and has been virtually dead for years.

There are so many problems with it that you can write a book size list of it.

There is only one guy, the original developer, who answers some questions once in a while, but it looks like the guy is too old and has no longer any energy to carry the entire complexity of myriads of quite comlex issues.

When I see all these questions that show up here and are emailed to me, most of the time those hopeless messages arrive at exactly the worst time possible when I am facing some urgent issue, and then, all of a sudden, my email client shows a popup about the email arriving. When I look at it, it is something between a pity and laughable, when you see them asking all the esoteric questions about the pretty complex issues that by themselves require years of experience and expertice.

It is pretty sad because I still think that the basic idea is excellent: to unite email server with blogs, groups and email types of info display in a single, very easily configurable and installable package.

But it looks to me the architecture is fundamentally wrong and the code was developed as a bunch of patch work "features" and so on. We even have a nearly a battle with one of devs who does not show up here for years where he tried to prove that the mechanism of exceptions is just a pile of crap. He prolly did not have a clue that precisely becasue of exceptions the IBM was commonly recognized as the most stable O/S there is.

Just to display a web page via Webcit interface you'd have to wait for minutes, probably simply because to load a single page thay are loading tens of various pages a dozen of "highly specialized" style sheets and so on. So, when you switch to your server tab for Citadel, get ready to waste a half an hour if you want to review and/or move around some pages.

To this day, the server works for me only one way, like it can send an email, but can not receive or vice versa, don't remember now and do not wish even to bother to see it. Now, if I would ask a question here why is it happening, I'd probably get some "answer" that needs a PhD in CS and system development level or at least a sysadmin with 5 years of experience.

So, after all these years, I can not trust my own email server and use it instead of using some external email server, which was one of the first reasons why I chose to install precisely a Citadel server - prolly the easiest email server install I have ever seen.

So, looks like the time has come to call things by their name and tell all those who have all sorts of issues, and they are truck loads of them, straight in their face and be honest about it.

Once dead, just face it and stop pretending that it is alive and you can actually resolve those tons of issues, which will require quite a team of fresh devs full of energy to actually do something and who have enough understanding and competence in terms of system architecture, performance, reliability and so on.

Sat Feb 04 2017 20:00:16 EST from ura @ Uncensored Subject: support email not working

support email themgt@mail.ru  is not working - mail is returning. WTF with this project? Totally dead??? ebuilds dead, no any version info



 



 



[#] Sun Feb 05 2017 11:54:20 EST from bennabiy @ Uncensored

Subject: Re: support email not working

[Reply] [ReplyQuoted] [Headers] [Print]

If anyone wants to complain, they can write their own software. You can almost tell how old someone is by their response to situations... I have found Citadel to be wonderful, and actually, the only issues I have had is because there is progress being made, which takes bug reporting and squashing to work out for the good of all. 

Once someone contributes, and gives it their all, ... well even then they shouldn't complain.

Sat Feb 04 2017 21:20:20 ESTfrom warbaby @ Uncensored Subject: Re: support email not working

Man the main thing here to keep in mind, it's free software.  If ti's not working for you, you know, how much can you really complain? 

I won't deny your perspective outright, but let's be realistic. Not every one should be running a mail server.

The project is certainly not dead in any way.. Small proj, understaffed okay, but not even close to being dead.  a new webcit is on the way and last git check-in for citserver was Wednesday. http://code.citadel.org/?p=citadel.git;a=summary .. if anything, some documentation needs updating.  That's mainly what you're seeing. 

I'm a Citadel user. It's a community. I've made small contributions and do what I can to help, but can't recreate everyone's custom Gentoo environment or whatever. There are only a few C programmers on the project. Distros upgrade and change packages and break things.  So, we make some suggestions.  If someone wants to go with it, great.  If they can't handle it, they should go to a gmail account or something else. No one is being forced to install Citadel.  So, it's pointless to be upset at it.  If the software doesn't meet your expectations, find something that does. 

But for those who hang in there, get to know it's quirks... it's a great, free, high-performance mail server.



[#] Mon Feb 06 2017 10:07:18 EST from IGnatius T Foobar @ Uncensored

Subject: Re: support email not working

[Reply] [ReplyQuoted] [Headers] [Print]


Hello everyone. Citadel is alive and well. If you are unsatisfied with the speed at which our community resolves issues, I'd like to remind you that list price for Exchange Server + SharePoint will run you in the thousands of dollars, but if you require immediate support it might be worth the money to pay someone to take care of you instead of participating in the open source community.

The area where there currently does appear to be some trouble is in packages/distributions.
This is difficult to manage because on one hand there is tremendous value in being able to offer distribution-native packages that can be called up at will; but on the other hand it depends on the workload and energy of the package maintainer. Some packages are better than others.

I wonder if it would make more sense to build a meta-package that simply satisfies all of the prerequisites and then calls Easy Install.

We recently moved to a rolling-release model specifically for the purpose of getting fixes out to the community faster. The process of a "release cycle" is good for a project with a lot of developers, but when you just want to get a quick fix out for some issue a user found, it slows you down by weeks or months.

So what's actually happening with Citadel these days?

* Uncoincidentally, much of the work in 9XX has been focused on reducing Citadel Server's footprint on the host filesystem. Moving the configuration and control structures into the database, along with things like network configs, user profiles, etc. is an important part of being able to close the gap between a Citadel server installed from source (or Easy Install), and a Citadel server installed from packages.

* As previously mentioned, WebCit is getting a major overhaul. This is why it might seem that there's little going on, if all you follow is the actual release track. If you follow the "webcit-ng" branch [https://goo.gl/mPuKWJ] you'll see that it's being actively developed. This effort began last summer and it's going to take some time to complete, because it's being carefully built layer-by-layer with a "REST/DAV first" philosophy.


s

[#] Mon Feb 06 2017 13:30:57 EST from bennabiy @ Uncensored

Subject: Re: WebCit

[Reply] [ReplyQuoted] [Headers] [Print]

I would like to work out some of the bugs in WebCit. Right now, if a system has LDAP as auth mechanism, Address book entries do not display correctly, whether in the GAB or in a contact room.

 

Also, with LDAP entries, there is no "user" in the system so inviting people to rooms etc, has empty lists and even trying the GAB causes errors without stripping out the email portion of the name.

 

I have a test machine set up right now which I can debug and test bleeding edge code on without hurting anyone... (I hope)

 

 



Go to page: 1 2 [3] 4 5 6 7 ... Last