Language:
switch to room list switch to menu My folders
Go to page: First ... 18 19 20 21 [22] 23 24 25 26 ... Last
[#] Thu Jun 04 2020 17:48:54 EDT from gll @ Uncensored

Subject: webcit

[Reply] [ReplyQuoted] [Headers] [Print]

Why is webcit not recognized by UFW, even apt upgrade say's "K01webcit' missing LSB tags and overrides", same without the K01?

When enable, UFW blocks access to the web portal, even though all the necessary ports and protocols are allowed.



[#] Thu Jun 04 2020 20:01:36 EDT from gll @ Uncensored

Subject: Re: How to use Citadel with Thunderbird?

[Reply] [ReplyQuoted] [Headers] [Print]

I've been using it with Thunderbird for years.  no special setup, are you still having problems?

Wed May 27 2020 10:05:25 EDT from amaliuk @ Uncensored Subject: How to use Citadel with Thunderbird?

Hello!

 

How to use calendar, contacts and task in Thunderbird?

SyncKolab is inconpatible with Thunderbird



 



[#] Fri Jun 05 2020 10:40:35 EDT from "s3cr3to" <s3cr3to@uncensored.citadel.org> to warbaby <warbaby@uncensored.citadel.org>,Citadel_Support <room_Citadel_Support@uncensored.citadel.org>

Subject: Re: Easy Install update blew out my room aliases..

[Reply] [ReplyQuoted] [Headers] [Print]

My mistake, I did not read "room aliases" correctly, I read it as "mail
aliases"; my brain is intoxicated with so many chemicals vs. CV19 at work.


On 6/4/20 9:40 AM, warbaby wrote:
I have 2 users on this system..

I issued IGAB with ./sendcommand .. but first...

root@mail:/usr/local/citadel# ./sendcommand echo "FOO"
sendcommand: started (pid=19140) connecting to Citadel server at /usr/local/citadel/citadel-admin.socket
200 mail Citadel server ADMIN CONNECTION ready.
echo FOO
200 FOO
sendcommand: processing ended.

Which works.. however ..

root@mail:/usr/local/citadel# ./sendcommand IGAB
sendcommand: started (pid=19079) connecting to Citadel server at /usr/local/citadel/citadel-admin.socket
200 mail Citadel server ADMIN CONNECTION ready.
IGAB
530 Unrecognized or unsupported command.
sendcommand: processing ended.

Does not. Also did not work on another clean installation I setup for
testing.. "Whats going on?"

Brain not fully awake yet.. perhaps I am doing something wrong.

  Thanks for you response!

[#] Fri Jun 05 2020 14:18:06 EDT from warbaby @ Uncensored

Subject: Re: Easy Install update blew out my room aliases..

[Reply] [ReplyQuoted] [Headers] [Print]

No worries.  For the moment, I am just accepting the issue as is, taking care not to lunge at anything, since it is an older, and fairly important mail database.  

Deliverable is not affected, since they are only readonly rooms (lists), that nobody posts to except me, so I can still send to them as "room_foo" .

The only thing lost at the moment is "Pretty Room Names" .. So, my solution for today, is "have some humility," and "cope".

But I did setup a dev environment, pulled all the code, and have been digging around in it.

It would be good to have a room setup here for this kind of dev-hacking. 

Sometimes the sheer volume of posts to "Citadel Support" makes these little conversations hard to find and follow.. 

 

Fri Jun 05 2020 10:40:35 AM EDT from "s3cr3to" <s3cr3to@uncensored.citadel.org> Subject: Re: Easy Install update blew out my room aliases..
My mistake, I did not read "room aliases" correctly, I read it as "mail
aliases"; my brain is intoxicated with so many chemicals vs. CV19 at work.


On 6/4/20 9:40 AM, warbaby wrote:
I have 2 users on this system..

I issued IGAB with ./sendcommand .. but first...

root@mail:/usr/local/citadel# ./sendcommand echo "FOO"
sendcommand: started (pid=19140) connecting to Citadel server at /usr/local/citadel/citadel-admin.socket
200 mail Citadel server ADMIN CONNECTION ready.
echo FOO
200 FOO
sendcommand: processing ended.

Which works.. however ..

root@mail:/usr/local/citadel# ./sendcommand IGAB
sendcommand: started (pid=19079) connecting to Citadel server at /usr/local/citadel/citadel-admin.socket
200 mail Citadel server ADMIN CONNECTION ready.
IGAB
530 Unrecognized or unsupported command.
sendcommand: processing ended.

Does not. Also did not work on another clean installation I setup for
testing.. "Whats going on?"

Brain not fully awake yet.. perhaps I am doing something wrong.

  Thanks for you response!

 



[#] Fri Jun 05 2020 14:55:38 EDT from warbaby @ Uncensored

Subject: Alternate procedure to set "email aliases" for a user

[Reply] [ReplyQuoted] [Headers] [Print]

If anyone is still having trouble setting email aliases

try ..  (likely in /usr/local/citadel  for easy install)

./sendcommand AGEA username

to GET/DISPLAY  the alias

then..and please read the full procedure before you do it.. some of the SET commands are expecting multi-line input, so the connection stays open until you terminate it with ^D.

./sendcommand ASEA username
# now paste a clean list of email addresses from your clipboard.
# now send a ^D
^D

then

./sendcommand AGEA username
# Read them out again to see what you have.

There does seem to be some validation going on.  I found a typo in one address caused it to be omitted from the list.

This method does not initialize the new aliases in any active session, so be sure to...

Logoff & log back on..

Also, "Primary Internet e-mail address" still seems to be chosen somewhat at random.  It's not always from the top or bottom of the list.



[#] Sat Jun 06 2020 14:59:59 EDT from gll @ Uncensored

Subject: webcit

[Reply] [ReplyQuoted] [Headers] [Print]

Has anyone reviewed webit code,  is it possible there is a build-in backdoor through webcit?



[#] Tue Jun 09 2020 11:00:00 EDT from "s3cr3to" <s3cr3to@uncensored.citadel.org> to gll <gll@uncensored.citadel.org>,Citadel_Support <room_Citadel_Support@uncensored.citadel.org>

Subject: Re: webcit

[Reply] [ReplyQuoted] [Headers] [Print]

Several months ago, a person here reported a security flaw, where with a
simple url pointing to your internet exposed citadel server with webcit,
nginx (and I suppose Apache too) could list ALL usernames, allowing an
attack hammering for getting SMTP / POP access.

I was able to check it on my server. Unfortunately I couldn't copy the
mail and I lost the details in this ocean of messages.

I do not remember if I managed to "block" this url, but I suppose that
the damage was already done, from time to time I see in my logs many
attempts with usernames of my citadel using dummy keys.

Maybe Art knows more about this.


On 6/6/20 12:59 PM, gll wrote:
Has anyone reviewed webit code,  is it possible there is a build-in
backdoor through webcit?

[#] Tue Jun 09 2020 11:19:49 EDT from warbaby @ Uncensored

Subject: Re: webcit [Security]

[Reply] [ReplyQuoted] [Headers] [Print]

I'd like to suggest at this point we move the conversation to a "Citadel Security" room...

..Before these important discussions get lost among.. "How do I sync my Calendar to Thunderbird on my Raspberry Pi"...

I have some things to contribute on Security, and a working dev environment..  It's likely there are others who will have things to say.

Since full text indexing appears to be turned off here, and Google does an extremely bad job of indexing Citadel posts, having a dedicated room seems like a straight-forward solution for the community.

I just made the room, but see I can't edit it.  Maybe Art or somebody can help out with this.

 

Tue Jun 09 2020 11:00:00 AM EDT from "s3cr3to" <s3cr3to@uncensored.citadel.org> Subject: Re: webcit
Several months ago, a person here reported a security flaw, where with a
simple url pointing to your internet exposed citadel server with webcit,
nginx (and I suppose Apache too) could list ALL usernames, allowing an
attack hammering for getting SMTP / POP access.

I was able to check it on my server. Unfortunately I couldn't copy the
mail and I lost the details in this ocean of messages.

I do not remember if I managed to "block" this url, but I suppose that
the damage was already done, from time to time I see in my logs many
attempts with usernames of my citadel using dummy keys.

Maybe Art knows more about this.


On 6/6/20 12:59 PM, gll wrote:
Has anyone reviewed webit code,  is it possible there is a build-in
backdoor through webcit?

 



[#] Wed Jun 10 2020 02:01:08 EDT from IGnatius T Foobar @ Uncensored

Subject: Re: Easy Install update blew out my room aliases..

[Reply] [ReplyQuoted] [Headers] [Print]

It is true, we removed "mail.aliases" a few versions ago. It was one of the last things that still required manual editing of a configuration file, and it was implemented in such a way that it really made the address expansion code messy. Honestly, I didn't think anyone even knew it was there anymore.

If it's something the user community needs, we could potentially bring it back in the form of a config entry *inside* the Citadel system rather than as an external text file. It wouldn't be integrated into the address book; it would just be a dumb substitution function that gets called *before* address expansion.

The other option would be to finally add arbitrary email address aliases for rooms, like we do for users.

Which would be more useful?

[#] Wed Jun 10 2020 02:03:10 EDT from IGnatius T Foobar @ Uncensored

Subject: Re: webcit

[Reply] [ReplyQuoted] [Headers] [Print]

I do not remember if I managed to "block" this url, but I suppose that

the damage was already done, from time to time I see in my logs many
attempts with usernames of my citadel using dummy keys.

That has happened to me too, but I am not sure if they were targeting Citadel specifically. To me it looked like they were trying common usernames, and some of them happened to match existing users.

[#] Wed Jun 10 2020 02:03:50 EDT from IGnatius T Foobar @ Uncensored

Subject: Re: webcit [Security]

[Reply] [ReplyQuoted] [Headers] [Print]

I just made the room, but see I can't edit it.  Maybe Art or somebody can

help out with this.

I see it, and it says you have access to it.

We could also conduct these conversations in the development room.

[#] Wed Jun 10 2020 09:12:52 EDT from warbaby @ Uncensored

Subject: Re: Easy Install update blew out my room aliases..

[Reply] [ReplyQuoted] [Headers] [Print]

I thought it was pretty convenient to have mail.aliases as kind of front end address mapper.  I had quite a few entries, for business, family, personal, societal evasion, larping..  but really makes no difference to me whether it is in a file or the database.

But there is a loss of functionality without it, namely  room_name aliases.  I can probably think of other cases.  It might be an administrative problem on some systems.  The users have to maintain their own aliases, as there is no easy way without logging in as each user.. to do it for them.  I think globally is definitely a better fit for the Mail Server Admin.

Administration>Global Configuration>Alias Mapper

Alias Mapper

<aliasname>]  [<drop-down-of-possible-account-or-room-destinations>][<domain-or-all-domains>] [<note, reason, duration, purpose, etc...] [add new alias]

remainder of page is just a spilldown of previously added entries, with a delete button

Active Global Aliases

sales  ted @ foo.org [x]  # Note: If anything happens to ted, these should go to bill.

info     stephanie @ foo.org [x]

talk     room_talk @ <all> [x]

-------

it could almost replace the account aliases in some use case scenarios...

 I would ike the swiss-army knife feel of this very much.

 

Wed Jun 10 2020 02:01:08 AM EDT from IGnatius T Foobar @ Uncensored Subject: Re: Easy Install update blew out my room aliases..
It is true, we removed "mail.aliases" a few versions ago. It was one of the last things that still required manual editing of a configuration file, and it was implemented in such a way that it really made the address expansion code messy. Honestly, I didn't think anyone even knew it was there anymore.

If it's something the user community needs, we could potentially bring it back in the form of a config entry *inside* the Citadel system rather than as an external text file. It wouldn't be integrated into the address book; it would just be a dumb substitution function that gets called *before* address expansion.

The other option would be to finally add arbitrary email address aliases for rooms, like we do for users.

Which would be more useful?

 



[#] Wed Jun 10 2020 10:21:57 EDT from warbaby @ Uncensored

Subject: Re: webcit [Security]

[Reply] [ReplyQuoted] [Headers] [Print]

I don't have access to allow uploads, edit the info file, and setup the mailing list.. is what I meant by that.

Wed Jun 10 2020 02:03:50 AM EDT from IGnatius T Foobar @ Uncensored Subject: Re: webcit [Security]
I just made the room, but see I can't edit it.  Maybe Art or somebody can

help out with this.

I see it, and it says you have access to it.

We could also conduct these conversations in the development room.

 



[#] Wed Jun 10 2020 10:24:57 EDT from warbaby @ Uncensored

Subject: The New Citadel Security Room

[Reply] [ReplyQuoted] [Headers] [Print]

The new Citadel Security room is active. Feel free to report issues, or generally participate.

Citadel Security Room



[#] Thu Jun 11 2020 15:26:24 EDT from linkster @ Uncensored

Subject: Re: Citadel Not Working

[Reply] [ReplyQuoted] [Headers] [Print]

Check your firewall is not blocking the web ports.



[#] Sat Jun 13 2020 08:19:12 EDT from easy now @ Uncensored

Subject: BerkeleyDB lib error while installing with Easy Install

[Reply] [ReplyQuoted] [Headers] [Print]

Hello All,

Easy Install throws an error while checking dependencies, like "Cannot locate a suitable Berkelydb library. Use --with-db=PATH to where it is installed" 

I then tried various ways to install with the given  --with-db various way but none worked. I thought the problem could be somehow different from what is given in the error since I believe (unless I've misunderstood the install process) Easy Install should download and install Berkeleydb itself. 

Suppose I need to install Berekeleydb and library myself, how do I use the --with-db=PATH with install command?
And, if Easy Install should download and install them, please advise me on how to deal with this error.

Server OS: Opensuse 15.1 Leap
Installed Java version: 8
Installed required and recommended libraries myself via yast
Command used: curl http://easyinstall.citadel.org/install | sh

Many thanks in advance.



[#] Sat Jun 13 2020 17:34:44 EDT from bgerum2 @ Uncensored

Subject: Re: BerkeleyDB lib error ...-- sieve2_license error

[Reply] [ReplyQuoted] [Headers] [Print]

Hi, I was using citadel on Opensuse sytems for several years, but I got into trouble two years ago when I upgraded from 42.3 I think.

I'm actually trying to set up a citadel server on Opensuse 15.1, too. Via easyinstall. I have no problems with berkeley db, I have the following packages installed:

db48-utils

libdb-4_8

libdb-4_8-devel

libgda-5_0-bdb

 

But I have a problem with sieve:

checking sieve2.h usability... yes
checking sieve2.h presence... yes
checking for sieve2.h... yes
checking for sieve2_license in -lsieve... no
configure: error: libsieve was not found and is required.  More info: http://www.citadel.org/doku.php/installation:start
 Citadel Easy Install is aborting.

 



[#] Sat Jun 13 2020 22:28:19 EDT from warbaby @ Uncensored

Subject: Re: - sieve2_license error

[Reply] [ReplyQuoted] [Headers] [Print]

Did you already have libsieve2 installed from a dev package?  If so, you might need to uninstall it with Yast, or whatever, then run easy install again..

From the tarball..  "This is NOT the real libSieve!  If you are really and truly working with libSieve then you want to go to http://libsieve.sourceforge.net and get the upstream sources.  libsieve-2.2.7-ctdl2 is a temporary fork of libsieve-2.2.7 that has had all of the lex and yacc stuff removed with a chainsaw so that it may be included with the "Easy Install" distribution of the Citadel system without requiring users to have lex (flex) and yacc (bison) installed. ...

 

Sat Jun 13 2020 05:34:44 PM EDT from bgerum2 @ Uncensored Subject: Re: BerkeleyDB lib error ...-- sieve2_license error

Hi, I was using citadel on Opensuse sytems for several years, but I got into trouble two years ago when I upgraded from 42.3 I think.

I'm actually trying to set up a citadel server on Opensuse 15.1, too. Via easyinstall. I have no problems with berkeley db, I have the following packages installed:

db48-utils

libdb-4_8

libdb-4_8-devel

libgda-5_0-bdb

 

But I have a problem with sieve:

checking sieve2.h usability... yes
checking sieve2.h presence... yes
checking for sieve2.h... yes
checking for sieve2_license in -lsieve... no
configure: error: libsieve was not found and is required.  More info: http://www.citadel.org/doku.php/installation:start
 Citadel Easy Install is aborting.

 



 



[#] Sun Jun 14 2020 16:52:16 EDT from bgerum2 @ Uncensored

Subject: Re: - sieve2_license error

[Reply] [ReplyQuoted] [Headers] [Print]

Yes, I did install libsieve via Yast because Easyinstall won't install the dependencies for me:

 Do you want Easy Install to attempt to install your OS dependencies? Y
sh: Zeile 341: [: ==: Einstelliger (unärer) Operator erwartet.
sh: Zeile 353: [: ==: Einstelliger (unärer) Operator erwartet.
 Easy Install does not yet know how to do this on your operating system.
 Citadel Easy Install is aborting.
 The last few lines above this message may indicate what went wrong.
 Linux 4.12.14-lp151.28.52-default( 4.12.14-lp151.28.52-default x86_64)

 

 

Sat Jun 13 2020 22:28:19 EDT from warbaby @ Uncensored Subject: Re: - sieve2_license error

Did you already have libsieve2 installed from a dev package?  If so, you might need to uninstall it with Yast, or whatever, then run easy install again..

From the tarball..  "This is NOT the real libSieve!  If you are really and truly working with libSieve then you want to go to http://libsieve.sourceforge.net and get the upstream sources.  libsieve-2.2.7-ctdl2 is a temporary fork of libsieve-2.2.7 that has had all of the lex and yacc stuff removed with a chainsaw so that it may be included with the "Easy Install" distribution of the Citadel system without requiring users to have lex (flex) and yacc (bison) installed. ...

 

Sat Jun 13 2020 05:34:44 PM EDT from bgerum2 @ Uncensored Subject: Re: BerkeleyDB lib error ...-- sieve2_license error

Hi, I was using citadel on Opensuse sytems for several years, but I got into trouble two years ago when I upgraded from 42.3 I think.

I'm actually trying to set up a citadel server on Opensuse 15.1, too. Via easyinstall. I have no problems with berkeley db, I have the following packages installed:

db48-utils

libdb-4_8

libdb-4_8-devel

libgda-5_0-bdb

 

But I have a problem with sieve:

checking sieve2.h usability... yes
checking sieve2.h presence... yes
checking for sieve2.h... yes
checking for sieve2_license in -lsieve... no
configure: error: libsieve was not found and is required.  More info: http://www.citadel.org/doku.php/installation:start
 Citadel Easy Install is aborting.

 



 



 



[#] Sun Jun 14 2020 16:58:17 EDT from warbaby @ Uncensored

Subject: Re: - sieve2_license error

[Reply] [ReplyQuoted] [Headers] [Print]

What happens if you answer N, right here?

  Do you want Easy Install to attempt to install your OS dependencies?

 

Sun Jun 14 2020 04:52:16 PM EDT from bgerum2 @ Uncensored Subject: Re: - sieve2_license error

Yes, I did install libsieve via Yast because Easyinstall won't install the dependencies for me:

 Do you want Easy Install to attempt to install your OS dependencies? Y
sh: Zeile 341: [: ==: Einstelliger (unärer) Operator erwartet.
sh: Zeile 353: [: ==: Einstelliger (unärer) Operator erwartet.
 Easy Install does not yet know how to do this on your operating system.
 Citadel Easy Install is aborting.
 The last few lines above this message may indicate what went wrong.
 Linux 4.12.14-lp151.28.52-default( 4.12.14-lp151.28.52-default x86_64)

 

 

Sat Jun 13 2020 22:28:19 EDT from warbaby @ Uncensored Subject: Re: - sieve2_license error

Did you already have libsieve2 installed from a dev package?  If so, you might need to uninstall it with Yast, or whatever, then run easy install again..

From the tarball..  "This is NOT the real libSieve!  If you are really and truly working with libSieve then you want to go to http://libsieve.sourceforge.net and get the upstream sources.  libsieve-2.2.7-ctdl2 is a temporary fork of libsieve-2.2.7 that has had all of the lex and yacc stuff removed with a chainsaw so that it may be included with the "Easy Install" distribution of the Citadel system without requiring users to have lex (flex) and yacc (bison) installed. ...

 

Sat Jun 13 2020 05:34:44 PM EDT from bgerum2 @ Uncensored Subject: Re: BerkeleyDB lib error ...-- sieve2_license error

Hi, I was using citadel on Opensuse sytems for several years, but I got into trouble two years ago when I upgraded from 42.3 I think.

I'm actually trying to set up a citadel server on Opensuse 15.1, too. Via easyinstall. I have no problems with berkeley db, I have the following packages installed:

db48-utils

libdb-4_8

libdb-4_8-devel

libgda-5_0-bdb

 

But I have a problem with sieve:

checking sieve2.h usability... yes
checking sieve2.h presence... yes
checking for sieve2.h... yes
checking for sieve2_license in -lsieve... no
configure: error: libsieve was not found and is required.  More info: http://www.citadel.org/doku.php/installation:start
 Citadel Easy Install is aborting.

 



 



 



 



Go to page: First ... 18 19 20 21 [22] 23 24 25 26 ... Last