Sat Dec 12 2020 18:54:19 EST from plawlor24 @ Uncensored Subject: Re: Authentication errors over SMTP

I've got a bit more information to add to this after some more troubleshooting...

I am running Citadel 929 with WebCit 926, server build 929.

I used telnet from a remote system to test SMTP authentication. I connected fine to both ports 25 and 587. Using a text-to-Base64 online converter, I was able to login using my administrator user successfully. I then used to "mail from:" command and used my administrator's Internet e-mail address - ok. I then used the "rcpt to:" command to define my target and the response come back, "You do not have permission to send Internet mail".

However, the "Permission to send Internet mail" check box is checked for all of my users. I also tried unsetting it, restarting server, and resetting it, and restarting server. Same behaviour whether the box is checked or not. Is this a bug in the UI? Is there a way to check this user setting through command line?

Thanks,

Peter

More troubleshooting info:

The above tests using command line Telnet where if I convert my username and password to Base64 myself, I can successfully login and send a local e-mail, but not an Internet e-mail.

What I've discovered, however, is that all SMTP clients I've tried can't even login. Citadel rejects the password even though I know it's right. If I capture what's being transferred, the password is converted text, but it's different than what I use when I manually convert to Base64. It results in an authentication error.

Peter

I've made some graphic intense, step-by-step, "How to navigate Citadel as a BBS on your first visit" documentation. 

It is up on my BBS at https://wallofhate.com

If there is any interest, I'll upload it here. A lot of my users were perplexed by the Citadel concept - so I think it will help them. I think it could be useful in general. 

..been seeing quite a few mentions of out of date documentation, offers of additions and so forth...

PLEASE:

It would be very helpful to me if everyone submitting those ideas would take a moment and make an individual posts in the

CITADEL DOCUMENTATION ROOM:  http://uncensored.citadel.org/dotgoto?room=Citadel%20Documentation

This work *is* going on, but I am running with a backlog. Therefore I am enlisting your assistance to be clear, succinct, and syntactically accurate.

If you will be so kind as to make nice posts there, 1 per issue with a relevant subject line...

This will prevent me from having to go back through the bodies of endless posts here, looking for documentation issues like a small bird, digging for berries in many bear dungs. 

Thank  you, for helping a brother out.

Been pretty polite up to this point.. 

and even now don't mean to be rude, but also consider, this mailing list is A RESOURCE that quite a few people use..

NOT your personal BLOG.

And by disregarding this simple request, you are jacking up the resource for the entire community.

Also, the reason your SSL is jacked up is because you are not using standard ports.

All web browsers look for web pages on port 80, unless the https scheme is used, then the default is 443.

By using non-standard ports you are, in a word, hiding, your webcit from your users.

This can be easily fixed by using nginx as a proxy, and let's encrypt. 

It is very easy.

1) Install nginx, certbot, and the certbot nginx plugin.

2) certbot nginx -d mydomain.org

3) edit the default config in /etc/nginx/sites-enabled:

4) location / { proxypass localhost:myport;}

5) add a cronjob, certbot renew

6) Also cron the script mv-certs-to-citadel.sh <mydomain.org>

7) Have valid certs, and never worry about certs again.

OR

If you like using non-standard ports, virtually guaranteeing nobody can ever find  you..

..you can just use one of the many other certbot authentication methods and

mv-certs-to-citadel.sh [attached]

Sat Dec 12 2020 06:40:45 PM EST from ParanoidDelusions @ Uncensored

Website documentation needs to be updated. 

openssl genrsa -out citadel.key 1024 will generate the errors I was seeing, because modern browsers consider a 1024 bit cypher key insecure. 

openssl genrsa -out citadelkey 2048 (or higher) will fix the issue. 

I'm up. The landing page is working right. RSS feeds are working right, I think... I'm going to test - the extended performance and reliability issues have driven away virtually all of my users... 

But it all seems to be working over at secure.wallofhate.com

openssl genrsa -out citadel.key 1024 

Absolutely. 

I'd like to add - as an end-user - it isn't really clear where a post like this should go. The "Citadel Documentation," room seems like an "official developer documentation thread," where people directly involved in the project are following a template for posting bug notifications and updates - and I'm personally hesitant to wade into a forum like that with my casual observations as it can clutter up serious discussion and posts with, "DiS iZ b0rK3n3D, p1uZ3 F1x!" posts. 

There may be other users who feel the same way. Developer and Project forums can be intimidating to people who aren't directly a part of the project... 

Sun Dec 13 2020 07:48:55 EST from warbaby @ Uncensored Subject: Please use the Documentation room for Docu/Website updates...

 

Thank  you, for helping a brother out.

Noted. I apologize that the anarchy of my troubleshooting process has disrupted this room. 

Sun Dec 13 2020 09:00:45 EST from warbaby @ Uncensored Subject: Paranoid Delusions needs to learn what a subject line is..

Been pretty polite up to this point.. 

and even now don't mean to be rude, but also consider, this mailing list is A RESOURCE that quite a few people use..

NOT your personal BLOG.

 

 

 

Sat Dec 12 2020 19:02:55 EST from IGnatius T Foobar @ Uncensored Subject: Re: user names and domains

I'm trying to replace an ancient windows mailserver setup with a new
raspi4 and citadel. I initially chose this email package because I
saw the multi domain function.  From what I've sorted so far with it
installed, the citadel users are unique names and can receive on any
domain instead of per domain. I have 4 domains in my group and 3 of
them have sales@domain.com accounts for example. I'm assuming there
is not a way for them to have the same email username and go to
unique citadel users accounts at different domains from what I've
read now?

Think of it from the other direction. You can attach as many email domains as you like to your Citadel server. Then you can attach any address in any domain to any account.

So yes, you could attach, for example, "fred@foobar.com" to "Fred Jones" while at the same time "fred@amiga.org" could be attached to "Fred Fish".

A user's default address will be the one generated by the system, but you can change it at any time.

I think I gotcha. So there is a way which is what I wanted to know.  I'll try again shortly and see if I can connect these dots.

Thanks for your help good sir Foobar!

DDZ

I am subscribed to the Citadel Support mailing list for many years but want to unsubscribe. I have searched for how to do this but cannot find any instructions. Unlike most mailing lists, the mailinglist messages do not include any unsubscribe instructions. Can anyone direct me to the correct instructions?

I am subscribed to the Citadel Support mailing list for many years but want to unsubscribe. I have searched for how to do this but cannot find any instructions. Unlike most mailing lists, the mailinglist messages do not include any unsubscribe instructions. Can anyone direct me to the correct instructions?

I am subscribed to the Citadel Support mailing list for many years but want to unsubscribe. I have searched for how to do this but cannot find any instructions. Unlike most mailing lists, the mailinglist messages do not include any unsubscribe instructions. Can anyone direct me to the correct instructions?

Hi,

In one of my latest Citadel installations (Citadel 929 with WebCit 926, server build 929), after a while I noticed a strange error message when clicking on the "View the outbound SMTP queue" option.

Directly under the title: 

but other than that, everything seems to work fine and outgoing emails are listed as should.

Today, following what seemed to be a brute force attack (circumstantial, could be unrelated), the server crashed and wouldn't start with the log mentioning that the databases are corrupt. Trying to repair the databases using db_recover and then database_cleanup.sh did not work. So I reinstalled again using EasyInstall, which worked - and all data was saved, which was grate.

BUT - the error message in the SMTP Queue is still there...

Any ideas what's going on?

Thank you so much - and HAPPY HOLIDAYS! 

Hi everyone,

I'm setting up a mesh network and plan on running Citadel as a part of it. The plan is to run everything that I can on virtual machines that are hosted on ESXi on an IBM System x3550 rack server. My first question is will this work? My second question is how much disk space and memory will I need to allocate for this? It will mainly be a relay to another email address and in the future maybe 20 accounts.

Thanks and have a great night. :)

Patrick.

Hi everyone,

I'm setting up a mesh network and plan on running Citadel as a part of it. The plan is to run everything that I can on virtual machines that are hosted on ESXi on an IBM System x3550 rack server. My first question is will this work? My second question is how much disk space and memory will I need to allocate for this? It will mainly be a relay to another email address and in the future maybe 20 accounts.

Thanks and have a great night. :)

Patrick.

P.S. I didn't realize that after I "logged in" it took me to the Lobby instead of returning me here. Feel free to flame away. :)

Citadel will run just fine on ESXi.  I have done it many times.  Just install a stock Linux OS in a virtual machine (Debian will do nicely) and run the Easy Install.  You will be up and running in no time.

Hello!

Once I was running openmediavault (NAS software) and citadel-suite on one and the same x86-computer running debian 8 and it worked fine.

Now that I want to run these applications on an arm64-computer with debian 10 installed (infact its armbian) it seems to be impossible. Any time I try to install citadel-suite or citadel-server while running openmediavault the package manager wants to remove openmediavault first.

The problem could be the mail-transport-agent that openmediavault needs to install and which is conflicting with citadel.

Is there a solution to the problem such that both applications can run together on one host?

Kind regards

Markus

Hallo,

I want to use a Raspi 4 8GB with Raspian as an Citadel-Server.

I need a configuration as on my raspi 3 with fetchmail, citadel and postfix.

The original debian package installs as a citadel-MTA and kills postfix. So I tried to install with easyinstall, but the Result is not right:

I need help!

Installing libcitadel...
checking build system type... conftools/config.guess: unable to guess system type

This script, last modified 2006-07-02, has failed to recognize
the operating system you are using. It is advised that you
download the most up to date version of the config scripts from

  http://savannah.gnu.org/cgi-bin/viewcvs/*checkout*/config/config/config.guess
and
  http://savannah.gnu.org/cgi-bin/viewcvs/*checkout*/config/config/config.sub

If the version you run (conftools/config.guess) is already up to date, please
send the following data and any information you think might be
pertinent to <config-patches@gnu.org> in order to provide the needed
information to handle your system.

config.guess timestamp = 2006-07-02

uname -m = aarch64
uname -r = 5.4.79-v8+
uname -s = Linux
uname -v = #1373 SMP PREEMPT Mon Nov 23 13:32:41 GMT 2020

/usr/bin/uname -p =
/bin/uname -X     =

hostinfo               =
/bin/universe          =
/usr/bin/arch -k       =
/bin/arch              =
/usr/bin/oslevel       =
/usr/convex/getsysinfo =

UNAME_MACHINE = aarch64
UNAME_RELEASE = 5.4.79-v8+
UNAME_SYSTEM  = Linux
UNAME_VERSION = #1373 SMP PREEMPT Mon Nov 23 13:32:41 GMT 2020
configure: error: cannot guess build type; you must specify one
 Citadel Easy Install is aborting.
 The last few lines above this message may indicate what went wrong.
 Linux Debian 10.7( 5.4.79-v8+ aarch64)

tabbi

There are instructions on my Citadel, wallofhate.com on how to install Citadel on a Pi 3B+.

I can't help you with fetchmail and postfix and if there may be library conflicts with that part of it - but I'd think getting Citadel installed and running first might be the best first step toward achieving what you want.

Wed Dec 30 2020 05:49:30 EST from tabbi Subject: citadel on a raspi 4 64bit?

Hallo,

 

I want to use a Raspi 4 8GB with Raspian as an Citadel-Server.

I need a configuration as on my raspi 3 with fetchmail, citadel and postfix.

I would absolutely NOT recommend using the distro packages. I had no luck with that route. Easy Install is always the way to go - the distros aren't well enough maintained to use the apt packages to install a correctly working instance of Citadel - especially on Raspbian.