From trs80 at ucc.gu.uwa.edu.au Sat Feb 21 00:10:47 2009 From: trs80 at ucc.gu.uwa.edu.au (James Andrewartha) Date: Sat, 21 Feb 2009 00:10:47 +0900 (WST) Subject: [tech] mussel upgrades and koha Message-ID: Hi all, As you may have noticed due to the various things that broke today, mussel got upgraded to lenny. [MSH] accidentally upgraded a few packages to lenny yesterday, but what precipitated the upgrade was [PXY] looking into Koha's malfunctioning and finding the errors were "fetchrow failed: fetch() without execute()", and hypothesised that it was from an old version of Koha talking to a new version of MySQL. So I embarked upon a full upgrade of mussel so I could install the latest Koha. Along the way I broke the website several times (now fully fixed, thanks to libapache2-mod-ldap-userdir and http://bugs.debian.org/515952), the adduser script wasn't functional for about an hour, smbk5pwd no longer works (although I have recompiled packages waiting) so smb.conf on musundo has ldap passwd sync = yes instead of only, and the horde configuration needs regeneration, but when I tried to do so it just zeroed conf.php instead. Also I pkg-get -i zsh as winadduser called /opt/csw/bin/zsh instead of /bin/zsh for some reason. If you notice anything still broken, please email tech, talk to someone on #ucc, or file a ticket at https://secure.ucc.asn.au/glpi/ Once all that was done, I installed Koha 3 which took an inordinately long time to copy a hojillion identical files into each locale directory, twice, and then failed to work and ate the website (again). I read the docs some more and tried running the upgrade script, but it failed with exactly the same sort of errors the day started with. At this point I have stopped caring about Koha and someone else can try dealing with it. The only recommendation I can give would be to dump the db, restore from the backup and try upgrading immmediately. -- # TRS-80 trs80(a)ucc.gu.uwa.edu.au #/ "Otherwise Bub here will do \ # UCC Wheel Member http://trs80.ucc.asn.au/ #| what squirrels do best | [ "There's nobody getting rich writing ]| -- Collect and hide your | [ software that I know of" -- Bill Gates, 1980 ]\ nuts." -- Acid Reflux #231 / From zanchey at ucc.gu.uwa.edu.au Sun Feb 22 14:28:36 2009 From: zanchey at ucc.gu.uwa.edu.au (David Adam) Date: Sun, 22 Feb 2009 14:28:36 +0900 (WST) Subject: [tech] mussel upgrades and koha In-Reply-To: References: Message-ID: On Sat, 21 Feb 2009, James Andrewartha wrote: > > As you may have noticed due to the various things that broke today, mussel > got upgraded to lenny. [MSH] accidentally upgraded a few packages to lenny > yesterday, but what precipitated the upgrade was [PXY] looking into Koha's > malfunctioning and finding the errors were "fetchrow failed: fetch() > without execute()", and hypothesised that it was from an old version of > Koha talking to a new version of MySQL. So I embarked upon a full upgrade > of mussel so I could install the latest Koha. > > If you notice anything still broken, please email tech, talk to someone on > #ucc, or file a ticket at https://secure.ucc.asn.au/glpi/ RADIUS is broken, which means the PPTP VPN (pptp.ucc/snap.ucc) refuses to authenticate users. I'm not really sure what's going on - the proximal cause appears to be: --- rlm_eap: Ignoring EAP-Type/peap because we do not have OpenSSL support. Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } rlm_eap: No such sub-type for default EAP type peap --- but PEAP was apparently disabled with OpenSSL removal in the Debian version 1.0.0-1, and we've been running 1.1.3-3 successfully for a while. Not really sure what's going on here, and I don't have a huge amount of time to fiddle around. RADIUS is pretty nasty and FreeRADIUS has a sprawling and complex set of configuration files but if anyone has any suggestsion or wants to take a crack let me know. David Adam UCC Wheel Member zanchey at ucc.gu.uwa.edu.au From theodore.therone at gmail.com Mon Feb 23 11:19:35 2009 From: theodore.therone at gmail.com (Samuel Spencer) Date: Mon, 23 Feb 2009 11:19:35 +0900 Subject: [tech] olive password Message-ID: <2a6d4a040902221819p22f3ce0ief22928841a7264e@mail.gmail.com> Rufus asked me to have a look at olive (the cisco 2900) and get it working. If someone can give me the enable and config passwords and point my in the direction of a serial cable i'll fix it up today. Sam. -- --- Insert witty signature here --- From zanchey at ucc.gu.uwa.edu.au Mon Feb 23 19:14:12 2009 From: zanchey at ucc.gu.uwa.edu.au (David Adam) Date: Mon, 23 Feb 2009 19:14:12 +0900 (WST) Subject: [tech] mussel upgrades and koha In-Reply-To: References: Message-ID: On Sun, 22 Feb 2009, David Adam wrote: > On Sat, 21 Feb 2009, James Andrewartha wrote: > > > > As you may have noticed due to the various things that broke today, mussel > > got upgraded to lenny. [MSH] accidentally upgraded a few packages to lenny > > yesterday, but what precipitated the upgrade was [PXY] looking into Koha's > > malfunctioning and finding the errors were "fetchrow failed: fetch() > > without execute()", and hypothesised that it was from an old version of > > Koha talking to a new version of MySQL. So I embarked upon a full upgrade > > of mussel so I could install the latest Koha. > > > > If you notice anything still broken, please email tech, talk to someone on > > #ucc, or file a ticket at https://secure.ucc.asn.au/glpi/ > > RADIUS is broken, which means the PPTP VPN (pptp.ucc/snap.ucc) refuses to > authenticate users. I'm not really sure what's going on - the proximal > cause appears to be: > > but PEAP was apparently disabled with OpenSSL removal in the Debian > version 1.0.0-1, and we've been running 1.1.3-3 successfully for a while. > > Not really sure what's going on here, and I don't have a huge amount of > time to fiddle around. RADIUS is pretty nasty and FreeRADIUS has a > sprawling and complex set of configuration files but if anyone has any > suggestsion or wants to take a crack let me know. OK, this is fixed now, and the VPN should be working again. FreeRADIUS was upgraded to 2.0.4, with some subtle rearrangments of the configuation files. This was causing all sorts of interesting issues with the config files, so first I copied all the new files over the old ones. Some changes needed to be made to ldap.attrmap to match the Samba LDAP schema. The LDAP server details were added to the configuration, and mschapv2 set as the default EAP method (PEAP is not required, that was a red herring). Requests were still failing with this message from freeradius: rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for test with NT-Password rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect Further inspection showed that the server was not requesting the sambaNTPassword attribute from LDAP, because 'ldap' was not set in the 'authorize' section. This is in direct opposition to what the comments above the ldap stanza in the authorize section say, but there you go. David Adam UCC Wheel Member zanchey@ From splintax at ucc.asn.au Thu Feb 26 18:38:54 2009 From: splintax at ucc.asn.au (Scott Young) Date: Thu, 26 Feb 2009 18:38:54 +0900 Subject: [tech] Usernames in dispense Message-ID: <1ae2edda0902260138m137a5e39q7bf38a4129b28e81@mail.gmail.com> It seems like there's a bug in dispense that allows you to query (with `dispense acct`) non-existent accounts with the same name as an existing account, but different capitalization: $ dispense acct splintax Splintax $-16.62 (minus no bytes) $ dispense acct Splintax Splintax $ 0.00 (minus no bytes) $ dispense acct SplIntAx +1 "test" SplIntAx $ 0.01 (minus no bytes) $ dispense acct Splintax Splintax $ 0.00 (minus no bytes) Dispense capitalizes the first letter of your username regardless of whether or not it's capitalized in your command, which makes things even more confusing. Just thought I'd send a quick email out to ask all coke members to make sure they only dispense to lower-case usernames. (I stumbled across this by running `dispense acct Zanchey`.) I'm not sure whether there are people out there interested in fixing bugs in dispense. [SJY] From coxymla at gmail.com Fri Feb 27 11:32:29 2009 From: coxymla at gmail.com (James Cox) Date: Fri, 27 Feb 2009 11:32:29 +0900 Subject: [tech] Nautilus and OS X Server Message-ID: Hey all, Does anybody remember rightly whether Nautilus still has Mac OS X Server v1.2 installed? I think it must still also have its 10.2 partition from when it was retired, too. Cheers, [RME]~Coxy