search for: djb

Hello! I've tried to set up dovecot in conjuction with vpopmail, and running it under djb's tcpserver instead of (x)inetd. Btw - there was no reference to setting dovecot up using (x)inetd either in the manuals/faqs i read, though I didn't search all that hard. Anyway, back to my Q: vpopmail uses vchkpw as an authentication mechanism, and with tcpserver I can do relaycontrol (...

...cot: auth(default): new auth connection: pid=2449 dovecot: auth(default): client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=43458#011resp=<hidden> dovecot: auth(default): ldap(foo,127.0.0.1): pass search: base=uid=foo,ou=people,dc=djb,dc=hell,dc=qua scope=base filter=(accountStatus=noaccess) fields=(none) slapd[1834]: conn=1083 op=1 SRCH base="uid=foo,ou=people,dc=djb,dc=hell,dc=qua" scope=0 deref=0 filter="(accountStatus=noaccess)" slapd[1834]: conn=1083 op=1 SRCH attr=(none) slapd[1834]: conn=1083 op=1 SEAR...

Is this available for Centos? If so where?

I am attempting to get a script borrowed from DJB to work on my CentOS-6.6 box. Simplified it looks like this: tcpdump -l -n -e port 53 \ | awk '{if ($14 ~ /A.*?/) print $15}' \ | while read domain ; do echo $domain ; done ; The sticking point is the 'while read' construct. Run just as 'tcpdum | awk' I get this: en...

> Sorry - I once was sold on the idea of djb's tools and Qmail, and I've > regretted installing it ever since. Save yourself some serious agony - run > (don't walk!) away from djb-ANYTHING! I don't know what problems you had with it, but I'm hapilly using it on about 20 servers (both djbdns and qmail) and never had...

If you are using Bind as your caching name server, please take note. http://www.net-security.org/secworld.php?id=5366 I use DJB's dnscache so I could care less.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hey, I am trying to get spf working and it just doesn't want to take. On my Tiny/DJB server it was easy. Anyway here is my entry. $ORIGIN net. itadmins 14400 IN SOA ns1.itadmins.net. hostmaster.itadmins.net. ( 2012102201 16384 2048 1048576 2560 ) 14400 IN A 178.15.51.221 14400 IN MX 10 mail.itadmins.net....

You probably know this already, but the following notice appeared to bugtraq. As a side note the protocol on bugtraq seems to be designed to make a fix available before the announcement by providing one yourself or giving the maintainer a week's advance warning (M$ gets a lot longer warning and *still* fails to fix the bugs before bugtraq knows). Having said that M$ insists on allowing me

...and custom built httpd/mysql/etc (I was young). It worked ok but time to move on and I don't have time to maintain all those packages. I also don't have time to write another CP or port my PoS to it. I'm also just going to use the default packages (bind, postfix, etc) instead of the DJB stuff. Main requirements are fairly straightforward: 1. able to add/manage domains, ssl cert management, manage DNS records 2. able to manage email accounts and anti-spam settings 3. able to add/manage mysql and pgsql (nice to have) 4. user management - ftp/ssh accounts, password change, etc. 5....

Here is my first major problem with dovecot. I am running rc15 on FreeBSD 6.1. I run dovecot supervised by DJB's daemontools. I run only the pop3 service. A colleague informed me that pop3 service was simply not responding. They could not rcv mail. When I checked the server, tail-ing dovecot.log, here is what was scrolling: [wash at nbi ~]$ tail -f /var/log/dovecot.log dovecot: Nov 23 18:04:11 Info:...

I was trying to figure out why my false-positive spam messages were being tagged as "personal" by thunderbird, and I noticed a possible problem. According to DJB: http://cr.yp.to/proto/maildir.html > New flags may be defined later. Flags must be stored in ASCII order: e.g., "2,FRS". Looking at my maildir, I am seeing flags out of order, such as "2,Sdae" Shouldn't that be "2,Sade"? -Aaron

...nd deligating DNS. dnscache delegates DNS for the samba4 domain to the samba4 internal DNS. What this does for us is get resolving dns in front of samba4, doesn't required BIND, and doesn't rely upon the relatively new dns code in Samba4. It's a pity the Samba team didn't look ad djb DNS instead of DNS masq when working to implement AD DNS in Samba 4. They could have saved themselves quite alot of work. djb DNS is very solid and light weight and does everything BIND will do: http://cr.yp.to/djbdns.html

...er to /etc/passwd with useradd then use the smbldap-useradd script to add a user to LDAP it works fine. I've tried to tweak PAM and NSS to read ldap and it looks to work via `getent passwd` test. I can also see my users in ldap when I do ldapsearch for the same thing Samba does. Any ideas? /djb

Looks like maildir can't be used very realiably without quite a lot of locking. Writing and scanning the directory would have to be locked, but reading wouldn't (as long as the file hasn't been renamed which would require scanning to find it). So much for "no locks needed".. The problem is that opendir()/readdir() may temporarily not return some files if there has been

I''m re-reading the section on dns names in the shorewall docs: "I personally recommend strongly against using DNS names in Shorewall configuration files. If you use DNS names and you are called out of bed at 2:00AM because Shorewall won''t start as a result of DNS problems then don''t say that you were not forewarned." Having been stung by this a few times

Greetings, I''ve two questions for y''all. 1) I''ve setup an alternate installation path for puppet in a site local directory outside of ''the usual places''. Puppetd seems to insist that /etc/puppet/namespaceauth.conf exists despite setting :authconfig in both puppet and puppetd. As a result part of my installation now includes a symlink to point

...ers, I've worked this week on an alternative key exchange mechanism, in reaction to the whole NSA leaks and claims over cryptographic backdoors and/or cracking advances. The key exchange is in my opinion the most critical defense against passive eavesdropping attacks. I believe Curve25519 from DJB can give users a secure alternative to classical Diffie-Hellman (with fixed groups or group exchanges) and NIST-approved elliptic curves. Here is the rationale from the small specifications draft I wrote, available on http://tinyurl.com/q22npph : The reason is the following : During summer of 201...

Rsync team, and interested parties: i was attempting to get rsync to launch from tcpserver[0] (an inetd replacement from djb) and log to stderr for logging via multilog[1] (syslog replacement by djb) and i was unable to get it to log to stdout/ stderr at all. [0] http://cr.yp.to/ucspi-tcp/tcpserver.html [1] http://cr.yp.to/daemontools/multilog.html i have attached a patch that allows ``log file=/dev/stderr'...

Am 02.12.2014 um 19:05 schrieb James B. Byrne: > I am attempting to get a script borrowed from DJB to work on my CentOS-6.6 > box. Simplified it looks like this: > > tcpdump -l -n -e port 53 \ > | awk '{if ($14 ~ /A.*?/) print $15}' \ > | while read domain ; do echo $domain ; done ; > > The sticking point is the 'while read' construct. Run just as ...

On Tue, Dec 2, 2014 at 2:19 PM, Alexander Dalloz <ad+lists at uni-x.org> wrote: > Am 02.12.2014 um 19:05 schrieb James B. Byrne: > >> I am attempting to get a script borrowed from DJB to work on my CentOS-6.6 >> box. Simplified it looks like this: >> >> tcpdump -l -n -e port 53 \ >> | awk '{if ($14 ~ /A.*?/) print $15}' \ >> | while read domain ; do echo $domain ; done ; >> >> The sticking point is the 'while read'...