Bug#722592: amanda-server: Inability to read one header stops entire amvault run

2013-09-12 Thread Will Aoki
Package: amanda-server
Version: 1:3.3.1-4
Severity: normal

If amvault is unable to read the header from one dump, then rather than
continuing on to the rest, it stops the entire run, reporting "Problem reading
Amanda header: EOF". This means that a single error reading source data (in my
chg-disk case, a single zero-length file) will stop the amvault operation, even
if subsequent dumps or tapes are okay.

-- System Information:
Debian Release: 7.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash

Versions of packages amanda-server depends on:
ii  amanda-common  1:3.3.1-4
ii  bsd-mailx [mailx]  8.1.2-0.2006cvs-1
ii  libc6  2.13-38
ii  libcurl3   7.26.0-1+wheezy3
ii  libglib2.0-0   2.33.12+really2.32.4-5
ii  libssl1.0.01.0.1e-2

amanda-server recommends no packages.

Versions of packages amanda-server suggests:
ii  amanda-client  1:3.3.1-4
ii  cpio   2.11+dfsg-0.1
ii  gnuplot4.6.0-8
ii  mt-st  1.1-4
ii  perl [perl5]   5.14.2-21

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20130912160247.63820.50683.report...@backup1.nhmu.utah.edu



Bug#496931: amanda-client: amrecover should prompt for passwords when using amcrypt-ossl-asym (and other encryption plugins)

2013-04-10 Thread Will Aoki
fixed #496931 1:3.3.1-3~bpo60+1
thanks

This appears to work in the current version available in
squeeze-backports.


-- 
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20130410212138.go30...@umnh.utah.edu



Bug#714384: amanda-client: NT_STATUS_ACCESS_DENIED causes SMB backup to fail completely rather than report warnings after upgrade

2013-06-28 Thread Will Aoki
Package: amanda-client
Version: 1:3.3.1-4
Severity: normal

After upgrading from squeeze (with 1:3.3.1-3~bpo60+1) to wheezy, SMB
dumps fail with:

> FAILURE DUMP SUMMARY:
>   backup1.nhmu.utah.edu //someserver/ambak lev 0  FAILED [/usr/bin/smbclient 
> exited with status 1: see 
> /var/log/amanda/client/umnh-set/sendsize.20130628001003.debug]

with this in the log:

> Fri Jun 28 00:16:44 2013: thd-0x18a5400: sendsize: no size line match in 
> /usr/bin/smbclient output for //someserver/ambak

if anything on the client returns NT_STATUS_ACCESS_DENIED. This means
that AMANDA will fail to backup the entire DLE, even if only one
directory is unreadable.

Previously, this situation would cause warnings mentioning
NT_STATUS_ACCESS_DENIED but would not cause the entire dump to fail.

-- System Information:
Debian Release: 7.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash

Versions of packages amanda-client depends on:
ii  amanda-common  1:3.3.1-4
ii  libc6  2.13-38
ii  libcurl3   7.26.0-1+wheezy3
ii  libglib2.0-0   2.33.12+really2.32.4-5
ii  libreadline6   6.2+dfsg-0.1
ii  libssl1.0.01.0.1e-2

amanda-client recommends no packages.

Versions of packages amanda-client suggests:
pn  dump   
ii  gnuplot4.6.0-8
ii  smbclient  2:3.6.6-6

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-qa-packages-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20130628170723.gj29...@umnh.utah.edu



Bug#869666: SYSERR(root): timeout writing message to

2018-03-23 Thread Will Aoki
We can confirm the same problem and that it was fixed by downgrading the
sendmail packages to 8.14.4-8+deb8u2. The problem's a bit tricky in that
the log message suggests that the destination server is at fault, where
it's really Sendmail trying to look up names in To: that aren't in the
envelope.

sendmail.mc with most comments removed:

define(`_USE_ETC_MAIL_')dnl
include(`/usr/share/sendmail/cf/m4/cf.m4')dnl
VERSIONID(`$Id: sendmail.mc, v 8.13.4-3 2005-06-03 16:49:22 cowboy Exp $')
OSTYPE(`debian')dnl
DOMAIN(`debian-mta')dnl
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
undefine(`confHOST_STATUS_DIRECTORY')dnl#DAEMON_HOSTSTATS=
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
FEATURE(`no_default_msa')dnl
DAEMON_OPTIONS(`Family=inet,  Name=MTA-v4, Port=smtp')dnl
DAEMON_OPTIONS(`Family=inet,  Name=MSP-v4, Port=submission')dnl
define(`SMTP_MAILER_MAXRCPTS', 10)
define(`confMAX_DAEMON_CHILDREN', 150)dnl
define(`confPRIVACY_FLAGS',dnl
`needmailhelo,needexpnhelo,needvrfyhelo,restrictqrun,restrictexpand,nobodyreturn,authwarnings')dnl
KDNSTXT dns -R TXT
C{BadIdentUsers}squid CacheFlowServer proxyuser
define(`confBIND_OPTS', `')dnl
define(`confCONNECTION_RATE_THROTTLE', `15')dnl
define(`confCONNECTION_RATE_WINDOW_SIZE',`10m')dnl
FEATURE(`access_db', , `skip')dnl
FEATURE(`greet_pause', `1000')dnl 1 seconds
FEATURE(`delay_checks', `friend', `n')dnl
define(`confBAD_RCPT_THROTTLE',`3')dnl
FEATURE(`conncontrol', `nodelay', `terminate')dnl
FEATURE(`ratecontrol', `nodelay', `terminate')dnl
define(`confMAX_MESSAGE_SIZE', 5000)
FEATURE(`blacklist_recipients')dnl
FEATURE(`mailertable')dnl
FEATURE(`virtusertable')dnl
FEATURE(use_cw_file)dnl
FEATURE(use_ct_file)dnl
include(`/etc/mail/tls/starttls.m4')dnl
include(`/etc/mail/sasl/sasl.m4')dnl
define(`confAUTH_OPTIONS', `p,y')dnl
FEATURE(`always_add_domain')dnl
MASQUERADE_AS(`my-domain.example.com')dnl
FEATURE(`allmasquerade')dnl
FEATURE(`masquerade_envelope')dnl
FEATURE(`dnsbl', `zen.spamhaus.org', `$>GetTXT $&{client_addr} $| 
zen.spamhaus.org $| Host $| " blocked: see " $| for details')
define(`confMILTER_MACROS_ENVRCPT', `{rcpt_mailer}, {rcpt_host}, {rcpt_addr}, 
b')
INPUT_MAIL_FILTER(`greylist',`S=local:/path/to/milter-greylist.sock', F=, 
T=C:6s;E:12s)dnl
INPUT_MAIL_FILTER(`clmilter',`S=local:/path/to/clmilter.sock, F=, 
T=C:70s;E:4m')dnl
INPUT_MAIL_FILTER(`spamassassin', `S=local:/path/to/spamass.sock, F=, 
T=C:2m;R:2m;E:8m')dnl
define(`confINPUT_MAIL_FILTERS', `greylist, clmilter, spamassassin')
MAILER_DEFINITIONS
MAILER(`local')dnl
MAILER(`smtp')dnl
LOCAL_RULESETS
SGetTXT
R$-.$-.$-.$- $| $+ $| $+ $| $+ $| $+$: $6 $1.$2.$3.$4 $7 $(DNSTXT 
$4.$3.$2.$1.$5 $) $8
SLocal_check_relay
R$* $: $(dequote "" $&_ $)
RIDENT:$*   $: $1
R$={BadIdentUsers}@$*   $#error $@ 5.7.1 $: "550 Access denied because 
your ident string is " $1
LOCAL_CONFIG
O 
CipherList=ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:HIGH:ECDHE-RSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA:RC4-SHA:!aNULL:!MD5
O ServerSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3 
+SSL_OP_CIPHER_SERVER_PREFERENCE



Bug#869666: SYSERR(root): timeout writing message to

2018-03-23 Thread Will Aoki
On Fri, Mar 23, 2018 at 10:03:40AM -0600, Will Aoki wrote:
> We can confirm the same problem and that it was fixed by downgrading the
> sendmail packages to 8.14.4-8+deb8u2. The problem's a bit tricky in that
> the log message suggests that the destination server is at fault, where
> it's really Sendmail trying to look up names in To: that aren't in the
> envelope.

This appears to be a change in 8.15.1 regarding header rewriting, and
several other folks were caught by surprise:

https://forums.freebsd.org/threads/timeout-writing-message-to-local.55563/
https://groups.google.com/forum/#!topic/comp.mail.sendmail/_Io7xEYqF1s

To deal with this, it's necessary to turn off hostname canonicalization.
As I understand it,

Khost host -t

should result in the previous behavior, but the documentation recommends
turning off hostname canonialication with

FEATURE(`nocanonify')

This change does work, although I haven't yet tested operationally to
verify nothing of ours was relying on the old behavior.