- Arch-general - lists.archlinux.org

[arch-general] pambase update now requires explicit service files in /etc/pam.d/ - dovecot affected
by David C. Rankin 24 Feb '19

24 Feb '19

All, With the latest change to pambase, e.g. https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/pam… if you have services that rely on pam authentication, such as dovecot, etc.., you will find that your applications an no longer authenticate using pam until you install a specific pam service in /etc/pam.d for that application, e.g. https://wiki.archlinux.org/index.php/Dovecot#PAM_Authentication I recall seeing something about this change coming earlier, but this was the first update where something stopped working as a result. So add whatever additional files you require to /etc/pam.d/ Thankfully the journal messages are good in pointing out the problem. -- David C. Rankin, J.D.,P.E.

10 11

[arch-general] pambase in testing breaks email
by Genes Lists 24 Feb '19

24 Feb '19

pambase 20190105.1-1 caused bad failure for email. The error I saw immediately was from postfix failing to authenticate users via saslauthd which in turn blames pam. Downgrading back to 20171006-1 restores email funtioning ok. Logs say: saslauthd[22214]: pam_warn(smtp:auth): function=[pam_sm_authenticate] flags=0x8000 service=[smtp] terminal=[<unknown>] user=[lists] ruser=[<unknown>] rhost=[<unknown>] saslauthd[22214]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure saslauthd[22214]: do_auth : auth failure: [user=lists] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error]

2 4

[arch-general] pambase - creating needed files for apps with normal user auth - pam_unix.so?
by David C. Rankin 24 Feb '19

24 Feb '19

All, After the pambased defaults change, I thought I had gotten everything fixed, today scanning to server via vsftpd issued: Feb 19 12:19:49 phoinix vsftpd[8652]: pam_warn(ftp:auth): function=[pam_sm_authenticate] flags=0 service=[ftp] terminal=[ftp] user=[sharp] ruser=[sharp] rhost=[192.168.7.20] My question is what do I put in /etc/pam.d/vsftpd? Looking at some of the other entries, it seems I can do something with pam_unix.so like screen: $ cat screen auth required pam_unix.so or $ cat dovecot auth required pam_unix.so nullok account required pam_unix.so Since my user (the copier) has a normal Unix account and password, is there any benefit to using the dovecot style with both "auth required" and "account required" or is the "auth required" sufficient like screen uses? -- David C. Rankin, J.D.,P.E.

4 6

[arch-general] what are you up to?
by ekardnam 23 Feb '19

23 Feb '19

hey would love to contribute in the development of the arch linux community! what are you up to by now?

2 2

[arch-general] Can't start mariadb and avahi anymore, cannot connect users
by leoutation＠gmx.fr 20 Feb '19

20 Feb '19

Hi Yesterday, it seems i broke something in my system: Arch is updated. Linux-lts kernel. I can't connect users in tty. Mariadb and avahi-daemon don't start at boot. I can't start them manually too using systemctl. But I can connect as root. Other services are started normally: ntpd, connmand, bumblebeed, syslog-ng or metalog, sshd. I don't use any login manager like gdm. I don't use X, i use only tty, wayland and enlightenment-git. I remember i killed by hand yesterday in the evening ssh-agent processes. Problem came after that but may be a coincidence... It's a permission issue. I don't find any solution to debug it. I have good symlinks in /var ls /var -1 -p cache/ db/ empty/ games/ lib/ local/ lock -> /run/lock log/ mail -> spool/mail net-snmp/ opt/ run -> /run spool/ tmp/ Syslog message Feb 19 14:54:27 nalik systemd[965]: mariadb.service: Failed to connect stdout to the journal socket, ignoring: Permission denied Feb 19 14:54:27 nalik systemd[966]: mariadb.service: Failed to connect stdout to the journal socket, ignoring: Permission denied Feb 19 14:54:27 nalik systemd[980]: mariadb.service: Failed to connect stdout to the journal socket, ignoring: Permission denied Feb 19 14:54:27 nalik systemd[1]: mariadb.service: Main process exited, code=exited, status=200/CHDIR Feb 19 14:54:27 nalik systemd[1]: mariadb.service: Failed with result 'exit-code'. Feb 19 14:54:27 nalik kernel: audit: type=1130 audit(1550584467.632:72): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=mariadb comm="systemd" exe="/usr/lib/systemd/systemd " hostname=? addr=? terminal=? res=failed' Feb 19 14:54:51 nalik systemd[1]: Starting Avahi mDNS/DNS-SD Stack... Feb 19 14:54:51 nalik avahi-daemon[989]: Found user 'avahi' (UID 84) and group 'avahi' (GID 84). Feb 19 14:54:51 nalik avahi-daemon[989]: Successfully dropped root privileges. Feb 19 14:54:51 nalik systemd[1]: avahi-daemon.service: Main process exited, code=exited, status=255/EXCEPTION Feb 19 14:54:51 nalik systemd[1]: avahi-daemon.service: Failed with result 'exit-code'. Feb 19 14:54:51 nalik kernel: audit: type=1130 audit(1550584491.312:73): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=avahi-daemon comm="systemd" exe="/usr/lib/systemd/sy stemd" hostname=? addr=? terminal=? res=failed' Feb 19 14:55:20 nalik systemd[1]: Created slice User Slice of UID 1000. Feb 19 14:55:20 nalik systemd[1]: Starting User Runtime Directory /run/user/1000... Feb 19 14:55:20 nalik kernel: audit: type=1006 audit(1550584520.233:74): pid=642 uid=0 old-auid=4294967295 auid=1000 tty=tty1 old-ses=4294967295 ses=8 res=1 Feb 19 14:55:20 nalik systemd[1]: Started User Runtime Directory /run/user/1000. Feb 19 14:55:20 nalik systemd[1]: Starting User Manager for UID 1000... Feb 19 14:55:20 nalik systemd[996]: user(a)1000.service: Failed to connect stdout to the journal socket, ignoring: Permission denied Feb 19 14:55:20 nalik kernel: audit: type=1130 audit(1550584520.243:75): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/s ystemd/systemd" hostname=? addr=? terminal=? res=success' Feb 19 14:55:20 nalik kernel: audit: type=1006 audit(1550584520.253:76): pid=996 uid=0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1 Feb 19 14:55:20 nalik kernel: audit: type=1130 audit(1550584520.263:77): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/syste md" hostname=? addr=? terminal=? res=failed' Feb 19 14:55:20 nalik kernel: audit: type=1131 audit(1550584520.273:78): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/syst emd" hostname=? addr=? terminal=? res=success' Feb 19 14:55:20 nalik kernel: audit: type=1130 audit(1550584520.273:79): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/syst emd" hostname=? addr=? terminal=? res=success' Feb 19 14:55:20 nalik kernel: audit: type=1131 audit(1550584520.273:80): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/syst emd" hostname=? addr=? terminal=? res=success' Feb 19 14:55:20 nalik kernel: audit: type=1130 audit(1550584520.283:81): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/syst emd" hostname=? addr=? terminal=? res=success' Feb 19 14:55:20 nalik kernel: audit: type=1131 audit(1550584520.333:82): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/s ystemd/systemd" hostname=? addr=? terminal=? res=success' Feb 19 14:55:20 nalik systemd[1]: user(a)1000.service: Failed with result 'protocol'. Feb 19 14:55:20 nalik systemd[1]: Started Session 8 of user fre. Feb 19 14:55:20 nalik systemd[1]: getty(a)tty1.service: Succeeded. Feb 19 14:55:20 nalik systemd[1]: getty(a)tty1.service: Service has no hold-off time (RestartSec=0), scheduling restart. Feb 19 14:55:20 nalik systemd[1]: getty(a)tty1.service: Scheduled restart job, restart counter is at 2. Feb 19 14:55:20 nalik systemd[1]: Stopped Getty on tty1. Feb 19 14:55:20 nalik systemd[1]: Started Getty on tty1. Feb 19 14:55:20 nalik systemd[1]: session-8.scope: Succeeded. Feb 19 14:55:20 nalik systemd[1]: Stopping User Runtime Directory /run/user/1000... Feb 19 14:55:20 nalik systemd[475]: run-user-1000.mount: Succeeded. Feb 19 14:55:20 nalik systemd[1]: run-user-1000.mount: Succeeded. Feb 19 14:55:20 nalik systemd[1]: user-runtime-dir(a)1000.service: Succeeded. Feb 19 14:55:20 nalik systemd[1]: Stopped User Runtime Directory /run/user/1000. Feb 19 14:55:20 nalik systemd[1]: Removed slice User Slice of UID 1000. -- Maderios

2 3

[arch-general] Participation of Arch in Google Summer of Code.
by Aniket Pradhan 19 Feb '19

19 Feb '19

Hello Govind, and Everyone! Thanks for your feedback. Your arguments are on point, and I agree with you on the fact that the ideas do not apply to Arch. If we can think of some better ideas (which apply to Arch, like the reproducible builds or the CLI tool as you discussed) we would need people to step up and mentor these ideas out of their free time. Moreover, if Arch is willing to include some community tools (who decides which tools should be included), we might get some more cool ideas, but in the end, we would also need someone to mentor the idea. In the end, it all boils down to the availability of mentors. and ideas. I also had this cool idea, where developers (who will act as mentors) can pitch in their ideas for community packages and select students through GSoC. This will provide them with the necessary help in developing the tool. However, then it would not be a "community-driven" package, would it? There can be several flaws to this suggestion, but as Govind said, it would be amazing if others can share their opinion on this topic. -- Thanks Regards Aniket Pradhan Byld | Cyborg Member ECE Undergrad | IIIT Delhi http://home.iiitd.edu.in/~aniket17133/

5 8

[arch-general] dovecot - Generate DH parameters (wiki vs. journal output mismatch)
by David C. Rankin 18 Feb '19

18 Feb '19

All, The wiki https://wiki.archlinux.org/index.php/Dovecot#Generate_DH_parameters shows: Generate DH parameters To generate a new DH parameters file (this will take very long): # openssl dhparam -out /etc/dovecot/dh.pem 4096 The journal message shows: dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem (which takes a fraction of a second) Why the difference? It doesn't seem to matter. -- David C. Rankin, J.D.,P.E.

2 1

[arch-general] After 4.20.10 update - fsck check caused dump to maintenance shell for missing mdadm raid1 UUID?
by David C. Rankin 18 Feb '19

18 Feb '19

Archdevs, I don't know if there were any recent changes to how the fsck check is done, but this is the first time I've had a fsck check cause a machine to dump to the maintenance shell due to a missing md1 (root fs) UUID. There is no issue with the array or disk. If there have been recent changes to either the systemd startup order or it's management of the fsck check, it may be worth a look to ensure that all mdadm arrays are assembled and ready before the fsck check fires. Just a guess, but it looked to me like the fsck check was attempting to run on the array UUID before the array was ready. The timing of any change would be from today back through whatever number of days the default fsck check schedule is. So this may have absolutely nothing to do with the 4.20.10 update and more to do with some change that could have happened to the fsck check scheduling or mdadm array assembly scheduling (or some combination of the two) I put it out here as I'm not really sure what to check in this regard, there are no drive or array errors in the journal. -- David C. Rankin, J.D.,P.E.

2 2

Re: [arch-general] BrlTTY Hard Dependency on eSpeak
by ilovecountrymusic483＠gmail.com 16 Feb '19

16 Feb '19

Hi, Yes discovered this the other day. I think it is time to make espeak deprecated imo and have espeak-ng the default particularly in the talking arch which someone is taking over development of. Thanks. Matthew -----Original Message----- From: arch-general <arch-general-bounces(a)archlinux.org> On Behalf Of Storm Dragon via arch-general Sent: Wednesday, February 13, 2019 3:16 PM To: Arch Linux General <arch-general(a)archlinux.org> Cc: Storm Dragon <stormdragon2976(a)gmail.com> Subject: [arch-general] BrlTTY Hard Dependancy on eSpeak Hi, I'm having some issues with installing brltty. The problem is, it depends on espeak but I'm using the espeak-ng from community and it is giving me the unresolvable conflicts problem for that reason. I don't think that brltty actually needs espeak at all, and it could probably be listed as an optional dependancy along with espeak-ng. Thanks, Storm

5 5

[arch-general] Keyboard shortcuts which change based on current app
by Oon-Ee Ng 15 Feb '19

15 Feb '19

Before I try to hack together a solution, are there any existing apps/frameworks which allow for the same key/button to do something different based on the currently focused app (in X)? My intended use-case is to use the additional buttons on my drawing tablet to do various functions, but depending on the current app. So in Gimp they would do one thing, in Libreoffice another, in Inkscape another.

3 4