You can now reach a shell server terminal or remote desktop from our website without having to go through the guacamole login.  Just use Web-Appls->Terminal or Desktop, it will display a selection of all the shell servers Terminal or Desktop, click on one and login.  With some servers there are multiple desktops available, not all are able to work with this interface.  The Mate desktop does work on ALL servers.  Sound is not yet working on all servers, I’m still working on configuring it.

     I will be performing kernel upgrades tonight upgrading from 6.1.37 to 6.1.41.  This will affect all of Eskimo North’s services, free and paid including e-mail, shells, web hosting, and virtual private servers.  It will also affect https://friendica.eskimo.com/, https://hubzilla.eskimo.com/, https://nextcloud.eskimo.com/, and https://yacy.eskimo.com/.

     The downtime for most services will be less than ten minutes.  Yacy has to rebuild an in-memory index after every reboot.  On the old hardware that tool about 45 minutes, the new hardware is faster but more disk space is assigned to yacy thus a larger database.  So tonight we’ll find out.

     If you have not tried yacy yet, give it a try.  It is a federated search engine, similar to how federated social media sites work, each site maintains it’s own crawl space but when you search for something on one node, it queries all of the  networked nodes and the combined response is sent back to you.  Unlike Google and Bing, it has no algorithms designed to limit your access to information they don’t want you to have AND it has no sponsored links. https://yacy.eskimo.com/

I have graphical environments via x2go, vnc, or web now working on all machines EXCEPT Fedora.  I haven’t got rpd working everywhere yet.  But since rdp relies on Xvnc, it made since to focus on VNC first.  And I haven’t setup sound on all yet.

With Fedora I have a problem, I need an inetd or xinetd daemon to fire off Xvnc when someone connects to port 5900, unfortunately no form of xinetd or inetd was provided with Fedora since around F31.

So I grabbed xinetd source from and attempted to compile.

Compiling xinetd on Fedora 39

I am trying to compile xinetd under Fedora 39 and having some difficulty.

Fedora has not bothered to include either inetd or xinetd in their distribution since around Fedora 31, and I have an application that requires inetd and I prefer xinetd. Since there is neither a source nor binary package after F31, I grabbed the source from github.

First issue I ran into, no rpc-devel libs under F39, but I found rpc.h in lib tirpc.

Now I’m running into undefined functions pmap_set and pmap_unset. These are normally defined in rpc/rpc.h but in Fedora, no such include, only tirpc/rpc.h and it does not define these functions.

Any idea where these are or IF they are defined, and if not, work-arounds?

Zorin is back up with a graphical environment working again.

     I am re-installing Zorin because the set of installed software has too many conflicts to easily resolve.  So it will be down temporarily while this is performed.  I am trying to fix the graphical environment on all servers, most work but some don’t and Zorin was one of those that didn’t.  Having multiple greeters, multiple window managers, seems to be a source of the problems.  Also not all greeters work properly with vnc, rdp or x2go.

     I took Debian down for about 5 minutes starting at 2:52 PM Pacific in order to increase the size of the root partition which was running out of space.  I recently compiled gcc 13.1 and new kernels and source for both ate up a lot of space.

     I had to re-install Dovecot over the weekend because something went wrong internally that I was unable to identify.

     I installed with mostly default settings, changing on a few things I knew were necessary for our installation.

     This morning it reached some of the internal limits set.  I’ve addressed those issues today.  Things like the total number of clients that can be active at once.  I would have thought 1000, which is the default sufficient, but many people have half a dozen devices polling so it was not.  I bumped that to 5000.  Also fixed some configuration issues with locking, indexes, added some client bug workarounds to work around bugs in Thunderbird and Outlook, Outlook chokes and NULLS, and Thunderbird adds an extra ‘/’ to mail paths.  A few other minor tweaks but seems to be working okay now.

      The only thing I could find in the logs is that the guest tried to use a VT-x feature not supported by the host CPU, but the host CPU DOES support VT-x and the guest is configured to copy the host CPU configuration so it should not use anything not supported by the host as it’s configured to use the same CPU.

     This is the first time I’ve seen this particular error and this configuration has been operating for ten years, so I’ve got to assume a random CPU or memory error.

There are some New Features I’d like to make you aware of:

On our website, https://www.eskimo.com/, at the far right on the menu bar there is new button “Issues“.  Press on this button to see the latest news, whether it be outages or new features or something else.

The new NIS server is Linux based eliminating the compatibility issues that prevented passwords being changed directly by users.  You can now change your password on most shell servers by typing ‘passwd’, it will prompt for your old password and then the new password twice.  This works on all shell servers EXCEPT Ubuntu, Centos7, and Scientific7.

And on the subject of passwords, because the old system the password significant characters were only eight.  If you typed a longer password those after the first eight were ignored.  Now up to 16 characters are significant.  If your password is longer than eight character but does not work, try typing the first eight characters, if that works use passwd to change your password to the desired longer form.

If you create a new account today, logins are no longer limited to eight characters, but also can be as long as sixteen.  The application form has been updated to reflect this.

     Over the past 24 hours we’ve had three server issues.  First, some changes to the network were necessary to accommodate a new router that will be replacing our existing router.  The new router does not do port based network address translation which we previously used to provide services from two different servers on a single IP address, specifically, eskimo.com provides shell access to an antique SunOS 4.1.4 based machine that also served as the NIS master and had a database I used for accounting.  That was shared with a different server that provides web services, so that if someone typed https://eskimo.com/ instead of https://www.eskimo.com/, they would still make it to our website.

     So to accommodate the new router (which has not yet been placed into service), I changed the name of the shell server to sunos.eskimo.com so eskimo.com could be pointed to the web server directly without the need of Network Address Translation.

     There were unintended consequences of this in that for some reason Sun’s calendar manager database, a database I’ve hijacked to use for accounting purposes, would not work with the name change.

     Well I gave it about five minutes of though and though this machine is 30 years old, if it dies parts are all made out of unobtainium, so best move these functions to modern servers.  The problems, well the database was proprietary so I can’t easily move it, so I dumped it as a plain text file and am hand inputting all the info into a new database that is linux based.  And I’ve wanted to switch NIS servers for a long time anyway because the SunOS server is only capable of eight character user names, 16 bit user IDs, 8 characters significant in the password which is not very secure, and triple DES encryption also not secure.  Where as the Linux NIS server can handle seven different types of encryption, all of which are superior to triple DES, 16 character long usernames, 32 bit user ID’s so enough for 3/4ths of the planets population if they all joined, and it would enable passwords to be changed by users directly again, well, it will once we get all the bugs squashed.  But there was an issue with the Linux implementation of NIS that I was not aware of until after the machine crashed this morning and that is that with SunOS, local passwords are in local files, and then the same files with the extension “.yp” get exported to the network.  There were also some format differences between SunOS’s passwd.adjunct file used for encrypted passwords and Linux’s “shadow”, but I figured those out and was able to use a few global exits in vi to fix.  But since Linux does not use separate files, the way it does it is system logins have uid’s < 1000, and user ID’s are 1000 and greater.  And all the data is in one file.

     I didn’t think this would be an issue as when I have uid’s both in local and network systems, I have them the SAME so it does not matter which mechanism a machine obtained them from, it would get the same values either way, however after reboot of the new master NIS server this morning everything went to hell and a hand basket.

     I had already segregated UID’s local verses system and all users have system id’s of 2000 or more, but I had not similarly segregated groups, and there in is where the problem lie.  So that meant deleting the old 50, 51, 52, 53, 54, 57 gids in use for various types of accounts and replacing them with groups above 1000.  Doing that for 500 users at once is non-trivial so that is why there was a period where the group id on your files did not resolve to a name.

     And by the way the drive to the co-lo and back was two hours each way owing to absolutely shit traffic on I-90, I-405, and I-5 so much of the drive went through back roads of Southern Bellevue, and for some reason their transportation engineers are utterly incapable of drawing a straight line and so my trajectory was anything but direct or fast, so my average round trip speed over 22 miles each way was about 10MPH.

     Then I get back and find the mail server is on it’s ass.  And I look at the logs and the authentication logs and mail logs are both complaining about “extra groups” and they were just those groups I had entirely removed from the network.  So apparently Dovecot which both provides imap and pop3, and also serves as authentication server for mail, it apparently caches some of this data somewhere then rather than just  update it’s fricken cache when it changes, it instead refuses to authenticate.  And I could not figure out where it was squirreling this data, so I completely purged and re-installed dovecot, only the challenge there was that they had changed the configuration significantly since I last installed it.

     So that was the cause of the outage today.  The good side is we are no longer relying on 30 year old hardware, once I get bugs worked out you will be able to change your passwords yourself, and longer usernames are now possible.  And we’ve eliminated anything hardware wise that will be an issue in 2038.  There are still some file systems in use with 64-bit inodes that only go to 2038 but all the new I am creating with larger inodes that can accommodate all of known history so by the time 2038 gets here is should be a non-event just like 2000, if I’m still alive (I will be 80 if so).

     For all of those who called, e-mailed, generated tickets, to let me know things were down, I appreciate that, but once aware I prefer to dedicate my energies to getting things back up, so please, in the future, check our website https://www.eskimo.com/news before calling, e-mailing, or generating a ticket.  Thank you.