Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 Nov 1999 12:35:17 -0500
From:      John <papalia@UDel.Edu>
To:        Chris Dillon <cdillon@wolves.k12.mo.us>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: ident, apache, named, and probably more...
Message-ID:  <4.1.19991115123041.00949aa0@mail.udel.edu>
In-Reply-To: <Pine.BSF.4.20.9911150814340.29169-100000@mail.wolves.k12.m o.us>
References:  <4.1.19991114224428.00974c60@mail.udel.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi Chris,

>> In the past week, I've installed and configured named and apache (with
>> modssl).  Everything was going great until i rebooted last night.
>> I wanted to hop onto irc for a bit (using ircII), and well, I'm getting a
>> response from the servers saying that I need to have my sysadmin install
>> identd.  The thing is that I've had pidentd installed for 2+ months now and
>> it WAS working flawlessly.  I'm running v3.3 right now.  Nothign I found in
>> the archives seemed to be the cure.
>
>First make sure identd is set up properly in /etc/inetd.conf and that
>the internal "fake" identd is turned off.  If the inetd entry is
>correct, remove identd and then recompile it cleanly from the ports
>collection.

identd is set up in /etc/inetd.conf as:
ident   stream  tcp     wait    kmem:kmem /usr/local/sbin/identd identd -w
-t120

i removed the install, and I did a new compile clean and from the ports
(did this both last night and today), issued a kill -HUP <pid of inetd> and
the same problem still exists - the irc servers still state I'm not running
identd.

What is the "fake" identd that you're referring to?  I have no instances of
identd running when issuing ps -auwx | grep ident

>> Beyond that, I had a problem with /usr/local/etc/rc.d/apache.sh.  From what
>> I understand, the modssl package sets up the SSL portion of apache.  The
>> keys, however, require a passphrase in order to activate them.  When the
>> system reboots and the apache.sh script tries to run, the out (per the
>> script) gets directed to /dev/null.  One of the thigns that it redirects is
>> the prompt asking for the passphrase.  Is there a way around this?
>
>Re-create the keys using null (empty) passphrases and you'll never be
>asked to enter a passphrase.

I tried to do that, but openssl apparently requires a minimum of 4
characters for the passphrase, so null didn't work.  There IS however a
portion of the mod_ssl faq which talks about removing the passphrase, and
leaving the key as plain text.  Not the safest thing to do, but I'm toying
with the idea....

Thanks again for the help!!!
--John


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.1.19991115123041.00949aa0>