Hi fm, On Fri, Dec 6, 2019 at 6:03 PM fmiser <fmiser(a)gmail.com> wrote: Welcome to our mailing list. The Debian package has been configured to allow only secure access by limiting the Starman server to access from 'localhost'. In your server, there should be a file called /etc/default/ledgersmb. In that file, there's a configuration parameter called LISTEN_ADDRESS (set to 'localhost' by default) By commenting out the line "LISTEN_ADDRESS=localhost" (and restarting the ledgersmb service, i.e. Starman), Starman will bind to all available interfaces, allowing access from other IP addresses and machines than just the local one. That should at least get you up and running being able to access the system. I think the above should be sufficient; if you find Starman too slow, there are 2 options in your setup: to increase the number of workers on Starman, which will help Starman serve your pages. The other option (but more complex) is to use Apache or Nginx as a reverse proxy; either will take less resources to serve the static content. However, in your scenario, I doubt that 5 or 7 workers won't be enough to provide a snappy experience. If you run into further issues, please don't hesitate to mail! Regards, -- Bye, Erik. http://efficito.com -- Hosted accounting and ERP. Robust and Flexible. No vendor lock-in.

Hi, On Sun, Dec 8, 2019 at 5:29 AM fmiser <fmiser(a)gmail.com> wrote: Hmm. I didn't understand that this worked before. I thought you were logging into the machine using SSH and then using lynx or links2. Do you have any idea if there's a firewall in place which may be blocking port 5762? (or maybe all ports except e.g. 22, 80 and/or 443?) Well, now that you "unconfigured" the reverse proxy I guess the above is to be expected: the reverse proxy setup should make sure the above works through some extra apache configuration. Ok. But did you try the situation with the commented-out Should I be concluding that you get no error with links2 over http://localhost:5762/login.pl from the last remark ("same errors as above")? or does that stop working? If it kept working after changing the IP, my main question would be: did you restart the ledgersmb service after you edited /etc/default/ledgersmb ? Also, which version of Debian did you install? I saw above that you said "fresh installation of Debian", but is that Buster or Stretch or Sid or ...? If this is Buster, I think we might be banging on the wrong door: in that case, we probably should be looking in the "ledgersmb.service" (or something named like it) file to change the starman startup parameters. I don't have a Debian 10 handy right now, so if you let me know which Debian version, I'll spin one up and see what the package looks like in installed form (note that Jaime maintains the package; I just know how to analyse it). Regards, -- Bye, Erik. http://efficito.com -- Hosted accounting and ERP. Robust and Flexible. No vendor lock-in.

Hoping for the best, I went looking. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ $ locate ledgersmb | grep .service /etc/systemd/system/multi-user.target.wants/ledgersmb.service /usr/lib/systemd/system/ledgersmb.service /usr/share/ledgersmb/conf/systemd/ledgersmb-development_plackup.service /usr/share/ledgersmb/conf/systemd/ledgersmb_plack-fcgi.service /usr/share/ledgersmb/conf/systemd/ledgersmb_plackup.service /usr/share/ledgersmb/conf/systemd/ledgersmb_starman.service /var/lib/systemd/deb-systemd-helper-enabled/ledgersmb.service.dsh-also /var/lib/systemd/deb-systemd-helper-enabled/multi-user.target.wants/ledgersmb.service ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ But which of those might matter? Well, if it is port 5762 that I'm trying to deal with... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ $ for d in $(locate ledgersmb | grep service ); do if grep -q 5762 $d; then echo $d;fi; done /etc/systemd/system/multi-user.target.wants/ledgersmb.service /usr/lib/systemd/system/ledgersmb.service /usr/share/ledgersmb/conf/systemd/ledgersmb_plackup.service /usr/share/ledgersmb/conf/systemd/ledgersmb_starman.service ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The first one is a symlink pointing to the second one. That one has this section in the middle. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ExecStart=/usr/bin/starman \ --listen localhost:5762 \ -I lib \ -I old/lib \ bin/ledgersmb-server.psgi ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ I tried changing "localhost" to 172.20.6.16 and restarted ledgersmb, sometimes using the old method "/etc/init.d/ledgersmb restart" or the systemd way ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # service ledgersmb restart ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ No change. From "inside" (logging in over SSH and running "links2") I got a login prompt using the URL http://localhost:5762/login.pl but "connection refused" error using the URL http://172.20.6.16:5762/login.pl From outside, using another browser on the LAN I get a "cannot establish connection" using the URL http://172.20.6.16:5762/login.pl The next file I check is /usr/share/ledgersmb/conf/systemd/ledgersmb_plackup.service It too has a section in the middle mentioning "localhost" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ExecStart=/usr/bin/plackup \ --listen localhost:5762 \ -I lib/ \ -I old/lib/ \ --workers 3 \ --access-log $LOG \ --server Starman \ -R "bin, lib, old/lib" \ bin/ledgersmb-server.psgi ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ I changed "localhost" to "172.20.6.16". Same browser behavior as above. Somewhere in all this I find a reference to this file /usr/share/ledgersmb/conf/systemd/ledgersmb_starman.service At the top it says: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # Place this in /etc/systemd/system/ledgersmb_starman.service # systemctl enable ledgersmb_starman # service start ledgersmb_starman ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ So I change "localhost" to "172.29.6.16" and copy the file as instructed, ran the commands, and got this error: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # service start ledgersmb_starman start: unrecognized service ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ At this point, I'm not actually sure I have un-done all the things I have tried. But so far none of the files I've change seem to have any effect. I'm don't think I care if I have a reverse proxy running or not - but I failed to get Apache as a reverse proxy to work either. I must be missing something! -- f

On 07/12/19 00.02, fmiser (fmiser(a)gmail.com) wrote: Sorry to response this old thread. I have the same problems as yours, run smbledger under debian 10. After months I realize that smbledger on Debian buster only allow connection to localhost or 127.0.0.1 as point out by Erik Huelsmann (ehuels(a)gmail.com). To solve this, we need reverse proxy which as pointing out on installing new smbledger either from synaptic or by command line (apt install). I follow this tips https://ubiq.co/tech-blog/apache-reverse-proxy-configuration-step-step/ with a little exception, on virtualhost configuration I have add the following $ sudo nano /etc/apache2/sites-available/000-default.conf <VirtualHost *:80> ...... ProxyPreserveHost On ProxyPass / http://127.0.0.1:5762/ ProxyPassReverse / http://127.0.0.1:5762/ </VirtualHost> then restart apache2 services $ sudo systemctl restart apache2 after that, I can access smbledger from any node on LAN. http://ledgersmb.mydomain.tld BTW. Why this list does not have DNS MX record? That makes my first attempt posting bounce since the list domain does not have DNS MX record. I would suggest to create lists.ledgersmb.org DNS zone on Name Server mooglian.computerisms.ca so that can be add DNS MX record and A record on lists.ledgersmb.org DNS zone (also SPF, DKIM etc if need it). list.ledgersmb.org name server snaplian.computerisms.ca. list.ledgersmb.org name server ns.freelock.com. list.ledgersmb.org name server mooglian.computerisms.ca. list.ledgersmb.org name server ns1.freelock.com. lists.ledgersmb.org IN MX 10 lists.ledgersmb.org lists.ledgersmb.org. IN A 54.203.249.169 $ host -t mx lists.ledgersmb.org 1.1.1.1 Using domain server: Name: 1.1.1.1 Address: 1.1.1.1#53 Aliases: lists.ledgersmb.org has no MX record $ host -t soa ledgersmb.org 1.1.1.1 Using domain server: Name: 1.1.1.1 Address: 1.1.1.1#53 Aliases: ledgersmb.org has SOA record mooglian.computerisms.ca. bob.computerisms.ca. 2020080346 1800 1800 604800 21600 $ host -v -t a lists.ledgersmb.org mooglian.computerisms.ca Trying "lists.ledgersmb.org" Using domain server: Name: mooglian.computerisms.ca Address: 64.251.22.31#53 Aliases: ;; ANSWER SECTION: lists.ledgersmb.org. 600 IN A 54.203.249.169 -- syafril --------- Syafril Hermansyah