From mcneal at MIT.EDU Wed Apr 2 10:51:54 2008 From: mcneal at MIT.EDU (Patrick McNeal) Date: Wed, 2 Apr 2008 10:51:54 -0400 Subject: [Wocky] Server Updated? Message-ID: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> It looks like our Jabber server was updated, as Adium 1.2.4 is now able to connect with either plain+ssl or kerberos ( yay! ). Has anyone been able to get iChat on 10.5 to connect to the server with Kerberos? When I enable "Kerberos v5 for authentication" iChat complains about not being able to verify the identity of jabber.mit.edu. Maybe it has something to do with the server still using a self signed cert? --Patrick From quentin at MIT.EDU Wed Apr 2 11:00:02 2008 From: quentin at MIT.EDU (Quentin Smith) Date: Wed, 2 Apr 2008 11:00:02 -0400 (EDT) Subject: [Wocky] Server Updated? In-Reply-To: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> Message-ID: On Wed, 2 Apr 2008, Patrick McNeal wrote: > It looks like our Jabber server was updated, as Adium 1.2.4 is now > able to connect with either plain+ssl or kerberos ( yay! ). Hi Patrick, What Adium configuration did you use to enable Kerberos authentication? Thanks, --Quentin > > Has anyone been able to get iChat on 10.5 to connect to the server > with Kerberos? When I enable "Kerberos v5 for authentication" iChat > complains about not being able to verify the identity of > jabber.mit.edu. Maybe it has something to do with the server still > using a self signed cert? > > --Patrick > _______________________________________________ > Wocky mailing list > Wocky at mit.edu > http://mailman.mit.edu/mailman/listinfo/wocky > From quentin at MIT.EDU Wed Apr 2 11:12:57 2008 From: quentin at MIT.EDU (Quentin Smith) Date: Wed, 2 Apr 2008 11:12:57 -0400 (EDT) Subject: [Wocky] Server Updated? In-Reply-To: <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> Message-ID: Aha. I was still using Adium 1.2.3. I can confirm that those settings *don't* work in 1.2.3. Updating to 1.2.4 made those settings work great. Thanks! --Quentin On Wed, 2 Apr 2008, Patrick McNeal wrote: > > On Apr 2, 2008, at 11:00 AM, Quentin Smith wrote: >>> It looks like our Jabber server was updated, as Adium 1.2.4 is now >>> able to connect with either plain+ssl or kerberos ( yay! ). >> >> Hi Patrick, >> >> What Adium configuration did you use to enable Kerberos authentication? > > With a valid edu.mit.kerberos file installed in /Library/Preferences, Jabber > prompted me at lunch to get a TGT with these settings: > From mcneal at MIT.EDU Wed Apr 2 11:07:41 2008 From: mcneal at MIT.EDU (Patrick McNeal) Date: Wed, 2 Apr 2008 11:07:41 -0400 Subject: [Wocky] Server Updated? In-Reply-To: References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> Message-ID: <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> On Apr 2, 2008, at 11:00 AM, Quentin Smith wrote: >> It looks like our Jabber server was updated, as Adium 1.2.4 is now >> able to connect with either plain+ssl or kerberos ( yay! ). > > Hi Patrick, > > What Adium configuration did you use to enable Kerberos > authentication? With a valid edu.mit.kerberos file installed in /Library/Preferences, Jabber prompted me at lunch to get a TGT with these settings: -------------- next part -------------- A non-text attachment was scrubbed... Name: jabber-config.png Type: image/png Size: 74475 bytes Desc: not available Url : http://mailman.mit.edu/pipermail/wocky/attachments/20080402/f94b59db/attachment.png -------------- next part -------------- With an existing, valid TGT, Adium just connects as expected. Note - these are the default settings we'll be using in the updated Adium installer we're currently working on. From ghudson at MIT.EDU Wed Apr 2 11:25:15 2008 From: ghudson at MIT.EDU (Greg Hudson) Date: Wed, 02 Apr 2008 11:25:15 -0400 Subject: [Wocky] Server Updated? In-Reply-To: <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> Message-ID: <1207149915.5865.9.camel@error-messages.mit.edu> On Wed, 2008-04-02 at 11:07 -0400, Patrick McNeal wrote: > With a valid edu.mit.kerberos file installed in /Library/Preferences, > Jabber prompted me at lunch to get a TGT with these settings: You can stop listing jabber.mit.edu as the connect server; Adium can now do a SRV lookup and figure that out. (This setting is also what was preventing Kerberos authentication to work for Quentin, and it might start interfering with Kerberos authentication again in the future, because of an obscure technical issue involving Digest-MD5 authentication.) From mcneal at MIT.EDU Wed Apr 2 11:28:57 2008 From: mcneal at MIT.EDU (Patrick McNeal) Date: Wed, 2 Apr 2008 11:28:57 -0400 Subject: [Wocky] Server Updated? In-Reply-To: <1207149915.5865.9.camel@error-messages.mit.edu> References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> <1207149915.5865.9.camel@error-messages.mit.edu> Message-ID: On Apr 2, 2008, at 11:25 AM, Greg Hudson wrote: > You can stop listing jabber.mit.edu as the connect server; Adium can > now > do a SRV lookup and figure that out. > > (This setting is also what was preventing Kerberos authentication to > work for Quentin, and it might start interfering with Kerberos > authentication again in the future, because of an obscure technical > issue involving Digest-MD5 authenticatio I just changed the connect to server to "mit.edu" and Adium 1.2.4 no longer connects. It fails with "socket not connected." From morzinski at MIT.EDU Wed Apr 2 11:38:46 2008 From: morzinski at MIT.EDU (Jacob Morzinski) Date: Wed, 02 Apr 2008 11:38:46 -0400 Subject: [Wocky] Server Updated? In-Reply-To: Message from Greg Hudson of "Wed, 02 Apr 2008 11:25:15 EDT." <1207149915.5865.9.camel@error-messages.mit.edu> References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> <1207149915.5865.9.camel@error-messages.mit.edu> Message-ID: <200804021538.m32FclqE025724@horobi.mit.edu> I removed my connect server setting, left it blank. When I restarted Adium, Adium seems to work with the blank connect server.. However, now I'm getting error/warning messages that "Adium can't verify the identity of "mit.edu", or "jabber.mit.edu". These confuse me, because I don't remember getting those before. I wonder if certificates are being actively replaced on the server. -Jacob On Wed, 2 Apr 2008, Greg Hudson wrote: > You can stop listing jabber.mit.edu as the connect server; Adium can now > do a SRV lookup and figure that out. -- Jacob Morzinski Client Support Services Information Services and Technology From raeburn at MIT.EDU Wed Apr 2 11:39:30 2008 From: raeburn at MIT.EDU (Ken Raeburn) Date: Wed, 2 Apr 2008 11:39:30 -0400 Subject: [Wocky] Server Updated? In-Reply-To: References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> <1207149915.5865.9.camel@error-messages.mit.edu> Message-ID: <29E527B4-BABE-4F6C-BE8E-9CAFBD4AB076@mit.edu> On Apr 2, 2008, at 11:28, Patrick McNeal wrote: > On Apr 2, 2008, at 11:25 AM, Greg Hudson wrote: >> You can stop listing jabber.mit.edu as the connect server; Adium can >> now >> do a SRV lookup and figure that out. >> > I just changed the connect to server to "mit.edu" and Adium 1.2.4 no > longer connects. It fails with "socket not connected." Right, mit.edu is a different machine, not the right one to connect to. If you leave the field blank, Adium will query DNS for the right jabber server to use for @mit.edu jabber ids; the current DNS data will tell it to connect to jabber.mit.edu. It's working for me as well (yay!) on my new Leopard box, though I'm also seeing the certificate complaints. (BTW, don't even bother trying the Zephyr support on Leopard; it crashes because Leopard doesn't have the krb4 support any more, and we haven't switched to the krb5 port of Zephyr that some other sites are running.) Ken From mcneal at MIT.EDU Wed Apr 2 11:50:35 2008 From: mcneal at MIT.EDU (Patrick McNeal) Date: Wed, 2 Apr 2008 11:50:35 -0400 Subject: [Wocky] Server Updated? In-Reply-To: <29E527B4-BABE-4F6C-BE8E-9CAFBD4AB076@mit.edu> References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> <1207149915.5865.9.camel@error-messages.mit.edu> <29E527B4-BABE-4F6C-BE8E-9CAFBD4AB076@mit.edu> Message-ID: <6F85E372-D090-4661-9FDC-B8E42A3609E5@mit.edu> On Apr 2, 2008, at 11:39 AM, Ken Raeburn wrote: > Right, mit.edu is a different machine, not the right one to connect > to. If you leave the field blank, Adium will query DNS for the right > jabber server to use for @mit.edu jabber ids; the current DNS data > will tell it to connect to jabber.mit.edu. Thanks for the clarification - removing the server name completely, I'm able to connect. > It's working for me as well (yay!) on my new Leopard box, though I'm > also seeing the certificate complaints. Anyone on the list know the status of getting a real, or at least MIT signed, cert installed on the server? From amunch at MIT.EDU Wed Apr 2 11:27:18 2008 From: amunch at MIT.EDU (Andrew Munchbach) Date: Wed, 2 Apr 2008 11:27:18 -0400 Subject: [Wocky] Server Updated? In-Reply-To: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> Message-ID: <69169ecd0804020827x6a7e0ecoe0c87f119d4c671a@mail.gmail.com> No luck with Leopard with any port or settings when Kerberos is used. I get an SSL error. _A On Wed, Apr 2, 2008 at 10:51 AM, Patrick McNeal wrote: > It looks like our Jabber server was updated, as Adium 1.2.4 is now > able to connect with either plain+ssl or kerberos ( yay! ). > > Has anyone been able to get iChat on 10.5 to connect to the server > with Kerberos? When I enable "Kerberos v5 for authentication" iChat > complains about not being able to verify the identity of > jabber.mit.edu. Maybe it has something to do with the server still > using a self signed cert? > > --Patrick > _______________________________________________ > Wocky mailing list > Wocky at mit.edu > http://mailman.mit.edu/mailman/listinfo/wocky > -- Andrew Munchbach Consultant - Departmental IT Resources Group Massachusetts Institute of Technology 77 Massachusetts Ave | Cambridge, MA 02139 Building E19-630 amunch at mit.edu (617) 253-0157 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.mit.edu/pipermail/wocky/attachments/20080402/bd472e48/attachment.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: Picture 1.jpg Type: image/jpeg Size: 33822 bytes Desc: not available Url : http://mailman.mit.edu/pipermail/wocky/attachments/20080402/bd472e48/attachment.jpg From wdc at MIT.EDU Wed Apr 2 15:08:02 2008 From: wdc at MIT.EDU (Bill Cattey) Date: Wed, 02 Apr 2008 15:08:02 -0400 Subject: [Wocky] Server Updated? In-Reply-To: <6F85E372-D090-4661-9FDC-B8E42A3609E5@mit.edu> References: <0566D56A-53BD-4406-939A-0456462E116F@mit.edu> <306EB3AA-0D28-42D6-81DC-FE1CC8CE8E90@mit.edu> <1207149915.5865.9.camel@error-messages.mit.edu> <29E527B4-BABE-4F6C-BE8E-9CAFBD4AB076@mit.edu> <6F85E372-D090-4661-9FDC-B8E42A3609E5@mit.edu> Message-ID: <1207163282.11408.2.camel@wdc-laptop> I spoke with Steve Landry moments ago. The OpenFire server was updated late last night. I will re-confirm to him that we still need to remedy the self-signed certificate issue. -Bill On Wed, 2008-04-02 at 11:50 -0400, Patrick McNeal wrote: > On Apr 2, 2008, at 11:39 AM, Ken Raeburn wrote: > > Right, mit.edu is a different machine, not the right one to connect > > to. If you leave the field blank, Adium will query DNS for the right > > jabber server to use for @mit.edu jabber ids; the current DNS data > > will tell it to connect to jabber.mit.edu. > > Thanks for the clarification - removing the server name completely, > I'm able to connect. > > > It's working for me as well (yay!) on my new Leopard box, though I'm > > also seeing the certificate complaints. > > Anyone on the list know the status of getting a real, or at least MIT > signed, cert installed on the server? > _______________________________________________ > Wocky mailing list > Wocky at mit.edu > http://mailman.mit.edu/mailman/listinfo/wocky From mcneal at MIT.EDU Thu Apr 3 11:39:18 2008 From: mcneal at MIT.EDU (Patrick McNeal) Date: Thu, 3 Apr 2008 11:39:18 -0400 Subject: [Wocky] Updated MIT Adium 1.2.4 installer Message-ID: We're working on updating the MIT Adium installer to include version 1.2.4 A test build can be found here: https://web.mit.edu/swrt/releases/adium/installer/mit-adium-1.2.4-b5.dmg As with previous installers, this one will prompt you for your user name and automatically configure an MIT Jabber account. Updated instructions can be found here: http://itinfo.mit.edu/article.php?id=8817 Please let us know if you run into any problems. We're hoping to release this on Tuesday, 4/8. --Patrick From raeburn at MIT.EDU Thu Apr 3 15:29:02 2008 From: raeburn at MIT.EDU (Ken Raeburn) Date: Thu, 3 Apr 2008 15:29:02 -0400 Subject: [Wocky] Updated MIT Adium 1.2.4 installer In-Reply-To: References: Message-ID: <156D17DE-9020-4D31-BA85-D62F4B7178C7@mit.edu> On Apr 3, 2008, at 11:39, Patrick McNeal wrote: > We're working on updating the MIT Adium installer to include version > 1.2.4 A test build can be found here: > > https://web.mit.edu/swrt/releases/adium/installer/mit-adium-1.2.4- > b5.dmg It looks good to me, but I'm still getting prompted about the certificate. If the server isn't going to get fixed, is there something we can do at install time to make this certificate be considered okay? (Turning off cert checking is probably not a good choice.) Ken From morzinski at MIT.EDU Thu Apr 3 16:43:12 2008 From: morzinski at MIT.EDU (Jacob Morzinski) Date: Thu, 03 Apr 2008 16:43:12 -0400 Subject: [Wocky] Updated MIT Adium 1.2.4 installer In-Reply-To: Message from Ken Raeburn of "Thu, 03 Apr 2008 15:29:02 EDT." <156D17DE-9020-4D31-BA85-D62F4B7178C7@mit.edu> References: <156D17DE-9020-4D31-BA85-D62F4B7178C7@mit.edu> Message-ID: <200804032043.m33KhD6g012048@horobi.mit.edu> On Thu, 3 Apr 2008, Ken Raeburn wrote: > It looks good to me, but I'm still getting prompted about the > certificate. Oddly, when I used the installer, I *stopped* getting warned about the certificate. This morning, using Adium 1.2.4 from the internet download site, I got warned about the certificate. I tested a few times, trying to get around it, and got warned every time. After I've run the MIT installer, I'm no longer getting warned about the certificate. I've quit and restarted Adium a few times, and am still not being warned. This behavior could suggest that there is something else going on. Is there a load balancer directing us to differently-configured servers with different certificates? Something else? -Jacob -- Jacob Morzinski Client Support Services Information Services and Technology From mcneal at MIT.EDU Thu Apr 3 16:50:42 2008 From: mcneal at MIT.EDU (Patrick McNeal) Date: Thu, 3 Apr 2008 16:50:42 -0400 Subject: [Wocky] Updated MIT Adium 1.2.4 installer In-Reply-To: <156D17DE-9020-4D31-BA85-D62F4B7178C7@mit.edu> References: <156D17DE-9020-4D31-BA85-D62F4B7178C7@mit.edu> Message-ID: <5CFB1752-8103-4779-8E61-2EA3DBB14C2E@mit.edu> On Apr 3, 2008, at 3:29 PM, Ken Raeburn wrote: > It looks good to me, but I'm still getting prompted about the > certificate. If the server isn't going to get fixed, is there > something we can do at install time to make this certificate be > considered okay? (Turning off cert checking is probably not a good > choice.) Using this installer, I'm not seen any certificate issues with Adium. I've tried this on clean installs of both 10.4.11 and 10.5.2. What if you blow away your existing adium user settings? From raeburn at MIT.EDU Thu Apr 3 19:40:16 2008 From: raeburn at MIT.EDU (Ken Raeburn) Date: Thu, 3 Apr 2008 19:40:16 -0400 Subject: [Wocky] Updated MIT Adium 1.2.4 installer In-Reply-To: <5CFB1752-8103-4779-8E61-2EA3DBB14C2E@mit.edu> References: <156D17DE-9020-4D31-BA85-D62F4B7178C7@mit.edu> <5CFB1752-8103-4779-8E61-2EA3DBB14C2E@mit.edu> Message-ID: On Apr 3, 2008, at 16:50, Patrick McNeal wrote: > Using this installer, I'm not seen any certificate issues with > Adium. I've tried this on clean installs of both 10.4.11 and > 10.5.2. What if you blow away your existing adium user settings? And mess with configurations for six other accounts? :) It may be that in a fresh install, strict certificate checking is turned off? When I got prompted for an account, I skipped that step and went straight to installing the software. Maybe specifying the account name to the installer overwrites the account configuration and turns that option off? Jacob, did you give it your account name to (re-)set up your account? Ken From wocky at mit.edu Fri Apr 11 18:02:35 2008 From: wocky at mit.edu (Dsquared) Date: Fri, 11 Apr 2008 18:02:35 -0400 (EDT) Subject: [Wocky] Armani 2026362 Message-ID: <20080412140957.9641.qmail@029> Hey have you heard? Finally, the 2008 Collections are in, enjoy -89% Brand Name Shoes & Boots for Men & Women from TOP Fashion Designers. Choose from a variety of the season's hottest models from Gucci, Prada, Chanel, Dior,? Ugg Boots, Burberry, D&G, Dsquared & much more. Enter and Save TODAY! Free International Shipping on ALL ORDERS! ? http://www.shoetim212.com? Make your way here & Save Today! ? NoW That's an AMAZING Offer! From jdreed at MIT.EDU Mon Apr 14 10:06:05 2008 From: jdreed at MIT.EDU (Jonathan Reed) Date: Mon, 14 Apr 2008 10:06:05 -0400 Subject: [Wocky] Fwd: jlocate and jwgc bug References: Message-ID: Can anyone provide any insight on this? OLC has had this ticket in its queue for nearly two months, and we have heard nothing. Would it be best to ask the user to e-mail this list directly? -Jon Begin forwarded message: > From: Matthew Goldstein > Date: February 8, 2008 5:09:35 PM EST > To: wocky at mit.edu > Subject: [Wocky] jlocate and jwgc bug > > Hi, > > OLC has a client (#5660008) having trouble with jwgc and jlocate. > He has never subscribed to the presence of mark at mit.edu, but mark > shows up > on his jlocate and he gets jwgc notifications about mark. > > Laura has been able to confirm this on her account but others have not > been able to. > > Do you have any thoughts on what might be going on? > > --Matt > _______________________________________________ > Wocky mailing list > Wocky at mit.edu > http://mailman.mit.edu/mailman/listinfo/wocky -- Jonathan Reed Client Support Services Information Services & Technology Massachusetts Institute of Technology jdreed at mit.edu From wdc at MIT.EDU Fri Apr 25 14:17:38 2008 From: wdc at MIT.EDU (William Cattey) Date: Fri, 25 Apr 2008 14:17:38 -0400 Subject: [Wocky] Zephyr annoyance in AdiumX 1.2.4: Zephyr replies come in new tab. Message-ID: <9BE34523-52B2-4CDB-99E3-979DFAB1E82F@MIT.EDU> I never noticed this behavior before, so I don't know when it started. When I open a zephyr chat with someone, for example "raeburn", instead of putting the reply in the "raeburn" tab, replies come in a new "raeburn.mit.edu" tab. Anyone have a clue what's happening here? -Bill ---- William Cattey Linux Platform Coordinator MIT Information Services & Technology N42-040M, 617-253-0140, wdc at mit.edu http://web.mit.edu/wdc/www/