AAlvz's questions

I'm working with vagrant and I'm trying to use it as a printing server. I installed cups.

Internally everything works just fine. I can even make a quick curl to my localhost:631 (cups port inside my vagrant) and there's everything.

The thing is I can't access it in any way I try from the host machine.

Obviously I forwarded the port and I've tried with several ports. I've also tried with Debian squeeze and Ubuntu 12.04. Here is my current Vagrantfile

Vagrant.configure("2") do |config|                                              
  config.vm.box = "guruDebian"
  config.vm.network :forwarded_port, guest: 80, host: 8080
  config.vm.network :forwarded_port, guest: 631, host: 6363   ## HERE IS CUPS           
end

Any ideas? ... I'll upload any file if necessary.

I have a server where I just use openssh, openvpn and rabbitmq (which requires a lot of erlang dependencies).

Every time I reboot my server I can't access to it anymore getting

Port 22: Connection Refused

And I have to install everything from scratch.

What should I check to avoid this problem??

I'm using a HP 1000 J110 connected to a server which I access via ssh. I use lsusb and it appears there. Then, I Pasted the PPD on the /etc/cups/ppd/ folder... Is the ppd my pc uses to print when attached directly to the PC.

I Use lpstat -p

and it shows the printer there :

printer DESKJET-1000-J110 is idle.  enabled since Fri 22 Mar 2013 08:05:33 PM UTC

Then i use:

lp -d DESKJET-1000-J110 filetoprint.txt

request id is DESKJET-1000-J110-111 (1 file(s))

and it appears that the file is sent to print, and actually appear as completed, but it just doesn't print anything.

Also tryed with HPLip And when trying to run hp-setup -i it says:

error: No device selected/specified or that supports this functionality.

I checked and this printer IS supported by hplip.

What am I missing? ..

I'm trying to transfer a file via ssh but it works only from PC1 to PC2 but it doesn't work backwards.

I've checked my ssh_config files and both are the same. Which is basic:

Host *
SendEnv LANG LC_*
HashKnownHosts 
GSSAPIAuthentication yes
GSSAPIDelegateCredentials no

Because i've also trying adding this to the recievers ssh_config

PasswordAuthentication no
Port 22
Protocol 2, 1

And it still doesn't work.

Here's my I/O

:~# scp -v testFile.txt [email protected]:/home

Executing: program /usr/bin/ssh host 192.168.1.67, user root, command scp -v -t /home
OpenSSH_5.1p1 Debian-5, OpenSSL 0.9.8o 01 Jun 2010
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to 192.168.1.67 [192.168.1.67] port 22.
debug1: connect to address 192.168.1.67 port 22: Connection refused
ssh: connect to host 192.168.1.67 port 22: Connection refused
lost connection

What am I missing?

I get a lot of this errors when runnong apt-get update command

Ign http://archive.debian.org lenny/volatile/main Sources/DiffIndex
Ign http://archive.debian.org lenny/volatile/contrib Sources/DiffIndex
Ign http://archive.debian.org lenny/volatile/non-free Sources/DiffIndex
Hit http://archive.debian.org lenny/updates/main Packages
Hit http://archive.debian.org lenny/updates/contrib Packages
Hit http://archive.debian.org lenny/updates/non-free Packages
W: GPG error: http://archive.debian.org lenny/updates Release: The following signatures were invalid: KEYEXPIRED 1356982504
W: GPG error: http://archive.debian.org lenny/volatile Release: The following signatures were invalid: KEYEXPIRED 1358963195
W: You may want to run apt-get update to correct these problems

Why can't I update? .. All this was done after running the upgrade command.

Here's my sources.list

deb http://archive.debian.org/debian/ lenny main contrib non-free
deb-src http://archive.debian.org/debian/ lenny main contrib non-free
deb http://archive.debian.org/debian-security lenny/updates main contrib non-fre
e
deb-src http://archive.debian.org/debian-security lenny/updates main contrib non
-free
deb http://archive.debian.org/debian-volatile lenny/volatile main contrib non-fr
ee
deb-src http://archive.debian.org/debian-volatile lenny/volatile main contrib no
n-free

All this with Debian GNU/Linux 6.0

I terminated an instance because I had no more use for it, but to avoid creating another one I want to know if it is possible to reactivate it, I've tryed in the management console but reactivate doesn't look like an option ...

Ok, I'll explain what I did... and at the end is the queston. THank you!

To set up my VPN I installed OpenVPN in server and client machines. On server I configured the cert Authority in the file /etc/openvpn/easy-rsa/vars editing this lines:

export KEY_COUNTRY=”ES”
export KEY_PROVINCE=”M”
export KEY_CITY=”Madrid”
export KEY_ORG=”My Organization”
export KEY_EMAIL=”[email protected]”

then i generated the cert:

cd /etc/openvpn/easy-rsa/ ln -s openssl-1.0.0.cnf openssl.cnf source vars ./clean-all ./build-ca

Created the cerver certs:

./build-key-server myServer

Diffie Hellman parameters to server

./build-dh

Copyed certs and keys /etc/openvpn

cd keys/ cp myServer.crt myServer.key ca.crt dh1024.pem /etc/openvpn/

Created client Certs

cd /etc/openvpn/easy-rsa/ source vars ./build-key client1

Copied this certs to client machine and erased them from server:

/etc/openvpn/ca.crt

/etc/openvpn/easy-rsa/keys/cliente.crt

/etc/openvpn/easy-rsa/keys/cliente.key

Edited /etc/openvpn/server.conf to my files names

ca ca.crt
cert myServer.crt
key myServer.key
dh dh1024.pem

/etc/init.d/openvpn restart

Verified that tun0 is there

ifconfig tun0

Enabled ip_forward parameter on /etc/sysctl.conf so packages may flow

net.ipv4.ip_forward=1

Also enabled virtual network masking so client may access all remote machines

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE

and saved the ip tables conf so they dont desappear in a reboot

Save conf into file

sudo sh -c “iptables-save > /etc/iptables.rules”

Edit /etc/network/interfaces adding the interface (eth0 in this case)

pre-up iptables-restore < /etc/iptables.rules

Getting the following server.conf

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb3

In the client i installed OpenVPN and edited the client.conf file which is in /etc/openvpn with the certs: ca.cert, client1.key, client1.conf getting the following client.conf file:

client
dev tun
proto udp
remote xxx.xxx.xxx.xxx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 3

then restarted:

/etc/init.d/openvpn restart

And when i want to verify that the interface tun0 is there with ifconfig tun0, there is not.

So I checked my log for errors, in the client machine and there is this error:

VERIFY ERROR: depth=0, error=unable to get local issuer certificate: /C=Es/ST=M/L=Madrid/O=xxx/OU=xxx/CN=myServer/name=xxx/[email protected]
TLS_ERROR: BIO read tls_read_plaintext error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
user openvpn[7984]: TLS Error: TLS object -> incoming plaintext read error
user openvpn[7984]: TLS Error: TLS handshake failed

and this is the error int the servers log

xxx.xxx.xxx.xxx:59439 SIGUSR1[soft,tls-error] received, client-instance restarting
MULTI: multi_create_instance called
xxx.xxx.xxx.xxx:59485 Re-using SSL/TLS context
xxx.xxx.xxx.xxx:59485 LZO compression initialized
xxx.xxx.xxx.xxx:59485 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
xxx.xxx.xxx.xxx:59485 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
xxx.xxx.xxx.xxx:59485 Local Options hash (VER=V4): '530fdded'
xxx.xxx.xxx.xxx:59485 Expected Remote Options hash (VER=V4): '41690919'
xxx.xxx.xxx.xxx:59485 TLS: Initial packet from [AF_INET]xxx.xxx.xxx.xxx:59485, sid=0349f4d6 657535c9
xxx.xxx.xxx.xxx:59440 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
xxx.xxx.xxx.xxx:59440 TLS Error: TLS handshake failed
xxx.xxx.xxx.xxx:59440 SIGUSR1[soft,tls-error] received, client-instance restarting

I've created the keys again, and added the full path of the certs in the client.conf file but it still doesn't work. Also tryed with all my firewalls disabled and still cant conect to my server because of that error.

Another important thing is that my server is an ubuntu 12.04 and client CentOS 6.3

I can see that i find my server but still the connection isn't completed...

What should I do??

If any more config files are needed, tell me to show you