<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
tt
{mso-style-priority:99;
font-family:"Courier New";}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.productname
{mso-style-name:productname;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Sure enough, my assumption was incorrect: ejabberd looks like it’s working fine.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">You’re definitely going to want to adjust your postgres connection settings for production. The settings you’ve got right now are pretty dangerous. From the
PostgreSQL docs:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="background:white"><span style="font-size:11.0pt;font-family:"Courier New";color:black">trust</span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:black;background:white">Allow the connection unconditionally. This method allows anyone that can connect to the<span class="apple-converted-space"> </span><span class="productname">PostgreSQL</span><span class="apple-converted-space"> </span>database
server to login as any<span class="apple-converted-space"> </span><span class="productname">PostgreSQL</span><span class="apple-converted-space"> </span>user they wish, without the need for a password or any other authentication. See<span class="apple-converted-space"> </span></span><a href="http://www.postgresql.org/docs/9.1/static/auth-methods.html#AUTH-TRUST"><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:#004E66;background:white">Section
19.3.1</span></a><span class="apple-converted-space"><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:black;background:white"> </span></span><span style="font-size:9.0pt;font-family:"Verdana","sans-serif";color:black;background:white">for
details.</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">It might not be a huge security concern right now, but it’s definitely something you won’t want to forget about later on. It could also throw a wrench in the
works while you’re testing stuff out.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">When you ran that Perl script to configure the database, did you use the actual hostname (or IP address) of the test server, or did you use ‘localhost’? I’ve
always used ‘localhost’ if I’m running through a one-server install, and haven’t had any problems. If you ran it with the actual hostname (or IP address), try to run the script with localhost instead.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Elliot J. Voris<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> Alexander Tim [mailto:TAlexander@triley.co.uk]
<br>
<b>Sent:</b> 11 February, 2014 11:28<br>
<b>To:</b> Elliot Voris; evergreen-admin@list.evergreen-ils.org<br>
<b>Subject:</b> RE: [Evergreen-admin] Fresh 2.5.2 install error connecting via Staff Client (Windows)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Log file was too big.<br>
<br>
From: Alexander Tim<br>
Sent: 11 February 2014 17:21<br>
To: 'Elliot Voris'; <a href="mailto:evergreen-admin@list.evergreen-ils.org">evergreen-admin@list.evergreen-ils.org</a>
<br>
Subject: RE: [Evergreen-admin] Fresh 2.5.2 install error connecting via Staff Client (Windows)<br>
<br>
Indeed it is all on the local box. The reason I poked around the pg_hba.conf was I was initially getting a "Connection Refused" error while using the perl script to generate the database. I googled about and added the following to pg_hba.conf:<br>
<br>
host all all 10.168.0.0/16 trust<br>
<br>
I then amended postgresql.conf with:<br>
<br>
listen_addresses = '*'<br>
<br>
This then allowed the perl script to generate the necessary database etc.<br>
<br>
I am using the username root, laziness on my part while setting this up for a test. This is the admin username I setup while running the perl script.<br>
<br>
I have attached the log file. I note there are some errors from this morning in there but anything from about 1300 on should be about correct for the current run of the installation process.<br>
<br>
Regards<br>
<br>
Tim<br>
<br>
From: <a href="mailto:evergreen-admin-bounces@list.evergreen-ils.org">evergreen-admin-bounces@list.evergreen-ils.org</a> [<a href="mailto:evergreen-admin-bounces@list.evergreen-ils.org">mailto:evergreen-admin-bounces@list.evergreen-ils.org</a>] On Behalf Of
Elliot Voris <br>
Sent: 11 February 2014 16:57<br>
To: <a href="mailto:evergreen-admin@list.evergreen-ils.org">evergreen-admin@list.evergreen-ils.org</a>
<br>
Subject: Re: [Evergreen-admin] Fresh 2.5.2 install error connecting via Staff Client (Windows)<br>
<br>
Hi, Tim<br>
<br>
You mentioned that this is a test setup. Are you setting up everything on one server (database, evergreen, ejabberd, etc.?), or are you putting some components onto separate servers?<br>
<br>
If everything's on one server (which should be the case, if you've been following right along with the install docs), you shouldn't have to mess around with pg_hba.conf since everything is happening locally. I know that I've messed up my setup when I tried
playing around with pg_hba.conf, so I try to avoid doing that. Mine is using /32, everything local, so it shouldn't be a matter of opening up the local subnet.<br>
<br>
In that auth error, it looks like you're trying the username 'root'. Is that so? Make sure you're using the admin-user and admin-pass that you set up when you were creating the evergreen database:
<a href="http://docs.evergreen-ils.org/2.5/_creating_the_evergreen_database.html#_creating_the_evergreen_database_and_schema" target="_blank">
http://docs.evergreen-ils.org/2.5/_creating_the_evergreen_database.html#_creating_the_evergreen_database_and_schema</a>
<br>
Would you mind sending along the ejabberd log file /var/log/ejabberd/ejabberd.log? Based on your original message, it strikes me as something with ejabberd (granted, I'm not the foremost authority on this stuff haha)<br>
<br>
Thanks!<br>
<br>
Elliot J. Voris<br>
<br>
Tindall Riley Marine (UK) Limited<br>
Authorised and regulated in the UK by the Financial Conduct Authority.<br>
<br>
Registered Office: Regis House, 45 King William Street, London EC4R 9AN<br>
Company No: 8451968. V.A.T. No.: 174 7460 86<br>
Tel: +44 (0)20 7407 3588 Fax: +44 (0)20 7403 3942<br>
<br>
This email (and any attachments) is confidential and may be privileged. It may be read, copied and used only by the addressee. If you have received this in error, please contact us immediately.<br>
<br>
<o:p></o:p></p>
</div>
</body>
</html>