Something is wrong with this project. Nothing but issues with fresh install. Ubuntu 14.04

[Anonymous]

Hello, there seems to an issue with the current install from this site and sourceforge. I have install Scrollout on a new Ubuntu 14.04 following the steps on this site and all i'm getting now is a "Welcome to nginx" web page. I took a look at the scrollout.conf file in site-available directory and found server blocks referencing Jitsi meeting server.

server {
 listen 80 default_server;
 listen [::]:80 default_server;
 return 301 https://$host$request_uri;
}

server {
 listen 443 ssl default_server;
 listen [::]:443 ssl default_server;

 ssl_certificate /etc/postfix/certs/scrollout.cert;
 ssl_certificate_key /etc/postfix/certs/scrollout.key;
 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
 ssl_prefer_server_ciphers on;
 ssl_ciphers "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA256:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EDH+aRSA+AESGCM:EDH+aRSA+SHA256:EDH+aRSA:EECDH:!aNULL:!eNULL:!MEDIUM:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!SEED";

 add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;";
 add_header imagetoolbar "no";
 add_header Content-Security-Policy "frame-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self'; object-src 'self'";
 add_header X-Content-Type-Options "nosniff";
 add_header X-Frame-Options "DENY";
 add_header X-XSS-Protection "1; mode=block";
 add_header X-Robots-Tag "none";
 add_header Alternate-Protocol "443:quic";

 root /var/www;

 # Add index.php to the list if you are using PHP
 index index.php index.html index.htm;

 server_name _;


 location / {
 # First attempt to serve request as file, then
 # as directory, then fall back to displaying a 404.
 try_files $uri $uri/ =404;

 allow 192.168.0.0/16;
 allow 172.16.0.0/12;
 allow 10.0.0.0/8;

 # Uncomment to limit access from Intranet only
 # deny all;

 auth_basic "Scrollout F1";
 auth_basic_user_file /var/www/.htpasswd;
 ssi on;
 }


 # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
 #
 location ~ \.php$ {
 include snippets/fastcgi-php.conf;
 # # With php5-cgi alone:
 # fastcgi_pass 127.0.0.1:9000;
 # With php5-fpm:
 fastcgi_pass unix:/var/run/php5-fpm.sock;
 }

location ~ \.html$ {
    if (!-f $request_filename) {
        rewrite ^(.*)\.html$ $1.php permanent;
    }
}


location ~ \.cgi$ {
   include /etc/nginx/fastcgi_params;
   fastcgi_pass fcgiwrap;
}


 # deny access to .htaccess files, if Apache's document root
 # concurs with nginx's one
 #
 location ~ /\.ht {
 deny all;
 }
}

### Video Conference

server_names_hash_bucket_size 64;

server {
    listen 80;
    server_name ~^meet\..+\..+$;
    return 301 https://$host$request_uri;
}
server {
    listen 443 ssl;
    server_name ~^meet\..+\..+$;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA256:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EDH+aRSA+AESGCM:EDH+aRSA+SHA256:EDH+aRSA:EECDH:!aNULL:!eNULL:!MEDIUM:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!SEED";

    add_header Strict-Transport-Security "max-age=31536000";

    ssl_certificate /etc/postfix/certs/scrollout.cert;
    ssl_certificate_key /etc/postfix/certs/scrollout.key;

    root /usr/share/jitsi-meet;
    index index.html index.htm;

    location /config.js {
        alias /etc/jitsi/meet/demo.scrolloutf1.com-config.js;
    }

    location ~ ^/([a-zA-Z0-9=\?]+)$ {
        rewrite ^/(.*)$ / break;
    }

    location / {
        ssi on;
    }

    # Backward compatibility
    location ~ /external_api.* {
        root /usr/share/jitsi-meet/libs;
    }

    # BOSH
    location /http-bind {
        proxy_pass      http://localhost:5280/http-bind;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header Host $http_host;
    }
}

As you can see, there is a server block configured for Video Conference with Jitsi meeting. What the hell is this? Has the project been hijacked?

Is there a way to get older install files? like the ones that were based on apache? I have used Scrollout for the pass year and it's been great, but now it seems messed up.

Please let me know, I would to still use Scrollout if I can.

Thanks,

James

[Anonymous]

You need to install scrollout on debian 8. And be sure to select a network mirror during the debian 8 install, otherwise the scrollout install will fail.

[Anonymous]

So, ubuntu 14.04 is no longer supported? is there any way to get the install tar, before the apache to nginx switch? I have another system running Scrollout F1 on ubuntu 14.04 running perfectly, is there any way to move that setup to a new machine and rename stuff?

Thanks,

James

[Anonymous]

I never knew it once worked on ubuntu! Unforunately I don't know how/where to get the older install tar files.

The only way I can think of to move your ubuntu-based scrollout to a new machine is this (I'm not even sure that it will work)...

Get the latest install files and look at the install script to see exactly how the system is setup.prior to installing scrollout. And then run these commands from the script on a fresh ubuntu install. And then you can try to rsync the /var/www/ directory from your old server to the new.

But that sounds like a lot more trouble than just installing on debian 8. I actually installed scrollout successfully on debian 8 only a few days ago...

[Anonymous]

OK, I'll get it a try on Debian 8 and see how things work.

Thanks,

James

[Anonymous]

OK, I did it, but there are different issues now. It doesn't look in Dovecot is installed.

I'm now on a Debian 8 server, fresh install, used the instructions on this site to install.

I get this in the mail log, when I test sending mail to this new machine.

Sep 9 03:49:29 spamfilter02 postfix/smtpd[4917]: Anonymous TLS connection established from mail-yb0-f181.google.com[209.85.213.181]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)

Sep 9 03:49:29 spamfilter02 postfix/smtpd[4917]: warning: SASL: Connect to private/auth failed: No such file or directory

Sep 9 03:49:29 spamfilter02 postfix/smtpd[4917]: fatal: no SASL authentication mechanisms

Sep 9 03:49:30 spamfilter02 postfix/master[11730]: warning: process /usr/lib/postfix/smtpd pid 4917 exit status 1

Also, the red alert in the admin web page is on with Dovecot.

Also, the Jitsi meeting config info is still in the scrollout.conf file in nginx. Not sure what is going on.

I have configured the connect tab and a route, with ldap lookup, like the ubuntu 14.04 server that works.

I have searched the box and there is no dovecot installed.

is it as easy as just installing it? or is there some other fix?

Can i by past Dovecot and have postfix use ldap instead for authentication?

Should I start over again?? Let me know what you think.

Thanks,

James

[Anonymous]

Hi James...during the OS-install, did you specify a network mirror?

I remember when I failed to specify a network mirror, I had similar issues. I didn't know how to specify a network mirror after debian was installed, and I didn't have time to figure out how to do it at that moment. So I just reinstalled.

But if you can configure a Debian network mirror, and after that run...

/var/www/bin/update.sh force

...it might work. Otherwise I'd just reinstall.

Another thing...I found that a fresh scrollout installation always has a broken firewall. Running...

/var/www/bin/reset_iptables.sh

...and then logging in again via ssh always fixed this for me.

[Anonymous]

I don't have that option, because the server I'm using is VPS and once I ask for a server, it creates it from a image. I get the server with a base install and then I APT it up to date.

Would you know what mirror's I would need to add? I can add it before running the Scrollout install script on a fresh server.

Also, I noticed no one is saying anything about the video conferencing server block in the scrollout.conf file for nginx. Why? Can someone who installed Scrollout in the past 2 weeks, take a look at there scrollout.conf file in /etc/nginx/sites-available/ and see if they see the video conferencing server block configuration near the bottom of the config.

Please let me know if you see it.

Thanks,

James

[Anonymous]

Hi James...

Here's a list of debian mirrors. Just choose one closest to your location.

https://www.debian.org/mirror/list

And yes... I see the video conferencing block in the config file you mentioned.

[Anonymous]

Hey all, I just wanted to update everyone on my issue.

The addition of the Debian mirrors half worked. When I added the mirror to the source file and updated everything, I had the same issue with Dovecot not installing. I did some research and found that if you have debian squeeze entries in the source file, Dovecot will not install because of some dependencies.

So, I removed all squeeze entries and updated everything and it install Dovecot and everything started to work as normal.

Thanks for everyones help in getting this sorted out. I have to now migrate the old Ubuntu servers to Debian, which I think should be easy now.

One more question, (a little off topic) what is the best way to sync SASL password across all Scrollout servers? Let me know.

Thanks,

James