So you finally did it: You upgraded from Ubuntu Server 10.04.x LTS to 12.04.x LTS and things went well, but after the reboot you’re having a few problems – you’re not alone!<\/p>\n
There’s probably an infinite array of server configurations out there, so the notes presented here will hopefully provide some troubleshooting paths for you, rather than a definitive guide to fixing all your woes and are geared to the specific configuration of my server: One that runs Postfix and is used primarily as a mail server.<\/p>\n
Once of the big changes from 10 to 12 is the addition of resolvconf: a framework for managing multiple DNS configurations. The addition of this server means that \/etc\/resolv.conf is now automatically generated, and any changes you make will get overridden. It seemed strange to me that the upgrade didn’t simply pull across the existing configuration, and once fixed it was clear the was the root cause of a number of problems.<\/p>\n
Check your \/etc\/resolv.conf…<\/p>\n
sudo less \/etc\/resolv.conf\r\n\r\n# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)<\/span>\r\n# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN<\/span>\r\nmay also include a nameserver entry that doesn't match your previous settings...<\/em><\/span><\/pre>\nThe config files for resolvconf<\/strong> reside in \/etc\/resolvconf\/resolv.conf.d, and you can review your pre-upgrade settings in the file ‘original’.<\/p>\nBut in order to have resolvconf automatically pickup the changes each time it starts we need to edit the following file:<\/p>\n
sudo vi \/etc\/network\/interfaces<\/pre>\nand make sure that we include\/alter the following line to include our relevant DNS server addresses and local domain (note the space between name server entries)…<\/p>\n
dns-nameservers 192.168.1.7 192.168.1.8<\/span><\/strong><\/em><\/span>\r\n dns-search your.domain<\/span><\/strong><\/em><\/span><\/pre>\nWhen you’re all done…<\/p>\n
sudo \/etc\/init.d\/networking restart<\/pre>\nand check to make sure the changes have taken.<\/p>\n
sudo vi \/etc\/resolv.conf\r\n\r\n# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)<\/span>\r\n# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN<\/span>\r\nnameserver 192.168.1.7<\/strong><\/em><\/span>\r\nnameserver 192.168.1.8<\/strong><\/em><\/span>\r\nsearch your.domain<\/strong><\/em><\/span><\/pre>\nA host by any other name…<\/h2>\n
Post upgrade I had a problem with all incoming messages being rejected with the following errors in the \/var\/log\/mail.log<\/p>\n
postfix\/smtpd[2784]: warning: connect to 127.0.0.1:10023: Connection refused<\/span>\r\npostfix\/smtpd[2784]: warning: problem talking to server 127.0.0.1:10023: Connection refused<\/span>\r\nvenus postfix\/smtpd[2784]: warning: connect to 127.0.0.1:10023: Connection refused<\/span>\r\nvenus postfix\/smtpd[2784]: warning: problem talking to server 127.0.0.1:10023: Connection refused<\/span>\r\n\r\n<\/pre>\nOn my server port 10023 is used by Postgrey and after googling the error it looks like there is a conflict in the hosts file that Postgrey is sensitive to now that it natively supports IPv6.<\/p>\n
sudo vi \/etc\/hosts<\/pre>\nI changed<\/p>\n
::1\u00a0\u00a0\u00a0\u00a0 localhost<\/strong> ip6-localhost ip6-loopback<\/span><\/pre>\nto<\/p>\n
::1\u00a0\u00a0\u00a0\u00a0 localhost6<\/span><\/strong> ip6-localhost ip6-loopback<\/span><\/pre>\nAfter a reboot I checked everything was ok…<\/p>\n
$ host localhost<\/strong>\r\nlocalhost has address 127.0.0.1<\/span>\r\nlocalhost has IPv6 address ::1<\/span><\/pre>\n\u00a0Sending messages and SASL<\/h2>\n
What a headache it was trying to trace this problem! I refer to this change in an update to a previous post here<\/a>, but I thought it a good idea to include it below for completeness.<\/p>\nOnce I’d fixed the other problems above I noticed I couldn’t send any emails. All attempts resulted in errors about being unauthorised to send messages.<\/p>\n
I checked the \/var\/log\/auth.log and discovered that there seemed to be missing information (like the hostname) in the entries – so I checked my \/etc\/postfix\/sasl\/smtpd.conf and checked online and discovered that the format of the file had changed between versions.<\/p>\n
For example, auxprop_plugin<\/strong> was defined as ‘mysql<\/strong><\/em>‘and had worked perfectly fine under 10.04, but under 12.04 was more sensitive to it’s proper definition: ‘sql’. Some of the labels had also changed which meant that some of the settings weren’t being read properly.<\/p>\nTo check the configuration, a handy command is:<\/p>\n
sudo saslfinger -s<\/pre>\nI changed the \/etc\/postfix\/sasl\/smtpd.conf and made the following changes\/additions in red<\/span>…<\/p>\nsudo vi \/etc\/postfix\/sasl\/smtpd.conf\r\n\r\npwcheck_method: saslauthd<\/strong><\/span>\r\nmech_list: plain login cram-md5 digest-md5<\/strong><\/span>\r\nlog_level: 7<\/span>\r\nallow_plaintext: true<\/span>\r\nauxprop_plugin: sql<\/strong><\/span><\/span>\r\nsql_engine: mysql<\/strong><\/span>\r\nsql_hostnames<\/strong><\/span>: 127.0.0.1<\/span>\r\nsql_user: mail<\/strong><\/span>\r\nsql_passwd<\/strong><\/span>: mailPASSWORD<\/strong><\/em><\/span>\r\nsql_database: maildb<\/strong><\/span>\r\nsql_select: select crypt<\/strong> from users<\/strong> where id<\/strong>='%u@%r' and enabled<\/strong> = 1\r\n<\/span><\/pre>\nAfter a reboot I was able to send messages without a problem.<\/p>\n
Housekeeping (not related to the upgrade)<\/h2>\n
For those<\/span> who don’t know (like me…) the DNSBL servers where shutdown in 2013. Now seems like a good time as any to update main.cf…<\/p>\nvi \/etc\/postfix\/main.cf<\/span><\/pre>\nand remove ‘reject_rbl_client dnsbl.njabl.org<\/strong>‘…<\/span>
\n<\/span><\/p>\nsmtpd_client_restrictions = reject_rbl_client sbl.spamhaus.org, reject_rbl_client blackholes.easynet.nl, reject_rbl_client dnsbl.njabl.org<\/del><\/span><\/pre>\nSave and restart…<\/p>\n
sudo \/etc\/init.d\/postfix restart<\/pre>\n\n","protected":false},"excerpt":{"rendered":"
“Where is the love…” So you finally did it: You upgraded from Ubuntu Server 10.04.x LTS to 12.04.x LTS and things went well, but after the reboot you’re having a few problems – you’re not alone! There’s probably an infinite array of server configurations out there, so the notes presented here will hopefully provide some… Read more »<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[112,121,113,124,118,125,40,116,120,37,119,44,117,21,26,114,115,29,122,123],"class_list":["post-140","post","type-post","status-publish","format-standard","hentry","category-technical-resource","tag-10-04","tag-121","tag-12-04","tag-auxprop","tag-dns","tag-dnsbl","tag-hosts","tag-interfaces","tag-ipv6","tag-mail","tag-mail-log","tag-main-cf","tag-networking","tag-postfix","tag-postgrey","tag-resolv-conf","tag-resolvconf","tag-sasl","tag-sending","tag-smtpd-conf"],"_links":{"self":[{"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=\/wp\/v2\/posts\/140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=140"}],"version-history":[{"count":9,"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=\/wp\/v2\/posts\/140\/revisions"}],"predecessor-version":[{"id":191,"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=\/wp\/v2\/posts\/140\/revisions\/191"}],"wp:attachment":[{"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=140"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/templesoft.co.nz\/journal\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}