I spend another couple hours tonight banging my head on the keyboard fighting a "No authority found" error in Asterisk. This seems to come up pretty regularly when I bring up new IAX trunks, but this one was an old trunk I was trying to recover. I'm not sure if this is a new feature in Asterisk 13 or what, but turns out that incoming matching rules only look at "type=user" (or "type=friend") entries. That's different from SIP channels which will match on either one. So lesson learned.

I upgraded Owncloud from version 7 to version 8 using the Debian package repos. In the process, something must have gone wrong because the website now showed just a blank page. Curiously, the app continued to work.

Nothing showed up in the Apache server logs, nor anywhere else that I could find. Finally I opened up index.php and started tracing through the code. Turns out I was getting an exception with a description of

Today news broke that SSL 3.0, the last version before TLS was released, has been thoroughly cracked. The protocol itself was exploited, not just a bug in an implementation. That means that no software which supports SSL3 is safe. Most notable in this class is Internet Explorer 6 and Windows XP. Anyone still using either of those, of course, should have moved off of them long long ago.

When attempting to use su, you may receive the following error:

# su - otheruser
su: cannot set user id: Resource temporarily unavailable

This is caused by the PAM limits.conf file. Often (always?) it's because the target user has exceeded the max number of processes allowed. You can verify this with ps.

# ps -eLF |grep otheruser |wc -l
1127

In this case, 1127 is greater than the max allowed of 1024. To fix this, set the nproc limit higher, or stop any unwanted processes.

Thanks to everybody who attended my OpenWest presentation today. Here are the configs I used in the demo. Happy encrypting!