close Warning: Can't synchronize with repository "keplertools" (/srv/svn/keplertools does not appear to be a Subversion repository.). Look in the Trac log for more information.

Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#4332 closed Defekt (ungültig)

Kepler Bot reagiert nicht mehr

Reported by: Stephan Richter Owned by: bau
Priority: bald erledigen Milestone: Schuljahr 2021/22
Component: Webdienst: Kepler-Login Severity: beeinträchtigt den Unterricht einiger Lehrer
Keywords: Cc:

Description

Heute morgen erhalte ich keine OTPs mehr und auch die Login-Bestätigung für den Kepler-Login erscheint nicht.

Die Versandbestätigung (zwei Haken) erscheint. Die Verbindung scheint also zu bestehen,

Change History (4)

comment:1 by Stephan Richter, 5 years ago

Resolution: → ungültig
Status: new → closed

Okay, jetzt geht es plötzlich wieder...

comment:2 by bau, 5 years ago

ipFire und damit auch paedml hatten keine Namensauflösung.
Teste das gerade

comment:3 by bau, 5 years ago

Das ist ein übler Sch...
Seit ipFire von dnsmaq auf unound umgestellt hat, macht das Teil Probleme.
Klar ist es gut, wenn man DNSSEC benutzen kann, unbound erzwingt das aber und ich muss es ihm mühevoll abgewöhnen.
Das ist recht unspaßig. Ich habe jetzt ncoh was gefunden: ​https://www.nlnetlabs.nl/documentation/unbound/howto-turnoff-dnssec/ das hat offenbar geholfen.

comment:4 by bau, 5 years ago

unbound.conf

#
# Unbound configuration file for IPFire
#
# The full documentation is available at:
# https://www.unbound.net/documentation/unbound.conf.html
#

server:
        # Common Server Options
        chroot: ""
        directory: "/etc/unbound"
        username: "nobody"
        port: 53
        do-ip4: yes
        do-ip6: no
        do-udp: yes
        do-tcp: yes
        so-reuseport: yes
        do-not-query-localhost: yes

        
        # System Tuning
        include: "/etc/unbound/tuning.conf"

        # Logging Options
        verbosity: 1
        use-syslog: yes
        log-time-ascii: yes
        log-queries: no

        # Unbound Statistics
        statistics-interval: 0
        statistics-cumulative: yes
        extended-statistics: yes

        # Prefetching
        prefetch: yes
        prefetch-key: yes

        # Randomise any cached responses
        rrset-roundrobin: yes

        # Privacy Options
        hide-identity: yes
        hide-version: yes
        qname-minimisation: yes
        minimal-responses: yes

        # DNSSEC - abschalten gemäß https://www.nlnetlabs.nl/documentation/unbound/howto-turnoff-dnssec/
        #auto-trust-anchor-file: "/var/lib/unbound/root.key"
        module-config: "iterator"
        val-permissive-mode: yes
        val-clean-additional: yes
        val-log-level: 1

        # Hardening Options
        harden-glue: no
        harden-short-bufsize: no
        harden-large-queries: no
        harden-dnssec-stripped: no
        harden-below-nxdomain: no
        harden-referral-path: no
        harden-algo-downgrade: no
        use-caps-for-id: no

        # Listen on all interfaces
        interface-automatic: yes
        interface: 0.0.0.0

        # Allow access from everywhere
        access-control: 0.0.0.0/0 allow

        # Bootstrap root servers
        root-hints: "/etc/unbound/root.hints"

        # Include DHCP leases
        include: "/etc/unbound/dhcp-leases.conf"

        # Include any forward zones
        include: "/etc/unbound/forward.conf"

remote-control:
        control-enable: yes
        control-use-cert: yes
        control-interface: 127.0.0.1
        server-key-file: "/etc/unbound/unbound_server.key"
        server-cert-file: "/etc/unbound/unbound_server.pem"
        control-key-file: "/etc/unbound/unbound_control.key"
        control-cert-file: "/etc/unbound/unbound_control.pem"

# Import any local configurations
include: "/etc/unbound/local.d/*.conf"
 


Note: See TracTickets for help on using tickets.