Damon Timm

Really. Thanks.

this command:

$ sudo aptitude install devscripts cracklib2-dev dpkg-dev libssl-dev

did this:

E: Could not get lock /var/lib/dpkg/lock - open (11 Resource temporarily unavailable)
E: Unable to lock the administration directory (/var/lib/dpkg/), is another process using it?
Reading package lists… Done
Building dependency tree
Reading state information… Done
Initializing package states… Done
Building tag database… Done
E: Could not get lock /var/lib/dpkg/lock - open (11 Resource temporarily unavailable)
E: Unable to lock the administration directory (/var/lib/dpkg/), is another process using it?

That’s as far as I got.

Hi

did this on Ubuntu and it worked perfectly with instructions. Ubuntu said it updates for netatalk and I updated - now it does not allow connections. Services start up normally upon reboot of pc but when I restart the services I get the following:

nbp_rgstr: Connection timed out
Can’t register dhashen-desktop:Workstation@*

What can I do?

I tried building netatalk with SSL and got the following errors. Can you help?

Thank you!

——————————–

pheed@IBM-Linux:~/src/netatalk/netatalk-2.0.3$ DEB_BUILD_OPTIONS=ssl sudo dpkg-buildpackage -us -uc
dpkg-buildpackage: source package is netatalk
dpkg-buildpackage: source version is 2.0.3-5
dpkg-buildpackage: source changed by Jonas Smedegaard
dpkg-buildpackage: host architecture i386
dpkg-buildpackage: source version without epoch 2.0.3-5
dpkg-checkbuilddeps: Unmet build dependencies: cdbs (>= 0.4.23-1.1) autotools-dev debhelper (>= 4.2.0) quilt patchutils (>= 0.2.25) cdbs (>= 0.4.27-1) dh-buildinfo d-shlibs (>> 0.19) libdb4.2-dev libwrap0-dev libpam0g-dev libslp-dev libcupsys2-dev heimdal-dev
dpkg-buildpackage: Build dependencies/conflicts unsatisfied; aborting.
dpkg-buildpackage: (Use -d flag to override.)

Damon, thanks for your help. I must have mistyped one of the earlier commands. I tried a second time and it worked perfectly. Thanks again!

Works perfectly on Debian etch via SSH.

Update: Whoops, just realized I’m actually on 6.06 right now. Made the change a while back and forgot about it :).

[…] (Big thanks to Damon Timm for putting together the quickest way to set up AFP with SSL using just those commands above) […]

Im getting the following error after using the sudo debi command,

Selecting previously deselected package netatalk.
(Reading database ... 122889 files and directories currently installed.)
Unpacking netatalk (from netatalk_2.0.3-5_i386.deb) ...
Setting up netatalk (2.0.3-5) ...
Starting Netatalk services (this will take a while): nbp_rgstr: Connection timed out
Can't register milton-desktop:Workstation@*
invoke-rc.d: initscript netatalk, action "start" failed.
dpkg: error processing netatalk (--install):
subprocess post-installation script returned error exit status 1
Errors were encountered while processing:
netatalk
debi: debpkg -i failed

can’t work out what I’ve done wrong, any idea’s?

This sounds promising as I have messed with VMWare in the past.
Thanks Damon, will report back.

@ tricky:

I’m having your same problem. But I DO use VMware player 2.0 to develop with visual Studio 2005 . ( Work for the university )….

Any ideas about how to get rid of that problem without having to UNINSTALL VMware ???

Here’s my thread in ubuntu forums

http://ubuntuforums.org/showthread.php?t=410274&page=2

Hi if you get the error

dpkg: error processing netatalk (--install):
subprocess post-installation script returned error exit status 1
Errors were encountered while processing:
netatalk
debi: debpkg -i failed

this is normally due to having more than one network interface (i have 2 and get this issue) the reason its also a vmware issue is they create a virtual network for communication.

the fix for me was simple

navigate to /etc/netatalk and open up atalkd.conf in your preferred text editor (you’ll have to sudo).

if you know all your network adapters then skip this paragraph… otherwise open up a terminal and run the command ‘ifconfig -a’ this will list your adapters… in my case i have ‘eth0′, ‘eth1′ and ‘lo’ (ignore lo as its a loopback device but remember the others)

in atalkd.conf add the lines

eth0 -noroute
eth1 -noroute

(or whatever the eth you have)

save do the debi and it should all work fine :-)

Hi,
everything worked fine on the ubuntu side, but when I try to connect a Mac to the server I get an error indicating that I am using a wrong user or password. The dialog box on the mac does’nt let me login as guest, and the username and password I am using are the ones I use to login to the server.
Do I have to specify a different set of passwords? what could be wrong?

Hi Damon,

Hope you can shed some light here.. I have ubuntu 7.10 running netatalk, with a USB2.0 HFS+ (non-journaled) drive hooked up. It works fine, however the permissions are a mess.

IE, I can’t even mount the drive in netatalk (samba works fine), MacOS just gives me some weird Finder error when I try to mount it.

My AppleVolumes.default is set to
/mnt/mac “Network Mac” allow:username

I’m not sure if I’m doing something wrong, but there aren’t any recent “docs” on netatalk to properly setup something like this. The reason I’m using HFS is because I need to move the drive back and forth between ubuntu and a mac at work and I need to keep it consistent.

Any help you could offer would be great

[…] I found two posts by Damon Timm and Durk Hellinga (on Vivaldi Street in Leeuwarden, Netherlands, no less) that describe the general process. However, as my comment on Durk’s blog says, I had some problems with circular dependencies. When you try to build the package with dpkg-buildpackage, it complains about some dependencies: % DEB_BUILD_OPTIONS=ssl dpkg-buildpackage dpkg-checkbuilddeps: Unmet build dependencies: cdbs (>= 0.4.6) debhelper (>= 4.1.46) dh-buildinfo d-shlibs (>> 0.19) libdb4.2-dev libwrap0-dev libpam0g-dev libslp-dev libcupsys2-dev heimdal-dev (>= 0.7.1-3) debuild: fatal error at line 993: You do not appear to have all build dependencies properly met, aborting. (Use -d flag to override.) If you have the pbuilder package installed you can run /usr/lib/pbuilder/pbuilder-satisfydepends as root to install the required packages, or you can do it manually using dpkg or apt using the error messages just above this message. […]

Thanks,
that worked well. Unfortunately the netatalk-server does only connect to lo0. my atalkd.conf looks like this:
eth0 -router -phase 2 -net 1-1000 -addr 1000.142 -zone “Macs”
i copied the asip-status.pl - script to my mac and checked from there it tells me:
Network address: 127.0.1.1 (TCP/IP address)
Network address: 1000.142 (ddp address)
i saw some other references to problems like this while googling (which is how i found out about asip-status.pl) but i could not find a solution. Do you happen to have an idea?

@ Damon: First, thanks for you reply.

I can connect to my server with ssh, apache, smb, vnc etc etc. I can also connect to netatalk, but not login. If I stop the netatalk service, I don’t get the login screen. I have also tried to change the port without success. I still get the login screen, but I can’t login (says it fails error “-5002″).

Thankx,

just wanna say thankx; it work for me @ once :-D I,m using a Imac G5 with tiger 10.4.10 and ubuntu desktop 7.10 and it all worked.

so thankx for this tutorial

[…] http://www.damontimm.com […]

Worked a treat on 64bit Ubuntu… Many thanks…

I’ve got two netatalk servers (ubuntu 7.10 server) running on the same subnet. I can connect to either server from the same client from an OS X client, but not both (at the same time).

If I connect to one server as user “A”, then try to connect to the other server as user “B”, .. the Volume (user “B”) doesn’t appear. Rather, an unselectable “A” volume appears in the Connect to Server dialog (OS X client).

Any ideas?

Well have tried almost everything.
u will have to deinstall vmware fully “purge”
apt-get autoremove netatalk –purge
remove the src dir in ~
deinstall vmware software only. not the winxp dir/or any other os dir.
follow instructions above.

reinstall an be happy ” I mean vmware”

Damon.

Well done. As long as I followed your advice exactly it worked great with Gutsy Gibbon and Leopard!

Great and useful blog.

Terry

[…] Well it turns out netatalk on Debian based systems is not linked to openssl and hence can’t do the DHX password encryption. Initially I was ticked off at this but after reading the bug and Debian legal’s position, I get why this is the case. I went about the process of rebuilding netatalk with the very helpful howto here and with additional help from this article. […]

Worked flawlessly, many thanks, excellent

[…] http://www.damontimm.com/blog/how-to-install-netatalk-afp-on-ubuntu-with-encrypted-authentication/ […]

[…] Damon Timm has a great post on installing netatalk on Ubuntu with SSL support.  I won’t go through the licensing issues again (I feel like enough people have done that already).  Suffice to say, Ubuntu doesn’t ship netatalk with SSL enabled, and Leopard requires SSL support to connect to AFP shares out of the box.  It’s easy enough to allow Leopard to use plaintext passwords with the following command: […]

Got it!

Installed again with synaptic and it works.

Thanks for help, got my head round it now

Hi Damon,

I tried it again. If I change /media/disk/ShareFiles “ShareFiles” to /media/disk “ShareDisk”, I can access this mounted disk. I don’t understand why?

Anyway, I can use this Netatalk service now.

Thank you very much!

Jay.

I have had Netatalk working for a long time on a Ubuntu box that I use as my Music Server. I recently updated both Mac to 10.5 and Ubuntu 8.04 I now get the message ‘home directory could not be mounted’ when connecting via the Mac. Netatalk is running and I have success connecting this way to another laptop running Ubuntu 8.04.

Any ideas

You may have a good point with that. I did a in place upgrade on the Music Server and a clean install on the Laptop. Maybe a backup of the data and a clean install would be the best way to handle this. I’m a Mac support man by trade and have always taken the time to zero and do a clean build to get the best results. I don’t know if their is a command line on Linux to clean out unwanted crufted. On Mac 10.4 I used Applejack to fix permissions and fix low level problems. In Ubuntu I’m a newbie who likes just likes to learn.

@ rachel: I have struggled to get this to build with the proper DHX support on Hardy and above, but I finally got it working last night. I’m not certain which of these steps did it, but it might be worth a try.

1) Completely remove netatalk, cracklib2-dev and libssl-dev:

sudo aptitude purge netatalk cracklib2-dev libssl-dev

2) Use a slightly different syntax for setting the build options (as per this page):

After downloading the netatalk source, edit ~/src/netatalk/netatalk-2.0.3/debian/rules. Find the line which says:

DEB_UPDATE_RCD_PARAMS := defaults 50

Add this line directly beneath it, then save the file:

DEB_BUILD_OPTIONS=ssl

3) I used a different command to build:

dpkg-buildpackage

4) Then installed with:

dpkg -i ~/src/netatalk/netatalk_2.0.3-9_i386.deb

After sorting the multiple ethernet issue (VMware), the modules are all in place and everything works perfectly (including the avahi daemon)!

What is strange is that I *thought* I had got this working when I first set things up over a year ago, because Tiger had stopped warning about cleartext passwords. It seems that wasn’t the case after all! Thanks to everyone who has contributed, it has really been helpful.

@Damon: thanks for compiling alle that. Thanks to you I could access my Ubuntu fileserver from my all new shiny MacOS X Leopard in an instant after having installed the latter. Very helpful!

Hi,

Thanks for the guide. Maybe someone here can help - still having trouble connecting to my shares; I think the openssl is still not getting built in properly. Mac is running 10.4, ubuntu is 8.04. On the Mac I enter the address of my server (afp://10.0.0.100), and I get one of two problems.

1: I get the authorization dialog, enter my username and password (on the server). It tells me that the server does not support openssl and so it will try to send the password in cleartext. Next, “An Error Occurred,” and that’s it.

2: this just showed up, first time i’ve seen it actually, when I try to connect to the server:
“The operation cannot be completed because one or more required items cannot be found. (Error code -35)”

It’s weird, everytime I do a new linux install I go through this process and it never gets any easier. :)

Hi!

I’ve set up netatalk-2.03-9 on my Ubuntu 8.04 machine. It builds and installs fine. When I try to connect from my Leopard machine it rejects my login and says “Your password has expired”.

I’ve checked my user at the ubuntu machine, and it’s password and account is set to never expire. I even tried to set it to 2030-something, but I get the same error.

System time on both machines are the same and correct.

Any Ideas?

ok, so more details.

in the logs i see that it can’t load uams_dhx.so, the Diffie-Hellman key exchange. uams_dhx.so is in fact missing from /usr/lib/netatalk. i guess this is precisely the thing that is supposed to be built with OpenSSL, isn’t it? so no wonder it doesn’t work. :)

hm, now off to figure out why it’s still not building properly … will try damon timm’s instructions again …

Anyone having any ideas why I get “Your password has expired”?

See earlier post for details.

/Nick