Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #263760 > unrolled thread

rhs time out error?

Back to article view | Back to linux.debian.user

Contents

  rhs time out error? Karen Lewellen <klewellen@shellworld.net> - 2023-11-21 22:40 +0100
    Re: rhs time out error? "Thomas Schmitt" <scdbackup@gmx.net> - 2023-11-21 23:10 +0100
      Re: rhs time out error? Karen Lewellen <klewellen@shellworld.net> - 2023-11-21 23:30 +0100
        Re: rhs time out error? "Thomas Schmitt" <scdbackup@gmx.net> - 2023-11-22 08:50 +0100
          Re: rhs time out error? Curt <curty@free.fr> - 2023-11-26 17:40 +0100
      Re: rhs time out error? Nicolas George <george@nsup.org> - 2023-11-21 23:50 +0100

#263760 — rhs time out error?

Hi folks,
Our organization curtain up distribution inc.
www.curtainupdistribution.org
uses alpine as provided by  dreamhost.
Although not showing up everywhere meaning the error must have a fix 
laughs, I cannot find out what rhs means.
Getting an rhs to imap server timeout with one of the new office emails.
What should I seek to fix it?
and yes, I asked on the alpine list too.
Thanks,
Kare

[toc] | [next] | [standalone]

#263761

Hi,

Karen Lewellen wrote:
> I cannot find out what rhs means.
> Getting an rhs to imap server timeout with one of the new office emails.

Can it be that "rhs" is a typo and should rather be "rsh" ?

The web has old messages which resemble what you describe:

  Subject:
  "[Alpine-info] Why do I get "rsh to IMAP server timed out?"
  https://marc.info/?l=alpine-info&m=134929183126515&w=2

  Body:
  "IMAP 17:04:27 5/27 mm_log warning: rsh to IMAP server timed out"
  https://alpine-alpha.u.washington.narkive.com/LCq961ri/remote-pinerc-and-rsh-timeout


Have a nice day :)

Thomas

[toc] | [prev] | [next] | [standalone]

#263762

..ah, typo indeed.
it should be rsh.
However, it seems that setting is now missing from the alpine 
configuration options available via the s command from the main menu?



On Tue, 21 Nov 2023, Thomas Schmitt wrote:

> Hi,
>
> Karen Lewellen wrote:
>> I cannot find out what rhs means.
>> Getting an rhs to imap server timeout with one of the new office emails.
>
> Can it be that "rhs" is a typo and should rather be "rsh" ?
>
> The web has old messages which resemble what you describe:
>
>  Subject:
>  "[Alpine-info] Why do I get "rsh to IMAP server timed out?"
>  https://marc.info/?l=alpine-info&m=134929183126515&w=2
>
>  Body:
>  "IMAP 17:04:27 5/27 mm_log warning: rsh to IMAP server timed out"
>  https://alpine-alpha.u.washington.narkive.com/LCq961ri/remote-pinerc-and-rsh-timeout
>
>
> Have a nice day :)
>
> Thomas
>
>

[toc] | [prev] | [next] | [standalone]

#263768

Hi,

Karen Lewellen wrote:
> ..ah, typo indeed.
> it should be rsh.

Quite a while ago rsh has been put in the pillory for not encrypting the
connection. The town crier urged everybody to use ssh instead.

Found in the web:

https://fossies.org/linux/alpine/imap/docs/FAQ.txt

  _4.3 How does the c-client library choose which of its several
  mechanisms to use to establish an IMAP connection to the server? I
  noticed that it can connect on port 143, port 993, via rsh, and via
  ssh._
        c-client chooses how to establish an IMAP connection via the
        following rules:

        + If /ssl is specified, use an SSL connection. Fail otherwise.
        + Else if client is a UNIX system and "ssh server exec
          /etc/rimapd" works, use that
        + Else if /tryssl is specified and an SSL connection works, use
          that.
        + Else if client is a UNIX system and "rsh server exec
          /etc/rimapd" works, use that.
        + Else use a non-SSL connection.

  _7.25 Why is there a long delay in Alpine or any other c-client based
  application call before I get connected to the IMAP server?
  [...]
        It must be emphasized that this is a bug in rsh. It is _not_ a
        bug in the IMAP toolkit.

        The use of rsh can be disabled in any the following ways:

        + You can disable it for this particular session by either:
             o setting an explicit port number in the mailbox name, e.g.
  {imapserver.foo.com:143}INBOX
             o using SSL (the /ssl switch)
        + You can disable rsh globally by setting the rsh timeout value
          to 0 with the call:
   mail_parameters (NIL,SET_RSHTIMEOUT,0);

The instructions "/ssl switch" and
"mail_parameters (NIL,SET_RSHTIMEOUT,0);" riddle me.
There is
  https://ratfactor.com/slackware/alpine-config.html
with lots of explanations. Maybe the desired answers are in there.


I get my mail by POP and send by SMTP. Both via stunnel(8) because GMX
insists in encryption. (Possibly one can meanwhile configure alpine to do
the SSL encryption of SMTP on its own. My POP client runs externally.)
In my ~/.pinrc i see:

  # Sets the format of the command used to open a UNIX remote
  # shell connection.  The default is "%s %s -l %s exec /etc/r%sd"
  # NOTE: the 4 (four) "%s" entries MUST exist in the provided command
  # where the first is for the command's path, the second is for the
  # host to connect to, the third is for the user to connect as, and the
  # fourth is for the connection method (typically "imap")
  rsh-command=

If i'd find a non-empty content there, i'd try whether making it empty
and setting something senseful to ssh-command= and ssh-path= will
avoid the rsh problems.

(The proposed content of that value looks like a sprintf(3) format
 string. Let's hope that alpine applies some checks before using it.)


Have a nice day :)

Thomas

[toc] | [prev] | [next] | [standalone]

#263849

On 2023-11-22, Thomas Schmitt <scdbackup@gmx.net> wrote:
> Hi,
>
> Karen Lewellen wrote:
>> ..ah, typo indeed.
>> it should be rsh.
>
> Quite a while ago rsh has been put in the pillory for not encrypting the
> connection. The town crier urged everybody to use ssh instead.
>

I explicitely nuke any rsh attempts in my .pinerc:

inbox-path={imap.myimap.com/norsh/ssl/user=me}INBOX

[toc] | [prev] | [next] | [standalone]

#263763

[Multipart message — attachments visible in raw view] — view raw

Thomas Schmitt (12023-11-21):
> Can it be that "rhs" is a typo and should rather be "rsh" ?

IMAP is the only protocol I know that officially has a
“preauthenticated” mode, where a user can run the server under their own
UID and interact with it through its standard input and output, going
directly into operation mode skipping the authentication phase.

That way, if a client supports it, you can connect to a IMAP server
through SSH and a key, for example.

It is a tragedy that not more authenticated protocols do not support the
same thing.

Regards,

-- 
  Nicolas George

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web