Tag Info

Hot answers tagged

25

That is working as intended. If you want to set a password using the useradd command, you are supposed to give a hashed version of the password to useradd. The string pass does satisfy the format criteria for the hashed password field in /etc/shadow, but no actual password hashes to that string. The result is that for all intents and purposes, that account ...


16

manuseradd: -p, --password PASSWORD The encrypted password, as returned by crypt(3). The default is to disable the password. You are supposed to pass an encrypted password to it. Not a plaintext password.


9

I manage a number of different web sites for various clients, and this is generally what I do. First, the top priority for security updates should be the web application itself. The vast majority of attacks will be targeting your web site and the code that runs it, and this needs to be kept secure. If you use off-the-shelf web applications, this is one ...


4

You can use the following variation on your command to provide an encrypted password to the useradd command: useradd f -p "$(mkpasswd --method=sha-512 'pass')" -d /home/f -s /bin/false To find out the methods available, use: mkpasswd --method=help In order to avoid passing the password on the command line, put the password in a file (using an editor ...


3

The different servers are using different CentOS mirrors, one of which may not (yet) be completely in sync with upstream. Your yum repository configuration by default uses the mirrorlist=http://mirrorlist.centos.org/... directive, which non-deterministically determines a good mirror. Another server can and will often use an alternate mirror. You can ...


3

To block IP Ranges using Config Server Firewall use: csf -d 122.224.216.0/21 csf -d 122.224.224.0/19 csf -d 122.225.0.0/17 csf -d 122.225.128.0/18 If you wish to block any further IP (Range) then I recommend you look into this tool: http://ip2cidr.com/ Going into further detail, If you wish to protect your server from Brute Force SSH Attacks, you can ...


2

A part of the reason you might want to implement a RAID array is the read speed improvement. Using only a single disk to read from, but writing to both, smells wrong. If your actual problem is that you are experiencing worse read times since replacing a disk in your RAID setup, you might want to troubleshoot that disk instead of working around it. Here ...


2

Typically where you have -A INPUT -p tcp -m tcp --sport 21 -m state --state ESTABLISHED -j ACCEPT On a FTP server I would expect -A INPUT -p tcp -m tcp --dport 21 -m state --state NEW -j ACCEPT to accept incoming FTP connections, which are NEW, as existing connections are already accepted by an earlier rule. Second you'll need to ensure the FTP ...


2

The packages you try to update seems to be different as per the output.. web2 shows mod-pagespeed-beta where as web shows mod-pagespeed-stable. Make sure you are updating the correct package. Instead you can try "yum update mod-pagespeed-stable".


2

Using grub-install /dev/sdX is probably how it is intended to be done. However, I just had to rescue a CentOS 6.4 server that had that setup, but now froze at boot after its other bootable RAID 1 disk was replaced some months earlier (the server had stayed on during the meantime). What solved the issue in my case was grub-install /dev/md0, where md0 is the ...


2

This appears to be the problem: ScriptAlias /mailman/ /usr/local/mailman/cgi-bin as evidenced by your error log entry [Thu Dec 11 15:58:04 2014] [error] [client 72.54.81.74] script not found or unable to stat: /usr/local/mailman/cgi-bincreate This should have a trailing /, i.e.: ScriptAlias /mailman/ /usr/local/mailman/cgi-bin/


2

For a very large part it depends. The obvious is that Critical security updates are typically best installed As Soon As Possible, but only you know your infrastructure and platform. What is ASAP is specific to you. If you're running a web server, something recent like: "CESA-2014:1919 Critical CentOS 7 firefox Security Update" is not an issue for ...


2

no_root_squash is a server side (export) option, not a client side option. It therefore doesn't go in /etc/fstab, nor can it be specified to mount. If you think about it - why would you want a client to be able to decide "hey, I'll be root today, that'll be nice"? http://linux.die.net/man/5/exports I'd suggest though, that rather than setting ...


1

You will need to ensure that you have sendmail (or an equivalent MTA) correctly configured to be capable of sending mail out, then specify the full path to the command in your configuration as above in /etc/logrotate.d/php-errors; /var/log/php-errors.log { rotate 7 daily missingok notifempty /bin/mail me@example.com }


1

Although not a fix for your underlying problem, the mdadm command has the --write-mostly option: -W, --write-mostly subsequent devices listed in a --build, --create, or --add command will be flagged as 'write-mostly'. This is valid for RAID1 only and means that the 'md' driver will avoid reading from these devices if at all possible. This can be useful ...


1

Log rotation in RHEL and RHEL-alike systems is handled by a scheduled nightly job called "logrotate". The configuration of logrotate is in /etc/logrotate.conf and /etc/logrotate.d/*.conf, The manpage for logrotate is at http://linux.die.net/man/8/logrotate and includes sample config files. You would need to add your custom log files to the logrotate ...


1

This won't work, because zone transfers are handled on a zone-to-zone basis. You can't transfer a full zone to a partial zone. That said, it's possible to define a more specific zone on your master server called ec2.example.net.. Doing this will hide ec2 and all records beneath it in your example.net. zone, so you will need to ensure that all of those ...


1

The best way to achieve this is to find a repository which has a CentOS 6.5-specific repository, and alter your configs in /etc/yum.repos.d/* to specifically use this repo (essentially hard-coding the values for the base arch and release version). It is worth noting, however, that point releases which are not current are not officially supported (old major ...


1

What you want does not exist. Old point releases are not supported so there are no latest packages to pull. Think of them more as a point in time snapshot of the latest packages for a given release (4.x, 5.x, 6.x, 7.x etc). The FAQ entry for What is the versioning/release scheme of CentOS and how does it compare to the upstream vendor? provides an ...


1

I ran into a similar problem while following a tutorial - http://www.tecmint.com/protect-apache-using-mod_security-and-mod_evasive-on-rhel-centos-fedora/ My httpd.conf file already had an include for *.conf and the tutorial had me explicitly include the modsecurity.conf file. As a result, all my rules were duplicates because the conf file was included ...


1

Tomcat and other application servers publish an AJP port that can be used to map request from a HTTP server. To do that you have to create a 'workers files' like this: # server.workers.properties worker.list=tomcat-server worker.tomcat-server.type=ajp13 worker.tomcat-server.host=localhost worker.tomcat-server.port=8009 8009 is the default value for the ...


1

Check the size of the directories APT is using as cache. If it's storing too much, clear it (with root Privilege) using rm -r /var/cache/apt/*.*



Only top voted, non community-wiki answers of a minimum length are eligible