New answers tagged

1

I am not familiar with Cent OS default directory structure, but you will want to follow something like this: <Directory /> Require all denied AllowOverride None Options None </Directory> <Directory /PATH ON SERVER TO YOUR DOCUMENT ROOT> Require all granted AllowOverride All Options FollowSymLinks </Directory> ...


0

You need to allow apache read access; <Directory /> Options FollowSymLinks AllowOverride All Require all granted </Directory> Should work


0

Here is information from kernel.org how to use them. In my opinion, this is right echo 1 > /proc/sys/net/ipv4/conf/all/arp_ignore echo 1 > /proc/sys/net/ipv4/conf/eth0/arp_ignore ...... echo 2 > /proc/sys/net/ipv4/conf/all/arp_announce echo 2 > /proc/sys/net/ipv4/conf/eth0/arp_announce .....


3

The model of SSD in your server has well-known and widely-reported performance issues with writing large data sets. It's cheap junk that even manages to cost more than similar products without these issues. Replace it. (Or, get your host to replace it, in this case.)


2

You should check if yum is configured to check gpg signatures. You're looking for something like this in /etc/yum.repos.d/epel.repo: [epel] [...] gpgcheck=1 If that's there, then as Alex notes, you wouldn't be able to use the repo if the signatures weren't matching the keys. That is also Red Hat's formal advice on the subject (see bottom of linked ...


0

If it wasn't working, you wouldn't be able to use epel repo, as simple as that.


1

you created (or tried to create) a 4Tb file so delete it and create a 4Gb file: rm /swapfile dd if=/dev/zero of=/swapfile bs=1024 count=4000000 good luck!


0

Use rm command: rm -f /swapfile rm man page and then create a smaller swap file: dd if=/dev/zero of=/swapfile bs=1024 count=4000000


0

rm /swapfile and create a smaller one?


2

If you've arrived here, chances are you have two services where one depends upon the other but, because they're starting in the wrong order, the one with the dependency is failing to start. Suggestions about editing the symlinks are informative, in terms of illustrating how the startup sequence runs, and would work alright until someone did a "chkconfig on" ...


0

You could move some directories , like /home/you/dvdrips ;-) to a filesystem on sdb1 /mnt/resources/overflow/dvdrips, and make a symlink.


2

but my server is using passphrase No it's not. Your key is encrypted so your client is requesting the pass phrase so that it can decrypt it. Don't be tempted to remove the encryption from the key - it's a Bad Thing TM. Instead use ssh-agent or pageant (windows) to store your keys (safely) in memory for the duration of your session. How eactly you do ...


1

You can remove the passphrase from a key with ssh-keygen -p. This is the beginning of a key called FOO, which as you can see is encrypted with a passphrase: [me@risby .ssh]$ head -5 FOO -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: AES-128-CBC,DCF8CD9222D62A42D0BFE4FC284BD6BB ...


0

Try running netstat -nr as opposed to netstat -r. Same for route, run route -n instead. This will show the actual IP address instead of the hostname.


0

As simple as: #!/bin/bash echo ----Starting Backup---- echo Start Time: $(date +%m-%d-%Y) $(date +%H-%M) echo ------------------------ echo Deleting if older than 7 days echo ------------------------ find /var/application/application-data/exports/*.zip -mtime +7 -exec rm {} \; echo ------------------------ echo Sending to AppDataBkp echo ...


0

check your /etc/postfix/master.cf file, should contain something like: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient}


1

My help would be to use -delete instead of the exec rm ...


0

Here is what I do for stopping and restarting a service (using postfix as an example). taskfile.yml: - service: name=postfix state=restarted playbook.yml: - name: My Playbook hosts: my_hostgroup tasks: - include ./taskfile.yml become: yes become_method: sudo become_user: root And that works well for me


0

Firstly I suggest you to check your website in Why No Padlock tool. This tool will help you to identify all non-secure content on your website. There is a chance of higher bounce rate if your website will encounter warning message in the web browser. There is no other way to get rid from such warning message instead of solving it. Instead of using third ...


0

Use login <username> to get a login prompt.


2

You need the user part at the start, and the wrong way around, should be: * soft nproc 65535 * hard nproc 65535 * soft nofile 65535 * hard nofile 65535


0

Red Hat has an extremely accurate documentation of their products. On your case at hand, please refer to https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/prerequisites.html#dns-reqs If you are still experiencing troubles, pleas specify exactly what you have tried and what the ...


1

Is your ldap base really "uid=john.martin,ou=Users,dc=company,dc=com"? It could be, but I think that is your binddn, am I right? When using ldapsearch with simple authentication I use this: ldapsearch -h host -LLL -s sub -x -W -b dc=your,dc=base -Z -D "cn=youruser,ou=org,dc=your,dc=base" ldapfilter attributes Use the manpage of ldapsearch to understand ...


-1

You Should try below in host.allow. SSHD : IP : ALLOW WHOSTMGRD : IP : ALLOW Cpaneld : IP : ALLOW (Not really necessary if you have added above two)


2

You can't restrict and enforce sudo to "allow everything except ..." period. If you want to prevent a somebody with local sudo/root rights from changing user passwords they shouldn't be stored on that system and you would typically set up a central authentication database, such as a LDAP directory, Kerberos, IPA server etc.


2

You need to give the user specific commands they can run and be very specific. You could limit there access so they can't run "sudo password" directly but it doesn't really enforce it. If they can start a root shell they can bypass this. You can even run vi as root and run commands with in it. In the past I have given users a lot of access by making ...


0

When you use https you are ensuring the users that the connection between your website and the client device is encrypted, this ensures the user that anyone sniffing packets on the internet will only see encrypted gobbledygook when connected to your site, (they won't see you or the client) now when you mix in http content from css fonts, images etc. you are ...


0

No ssl means, in between other things, that you are so vulnerable to mitm attacks because all the data will be sent without encryption. You will also not have a certificate and I wouldn't recommend anyone not to have a https version of their website already running as the end of http:// shouldn't be far away.


0

Instead of using commands, I would recommend you editing: /etc/sysconfig/network /etc/sysconfig/network-scripts/ifcg-[eth0,enp0s3] /etc/resolv.conf Make sure that ONBOOT="yes" on /etc/sysconfig/network-scripts/ifcg-[eth0,enp0s3] and you are good to go.


4

Could this possibly be because it's doing a lookup or trying to curl foo.some-site.com, and it may be getting directed to the other server? Yes, most definitely. LE needs to connect back to the server you're running the LE client on, as part of the domain verification challenge-response process. Without getting into details, the LE client actually ...


1

Fist, increasing the prefork parameters will only worsen your situation. So restore the previous configuration. To rule out any prefork problem/misconfiguration, try to disable it. Does the situation change significantly? If so, you find your problem. If not, the problem is related to external factors: for example, maybe some bot/script is targeting your ...


0

While Boscoe's answer is completely right and relevant, the relevant settings are stored in /etc/vconsole.conf: KEYMAP=us # or whatever and in /etc/X11/org.conf.d/00-keyboard.conf. You might be interested in being able to input in multiple languages. A detailed answer for that can be found here. Also/etc/locale.conf: LANG="en_US.UTF-8" Do keep in ...


4

The order in which routes are entered is, by definition, unimportant. This is due to how routes are supposed to be applied: the more specific ones have precedence over the more generic ones. Suppose you have two routes: a first one for a 172.16.0.0/16 network, via gateway 192.168.1.1 a second one for a 172.16.32.0/24 network, via gateway 192.168.1.2 ...


0

You can't use variable substitution in /etc/sysconfig/gitlab and in ExecStart you need to use ${UPID} form of variable substitution if it isn't surrounded by whitespace. See also example unit file to start unicorn with RVM support


-3

Yes, the ordering of network routes is important independently of operating system in general. Routes are programs. They say, when you get a packet that is addressed to network A, use router A to do it. When you get one for B, use router B. Let's say that A is inside of B, like A = 192.168.1.0/24 and B = 192.168.0.0/22. Then if we reverse the ordering of ...


0

Configuring ssh to enable only sftp for some selected users is a good idea and it works properly, provided that you you install either scponly or rssh. rssh works fine, unless you need to configure jail, in this case try to follow instruction provided by CHROOT manuals is crazy, leading to "copy" large parts of system executables and library just below ...


2

I've just had the same problem in 2016, using CentOS 6.5 on my workstation, and CentOS 7 on the client (a Vagrant box on the same host). My specific problem was the same as the OP's, I couldn't find any nfsd logging. Use rpcdebug to Enable NFS Logging The answer for me, for anyone else coming to this question in the future, was to use the command (as ...


0

Yes. You could do it positively instead of negatively, which might read better if your VCL becomes complex, but your method is good. if (std.healthy(req.backend_hint)) { set req.backend_hint = default; } else { set req.backend_hint = server_pool.backend(); }


0

Found it ... I needed to disable SELinux


1

Sudo has something called sudoreplay when enabled sessions is logged and can be replayed later, works similar as the script command that make a typescript of terminal session that later can be replayed with the scriptreplay command.


1

According to this thread, the fallback feature tls_failures was implemented in this patch. Apparently this will use plain text automatically after a certain number of TLS handshake failures. Note: this patch is integrated in 8.16 (at least available as snapshot) As of this post, 8.16 is not yet released, so for now you will have to use ...


0

Looks like a some bug. I reproduced your steps and received the same. With this package you can use all commands except "graceful". so try sudo service httpd24-httpd restart or sudo service httpd24-httpd reload instead of sudo service httpd24-httpd graceful


-1

The first thing you need to do is check what has used up all your free disk space otherwise this problem will occur again sometime in the future. If u really need to resize my approach would be: backup the contents of /home. (its only 20g) umount /home destroy the home logical volume (lvremove) allocate space as needed, resize the volumes. (lvextend, ...


3

You can't shrink an XFS filesystem. You can only grow them with xfs_growfs. See: https://access.redhat.com/solutions/540013 and https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Storage_Administration_Guide/xfsgrow.html It is currently not possible to reduce the size of a partition or logical volume with the xfs filesystem. ...


0

you can only do this on a live system if it is partitioned with LVM - logical volume management. what is the output of: lvs -v vgs -v pvs -v


0

The new init system on CentOS 7 is systemd. You control that with systemctl.


0

Give this a try, you can have the issue even running as root, is not related to wich user you use. sudo /sbin/sysctl -p


0

You probably need to add an A record to the apex of your domain. In bind that would look like: $ORIGIN example.com. $TTL 300 ... (NS records, TTL, MX, SOA, etc here) A 123.123.123.123 z1 IN A 10.10.10.10


1

PHP 7 is available in the Remi-Repository: http://blog.remirepo.net/post/2015/03/25/PHP-7.0-as-Software-Collection For Apache 2.4 you can use the Software Collections ( SCL ) Repository https://www.softwarecollections.org/en/scls/rhscl/httpd24/ Wiki Link to SCL: https://wiki.centos.org/AdditionalResources/Repositories/SCL


0

If you don't want to go by just the IP, you have several options. Rate limiting at the iptables OS level Rate limiting at the Webserver level (eg. Nginx does this nicely) Rate limiting / blocking with tools like Fail2Ban Blocking based on user agent; Here, clearly, it's curl and not a true browser. So even if IP changes, you could block, or slow ...



Top 50 recent answers are included