Tag Info

New answers tagged

2

no_root_squash is a server side (export) option, not a client side option. It therefore doesn't go in /etc/fstab, nor can it be specified to mount. If you think about it - why would you want a client to be able to decide "hey, I'll be root today, that'll be nice"? http://linux.die.net/man/5/exports I'd suggest though, that rather than setting ...


0

There is no way to pin-point the real problem. We need to know what you are doing in the script. It might be as simple as putting all the requests in a queue and processing them one by one, using Cron. This way you can also mark certain entries as "failed" and come back to see why those specific one's are running into issues. Please provide more info on ...


4

You can use the following variation on your command to provide an encrypted password to the useradd command: useradd f -p "$(mkpasswd --method=sha-512 'pass')" -d /home/f -s /bin/false To find out the methods available, use: mkpasswd --method=help In order to avoid passing the password on the command line, put the password in a file (using an editor ...


0

These days I send to use sed for this type of thing. $ netstat -nt | sed -r -n 's/^tcp +[0-9]+ +[0-9]+ [0-9\.]+(:[0-9]+).+TIME_WAIT/\1/p' | sort | uniq -c | sort -n 5 :443 8 :80 Here we are interesting in a line that looks a specific way, but really one piece out of it. So we define the regex with a match group for that part and then print ...


0

I'm sure there's a cleaner way to do this without double-awk'ing and double-grep'ing. (Hopefully someone can expound upon this) Shell-based (ksh and bash) For-Loop for x in $ (netstat -nat | grep TIME_WAIT | awk '{print $4}' | \ awk -F":" '{print $2}' | sort -u) ; do printf "TIME_WAIT on Port $x : `netstat -nat|grep ":$x"|grep TIME_WAIT|wc ...


1

You will need to ensure that you have sendmail (or an equivalent MTA) correctly configured to be capable of sending mail out, then specify the full path to the command in your configuration as above in /etc/logrotate.d/php-errors; /var/log/php-errors.log { rotate 7 daily missingok notifempty /bin/mail me@example.com }


0

Here is the script I came up with for the brute-force approach #1: #!/bin/bash filelist1='at-spi-registryd.desktop bluetooth-applet.desktop gdu-notification-daemon.desktop gnome-at-session.desktop gnome-keyring-daemon.desktop gnome-screensaver.desktop gnome-user-share.desktop gnome-volume-control-applet.desktop gpk-update-icon.desktop nm-applet.desktop ...


16

manuseradd: -p, --password PASSWORD The encrypted password, as returned by crypt(3). The default is to disable the password. You are supposed to pass an encrypted password to it. Not a plaintext password.


23

That is working as intended. If you want to set a password using the useradd command, you are supposed to give a hashed version of the password to useradd. The string pass does satisfy the format criteria for the hashed password field in /etc/shadow, but no actual password hashes to that string. The result is that for all intents and purposes, that account ...


0

I do not think you apache knows of the existance of that file. /usr/local/apache/conf/userdata/std/2_2/user/subdomain.domain.com.au Does you apache.conf specify for apache to lok in that path? If you run netstat -pan | grep LISTEN ... does the port show up as being listened on? It looks like apache is directing the traffic as specified in your vhost ...


0

If your certificate for domain.com has been replaced with a certificate for domain.net then the invalid certificate warning you're experiencing is perfectly normal. The reason being that the SSL handshake happens before the redirect. And as the domain that is being used for the handshake does not match the certificate you will get this error. Your best bet ...


0

I'd probably ask the parties tasked with managing the HPC cluster/server/environment, as there may be homegrown or specific tools set to accomplish this... However, your problem is narrow in that there are well-known ways to handle resource allocation on newer versions of your operating system. Because you're using CentOS 5, I may recommend what I did when ...


1

Log rotation in RHEL and RHEL-alike systems is handled by a scheduled nightly job called "logrotate". The configuration of logrotate is in /etc/logrotate.conf and /etc/logrotate.d/*.conf, The manpage for logrotate is at http://linux.die.net/man/8/logrotate and includes sample config files. You would need to add your custom log files to the logrotate ...


0

You can pipe your logs to your preferred logrotating program: CustomLog file|pipe format|nickname [env=[!]environment-variable] See piped logs for more information on this, it's very versatile.


1

This won't work, because zone transfers are handled on a zone-to-zone basis. You can't transfer a full zone to a partial zone. That said, it's possible to define a more specific zone on your master server called ec2.example.net.. Doing this will hide ec2 and all records beneath it in your example.net. zone, so you will need to ensure that all of those ...


0

This "sync_supe" overloading CPU is an Apache (user "nobody") running a bitcoins mill, hard work and use of the resources. The system might have been compromised via 1.3 Apache and Linux kernel <2.6.25


0

If example1 and username1 are not dependent, this is impossible, nginx will not guess it! Here a piece of configuration I often use to link sub domains to different roots: server { listen 80; server_name ~^(?P<my_root>[^\.]+)\.dev\.ebuildy\.com; root /home/dev/$my_root/app/www; error_log /var/log/nginx/dev-$my_root.log; ...


1

I ran into a similar problem while following a tutorial - http://www.tecmint.com/protect-apache-using-mod_security-and-mod_evasive-on-rhel-centos-fedora/ My httpd.conf file already had an include for *.conf and the tutorial had me explicitly include the modsecurity.conf file. As a result, all my rules were duplicates because the conf file was included ...


1

The best way to achieve this is to find a repository which has a CentOS 6.5-specific repository, and alter your configs in /etc/yum.repos.d/* to specifically use this repo (essentially hard-coding the values for the base arch and release version). It is worth noting, however, that point releases which are not current are not officially supported (old major ...


1

What you want does not exist. Old point releases are not supported so there are no latest packages to pull. Think of them more as a point in time snapshot of the latest packages for a given release (4.x, 5.x, 6.x, 7.x etc). The FAQ entry for What is the versioning/release scheme of CentOS and how does it compare to the upstream vendor? provides an ...


2

For a very large part it depends. The obvious is that Critical security updates are typically best installed As Soon As Possible, but only you know your infrastructure and platform. What is ASAP is specific to you. If you're running a web server, something recent like: "CESA-2014:1919 Critical CentOS 7 firefox Security Update" is not an issue for ...


9

I manage a number of different web sites for various clients, and this is generally what I do. First, the top priority for security updates should be the web application itself. The vast majority of attacks will be targeting your web site and the code that runs it, and this needs to be kept secure. If you use off-the-shelf web applications, this is one ...


1

Although not a fix for your underlying problem, the mdadm command has the --write-mostly option: -W, --write-mostly subsequent devices listed in a --build, --create, or --add command will be flagged as 'write-mostly'. This is valid for RAID1 only and means that the 'md' driver will avoid reading from these devices if at all possible. This can be useful ...


2

A part of the reason you might want to implement a RAID array is the read speed improvement. Using only a single disk to read from, but writing to both, smells wrong. If your actual problem is that you are experiencing worse read times since replacing a disk in your RAID setup, you might want to troubleshoot that disk instead of working around it. Here ...


2

Typically where you have -A INPUT -p tcp -m tcp --sport 21 -m state --state ESTABLISHED -j ACCEPT On a FTP server I would expect -A INPUT -p tcp -m tcp --dport 21 -m state --state NEW -j ACCEPT to accept incoming FTP connections, which are NEW, as existing connections are already accepted by an earlier rule. Second you'll need to ensure the FTP ...


3

To block IP Ranges using Config Server Firewall use: csf -d 122.224.216.0/21 csf -d 122.224.224.0/19 csf -d 122.225.0.0/17 csf -d 122.225.128.0/18 If you wish to block any further IP (Range) then I recommend you look into this tool: http://ip2cidr.com/ Going into further detail, If you wish to protect your server from Brute Force SSH Attacks, you can ...


0

You have a lot of L2ARC... more than you should. This is not all magical... There are some ZFS best practices that should be part of the design. L2ARC needs to be mapped in real RAM. The best practice that I recall is ~1GB of RAM per 5GB of L2ARC. So you have 172GB of L2ARC... The system would need to be sized to ~34.5GB of RAM for ZFS. Taking a large ...


1

Check the size of the directories APT is using as cache. If it's storing too much, clear it (with root Privilege) using rm -r /var/cache/apt/*.*


0

You can't. either find a RPM package providing libpocketsphinx.so.1, libsphinxbase.so.1 Or you you can create a custom rpm which provides the necessary dependencies, just to keep rpm happy, or finally you could install gstreamer0.10-pocketsphinx using rpm with the --force flag.


2

The packages you try to update seems to be different as per the output.. web2 shows mod-pagespeed-beta where as web shows mod-pagespeed-stable. Make sure you are updating the correct package. Instead you can try "yum update mod-pagespeed-stable".


3

The different servers are using different CentOS mirrors, one of which may not (yet) be completely in sync with upstream. Your yum repository configuration by default uses the mirrorlist=http://mirrorlist.centos.org/... directive, which non-deterministically determines a good mirror. Another server can and will often use an alternate mirror. You can ...


1

Tomcat and other application servers publish an AJP port that can be used to map request from a HTTP server. To do that you have to create a 'workers files' like this: # server.workers.properties worker.list=tomcat-server worker.tomcat-server.type=ajp13 worker.tomcat-server.host=localhost worker.tomcat-server.port=8009 8009 is the default value for the ...


-1

The reason it happens is because the default nginx config doesn't support the rewriting needed by Magento. In your nginx configuration file, make sure that you have the following specified under your server config. location / { try_files $uri $uri/ /index.php?q=$uri&$args; }


2

This appears to be the problem: ScriptAlias /mailman/ /usr/local/mailman/cgi-bin as evidenced by your error log entry [Thu Dec 11 15:58:04 2014] [error] [client 72.54.81.74] script not found or unable to stat: /usr/local/mailman/cgi-bincreate This should have a trailing /, i.e.: ScriptAlias /mailman/ /usr/local/mailman/cgi-bin/


2

Using grub-install /dev/sdX is probably how it is intended to be done. However, I just had to rescue a CentOS 6.4 server that had that setup, but now froze at boot after its other bootable RAID 1 disk was replaced some months earlier (the server had stayed on during the meantime). What solved the issue in my case was grub-install /dev/md0, where md0 is the ...


0

I had the same issue on CentOS, and I successfully installed INTL via pecl after: 1) install icu & libs: yum -y install icu libicu libicu-devel 2) php-devel package and phpize: yum -y install php-devel phpize 3) and, of course gcc: yum -y install gcc gcc-cpp gcc-c++ (+1 to yuri for gcc, gcc-cpp, and gcc-c++ , sorry can't comment due to no ...


2

Based on comments so far: your mount works with NFSv3, it doesn't with NFSv3. you're using local accounts. This means that the problem is most likely down to NFSv4 account handling and idmapd. What happens in NFSv3 is that your client tells the server what UID and GID you're using. What happens in NFSv4 is that they use usernames and use idmapd to map ...


3

With postfix, it's trivial. Just remove example.com from mysql table. For more info about this table, see parameter virtual_mailbox_domains = proxy:mysql:/etc/zpanel/configs/postfix/mysql-virtual_ Disclaimer: This change may cause zpanel to explode stop working, because you dared to change the low level of zpanel system. Because this change was ...


2

It's probably /dev/sdb given the sizes you listed, but you can find out by running df -h. I keep my data in /data and here is my relevant output: > df -h Filesystem Size Used Avail Use% Mounted on /dev/sdb1 70G 18G 49G 27% / /dev/sdc1 932G 682G 250G 74% /data In my case that means that the one I should be altering for ...


0

Looking at the RPM, it should drop a file in /etc/yum.repos.d called remi.repo:- $ rpm -qlp remi-release-5.rpm /etc/pki/rpm-gpg/RPM-GPG-KEY-remi /etc/yum.repos.d/remi.repo If it's not there, and you're sure the RPM is installed, you should be able to remove the RPM with rpm -e remi-release. Some useful commands for you:- rpm -ql remi-release - will ...


0

rpm -qa | grep remi-release will tell you if the rpm is installed. rpm -e remi-release will remove the rpm. yum repolist will show you what repos are available. yum repoinfo will return more information about the available repos along with their associated .repo file names.


0

Your mail server on Server1 is still configured to be "authoritative" for that domain. Remove that configuration, restart the mail server, and it'll likely start working.


0

DISCLAIMER: There is nothing in here about security. You need to worry about security. By default, Tomcat hosts the applications as http://(serverIP):8080/app where app is the name of the war file that Tomcat extracted into $tomcat/webapps/. To route Internet requests to that server with a public IP, you probably need two things. If you don't have a public ...


0

You could use a FAT32 file system under Linux. If you have to backup your data to another system and then restore it to a repartitioned box it could take a few hours. If there is enough space for both to coexist on the same box it could take a few minutes. You shouldn't use FAT32 for your entire OS, but you could make one partition your app. FAT32 ...


-1

Thanks alot for your answer. But the syntax didnot work for my particular problem. Anyway, I used this code to get it all work: 0 * * * * root -O- http : // [ url ] >> /folder/text.txt I had to difine user name and -O- paramater with two bigger than '>>' sign. Now everthing works as expected. :)


0

A beter way, is to add the php 55 repo, this way only php is affected and not your other packages. http://copr.fedoraproject.org/coprs/rhscl/php55/ To add the repo vi /etc/yum.repos.d/php55.repo add the following [rhscl-php55] name=Copr repo for php55 owned by rhscl baseurl=http://copr-be.cloud.fedoraproject.org/results/rhscl/php55/epel-6-$basearch/ ...


1

Look at your /etc/resolv.conf and be sure to include in the search directives the internal domain name suffix(es) that you wish to consider for non-FQDN names. Then you should easily be able to use the simple hostname you wish. I don't think that this is a difference between Centos versions.


4

The correct form would be 0 * * * * wget http://<URL> > /path/to/file e.g. 0 * * * * wget http://www.serverfault.com > /tmp/serverfault.html But if the URL gets more complicated, you might need to escape characters and/or put this in quotes.


0

You don't need to use javac to install Red5. I suggest downloading a tarball from https://github.com/Red5/red5-server un-archiving it and then running red5.sh. That is all you should need to do.


1

If you'd like to build red5, grab the source from github and use Maven. Ant has not been supported for several versions now. For build instructions and further details.



Top 50 recent answers are included