Tag Info

New answers tagged

2

I'm afraid it would not be possible to cache it as long as clients are using https to access Windows Update services. Squid acts as a mere tunnel between the customer and HTTPS server so it is motsly unable to inspect what are you requesting and so caching it. You can find more information in the Squid wiki Update: For caching updates perhaps you can take ...


0

You'll have to mount the VHD in an OS that can parse the file system used by your Linux systems. This is probably most easily done by using another Linux VM. Attach a copy of the archived VHD and it will be able to mount the file system.


0

You will not be able to do this using standard networking APIs. The Linux network stack uses the so-called weak host model, which implies in particular that any address that is assigned to a local interface is considered as local. If you try to send a packet to a local interface, it will be looped locally, and never hit the network. While you could ...


0

Without more information on your platform, it's a little difficult to speculate. However if you can SSH in from another machine, check the iptables rules with iptables -L as root. You may see rules under a "fail2ban" chain or something like that, which relate to your machine's IP address. They will end in DROP or REJECT, and they'll be the rules you'll need ...


1

Here's my suggestion: /dev/sda [root disk] filesystem mounted at / /dev/sdb [data disk] filesystem mounted at /var/www or /www /dev/sdc [log disk] filesystem mounted at /var/log Separating your application data to another disk is a good decision. If for some reason, e.g. faulty distro upgrade, your root disk becomes unbootable you could still be able to ...


0

You are using the recent module to dynamically maintain a list of IP addresses for each connection attemp to port 22 and refuse IPs trying to connect more than 4 times in a minute or using changing TTLs (note: this last check could cause trouble to legitimate connections too in some cases). However, you are doing it wrong because you are not adding them ...


3

Maintain a local CentOS mirror on an Internet-connected machine with rsync to a public CentOS mirror that accepts rsync connections. You can then copy these directories to a USB stick and use them as installation sources. They already carry the necessary metadata to act as repositories, so you only need to point the installer at them. $ du -sh ...


0

In this context, "minimum system requirements" means very little. It all depends on your application: What kind of workload you expect? How much latency is acceptable for you? What about required throughput? MySQL and its open source successor, MariaDB, have no problems to run with a single low performance core and only 256 MB of RAM by themselves. However ...


0

In response to your comment: I want something like downloading all RPM packages and dependencies in another Centos 7.1 machine with internet connection and then move all those RPM files (using a pendrive, for example) to the server and install them there. That sounds like something fairly trivial by setting the option keepcahe=0 in yum.conf on the ...


0

You have to look for a local repository, take a look to this article or this one


3

This post serves to tell you not to trust your ISP when they repeat "all is ok from their side" for three weeks. I received this error while using Putty. The server's host key does not match the one PuTTY has cached in the registry. It turns out that another client at my ISP accidentally set my IP as their own, so there were two machines connected to one ...


0

It looks like I'm getting this error only in Firefox if script works longer than 15 minutes. You have to send anything to Firefox browser or you gonna get the error described above. It can be done with flush - php function.


0

For the particular threat of a user being able to access another user's files, running all "users" in the same security context as it is now is higher probability and therefore riskier. There are subtleties here because the other setup will have other threats that perhaps the chroot version does not, however chroot is not a security feature. It will likely ...


2

The original cron required each entry to end with a newline so yes sometimes you do need a blank line or something at the end. Although cron requires that each entry in a crontab end in a newline character, neither the crontab command nor the cron daemon will detect this error. Instead, the crontab will appear to load normally. However, the ...


3

It appears that the web server at https://facts.dohrn.com/ does not include the intermediate certificate. This would appear to be a configuration mistake on their part. It is definitely something that can be expected to cause compatibility issues as you are really only supposed to rely on clients having the root certificates in place beforehand. See the ...


0

One should restart rsyslogd after changing the timezone so that the new timezone is reflected in the logs. Do this with: service rsyslog restart


5

You shouldn't use RC4 in any cipher suite, as this cryptographic protocol is considered broken and has been prohibited by the IETF. Thus the warning from firefox on the use of a RC4-based cipher suite. You should update your SSLCipherSuite to something such as SSLCipherSuite HIGH:!RC4:!ADH:!DH:!AES:!EXPORT:!SSLv2:!3DES Even better would be to take one ...


0

for iptables redirect you can do like this : iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080


2

Have you also checked all other files inside /etc/rsyslog.d/ ? /var/log is the default log folder for many other applications that don't necessarily depend on rsyslog. Apache for example doesn't use rsyslog so you'll have to change the config file of every application that writes to /var/log. lsof +D /var/log/ will give you all processes that have open ...


3

First the descriptions of the fields: u778.49: seconds spent in userspace s54.72: seconds spent during system calls Both together are the complete amount of seconds CPU time: 833.21 Here is how the percentage is calculated. Your machine runs for 5 minutes and 10 seconds, so 310 seconds. The total amount of CPU time divided trough the total amount of ...


1

This is a cheap and dirty hack, but does work. Check out the man page for "chattr". Setup extended permissions on the directories and files which will allow a user to modify/delete it. Being a cheap and dirty hack, it does imply there is probably a cleaner way to make this work "properly", however in the world where people need their stuff to work, this ...


-1

Should point out that the above will wipe any data you have on /data. You'll also have to create a new file system on the new RAID0 partition (as per LVM example) and update your fstab so it is mounted as /data (or whatever)


1

Both approaches are OK. What you want is for your swap to be continuous and not fragmented, and both approaches will ensure that. LVM can cause fragmented volumes, if you extend/shrink them often, but since swap is defined at creation time, it should stay pretty much continuous. With second approach, you have a downside of not being able to easily extend ...


0

I personally feel LVM is overkill for this simple task, I would suggest setting up mdadm to create a raid array. Now you have to options, either a linear array, which will literally produce a concatenated partition based on two source partitions, or raid0, which has the additional limitation that the source partitions must be of the same size but provides ...


0

After some wireshark captures with quite a few ICMP redirects from the router to the "hidden" server, I traced the problem to an overly zealous use of policy routing rules. Once the rules were simplified the problem was resolved.


0

Ok so this is what I got from your question. You want to have an environment that would contain any of versions of any of the packages that you feel are required correct? Should that be the case, you have no issues doing that since Linux actually supports that. There is few limits as to what you cannot do as your user. For your first example, python. Sys ...


2

Apperently you also configured the Webtatic yum repository to get a newer version of PHP (php56w) than what is included by default in CentOS or provided by EPEL. That conflicts with the PHP version the EPEL phpMyAdmin package expects. It could well be that phpMyAdmin still works well with a (much) newer PHP version and then the suggested --skip-broken is a ...


9

You need to use LVM (Logical Volume Manager) First of all , you must be aware that if any of the physical disk fail , the Big 4TB volume will fail too. Backup your data first! Basically , all you need to do is to partition your data (/dev/sda2 and /dev/sdb1) partition in lvm format then : create two physical volumes (pvcreate /dev/sda2 /dev/sdb1) ...


1

You haven't added the keys to the gpg keychain. I am running a near identical configuration to yours (CentOS 6.6/trusty) and resolved this particular issue by passing the flag --no-check-gpg. A more ideal solution would be to download and manually add the keys to your keyring.


0

AIDE can only point you to files that have changed, but has no way of knowing why these files have changed. It can be an intrusion, but it can also simply be a software update. You need to go through the list AIDE reports, and for each file find out either why it changed, or what has changed. I would start by looking at a pattern - for instance, if a ...


0

You can move /etc/init.d/cron to something like /etc/init.d/cron_r and create a new /etc/init.d/cron with something like bash -x /etc/init.d/cron_r $1 2>&1 | logger in it, reboot and then check messages log.


1

Without knowing all the specs., I would say it is a DNS issue, so please check/verify DNS (both Public/External AND/OR Internal).


0

Modify /etc/sysctl.conf and enable ipv4 routing. net.ipv4.ip_forward = 1 Then run sysctl -p to apply the settings. To show the current value of net.ipv4.ip_forward , use : sysctl net.ipv4.ip_forward


0

I also used that guide to set up OpenLDAP on CentOS 7. Once I only installed openldap-servers without the client and it completely failed; there were permissions issues and slapd failed to start, etc. I agree with others about starting over and following the directions exactly. But even so, there are some issues in the guide that are helpful to have ...


0

Seeing your error for some reason it is trying to use an incorrect unix socket. Try adding to mysql command the parameter -S /var/lib/mysql/mysql.sock.


0

The ability to configure bonded interfaces in your kickstart if a pretty recent addition in the RHEL line of releases; and possibly 6.4 was the first to support it. Have you tried with a 6.6? From the RHEL 6.4 Release Notes Configuring Bonding The bond boot option and the --bondslaves and --bondopts kickstart options can now be used to configure ...


3

Take a look at the default entries in the first two line. You mixed up the order of hosts/IPs. Try this instead: 192.168.0.18 ramy-VirtualBox 192.168.0.8 Ramy-MacBook


2

That's normal, you need to write first the ip then the name, in your case: 192.168.0.8 Ramy-MacBook 192.168.0.18 ramy-VirtualBox


2

First you need to remove one of MTA. Having two MTAs in one system can yield unexpected result. Because I only have experience with postfix, then I suggest you to remove sendmail. With this removal, mail command will use postfix instead sendmail as default agent. yum remove sendmail Second, you can set default sendmail parameter in php.ini with ...


-1

It works fine for me: mv /boot/grub/grub.conf /boot/grub/bk_grub.conf yum -y update && yum -y reinstall kernel


1

In your main.cf is a parameter called mydestination. Remove the domain name form there, so mails to the domain won't be delivered locally no longer. Before: mydestination = $myhostname, $mydomain After: mydestination = $myhostname $myhostname should remain in this list for the internal mails (cron, apt, error messages, etc.)


2

Make sure that the from email Address is the correct one and the MX and Reverse DNS records for the domain and server IP are properly configured. Once the email server is configured properly, Email services like Gmail, yahoo, etc... will start marking your emails as Valid and will deliver it in your inbox and not in SPAM folder. Hope this helps.


-3

In you favourite E-Mail Client, add cron "From:" address to your address book and select in spam settings something like "Never mark messagess from my contact list as spam".


0

Memcached >2.1 requires at least libmemcached 1.x. You seem to have 0.31 still installed. Remove the current libmemcached packages and install libmemcached10 (plus the -devel). These packages can be found in (at least) IUS repository.


0

check a few more things other than the log local firewall (iptables) is squid listening on the external ip that other server can access? netstat -nltap | grep LIS (like 1), use nc or telnet to verify that you can access from a client the default squid port 3128. telnet squidserver 3128, any response?


0

Passed in from the audit mailing list ... > On Mon, 2015-05-11 at 15:52 -0400, Steve Grubb wrote: > > On Monday, May 11, 2015 11:50:19 AM Bill Jackson III wrote: > > > Any pointers for troubleshooting auditd missing events for file reads, > > > edits, etc. ( -w _path_ -p raw) on OEL5/RHEL 5/CentOS 5? > > > > > ...


1

RHEL/CentOS did not include the Hyper-V network drivers until 6.4. You should first start with the latest service pack if at all possible (currently 6.6) and test your software with it. If you're certain you can't update, you need to install the Linux Integration Services, which provides out of tree network drivers.


-1

InnoDB: Database was not shut down normally! InnoDB: Starting crash recovery Whenever database get crashed, we used to get this. Innodb mechanism tries to recover spontaneously. Use innodb_force_recovery to force the InnoDB storage engine to start up If this is happening regularly at the same time check for any cron or any logrotation ...


-1

For anyone with a similar issue in the future, I found that following the steps in the following guide solved the problem: http://blog.earth-works.com/2013/04/12/how-to-get-networking-working-in-centos-under-hyper-v/


0

"InnoDB: Database was not shut down normally!" Seems like some other process on the server is killing mysql process. you might need to check the CPU Load as well. Is your server running out of memory?



Top 50 recent answers are included