Tag Info

New answers tagged

2

RHEL/CentOS does not enable ECC by default in NSS. You have to explicitly specify which ciphers you want, e.g. curl --ciphers ecdhe_rsa_aes_128_gcm_sha_256 .... or whatever cipher is supported by your server and also supported by your version of curl/NSS. See http://stackoverflow.com/a/31108631/3081018 for more details. I tried with explicit cipher, ...


0

You can do this to upgrade your subversion : For CentOS/RHEL 7 Users: [WandiscoSVN] name=Wandisco SVN Repo baseurl=http://opensource.wandisco.com/centos/7/svn-1.8/RPMS/$basearch/ enabled=1 gpgcheck=0 For CentOS/RHEL 6 Users: [WandiscoSVN] name=Wandisco SVN Repo baseurl=http://opensource.wandisco.com/centos/6/svn-1.8/RPMS/$basearch/ ...


1

In most cases this is Firewall who is causing troubles. Try to turn it off on the host and virtual machine and ping it again, than if it helps, turn it back on and configure Firewall rules accordingly.


0

I faced same problem like you, when i read your post i didn't have a clue to solve that, but now i solve my problem. Here's my solution's : Install nss-pam-ldapd if you didn't install it previously : [root@www ~]# yum -y install nss-pam-ldapd Disable selinux and reboot : [root@ldap ~]# vi /etc/selinux/config Change this line : selinux=disabled ...


-2

In my case I had to add a relayhost to my sendmail.cf file. I changed DS to DS relayhost.example.com and restarted sendmail.


0

From the conventional filesystem point of view, Linux operating systems have a single directory tree structure. Accessible disks used by any application must have an associated location in that tree. So mounting is associating a disk device to a particular location in the directory tree to make files available to applications. Besides, Oracle ASM is a ...


0

As suggested by Petter, downgrading the kernel in the %post section works: %post rpm -ivh --oldpackage http://my.repo.server/centos/6.6/updates/x86_64/Packages/kernel-2.6.32-504.16.2.el6.x86_64.rpm rpm -ivh --oldpackage http://my.repo.server/centos/6.6/updates/x86_64/Packages/kernel-firmware-2.6.32-504.16.2.el6.x86_64.rpm Thanks!


0

Fedora bug is at https://bugzilla.redhat.com/show_bug.cgi?id=1185708 Cause is curl using NSS, and not wanting to diverge from other NSS using programs. Currently not fixed as of Jul 2015 in Fedora 22


0

In the future, use a tool like ncdu to map your filesystem usage. You would have found the log file issue very easily.


2

First: the sequence find . -type d -print0 | xargs -0 du | sort -n is incredibly recursive and inefficient. Finding the largest files, with find / -type f -print0 | xargs -0 du | sort -n is already much better with find / -type f -printf "%s %p\n" |sort -n even more efficient. Often more telling is where you lose your disk space and finding the largest ...


0

This is another short solution. Download & Install the client: # wget -q http://kb.arubacloud.com/files/tar-gz/forticlientsslvpn_linux_4-0-2281-tar.aspx -O fortisslvpn.tgz && tar -xzf fortisslvpn.tgz # cd forticlientsslvpn && ./helper/setup.linux.sh Press Ctrl+C, Agree Their License (1st time only) & then connect to VPN by: # yes ...


2

ssh tunneling is configured by the ssh-daemon itself. If the SSH daemon does not permit tunneling, you'll need to re-configure it. Typically, it's just running openssh server... and you can edit the /etc/ssh/sshd_config and add AllowTcpForwarding yes (remove AllowTcpForwarding no) and reload sshd config. As far as sftp goes, this is a slightly different ...


1

First off, a clarification. Kerberos and SSH Keys are two mutually exclusive authentication methods for SSH. You don't use Kerberos with SSH Keys. You use Kerberos instead of SSH Keys. Both allow for "passwordless" SSH logon. A bit of reading on the Kerberos protocol may be in order. With Kerberos, you need to obtain a TGT that proves you are who you say ...


1

if you compare the default value of the boolean, you can see if that was changed. semanage boolean -l | grep http SELinux boolean State Default Description httpd_can_network_relay (off , off) Allow httpd to act as a relay httpd_can_network_connect_db (off , off) Allow HTTPD scripts and modules to connect to databases over the ...


0

Please enter the command from your terminal system-config-network-tui This will allow you to configure the network settings manually but through a graphical interface. Please come back and comment if this works.


0

I'm not sure whether you can via Apache, but I do know you can with OpenLiteSpeed. http://open.litespeedtech.com/mediawiki/index.php/Help:Multiple_PHPs http://blog.litespeedtech.com/2013/04/19/setting-up-multiple-php-versions/ I've used (Open)LiteSpeed many times as a drop-in replacement (with more stable performance) over Apache and used that multi-PHP ...


0

You are not able to do this with chrome. Instead, curl is the tool you are looking for. curl <website url>:80 (or 443 for https) from there, if you need to check something specific, you can grep out for what you are looking for. Or if you are creating a heath check style and just want to make sure it is up. -I flag will return the header which will ...


1

Have you tried 127.0.0.1 as the hostname on the "General" Tab of your application? It's hard to tell exactly what this application is trying to do (remote/local/dynamic tunnel) I have to do something similar to get to a remote Oracle Database we use... I have the luxury of having access to either a linux workstation or cygwin. I am not familiar with the ...


4

I had a similar issue. Turned out that /etc/ssh/sshd.conf had AllowUsers line. Resolved it by adding new user to that line and restarting SSH.


3

My go-to for PHP on CentOS is the remi repository. Remi is a Red Hat employee who also packages the official Red Hat PHP packages, in addition to his own repos where he maintains compatible packages which are more current versions. Simply installing and enabling the remi repository on CentOS 6 and then yum updating is sufficient to upgrade to PHP 5.4. (The ...


0

Assuming you have Chrome installed, and it somehow refreshes hourly, then you can use the import command, included with ImageMagick, to take a screenshot. If everything works as expected, setup a cronjob to run the import command once an hour. For CentOS: yum install ImageMagick ImageMagick-devel # I did not test this. For Ubuntu: apt-get install ...


0

Seems like the server I was working with were using python 2.7, installing packages from yum installed only 2.6 version. Used pip2.7 to install necessary packages.


2

If, for example, your IPs are 192.168.10.10 and 192.168.10.11, and you want sshd to listen to port 443 on IP1, and httpd to Listen to port 443 on IP2: Add to your /etc/ssh/sshd_config file: ListenAddress 192.168.10.10:443 and restart SSH. SSH will now listen on port 443 of IP1. Add to your httpd.conf file (assuming Apache, should be easy with other ...


0

If you want to segregate IP1 ==> NGINX and IP2 ==> SSHD, I suggest you to turn on NetFilter w/ PREROUTING : Nginx listen on 8443 and SSHD on 22 ; close these ports and PAT the 443 port regarding of the source. Else, sorry, this isn't possible for one server to have two processes handling one Net socket (TCP/443), because the system couldn't know which ...


0

Something during the VirtualBox setup had changed my /etc/sysconfig/network-scripts and stopped the nameservers setting correctly. To resolve this I turned off Network Manager /etc/init.d/NetworkManager stop /sbin/chkconfig NetworkManager off Added NM_CONTROLLED="no" to /etc/sysconfig/network-scripts/ifcfg-eth0 and manually edited /etc/resolv.conf ...


2

Does anybody know how I might begin to troubleshoot this? You know, the usual stuff from the sysadmin kitbag Use your console access to check your logs and take appropriate action. check you have correctly configured network interfaces check your firewall. check that sshd is running check your change/config management system for other recent stuff ...


0

(From my install script) General answer: Either The order of the configure options matters, or Apache does not like getting its --options on separate lines. Lead with enable-mods-shared like so (although, you may wany "few" or "reallyall", etc..) cd httpd-2.4.12/ mkdir -v srclib/apr/ srclib/apr-util/ mv -v ../apr-1.5.2/* srclib/apr/ mv -v ...


0

I also found today that some hosting providers disable the sshd options to make this work. I had to edit /etc/ssh/sshd_config and then uncomment these lines: PubkeyAuthentication yes AuthorizedKeysFile .ssh/authorized_keys Then I restarted sshd: service sshd restart I also confirmed that getting the permissions on the .ssh directory and ...


0

I just found samplicator which also seems to do this.


1

I shortened the config a bit. Problem was, that disabling DNS Sec was persistent on proxy. After keppen DNS Sec turned off for several minutes, the proxy recognized it. Thanks!


-1

Similar situation: https://github.com/facebook/hhvm/issues/5081 Let me know if you find some way


0

we use sssd for remote authentication. crond has to check for available users ahead of running jobs and it does this every 60 seconds. sssd default client_idle_timeout is 60 seconds. so we had a race condition between sssd and crond We only got to the bottom of this problem because on version 1.4.4-14 crond started being a bit more verbose about some ...


0

Old question but this can be safely ignored according to MS. Users are hereby advised to ignore all messages and warnings that seem to indicate that no technical support will be provided because integration services for a non-Windows guest virtual machine are degraded. Microsoft will provide technical support even if when such messages are ...


3

There are a few ways. In disk manager in Windows you should be able to select the disk and choose "Create VHD" then you can import that to VirtualBox. Or my preference would be to allocate a new VMDK that's slightly larger than the physical drive on your CentOS VM then use dd to clone the drive in there over to the new VMDK device. Then you can remove ...


0

That didn't work for me, instead I went to the file you mentioned: /usr/local/rvm/gems/ruby-1.9.3-p551/bundler/gems/snorby_cas_authenticatable-281a58b36368/devise_cas_authenticatable.gemspec But here I commented these three lines: if s.respond_to? :specification_version then s.specification_version = 3 if Gem::Version.new(Gem::VERSION) >= ...


-3

I was having similar java.lang.NullPointerException with a fresh version of CentOS 6.3 and Jenkins 1.617, using Java 1.7.0.5. When tailing /var/log/jenkins/jenkins.log, I noticed the following errors: Caused by: java.lang.NullPointerException at sun.awt.X11FontManager.getDefaultPlatformFont(X11FontManager.java:779) at ...


1

The backlog option limits the number of messages that can be queued up waiting to be written to the log. So the unit of the backlog option isn't bytes or connections, but rather 'number of audit messages'. Choosing a sane value for this setting depends entirely on your system. I'd recommend starting out with the default and increasing it as needed. If you ...


0

Have you tried it? As you have the server already what's stopping you? You phrase this as if it's a hypothetical problem that would easily be tested yourself. Also, Red Hat 6 is in the OS certification matrix, so there is no reason that CentOS 6 wouldn't work.


0

This is a Filezilla client usage issue. Open FileZilla, go to Site Manager, and select the settings for your server. On the Advanced tab, the "Default remote directory" box specifies what folder your SFTP connection opens by default. Enter your /home/xxx/yyy/zzz/ in that box.


0

If your error message is " Ping request cound not find host domain.ro. Please check the name and try again " the error does not lie with your apache configuration. The nameservers hosting your domain is not reporting any A-record for your domain (assuming the DNS-client you are trying to ping from is working correctly). Start by looking if a nslookup for ...


1

ssl_crtd is a binary it is built in the squid-helpers rpm build see: squid.spec. %files helpers %{_libdir}/squid/basic_db_auth %{_libdir}/squid/basic_getpwnam_auth %{_libdir}/squid/basic_ldap_auth %{_libdir}/squid/basic_ncsa_auth %{_libdir}/squid/basic_nis_auth %{_libdir}/squid/basic_pam_auth %{_libdir}/squid/basic_pop3_auth ......... ...


0

I got it working by adding the 1.0.6 dependency in the devise_case_authenticable gemspec file /usr/local/rvm/gems/ruby-1.9.3-p551/bundler/gems/snorby_cas_authenticatable-281a58b36368/devise_cas_authenticatable.gemspec: if s.respond_to? :specification_version then s.specification_version = 3 if Gem::Version.new(Gem::VERSION) >= ...


0

The common SELinux security policy for webservers provides a set of types that can be used by normal users to tell SELinux how the webserver can operate on specified files. Users can use the chcon command to associate these types with specified files and directories. Each of these types have specific properties, designed for specific purposes. The ...


0

Using chcon works, but you lose the selinux label when you reboot the server, the more clear way is to use semange and restorecon example: semanage fcontext -a -t httpd_user_script_exec_t '/home/pippo/file.bash' restorecon -v /home/pippo/file.bash restorecon reset /home/pippo/file.bash context ...


0

The best command will be $ yum install epel-release and yum will get the correct rpm You can further run the below commands to fix the public key error. $ yum clean all $ yum makecache $ yum update


0

This solve my problem: I add new kernel from repository and disable autosuspend to all usb devices: for i in /sys/bus/usb/devices/*/power/autosuspend; do echo -1 > $i; done for i in /sys/bus/usb/devices/*/power/level; do echo on > $i; done


1

Edit the hosts file of your local machine (or the server running your DNS) to include the following: 192.168.5.25 mycompanysupport The location of your hosts file will vary depending upon your platform. For Windows NT and Windows 2000: C:\winnt\system32\drivers\etc For Windows XP, Windows Vista, Windows 7 or Windows 8: ...


0

I considered the problem of if one changes the version of java being used with: alternatives --config java Then any hard coded JAVA_HOME is going to change (atleast it will on the Centos 6.6 I'm currently staring at). That is, there is no /usr/java. This doesn't seem like the best way (open to failure) but in the 10 mins I've spent on this it seems the ...


0

There are two problems to set up what you are looking for: unlike for http, reverse proxies for ftp are a pretty rare breed and those that exist (like the old Suse proxysuite) are - to remain polite - not really a joy to set up and work with. unlike http 1.1, ftp has no provisions for virtual hosting, meaning that a server cannot see the hostname you want ...


2

If you are using only CentOS repositories, changes that something can go wrong are very low. Inside the same major release (in this case, CentOS 6), configurations are almost always guaranteed to be compatible between updates (this is the very reason because, unless otherwise specified, major software versions remain the same inside all CentOS point ...



Top 50 recent answers are included