New answers tagged

0

The libsrtp library is available in the EPEL repository. You need to add this repository : yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm And then install libsrtp from there: yum install libsrtp


0

Do as it suggests and make a copy of the rdsosreport.txt to /boot. You could try booting the previous kernel - Reset the system, you should get an opportunity to select which kernel to boot, select an earlier one and see what happens.


2

There are multiple httpd contexts and this isn't the right one. The directory in which the pid file goes should have the context httpd_var_run_t . I'd recommend against putting it in /etc and create one in /var/run. To set the correct context permanently for example for /var/run/httpd-bobby: semanage fcontext -a -t httpd_var_run_t "/var/run/httpd-bobby(/....


0

I could not figure out why it was not successfully chrooting the mounted volume but I fixed it by just manually editing /etc/shadow. Just generate a new hash & salt using ONE of the below commands: (they both do the same thing) mkpasswd -m sha-512 PASSWORD SALT python -c 'import crypt; print crypt.crypt("password", "$6$saltsalt$")' Now edit /etc/...


0

To fix this issue without making the nagios plugin world-readable and/or world-executable, add the nrpe user to the nagios group.


0

I suspect that you haven't got the following enabled: NameVirtualHost *:80 NameVirtualHost *:443 There should be something in your error log (ssl_error_log) explaining why there is nothing listening on port 443. But you're paths look very un-CentOS/RHEL6 like (which don't have a sites-available structure, and don't log to /var/www/log/ ), so I'm willing ...


0

I figured this out pretty quickly, in my httpd.conf I had the ports bound there instead of the vhost. So I removed them from httpd.conf and added Listen 80 and Listen 443 to the vhost file and it worked.


3

A libsrtp package is available in the EPEL repository. EPEL is "extra packages for enterprise Linux." First ensure that the CentOS Extras repository is enabled. (It is enabled by default.) Use yum to install the epel repository: yum install epel-release Then use yum to install libsrtp from the EPEL repo. yum install libsrtp This method is the ...


0

I had the same problema, many times it was permission. Setting permission or using sudoers solve it. Try to login with nrpe/nagios user (su - nrpe) and try to run the command. Other possibilite is the selinux, try to disable is TO TEST: echo 0 > /selinux/enforce


0

The wget command will download the package to your current directory . Once it is downloaded you can simply install it using the rpm command with the package name and not the complete link as rpm -Uvh mysql-community-release-el7-5.noarch.rpm In case this shows some unfulfilled dependencies , you can use yum localinstall mysql-community-release-el7-5....


0

Thanks for the suggestions. While the initial question wasn't totally addressed, the guided questions did help me figure things out further. I'm sure I'm not the only one who may have this problem in the future, so I'm posting my answer. What is happening, (as I did suspect) is that in the iptables, there are a few rules that capture traffic on selected ...


2

Since this question was answered last, a new web based search site has become available: http://centos-packages.com It works pretty well, but results are limited to the latest release per major version, e.g. CentOS 6.8 and 7.2 From the about section, it is "a personal project by Johannes Gehrs, not associated with CentOS"


1

You could see on your iptables config an see such entries: -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT -A INPUT -p tcp -m tcp --dport 21 -j ACCEPT -A INPUT -p tcp -m tcp --dport 20 -j ACCEPT -A INPUT -p tcp -m tcp --dport 53 -j ACCEPT -A INPUT -p udp -m udp --dport 53 -j ACCEPT -A INPUT -p tcp -m tcp --dport ...


0

Have you tried to load de module by using modprobe? modprobe drbd and adding it to the modules loaded at boot echo drbd > /etc/modules-load.d/drbd.conf


0

I'll try using df -hT, which shows the disk free space instead of du (which is used to know how much space a directory and subfolders are using currently). Also, df -hT will show you the total disk space from all partitions mounted on your system.


0

I think I have finally figured it out - the NAT HOWTO says, that -j REDIRECT is just a shortcut for -j DNAT with destination address being the one of the interface: There is a specialized case of Destination NAT called redirection: it is a simple convenience which is exactly equivalent to doing DNAT to the address of the incoming interface. But in ...


1

if you want all the emails being sent via gmail, you have to set relayhost to smtp.gmail.com:587 as you wrote. This is not enough, though. You need to create and edit the file /etc/postfix/sasl_passwd Write a line in it like below: smtp.gmail.com:587 user@example.com:password where: user@example.com is a valid username in your gmail hosted domain ...


2

I have created a script that may be helpful for creating swap on ephemeral devices. It uses lvm to create the swap volume and also creates a volume that might be useful as /tmp. You could use cloud-init to trigger it. bootcmd: - [ cloud-init-per, once, mk-eph, /usr/local/sbin/mk-eph.sh] # Filesystem setup fs_setup: - label: 'tmp' filesystem: 'xfs' ...


2

You need these tools: Install "lsscsi". It's very good to find out what drives you actually have. Install "disktype". If you point it on a drive you'll be able to see what is actually there. Use "cat /proc/mdstat" to see what's up with your software raid devices (/dev/md*) Looks like you have: /dev/md0 raid1 from 4 16Gb first partitions of every drive ...


3

It would be like this: *nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [3:353] :POSTROUTING ACCEPT [3:353] -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080 COMMIT # Completed on Mon Jun 20 23:41:41 2016 Do you know how to do it the easy way? I assume you have disabled the firewalld and installed iptables-services because ...


0

You don't have the drbd module in your kernel. That is most likely a separate module in your CentOS package manager. So you need to find the kernel module and install it.


2

If you cannot find the files that it is loading in your web directory, there could be a problem of someone pointing your DNS to their server in order to hijack your traffic. I would start with verifying your DNS, and after that is made sure to point to the correct place, try running a new installation of wordpress with just a default page to see if it ...


1

You are not wasting space. tmpfs has to be used before it will use RAM and paging space. free -h will show you memory use in human readable units. If you were using tmpfs space, that would be under shared.


1

There is no difference in haproxy configuration. If you're having problems with being behind a firewall, then the issue is likely with your firewall. Specifically in your case, I bet it's a problem with either your NAT rules or your firewall doesn't allow internal users to access resources via the external IP.


0

ssh's -6 parameter forces the client to connect with IPv6: ssh -6 hostname It is possible to stop sshd from listening on IPv6 but that would simply cause an error instead of your slow connection problem. The exact reason why your connection alternates randomly between the two may be hard (and pointless) to pinpoint, but is probably related to the results (...


0

Is selinux enabled? If so, you may have to have some options set. You can check in your audit logs, say grep for AVC, or do a quick test with setenforce 0, and see if it works. If it does after that, then it is selinux, otherwise you would need to check other options.


0

Append the PATH and set the JAVA_HOME variables as below. Please see step 4 of Installing Oracle JDK on RHEL-based Systems here. export PATH="$PATH:/usr/java/latest/bin" set JAVA_HOME=/usr/java/latest


1

Connect with ssh -v user@host and you will have more information. Usually the .ssh folder and authorized_keys permissions cause trouble in these settings. I use ssh-copy-id to authorize keys in remote hosts.


1

There are several approaches to scenarios involving multiple web/app servers/load balancers. You can read about some of them in the Official Let's Encrypt Integration Guide for larger environments. There are some neat ways of doing it, like: redirecting all validation requests to a single validation host/host pool doing all certificate management off-line ...


1

As long as you're using the official CentOS repos, there shouldn't be any problems. That said, consider the following: Ensure you have a good, tested backup of the system before upgrading along with a quick way to revert your changes if the upgrade goes bad. Fire up another server, deploy your database on that server, and test the upgrade there before ...


3

First off, you should not be shelling into your remote server as root! Even with key authentication. The safer thing to do is to create another, normal user and add them to sudoers (use the visudo command for this). Then disable login as root using sudo passwd -l root Then you need to edit your /etc/ssh/sshd_config file to enable pubkey authentication. Find ...


-2

Typically you want the .ssh directory permissions to be 700 (drwx------) and the public key (.pub file) to be 644 (-rw-r--r--). Your private key (id_rsa) should be 600 (-rw-------). enter link description here Source


0

Like said fvu you can't use your http proxy to route ftp. And the easiest way is to use sftp. But you can do it using MobaXterm, an all in one remote connect software which provide many features for free, and more a correct price. Last way to proceed : create 1folder/server and setup rsync to use only the frontend as ftp.


3

You do realise that RHEL 5 was released in 2007 well before TLS 1.2 was defined in 2008? And although Red Hat backports security updates and bug fixes, as far as I know TLS 1.2 support was not. You'll need to upgrade your OS and have found yet another good reason to do so.


0

Run your command with SSH. make ssh key configuration to login without password for other user. Here is a tutorial for this purpose: https://www.digitalocean.com/community/tutorials/how-to-set-up-ssh-keys--2 Run the command with ssh: ssh -l training -i key_file "training_command"


0

yum -y update Let's download the installation file using wget: wget --no-check-certificate https://pypi.python.org/packages/source/s/setuptools/setuptools-1.4.2.tar.gz Extract the files from the archive: tar -xvf setuptools-1.4.2.tar.gz Enter the extracted directory: cd setuptools-1.4.2 Install setuptools using the Python we've installed (2.7.6) ...


5

I find Scientific Method the perfect tool for a job like this. Problem Statement My /tmp directory is getting full Gather information Using suitable tools find out what is filling the /tmp directory. I find ls(1) and perhaps du(1) great tools for this job. Maybe even lsof(8) will be useful. Analyse the information you have gathered. What ...


0

phpbrew 1.22.0 now supports fpm setup --systemctl command to help you setup the service. Be sure to enable --with-fpm-systemd when building your php.


2

If by "enabled" you mean to have a full fledged SELinux policy within the container, the answer is no. Of course the host where the containers are deployed can have SELinux enforced, and the processes within the container can be confined as well. This confinement operates from the host server point of view. There is support for sVirt MCS/MLS confinement ...


0

Here is what the problem was. It is looking for an empty directory to create the database so the initial pwgen generation should be else where, like tmp/password. That got rid of the problem. Thanks for the views and feed backs.


1

Can't believe this - the IP was actually null routed! If you have the same problem as me, make sure to check this in your provider's control panel...


2

You did not specified the vdisk cache type, so libvirt is assuming the most safest cache scheme: directsync, which imply that all writes are immediately synched to the physical disk. Such restrictive cache type is generally overkill for modern, cache-aware application, which uses write barriers by themselves to ensure important writes are synched to disk. ...


1

I guess you need to open the ports through firewalld (the default firewall in Centos 7). You can try, just for testing: firewall-cmd --permanent --add-port=80/tcp To see what active zones you have, you can use: firewall-cmd --get-active-zones And then, a port (i.e. tcp 80 for http) can be opened, let's say for the zone 'public': firewall-cmd --...


-1

SOLVED in REDHAT and Centos Check yoyr Selinux disable it then tray restart httpd it will start without ssl cert missing error.


0

A workaround would be to use preshared keys ( between all cluster ) and use the masterha_check_ssh with public key authentication.


0

You should keep Percona-Server-shared-51. The rest can be uninstalled. You just need to: yum remove Percona-Server-client-56-\* Percona-Server-shared-56-\* Percona-Server-server-56-\* yum install Percona-Server-server-57 Percona-Server-client-57 You can see the dependencies with: sudo yum deplist postfix|egrep -i "mysql|percona"


1

You can use below commands for changing permission & ownership for all files & sub directories: chown user:group /public/trunk/src/common/site/ -R & chmod 664 /public/trunk/src/common/site/ -R If you want to skip the files & want to apply only on directories find /public/trunk/src/common/site/ -type d -print0 | xargs -0 chmod 775


0

Given that in your case the connections are from your LAN, it's unlikely to be an attack, but in my case I had 1 external IP (at a time) doing the same things on a wordpress site (latest) and get this, even on stuff like: /wp-content/plugins/wpmarketplace/readme.txt which doesn't exist on my server (most of the GET resources didn't exist and there ...


0

84.180.231.1 is not inside 84.60.42.181/25, hope you made it intentionally. Make sure the rest of the world knows that the specific server has that range of IP, that you have routing configured properly both at your default gateway and that you configured default gw properly on the server. Also, don't forget to check icmp on your firewall(s)


3

You can add your script in ~/.bash_profile where ~ represents the homedir of the user for which running the script is intended.



Top 50 recent answers are included