Hot answers tagged

51

Use the Match config parameter in /etc/ssh/sshd_config: # general config PermitRootLogin no # the following overrides the general config when conditions are met. Match Address 192.168.0.* PermitRootLogin yes See man sshd_config


13

The Match address method was already mentioned, but you can also restrict the users (or groups) that are allowed to login onto a system. For instance, to limit logins to the user itai (from anywhere) and root (from a specific network), use: AllowUsers itai root@192.168.0.* This prevents all other users (like apache) from logging in through SSH. See also ...


4

You do realise that locate looks at a database cache with filenames (created nightly/manually with the updatedb command) and not at your live file system. locate does not reflect the actual state of your system. You might want to use ls to look at /usr/share/phpmyadmin instead...


2

The public mirrors have the packages removed. However, they are stored on vault.centos.org so you should be able to get what you want from http://vault.centos.org/6.6/. The vault readme.txt has this to say on rsync The Following External Vault mirrors (not monitored by the CentOS Infra team !) also provide direct downloads for all content, including ...


2

For similar issues on CentOS 7.2 & OpenLDAP 2.4.40-9, you need to modify /etc/sysconfig/slapd and add ldaps:///. It would look like: SLAPD_URLS="ldapi:/// ldap:/// ldaps:///" Then restart slapd by: service slapd restart Thanks


2

You're using the third party city-fan repository. This repo has dependencies which are in the EPEL repository, one of which is libnghttp2, so you must have EPEL enabled to use city-fan.


1

While it is interesting that nothing is showing up in netstat, you could attack this problem from a different angle. If something is sending 300 MB/s it will most likely be chewing up a decent amount of CPU ... try running top and based on the services that are using the most CPU check logs accordingly.


1

I have found the problem DAEMONOPTS=--user saslauth ===> DAEMONOPTS="--user saslauth" also need to make sure /var/run/saslauthd is accessible


1

With kernel-debug* you means both kernel-debug as well kernel-debuginfo as there is a difference between these two package Kernel-debuginfo: Provides a executable image of the kernel with all the debug symbols Kernel-debug: Enables some debugging code but not have same debug symbols on it ### Excerpt from RedHat Doc ### The kernel-debug enables the ...


1

If you enable the slow query log in mysql, it will give you a starting point for any SQL statements that take a lot of resources. It won't tell you which PHP script was the culprit, but you will have the database, table and SQL, and the time of the problem; http://dev.mysql.com/doc/refman/5.7/en/slow-query-log.html The slow query log consists of SQL ...


1

It can easily be done via any of AWS SDK's. You need to do the following: Retreive a list of all objects located in S3 bucket. Filter the list according to your criteria using regular expressions. Dowload files using the filnal list of objects If you are using PHP, the following docs could be useful for you: http://docs.aws.amazon.com/aws-sdk-php/v3/api/...


1

If you have users that have root access to the machine, they can do anything they want. Any measures you put in place to prevent enabling of the NIC could be trivially worked around. So your options are: Don't give root access to users on this system. Instead, broker what privileged commands they can use with sudo. Sort out another way to disable/enable ...


1

My original answer ssh VD_PASSWORD="$VD_PASSWORD" ... was wrong because it did not take into account the heredoc and it placed the setting of the environment variable in the wrong place. Even if you put the environment variable in the correct place ssh ... user@remote VD_PASSWORD="$VD_PASSWORD" <<'EOSSH' ... It does not work because of the ...



Only top voted, non community-wiki answers of a minimum length are eligible