Tag Info

New answers tagged

1

The command below works well in a server environment, without throwing warnings. It implements both stop and start request on the networking service. sudo service networking start


0

I attempted bburky's fix, but found that the following was needed in Debian Wheezy... d-i apt-setup/use_mirror boolean false d-i apt-setup/cdrom/set-first boolean false d-i apt-setup/cdrom/set-next boolean false d-i apt-setup/cdrom/set-failed boolean false


0

That card has a Marvell 88SE9230 chipset. I don't know which driver gets loaded in your kernel but you may be lucky and have compatibility with the Marvell support in smartctl. Then you can script something based around smartctl -a -d marvell /dev/sda to monitor drive status in your array.


1

This is a consumer oriented adapter card, and should not be used in professional systems. I doubt there is any monitoring solution available for this. I recommend that you get a proper server RAID adapter, or use Linux software RAID instead.


0

This is a bug in the debian HVM images.


1

For web login : openvasmd --create-user your_new_user It will automatically generate a password for the new user. Again, use it to modify the admin password


1

I found the following in the stderr I, [2014-08-19T22:10:48.807830 #3843] INFO -- : Refreshing Gem list I, [2014-08-19T22:10:53.127464 #3843] INFO -- : listening on addr=127.0.0.1:8080 fd=11 I, [2014-08-19T22:10:53.127774 #3843] INFO -- : unlinking existing socket=/var/opt/gitlab/gitlab-rails/tmp/sockets/gitlab.socket I, [2014-08-19T22:10:53.127900 ...


0

Check your version with: $ monit -V Replacing sslauto with TLSV11 or TLSV12 is only possible starting 5.8. (Ubuntu, for example, has only 5.6 in their repo, as of today.) Find more details about the issue/commit here: https://bitbucket.org/tildeslash/monit/issue/14/monit-33-add-support-for-tlsv11-and-tlsv12 So you can either: a) force an update of ...


1

The simplest way: modify file debian/control file so that you have the line: Package: my-nginx instead of just nginx.


1

I doubt Samba can do this. Dividing available resources like CPU, IOPS, Bandwidth etc. is not as easy as you might think. You would atleast need support from the OS for that. For example only the filesystem can really schedule IO requests in a nice and "fair" way (with fair being a subjective term). I think realistically your only option is to rate limit ...


1

In Linux Mint you simply run "sudo /usr/sbin/openvas-adduser" and follow the prompts. A blank rule set


0

I don't like putting my own solution to a problem... but this is now as much for me as everyone else! In brief: the solution was to get a copy of updated version of dovecot. Reason: the doveadm utility is not available on the v1.* versions. The config is split into multiple files (easier admin). and the majority of the help I found on various sites (stack ...


0

I found the right parameter "reserved_for_root{ 0 }" 50000 10000 50000 ext4 \ $defaultignore{ } $lvmok{ } \ method{ lvm } format{ } \ lv_name{ root } \ use_filesystem{ } reserved_for_root{ 0 } filesystem{ ext4 } mountpoint{ / }


1

I experienced the same issue. I was able to get the transfer working by configuring the plugin to "Use active data mode". Also make sure you allow connections on port 21 from your Jenkins server.


0

You forgot the rule for each interface. And better create 2 tables instead of main and adsl just for the better readability, eg. ispa and ispb For eth4 add (you can do that with post-up in /etc/network/interface): ip route add 11.11.11.12/32 dev eth4 src 11.11.11.11 table ispa ip route add default via 11.11.11.12 table ispa ip rule add from 11.11.11.11 ...


0

First of all let me clarify you one thing, Parallels considers Debian 5.0 as EOL. You can refer Parallels website for this. Again Plesk 10 will be EOL by 2015. http://sp.parallels.com/hcap/support/policies/plesk-lifecycle/ So as per my suggestion it's safe to migrate all your contents to a supported system. As everyone knows migration will be safe and ...


1

You can use pip to install python packages instead. pip search python-statsd => "statsd is a client for Etsy's node-js statsd server. A proxy for the Graphite stats collection and graphing server." To install statsd use pip install python-statsd


0

I found an answer to my own question. The problem was that the domain name was in mydestination, which made the emails sent through the domain to go through local_recipients_maps. Removing the domain solved the problem. I don't know if that's the best practice or overriding local_recipients_maps to use mysql is. If anyone has an answer to that please write ...


0

Presumming you are talking about the ssh host key (and not keys for user accounts). I suppose it depends on how the installation was performed. Most Linux systems will generate new ssh host keys when sshd is initially started. Interesting in that I thought these keys were in a specific file and not contained in any log file. Perhaps the ssh package was ...


3

I know this is not really answering your question, but: Don't. Use your mail client with STARTTLS instead, which, as you say, works fine with your server. It is not a good idea to send credentials over an unencrypted connection. You don't state the reason why you want to do unencrypted SMTP authentication at all, so I can only guess — if you have a mail ...


1

The one document which tries to make sense of all this is the Filesystem Hierarchy Standard; a.k.a. the FHS. It does not provide an easy straightforward answer to your question, though. There seems to be 3 options: Use /opt/tunnel and keep all files relating to the application there. Use the packaging system and package your application as a Debian ...


1

Just replace $NETWORK_TO_NAT with the IP address of the client you want NAT.


0

You have to do something like this: begin routers per_user: driver = manualroute condition = ${lookup{$sender_address}lsearch{/some/file}{yes}} route_data = ${lookup{$sender_address}lsearch{/some/file}} /some/file should be the next format: # sender smarthost user1@domain.tld smtp.tld user2@dom.com mx.tld condition line ...


1

netselect-apt - speed tester for choosing a fast Debian mirror


0

If the host is the router for the guest, then you must install, configure and run radvd on the host. For this to work, do not filter/discard neighbor discovery packets. Otherwise the guest will not see a default route. You could also configure the default route manually, but that's tedious and error prone. Addendum: don't forget to enable forwarding on the ...


1

Typically the location of configuration files (and binaries and everything really) is a compile time option allowing the administrator to override defaults, or to set new defaults if you like. I wouldn't be surprised if the Debian package maintainer opted to set up a directory /etc/maradns as suggested in the Debian Policy Manual. You place the ...


0

When you run getent passwd, do you see your LDAP users listed? If not, make sure libnss-ldapd is installed, and run dpkg-reconfigure libnss-ldapd and make sure at least the passwd database is enabled (and you'll probably want group and shadow as well, sooner or later). If getent passwd mentions your LDAP users but you can't auth as one, run pam-auth-update ...


1

Take a look at the --get-selections and --set-selections options to dpkg. You export a list of current selections using dpkg --get-selections > my-selections. In order to restore the selections you first need to run dpkg --set-selections < my-selections and then apt-get dselect-upgrade to actually install the packages. Be aware that this will only ...


0

GnuTLS or apt seems to be buggy. If the host name from my apt sources.list does not match the Apache ServerName from my repository webserver I get the following error using TLSv1: W: Failed to fetch https://repo.example/debian/dists/unstable/non-free/binary-amd64/Packages: gnutls_handshake() failed: A TLS warning alert has been received. Using ...


1

PureFTP configurations are a little strange. You should be able to set the timeout by adding a file called "MaxIdleTime" inside the conf directory. The content of the file should be the number of minutes you like to set the timeout to be. Afterwards just restart your server. echo 10 > /etc/pure-ftpd/conf/MaxIdleTime


0

I edited the Sidekiq startup arguments. In GitLab <7.0.0 it's under scripts/background_jobs but in >7.0.0 it's under bin/background_jobs Change: function start_sidekiq { bundle exec sidekiq -q post_receive -q mailer -q system_hook -q project_web_hook -q gitlab_shell -q common -q default -e $RAILS_ENV -P $sidekiq_pidfile $@ >> $sidekiq_logfile ...


2

You specified a route of 0.0.0.0/1. This subnet consists of 0.0.0.0 through 127.255.255.255 inclusive. It's not at all clear why you would want to only route half of the possible IP addresses. I suspect you meant to route all of it (e.g. 0.0.0.0/0) instead.


1

Bourne shell generically has a nice way to evaluate the contents of a string (not using test or [[ or whatever). contents=$(curl -s http://path/to/thing/with/zero_or_one) case "$contents" in '1') echo "it was one" ;; '2') echo "it was two" ;; *) echo "it was something else ;; esac


1

Something like:- status="$(curl -s http://yoursite.com/status.php)" if [[ $status =~ ^1 ]]; then # site is up... fi


-1

The problem seemed to be that the http proxy was not enabled. The solution was to enable proxy_http a2enmod proxy_http service apache2 restart Now incoming requests are being forwarded to the required ports.


1

So, it turned out that Kerberos in combination with low entropy was causing the problem. Since I was not using Kerberos, I ran pam-auth-update and unselected Kerberos.


1

Please change /etc/hosts from 88.198.61.237 Debian-70-wheezy-64-minimal 2a01:4f8:131:2a::2 Debian-70-wheezy-64-minimal to 88.198.61.237 web-amd-3700-2gb 2a01:4f8:131:2a::2 web-amd-3700-2gb or (better) fix the setup to have a proper FQDN and naming scheme.


0

On debian, the default Domain that is used it non is given is specified by /etc/mailname. AFAIK this is a Debian specific modification to postfix. So it should be solved by filling /etc/mailname with mydomain.com. And myorigin in postfix defaults to /etc/mailname on debian, which also should be used in my opinion (so jsut delete this line).


0

In my case, being new to uwsgi, I didn't understand where virtualenvs end up by default (under ~/.virtualkenvs directory). For my moztrap app, the appropriate configuration turned out to be: [uwsgi] vhost = true plugins = python socket = /tmp/testa.sock master = true enable-threads = true module = wsgi:application processes = 2 wsgi-file = ...


0

I found a solution Update openssh from rescue mode Mounting the hard drive in rescue mode (with software RAID) # mount /dev/md2 /mnt # mount -o bind /dev /mnt/dev # mount -o bind /sys /mnt/sys # mount -o bind /dev/shm /mnt/dev/shm # mount -o bind /proc /mnt/proc # chroot /mnt Updating openssh # apt-get update && apt-get install openssh-server ...


5

My first advice would also be trying strace -f sudo who. But this won't work, since strace will not trace SUID programs. You have to attach to your shell using strace as root and then call sudo. In your shell type $ echo $$ to get your shells PID. Then open another terminal and become root in that terminal. There you type # strace -f -t -T -p $pid -o ...


2

Yes, AllowUsers takes precedent over AllowGroups. If specified, only the users that match the pattern specified in AllowUsers may connect to the SSHD instance. The order of processing the access directives is DenyUsers, AllowUsers, DenyGroups, and finally AllowGroups. So, the solution to your problem is probably to use one or the other, possibly the ...


2

RTNETLINK answers: No such file or directory is tc's way of saying that it can't find something - in this case: most probably the htb scheduler. To test and make sure try modprobe sch_htb You will probably get an error. And this probably means that your VPS provider is not using the default kernels from debian upstream. They usually provide you with a ...


0

Need to do some sleuthing? run "strace iptables-save" and look through the output for the files that this command opens. ignore library files, one of the file it opens to read will be the ruleset you are looking for.


3

iptables-persistent wheezy package saves the rules in /etc/iptables/rules.v4. You could view the source of the package here: https://packages.debian.org/search?keywords=iptables-persistent


0

Yes, there are good reasons why Debian does not use uid 8 and gid 8 for Postfix. You could install other binaries, which use those groups and this could theoretically result in security problems, especially if they run suid mail. Postfix should use its own gid and uid for security reasons, period.


0

Wheezy repository does not include 2.6 kernel, only a transitional package (see here) Squeeze has this particular version (reference), so you would need to add the Squeeze repository to your sources and install from there.


0

The Debian Backports repository provides you with newer versions, not older. The default Wheezy kernel is a 3.2 kernel. Hence any kernel packages in wheeyz-backports will be something newer than that. Currently the most recent kernel in wheezy-backports appear to be a 3.14 kernel. If you really need 2.6 kernels the easiest is probably to reuse 2.6 kernels ...


1

For the Debian installation, there are two directories: /etc/service and /service. For your service to be effectively controlled, they should be more-or-less mirror images of each other. In your example, for service pants, there should be a symlink /etc/service/pants and a symlink /service/pants, each should point to /etc/sv/pants. You can "cheat" and ...


0

I've been experimenting with a similar setup and think I understand the solution. In my case I have two servers, each with dual gigabit NICs connected through 3com 3824 layer 2 switches. After experimenting with various options I found that I needed to create a VLAN for each 1:1 NIC between servers (e.g. a VLAN which contained the switch ports for ...



Top 50 recent answers are included