New answers tagged

4

This is less to do with mysql and more to do with python. When you start a process, it inherits a lot of information from the process that created it, including its file descriptors. What your finding is that mysql inherits the listening socket your process created when it spawned. To resolve this, you need to change your python code to not use ...


1

Well, it's seems that the Debian installation of Apache is not loading the configuration file /etc/apache2/conf-enabled/gitweb.conf . This may happen because your /etc/apache2/apache2.conf is not loading the configuration files in that directory. My solution was to move the gitweb.conf file to the /etc/apache2/conf.d/ directory. Of course I could have ...


-1

There is a solution for this. You can use two Match-conditions: One to block user2 on the first port and another one to block user 1 on the second port. Should look like this: Match User user2, LocalPort 2201 DenyUsers user2 Match User user1, LocalPort 2202 DenyUsers user1 I have a similar configuration running and it works quite well (without ...


1

Original Suggestion: I'd suggest using the nss-pam-ldapd package and use an nslcd mapping to provide default values for user accounts when no value comes from ldap. According to the documentation for nslcd.conf the uid/gid can be derived too: The uidNumber and gidNumber attributes in the passwd and group maps may be mapped to the objectSid followed by ...


2

The package apt-transport-https is available in the official repositories (checked with apt-cache show apt-transport-https) but does not seem to be included on the DVD you have used for installation. Modifying your sources.list to use internet repositories instead of the DVD should fix it. See also here: ...


0

Okay, I have fixed it. I have removed the following: # Running PHP scripts in user directories is disabled by default # # To re-enable PHP in user directories comment the following lines # (from <IfModule ...> to </IfModule>.) Do NOT set it to On as it # prevents .htaccess files from disabling it. <IfModule mod_userdir.c> ...


2

Take precautions. The options are from the best to the worst. Option 1: use fail2ban to limit fails Install fail2ban. That's your best option, as it blocks whoever tries to connect with invalid credentials after some attempts. Option 2: limit failed attempts in iptables Setup iptables to limit the new connections to SSH. # Create new SSHSCAN chain ...


0

I would like add more details to above answer in order to start the scrips especially in centos there is no such alternative like update-rc.d in Debain , Easiest way is to change the scripts manually as described here and e.g. code from /etc/init.d/postfix #!/bin/bash # # postfix Postfix Mail Transfer Agent # # chkconfig: 2345 80 30 # ...


-1

This link is explaining about constraint violation, and how to copw with: http://cat.devtwo.org/post/An-SELinux-constraint-violation-(p-1-of-5)


3

An alternative will be to change the line starting with # chkconfig: in the service init script directly. This is explained in the chkconfig(8) man page. Runlevel Files Each service which should be manageable by chkconfig needs two or more commented lines added to its init.d script. The first line tells chkconfig what runlevels the service ...


0

You can manually rename symlinks in your /etc/rcX.d directories to change boot order. UPD: Under RHEL / CentOS you use command called ntsysv or chkconfig.


1

Don't use dialogs, if it's just for dpkg. Have a look at: debconf-set-selections DEBIAN_FRONTEND http://www.microhowto.info/howto/perform_an_unattended_installation_of_a_debian_package.html


1

dpkg-reconfigure exim4 is just an interface to easily create the text configuration files for exim. There is no advantage to finding a way to answer the questions automatically (if you did have to do that, expect would be a valid choice). If you have a lot of servers you should provide or generate the files in /etc/exim directly. You could, for example, do ...


0

@aef's answer is great, but I wanted to also cover two other things you were asking. The Debian upgrade process is fairly simple and safe. With the setup and tools you're describing, I doubt that you'd run into any problems, unless your PHP code itself has incompatibilities with 5.6. You can find the the official Debian upgrade instructions for Wheezy to ...


3

Here is what the message in the DSA-3380 said: Note to users of the oldstable distribution (wheezy): PHP 5.4 has reached end-of-life on September 14th, 2015. As a result, there will be no more new upstream releases. The security support of PHP 5.4 in Debian oldstable (wheezy) will be best effort only, and you are strongly advised to upgrade to ...


0

What does "\df /dev/cgroup/" say ? Could it be that the filesystem is "vserver" ? In which case you could have an incompatibility between vserver and docker (which use the same underlying technologies). On my system, just \df wont show it, but only by explicitely providing the path to df will it show. It will show in "cat /proc/mounts" as well.


0

Just to be sure... there is difference between virus definitions version and program version. Program version is always a bit behind on debian, but if you have virus updates working fine, there is no reason to panic. In fact, there's not much reason to do anything IMHO. :)


1

You need to provide your kernel with the installer in TFTP for the netboot initrd image and point it to the preseed file. In my TFTP I have got in my default menu debian-installer/amd64/boot-screens/adtxt.cfg: menu label ^Automated install kernel debian-installer/amd64/linux append auto=true priority=critical vga=788 initrd=debian-installer/amd64/initrd.gz ...


0

I do not have enough reputations to comment on your question. But one option/workaround I can quickly think of is to name/tag those images uniquely. E.g. if you tag it with your username anovil@anovil-Latitude-E6440:~/tmp$ docker run nginx:itsafire Unable to find image 'nginx:itsafire' locally Pulling repository docker.io/library/nginx Tag itsafire not ...


0

After trying everything server side, I could not do anymore ... Passive ports, marquerade IPs, proftpd .conf files, file rights, chroots Although none of this did work it gave me the right direction to follow, all ftp listing directory problems seemed to come from ports/firewall issues. It was finally a firewall issue on the local router not on the ...


0

I solved it in another way, by installing the ca-certificate. Copy your *.crt file to `/usr/local/share/ca-certificates/ run sudo update-ca-certificates This solution works with Ubuntu 14.04 at least.


2

You will also need to run: apt-get install php5-cli=5.3.10-2 php5-fpm=5.3.10-2 php5-common=5.3.10-2 php5-readline=5.3.10-2 These were still on the 5.6 version, that's why you still see 5.6.


-1

In Ubuntu Server 14.04 I was able to get past the language selection list by creating a file named "lang" with one line "en" (for selecting English) in isolinux directory.


0

If the accepted answer does not work for you (it didn't for me on Ubuntu), try the following. Create ldiff file: nano /usr/share/slapd/ldap_disable_bind_anon.ldif Paste in this: dn: cn=config changetype: modify add: olcDisallows olcDisallows: bind_anon dn: cn=config changetype: modify add: olcRequires olcRequires: authc dn: ...


0

It looks like there is no space between the resource name (drbd1) and the open bracket; perhaps this is a problem. Also, DRBD needs the hostnames in your configuration to match exactly what is shown with: $ uname -n


0

Debian uses rsyslog by default, so check your /etc/rsyslog.conf. You'll likely see entries in there that set those destinations. You'll also need to look for hhvm as a source, and make sure that the source has only the destination that you want.


4

Is it safe to chmod 600 -R /var/log? No, it's not safe/sensible to do this, the OS supplied defaults are reasonable. If you look in /var/log, you will see that there are directories in it. Changing these to 600 is not a good thing as you will never be able to list them to see what files exist. This will likely impinge upon other system utilities like ...


3

No, its not safe to make /var/log only accessible by root - if your server is being properly secured, any daemons that need to create their logs there won't be running as root. In general all the default files and directories already have sensible permissions.


0

Do you try to run the 'lsb_release -a' on the host ? It is maybe missing.


0

You can do this my configuring iptables to 'mark' the messages e.g. iptables -A INPUT -s 192.0.2.0/24 -j LOG --log-prefix='[iptables] ' Which will cause a log message that is prefixed with the text [iptables] Now you can configure your rsyslog to send these messages to a particular log file by adding a suitable entry to it's configuration e.g. ...


0

there is a way to log packets in IPTables. first you need to create new chain to logging packets. iptables -N LOGGING then you need to append which packets you are gonna log using following commands. iptables -A INPUT -j LOGGING iptables -A OUTPUT -j LOGGING now you can log the packets to the syslogs using this. iptables -A LOGGING -m limit --limit ...


1

Your firewall is missing major part. The first packet go to outside correctely (as the OUTPUT policy is ACCEPT). The fist incoming packet is rejected as there is nothing allow in INPUT rule. You should have a iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT to allow the connection tracking to allow the packet to come. The second packet will ...


1

You need to allow incoming packets, related to your outgoing connections. iptables -I INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT If that doesn't work: iptables -I INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT Differences are discussed here: ...


0

Fixed. Add no-external-locking to my.cnf under the [mysqld] section, and then reboot the entire system. This should fix it, for anyone who finds this. Also if you backed up your data, then attempted to restore and were told to rm ib* to make it work, you need the ibdata file.


2

you may test the specific file for errors by running in debug mode ; /usr/sbin/logrotate -d /etc/logrotate.d/nginx You may force logrotate to run via specific file as well /usr/sbin/logrotate -f /etc/logrotate.d/nginx In most of the cases -- lograte may fail due to write errors in the specified directory (may be the rotated file is already present ? ...


1

The key here is the line '/lib/libc.so.5': not in executable format: File truncated The C library is one of the core components of a Unix-like system, including Linux. That it is corrupted means that virtually nothing will work. You are lucky that your system is limping along, but it's quite possible that starting or restarting anything will fail. DO NOT ...


2

Invoking logrotate manually with the -v option might shed more light on what's going on, be warned that this might be a disruptive operation depending on what logs are rotated. Apart from that, it's hard to say if there's nothing at all in the logs: Checking disk space/free inodes with df could help, inspecting dmesg might give an indication if the disk is ...


0

Sysctl Defaults On CentOS 7, look at /usr/lib/sysctl.d/ to get the default settings that ship with the OS.


0

I would split your case to 2 separate questions: Network connectivity Yeah sounds doable with openvpn, however keep in mind that you need to have openvpn server somewhere. This will be single point of failure and also potential perf. bottleneck. What I would do: In case I had money to spent : I would contact ISP/DataCenter you're using, and ask for ...


1

First, all the rules you have listed above is added to the INPUT chain, which deals with packets destined for the local server/pc (from outside) . Second, they are either blocking incoming requests from known private ip address block ( -s for source) or to broadcast or reserved addresses (-d for destination) So, there is no apparent reason for those ...


1

As a general rule it is always a good idea to run workers and that kind of thing under a separate user which is specifically only given the permissions it requires in order to run. Running things as root is usually easier as you rarely have to worry about permissions issues, but it is always less secure as anything that can successfully exploit your ...


0

The updates module in Virtualmin/Webmin never does a dist-upgrade (it doesn't even know how). But, if one were done before from the command line, or if you were already on the rolling unstable ("sid") distribution, you would get upgrades like this whenever a new release is forked by the debian folks. In that case, I think you were already running unstable, ...


0

as Michael Hampton your eth0 interface is configured to get IP address information via DHCP. Normally you would need to configure your network interface manually or static. An example would look like this in you /etc/network/interfaces config file auto eth0 iface eth0 inet static address 192.0.2.7 netmask 255.255.255.0 gateway 192.0.2.254 ...


1

Today I had the same problem like yours @RonaldPK . I fixed by ps axu|grep rsyslog - I saw that I had already running rsyslog, so I kill it and do apt-get -f install and all went fine. I hope this helps you.


0

You might also consider using PcapPlusPlus. It has a packet creation engine that supports ICMP and a way to send packets to the network. Here is an example code for what you want (sending high-latency erroneous ICMP packets): // open a pcap live device for interface with IP 10.0.0.1 (put your IP address instead) IPv4Address ipToSearch("10.0.0.1"); ...


0

A SSL certificate, is basically telling the remote, that the IP or DNS name they've connected to, have a public-private key setup, and that the public-key is "signed" by some certificate authority (CA) as belonging to that service on that DNS name or IP address. A Certificate could (lately) include subjectAlternateNAmes (SANs) stating that the certificate ...


0

If you are using the same URL for both services then use the same certificate. Self assigned certificates are useless though. Why don't you use a real certificate https://letsencrypt.org/ its free.


0

To get proftpd to listen only on localhost, you would use both DefaultAddress and SocketBindTight, like so: DefaultAddress localhost SocketBindTight on By default, proftpd will listen on all interfaces for a given port (e.g. "*:21"). The SocketBindTight directive tells proftpd to bind "tightly" to the address/socket, rather than using a wildcard socket ...


0

OSX's samba server (SMBX) requires mounting with options nounix,sec=ntlmssp,noperm http://stackoverflow.com/questions/26000289/debian-7-fstab-mount-cifs-invalid-argument


0

The error says it all, you have both static and dynamic lease present for the same ip address range. In the following you have defined a dynamic lease: # Bekannte Geraete pool { range 192.168.1.1 192.168.1.169; deny unknown-clients; } Therefore you shouldn't configure static lease from this range anymore. I guess you have ...



Top 50 recent answers are included