Tag Info

New answers tagged

0

you will have to use a proxy server like squid for example and use a re-director a nice add blocker would be addzapper addzapper is designed for add blocking both are found in Debian as packages you can use apt-get to install squid and addzapper


0

I would first look at what I have installed dpkg -l |grep php then uninstall any php that is version 5.4 example ... apt-get remove libapache2-mod-php5 php-db php-pear php5 php5-cli php5-common then you need to clean up the old files (not necessary but could help) apt-get clean then like above edit and pin nano /etc/apt/preferences.d/preferences ...


0

Impossible upgrade the postgresql-client without the postgresql package too. But, it's possible to make the postgresql service doesn't restart until the next OS reboot. Use policy-rc.d cat > ./usr/sbin/policy-rc.d <<EOF #!/bin/sh exit 101 EOF chmod a+x ./usr/sbin/policy-rc.d Just remember to delete policy-rc.d if you want restart PostgreSQL ...


1

You don't state what engine are you using, but let me presume it's InnoDB (as it's pretty much standard these days) then in MySQL Docs (Using actual symbolic links has never been supported for InnoDB tables.) and The DATA DIRECTORY clause is a supported alternative to using symbolic links, which has always been problematic and was never supported ...


2

You can use ssh. For example: ssh root@server -c "dpkg --get-selections" > localfile.txt


2

Yelp shared a more sophisticated approach based on meticulous testing. True Zero Downtime HAProxy Reloads tl;dr use Linux tc (traffic control) and iptables to temporarily queue SYN packets while HAProxy is reloading and has two pids attached to the same port (SO_REUSEPORT). Cheers to Yelp for sharing such amazing insights.


0

This is working config from my server: /etc/network/interfaces: auto lo iface lo inet loopback auto bond0 iface bond0 inet manual up ifconfig bond0 0.0.0.0 up slaves eth1 eth0 bond-mode 0 bond-miimon 100 bond-lacp-rate 0 auto br0 iface br0 inet static address 192.168.162.235 netmask 255.255.192.0 gateway 192.168.150.254 ...


1

You need to provide more information, especially log entries right before the system rebooted. However as far as I can see it may not provide more information. Check other logs such as syslog. The most common causes in my experience for sudden restarts without any indication really of what went wrong is often hardware related. Otherwise the kernel mostly ...


1

The error message from AOL seems to indicate that indeed your IP address was blocked. You could try to check using online databases such as senderbase if your IP has a listed reputation. Unfortunatly, it is the nature of banning that you cannot do much more to resolve it than to try to appeal to the relevant provider (in this case, AOL) and explain that ...


0

Is hpsockd sufficient for your needs? Appears all the alternative SOCKS5 servers, like dante, survive only in unstable now, so maybe they developed bugs, exploits, etc.


0

I understand your problem, since I'm having a similar issue with the pacman package manager on Arch Linux. If you have dpkg > 1.15.8, try populating /etc/dpkg/dpkg.cfg.d/excludes with: path-exclude=/usr/local/java/jre/lib/ext Source: Save disk space by excluding useless files with dpkg | Raphaël Hertzog. For Arch users, use NoExtract= in ...


0

Superpelican, Further to the comment above. May want to try "sudo chown -R www-data:www-data * " or "sudo chown -R www-data:www-data /media/storage/www/* " On that folder or subfolders from within /media/storage/www This way the webserver owns the folders and files within not you as a user. As far as chmod.. Also try it with something like "sudo chmod ...


2

You can't access your www folder because www-data user only has 4 right (user:group jurre:www-data and rights 740) which means no execution right on www folder, only read (read folder name and attributes). You need execution right on folder, because executing a folder means opening it (to list files or to enter it). You can do this with your own user jurre ...


-3

Check this directory permissions. They can cause this.


0

I have found the solution. I added this line to my /etc/ssh/sshd_config file: KexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 and restarted ssh: systemctl restart ssh as suggested by this post: ...


0

Sata drivers come by default with debian squeeze's kernel images, unless you told it at the time to only include the needed drivers when the initramfs was being built, and there was no sata hardware in the system. It's a question that gets asked I believe during initial install of the OS. If you would not have included most modules but opted for the smaller ...


1

It's most likely the firewall causing the problems. Open up port 9090 with this: sudo iptables -A INPUT -p tcp --dport 9090 -j ACCEPT If you're using ufw: sudo ufw allow 9090 If you would like to redirect all request on port 80 to 9090: sudo iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 9090


0

The application (WordPress) is generating the redirect - you should check the WordPress configuration and set it's base URI to reflect the new port you're accessing it on. See also the WordPress docs on changing the setting: http://codex.wordpress.org/Changing_The_Site_URL When Apache gets a request that doesn't match a <VirtualHost> definition it ...


2

You can use one of those three commands. Read the man or info pages for more information. uptime - Tell how long the system has been running. w - Show who is logged on and what they are doing. top - display Linux processes All three commands show you the load average information. top is probably the best choice as it displays information ...


1

Well, I've performed a thorough diff and found these settings, which make Exim receive email: /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs: comment out or remove this block (lines 64-66): .ifdef MAIN_LOCAL_INTERFACES local_interfaces = MAIN_LOCAL_INTERFACES .endif and place this instead (note the dot between the address and the port, this is ...


1

I found the solution thanks to this wiki: http://docs.slackware.com/howtos:hardware:syncing_hardware_clock_and_system_local_time Sopping NTP, update time from their servers, restart ntp and synchronize HW clock root@ns226161:~# /etc/init.d/ntp stop Stopping NTP server: ntpd. root@ns226161:~# ntpdate pool.ntp.org 13 May 14:06:12 ntpdate[16434]: step time ...


0

Sometimes ago I wrote a low level/dirty automation Fabric script (fabfile) to meet similar requirements, you can check it at: https://gist.github.com/lgaggini/2be3c5bb47b8ce9267bd


0

This'll not work because this is just an IP alias (the interface does not really exist). Anyway, you would need a specific route for 1.1.1.60 on your router, but I am assuming this IS the same machine. I'd personally go for a virtual interface like this: ip tuntap add dev eth7 mode tap ifconfig eth7 1.1.1.60 netmask 255.255.255.255 ifconfig up And ...


1

Your permissions on / are too open. I wonder how you ended up with that. That should be 0755. So you'll need to change that. The rest looks OK.


0

To run a second and etc instances, few items must to be changed: Change your sqlite file destination (one server per sqlite file) Change your port (one instance per port) Change your Server Name Change log file (You want separate logs don't you?) Change your pid file name murmurd -ini [$ini_file]&


0

Even if it seems to non-match, aborting the resync should not alter your data that fast. If you are running a large-array (like 1TB disks), the resync normally takes hours, so aborting it should keep your data. In my case it worked, even if it seems to be mismatching. Whenever you get your raid running, keep in mind to backup your data afterwards and ...


2

TZ=CET at the top of your crontab will set the time zone for jobs run from cron but won't affect cron's interpretation of times for when jobs start. If you want to set the time zone for cron as a whole then adding export TZ=CET to /etc/sysconfig/crond (or wherever the equivalent config is for your distribution) should change cron's idea of time. You ...


0

Can't be done over SSH. From experience, has to be done from a terminal (i.e. Alt+F1) as suid root. Discussed on askubuntu forums


0

Well after further investigation I found a flaw in my configuration that was causing the error: the Location entry in /etc/apache2/sites-enabled/git.conf had to be : <Location /> instead of: <Location /opt/gitlab/embedded/service/gitlab-rails/public> However, can anyone confirm this may not cause any security issue?


1

There is a security flaw because you are using a privileged account (sudo account) to perform a task a normal user (without being privileged) would normally perform. I would add a simple system account and use it to authenticate against roundcube to reach my emails. Furthermore, I don't believe you needa system account for this. There must be another way ...


2

It's fine to use PAM for authentication, but separate the user accounts for the administrative access and applications on user-level like mail. You have to either separate the user database and authentication of dovecot and postfix from PAM, the system one's, or you have to create another system account you use for administration via SSH and not for mail. ...


1

This is a problem you'll see more frequently with Docker images because the repositories you're accessing change frequently but the base image (and it's cached metadata) doesn't. Try running apt-get clean && apt-get update before you install packages.


0

Have you considered defering the decision to the end user at runtime, through a configuration parameter ? This is a standard practice for this problem. The reason is there is no systematic foolproof way to figure "the" local IP address (a host may be multihomed, may be running a v4/v6 dual stack, a VPN, etc..). Runtime configuration will make the sysadmin's ...


1

I don't know if it will work for every possible upgrade scenario, but I just tested this, and the upgrade worked without any replication problems: # /etc/mysql/conf.d/binlog_ignoredb_mysql.cnf.disabled # Rename this to end in .cnf prior to performing `apt-get upgrade`. # Otherwise, its attempts to `ALTER TABLE users` will cause replication errors. # After ...


3

This one is a real pain to troubleshoot if you aren't familiar with the new max-recursion-queries option or why it was added. CVE-2014-8500 was identified in late 2014 as impacting multiple nameserver products, including BIND. The exploit allows a malicious nameservers to craft a chain of referrals that will be followed infinitely, eventually leading to ...


0

Hard drive is having errors as suggested in another answer, get it replaced. If you need the data it may be worthwhile to attempt a backup. Take the disk out and attached it to a different system. Then use (a variation of) dd to make a copy. You could use ddrescue: https://www.gnu.org/software/ddrescue/ddrescue.html ...


0

Your hard drive is reporting unrecovered read errors. There is nothing you can do except to replace the drive (it's eligible for warranty replacement if it is still in warranty).


1

There is something wrong with your hardware - this can be the hard drive itself, the motherboard, or maybe the cable connection is noisy. Use badblocks to check the drive. But I suggest to back-up all the data beforehand, as comprehensive tests can kill a dying drive.


0

chrome is known for ignoring /etc/hosts file. There's an answer on superuser that tells you how to fix that: - Go to chrome://settings - Click on "Show advanced settings..." - Unmark the Predict network actions to improve page load performance box. - Check if the DNS prefetching is really disabled by going to chrome://dns. You should see there ...


1

somewhere in the slapd_start function of your /etc/init.d/slapd script, there is a line similar to: rm /var/lib/ldap/alock now, for whatever reasons, this file is non-existant, and the script stops because it fails to remove the non-existant file (which is obviously hard to remove, as it is not there anymore). you can simply fix this by telling rm to ...


1

Are you trying to access this from the machine that has these entries in /etc/hosts? You might also want to check /etc/nsswitch.conf to check that 'hosts' comes before 'dns' etc. You can use getent hosts subdomain.sitename.domain.com to see what would be returned to an application when it does a lookup (do this from your [Linux] client)


1

Could not get the answer above to work. Instead, I use this method (for Dockerfiles): # Configure timezone and locale echo "Europe/Oslo" > /etc/timezone && \ dpkg-reconfigure -f noninteractive tzdata && \ sed -i -e 's/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/' /etc/locale.gen && \ sed -i -e 's/# nb_NO.UTF-8 ...


0

You have RELATED,ESTABLISHED rules only for interfaces eth0 and eth1, therefore the answer of the web server to the connection request of cURL will be dropped by iptables because it is not accepted by any rule. Changing the RELATED,ESTABLISHED rule so it applies to all interfaces should solve the problem. Do not use rules accepting traffic from specific ...


0

It turns out namespacing was the problem. In order for this to work I need the MODULE 'apt' to be called. By specifying include apt or class { 'apt': } in the class profiles::apt, it tries to include or call itself. Changing to class { '::apt': } (absolute name) fixes the problem.


0

Ok, I fixed editing the JAVA_HOME within the /etc/default/tomcat7 as this post suggests.


2

In mail architecture like above, you need synchronize two configuration The format* and location of where postfix stores the incoming email The format* and location of where dovecot retrieves the email When they are out of sync, dovecot won't find email that previously stored by postfix. The related dovecot parameter is mail_location = ...


1

it would be nice to know what commands broke your replication, but I suppose, the mysql_upgrade script would be that rogue. If yes, you can rebuild the mysql package, adding to the post install script a --skip-write-binlog (this is not needed after 5.6.7) But normally I never would just apt-get upgrade a server which is in production, stop the slave, ...


0

run ecryptfs-setup-swap or manually: This Configuration uses randomly generated keys at boot and will not support Hibernation to hard disk! You Should Disable Hibernation through your respectie DE Power Management Utility and set it to Shutdown on Critical to avoid Data Loss! Switch to an admin/root account su root or sudo for each command Disable Swap ...


0

You can start finding the executable using ls -l /proc/<PID>/exe Then you can find who created it (the parent PID) with ps -p <PID> -o ppid= And search until you find the starting point. You can also check the common automatic execution points, like init scripts, global and user specific cron jobs, at scripts, rc.local files UPDATE: I ...


-2

for those of you using the new Debian 8 "Jessie" I found this solution worked perfectly. . . . . apt-get -y --force-yes install lib32z1 lib32ncurses5 resulted in the following script with success: Reading package lists... Done Building dependency tree Reading state information... Done The following extra packages will be installed: lib32tinfo5 ...



Top 50 recent answers are included