Tag Info

Hot answers tagged

20

I use NFS for my home directories in our production environment. There are a couple of tricks. Don't NFS mount to /home - that way you can have a local user that allows you in in the event that the NFS server goes down. We mount to /mnt/nfs/home Use soft mounts and a very short timeout - this will prevent processes from blocking forever. Use the ...


18

SSH can't do that because SSH protocol does not include the requested hostname in the call. (HTTP is one of the few protocols that does include the requested hostname, which is how it can be used for virtual hosting.) There are a couple of other things you might try instead: You could create separate users for each subdomain, but with the same UID as the ...


13

FreeIPA is probably what you're looking for. It's to Linux what Active Directory is to Windows. (It can also talk to AD if you have a heterogeneous environment, but shouldn't be used to manage Windows machines directly. Use AD for that.) Red Hat's documentation (they call it Identity Management) is very thorough and easy to follow, and should be mostly ...


11

For individual folders (My Docyuments, My Pictures, etc., the "Special Folders") I do the registry/GPO thing you alluded to. However, if I want to move the entire folder structure I cheat. Move the folder to a new location, and then create a junction pointing the old folder to the new folder. So all your programs will still think the folder is ...


9

According to Chapter 3 of the FHS (Filesystem Hierarchy Standard) 2.3, data for services provided by a server should go under /srv, but leaves the organization under it pretty much in charge of each specific system. I would recommend /srv/www/<domain> or if the server is providing multiple services per domain something like ...


9

This is NOT possible because SSH protocol does not send the requested hostname anywhere in the packets. My idea on implementing this would be to use something like OpenVZ to isolate the subdomains and have a separate IP for each subdomain.


8

I've run something like this in the past. LDAP is your best bet for centralized accounts. This is reasonably standard, and should be easy to set up. The client is merely a matter of installing a few packages (ldap-utils, libnss-ldap, and libpam-ldap), and editing /etc/pam.d/common-(everything). You'll need to add a line like <type of file goes here> ...


8

I've spent a long time researching this and finally managed to do it on my own machine. There are two scenarios here: a new install, and a machine that is already installed/used. For a new install, you can (apparently) modify the autounattend.xml file (unresearched link here, no guarantees, I haven't tried) For a machine that is already installed, there ...


7

Red Hat and Debian use /var/www. If I was accessing an unfamiliar server, that is the first place I would look for a web server's document root.


7

Assuming all the users are local users (that is, there's no network directory service like LDAP, Active Directory, NIS, etc), then local users are probably all enumerated in /etc/passwd, which is a colon delimited file with the following fields: username:password:uid:gid:name:home directory:shell You can get just the usernames and home directories, if ...


6

Make sure Apache has +x (execute) permissions on all parent directories: /, /home, /home/pedro and so on. If standard Unix permissions are used (i.e. no ACLs), this command will help: namei -l /home/pedro/dev/k2tv/gerenciador_eventos


6

Just create a home directory for them and grant them permissions. mkdir /home/$user and then chown $user:$user /home/$user. Take note to replace the group in the chown command with something else if required.


5

http://www.howtoforge.com recently posted an article on using GlusterFS as a NFS replacement/alternative, you may want to check it out. http://www.howtoforge.com/creating-an-nfs-like-standalone-storage-server-with-glusterfs-on-debian-lenny Here is a short description of why its a good 'feasible' alternative to NFS, from the GlusterFS project page ...


5

Assuming you're running this on Windows Server 2003 or newer you'll have both the TAKEOWN and ICACLS commands. I'm also assuming the that top level folder permission is set sanely (i.e. "Authenticated Users - List Folder Contents - This folder only", proper "Administrator" permissions if you like them being able to get into user folders, etc). @echo off FOR ...


5

There are two common ways of dealing with a mixture of local and centralized accounts (be it LDAP or NIS or whatever). Your third update covers one of them. Local accounts use a non-/home base directory for homes LDAP/central use a non-/home base directory for homes I commonly use option #1 and create /local then setup my local accounts to have home ...


5

This is normal behaviour. Most of the FTP Server lock the user to their respective home directory to prevent access to other filesystem files. This is called "chroot", because you change the root directory of the this process. In vsftp for example you can disable it by editing the configuration file /etc/vsftpd/vsftpd.conf and change this value to no: ...


5

I would suggest a good local consultant to assess the particulars of your situation... Really. There may be other business requirements or nuances that people on this forum may not recognize or be invested-enough to consider. A dedicated resource is your best bet... Otherwise, we're just throwing product recommendations at you for something that's easily ...


4

Be careful with the soft mounts! Soft mounting an NFS filesystem means IO will fail after a timeout occurs. Be very sure that is what you want on users' home directories! My guess is you don't. Using a hard mount on home directories in combination with the intr option feels a lot safer here. Hard will not timeout: IO operations will be retried indefinitely. ...


4

It seems from what I've read online that CentOS 6 doesn't support modifying your partition layout when installing in Text-Mode. It seems that this option is only available if you're performing a graphical install. This is covered in the release notes. CentOS6 Release Notes


4

This is a cop-out, but make the students do it: Make your first-day-getting-familiar-with-the-lab exercise something that gets this kind of housekeeping set up, explaining what the .htaccess file is, and linking the students to the .htaccess tutorial. Then as one of the exercises have them restrict web access on some directory to themselves, the TAs and ...


4

There was an old csccmd.exe utility in Windows XP that had functionality to do what you're looking for but it doesn't work with the new Offline Files (CSC) in Windows Vista and 7. In Vista and Windows 7 Offline Files has a WMI API that can be used to manipulate the configuration in an automated fashion. I haven't used it but I strongly suspect this API will ...


4

You can and should restore it from backup.


3

Apparently you can use LDAP for centralized user accounts. I'm told it's not easy to set up. We never did because we didn't have very many users. However, the centralized directories were implemented. This was done by doing an NFS mount of the home directory of the central server on the other server. It works very well.


3

The one thing to note is that when the NFS server is out - your mounts will freeze - doing a soft mount will not block so the "freeze" itself can be avoided, however that will not fix the problem of home directories as without a home directory, the user is screwed anyway. Even when the NFS server recovers, unless you do something about it, the freeze ...


3

Some general advice that will apply no matter which network filesystem you adopt: many programs cache data in the user's home directory, which usually does more harm than good when the home directory is accessed over a network. These days, you can tell many programs to store their caches elsewhere (e.g., on a local disk) by setting the XDG_CACHE_HOME ...


3

I lot of places I have worked use NFS mounted home directories. There usually isn't a huge difference in performance (and kiosk users are probably a bit less demanding than developers who know how to get hold of their local IT guy). One problem I have seen is what happens when I'm logged into a Gnome desktop and the NFS server goes away for whatever reasons. ...


3

You probably want to add the _netdev option to delay mounting until the network has been enabled: sshfs#root@10.0.0.200:/home/ /home/ fuse transform_symlinks,allow_other,_netdev,nonempty,hard_remove 0 0 You can also put your script in /etc/network/if-up.d/ or the mount command in /etc/rc.local.


3

It's selinux for 99 % ;-) # getenforce Enforcing Turn it off by: # setenforce 0 # vim /etc/sysconfig/selinux And set it to "disabled" in that file or "permissive" if you plan to turn it on sometime in future or you want to track selinux errors. For FTP I highly recommend NOT to turn it off. Follow the RHEL 6 guides how to set it up properly for a FTP ...


3

Unlike Linux, there is no standard pam module like pam_mkhomedir to achieve this task on Solaris. While compiling this pam module would likely just work, there are alternatives like creating the home directory if missing in /etc/profile or setting up an executable auto_home map. Using /etc/profile to create the user's home directory would require using rbac ...


3

No need to delete the account, better modify it to keep UID/GID of the files in sync with existing files. Stop the database server if it is running, that is the reason that it appears to be "logged in". Modify the home directory of the user using usermod(8), look in the manpage for the -d switch. Start the server.



Only top voted, non community-wiki answers of a minimum length are eligible