Tag Info

New answers tagged

2

Add default ACLs, like this: default:user::rwx default:group::rwx default:other::--- Default ACLs are applied on new files and directories under the affected directory. You can use the following command to accomplish this: setfacl -dm u::rwx,g::rwx,m::rwx,o::0 /home/myuser


0

Failed ipv6 lookups don't indicate a misconfiguration on the server, but a misconfiguration on the client. Your server, running only with an ipv4 address, will still get DNS requests (AAAA) for ipv6 resolutions. This started happening when the various OS's started enabling ipv6 by default several years back.


0

This is the procedure to update named options after Ubuntus switch to systemd: cp /lib/systemd/system/bind9.service /etc/systemd/system/bind9.service edit /etc/systemd/system/bind9.service change ExecStart=/usr/sbin/named -f -u bind into ExecStart=/usr/sbin/named -4 -f -u bind then systemctl daemon-reload service bind9 restart double check ...


0

Did you have a look at http redirection? Sound like you want to view server B via server A website, correct? Take a look here:http://httpd.apache.org/docs/2.4/rewrite/remapping.html


0

These requests usually don't slow down your site, unless you are being attacked/DDoS. You may want to consider Fail2ban. Fail2ban scans log files (e.g. /var/log/apache/error_log) and bans IPs that show the malicious signs -- too many password failures, seeking for exploits, etc. Generally Fail2Ban is then used to update firewall rules to reject the IP ...


0

Unison allows 2 servers only. You can try Lsyncd + Csync2, Lsyncd + Rsync or Syncthing (btSync). Lsyncd watches a local directory trees event monitor interface. It aggregates and combines events for a few seconds and then spawns one (or more) process(es) to synchronize the changes. Source: https://code.google.com/p/lsyncd/ I'd suggest ...


0

What cms are you using? You can try Memcache or Redis for storing session, and memcached/redis instante can be installed on you DB vm


0

XubuntuY part of the version e.g. 1ubuntu1 That was also asked at: http://askubuntu.com/questions/620533/how-does-ubuntu-name-packages X is the Debian package version. Most Ubuntu packages are based on Debian packages, which is an "upstream" distro. If 0, this means that there is no Debian package: it only exists in Ubuntu. X resets when the real ...


-1

This problem could be caused by many factors including a situation where the VM box hangs waiting for response from the user. However a common problem has been the mismatch between the private key and the public keys. To rectify this problem, you need to provide a private key file on your host machine that matches the public key file on the VM box. I posted ...


1

Voltages are rarely reported by drivers correctly, because a scaling factor needs to be applied to the limited range of the internal sensors. See this page for a description and tutorial of how to fix the scaling factors for your particular system setup: http://www.lm-sensors.org/wiki/VoltageLabelsAndScaling Once you know which sensors are reporting which ...


0

The repeated occurrence of "cron" indicates that this session was started by a cron job. It is not indicative of a compromise.


1

Take a look at this python script, this should do the job: https://github.com/quentinsf/IMAPdedup


0

By default, Ubuntu ships OpenVPN with a legacy startup script. This makes Upstart unable to restart service when it crashes. Legacy scripts also make use of pid files, which are not necessary with native Upstart jobs. So having a native job looks like a solution to your problem. I've written Upstart job definition for OpenVPN myself and use it for 2 years ...


1

I'd suggest next time you start it, start an strace running so that after it dies you can investigate what calls were happening last before it failed. You can use the following command after you start it to make sure you attach to the master process and all its children and any new ones that get forked. pidlist=''; for pid in `ps ax | grep httpd | awk ...


0

I tried several times to install Ubuntu 14.04 LTS and 15.04 from a bootable USB onto a DL380 G7 without CD/DVD-drive. The installation looked fine, but every attempt to boot resulted in the dreaded ""Attempting to boot from hard drive C:" followed by a hanging system. I finally succeeded by defining the ISO as a virtual CD in the iLO and temporarily ...


1

Your question is based on a common misunderstanding that running out of RAM is a bad thing. Running out of RAM is a perfectly normal thing that doesn't indicate any problem. RAM cannot be saved for later, so there is no advantage whatsoever to not using it. Modern operating systems try to use as much RAM as they possibly can, and nothing terrible happens if ...


1

You can copy /etc/init.d/unicorn into /etc/init.d/unicorn_app2. Edit unicorn_app2 file: Change /etc/default/unicorn into /etc/default/unicorn_app2 Change /run/unicorn.pid into /run/unicorn_app2.pid Copy /etc/default/unicorn into /etc/default/unicorn_app2 Edit /etc/default/unicorn_app2 to setup your second app Run new server service unicorn_app2 start, ...


0

The key insight here is that your md device is getting renamed on reboot. It was created as /dev/md0 but after a reboot it showed up as /dev/md127 (this was previously mentioned in a comment I'm bubbling it up as an answer for easier reading.) I just ran into exactly the same thing (created md0, rebooted, showed up as md127). Rebooted again, /dev/md127 ...


0

Comment out or delete the respawn lines


1

OpenSSH links dynamically to zlib. You can see this by running ldd /usr/bin/ssh and looking for the libz.so.1 reference. The fact that OpenSSL does not show zlib does not mean that OpenSSH cannot use zlib.


0

The error is telling you that DocumentRoot must be a directory. DocumentRoot in your config is "/var/www/html/bugzilla". Does that path exist? Is it a file or a directory? If you have installed Bugzilla directly in /var/www/html, then /var/www/html/bugzilla will not exist. If this is a new installation, you would do well to install 5.0 following the ...


0

You need to provide a SSLCertificateFile configuration line in addition to the SSLCertificateKeyFile configuration file. You have configured one of two options for CA certificates. You may not need either. This may be configured with the file that should be the SSLCertificateFile GoDaddy provides documentation on installing your certificates. According ...


0

Alright, so here's the solution I ended up going with, which works nicely. For the sake of a thorough answer, I will recap some quick details. Servers: ServerA - ubuntu 12.04 - internal static ip of 192.168.1.230 ServerB - ubuntu 14.04 - internal static ip of 192.168.1.235 I have a website on each server, one on 12.04 (with an older php install) that i ...


0

Take a look at the example how to setup the Squid for transparent web filtering on an OS with 2 NICs - http://docs.diladele.com/tutorials/transparently_filtering_https_centos/index.html


4

The ethtool does not work as a bandwidth limiter for your NICs, that parameter just sets the NIC speed that will be advertised as capable of, and you cant set an arbitrary value on that parameter and expect it to work. It expects one (or a combination of) of a very specific list of possible values, which are correlated to the duplex mode setting. From the ...


0

You can not update this setting at runtime, you need to add it to your my.cnf and restart your server. But also as @erny said, there are some issues that can come up if you are setting the value higher than the OS settings.


-1

If you have Docker installed and your user is a member of the docker group you can easily get yourself out of this pickle (and some others) without rebooting or what-have-you: $ docker run -it --rm -v '/etc/:/root/host.etc/' debian bash apt-get update && apt-get install [vim|nano|whatever] cd ~/host.etc/ Repair the the problem files exit


0

It's important that you elaborate on HOW/WHERE you are adding crons. But I think the following addresses any situation. Yes, cron needs to be made aware that you made changes, but no, you don't necessarily need to explicitly do anything to update it. I'm paraphrasing the cron manual here for the short version: As mentioned, crontab -e, the preferred ...


0

I have been a Hetzner customer for close to three years. In most areas I have been satisfied with the service I have been getting. I have tried a few other providers, but so far I haven't found another where I felt I was getting better service. I am not relying on Hetzner for system administration. I do remote administration of the servers myself. So I am ...


1

Although there are many ways to address this, I found an old question on ServerFault which suggests a simple iptables rule iptables -I INPUT -p tcp --dport 80 \ -m connlimit --connlimit-above 20 --connlimit-mask 40 -j DROP


1

A lot depends on your actual usage, application stack and architecture, which makes answering your question almost as much a matter of opinion as technical fact. Geographical distance matters in latency, so moving your server closer to your principal users makes some sense, although in many use-cases employing a CDN might effectively achieve the same ...


0

This is evergreen problem and it was discussed many times. I wrote short answer here: http://superuser.com/questions/937003/setting-default-group-permissions-via-sftp/937735#937735 Basically you answered yourself using your last comment. SFTP preserves original permissions and truncates umask from it.


0

Definitely don't give everybody a single login. You can go through the process of setting up all the users in a single group, making sure the file's are written with group permissions. These days it's often a good idea to use something like github for storing the files (and tracking revisions/changes) and then pulling from github using a webhook.


0

Based on the question it seems like the simplest solution would be either Give users their own logins on the system Tie into existing organizational infrastructure and use that for authentication. LDAP and NIS are both common solutions for allowing login/authentication across a domain/network for ensuring that permissions and ownership of files works ...


1

1.) Launch Instance 2.) Update security-groups to allow ssh connection on port 22 from my ip address 3.) Create new KeyPair - save .pem file You have these steps in the wrong order. The keypair needs to be specified when creating the instance in order for the public key to be properly deployed. You presumably already have a keypair created in AWS ...


2

The simple answer to how you go about this is: you don't. If any problem you can forseeably cause in the staging environment can also have an impact on the production environment, it's not really a staging environment. You're doing your testing in production. If you fill the disk, you've impacted production. If you peg the CPU, you've impacted production. ...


0

Have a look at backuppc - Its a open source backup solution which also supports transport via rsync+ssh or samba. It takes complete care about full,incremental,differential backups, backup time management and has a nice web management interface. If you want a more advanced solution with integrated tape drive support have a look at bacula, bareos or amanda


0

It would be easiest for you to initiate the backup from the Windows host, rather than on the Ubuntu host. The easiest way to pull this off (and most similar to rsync without using some awful Windows ports) would be to use the Windows Backup Agent from RSync.net. You could then back up to the Ubuntu host with SFTP (provided by OpenSSH).


1

You are proceeding in the wrong order. Please follow these steps: first, BACKUP YOUR DATA (and take a snapshot) use GParted to resize /dev/vda2 first and /dev/vda5 after reboot your virtual machine use pvresize /dev/vda5 and lvresize to resize your physical and logical volumes, respectively. EDIT: how to resize partition using fdisk To resize your ...


0

First you need to extend the LVM. (well actually... first you need to backup your data :P) Please refer to the second answer by @cao-minh-tu here. https://askubuntu.com/questions/196125/how-can-i-resize-an-lvm-partition-i-e-physical-volume


0

Ran in to the same issue... Needed to add an entry into /etc/hosts. So the first entry needs to be the IP, the 2nd must be the fully qualified domain name for the domain you are joining, and the rest can be in any order.


0

You can use apache2ctl fullstatus to obtain a complete list of remote client and the URL they are viewing. EDIT: to be clear, I was talking about Apache's mod_status. After loading it, you can issue (in a terminal) the above command to have a detailed dump of Apache status. If you detect a pattern (eg: too many connection opened from a single remote IP), ...


1

you need root privilege so you have to add sudo : cd /var sudo mkdir repo && cd repo sudo mkdir site.git && cd site.git sudo git init --bare


1

That tutorial is assuming you have superuser rights, so just use sudo su before you start running commands, or insert sudo before all the commands that require elevation.


0

This one worked for me: Get a copy of your data on the old server by running the following command: ldapsearch -z max -LLL -Wx -D "cn=admin,dc=your,dc=domain" -b "dc=your,dc=base" > save.ldif Move the file to the new server and import it by running: ldapmodify -c -Wx -D "cn=admin,dc=your,dc=domain" -a -f save.ldif


0

I tried to startup mysql in "Safe Mode" to create the sock file and pid file, but it fails for some error "bind", I changed the IP address in "bind ip" parameter in my.cnf to localhost started mysql in safe mode. restarted mysql in normal mode, and everything went fine.


0

Found the answer: if the rescue mode mounted your filesystem for you then just edit the sshd_config and reboot, if it did not mount it for you then best guess not knowing your server specifics would be: mkdir /mnt/sos mount /dev/sda1 /mnt/sos nano /mnt/sos/etc/ssh/sshd_config that assumes your sda1 is your / if you made a separate partition for /boot ...


1

After lots and lots of searching, I finally found a solution by myself in the deep internet. In case someone has the same problem in the future, I'm gonna post the answer here. Actually, it's pretty simple. On the new server, you need to install LDAP and GOsa normally. To transfer the LDAP-database, there only two commands you need to execute. In many ...


0

My 5 kopek regarding this nginx -V 2>&1 | sed 's/ --/\n--/g' | grep path .. will get you all other pathes, that you should override in custom provided config or with "-g" option.


0

On the client machine, edit /etc/ssh/ssh_config and set the following values: Host * ServerAliveInterval 60 This will send a keepalive message to the server every 60 seconds. Adjust this value lower if necessary. If you don't want to edit the config, you can adjust the ServerAliveInterval at the time of the SSH connection by passing parameters like so: ...



Top 50 recent answers are included