New answers tagged

0

NOTE: Alligator (<>) braces are to be removed from values, and are only there to indicate generic values. Create a User on the DC to use for LDAP binding. Here is an example for my context: I don't think I changed anything really, but I did, under the Account tab, set it so that the User cannot change password and the Password never expires. Note I ...


0

You probably want to look at this: http://www.rsyslog.com/doc/droppriv.html Even though rsyslog starts as root, it's quite possible it changes it's user inside /etc/rsyslog.conf. You may want to change rsyslog's privileges inside your rsyslog configuration.


0

Given the lack of information in the question, there is some guessing going on here. Assuming Apache 2.4 install from Ubuntu repository where standard MPM's are included with the install, it would appear that you just need to "switch" from prefork to worker. NOTE: You can ONLY start Apache with a single MPM selected, i.e. you MUST "dismod" the current MPM ...


0

This issue might be related to one or more of the following: 1) Let's Encrypt certificates are generated per domain (so separate for www and root). You can create a certificate for several domains (SAN), but if this is not required, I suggest you create a separate certificate for each. You might have created the certificate for www and not for root. This is ...


1

I saw this was answered already, but if you run Wireshark on a machine using TCP offloading, in the packet details it'll say that the checksum is incorrect for everything exiting the machine.


2

NIC properties and settings are typically displayed with the ethtool command. In this case the --show-offload option may provide insightful details. But please bear in mind that you're using a virtual server with (para-) virtualised hardware and the features a virtual network adapter shows not necessarily correspond to what is done by the hypervisor which ...


1

I don't know how to achieve this. But I've tested a workaround, which maybe useful to your case: To "log" who has deleted a file, you could modify the path of the recycle bin to a [.recycle/UserWhoDeletedTheFile] - replace the following in your config: recycle:repository = .recycle with the following: recycle:repository = .recycle/%u The above will ...


0

postfix/smtp[27379]: cannot load Certificate Authority data: disabling TLS support postfix/smtp[27379]: warning: TLS library problem: error:02001002:system library:fopen:No such file or directory:bss_file.c:169:fopen('/etc/postfix/cacert.pem','r'): Install certificates of Certification Authorities - they certify other certificates => install package ...


1

sudo mysql && sudo mysql -u root it's redundant command. Not assks for password because you have a file named /root/.my.cnf with with client name and password sudo mysql -u root -pask for passowrd because you put -p in your coammand (see man mysql) · --password[=password], -p[password] The password to use when connecting to the ...


0

It is in the 15.10 universe repository.


0

When you configure your eth0 interface in /etc/network/interfaces you need to use ifup and ifdown to bring it up and down. These commands are used to configure (or, respectively, deconfigure) network interfaces based on interface definitions in the file /etc/network/interfaces. Bring eth0 interface up: ifup eth0 Bring eth0 interface down: ifdown eth0


0

In my desperation I removed the first few Lines wich referenced only dc=com. Turns out, that this Lines not really necessary and the Import is now working fine. I've no Idea where this Lines coming from.


0

This is not exactly an answer but might be used to help. A colleague showed me this the other day. You can find out where a package is from using this command: apt-cache policy <package-name> For example: apt-cache policy xterm xterm: Installed: 271-1ubuntu2.1 Candidate: 271-1ubuntu2.1 Version table: *** 271-1ubuntu2.1 0 ...


1

Hetzner have stopped assigning public IPv4 addresses to virtual servers. As far as I can tell this change happened when they changed the product name from VQ to CX. The usage of NAT is not mentioned in the product description though. Virtual servers ordered in 2012 and 2013 still have their public IPv4 address today. But virtual servers ordered in 2016 only ...


1

Your first iptables rule is correct and sufficient to do the job. I'd consider explicitly specifying an incoming interface such as: iptables -t nat -A PREROUTING -i ${wan_if} -d ${jumper_ip} -p tcp --dport 22 -j DNAT --to-destination ${invisibleserver_ip} But this is not required. Your POSTROUTING rule is a bit flawed. I don't think it is going to break ...


2

I just encountered the same phenomenon and fixed it. It is caused by the lack of required modules of Perl in the system. Try this; By using cpan or cpanm (Perl module manager), install Date::Calc like, cpanm Date::Calc Retry installation by ./install.pl of PSAD source tree.


0

Once Docker 1.12 is released and the Linux Docker client is separated, you should be able to run the docker client in Windows 10 bash. This may not sound like much given you have a Docker Windows client but it's useful if you have Linux toolchains that include docker for it's client-side functionality.


1

frontend username is Admin (capital A), pass is zabbix


0

i had the same problem. you can see the logs of the script with: cat /var/log/awslogs-agent-setup.log there were some problems with the locals and a export LC_ALL=C solved it for me.


1

It appears this is a known bug between the Ubuntu smbd version 4.3.8 and Mac OS X version 10.11. https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1572301 There's no easy resolution yet but should be fixed in due course.


0

"Microsoft ODBC Driver 13 for SQL Server" does not work with isql. You must use sqlcmd. Connecting with sqlcmd and Use the sqlcmd Utility are far better than the sqlcmd man page. To use a DSN: #sqlcmd -D -S <DSN_Name> -U <User_Name> sqlcmd -D -S MSSQL -U sa The DSN: [MSSQL] Driver=/opt/microsoft/msodbcsql/lib64/libmsodbcsql-13.0.so.0.0 ...


0

There's no such development mode only all in one pack for anything. Instead, you just run different environments for different purposses: Dev mode: you test, break and fix stuff. Production: everything has to be working. Then, you can do as many stages as you want in between but, as I said, it's not about the software, it's about what you do with it.


1

I think you are using a multi backed cinder that can create volumes by using the netapp and lvm drivers - sometimes volumes can become stuck in any type of status 'create, extend, snapshot, delete etc. there is already a cli and horizon tool for resetting the status of stuck volumes, since you can't delete a volume that is stuck at a different status: ...


-1

If your firewall allows the local network to access your webserver port (80 most of the time) then they can access by IP address indeed. And if you want them to be able to access it via a domain name, you can have them use their hosts file to make a DNS record matching this domain name to your IP address. Depending on the networking setup, you may be ...


-1

If people connect to your IP on a web browser, they will be able to see it.


1

With Ubuntu 15.10 (using systemd), I used systemctl: sudo systemctl disable rabbitmq-server


0

Some vendors say that several correctable errors during a certain period of time is of no harm. For example, Oracle says replace a DIMM when one of the following events takes place: More than 24 Correctable Errors (CEs) originate in 24 hours from a single DIMM and no other DIMM is showing further CEs. The DIMM fails memory testing under BIOS due to ...


1

Could you create a new service for your custom install, then make it autostart? [Unit] Description=Jonathan Vanasco nginx [Service] ExecStart=STARTUP COMMAND YOU WANT FOR CUSTOM [Install] WantedBy=multi-user.target Then check it starts: systemctl start NAMEOFCUSTOM.service Then set to auto-start on boot: systemctl enable NAMEOFCUSTOM.service


1

I'm not aware of a solution which does exactly what you ask for but for instance Unbound has an option to prefetch data for cache entries that are about to expire. From unbound.conf(5): prefetch: <yes or no> If yes, message cache elements are prefetched before they expire to keep the cache up to date. Default is no. Turning ...


0

That htaccess file seems to be trying to find any URLs with index.php, and rewrites them to have index.php in (remember you rewrite FROM what the person sees TO how the application needs it (i.e. has index.php in). I would try it without the first condition. The Hosting support is a red herring, if the server throws a 500 (i.e. too many redirects caused ...


1

Are you saying that /usr/bin/nodejs --version and /usr/bin/node are showing different versions? My first thought is to check with which APP_NAME to check that no other executable is in the path, maybe some standalone version, maybe from outside the package manager, is running instead.


-1


0

This may not be a site issue. This can happen to due problems between your load generator and the target. Can you tell us more about your test infrastructure? Where are the load generators located relative to the application/server under test? Do you need to traverse proxies for your communication? How may hops are you traversing which can be limiting ...


0

Before you ran mysql_secure_installation you changed to a directory that no longer exists. To resolve the problem, change to a directory that exists, and run it again.


0

As mentioned by @brent the solution was looking into the logs at /var/log/upstart/docker.log, which showed that the --mtu parameter was empty. In my case it was dependent on a environment variable that wasn't set.


1

You need to edit init script for nrpe service. In Ubuntu it's usually /lib/systemd/system/nrpe.service or /usr/lib/systemd/system/nrpe.service. Sometimes init script also lays in /etc/init.d/ folder Change user and group in init script and then reload systemctl configuration. After that you'll can start your service from another user


1

We did the same migration recently. It is definitely possible. Without much preparation it took us about 3 hours for a small server with about 30 users. If your new servers performance is on par with the new server, there should be no problem with your setup. This manual was the most helpful. Ensure that your backup is up to date and complete. Pay very ...


0

Usually, Docker containers do not restart out of the blue. It is a bit strange that your log files do not show anything suggesting a restart of the container(s). How many RAM do you have available on your host machine when all containers run (free -m)? One option could be to log/monitor the output of docker events (docs) for a while and see if some weird ...


0

Problem was caused by custom kernel from server provider (OVH) without vxlan support. Switched to generic kernel and vxlan support is working.


0

As Jason already mentioned, I think it is indeed cleaner to separate your MTA and backup container. I ran into this problem some time ago (although I tried to send mail from PHP instead of bash), and I discovered the exim-sender container, which is basically a simple container that acts as an outgoing SMTP server. Why not link your backup container to such ...


2

You can change the "username" (actually GECOS/comment) field with the usermod -c command


2

Rather than editing the password file directly it is recommended to use vipw which will set the appropriate locks to prevent file corruption. But to change the display name (and other GECOS info) both a user and root can also use the chfn command. Other than that, go ahead!


0

One noticeable difference is paravirtual doesn't support GPU Instances. I'd have created it as hvm had I known that I would want to relaunch it as a GPU instance. edit: Hmm, actually, it seems like we can change from paravirtual to hvm while create an AMI.


1

To allow incoming traffic only on one port, you should set your default policy for the iptables chain INPUT to REJECT or DROP. Before that, you should at least allow tcp traffic on your ssh port (probably 22) so you don't lock yourself out. iptables -A INPUT -p tcp --dport 22 -J ACCEPT iptables -P INPUT DROP If you want to limit the new connections to ...


0

The correct way to do this is as you've been doing, or perhaps better is to whitelist only the arguements causing you problems: SecRuleUpdateTargetById 981231 "!ARGS:core_theme_setting_title_167" As you've seen this can take some time to get all the whitelistings you need. You should of course run in DetectionOnly mode and fine tune the rules until you ...


0

Actually looks like I solved this problem myself thanks to https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1358149.html . The solution was to remove the option rfc3442-classless-static-routes from the dhcpd.conf file on the dhcp server. Routes then correctly added for the ones that were not working and continued working for the ones ...


2

The release notes state: 14.04 LTS to LTS upgrades will be enabled with the 16.04.1 LTS point release, in approximately 3 months time. This is because Ubuntu wants things to settle down before the upgrade is made available to people who really would prefer to have a stable and successful upgrade. I ran into a few issues on a couple of upgrades on a ...


1

The provider (Linode) filters traffic by IP address at the hypervisor/network level, so traffic with public IP addresses will not transverse the private network at all. I've changed provider now and NAT it working just fine.


1

Either use tail to show the last few lines or grep to filter the output based on the "Total" keyword at the beginning of the line (optionally with the extra whitespace), like: aws s3 ls s3://mybucket --recursive --human-readable --summarize|tail -n2 Or aws s3 ls s3://mybucket --recursive --human-readable --summarize|grep -e '^\s*Total'


0

The mkdir -p will use the default umask. You can combine it with -m to set the permissions mkdir -m 2775 -p path/dirname



Top 50 recent answers are included