768 reputation
45
bio website olafkock.de
location Hamburg, Germany
age
visits member for 5 years, 3 months
seen Jul 28 at 16:18
maintaining pebble, a lightweight Java blogging engine.

Oct
26
comment Strange enduser experience with Liferay, Glassfish and Apache on RedHat
Can you post links to the other places where you already asked? This way one could see what else you already tried or if it's been solved already.
Feb
25
comment How can I ensure Liferay uses TLS for authentication
I'll take a look at what other options there are for future implementations. Especially because you'll have to establish some trust to the other side - otherwise encryption is useless: Having an encrypted connection to a man-in-the-middle doesn't buy you anything.
Feb
24
comment How can I ensure Liferay uses TLS for authentication
see if my edited answer helps or gives more information. Re the tag: You're welcome ;)
Feb
23
comment How can I ensure Liferay uses TLS for authentication
sorry, misread the question - it's clearer now after the edit.
Feb
21
comment How can I ensure Liferay uses TLS for authentication
Are you sure you didn't set your https port to 8080? This looks like firefox tries to do https through the port that has only http - obviously this will fail and not do anything. Will add a precondition to my answer right now.
Jun
19
comment Liferay and Oracle DB
FYI: The extra permissions are only required during installation or update (or deployment of new plugins) - during the "normal" runtime, only the standard operations SELECT, INSERT, UPDATE and DELETE are required.
Aug
18
comment same SSL certificate in two servers
whoops - your comments crossed paths with mine. If your cert vendor has any restrictions on how to use their cert is a different thing. Nothing to answer here - look at the terms and conditions of your vendor that apply to your specific situation/contract
Aug
18
comment same SSL certificate in two servers
I'm not aware of a cert that is machine specific - it can't be: It certifies the authenticity of the private key in combination with the FQDN. Once the private key is known to another machine, this machine can - under the same FQDN - operate with the same key and the same certificate without problems.
May
11
comment Downloads are consistently corrupt, what are the potential causes?
thanks for accepting this as an answer - can you provide some insight into what exactly helped to solve your problem?
May
11
comment Downloads are consistently corrupt, what are the potential causes?
and: Don't rule out malware just because you doubt that it's there. This can be quicker than you think. Check it, double check! Remember: you're observing some strange behaviour after all.
May
11
comment Downloads are consistently corrupt, what are the potential causes?
MD5 is there for you to be sure that you've got the correct file even when downloaded from a mirror site. Make sure to always get the MD5 from the original site, not from the mirror. Have you tried https (or ssh or anything encrypted) yet? If this is also corrupted, everything in the network can be ruled out. If it is not, there might be some eavesdropping component on your way - e.g. a proxy running virus checks or something else. Are all your problems from varying sources or all from the same source? Can you post links to check?
May
1
comment tomcat6 on ubuntu fails when user set to root
+1, never run as root. If you really need to execute another process from your webserver, there are other options - compile a stub that runs as root, create a daemon and communicate with it etc. Don't go the easiest way just because that the first thing you think about. To answer the original question: You can diagnose what you do wrong by looking at your post: "TOMCAT_USER=root" is what is going wrong. Seriously. Really really seriously.
Apr
20
comment How many users are “many users”?
right - that's what I had in mind: Make sure that the database doesn't have to touch the disk on read. Regarding swapping: You don't want any swapping to happen if you optimize for high load. Might as well disable swapping to come to a hard stop instead of degrading performance when memory is exhausted.
Mar
23
comment mod_rewrite redirect from SSL to HTTP not working
+1 for the answer: I've seen way too many problems with mixed setups. You will find holes. They will be unexpected. No matter how many you've already plugged - seriously.
Mar
12
comment created pub/priv keys using putty, created .ssh folder and authorized_keys, still not working
This is the issue I've most frequently been bitten by after learning that Putty and OpenSSH use different formats for their key files.
Mar
7
comment Picking up the pieces after missing Linux admin
fully agreed, but as the system is already live, I guess there's no way around learning on a live system.
Feb
20
comment I need to rewrite https://domain.com => https://www.domain.com because of wildcard SSL
Also, you might be able to get both, the wildcard and the toplevel domain in just one certificate - see the answers to serverfault.com/questions/87005/…. I've not tried that, but this way you could work with just one certificate (and on the same IP address) instead of requiring an extra IP address just for the top level address.
Feb
20
comment I need to rewrite https://domain.com => https://www.domain.com because of wildcard SSL
One could argue that it's rather "fortunate" that the client checks itself, not unfortunate. If the redirect could happen prior to SSL negotiation, traffic would obviously not be encrypted and a man in the middle could redirect the client anywhere they want to. This extra certificate usually costs money, which is unfortunate :)
Feb
20
comment Prevent direct call of a file
Great example. There's no 100% solution, but this comes as close as it gets, as the referer header is not mandatory and would be easy to tweak, though not in situations mentioned in the question. +1
Feb
4
comment Ubuntu 9.10 cron script 'ec2-consistent-snapshot' unable to execute and access files
with PATH being set to /home/ubuntu: Is your .awssecret located in /home/ubuntu or in /root? I believe it should be in /root when you execute this way as root. You could also define HOME the same way as you do SHELL or PATH - I didn't mention this earlier