New answers tagged

0

In general container groups deployed to a virtual network don't currently support exposing containers directly to the internet with a public IP address or a fully qualified domain name. You would have to deploy an application gateway in addition to expose the container to the internet. See this Expose a static IP address for a container group for more ...


0

In my case, SMB2 looks like it was negotiated, then the linux Samba server attempted to negotiate SMB3.1.1 because windows 10 said it was supported. Windows 10 then drops the connection. I disabled SMB3 in my Samba server and it worked like a charm. Under [GLOBAL] in /etc/samba/smb.conf: client min protocol = SMB2 client max protocol = SMB2


1

I am trying to send dns query with NAPTR+SRV+A query If you mean doing one DNS query for multiple record types at the same time, then no, this is not possible under current DNS specifications. There have been various works and ideas floating around to do that (specially to be able to get A and AAAA records together) but nothing emerged as a standard, so you ...


0

There is no default username/password for the ubuntu cloud image. Need to configure it using below cmd, before creating instance from the image. virt-customize -a bionic-server-cloudimg-amd64.img --root-password password:<pass> Need to install below pkg to get virt-customize cmd. sudo apt install libguestfs-tools


0

Enable header module using below command sudo a2enmod headers You have to restart your apache once you are done with enabling module sudo service apache2 restart


1

Is it possible to connect all 24 disks to one raid card ? That and WAY More - 250 are not unheard of SAS is a storage network protocol. How do I connect these physically ? Using a SAS cabinet that has the logic boards and physical slots for the discs. Do I need an expander ? Generally no. I mean, you need one, but the cabinet has one or more of them. ...


0

I did it... got bored of waiting for you guys. Just assign same to both. Works sudo vi /etc/netplan/01-netcfg.yaml [make changes] sudo netplan apply [switch cables]


2

You can just assign both interfaces to bridge and assign IP address to bridge, then you will be able to just plug in / out any time. At /etc/network/interfaces iface br0 inet static address 192.168.1.10 netmask 255.255.255.0 gateway 192.168.1.1 dns-nameservers 192.168.1.5 dns-search example.com bridge_ports eth0 eth1 bridge_stp off ...


0

You can use Screen to open "virtual consoles" within a session. To install Screen: sudo apt-get install screen To start a new session: screen To disconnect from a session: Press and release together CTRL+A, followed by D. To get a list of current active sessions: screen -ls To reattach to a session: screen -r <SESSION ID> To start a named ...


0

Looks like /proc/net/snmp is where the values for netstat -s are sourced. So here is quick gawk script to find the % of segments that are retransmitted: gawk 'BEGIN {OFS=" "} $1 ~ /Tcp:/ && $2 !~ /RtoAlgorithm/ {print "InSegs\t",$11,"\nOutSegs\t",$12,"\nRetransSegs\t",$13,"\nPctReTrans\t",($13/$12*100)...


2

You gave the answer in your question: you have a ulimit statement inside your /etc/profile which requires root permissions. Since this file is parsed at every login, every non-root user will see that error. Move these settings to a startup script or to /etc/sysctl.conf, if you want these settings to be active system-wide, and you're good...


2

You have to be using a version of Java that has TLS 1.2 support (I'm not sure if 1.7.0_09 falls into that boat, but I know later versions of 1.7 do) and it has to be one of the enabled protocols. This question has details on that: https://stackoverflow.com/questions/39157422/how-to-enable-tls-1-2-in-java-7 Java 1.7 has been EOL since 2015, so upgrading ...


2

By default, networking on CentOS 7 and 8 is managed by NetworkManager. It uses a plugin called ifcfg-rh to read the old network service configuration files (used in CentOS 6 and previous versions) such as the one you mentioned and translate them into the appropriate NetworkManager configuration. What has probably happened here is that the interface name has ...


-1

It is not a mandatory requirement to have a swap partition and the system will operate without it, however, it is recommended to have one. There are many different formulas and methods for calculating how much swap space you will need. Some say 1.5x your RAM, some say 2x your RAM, and some give a fixed amount (e.g. 8GB). You will need to assess the intended ...


0

It's a quite old topic and needs some refresh ;) Nowadays, the best option is to use 2FA like https://ubuntu.com/tutorials/configure-ssh-2fa#1-overview. After setting it up on my server, bots stopped trying to intrude immediately unlike the accepted iptables solution.


0

Yes, simply run the command: sudo apt install mysql-server to install MySQL 8. It is fairly straightforward, works in almost exactly the same way, and has the same packages available. If you’re concerned about manageability, use phpMyAdmin to manage it and control access using .htaccess files. Here is a great step-by-step on now to install MySQL 8 on Ubuntu ...


2

You need to reload the Apache service. You can do that with: sudo systemctl reload httpd Restarting the Apache service would also do the trick (as you tried to do in your stdout pasted above). Restarting the entire server would also do the trick, but that would be overkill. Are you sure that this is a CentOS 6.5 machine? Systemd (which provides the systemctl ...


1

If the user jboss has Sudo privileges, I would run the command: sudo systemctl restart httpd This will prevent the SystemD Authentication prompt asking for credentials, and instead just prompt for the user’s password.


0

This is what nohup is for! If it exists on your distribution, it's the simple way, plus it lets you keep a logfile.


1

The ping utility creates raw packets with their own hop limit set. By default ping uses a hop limit of 64, but you can change it with the -t option. ping -6 -c1 -t128 www.google.com If you mean to check whether outgoing traffic has the hop limit set correctly as in your sysctl, you should create some real traffic using something like your actual workload.


0

I get into this condition from time to time, this is likely triggered by something I type that I don't know exactly what it is. When I get into this condition, a "shift + scape" usually fixes the problem.


0

httpd_sys_content_t type is default for /var/www/html and if you wish to put your website in your home directory, you can change your file and directory to the type of "httpd_sys_content_t" for the httpd works. But it is not recommended, the best way is to change them to the type of "httpd_user_content_t". And then change the sebool: ...


0

What is the recommended size for a Linux /boot partition? Answer: 732.00 MiB. I just did an Ubuntu 20.04 install on a completely empty disk and I let it do all the partitioning stuff. I chose the options for "LVM" and "encrypted partition" or whatever, then looked at gparted to see what partition scheme it produced. Here's what I saw on ...


0

You're missing a NAT rule on the VPN server to translate IPv4 traffic. Maybe it was deleted, maybe you never had one. It's not possible for me to say. But you should start getting IPv4 traffic as soon as you add such a rule to the nat table. Something like: iptables -t nat -I POSTROUTING -o eth0 -j MASQUERADE should get you started. WARNING: Your VPN ...


0

This is the best solution I found so far. As @AnFi mentioned, you have to append or edit /etc/dovecot/dovecot.conf file with auth_default_realm = mydomain.com Please refer this like for more information https://docs.iredmail.org/authenticate.without.domain.name.html


0

If you don't know how to change access rights for cn=config which has access to * by * none by default (in some openldap distributes) here is workaround: create appropriate slapd.conf which contains: database config rootdn "cn=admin,cn=config" rootpw password access to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage ...


4

Check out the Match keyword in your SSH config on the client machine. Specifically, the user and host criteria. The ssh_config(5) man page states (emphasis mine): Match conditions are specified using one or more criteria or the single token all which always matches. So in your case you'd be looking at something like: Match user bob host "hostname.com&...


0

The above answers are old and no longer work for my modern Fedora Server 31 / 32 and Apache 2.4. Here's what does: httpd -t -D DUMP_MODULES But, there is a caveat that this will only work if you have an appropriately configured /etc/httpd/conf/httpd.conf, so if you're in the middle of editing to set LogLevel, it won't work if your edits are in-progress and ...


0

You can use udev PROGRAM rules for that, by making the appropriate call to ip link set … address …. Like this: /etc/udev/rules.d/10-network-persistent-custom-mac-address.rules SUBSYSTEM=="net", ACTION=="add", ATTRS{serial}=="50B123", PROGRAM="/sbin/ip link set %k address 00:22:33:44:55:AA"


1

Write a small program using a CSS library in whatever language. You mentioned Perl, perhaps CSS::Tiny. One-liners are overrated, can be difficult to read. Selecting a style, reading a property, changing a property if a condition, these are more than one step.


0

It's hard to manage systems this way/automate things. I don't really have a straight answer for you but it might be a starting point and give you some ideas. Assuming the following on the remote server: [root@node3 ~]# grep "gheo\|admin" /etc/sudoers Defaults:admin !requiretty Defaults:gheo !requiretty gheo ALL=(ALL) NOPASSWD:/bin/su - admin admin ...


0

Your EC2 instance probably got a new IP addresses. Check that your DNS record points to the same public IP address that your EC2 instance is assigned.


2

This requires a bit of technology outside the world of standard FC. Different vendors have different solutions. I know Hitachi, EMC, and Netapp all offer this, but it’s elaborate and involves, at least for EMC, client side software. I did a quick Google search and didn’t find anything for 3PAR. That said, it’s not rocket science. If your server has the ...


0

You should be able to do it with ACL. setfacl -R -dm g:group2:rw /something setfacl -R -m g:group2:rw /something


2

RPMs should be with rpm or yum. If there is no some kind of install script within the tar file, the simplest (and cleanest) way to install all of them in one go with yum: yum localinstall *.rpm


1

I'm usually using this command postsuper -r ALL && postqueue -f Parameter: -r ALL is requeue all message -f is Flush the queue: attempt to deliver all queued mail.


0

For a typical NAT'ted Docker setup you will need your firewall to forward ports to the Docker container. Docker adds the necessary NAT table and FORWARD rules when it starts. But if you're disabling the firewall (as stated in the question) you're also disabling port forwarding. First, start the firewall and restart Docker service and containers. Other ...


1

Yes, running the uninstall script will remove the ISPconfig database as well as Apache configuration files. Various services like mail and FTP will stop working. Just migrate your sites and services to another host that doesn’t have poison a control panel installed it.


0

I am assuming that your netmask is 255.255.255.0, that is, all three devices are in same subnet. This causes the problem with using only DNAT rule. I'll illustrate the connection flow when a connection is initiated by the attacker and MASQUERADE rule is used: Attacker opens a connection to 192.168.43.216:22. The protected system DNAT rule changes packet ...


0

I have now solved this by running the agent on another host, and then using scp and ssh in my Jenkins build commands to start the build on the actual target host. Also, the build command compares env output on the agent's host and on the build host, and sets all environment variables that are missing. This way the env vars set by Jenkins are available to my ...


0

One thing that no-one seems to have asked ... Why is Varnish crashing? (I've never used it. This could be "normal" behaviour for it but somehow I doubt it...) Sure, you can spend ages coming up with "clever" ways of getting your car automatically restarted, but surely it's better not to drive it into the wall in the first place?


0

I found the solution, my mistake :). I had to allow forwarding in iptables on the gateways. Thought it's not necessary for the bridge but it is... iptables -I FORWARD -i br0 -j ACCEPT iptables -I FORWARD -o br0 -j ACCEPT


0

The answer marked as correct is working. I am posting this just because I thought that it doesn't and was pulling my hair out. There are 2 similarly named files in /etc/ssh/ ssh_config sshd_config Make sure that you are modifying the correct one - sshd_config and not the other.


1

I think this is possible using LVM. You join the two 0.4TB disks into a RAID 0, then join this device with your 0.8TB disk using RAID 1. Another option is that you make a 0.8TB LV using 0.4TB disks, then join that LV and your 0.8TB disk in a RAID 1 configuration.


-1

cd / ls -lR > lists.txt list all files with directories


0

There's a few ways you could potentially go about it. One way is to simply use iptables to block outgoing port 25 using a cron job. For example, if you have -A OUTPUT -p tcp -m state --state NEW -m tcp --dport 25 -j CURFEW -A CURFEW -j ACCEPT then to disable you'd just do iptables -F CURFEW ; iptables -A CURFEW -j DROP Another way would be to have two ...


0

I remember facing the same issue when using UseDNS yes in my sshd config, try setting it to no and hopefully it'll resolve your problem if your ISP gives IPs without rDNS this usually happens how to know if your IP has a reverse DNS record? visit www.whatismyip.com or similar and take the IP then run host 1.1.1.1 where 1.1.1.1 is your IP and see if it gives ...


0

The following command will help in searching the Username depending on the configuration. ldapsearch -h localhost -D "cn=Directory Manager" -b "dc=example,dc=org" -W -x "(&(objectClass=nisnetgroup)(nisNetgroupTriple=\(,user1,\)))" cn | grep dn It will display the only cn. You can do a quick grep and the output will be ...


1

Gzip are very stable itself but it's just a compression and won't do backup alone. And tar are just archiving software. It just doesn't do all the things that backup requires in modern environment alone. You might want to check out some software especially designed for backups which will provide things like data consistency and other.


5

"Windows Storage Spaces - a useful replacement for RAID6?" If by "RAID6" you mean "I hate my data and want to get to it in as slow a way as possible" then yeah, sure - we lost 62TB of data to it at one point, luckly had a backup of it all but never again. EDIT: Don’t trust to Windows software RAID, don’t trust to double parity ...


Top 50 recent answers are included