Home / user-109713

Barry Chapman's questions

Martin Hope
Barry Chapman
Asked: 2022-02-01 18:45:49 +0800 CST
  • 0

On a wordpress site, we have requests coming in to CloudFront, which sends the request to origin (if necessary) which goes through an ELB, and to two or three instances that will service the request.

Most requests work, but when we upload a JSON file to admin-ajax.php, it results in a 504 error that we captured from the CloudFront logs:

2022-01-31  21:32:24    MIA3-C2 1462    67.190.247.197  POST    d2q8ixmwt0jy43.cloudfront.net   /wp-admin/admin-ajax.php    504 https://xxxxxxx.com/wp-admin/edit.php?post_type=elementor_library&tabs_group=library    Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/97.0.4692.99%20Safari/537.36%20Edg/97.0.1072.76 -   -   Error   Ae0gLzThCiZR2N5D8gLO6s-o8IwwlmYrxWvUbUgr1A64_nMpzN0qRg==    evolvetelemed.com   https   167737  30.107  -   TLSv1.3 TLS_AES_128_GCM_SHA256  Error   HTTP/2.0    -   -   64798   30.107  OriginCommError text/html   1033    -   -

The error appears to be an OriginCommError, but I cannot see why it is getting that error. Tailing the logs on our web servers on the instances shows that the request is not even reaching there.

I am not exactly sure why some requests would work and some wouldn't. To add further conclusion, when binary files in the media library are uploaded to async-upload.php, it works.

We use nginx as a webserver on the front end using php-fpm for processing php.

amazon-ec2 wordpress amazon-web-services amazon-cloudfront amazon-elb
Martin Hope
Barry Chapman
Asked: 2022-01-24 10:16:31 +0800 CST
  • 1

I am using nginx with php-fpm, and we are receiving a lot of errors like this:

2022/01/23 12:48:13 [error] 5514#5514: *9277 FastCGI sent in stderr: "PHP message: PHP Warning:  file_exists(): open_basedir restriction in effect. File(/var/www/vhosts/evtm.dev.nick/wp-content/db.php) is not within the allowed path(s): (/var/www/vhosts/evtm.dev.nick/:/usr/lib/php/:/tmp/:/data/sucuri:/var/www/prepend/) in /var/www/vhosts/evtm.dev.nick/wp-includes/load.php on line 545" while reading response header from upstream, client: 10.0.2.33, server: dev-nick.evtm.com, request: "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1", upstream: "fastcgi://unix:/var/run/php-fpm.sock:", host: "dev-nick.evtm.com", referrer: "https://dev-nick.evtm.com/"

It is saying that the file /var/www/vhosts/evtm.dev.nick/wp-content/db.php is not within the allowed path of /var/www/vhosts/evtm.dev.nick - when it clearly appears to be.

Is there something preventing it from working recursively?

php nginx php-fpm open-basedir
Martin Hope
Barry Chapman
Asked: 2020-10-11 20:35:59 +0800 CST
  • 0

I have a VPC in AWS that contains a public and private subnet. In the private subnet, I have two load balanced EC2 app servers, and an EC2 Database/Cache server.

The two app servers connect to the Database/Cache server for database queries, but there is also an instance of Redis running on the database server. Both of the app servers are configured to connect to this redis instance.

My question is - is this performant? Would it be better to have an instance of Redis installed on each of the App server nodes?

Or are we better off leaving redis on the database/cache server?

cache load-balancing amazon-ec2 redis amazon-vpc
Martin Hope
Barry Chapman
Asked: 2020-02-02 09:42:52 +0800 CST
  • 1

I have an EBS volume with all my configured mail servers, exchangers, and webmail interfaces on it. The problem was, we created a new subnet for this instance because it needed a different EIP.

After creating the new subnet, and testing connectivity with a test instance - it worked, we shut down the test instance, and connected the volume that was attached to the old subnet to the new one.

The instance booted up, and we were not able to connect to the instance; not via SSH, HTTP, SMTP, IMAP, nothing. I shut it down, and reconnected the prior EBS volume to the test instance, and it worked.

I reattached the EBS instance from the old subnet back to the instance it was attached to before. And now we cannot access it there either, it just times out when we try to connect to it.

So I built a NEW instance, with a boot volume, and then mounted the troubled EBS volume to /dev/sdf - and no joy. It will not connect.

What is happening? Why can i not connect to the instance when this volume is attached? What can I do to access the volume and at least recover some of the settings we have on there?

Thanks

Update - Log Output

[[32m  OK  [0m] Started Authorization Manager.
[[32m  OK  [0m] Created slice User Slice of root.
[[32m  OK  [0m] Started Session 1 of user root.
[[1;31mFAILED[0m] Failed to start LSB: Bring up/down networking.
See 'systemctl status network.service' for details.
[[32m  OK  [0m] Reached target Network.
         Starting Postfix Mail Transport Agent...
         Starting OpenSSH server daemon...
[[32m  OK  [0m] Reached target Network is Online.
         Starting System Logging Service...
         Starting Crash recovery kernel arming...
         Starting LSB: web-based administration interface for Unix systems...
         Starting Notify NFS peers of a restart...
         Starting Dynamic System Tuning Daemon...
[[32m  OK  [0m] Started System Logging Service.
[[32m  OK  [0m] Started Notify NFS peers of a restart.
[[32m  OK  [0m] Started OpenSSH server daemon.
[[1;31mFAILED[0m] Failed to start Crash recovery kernel arming.
See 'systemctl status kdump.service' for details.
[[32m  OK  [0m] Started Dynamic System Tuning Daemon.
[[32m  OK  [0m] Started Postfix Mail Transport Agent.
[[32m  OK  [0m] Started LSB: web-based administration interface for Unix systems.
[[32m  OK  [0m] Reached target Multi-User System.
         Starting Update UTMP about System Runlevel Changes...
[[32m  OK  [0m] Started Update UTMP about System Runlevel Changes.


CentOS Linux 7 (Core)
Kernel 3.10.0-957.21.3.el7.x86_64 on an x86_64

ip-10-2-246-76 login: [   11.179833] random: crng init done

FLOW LOG 1

2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 29526 143 6 4 240 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 63979 80 6 2 120 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 27737 25 6 1 60 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 62584 143 6 3 180 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 30656 143 6 4 240 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 28222 80 6 4 240 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 31552 993 6 4 240 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 34.201.222.254 10.3.46.14 13029 993 6 1 60 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 32800 8090 6 4 240 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 59625 8099 6 2 120 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 27736 5094 6 4 240 1580595489 1580595548 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 28241 8099 6 4 240 1580595489 1580595548 ACCEPT OK
2 unknown eni-04f677fe3abd0271b - - - - - - - 1580595551 1580595588 - NODATA
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 25682 993 6 1 60 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 52807 8099 6 2 120 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 23964 443 6 4 240 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 58486 25 6 4 240 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 34.201.222.254 10.3.46.14 63446 993 6 3 180 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 56520 5094 6 1 60 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 58767 80 6 4 240 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 53051 8099 6 4 240 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 55536 8090 6 2 120 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 25804 993 6 4 240 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 25344 8099 6 4 240 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 23709 443 6 4 240 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 54518 25 6 4 240 1580595513 1580595573 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 54403 443 6 4 240 1580595513 1580595573 ACCEPT OK

FLOW LOG 2

2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 7855 25 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 43045 143 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 44203 443 6 1 60 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 45663 443 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 12905 25 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 39966 8090 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 9558 80 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 45535 25 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 12856 8099 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 43378 993 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 13843 993 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 40823 25 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 44662 443 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 43217 8090 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 43565 25 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 9319 993 6 4 240 1580595458 1580595518 ACCEPT OK
2 unknown eni-0f432c5f29c9e41f5 10.3.46.14 10.3.246.211 13600 80 6 4 240 1580595458 1580595518 ACCEPT OK
2 068641405600 eni-05a9cdffb1ad2926d 142.93.130.235 10.2.46.58 53434 8088 6 1 40 1580595312 1580595371 ACCEPT OK
2 068641405600 eni-05a9cdffb1ad2926d 219.84.202.20 10.2.46.58 42658 445 6 1 40 1580595435 1580595491 ACCEPT OK
2 068641405600 eni-05a9cdffb1ad2926d 192.241.233.61 10.2.46.58 59033 60001 6 1 40 1580595435 1580595491 ACCEPT OK

That IP address of 10.3.246.211 is the one of the device that I cannot access.

mount amazon-ec2 subnet amazon-web-services amazon-ebs
Martin Hope
Barry Chapman
Asked: 2019-12-30 20:03:58 +0800 CST
  • 1

I have several VPC's set up in AWS, and all of my instances use provisioned IP addresses, that is - not using Elastic IP Addresses.

When any given instance boots up, it executes a script on the machine (post networking), which gets the Instance ID, Zone ID (from local config), and region, etc - once it has this information, it updates Route 53 to update the DNS information in a private hosted zone for these instances.

The reason for this is basically so that I can use DNS for server connection strings. I have my Web server and DB servers in a private subnet, and when the Web Server connects to the DB - it just uses the staticdns.mydomain.private which maps to the instance private IP address. This way, it doesn't require an amount of reconfiguration when the instance gets rebooted or if the IP changes for other reasons.

This is all well and good, and it works - with one caveat. There is a delay in the resolving of the new DNS mappings, I am not sure how long it is - it isn't VERY long, but it seems to be somewhat random (TTL maybe?). For this period that the resolver has the OLD IP cached, we will get connection failures from Web Server to the Database. I would much prefer that this cache was released when it was updated, but I have no clue where to even search for that.

Does anyone know if there is a way to refresh the DNS resolver cache within private zones in Route 53? I have tried using nscd also on the server, which did not seem to help.

amazon-web-services
Martin Hope
Barry Chapman
Asked: 2019-04-09 07:07:30 +0800 CST
  • 0

We currently have a rewrite rule with the Match defined as:

Req URL: Does not match pattern
Using: Regular Expressions
Pattern: &.*\.(css|gif|png|js|jpg|jpeg)$
Action Type: Rewrite
Properties:
   Rewrite URL: index.php

This is defined at the path application/live in which there is the index.php.

However, when we go to https://ourhost.internal/application/live/child it results in a 404. Should this not be rewriting that child to index.php?

If this -is- wrong, what can we do so that going to https://ourhost.internal/application/live/child/etc sends the request to index.php while passing along the request URI of /child/etc/?

Not sure why it isn't working

php
Martin Hope
Barry Chapman
Asked: 2018-10-17 07:16:46 +0800 CST
  • 7

I recently created a new EC2 from a snapshot of our Production EC2.

The machine started up fine, and I can ssh in, however - cannot access via anything else. No WWW, nothing.

Upon further inspection of the device, primarily the network stack - I see this:

/etc/udev/rules.d/70-persistent-net.rules

SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="06:68:f3:22:91:f2", NAME="ens5"

ifconfig

ens5: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 9001
        inet 172.31.12.146  netmask 255.255.240.0  broadcast 172.31.15.255
        inet6 fe80::468:f3ff:fe22:91f2  prefixlen 64  scopeid 0x20<link>
        ether 06:68:f3:22:91:f2  txqueuelen 1000  (Ethernet)
        RX packets 492  bytes 81928 (80.0 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 474  bytes 76982 (75.1 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 6  bytes 416 (416.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 6  bytes 416 (416.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Note the ens5 at the first line of the ifconfig.

[/etc] # service network restart

Restarting network (via systemctl):  Job for network.service failed because the control process exited with error code. See "systemctl status network.service" and "journalctl -xe" for details.
                                                       [FAILED]

[/etc] # systemctl status network.service

● network.service - LSB: Bring up/down networking
   Loaded: loaded (/etc/rc.d/init.d/network; bad; vendor preset: disabled)
   Active: failed (Result: exit-code) since Tue 2018-10-16 11:13:34 EDT; 1min 4s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 2223 ExecStart=/etc/rc.d/init.d/network start (code=exited, status=1/FAILURE)
   CGroup: /system.slice/network.service
           └─857 /sbin/dhclient -1 -q -lf /var/lib/dhclient/dhclient--ens5.lease -pf /var/run/dhclient-ens5.pid -H ip-172-31-12-146 ens5

Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal network[2223]: RTNETLINK answers: File exists
Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal network[2223]: RTNETLINK answers: File exists
Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal network[2223]: RTNETLINK answers: File exists
Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal network[2223]: RTNETLINK answers: File exists
Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal network[2223]: RTNETLINK answers: File exists
Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal network[2223]: RTNETLINK answers: File exists
Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal systemd[1]: network.service: control process exited, code=exited status=1
Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal systemd[1]: Failed to start LSB: Bring up/down networking.
Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal systemd[1]: Unit network.service entered failed state.
Oct 16 11:13:34 ip-172-31-12-146.us-west-1.compute.internal systemd[1]: network.service failed.

It cannot find eth0, nor can it restart the network stack. I have tried rebooting the machine, shutting down and starting up, with no luck. What am I missing?

networking
Martin Hope
Barry Chapman
Asked: 2018-02-08 20:34:57 +0800 CST
  • 0

I am trying to set up a relatively basic postfix/dovecot IMAP/SMTP server with a MySQL backend. It appears that the authentication is successful, I just seem to be getting this error:

Initialization failed: Namespace '': Home directory not set for user. Can't expand ~/ for mail root dir in: ~/myserver.io/mail/

The error I am getting is this, along with DEBUG:

Feb  8 04:27:13 localhost dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth
Feb  8 04:27:13 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so
Feb  8 04:27:13 localhost dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so
Feb  8 04:27:13 localhost dovecot: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat
Feb  8 04:27:13 localhost dovecot: auth: Debug: auth client connected (pid=9974)
Feb  8 04:27:13 localhost dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=IeV306tkgAB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=50816#011resp=AG1haWxAdmVuZ2VhbmNlLmlvAENyM2F0MXZlLS0= (previous base64 data may contain sensitive data)
Feb  8 04:27:13 localhost dovecot: auth-worker(9977): Debug: Loading modules from directory: /usr/lib64/dovecot/auth
Feb  8 04:27:13 localhost dovecot: auth-worker(9977): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so
Feb  8 04:27:13 localhost dovecot: auth-worker(9977): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so
Feb  8 04:27:13 localhost dovecot: auth-worker(9977): Debug: sql([email protected],127.0.0.1): query: SELECT username, domain, password, CONCAT('maildir:~/', maildir) AS userdb_home, '1000' AS userdb_uid, '1000' AS userdb_gid FROM mailbox WHERE username = 'mail' AND domain = 'myserver.io'
Feb  8 04:27:13 localhost dovecot: auth: Debug: client passdb out: OK#0111#[email protected]
Feb  8 04:27:13 localhost dovecot: auth: Debug: master in: REQUEST#0112229403649#0119974#0111#011aaa130ec6f6296678ec1e9e7866efbaf#011session_pid=9980#011request_auth_token
Feb  8 04:27:13 localhost dovecot: auth-worker(9977): Debug: sql([email protected],127.0.0.1): SELECT CONCAT('maildir:~/', maildir) as mail, '1000' AS uid, '1000' as gid FROM mailbox WHERE username = 'mail' AND domain = 'myserver.io'
Feb  8 04:27:13 localhost dovecot: auth: Debug: master userdb out: USER#0112229403649#[email protected]#011mail=maildir:~/myserver.io/mail/#011uid=1000#011gid=1000#011auth_token=d72ede03452694f33b4b1c759539f7ec613cab95
Feb  8 04:27:13 localhost dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=9980, secured, session=<IeV306tkgAB/AAAB>
Feb  8 04:27:13 localhost dovecot: imap: Debug: Added userdb setting: mail=maildir:~/myserver.io/mail/
Feb  8 04:27:13 localhost dovecot: imap([email protected]): Debug: Effective uid=1000, gid=1000, home=
Feb  8 04:27:13 localhost dovecot: imap([email protected]): Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/myserver.io/mail/
Feb  8 04:27:13 localhost dovecot: imap([email protected]): Error: user [email protected]: Initialization failed: Namespace '': Home directory not set for user. Can't expand ~/ for mail root dir in: ~/myserver.io/mail/
Feb  8 04:27:13 localhost dovecot: imap([email protected]): Error: Invalid user settings. Refer to server log for more information.
p=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/myserver.io/mail/

My dovecot config is:

[root@postfix webmail]# dovecot -n
# 2.2.10: /etc/dovecot/dovecot.conf
# OS: Linux 4.14.14-x86_64-linode94 x86_64 CentOS Linux release 7.4.1708 (Core)
auth_debug_passwords = yes
disable_plaintext_auth = no
mail_debug = yes
mail_gid = vmail
mail_privileged_group = mail
mail_uid = vmail
namespace inbox {
  inbox = yes
  location =
  mailbox Drafts {
    auto = subscribe
    special_use = \Drafts
  }
  mailbox Junk {
    auto = subscribe
    special_use = \Junk
  }
  mailbox Sent {
    auto = subscribe
    special_use = \Sent
  }
  mailbox Trash {
    auto = subscribe
    special_use = \Trash
  }
  prefix =
  separator = /
  type = private
}
passdb {
  args = /etc/dovecot/dovecot-sql.conf
  driver = sql
}
protocols = imap
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
  unix_listener auth-master {
    group = vmail
    mode = 0660
    user = vmail
  }
  user = $default_internal_user
}
ssl = no
userdb {
  args = /etc/dovecot/dovecot-sql.conf
  driver = sql
}

Finally, my MySQL conf

driver = mysql
# The mysqld.sock socket may be in different locations in different systems.
# Use "host= ... pass=foo#bar" with double-quotes if your password has '#' character.
connect = host=localhost dbname=postfix user=root password=supersecretpass
default_pass_scheme = MD5-CRYPT

# Alternatively you can connect to localhost as well:
#connect = host=localhost dbname=mails user=admin password=pass # port=3306

password_query = SELECT username, domain, password, \
                 CONCAT('maildir:~/', maildir) AS userdb_home, \
                 '1000' AS userdb_uid, '1000' AS userdb_gid \
                 FROM mailbox WHERE username = '%n' AND domain = '%d'

user_query = SELECT CONCAT('maildir:~/', maildir) as mail, '1000' AS uid, '1000' as gid FROM mailbox WHERE username = '%n' AND domain = '%d'

# For using doveadm -A:
iterate_query = SELECT username, domain FROM mailbox

I am at a complete loss!

email
Martin Hope
Barry Chapman
Asked: 2018-02-07 18:04:03 +0800 CST
  • 1

We have a server that needs to connect to an IMAP server outside of our network.

Unfortunately, the server we need to connect to requires a connection on port 993. The problem is our host blocks port port 993 going in or out.

The option I am exploring, if it is even an option at all, is whether or not we can set up a relay that we can use to connect to the external IMAP server.

Say we set up an IMAP server listening on port 499 on another host we control, and then forward that traffic to the other IMAP server on port 993. Is that possible or an option? I have not much experience with relays, and may be completely off base.

email
Martin Hope
Barry Chapman
Asked: 2015-02-02 06:20:24 +0800 CST
  • 0

When trying to install PHP 5.6 from the iUS repo, I get this error:

    --> Processing Conflict: php56u-common-5.6.5-1.ius.el6.x86_64 conflicts php-common < 5.6
    --> Finished Dependency Resolution
    Error: php56u-cli conflicts with php-cli-5.3.3-22.el6.x86_64
    Error: Package: php56u-cli-5.6.5-1.ius.el6.x86_64 (ius)
               Requires: libcrypto.so.10(libcrypto.so.10)(64bit)
    Error: Package: php56u-5.6.5-1.ius.el6.x86_64 (ius)
               Requires: libcrypto.so.10(OPENSSL_1.0.1)(64bit)
    Error: Package: php56u-cli-5.6.5-1.ius.el6.x86_64 (ius)
               Requires: libcrypto.so.10(OPENSSL_1.0.1)(64bit)
    Error: Package: php56u-common-5.6.5-1.ius.el6.x86_64 (ius)
               Requires: libssl.so.10(libssl.so.10)(64bit)
    Error: php56u-common conflicts with php-common-5.3.3-22.el6.x86_64
    Error: Package: php56u-5.6.5-1.ius.el6.x86_64 (ius)
               Requires: libcrypto.so.10(OPENSSL_1.0.1_EC)(64bit)
    Error: Package: php56u-cli-5.6.5-1.ius.el6.x86_64 (ius)
               Requires: libcrypto.so.10(OPENSSL_1.0.1_EC)(64bit)
    Error: Package: php56u-5.6.5-1.ius.el6.x86_64 (ius)
               Requires: libcrypto.so.10(libcrypto.so.10)(64bit)
    Error: Package: php56u-5.6.5-1.ius.el6.x86_64 (ius)
               Requires: libssl.so.10(libssl.so.10)(64bit)
    Error: Package: php56u-cli-5.6.5-1.ius.el6.x86_64 (ius)
               Requires: libssl.so.10(libssl.so.10)(64bit)
    Error: php56u conflicts with php-5.3.3-22.el6.x86_64
     You could try using --skip-broken to work around the problem
     You could try running: rpm -Va --nofiles --nodigest

It seems to be due to the fact i have openssl 1.0.0 installed, and need a later version - but I do not know how to install that. Can anyone help?

php
Martin Hope
Barry Chapman
Asked: 2013-12-13 08:56:00 +0800 CST
  • 16

We have two main environments in question:

Development and QA

Each environment has two servers:

  • Jump Box
  • Application server

In order to connect to the application server, you must connect to the jump box first, and then SSH to the Application server.

There are a few rules in place courtesy of the firewall:

  • You MUST connect to the application server via the jump box
  • The application server cannot connect to either jump boxes
  • The jump boxes are on the same subnet, and CAN talk to each other.

Our Problem

We have a lot of content (670 GB) on the DEVELOPMENT APPLICATION SERVER, and we need to get this to the QA APPLICATION SERVER.

Copying this data to the jump boxes is not an option because they lack the required amount of space.

I did some research, and learned that we could potentially do a series of tunnels through these servers so that we can stream the data straight from one app server to the other via the tunnels. However, the problem that we cannot connect to the jump box from the application server.

Do we have any options? This is getting to be a desperate situation, and time is of the essence. We do not have time to download the data and re-upload it. Copying across the network on the servers will go quickly, as it is a gigabit connection.

linux