user127379's questions

I've read the first results in google and Apache 2.4 docs and there is no clear example.

Currently this works (from 2.2) in a .htaccess file, I can access within the office wifi/LAN but not from my mobile/cell network:

Order deny,allow
Deny from all
allow from 123.123 example.com

I want the same using 2.4, so I tried:

Require ip 123.123
Require host example.com

And even:

Require ip 123.123
Require host example.com
Require all denied

And even changing the order of the lines, with denied at the top. Still can't get it too work, I can manage to access the page from my mobile/cell network.

What have I missed?

PS - AllowOverride All in the directory conf and the deprecated commands work, but not the new 2.4 stuff.

I've got many old addresses and servers, https://site1.example.com, https://foo.example.com and so on. I want to stop having so many servers and SSLs certs and move everything to one server and domain. The old links need to remain valid.

So far I've moved the web apps to a new server, https://apps.example.com/name, https://apps.example.com/foo etc.. which work fine when those addresses are used.

I want to switch off the old servers which have the Apache (2.2) redirects:

NameVirtualHost 123.123.123.123:80
NameVirtualHost 123.123.123.123:443
<VirtualHost 123.123.123.123:80>
Servername site1.example.com
redirect permanent / https://apps.example.com/site1
</VirtualHost>
<VirtualHost 123.123.123.123:443>
Servername site1.example.com
redirect permanent / https://apps.example.com/site1
</VirtualHost>
<VirtualHost 123.123.123.123:80>
Servername site2.example.com
redirect permanent / https://apps.example.com/site2
</VirtualHost>
...

The above works, but it means I need to keep this old hardware server switched on.

As a test I've pointed the site1.example.com to the IP address of apps.example.com (the new server) and in the Apache (2.4) conf, I have:

NameVirtualHost 234.234.234.234:80
NameVirtualHost 234.234.234.234:443
<VirtualHost 234.234.234.234:80>
Servername site1.example.com
redirect permanent / https://apps.example.com/site1
</VirtualHost>
<VirtualHost 234.234.234.234:443>
Servername site1.example.com
redirect permanent / https://apps.example.com/site1
</VirtualHost>

# Main config
<VirtualHost *:80>
Servername apps.example.com
redirect permanent / https://apps.example.com/name
</VirtualHost>
<VirtualHost *:443>
Servername apps.example.com
alias /site1 /srv/www/site1
alias /site2 /srv/www/site2
...
</VirtualHost>

http://site1.example.com just goes to the root https://apps.example.com not apps.example.com/site1. https://site1.example.com gives an error, SSL not valid, hostname apps.example.com doesn't match etc. Any help greatly appreciated.

I changed the default shell to zsh. And then proceeded to uninstall bash (this was via yast on SLES).

To my horror I start to see everything deleted/uninstalled, apache, mysql .

I can't putty into the box any more.

Anyway to revive this one?

It's a VM on a server with a iDrac connection, but the web interface showing the console is blank.

So I've shut the VM (VMWare) down and copied to my desktop.

Running the VM I get the grub boot with Floppy only screen.

Is there a way in to mount and copy files?

I'm on OpenSUSE 12.3, and setup a mail relay under mail server settings (posix) via yast.

I try to send a mail and get timed out:

2013-09-27T15:19:08.745282+01:00 myserver postfix/qmgr[12258]: 2973BE49E4: from=<>, size=2705, nrcpt=1 (queue active)
2013-09-27T15:19:08.748700+01:00 myserver postfix/qmgr[12258]: B66A7E49A1: from=<[email protected]>, size=1979, nrcpt=1 (queue active)
2013-09-27T15:19:38.779794+01:00 myserver postfix/smtp[17650]: connect to mailserver.com[123.456.78.9]:25: Connection timed out
2013-09-27T15:19:38.779811+01:00 myserver postfix/smtp[17651]: connect to mailserver.com[123.456.78.9]:25: Connection timed out
2013-09-27T15:19:38.783206+01:00 myserver postfix/smtp[17650]: 2973BE49E4: to=<[email protected]>, orig_to=<[email protected]>, relay=none, delay=90908, delays=90878/0.01/30/0, dsn=4.4.1, status=deferred (connect to mailserver.com[123.456.78.9]:25: Connection timed out)
2013-09-27T15:19:38.784639+01:00 myserver postfix/smtp[17651]: B66A7E49A1: to=<[email protected]>, relay=none, delay=252675, delays=252645/0.01/30/0, dsn=4.4.1, status=deferred (connect to mailserver.com[123.456.78.9]:25: Connection timed out)

Ldap logs via the php app, show error:

Array
(
[0] => An unexpected failure occurred
[1] => 0x1: Failed to retrieve DN for account: enphsrob [0x51 (Can't contact LDAP server): ldap://ldap.mysite.com]...)

I've copied ldap and mail settings from a working server on SLES 11, firewall is also the same (HTTPS/HTTP/SSH only). I have to be whitelisted for the mail server and was told I was whitelisted. For ldap I don't know if that is also the case. While I wait to find out, I want to see if it's something I can fix. Thanks in advance for any replies!

I need to find this string:

7z a -p

I've tried:

grep -iR "7z a -p" /

But it seems to hang after a while, with lots of:

grep: /sys/class/vc/vcs5/power/autosuspend_delay_ms: Input/output error
grep: warning: /sys/class/vc/vcsa5/subsystem: recursive directory loop
grep: /sys/class/vc/vcsa5/power/autosuspend_delay_ms: Input/output error
grep: warning: /sys/class/vc/vcs6/subsystem: recursive directory loop

EDIT - However, this seems to just look at static text files. In addition, what about runtime areas, memory and processes? ie the entire system? eg for mysql:

ps aux | grep "mysql -u user -p"

shows :

38164  4292 pts/0    S+   13:16   0:00 mysql -uodbcuser -px xxxxxxxx

Interestingly ps aux does hide the password with xxxxx. I can try with 7zip but it's quite fast, it has to be running at the same time as you run the ps aux command to "catch it.

I have to move database to a new server. I do a mysqldump of the database from server A and import it into server B. I then do a dump from server B and compare this with the dump from server A, via diff on bash. This fails, some lines are mismatched, although manual check shows no data lines involved. Both servers run slightly different versions of mysql 5.0.x.

mysqldump command used:

mysqldump -u user -p mydb > mydbA.sql

Then after some research I did this, using tools on bash:

1. mysqldump on old server A , a full dump and data only dump.
2. create database on new server B and import full dump from A.
3. then data only dump from server B.
4. do a diff comparing data dump A and data dump B.
5. should exit with 0 - from echo $?
6. MD5 also gives same hash.

Both servers run slightly different versions of mysql 5.0.x.

'Full' dump

mysqldump -u user -p mydb > mydbFULL.sql

Data only dump

mysqldump --no-create-info --skip-opt --skip-comments --skip-extended-insert --compact -u user -p mydb > mydbDATAonly.sql

I've had a search and Google and found ways to monitor bandwidth per virtual host.

What I need is a way to monitor outgoing bandwidth (and eventually suspend) of sub folders of my document root. (I've got cron running a global bandwidth checker).

/srv/www/htdocs/user1files
/srv/www/htdocs/user2files

I don't want virtual hosts because I do not want to restart or "reload" Apache, every time I add a "new user".

I'm thinking the Apache access log may offer a way using awk to total all the /username1/:

10.65.10.77 - - [10/Mar/2013:10:20:17 +0000] "GET /user1files/upload.php HTTP/1.1" 200 10945
10.65.10.77 - - [10/Mar/2013:10:20:17 +0000] "GET /user1files/styles.css HTTP/1.1" 304 -

Many thanks in advance!

I've got a web page PHP script which runs p7zip on the server:

This passes a user supplied password for encrypting their uploaded files.

Secondly the password is then emailed via PHP to the recipient.

What are the possible locations the password could be stored?

I did a grep -r "Passw0rd" /var/log/* nothing found.

Nothing in bash history either.

Dist is opensuse.

Many thanks!

I am in as root in the terminal and have typed yast2.

Under System there is no System Service (run levels) as there was in Opensuse version 11.

Where is the proper tool to make eg mysql autostart?

I've done a search and have not found anything addressing issues regarding patching and system updates. I've got guidelines that say servers need to have necessary patches. If I have a VM host then is that an extra layer to patch and update - even with bare metal hypervisors? As opposed to having a metal server? (ie more work and testing and documentation as per my guidelines).

How often do type 1/bare-metal hyper-visors get updated? Does that matter? Does the fact that it is an extra software layer introduce more complexity and risk (security & reliability)? (eg 99% bug free software x 99% bug free software = 98% bug free system)?

(My practical experience is with VMWare Workstation and Server, and VirtualBox.)