gAMBOOKa's questions

We've had a hard disk failure, and have a backup of emails. The MTA on the server was Exim. We need to setup the mails on another server to give the admin access to these emails on desktop client such as Thunderbird or Outlook. As far as I know, there's no way to directly import Exim mail files into these clients. So I think we'll need to setup Exim on the new server as well. The issue with this is that we cannot setup domains on this server.

So how can we go about managing these emails from a desktop client without setting up domains on the new server?

The directory structure of the emails:

--> username
-----> mail
----------> [email protected]
-----------------> .Drafts
-----------------> .Junk
-----------------> .Sent
-----------------> .Trash
-----------------> courierimapkeyords
-----------------> cur
-----------------> new
-----------------> tmp
----------> .Drafts
----------> [email protected]
-----------------> .Drafts
-----------------> .Junk
-----------------> .Sent
-----------------> .Trash
-----------------> courierimapkeyords
-----------------> cur
-----------------> new
-----------------> tmp
----------> .Sent
----------> .Trash

Some sample email filenames:

1301306157.M973604P22982V0000000000000808I012D814B_0.host2.server.com,S=759_2,S
1301396083.M760888P5907V0000000000000808I012D814C_0.host2.server.com,S=5586_2,S
1301653044.M738056P22602V0000000000000808I012D815C_0.host2.server.com,S=1150_2,S
1301993531.M855378P29938V0000000000000808I012D8178_0.host2.server.com,S=745_2,S
1302003877.M624066P11398V0000000000000808I012D817A_0.host2.server.com,S=16791_2,S

OS: Redhat EL 6

We switched our java version from openjdk jre 1.7 to sun jre 1.7 and now starting tomcat gives the following errors:

SEVERE: Begin event threw error
java.lang.NoClassDefFoundError: org.apache.catalina.mbeans.ServerLifecycleListener
   at java.lang.Class.initializeClass(libgcj.so.10)
   at java.lang.Class.newInstance(libgcj.so.10)
   at org.apache.tomcat.util.digester.ObjectCreateRule.begin(ObjectCreateRule.java:206)
   at org.apache.tomcat.util.digester.Rule.begin(Rule.java:153)
   at org.apache.tomcat.util.digester.Digester.startElement(Digester.java:1356)
   at gnu.xml.stream.SAXParser.parse(libgcj.so.10)
   at org.apache.tomcat.util.digester.Digester.parse(Digester.java:1642)
   at org.apache.catalina.startup.Catalina.load(Catalina.java:524)
   at org.apache.catalina.startup.Catalina.load(Catalina.java:562)
   at java.lang.reflect.Method.invoke(libgcj.so.10)
   at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:261)
   at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
Caused by: java.lang.ClassNotFoundException: javax.management.modelmbean.ModelMBeanNotificationBroadcaster not found in org.apache.catalina.loader.StandardClassLoader{urls=[file:/opt/apache-tomcat-6.0.35/lib/,file:/opt/apache-tomcat-6.0.35/lib/el-api.jar,file:/opt/apache-tomcat-6.0.35/lib/jasper-el.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-i18n-fr.jar,file:/opt/apache-tomcat-6.0.35/lib/jsp-api.jar,file:/opt/apache-tomcat-6.0.35/lib/catalina.jar,file:/opt/apache-tomcat-6.0.35/lib/jasper.jar,file:/opt/apache-tomcat-6.0.35/lib/servlet-api.jar,file:/opt/apache-tomcat-6.0.35/lib/catalina-tribes.jar,file:/opt/apache-tomcat-6.0.35/lib/catalina-ha.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-dbcp.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-coyote.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-i18n-ja.jar,file:/opt/apache-tomcat-6.0.35/lib/ecj-3.7.jar,file:/opt/apache-tomcat-6.0.35/lib/catalina-ant.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-i18n-es.jar,file:/opt/apache-tomcat-6.0.35/lib/annotations-api.jar], parent=gnu.gcj.runtime.SystemClassLoader{urls=[file:/opt/apache-tomcat-6.0.35/bin/bootstrap.jar], parent=gnu.gcj.runtime.ExtensionClassLoader{urls=[], parent=null}}}
   at java.net.URLClassLoader.findClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.VMClassLoader.defineClass(libgcj.so.10)
   at java.lang.ClassLoader.defineClass(libgcj.so.10)
   at java.security.SecureClassLoader.defineClass(libgcj.so.10)
   at java.net.URLClassLoader.findClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.VMClassLoader.defineClass(libgcj.so.10)
   at java.lang.ClassLoader.defineClass(libgcj.so.10)
   at java.security.SecureClassLoader.defineClass(libgcj.so.10)
   at java.net.URLClassLoader.findClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.Class.forName(libgcj.so.10)
   at java.lang.Class.initializeClass(libgcj.so.10)
   ...11 more
java.lang.reflect.InvocationTargetException
   at java.lang.reflect.Method.invoke(libgcj.so.10)
   at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:261)
   at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
Caused by: java.lang.NoClassDefFoundError: org.apache.catalina.mbeans.ServerLifecycleListener
   at java.lang.Class.initializeClass(libgcj.so.10)
   at java.lang.Class.newInstance(libgcj.so.10)
   at org.apache.tomcat.util.digester.ObjectCreateRule.begin(ObjectCreateRule.java:206)
   at org.apache.tomcat.util.digester.Rule.begin(Rule.java:153)
   at org.apache.tomcat.util.digester.Digester.startElement(Digester.java:1356)
   at gnu.xml.stream.SAXParser.parse(libgcj.so.10)
   at org.apache.tomcat.util.digester.Digester.parse(Digester.java:1642)
   at org.apache.catalina.startup.Catalina.load(Catalina.java:524)
   at org.apache.catalina.startup.Catalina.load(Catalina.java:562)
   at java.lang.reflect.Method.invoke(libgcj.so.10)
   ...2 more
Caused by: java.lang.ClassNotFoundException: javax.management.modelmbean.ModelMBeanNotificationBroadcaster not found in org.apache.catalina.loader.StandardClassLoader{urls=[file:/opt/apache-tomcat-6.0.35/lib/,file:/opt/apache-tomcat-6.0.35/lib/el-api.jar,file:/opt/apache-tomcat-6.0.35/lib/jasper-el.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-i18n-fr.jar,file:/opt/apache-tomcat-6.0.35/lib/jsp-api.jar,file:/opt/apache-tomcat-6.0.35/lib/catalina.jar,file:/opt/apache-tomcat-6.0.35/lib/jasper.jar,file:/opt/apache-tomcat-6.0.35/lib/servlet-api.jar,file:/opt/apache-tomcat-6.0.35/lib/catalina-tribes.jar,file:/opt/apache-tomcat-6.0.35/lib/catalina-ha.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-dbcp.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-coyote.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-i18n-ja.jar,file:/opt/apache-tomcat-6.0.35/lib/ecj-3.7.jar,file:/opt/apache-tomcat-6.0.35/lib/catalina-ant.jar,file:/opt/apache-tomcat-6.0.35/lib/tomcat-i18n-es.jar,file:/opt/apache-tomcat-6.0.35/lib/annotations-api.jar], parent=gnu.gcj.runtime.SystemClassLoader{urls=[file:/opt/apache-tomcat-6.0.35/bin/bootstrap.jar], parent=gnu.gcj.runtime.ExtensionClassLoader{urls=[], parent=null}}}
   at java.net.URLClassLoader.findClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.VMClassLoader.defineClass(libgcj.so.10)
   at java.lang.ClassLoader.defineClass(libgcj.so.10)
   at java.security.SecureClassLoader.defineClass(libgcj.so.10)
   at java.net.URLClassLoader.findClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.VMClassLoader.defineClass(libgcj.so.10)
   at java.lang.ClassLoader.defineClass(libgcj.so.10)
   at java.security.SecureClassLoader.defineClass(libgcj.so.10)
   at java.net.URLClassLoader.findClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.ClassLoader.loadClass(libgcj.so.10)
   at java.lang.Class.forName(libgcj.so.10)
   at java.lang.Class.initializeClass(libgcj.so.10)
   ...11 more

mysql -uroot
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)

mysql -uroot -p
Enter password:       <-- leave blank, hit enter without entering anything

mysql>                <-- i am logged in

NOTE: This is a new mysql instance installation

So if the password is blank, why won't it log me in without a -p flag?

For a little clarification. I am running into this issue when attempting to change the password using a script:

We're using a bash script to do that.

• mysqladmin -u root password abc wouldn't work (access denied)
• mysqladmin -u root -p password abc cannot be used because it prompts for a password and we need to automate this.
• mysqladmin -u root -p'' password abc is not working either

OS: Centos 5.7

My application script starts like this (/etc/init.d/myapp):

#!/bin/sh
# chkconfig 2345 85 60
# description: my application controller
# processname: myapp

NAME=MyApp
DIR=/opt/myapp/
RUN_AS=root

### BEGIN INIT INFO
# Provides:          myapp
# Required-Start:    $all
# Required-Stop:     $all
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Description:       Starts the myapp application
### END INIT INFO

Chkconfig status

chkconfig --list | grep myapp

myapp            0:off   1:off   2:on    3:on    4:on    5:on    6:off

myapp accepts start | stop | restart | force-reload and they're all tested to work

myapp controller basically needs to start some daemon services for the application. If I run service myapp start after the system is rebooted, everything works fine. But for some reason, chkconfig is not starting it up automatically. Can anyone explain what I may be doing wrong?

UPDATE:

Thanks to cjc's information, it appears that my application controller is loading prior to some required services such as mysql.

Here's the result of a quick search:

find /etc -name rc* -type d | xargs ls | grep myapp
K50myapp
K50myapp
S50myapp
S50myapp
S50myapp
S50myapp
K50myapp

So why is the order set to 50 when in the script I've set to 85(start) 60(stop)? And how can I change this?

Solution (as pointed out by cjc in comments to his answer)

Incorrect syntax:

# chkconfig 2345 85 60

Correct to (colon needed after chkconfig):

# chkconfig: 2345 85 60

I recompiled PHP earlier today, now when you access PHP pages in a browser, Apache displays its source code instead of parsing it. Do I need to reset some configuration or recompile Apache?

This is on Centos 5.5 with Apache 2.2 and PHP 5.2.17

We have a development directory shared by our team. Everytime a user adds a file, the ownership changes to that user. Is there a way to ensure that the owner of files added within a directory always remains the same?

For added security, we've disabled root login to server via ssh. We have a special ssh account that users need to login as, and then su as root in they require root access.

How can we setup passwordless logins using putty in this situation? I've setup passwordless login to the special ssh account, but we still need a password when we su as root.

If I'm not clear, feel free to ask me to clarify.

My application requires read access to /var/log/messages, which belongs to user and group root. What is the minimal exposure level required on /var/log/messages so my application can read it?

Presently, my plan is to change the group ownership of /var/log/messages to a new group, and add root and my application user to it, but this would also give the application write privileges to /var/log/messages.

OS: Centos 5.5

I have several processes right now running at 100%. Is it 100% of the alloted resources to the process?

UPDATE

Take a look at this for example:

top - 06:01:13 up 5 days, 22:19,  2 users,  load average: 0.74, 1.24, 1.12
Tasks: 297 total,   1 running, 296 sleeping,   0 stopped,   0 zombie
Cpu(s):  1.2%us,  0.1%sy,  0.0%ni, 97.9%id,  0.8%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:  16427436k total,  8568996k used,  7858440k free,   397168k buffers
Swap: 10217332k total,    76996k used, 10140336k free,  7047904k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
27652 user  15   0  124m  14m 7076 S 15.9  0.1   0:10.84 php
 4554 mysql     15   0  728m 116m 3668 S  1.7  0.7   1325:23 mysqld
17453 nobody    20   0  427m  15m 2304 S  0.3  0.1   2:01.39 httpd
27836 root      15   0 12876 1240  808 R  0.3  0.0   0:00.06 top
    1 root      15   0 10352  684  572 S  0.0  0.0   0:03.01 init
    2 root      RT  -5     0    0    0 S  0.0  0.0   0:00.37 migration/0

Total CPU usage is aroung 2.1% while php is using 15% alone

UPDATE

I run mpstat at the same time and this is the output, showing 91% is idle

03:31:48 AM  CPU   %user   %nice    %sys %iowait    %irq   %soft  %steal   %idle    intr/s
03:31:48 AM  all    7.28    0.29    0.46    0.87    0.01    0.03    0.00   91.07   1119.57

Updated question

Older question

Is mod_ssl not for versions of Apache over 1.3.41? I've got version 2.2.17 (currently latest)

http://www.modssl.org/

Original question

./configure --with-apxs=/usr/local/apache/bin/apxs
Configuring mod_ssl/2.8.30 for Apache/1.3.39
./configure:Error: Installed Apache doesn't contain Extended API (EAPI)

That's strange because my Apache version is 2.2.17

/etc/init.d/httpd -v
Server version: Apache/2.2.17 (Unix)

UPDATE

As Khaled suggested, i changed my netstat command

netstat -lnp | grep 3899
tcp        0      0 :::3899           :::*              LISTEN      10333/sshd

So shouldn't it be listening?

I changed my ssh port on my centos 5.5 box to 3899. But I can't seem to login remotely to it. I have done this before but the last time, I didn't need to make any other changes to make it work.

iptables -L | grep 3899
[empty response]

iptables -L | grep 22
[empty response]

iptables -L | grep ssh
ACCEPT     tcp  --  anywhere       anywhere       state NEW tcp dpt:ssh

I want to get the pid of a php script:

php /var/www/html/test.php

I have a couple of other php scripts running as well, for instance

php /var/www/html/hello.php
php /var/www/html/world.php

When I run pidof -s -x php /var/www/html/test.php, it randomly gives me the pid of any of the 3 running scripts. I think it's because it's only seeing the php after -x and ignoring the rest. I tried it with quotes and I didn't get any result at all.

pidof -s -x 'php /var/www/html/test.php'

I'm writing a script to monitor attacks and probes on my server. But I'm primarily just grepping /var/log/messages for interesting information. Where else do I look?

I'm trying to install BugZilla on our server. The issue is that perl scripts of BugZilla define the path as /usr/bin/perl, and my perl installation is located at /usr/local/bin/perl.

I've had this issue while installing other applications as well, i had to manually edit the interpreter paths.

How do you handle situations like these?

EDIT: I just noticed we've got two copies of perl on the server, one in the standard location, on in /usr/local/bin/perl, but which perl returns the former path.

Btw, here's the error I get when I run bugzilla's perl script

bash: ./checksetup.pl: /usr/bin/perl: bad interpreter: Permission denied

I am running sudo date +%m/%d/%Y -s 7/14/2010 command to change date. It changes fine except I want it to pick up the current time as well, and not start the time from 00:00:00 on 7/14/2010.

I've got a log file that's managed to bloat upto 150MB. Is there a way to read only the last say 100 lines of the file instead of the whole thing? I don't want to have to download a 150 MB file with my current connection. I'd rather SSH in and read the relevant parts.

We need to take a snapshot of your linux server. We don't want to backup the data, just a snapshot we can compare against changes.

Our source code is our most prized asset. I would like to have it:

• secured from proliferation by in-house developers but they also need unrestricted access to the code to do their job right. So I'm not sure this is even possible.
• regularly backed up to secure location, but would it be safe to upload it to a cloud storage such as box.net?

Any recommendations on strategies? Or am I paranoid?

When I say routing distance, I mean on a global scale. For instance, if my target audience is in China, do I look for a host within China?

My client would like to have his eCommerce (custom-made) site secured from DDoS attacks. What strategies can I implement? There are multiple forms in the purchasing flow --- searching, drilling-down to the product, user information and payment and I want to avoid captchas.