I have SSL set up on an Ubuntu server. This server is running Apache 2 with multiple Virtual Hosts. I've read that you need a single IP for each application running SSL.
My questions are:
Following this tutorial on installing git, gitolite, git-daemon, and git-web I have successfully completed the entire tutorial and actually added projects gitolite; they show up on git web when I go to http://servername/.
Now I'm trying to clone gitolite-admin.git to add another project and it spits out the error
fatal: 'gitolite-admin.git' does not appear to be a git repository
fatal: The remote end hung up unexpectedly
I can't actually clone any repositories from my server. Here is a bit of info, although I'm not exactly sure what to provide:
I can SSH to the server using SSH keys.
The gitolite SSH key is working; when I execute the git clone gitolite@{server_ip}:gitolite-admin.git it asks me to enter in the passphrase for the key, which does work.
sudo su gitolite while on the server allows me to cd into /home/gitolite where the repositories folder and the projects.list is held.
ls in /home/gitolite/repositories shows gitolite-admin.git as well as the others.
projects.list does not list gitolite-admin.git however it does list otherproject.git; if this were affecting the ability to clone, i would assume that it would still work to clone otherproject.git, which it does not.
If there is anything else I can provide to give more insight please let me know. Any help is appreciated.
Note: I followed the tutorial very closely and only strayed from their configuration at the sudo apt-get install gitolite step which is not available on Ubuntu 10.04 so I followed this article for the actual installation of gitolite.
scp filename user@ip_address:/location will copy a file from my local computer to a remote computer... However I need to copy a file from the remote computer back to the local computer.
Is there any way to specify to pull a certain file down from a remote computer via ssh?
I'm following Tuxnetworks tutorial, at the last line of the first part and I'm getting this error:
sysadmin@samba:~$ sudo smbclient -L localhost
Enter root's password:
Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED)
I've read a few other threads where people seem to have the same issue but it either doesn't get resolved or their error isn't something I'm having troubles with.
http://ubuntuforums.org/showthread.php?t=1510536 http://lists.samba.org/archive/samba/2009-March/147401.html
testparm -s output:
Processing section ...
Global parameter logon script found in service section!
...
Loaded services file OK.
Despite the Global parameter... error it still loads the config fine.
smb.conf file I'm using is the one available in their tutorial with the following changes:
workgroup = MYDOMAIN.COM
netbios name = SAMBA
wins support = Yes
sudo netstat -llptun output:
...
tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 1317/slapd
tcp6 0 0 :::445 :::* LISTEN 1414/smbd
tcp6 0 0 :::389 :::* LISTEN 1317/slapd
tcp6 0 0 :::139 :::* LISTEN 1414/smbd
...
Anyone have any idea of why I would be getting NT_STATUS_CONNECTION_REFUSED when executing smbclient -L localhost?
This question is a near duplicate of Robert's question but after trying chmod 600 ~/.ssh/config I still have the same error.
I've tried using cygwin and MINGW32 to do the chmod 600. ls -la returns -rw------- on cygwin and returns -rw-r--r-- on MINGW32.
By these results, cygwin says that it does have the proper permissions and therefore shouldn't be complaining when I ssh hostname, however both cygwin and MINGW32 complain when trying to ssh.
This is similar to the issues I had with gitosis where this article said that I needed to switch over the ssh.exe files from cygwin to git (MINGW32) which did actually fix the issue at the time. However, this fix doesn't seem to be working any more as MINGW32 isn't chmoding properly.
Any ideas?
I've been following this tutorial and I'm stuck on
sudo apt-get install gitolite
with the error
Couldn't find package gitolite
I've been Googling around for a while now, no one else seems to have this problem so it's probably a trivial matter... I'm not sure if it's a line in /etc/apt/sources.list I need to add, or if the package just isn't available for Ubuntu 10.04.
How do I fix the fact that it can't find the package?
I have BIND9 set up with proper recorders for my domain example.com, something.example.com is actually working...
When I have my DHCP server pointing at this DNS server I can get to webmin (https://something.example.com:10000) for the server it's pointing to. However I cannot get to any external websites (google.ca, serverfault.com, etc.)
I have my forwarders set in the named.conf.options file
options {
directory "/etc/bind/";
allow-query-cache { none; };
allow-query { any; };
recursion yes;
forwarders {
8.8.8.8; // Google's DNS Server
8.8.4.4; // ''
};
};
//zones here for example.com and reverse dns
But it doesn't seem to be forwarding requests to their servers. Where am I going wrong? Is there anything I can do to probe to get more information?
How can an internal DNS server work in relation to a domain name we currently own?
If my company's website is example.com and it currently points to a DNS server elsewhere that points to the website's server, also elsewhere... how does it work to set up locally available addresses?
For example: We have 3 development servers and 3 staging servers. I would like each to point to:
something.example.com
somethingelse.example.com
etc...
However this only needs to be available locally, each available on... 192.168.0.XXX
Note: I doubt I can point the external DNS server back to my local servers since I do not have a static IP to address these properly.
Is this possible to set up? How does it work, conceptually? Any information on the subject that could help me understand this would be greatly appreciated.
I've been following this tutorial to install and setup git on Ubuntu Server 10.04 using Windows 7 as a client. However, after finally figuring out how it works (executed gitosis-init a bunch of times on the wrong key), I copied the id_rsa.pub file over to the server in /tmp folder and ran it again.
Unfortunately it still doesn't work and when I execute
git clone [email protected]:gitosis-admin.git
it asks for gitosis's password rather than the RSA Passphrase. I'm assuming is the same problem this guy is having here... however, after following his instructions:
Purge git-core and gitosis and manually remove the /srv/gitosis folder
and following the instructions again (with the proper id_rsa.pub file this time), I'm still having the same issue.
Anyone know what I'm doing wrong? Is there any way to probe for more information that might help in solving this?
Edit: output from ssh -vvv gitosis@{IP_ADDRESS} (The last few lines show where it's switching from publickey to password):
{UserName}@{COMPUTERNAME} ~
$ ssh -vvv gitosis@{IP_ADDRESS}
OpenSSH_4.6p1, OpenSSL 0.9.8e 23 Feb 2007
debug2: ssh_connect: needpriv 0
debug1: Connecting to {IP_ADDRESS} [{IP_ADDRESS}] port 22.
debug1: Connection established.
debug1: identity file /c/Users/{UserName}/.ssh/identity type -1
debug3: Not a RSA1 key file /c/Users/{UserName}/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'Proc-Type:'
debug3: key_read: missing keytype
debug2: key_type_from_name: unknown key type 'DEK-Info:'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
# Repeated 23 times here...
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /c/Users/{UserName}/.ssh/id_rsa type 1
debug1: identity file /c/Users/{UserName}/.ssh/id_dsa type -1
debug1: Remote protocol version 2.0, remote software version OpenSSH_5.3p1 Debian-3ubuntu6
debug1: match: OpenSSH_5.3p1 Debian-3ubuntu6 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.6
debug2: fd 3 setting O_NONBLOCK
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
# Bunch of stuff here that doesn't seem important... I can include if necessary
debug3: check_host_in_hostfile: filename /c/Users/{UserName}/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 1
debug1: Host '192.168.0.113' is known and matches the RSA host key.
debug1: Found key in /c/Users/{UserName}/.ssh/known_hosts:1
debug2: bits set: 526/1024
debug1: ssh_rsa_verify: signature correct
debug2: kex_derive_keys
debug2: set_newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug2: set_newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug2: service_accept: ssh-userauth
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug2: key: /c/Users/{UserName}/.ssh/identity (0x0)
debug2: key: /c/Users/{UserName}/.ssh/id_rsa (0xa01a428)
debug2: key: /c/Users/{UserName}/.ssh/id_rsa (0x0)
debug1: Authenications that can continue: publickey,password
debug3: start over, passed a different list publickey,password
debug3: preferred publickey,keyboard-interactive,password
debug3: authmethod_lookup publickey
debug3: remaining preferred: keyboard-interactive,password
debug3: authmethod_is_enabled publickey
debug1: Trying private key: /c/Users/{UserName}/.ssh/identity
debug3: no such identity: /c/Users/{UserName}/.ssh/identity
debug1: Offering public key: /c/Users/{UserName}/.ssh/id_rsa
debug3: send_pubkey_test
debug2: we sent a publickey packet, wait for reply
debug1: Authentications that can continue: publickey,password
debug1: Trying private key: /c/Users/{UserName}/.ssh/id_dsa
debug3: no such identity: /c/Users/{UserName}/.ssh/id_dsa
debug2: we did not send a packet, disable method
debug3: authmethod_lookup password #it just switched to password...
debug3: remaining_preferred: ,password
debug3: authmethod_is_enabled password
debug1: Next authentication method: password
gitosis@{IP_ADDRESS}'s password:
For some reason I have not been able to pinpoint yet, going to Network on my Windows 7 computer, the Samba server does not show up.
I have configured Samba with LDAP and managed to successfully complete all the steps.
Both computers are on the same workgroup and connected to the same router.
My question is, what determines whether or not this Samba server will show up as a computer on the network?
Edit: I know this the information I've provided is very limited, I'm just unsure of what I need to provide. Please request any information that would be useful and I'll post it right away.
I've been walking through this tutorial and kept getting errors -- likely because I was typing it in manually -- so I retried, executing it after entering in
# Load dynamic backend modules
dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModulepath: /usr/lib/ldap
olcModuleload: back_hdb
# Database settings
dn: olcDatabase=hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcSuffix: dc=example,dc=local
olcDbDirectory: /var/lib/ldap
It worked, so I typed in the rest and re-executed:
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif
and now it says
ldap_add: Other (e.g., implementation specific) error (80)
additional info: <olcSuffix> namingContext "dc=home,dc=local" already served by a preceding hdb database
Which, as I would guess, means that it can't complete the ldapadd because one already exists under the same name.
I tried deleting it using (from here):
sudo ldapdelete 'dc=example,dc=local'
and it's asking for a password, of which my password doesn't work and there was nothing set as the olcRootPW in the initial setup.
How do I use ldapdelete in this context so I can re-setup this database?
Here's the layout I have; I'm using Software RAID10, LVM, and Encryption:
LVM VG vg0, LV main - 2.0 TB Linux device-mapper (linear)
#1 2.0 TB K crypto (vg0-main_crypt)
Encrypted volume (vg0-main_crypt) - 2.0TB Linux device-mapper (linear)
61.4 kB unusable
#1 2.0 TB f ext4 /
LVM VG vg0, LV swap - 10.1GB Linux device-mapper (linear)
#1 10.1 GB K crypto (vg0-swap_crypt)
Encrypted volume (vg0-swap_crypt) - 2.0TB Linux device-mapper (linear)
61.4 kB unusable
#1 10.1 GB f swap swap
65.5 kB unusable
RAID10 device #0 - 20.2 GB Software RAID device
#1 20.2 GB K lvm
131.1 kB unusable
RAID10 device #1 - 2.0 TB Software RAID device
#1 2.0 TB K lvm
131.1 kB unusable
RAID1 device #2 - 298.8 MB Unknown
#1 298.8 MB K ext4 /boot
SCSI1 (0,0,0) (sdb) - 16.0 GB Verbatim STORE N GO
#1 primary 16.0 GB B fat32
SCSI2 (0,0,0) (sdb) - 1.0 TB ATA WDC WD1002FAEX-0
#1 primary 298.8 MB B K raid
#1 primary 10.1 GB K raid
#1 primary 989.8 GB K raid
SCSI3 (0,0,0) (sdc) - 1.0 TB ATA WDC WD1002FAEX-0
#1 primary 298.8 MB B K raid
#1 primary 10.1 GB K raid
#1 primary 989.8 GB K raid
SCSI4 (0,0,0) (sdd) - 1.0 TB ATA WDC WD1002FAEX-0
#1 primary 298.8 MB B K raid
#1 primary 10.1 GB K raid
#1 primary 989.8 GB K raid
SCSI5 (0,0,0) (sde) - 1.0 TB ATA WDC WD1001FALS-7
#1 primary 298.8 MB B K raid
#1 primary 10.1 GB K raid
#1 primary 989.8 GB K raid
The error I'm getting now is:
The attempt to mount a file system with type swap in Encrypted volume (vg0-swap_crypt) at none failed.
What am I doing wrong? When I had the swap unencrypted it said that I should encrypt it because it's unsafe not to (if I'm encrypting the rest).
I have 4 hard drives, each with two partitions on them 10.1GB for swap and 990.1GB for the rest.
I took this and set up two MD devices with RAID10, one for the set of 4 swap partitions and one for the set of 4 other partitions.
I set the 20.2GB Software RAID device as my swap and moved on to LVM.
This is as far as this guide takes me using software RAID. I would now like to set up LVM and encryption on it.
I created a new volume and logical volume; size 1.5TB. I encrypted the volume and set the remaining 1.4TB within the encrypted volume as the root (f ext4 /).
Here are my questions:
Should I set up a separate Volume / Logical Volume for the 20.2GB Software RAID device being used as a swap area?
Should I encrypt this volume as well if I'm encrypting the ext4 / area?
Finish partitioning and write changes to disk gives an error of:
You have selected the root file system to be stored on an encrypted partition. This feature requires a separate /boot partition on which the kernel and initrd can be stored.
you should go back and setup a /boot partition.
Where does this /boot partition need to be setup? (Should each drive have an extra partition for this before setting up RAID?)
How much space does it need?
Should it be part of LVM?
Should it be encrypted?
I'm setting up software RAID on Ubuntu Server 10.04; specifically RAID10. It's asking for the number of active devices for the array and the number of spare devices.
I know RAID10 is two mirrored pairs; RAID0 for two sets of RAID1 arrays (correct me if I'm wrong).
I would just like to know if all the devices (I'm using 4) are considered active, or if I should be setting it as 2 active and 2 spare.
I'm setting up a backup server with RAID10. The PCI Controller Card is new to the computer so the drivers need to be installed for the OS install to recognize it.
I went through this process previously with Windows Home Server 2008 and ended up slipstreaming the drivers into the install disk; it worked.
Now I'm installing Ubuntu Server 10.04 and wondering how to do the same. When I start up the PC and boot to the Ubuntu Server Installer (from USB), the only drive it finds is the USB (15.6GB).
The hardware RAID10 setup has already been configured, I just need to slipstream the drivers into the Ubuntu Server install.
If I'm wrong here please point me in the right direction; any help with solving this is appreciated.
After procrastinating so long to get a backup system in place, and losing some important data on the way... I've finally decided to start stetting it up.
After searching for Ubuntu specific solutions I found that there are quite a few options out there. I just wanted to see what the most popular solution and why, as well as things that I should be aware of in setting this up; ie. security issues.
Here are my requirements:
If you have suggestions for other OS to manage an automated backup system I may be willing to switch since the OS has not been installed yet.
I have VMware Server working on a server running Ubuntu Server 10.04. After many troubles getting it going, I have one virtual machine running and I'm now stuck with a browser issue.
Firefox won't load VMware Infrastructure Web Access. When going to https://<ip-of-server>:8333 it shows a blank page, the title of which says "Loading..." while it is quite apparent (as with the status bar) that it has finished loading. I have tried this on both Firefox 3.6 and Firefox 4.
Chrome doesn't have the VMware Remote Console Plug-in available, so it isn't even an option. However the VMware Infrastructure Web Access does load on chrome at https://<ip-of-server>:8333.
I was able to install Internet Explorer 7 through PlayOnLinux and I did get IE7 running. When I go to https://<ip-of-server>:8333 it gives me the same certificate error that chrome gives but when I click on "Continue to this website (not recommended)" it just seems to refresh the page... doesn't actually take me past this error to the console.
Right now I'm stuck for browsers to be able to get the VMware Remote Console Plug-in. Firefox would be the best option as I'm not much of a fan of IE7 and Chrome doesn't seem like an option unless VMware does something about it.
If anyone has any ideas please let me know. Any help is appreciated!
EDIT: If you require more information please ask. I'm not sure what else to include.
In my situation, it's for a local build/staging server running ubuntu server. Things I'd like to know are:
Why I should/shouldn't use LVM?
What problems might it cause in terms of either regular server operation or things I might want to do later? (ex. partitioning)
Why I should/shouldn't use encrypted LVM instead of LVM?
What problems might encrypted LVM cause in terms of either regular server operation or things I might want to do later? (ex. partitioning)
For the sake of their reputation, I won't mention the names. But I'll just use:
Business I worked for previously - ABC Web Dev
Hosting company they used - XYZ Hosting
I recently found out that XYZ Hosting had some sort of incident where they ended up losing a lot of their client's data - including ABC Web Dev's. ABC Web Dev was able to recover some of their customer's websites, after pulling them from their local development computers and putting them up on another hosting provider. They ended up losing a lot of clients because of it and their reputation ruined.
I'm starting my own web dev company and I don't want to run into this same issue. I'm planning on using Rackspace but, although they are a great company, according to wikipedia they still have had downtime in their past. I thought it might be a good idea to try to run two providers at once, to ensure that if anything happened in one the websites would still be live because of the other.
I know the websites would have to be pulling from one server at all times, but if there's a way to redirect requests to the second server if the first one is down that would solve my issue.
As a note, we will have a staging environment setup locally which will allow for quick recovery if a provider did have any issues, however I'd like to avoid any downtime at all if possible.
So my questions are:
Has anyone tried running two providers simultaneously?
Would this be considered good practice or am I going too far?
Is there really any way to run two simultaneously where one server acts as a backup?
I've been told the drives have to be identical for RAID 1, but when searching for additional drives in local stores to match:
WD 1TB Caviar Black 7200rpm SATAII w/ 32MB Cache
They say they don't carry those anymore but they do have the same drive w/ 64MB Cache instead. They also told me that RAID 5 was not as finicky as RAID 1 and that it would probably be fine to use the combination of 3 drives with 1 having 32MB cache and 2 having 64MB cache.
Does anyone know this to be true? Does cache have to match when doing RAID 5?
Thanks,
Matt