Home / user-29833

bear's questions

Martin Hope
bear
Asked: 2020-12-20 16:04:49 +0800 CST
  • 0

I'm using Bamboo as a CI solution which hosts a docker environment (DIND).

It runs a docker container as such:

/usr/bin/docker run 
--volume /home/bamboo/bamboo-agent-home/xml-data/build-dir/INFRA-CFDNS-JOB1:/home/bamboo/bamboo-agent-home/xml-data/build-dir/INFRA-CFDNS-JOB1 

--volume /home/bamboo/bamboo-agent-home/temp:/home/bamboo/bamboo-agent-home/temp 

--detach 

--net=host
 
-name 0c6c0665-e388-46eb-a379-19a52289b4942621443 internals/terraform:0.13.5 
tail -f /dev/null

However, when it runs a script inside the container, on the path /home/bamboo/bamboo-agent-home/xml-data/build-dir/INFRA-CFDNS-JOB1, the operation fails stating that the filesystem is readonly. Doing the operation from the Bamboo runner (in Kubernetes) and the file system isn't read-only.

Permissions of the RO directory:drwxr-xr-x

Mount shows the following:

10.24.71.11:zpool-127609/data/conductor/agents/0 on /home/bamboo/bamboo-agent-home type nfs (rw,relatime,vers=3,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=10.24.71.11,mountvers=3,mountport=34755,mountproto=udp,local_lock=none,addr=10.24.71.11)

Output of docker inspect

$ docker inspect 26fbb042f8aeaa047e4bd4b0d0dec5b3520437ea899ebc3e0d8646737aea032f
[
    {
        "Id": "26fbb042f8aeaa047e4bd4b0d0dec5b3520437ea899ebc3e0d8646737aea032f",
        "Created": "2020-12-20T15:37:35.25732282Z",
        "Path": "tail",
        "Args": [
            "-f",
            "/dev/null"
        ],
        "State": {
            "Status": "running",
            "Running": true,
            "Paused": false,
            "Restarting": false,
            "OOMKilled": false,
            "Dead": false,
            "Pid": 352,
            "ExitCode": 0,
            "Error": "",
            "StartedAt": "2020-12-20T15:37:36.622954493Z",
            "FinishedAt": "0001-01-01T00:00:00Z"
        },
        "Image": "sha256:2a709b31dd875f77cea0c605b7175157d33fe274d532dd1b3c539f1be4659d7b",
        "ResolvConfPath": "/var/lib/docker/containers/26fbb042f8aeaa047e4bd4b0d0dec5b3520437ea899ebc3e0d8646737aea032f/resolv.conf",
        "HostnamePath": "/var/lib/docker/containers/26fbb042f8aeaa047e4bd4b0d0dec5b3520437ea899ebc3e0d8646737aea032f/hostname",
        "HostsPath": "/var/lib/docker/containers/26fbb042f8aeaa047e4bd4b0d0dec5b3520437ea899ebc3e0d8646737aea032f/hosts",
        "LogPath": "/var/lib/docker/containers/26fbb042f8aeaa047e4bd4b0d0dec5b3520437ea899ebc3e0d8646737aea032f/26fbb042f8aeaa047e4bd4b0d0dec5b3520437ea899ebc3e0d8646737aea032f-json.log",
        "Name": "/0c6c0665-e388-46eb-a379-19a52289b4942621443",
        "RestartCount": 0,
        "Driver": "overlay2",
        "Platform": "linux",
        "MountLabel": "",
        "ProcessLabel": "",
        "AppArmorProfile": "",
        "ExecIDs": null,
        "HostConfig": {
            "Binds": [
                "/home/bamboo/bamboo-agent-home/temp:/home/bamboo/bamboo-agent-home/temp",
                "/home/bamboo/bamboo-agent-home/xml-data/build-dir/INFRA-CFDNS-JOB1:/home/bamboo/bamboo-agent-home/xml-data/build-dir/INFRA-CFDNS-JOB1"
            ],
            "ContainerIDFile": "",
            "LogConfig": {
                "Type": "json-file",
                "Config": {}
            },
            "NetworkMode": "host",
            "PortBindings": {},
            "RestartPolicy": {
                "Name": "no",
                "MaximumRetryCount": 0
            },
            "AutoRemove": false,
            "VolumeDriver": "",
            "VolumesFrom": null,
            "CapAdd": null,
            "CapDrop": null,
            "CgroupnsMode": "host",
            "Dns": [],
            "DnsOptions": [],
            "DnsSearch": [],
            "ExtraHosts": null,
            "GroupAdd": null,
            "IpcMode": "private",
            "Cgroup": "",
            "Links": null,
            "OomScoreAdj": 0,
            "PidMode": "",
            "Privileged": false,
            "PublishAllPorts": false,
            "ReadonlyRootfs": false,
            "SecurityOpt": null,
            "UTSMode": "",
            "UsernsMode": "",
            "ShmSize": 67108864,
            "Runtime": "runc",
            "ConsoleSize": [
                0,
                0
            ],
            "Isolation": "",
            "CpuShares": 0,
            "Memory": 0,
            "NanoCpus": 0,
            "CgroupParent": "",
            "BlkioWeight": 0,
            "BlkioWeightDevice": [],
            "BlkioDeviceReadBps": null,
            "BlkioDeviceWriteBps": null,
            "BlkioDeviceReadIOps": null,
            "BlkioDeviceWriteIOps": null,
            "CpuPeriod": 0,
            "CpuQuota": 0,
            "CpuRealtimePeriod": 0,
            "CpuRealtimeRuntime": 0,
            "CpusetCpus": "",
            "CpusetMems": "",
            "Devices": [],
            "DeviceCgroupRules": null,
            "DeviceRequests": null,
            "KernelMemory": 0,
            "KernelMemoryTCP": 0,
            "MemoryReservation": 0,
            "MemorySwap": 0,
            "MemorySwappiness": null,
            "OomKillDisable": false,
            "PidsLimit": null,
            "Ulimits": null,
            "CpuCount": 0,
            "CpuPercent": 0,
            "IOMaximumIOps": 0,
            "IOMaximumBandwidth": 0,
            "MaskedPaths": [
                "/proc/asound",
                "/proc/acpi",
                "/proc/kcore",
                "/proc/keys",
                "/proc/latency_stats",
                "/proc/timer_list",
                "/proc/timer_stats",
                "/proc/sched_debug",
                "/proc/scsi",
                "/sys/firmware"
            ],
            "ReadonlyPaths": [
                "/proc/bus",
                "/proc/fs",
                "/proc/irq",
                "/proc/sys",
                "/proc/sysrq-trigger"
            ]
        },
        "GraphDriver": {
            "Data": {
                "LowerDir": "/var/lib/docker/overlay2/6247c08730bf6dfb7634c22d6650da79a941c6c6a2ad4e9c991feef19b2ab419-init/diff:/var/lib/docker/overlay2/f7ef8ae82689487bb85524d1bbd5fd0b1f526af1d0c3d718f4b7ec72a0f143f8/diff:/var/lib/docker/overlay2/278687b3bc49308491343d07768291489402b3ff490d17c397143a143e45f42c/diff:/var/lib/docker/overlay2/43946435acfcba389353825c00e86c37a0d606b828ca64004a6d1a108b34bbbd/diff:/var/lib/docker/overlay2/891133274fba0c06b2c58ab8f801f673a25ae41113de2acd4e8c9a2f21ebd447/diff",
                "MergedDir": "/var/lib/docker/overlay2/6247c08730bf6dfb7634c22d6650da79a941c6c6a2ad4e9c991feef19b2ab419/merged",
                "UpperDir": "/var/lib/docker/overlay2/6247c08730bf6dfb7634c22d6650da79a941c6c6a2ad4e9c991feef19b2ab419/diff",
                "WorkDir": "/var/lib/docker/overlay2/6247c08730bf6dfb7634c22d6650da79a941c6c6a2ad4e9c991feef19b2ab419/work"
            },
            "Name": "overlay2"
        },
        "Mounts": [
            {
                "Type": "bind",
                "Source": "/home/bamboo/bamboo-agent-home/xml-data/build-dir/INFRA-CFDNS-JOB1",
                "Destination": "/home/bamboo/bamboo-agent-home/xml-data/build-dir/INFRA-CFDNS-JOB1",
                "Mode": "",
                "RW": true,
                "Propagation": "rprivate"
            },
            {
                "Type": "bind",
                "Source": "/home/bamboo/bamboo-agent-home/temp",
                "Destination": "/home/bamboo/bamboo-agent-home/temp",
                "Mode": "",
                "RW": true,
                "Propagation": "rprivate"
            }
        ],
        "Config": {
            "Hostname": "kubernetes-agent-pfr8v",
            "Domainname": "",
            "User": "",
            "AttachStdin": false,
            "AttachStdout": false,
            "AttachStderr": false,
            "Tty": false,
            "OpenStdin": false,
            "StdinOnce": false,
            "Env": [
                "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
            ],
            "Cmd": [
                "tail",
                "-f",
                "/dev/null"
            ],
            "Image": "internals/terraform:0.13.5",
            "Volumes": null,
            "WorkingDir": "",
            "Entrypoint": null,
            "OnBuild": null,
            "Labels": {
                "com.hashicorp.terraform.version": "0.13.5"
            }
        },
        "NetworkSettings": {
            "Bridge": "",
            "SandboxID": "098b24e38ccc775cef09cab73f189c92ac489fc031e7f4defd02d17e15e43e3d",
            "HairpinMode": false,
            "LinkLocalIPv6Address": "",
            "LinkLocalIPv6PrefixLen": 0,
            "Ports": {},
            "SandboxKey": "/var/run/docker/netns/default",
            "SecondaryIPAddresses": null,
            "SecondaryIPv6Addresses": null,
            "EndpointID": "",
            "Gateway": "",
            "GlobalIPv6Address": "",
            "GlobalIPv6PrefixLen": 0,
            "IPAddress": "",
            "IPPrefixLen": 0,
            "IPv6Gateway": "",
            "MacAddress": "",
            "Networks": {
                "host": {
                    "IPAMConfig": null,
                    "Links": null,
                    "Aliases": null,
                    "NetworkID": "824095738e152e8b2da3ef5e2e958ca70881672f8e2e9eb8d7c52f587b63353c",
                    "EndpointID": "3c2d497790b255b4c0ea9af0ac836e64a5e2406576e4f4788ff04ff23efeab0c",
                    "Gateway": "",
                    "IPAddress": "",
                    "IPPrefixLen": 0,
                    "IPv6Gateway": "",
                    "GlobalIPv6Address": "",
                    "GlobalIPv6PrefixLen": 0,
                    "MacAddress": "",
                    "DriverOpts": null
                }
            }
        }
    }
]

Can someone think of my it's coming up as read-only?

docker
Martin Hope
bear
Asked: 2019-12-09 14:32:48 +0800 CST
  • 0

I've an on-prem, publicly exposed k8s node, and have configured metallb as the LB provider with a Traefik 2.0 Layer 4 LB.

I'm trying to figure out why the Traefik LB service has been assigned NodePorts:

kubectl describe svc traefik
Name:                     traefik
Namespace:                default
Labels:                   <none>
Annotations:              metallb.universe.tf/address-pool: default
Selector:                 app=traefik
Type:                     LoadBalancer
IP:                       10.102.106.163
LoadBalancer Ingress:     x.x.x.x
Port:                     web  80/TCP
TargetPort:               80/TCP
NodePort:                 web  30481/TCP
Endpoints:                192.168.152.4:80
Port:                     admin  8080/TCP
TargetPort:               8080/TCP
NodePort:                 admin  30839/TCP
Endpoints:                192.168.152.4:8080
Port:                     websecure  443/TCP
TargetPort:               443/TCP
NodePort:                 websecure  30647/TCP
Endpoints:                192.168.152.4:443
Session Affinity:         None
External Traffic Policy:  Cluster
Events:
  Type    Reason        Age                   From                Message
  ----    ------        ----                  ----                -------
  Normal  IPAllocated   53m                   metallb-controller  Assigned IP "x.x.x.x"
  Normal  nodeAssigned  2m21s (x13 over 53m)  metallb-speaker     announcing from node "x-lp-xxx-xx-xxxxx"

In what cases do LB services get assigned NodePorts?

kubernetes
Martin Hope
bear
Asked: 2017-02-18 16:51:03 +0800 CST
  • 0

I currently have a CentOS 7 that appears to have been incorrectly partitioned, such that I've run out of space in /root. In normal circumstances, I'd migrated the roles running on this box and fix it. I sadly can't do that at this moment in time.

# df -h
Filesystem      Size  Used Avail Use% Mounted on
/dev/root        20G   16G  2.4G  87% /
devtmpfs         16G     0   16G   0% /dev
tmpfs            16G     0   16G   0% /dev/shm
tmpfs            16G  1.6G   15G  10% /run
tmpfs            16G     0   16G   0% /sys/fs/cgroup
/dev/md3        1.8T   52G  1.7T   3% /home
tmpfs           3.2G     0  3.2G   0% /run/user/1001
tmpfs           3.2G     0  3.2G   0% /run/user/992
tmpfs           3.2G     0  3.2G   0% /run/user/1002
tmpfs           6.0G   24K  6.0G   1% /mnt/nginxramdisk
tmpfs           3.2G     0  3.2G   0% /run/user/995

Obviously, I need to fix /dev/root.

Ideally, I'd take some space from /dev/md3, however, I am not sure if I can.

Looking at fstab, they are physical and ext4, so doing things online may be difficult.

<file system>   <mount point>   <type>  <options>   <dump>  <pass>
/dev/md2    /   ext4    errors=remount-ro   0   1
/dev/md3    /home   ext4    defaults    1   2
/dev/sda4   swap    swap    defaults    0   0
/dev/sdb4   swap    swap    defaults    0   0
proc        /proc   proc    defaults        0   0
sysfs       /sys    sysfs   defaults        0   0
tmpfs       /dev/shm    tmpfs   defaults    0   0
devpts      /dev/pts    devpts  defaults    0   0

Any ideas on how I can increase the size of /root?

Is it feasible for me to unmout /home and resize it with resize2fs to shrink it, then try to grow /root having brought it back online, and shrunk it?

As requested, 

du -sh /*
233M    /app
0   /bin
132M    /boot
0   /dev
318M    /etc
49G /home
0   /lib
0   /lib64
16K /lost+found
4.0K    /media
8.0K    /mnt
2.2G    /opt
du: cannot access ‘/proc/2212/task/2212/fd/4’: No such file or directory
du: cannot access ‘/proc/2212/task/2212/fdinfo/4’: No such file or directory
du: cannot access ‘/proc/2212/fd/4’: No such file or directory
du: cannot access ‘/proc/2212/fdinfo/4’: No such file or directory
0   /proc
273M    /root
1.6G    /run
0   /sbin
4.0K    /srv
0   /sys
1.1M    /tmp
4.1G    /usr
7.2G    /var
disk-space-utilization partition centos7
Martin Hope
bear
Asked: 2015-02-03 10:56:51 +0800 CST
  • 0

I am setting up Postfix with Dovecot for a mail solution. When I try to telnet localhost 25 the connection closes.

The error seen in the log is:

postfix/smtpd[22958]: initializing the server-side TLS engine
postfix/smtpd[22958]: connect from localhost[::1]
postfix/smtpd[22958]: fatal: no SASL authentication mechanisms
postfix/master[32651]: warning: process /usr/libexec/postfix/smtpd pid 22958 exit status 1
postfix/master[32651]: warning: /usr/libexec/postfix/smtpd: bad command startup -- throttling

The server is a CentOS 7 server

Linux <redacted> 3.10.0-123.8.1.el7.x86_64 #1 SMP Mon Sep 22 19:06:58 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux

Here's an excerpt from postconf -n

postconf: warning: /etc/postfix/main.cf: undefined parameter: virtual_mailbox_limit_maps
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
dovecot_destination_recipient_limit = 1
html_directory = no
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
message_size_limit = 30720000
mydestination = $myhostname, localhost, localhost.localdomain
myhostname = <redacted>
mynetworks = 127.0.0.0/8
newaliases_path = /usr/bin/newaliases.postfix
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES
sample_directory = /usr/share/doc/postfix-2.10.1/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated,     reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_tls_cert_file = /etc/pki/dovecot/certs/dovecot.pem
smtpd_tls_key_file = /etc/pki/dovecot/private/dovecot.pem
smtpd_tls_loglevel = 4
smtpd_use_tls = yes
unknown_local_recipient_reject_code = 550
virtual_alias_domains =
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf
virtual_gid_maps = static:5000
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
virtual_transport = dovecot
virtual_uid_maps = static:5000
postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_create_maildirsize=yes
postconf: warning: /etc/postfix/main.cf: unused parameter: virtual_maildir_extended=yes

and from doveconf -n

# 2.2.10: /etc/dovecot/dovecot.conf
# OS: Linux 3.10.0-123.8.1.el7.x86_64 x86_64 CentOS Linux release 7.0.1406 (Core)  ext4
auth_mechanisms = plain login
log_timestamp = "%Y-%m-%d %H:%M:%S "
mail_location = maildir:/home/vmail/%d/%n/Maildir
namespace {
  inbox = yes
  location =
  prefix = INBOX.
  separator = .
  type = private
}
passdb {
  args = /etc/dovecot-sql.conf
  driver = sql
}
protocols = imap pop3
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
  unix_listener auth-master {
    mode = 0660
    user = vmail
  }
  user = root
}
ssl_cert = /etc/pki/dovecot/certs/dovecot.pem
ssl_key = /etc/pki/dovecot/private/dovecot.pem
userdb {
  args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes
  driver = static
}
protocol lda {
  auth_socket_path = /var/run/dovecot/auth-master
  log_path = /home/vmail/dovecot-deliver.log
  postmaster_address = [email protected]
}
protocol pop3 {
  pop3_uidl_format = %08Xu%08Xv
}

And for rpm -qa | grep sasl

cyrus-sasl-md5-2.1.26-17.el7.x86_64
cyrus-sasl-gssapi-2.1.26-17.el7.x86_64
libgsasl-1.8.0-2.el7.x86_64
cyrus-sasl-ldap-2.1.26-17.el7.x86_64
cyrus-sasl-lib-2.1.26-17.el7.x86_64
cyrus-sasl-plain-2.1.26-17.el7.x86_64
cyrus-sasl-sql-2.1.26-17.el7.x86_64
cyrus-sasl-gs2-2.1.26-17.el7.x86_64
cyrus-sasl-2.1.26-17.el7.x86_64
cyrus-sasl-scram-2.1.26-17.el7.x86_64
cyrus-sasl-devel-2.1.26-17.el7.x86_64

and ps ax | grep sasl, shows authsasld is running?

23280 ?        Ss     0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam
23281 ?        S      0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam
23282 ?        S      0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam
23283 ?        S      0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam
23284 ?        S      0:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam

Can anyone see anything wrong with my configuration?

postfix
Martin Hope
bear
Asked: 2012-10-12 15:29:51 +0800 CST
  • 1

I'm trying to run Fisheye behind a proxy. So far, I've managed to get Jira and Stash to work behind the proxy, but not Fisheye.

Here's my config file in Nginx:

server {

listen   80;

server_name  dev.int.com;

access_log off;

location / {

proxy_pass http://IP:8080;

proxy_set_header    Host            $host;

proxy_set_header    X-Real-IP       $remote_addr;

proxy_set_header    X-Forwarded-for $remote_addr;

port_in_redirect off;

proxy_redirect   http://IP:8080/jira  /;

proxy_connect_timeout 300;

}



location ~ ^/stash {

proxy_pass http://IP:7990;

proxy_set_header    Host            $host;

proxy_set_header    X-Real-IP       $remote_addr;

proxy_set_header    X-Forwarded-for $remote_addr;

port_in_redirect off;

proxy_redirect   http://IP:7990/  /stash;

proxy_connect_timeout 300;

}



location ~ ^/crucible {

proxy_pass http://IP:8060;

proxy_set_header    Host            $host;

proxy_set_header    X-Real-IP       $remote_addr;

proxy_set_header    X-Forwarded-for $remote_addr;

port_in_redirect off;

proxy_redirect   http://IP:8060/  /crucible;

proxy_connect_timeout 300;

}



error_page   500 502 503 504  /50x.html;

location = /50x.html {

root   /usr/local/nginx/html;

}

}

and in Fisheye:

<web-server site-url="http://dev.int.com/crucible" context="/crucible">

    <http bind="http://dev.int.com/" proxy-port="80" proxy-scheme="http" proxy-host="dev.int.com/crucible"/>

</web-server>

However, it just isn't pushing stuff out properly, and is a Fisheye problem --> When I visit /crucible, it does show the Crucible page, however, it doesn't load any page resources or ajax. Trying to login takes me to /login, so it's apparent that Fisheye is still on / for its context path despite its config file. I have restarted both Fisheye and Nginx server to no avail. Any guidance would be appreciated :)

nginx
Martin Hope
bear
Asked: 2012-10-12 14:05:28 +0800 CST
  • 0

I'm trying to configure Nginx to proxy stuff on a subdomain: dev.int.com

I want dev.int.com to be proxied to IP:8080, and dev.int.com/stash to be proxied to IP:7990

Here's my current config file

server {
listen   80;
server_name  dev.int.com;
access_log off;
location / {
    proxy_pass http://IP:8080;
    proxy_set_header    Host            $host;
    proxy_set_header    X-Real-IP       $remote_addr;
    proxy_set_header    X-Forwarded-for $remote_addr;
    port_in_redirect off;
    proxy_redirect   http://IP:8080/jira  /;
    proxy_connect_timeout 300;
    location ~ ^/stash {
        proxy_pass http://IP:7990;
        proxy_set_header    Host            $host;
        proxy_set_header    X-Real-IP       $remote_addr;
        proxy_set_header    X-Forwarded-for $remote_addr;
        port_in_redirect off;
        proxy_redirect   http://IP:7990/  /stash;
        proxy_connect_timeout 300;
    }
}

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
    root   /usr/local/nginx/html;
    }
}

However, /stash redirects are going to /. What am I doing wrong?

nginx
Martin Hope
bear
Asked: 2012-05-18 12:50:30 +0800 CST
  • 1

I'm getting a HTTP 403, with permission error 13 (file system?) using Apache (bundled with Zend Server) on OS X 10.7.4.

[Thu May 17 16:40:58 2012] [error] [client ::1] (13)Permission denied: access to / denied

Here's my config in httpd-vhosts.conf

<VirtualHost *:81>
  DocumentRoot "/Users/shamil/Documents/Sites/shamil_blog"

  ServerName blog.shamil.local
  ServerAlias blog.shamil.local
  ErrorLog "logs/shamil_blog-error_log"
  CustomLog "logs/shamil_blog-access_log" common

  DirectoryIndex index.php
  <Directory /Users/shamil/Documents/Sites/shamil_blog>
      Options +Indexes +FollowSymLinks +ExecCGI
      DirectoryIndex index.php
      AllowOverride All
      Order allow,deny
      Allow from all
  </Directory>
</VirtualHost>

I have set the appropriate permissions on the shamil_blog folder:

 drwxrwxrwx  25 shamil  staff   850 May 17 16:01 shamil_blog

and on the Sites folder:

drwxrwxrwx   4 shamil  staff    136 May 17 15:59 Sites

So, why am I doing wrong?

mac-osx apache-2.2 permissions zend-server-ce
Martin Hope
bear
Asked: 2012-02-16 15:11:37 +0800 CST
  • 3

I'm trying to write IPtables rules,but I'm finding it difficult.

I've got:

iptables -A FORWARD -m state –state RELATED,ESTABLISHED -j ACCEPT

which fails with Bad argument `–state'

and 

iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -j SNAT –to server.ip

which fails with Bad argument `–to'

How do I rectify the rules?

iptables
Martin Hope
bear
Asked: 2011-10-23 15:40:47 +0800 CST
  • 1

I've got an awkward setup here.

I've got a domain controller (2008 R2 STD) in the United States, and a Hyper-V 2008 R2 server (Raw Hyper-V server) and a Windows 7 workstation, all connected to a domain.

The Hyper-V server and the Windows 7 workstation are within the same network perimeter behind the same router.

So, all servers and clients can see each other. Good. However, I'm having trouble using the Hyper-V Manager from the client workstation to manage the Hyper-V server. I'm getting error:

You do not have the required permission to complete this task. Please contact the administrator of the authorisation policy for the computer "HYPERV-TEST".

What is causing this and how can I fix it?

hyper-v windows-server-2008-r2 hyper-v-server-2008-r2
Martin Hope
bear
Asked: 2010-03-02 10:34:46 +0800 CST
  • 0

I've installed PHP 5.2 with Web PI on Windows Server 2008. This server also houses the Exchange server that I use for mail.

The script I'm using uses PHP's mail() function to send mail.

When using the function, mail is delivered when the recipient is within the domain, however if recipient is outside, it fails to deliver and mail returns an error.

I can't seem to find anything in the log files, so I am assuming it is an Exchange 2010 error.

php email exchange-2010
Martin Hope
bear
Asked: 2009-12-28 17:40:16 +0800 CST
  • 0

I seem to be having a lot of issues with my htaccess files

So, in my publuc_html, I have a CMS, with has rewrites enabled, by this:

RewriteRule ^([A-Za-z\-/]+)$ index.php?do=$1 [QSA]
RewriteCond %{SERVER_PORT} 80

and in the public_html folder, I have a folder called forums, which is used by subdomain, forums.domain.com. The forum operated on vBSEO and this is the htaccess contents:

RewriteCond %{REQUEST_URI} !(admincp/|modcp/|cron|vbseo_sitemap)
RewriteRule ^((forums|archive/)?(.*\.php(/.*)?))$ vbseo.php [L,QSA]

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !/(admincp|modcp|clientscript|cpstyles|images|forums)/
RewriteRule ^(.+)$ vbseo.php [L,QSA]

How do I work this issue out? When I visit the subdomain, I am directed to http://www.domain.com/forums?

.htaccess