hfranco's questions

I have a 3ware RAID controller running a RAID-10.

I have a disk that currently has a SMART-FAILURE. I've ran a /c0 rescan and the Status will change to OK then back to SMART-FAILURE

> /c0 show

Unit  UnitType  Status         %RCmpl  %V/I/M  Stripe  Size(GB)  Cache  AVrfy
------------------------------------------------------------------------------
u0    RAID-1    OK             -       -       -       931.312   RiW    OFF
u1    RAID-10   OK             -       -       256K    3725.25   RiW    OFF
u3    SPARE     OK             -       -       -       931.505   -      OFF

VPort Status         Unit Size      Type  Phy Encl-Slot    Model
------------------------------------------------------------------------------
p0    OK             u0   931.51 GB SATA  0   -            ST1000DM005 HD103SJ
p1    OK             u0   931.51 GB SATA  1   -            ST1000DM005 HD103SJ
p3    OK             u1   931.51 GB SATA  3   -            ST1000DM005 HD103SJ
p4    OK             u1   931.51 GB SATA  4   -            ST1000DM005 HD103SJ
p5    OK             u1   931.51 GB SATA  5   -            ST1000DM005 HD103SJ
p6    OK             u1   931.51 GB SATA  6   -            ST1000DM005 HD103SJ
p7    OK             u1   931.51 GB SATA  7   -            ST1000DM005 HD103SJ
p8    SMART-FAILURE  u1   931.51 GB SATA  8   -            ST1000DM005 HD103SJ
p9    OK             u1   931.51 GB SATA  9   -            ST1000DM005 HD103SJ
p10   OK             u1   931.51 GB SATA  10  -            ST1000DM005 HD103SJ
p11   OK             u3   931.51 GB SATA  11  -            ST1000DM005 HD103SJ

I've done some research on how to replace a disk but can't find any documentation that I've found doesn't go into how to replace the disk with a spare unit.

How do I replace the p8 disk with the u3 unit?

We're currently running rsyslog version 7.4.7. The current format in our log file is currently:

2017-10-19T14:06:01.123456-04:00 server-1 systemd: Created slice user-9999.slice.

This format includes high precision formatting (six zeros). How do I create a template or configure rsyslog to include just three zeros:

2017-10-19T14:06:01.123-04:00 server-1 systemd: Created slice user-9999.slice.

I currently have a Cisco WLC 2112 and several 1242 lightweight AP's.

Is there any way I can download the IOS image either from the AP's themselves or through the controller?

I'm trying to figure out how to redirect one URL to one location:

http://mydomain.com/admin to http://mydomain.com/admin

And have all other requests from

http://mydomain.com point to http://myotherdomain.com

So essentially all other requests will redirect to myotherdomain.com except for http://mydomain.com/admin

I've tried setting up a Redirect rule in Apache but I'm not having any luck. I get a "The page isn't redirecting properly" message.

<VirtualHost *:80>
    ServerName mydomain.com
    ServerAlias www.mydomain.com
DocumentRoot /opt/www/mydomain.com/
Redirect /admin http://mydomain.com/admin
Redirect / http://www.myotherdomain.com

</VirtualHost>

Is there any way to install packages through yum from a file?

Something like:

yum -f packages.txt

I couldn't find anything in the man pages.

packages.txt would contain something like:

bash
bc
binutils
bzip2
bzip2-libs
ca-certificates
cairo

Is there anyway I can get the package list off of a live Linux box and put that into a kickstart?

Edit: Sorry...This is on a Fedora box

I need to gather statistics on how long it takes to retrieve a web page once every couple of seconds.

I can do a

time wget --spider http://www.google.com/index.html

(spider will not download the page, just check that they are there)

with this command I can see how long it took to run the command and the status of the page (200 OK, 404 NOT FOUND, etc)

The issue I'm having is that I need to keep track of the statistics. So if I hit a web page every couple of seconds and every so often I get a 404 I need to see those stats.

I'm having an issue with my Mac where it's freezing on the initial login.

How can I enable ssh without going into system preferences, etc.

Dovecot provides a master login (a master user name and password that can log into all user accounts).

I've setup Dovecot as per: http://wiki1.dovecot.org/Authentication/MasterUsers

Here's my problem.

The only way I can authenticate successfully is if I try to authenticate through telnet twice.

$ telnet mail01.server.com 143
Trying 10.10.10.10...
Connected to mail01.server.com.
Escape character is '^]'.
* OK Dovecot ready.
1 login [email protected]*master my_password
1 NO Authentication failed.
1 login [email protected]*master my_password
1 OK Logged in.

imapsync (the tool I need to use to migrate over emails from Dovecot to Zimbra) won't work.

    $ imapsync --nosyncacls --syncinternaldates --host1 mail01.server.com --user1 [email protected]*master --authmech1 PLAIN --password1 my_password --host2 mail02.server.com --user2 [email protected] --authmech2 PLAIN --ssl2 --password2 user2_password
$RCSfile: imapsync,v $ $Revision: 1.286 $ $Date: 2009/07/24 15:53:04 $ 
Here is a [linux] system (Linux mylinuxbox 2.6.32-30-generic #59-Ubuntu SMP Tue Mar 1 21:30:21 UTC 2011 i686)
with perl 5.10.1
Mail::IMAPClient  3.21
IO::Socket        1.31
IO::Socket::SSL   
Digest::MD5       2.39
Digest::HMAC_MD5  
Term::ReadKey     2.30
Date::Manip       
 and the module Mail::IMAPClient version used here is 3.21
Command line used:
/usr/bin/imapsync --nosyncacls --syncinternaldates --host1 mail01.server.com --user1 user@server*master --authmech1 PLAIN --password1 MASKED --host2 mail02.server.com --user2 [email protected] --authmech2 PLAIN --ssl2 --password2 MASKED
Turned ON syncinternaldates, will set the internal dates (arrival dates) on host2 same as host1.
TimeZone:[america/new_york]
Will try to use PLAIN authentication on host1
Will try to use PLAIN authentication on host2
From imap server [mail01.server.com] port [143] user [[email protected]*master]
To   imap server [mail02.server.com] port [993] user [[email protected]]
Banner: * OK Dovecot ready.
Host mail01.server.com says it has CAPABILITY for AUTHENTICATE PLAIN
Error login: [mail01.server.com] with user [user@server*master] auth [PLAIN]: 2 NO Authentication failed.
Error login: [mail01.server.com] with user [user@server*master] auth [PLAIN]: 2 NO Authentication failed.

If I try without the master user it works. Please help.

I need to create passwords on the fly from a script.

Unfortunately I cannot use applications that utilize /dev/urandom because of the time it takes to create the password.

Are there other applications that I can use to create passwords on the fly?

I have a script that works okay on my dev server but when I try to run it in production doesn't work.

I'm getting the following error which I can't figure out:

./test.sh: line 5: UID: readonly variable

Any suggestions?

#!/bin/sh

    while read inputline
    do
     UID="$(echo $inputline | cut -d '"' -f4)"
     PASSWORD="$(echo $inputline | cut -d '"' -f8)"
     FIRST="$(echo $inputline | cut -d '"' -f6 | cut -d ' ' -f1)"
     LAST="$(echo $inputline | cut -d '"' -f6 | cut -d ' ' -f2)"    

    zmprov createAccount $UID $PASSWORD displayName "$FIRST $LAST" givenName $FIRST sn $LAST    

    done < company.csv

Does Dovecot allow me to authenticate as an administrator for all user accounts? Essentially log into any account as an administrator.

I'm trying to setup Zimbra and I would like to migrate our IMAP from Dovecot -> Zimbra. In order to do so I would have to have a manager or administrator login.

I'm trying to monitor a specific script that runs on my box with snmp. The script runs multiple times with multiple paramaters like so

/usr/bin/perl /opt/data/script.pl -m test

or

/usr/bin/perl /opt/data/script.pl -d

I've tried utlizing the --string paramater with check_snmp but I haven't had any luck.

./check_snmp -H server01 -C public --string="/usr/bin/perl /opt/data/script.pl -m test"

This is what the script looks like when I do a snmpwalk:

HOST-RESOURCES-MIB::hrSWRunParameters.675 = STRING: "/opt/data/script.pl -m test"

Obviously I can't monitor the OID since it's specific to the PID. So basically -o HOST-RESOURCES-MIB::hrSWRunParameters.675 = PID of 675

I purchased a 871W ISR for a small business and want to know what's best use practice when setting up security for this type of router.

At the present time I have a static IP assigned to it and can SSH into it from the outside. Is this safe? If not should I setup VPN to access it from the outside? Is there a VPN how-to (or a link) where I can learn how to set it up.

I was also thinking about blocking icmp from the outside. Is this even necessary if I setup a VPN?

Any help is greatly appreciated.

I'm trying to configure external LDAP authentication from my LDAP box through Zimbra. Both servers are running on CentOS.

The Zimbra wiki has documentation but it's still leaving me puzzled.

http://wiki.zimbra.com/wiki/LDAP_Authentication#Configuring_external_LDAP_authentication

This is what my ldapsearch consist of:

ldapsearch -x -D cn=Manager,dc=domain,dc=com -y pass -H ldap://ldap.domain.com -b dc=domain,dc=com '(&(objectClass=JammMailAlias)([email protected]))'

Any idea what the right filter would be? I'm pulling my hair trying to figure this out.

Here's the output of the ldapsearch above:

$ ldapsearch -x -D cn=Manager,dc=domain,dc=com -y pass -H ldap://ldap.domain.com -b dc=domain,dc=com '(&(objectClass=JammMailAlias)([email protected]))'
# extended LDIF
#
# LDAPv3
# base <dc=domain,dc=com> with scope subtree
# filter: (&(objectClass=JammMailAlias)([email protected]))
# requesting: ALL
#

# [email protected], domain.com, hosting, domain.com
dn: [email protected],jvd=domain.com,o=hosting,dc=domain,dc=com
objectClass: JammMailAlias
objectClass: top
mail: [email protected]
cn: Marketing Team
accountActive: TRUE
maildrop: bob
maildrop: john
maildrop: amy

lastChange: 1277317208

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

Here's an ldapsearch for a user:

$ ldapsearch -x -D cn=Manager,dc=domain,dc=com -y pass -H ldap://ldap.domain.com -b dc=domain,dc=com '(&(objectClass=JammMailAccount)([email protected]))'
# extended LDIF
#
# LDAPv3
# base <dc=domain,dc=com> with scope subtree
# filter: (&(objectClass=JammMailAccount)([email protected]))
# requesting: ALL
#

# [email protected], domain.com, hosting, domain.com
dn: [email protected],jvd=domain.com,o=hosting,dc=domain,dc=com
objectClass: JammMailAccount
objectClass: top
mail: [email protected]
cn: Hank Franco
homeDirectory: /home/domains/domain.com/hfranco
delete: FALSE
lastChange: 1218909596
mailbox: domain.com/hfranco/
userPassword:: e01ENX1zWlQzcEk4M2FNOFV3U3gzK0NqaUtRPT0=
accountActive: TRUE

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

I'm trying to setup dependencies for a router and several servers. What I want to do is setup the router as the Master Host so if the router fails all other services on the servers won't alert.

Unfortunately this is easier said than done. Is there an easy way to setup service dependencies for all services on a server for a Master Host (or my router)?

Nagios has some documentation but it will be extremely time consuming to add a single service dependency definition for every service.

http://nagios.sourceforge.net/docs/3_0/objectdefinitions.html#servicedependency

I created a script that monitors a Cisco Router interface.

./check_cisco Router1 Serial0/0/0
Interface Serial0/0/0 is up for Router1

I would like to stop all other notifications if a critical or warning alert is trigged for this alert. Not really sure how to do this.

When is it necessary to setup a pool of more than one address?

So if I have this ip pool range:

ip nat pool demo 72.32.11.65 72.32.11.66 netmask 255.255.255.252

What's the difference if I just have one address?

ip nat pool demo 72.32.11.65 72.32.11.65 netmask 255.255.255.252

I need to recover files that have been deleted.

My scenario:

I have a rsync script that runs at 9PM and mirrors everything from server1 directory to another directory on backup server2.

A couple of files have been accidentally deleted from server1.

How do I recover those files from server1 with rsync?