webminal.org's questions

On Fedora-18, I Installed devstack and when I try to start nova compute I get this error message : Any thoughts on whats going wrong.

$ uname -a
Linux qabot 3.7.2-201.fc18.x86_64 #1 SMP Fri Jan 11 22:16:23 UTC 2013 
x86_64 x86_64 x86_64 GNU/Linux

2014-12-29 18:54:25.206 TRACE nova.openstack.common.threadgroup
File "/opt/stack/nova/nova/virt/libvirt/driver.py", line 4591, in _get_instance_capabilities 2014-12-29 18:54:25.206 TRACE nova.openstack.common.threadgroup
arch.canonicalize(g.arch), 2014-12-29 18:54:25.206 TRACE nova.openstack.common.threadgroup
File "/opt/stack/nova/nova/compute/arch.py", line 160, in canonicalize 2014-12-29 18:54:25.206 TRACE nova.openstack.common.threadgroup
raise exception.InvalidArchitectureName(arch=name) 2014-12-29 18:54:25.206 TRACE nova.openstack.common.threadgroup InvalidArchitectureName: Architecture name 'arm' is not recognised 2014-12-29 18:54:25.206 TRACE nova.openstack.common.threadgroup

Complete logs here

I have created 3 users 'u1','u2','u3'. Now I want to provide access to u1's /home/u1/share directory users u2,u3.

I don't want to create a new common group named 'shared' and add 3 users there. Is it possible use 'u1' group itself ?

So far I tried

#add u2,u3 to group of u1
usermod -a -G u1 u2
usermod -a -G u1 u3

#ensure u1 has group read access
chmod 750 /home/u1

#create new shared dirs
umask 027 && mkdir /home/u1/share

Though

ls -ld /home/u1/share
drwxr-x---. 2 u1 u1 4096 Apr 23 10:11 /home/u1/share

shows read access to group - User u2 can't access this directory.

[u2@ ~]$ ls -l /home/u1/share
ls: cannot access /home/u1/share: Permission denied

Any thoughts on this ? where I'm doing it wrong?

I want to be able to redirect http and https traffic coming in to my central server to different virtual servers.

I have a host (the central server) and four different guests. Each guest hosts a website for a different domain. Each domain name resolves to my host server from outside. And on my host I configured Apache to use VirtualHosts and ProxyPass (& ProxyPassReverse) to redirect requests for port 80 to the correct corresponding guest. This works correctly. Joy

But two of the domains also have ssl configured and are also listening on port 443. And here is where it goes wrong. I get ssl certificate errors, and I'm at a loss how to fix these.

NameVirtualHost 192.168.1.1:80 ServerName www.domain1.nl ProxyPreserveHost On ProxyPass / http://www.domain1.nl/ ProxyPassReverse / http://www.domain1.nl/ ErrorLog logs/domain1-error_log CustomLog logs/domain1-access_log combined

<VirtualHost 192.168.1.1:80>
        ServerName www.domain2.net
    ProxyPreserveHost On
    ProxyPass / http://www.domain2.net/
    ProxyPassReverse / http://www.domain2.net/
    ErrorLog logs/domain2-error_log
    CustomLog logs/domain2-access_log combined
</VirtualHost>
<VirtualHost 192.168.1.1:80>
        ServerName www.domain3.org
    ProxyPreserveHost On
    ProxyPass / http://www.domain3.org/
    ProxyPassReverse / http://www.domain3.org/
    ErrorLog logs/domain3-error_log
    CustomLog logs/doman3-access_log combined
</VirtualHost>


NameVirtualHost 192.168.1.1:443
<VirtualHost 192.168.1.1:443>
        ServerName www.domain2.net
    ProxyPreserveHost On
    ProxyPass / https://www.domain2.net
    ProxyPassReverse / https://www.domain2.net
    ErrorLog logs/domain2-error_log
    CustomLog logs/domain2-access_log combined
</VirtualHost>
<VirtualHost 192.168.1.1:443>
        ServerName www.domain3.org
    ProxyPreserveHost On
    ProxyPass / https://www.domain3.org/
    ProxyPassReverse / https://www.domain3.org/
    ErrorLog logs/domain3-error_log
    CustomLog logs/domain3-access_log combined
</VirtualHost>

As I said, the normal port 80 requests get routed to the correct server just the way I want them. But requests on port 443 lead to a:

ssl_error_rx_record_too_long

Now I tried some things I found on the internet such as adding: SSLProxyEngine On SSLProxyCheckPeerCN on But this either had no effect or made matters worst.

Any thoughts?

I'm using Fedora-16 with ext4.Suddenly with stat command I can see something called "Birth".

# stat history_file1.txt 
  File: `history_file1.txt'
  Size: 8944            Blocks: 24         IO Block: 4096   regular file
Device: 802h/2050d      Inode: 4192        Links: 1
Access: (0600/-rw-------)  Uid: (    0/    root)   Gid: (    0/    root)
Context: unconfined_u:object_r:admin_home_t:s0
Access: 2012-01-18 18:11:10.799900150 +0530
Modify: 2012-01-18 18:11:10.867908793 +0530
Change: 2012-01-18 18:11:10.867908793 +0530
 Birth: -

search man page show instances of birth

%w Time of file birth, human-readable; - if unknown

%W Time of file birth, seconds since Epoch; 0 if unknown

Is this newly added field? where this field is stored with respect to inode ?

I did "man copy_to_user" - It shows some kernel help text. It belongs to section 9. Now I would like to know ,whether is there way to display all function belongs to this section 9.

When I do simple select or insert it says-

Unknown table engine InnoDB

It was working properly just few days back.what it's suddenly gone wrong ?

Is it ok to have C or python program to process html form? Though I worked on php and java stuff.what are the disadvantages or advantage of such approach (using c/python)?

I get this error from web server - is this known issue. There is plenty of questions on google -- but not clear solution.

[error] [client ] ModSecurity: Warning. Operator LT matched 20 at TX:inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/base_rules/modsecurity_crs_60_correlation.conf"] [line "31"] [msg "Inbound Anomaly Score (Total Inbound Score: 5, SQLi=, XSS=): Host header is a numeric IP address"] [hostname ""]

    <VirtualHost 127.0.0.1:444>
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/ca.crt
SSLCertificateKeyFile /etc/pki/tls/private/ca.key
<Directory /home/test/public_beta>
AllowOverride All
</Directory>
DocumentRoot /home/test/public_beta
ServerName me.dev

ProxyPass / http://me.dev:8044
ProxyPassReverse / http://me.dev:8044

What does above mean? Will it redirect request to port 8044 to / or /var/www/html ? whats does Directory and DocumentRoot mean here?

When I login , it asks me "Would you like to enter a security context?"

I have SELinux enabled ..I'm using Fedora 12. How to resolve this?

I have quota enabled for /. I have two users currently. quota applies to both users. When add new users say user3. Editing edquota -u user3 won't work? Do i need to run quotacheck after running edquota?

https://localhost works but https://ipaddress didn't

cat logs/ssl_error_log

[Mon Aug 02 19:04:11 2010] [error] [client 192.168.1.158] (13)Permission denied: access to /ajaxterm denied
[root@space httpd]# cat logs/ssl_access_log
192.168.1.158 - - [02/Aug/2010:19:04:11 +0530] "GET /ajaxterm HTTP/1.1" 403 290
[root@space httpd]# cat logs/ssl_request_log
[02/Aug/2010:19:04:11 +0530] 192.168.1.158 SSLv3 DHE-RSA-CAMELLIA256-SHA "GET /ajaxterm HTTP/1.1" 290 

httpd.conf file

NameVirtualHost *:443
<VirtualHost *:443>
    ServerName localhost
    SSLEngine on
    SSLCertificateFile /etc/pki/tls/certs/ca.crt
    SSLCertificateKeyFile /etc/pki/tls/private/ca.key

    <Directory  /usr/share/ajaxterm >
    Options FollowSymLinks
    AllowOverride None
    Order deny,allow
        Allow from All
        </Directory>
        DocumentRoot  /usr/share/ajaxterm
    DirectoryIndex ajaxterm.html

       ProxyRequests Off
       <Proxy *>
#               Order deny,allow
               Allow from all
       </Proxy>
       ProxyPass /ajaxterm/ http://localhost:8022/
       ProxyPassReverse /ajaxterm/ http://localhost:8022/

    ErrorLog error_log.log
    TransferLog access_log.log
</VirtualHost>

How to fix this ?

    [Sat Jul 31 17:22:20 2010] [error] [client ::1] ModSecurity: Unable to retrieve collection (name "global", key "global"). Use SecDataDir to define data directory first. [hostname "localhost"] [uri "/ajaxterm"] [unique_id "TFQOdH8AAAEAAE-nKKsAAAAG"]
[Sat Jul 31 17:22:20 2010] [error] [client ::1] ModSecurity: Unable to retrieve collection (name "ip", key "::1"). Use SecDataDir to define data directory first. [hostname "localhost"] [uri "/ajaxterm"] [unique_id "TFQOdH8AAAEAAE-nKKsAAAAG"]
[Sat Jul 31 17:22:20 2010] [error] [client ::1] ModSecurity: Unable to retrieve collection (name "global", key "global"). Use SecDataDir to define data directory first. [hostname "localhost"] [uri "/u"] [unique_id "TFQOdH8AAAEAAE-oKZQAAAAH"]
[Sat Jul 31 17:22:20 2010] [error] [client ::1] ModSecurity: Unable to retrieve collection (name "ip", key "::1"). Use SecDataDir to define data directory first. [hostname "localhost"] [uri "/u"] [unique_id "TFQOdH8AAAEAAE-oKZQAAAAH"]

Does does these error mean?

I have ajaxterm running in my localmachine. I want to access it from remote machines (virtual machine)

I mainly followed this http://www.tbaumi.de/blog/?p=585 tutor

https://localhost/ajaxterm

  Colors   GET   Paste     Connection status:404

Here is my httpd.conf file

NameVirtualHost *:443
<VirtualHost *:443>
 SSLEngine on
 SSLCertificateFile /etc/pki/tls/certs/ca.crt
 SSLCertificateKeyFile /etc/pki/tls/private/ca.key
 <Directory  /usr/share/ajaxterm >
        AllowOverride All
        </Directory>
        DocumentRoot  /usr/share/ajaxterm
# ErrorLog error_log.log
 #TransferLog access_log.log
 #ServerName 192.168.1.3
</VirtualHost>

cat /etc/httpd/conf.d/ssl.conf

</VirtualHost>                                  
ProxyRequests Off
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
ProxyPass /ajaxterm http://localhost:8022
ProxyPassReverse /ajaxterm http://localhost:8022


      [Sat Jul 31 17:22:20 2010] [error] [client ::1] ModSecurity: Unable to retrieve   collection (name "global", key "global"). Use SecDataDir to define data directory first.   
[hostname "localhost"] [uri "/ajaxterm"] [unique_id "TFQOdH8AAAEAAE-nKKsAAAAG"]
       [Sat Jul 31 17:22:20 2010] [error] [client ::1] ModSecurity: Unable to retrieve collection (name "ip", key "::1"). Use SecDataDir to define data directory first. [hostname "localhost"] [uri "/ajaxterm"] [unique_id "TFQOdH8AAAEAAE-nKKsAAAAG"]
      [Sat Jul 31 17:22:20 2010] [error] [client ::1] ModSecurity: Unable to retrieve collection (name "global", key "global"). Use SecDataDir to define data directory first. [hostname "localhost"] [uri "/u"] [unique_id "TFQOdH8AAAEAAE-oKZQAAAAH"]
      [Sat Jul 31 17:22:20 2010] [error] [client ::1] ModSecurity: Unable to retrieve     collection (name "ip", key "::1"). Use SecDataDir to define data directory first. [hostname "localhost"] [uri "/u"] [unique_id "TFQOdH8AAAEAAE-oKZQAAAAH"]