DanielGibbs's questions

I have a machine running Ubuntu 14.04.3 LTS that is deployed via Ansible. I've got PHP 7 installed using Ondřej Surý's PPA for PHP.

$ dpkg -l | grep -i php
ii  libapache2-mod-php7.0            7.0.3-2+deb.sury.org~trusty+1    amd64        server-side, HTML-embedded scripting language (Apache 2 module)
ii  php-common                       1:36+deb.sury.org~trusty+1       all          Common files for PHP packages
ii  php7.0                           7.0.4-6+deb.sury.org~trusty+1    all          server-side, HTML-embedded scripting language (metapackage)
ii  php7.0-cli                       7.0.0-5+deb.sury.org~trusty+1    amd64        command-line interpreter for the PHP scripting language
ii  php7.0-common                    7.0.4-6+deb.sury.org~trusty+1    amd64        documentation, examples and common module for PHP
ii  php7.0-fpm                       7.0.4-6+deb.sury.org~trusty+1    amd64        server-side, HTML-embedded scripting language (FPM-CGI binary)
ii  php7.0-json                      7.0.0-5+deb.sury.org~trusty+1    amd64        JSON module for PHP
ii  php7.0-opcache                   7.0.0-5+deb.sury.org~trusty+1    amd64        Zend OpCache module for PHP
ii  php7.0-pgsql                     7.0.4-6+deb.sury.org~trusty+1    amd64        PostgreSQL module for PHP

The warnings

When cron runs /usr/lib/php/sessionclean, I get the following warnings:

PHP Warning:  Module 'PDO' already loaded in Unknown on line 0
PHP Warning:  Module 'calendar' already loaded in Unknown on line 0
PHP Warning:  Module 'ctype' already loaded in Unknown on line 0
PHP Warning:  Module 'exif' already loaded in Unknown on line 0
PHP Warning:  Module 'fileinfo' already loaded in Unknown on line 0
PHP Warning:  Module 'ftp' already loaded in Unknown on line 0
PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
PHP Warning:  Module 'iconv' already loaded in Unknown on line 0
PHP Warning:  Module 'Phar' already loaded in Unknown on line 0
PHP Warning:  Module 'posix' already loaded in Unknown on line 0
PHP Warning:  Module 'sockets' already loaded in Unknown on line 0
PHP Warning:  Module 'sysvmsg' already loaded in Unknown on line 0
PHP Warning:  Module 'sysvsem' already loaded in Unknown on line 0
PHP Warning:  Module 'sysvshm' already loaded in Unknown on line 0
PHP Warning:  Module 'tokenizer' already loaded in Unknown on line 0
PHP Warning:  Module 'PDO' already loaded in Unknown on line 0
PHP Warning:  Module 'calendar' already loaded in Unknown on line 0
PHP Warning:  Module 'ctype' already loaded in Unknown on line 0
PHP Warning:  Module 'exif' already loaded in Unknown on line 0
PHP Warning:  Module 'fileinfo' already loaded in Unknown on line 0
PHP Warning:  Module 'ftp' already loaded in Unknown on line 0
PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
PHP Warning:  Module 'iconv' already loaded in Unknown on line 0
PHP Warning:  Module 'Phar' already loaded in Unknown on line 0
PHP Warning:  Module 'posix' already loaded in Unknown on line 0
PHP Warning:  Module 'sockets' already loaded in Unknown on line 0
PHP Warning:  Module 'sysvmsg' already loaded in Unknown on line 0
PHP Warning:  Module 'sysvsem' already loaded in Unknown on line 0
PHP Warning:  Module 'sysvshm' already loaded in Unknown on line 0
PHP Warning:  Module 'tokenizer' already loaded in Unknown on line 0
PHP Warning:  Module 'PDO' already loaded in Unknown on line 0
PHP Warning:  Module 'calendar' already loaded in Unknown on line 0

When running php -v I get a subset of those warnings:

PHP Warning:  Module 'PDO' already loaded in Unknown on line 0
PHP Warning:  Module 'calendar' already loaded in Unknown on line 0
PHP Warning:  Module 'ctype' already loaded in Unknown on line 0
PHP Warning:  Module 'exif' already loaded in Unknown on line 0
PHP Warning:  Module 'fileinfo' already loaded in Unknown on line 0
PHP Warning:  Module 'ftp' already loaded in Unknown on line 0
PHP Warning:  Module 'gettext' already loaded in Unknown on line 0
PHP Warning:  Module 'iconv' already loaded in Unknown on line 0
PHP Warning:  Module 'Phar' already loaded in Unknown on line 0
PHP Warning:  Module 'posix' already loaded in Unknown on line 0
PHP Warning:  Module 'sockets' already loaded in Unknown on line 0
PHP Warning:  Module 'sysvmsg' already loaded in Unknown on line 0
PHP Warning:  Module 'sysvsem' already loaded in Unknown on line 0
PHP Warning:  Module 'sysvshm' already loaded in Unknown on line 0
PHP Warning:  Module 'tokenizer' already loaded in Unknown on line 0

And occasionally in the logs for CodeIgniter I get the line:

Severity: Core Warning --> Module 'tokenizer' already loaded Unknown 0

The config files

This error is not a new one so I've had plenty of other questions to look at, but the solution they suggest is to make sure there aren't any duplicate extension=... lines in my php.ini but there aren't any.

Here are all the files in /etc/php. There are a bunch of ini files for individual modules linked to in multiple places that are likely causing the issue.

/etc/php/mods-available/json.ini
/etc/php/mods-available/opcache.ini
/etc/php/7.0/fpm/php-fpm.conf
/etc/php/7.0/fpm/conf.d/* -> /etc/php/7.0/mods-available/*
/etc/php/7.0/fpm/pool.d
/etc/php/7.0/fpm/pool.d/www.conf
/etc/php/7.0/fpm/php.ini
/etc/php/7.0/cli/conf.d/* -> /etc/php/7.0/mods-available/*
/etc/php/7.0/cli/php.ini
/etc/php/7.0/apache2/php.ini.ucf-dist
/etc/php/7.0/apache2/conf.d/* -> /etc/php/7.0/mods-available/*
/etc/php/7.0/apache2/php.ini
/etc/php/7.0/mods-available/fileinfo.ini
/etc/php/7.0/mods-available/pdo_pgsql.ini
/etc/php/7.0/mods-available/sockets.ini
/etc/php/7.0/mods-available/exif.ini
/etc/php/7.0/mods-available/shmop.ini
/etc/php/7.0/mods-available/ctype.ini
/etc/php/7.0/mods-available/sysvshm.ini
/etc/php/7.0/mods-available/gettext.ini
/etc/php/7.0/mods-available/ftp.ini
/etc/php/7.0/mods-available/sysvmsg.ini
/etc/php/7.0/mods-available/calendar.ini
/etc/php/7.0/mods-available/iconv.ini
/etc/php/7.0/mods-available/pdo.ini
/etc/php/7.0/mods-available/phar.ini
/etc/php/7.0/mods-available/posix.ini
/etc/php/7.0/mods-available/tokenizer.ini
/etc/php/7.0/mods-available/pgsql.ini
/etc/php/7.0/mods-available/sysvsem.ini

Which of these files do I need to delete to stop the warnings without stopping PHP working (via web and CLI)? (bonus points if this is easily done via Ansible)

Ok, so the question name is a bit weird but I wasn't quite sure how to word it. I have a machine with the hostname foo.example.com with an SSL certificate for the domain mail.example.com. I have also have the following DNS records for example.com:

A     foo.example.com  12.34.56.78
CNAME mail.example.com foo.example.com
MX    mail.example.com

Now I have recently learnt that the RFC 2181 (section 10.3) states that the value of an MX record "must not be an alias".

My first attempt to fixing this would be to change the value of the MX record to foo.example.com, however this would cause problems as the name on the certificate is mail.example.com and I can not presently afford the expense of purchasing a new certificate.

My second attempt would be to add an A record for mail.example.com to point to 12.34.56.78 but the problem here is that the hostname provided by the SMTP server (Postfix) would not match the domain in the MX record and this may cause problems with some mail clients. Also, the reverse DNS record would not match.

Unfortunately changing the hostname of the machine itself to mail.example.com isn't an option as it is used for other things that use the other hostname.

Is there any other solution to this that I haven't thought of? Oddly enough it seems to have worked quite fine for the past year or so but as my configuring is actually invalid I'd like to correct it in case it is causing issues somewhere.

I have a website configured with Apache for http://www.example.com located in /var/www/example.com/. For an arbitrary sub-path of this website I would like to have all requests handled by a Python script. e.g. all requests for http://www.example.com/foo/bar/ and below would be handled by /var/www/example.com/foo/bar/index.py.

One way to accomplish this is to use the ScriptAlias directive in the Apache config/virtual host, but I would like to accomplish this in the .htaccess file if possible as I'd rather not have to modify the Apache config every time I which to create a new directory with a Python script.

I have tried doing this using mod_rewrite as shown below, but this has problems in that the Python script thinks the request URL contains /index.py/ which means that some URLs it generates for redirects are incorrect (this is causes problems such as this question).

RewriteEngine on
RewriteBase /foo/bar/

RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^(.*)$ index.py/$1 [L]

Is there another way to accomplish this or will I have to use ScriptAlias?

I'm running Dovecot on my mail server and storing messages in the Maildir++ format. I have the following directories (as well as the usual Maildir directories) in /var/mail/user:

.Something.2013
.Something.2013.Foo
.Something.2013.Bar
.Something.2014.Foo
.Something.2014.Bar

When I view these directories in a mail client (Roundcube WebMail, Apple Mail) the Something/2014 folder has a slightly different icon and doesn't allow mail to be put into it, presumably because it doesn't actually exist as a mail directory.

Oddly enough, none of the above directories are listed in the subscriptions file; just Something is.

Can I just create this folder with mkdir .Something.2014 or is there more I need to do?

I have a Debian server (Linode) with 2GB of RAM and 2 CPU cores which I currently use as an email server and web server.

I've recently installed Atlassian JIRA and noticed (with htop) that using JIRA would occasionally cause both CPUs to reach 90-100% usage, especially for about a minute while JIRA starts up.

Is this something that I should be concerned about? If so, what's the best way to limit JIRA's CPU usage?

I have a website running using Apache 2.2.22, PHP 5.3.10, and cURL 7.2.00. The relevant portions of the apache config is below, and you will notice that errors are sent to www.example.com_error.log.

<VirtualHost *:443>
    ServerName example.com
    ServerAlias www.example.com

    # *snip*

    ErrorLog ${APACHE_LOG_DIR}/example.com_error.log
    LogLevel warn
    CustomLog ${APACHE_LOG_DIR}/example.com_access.log combined
</VirtualHost>

However, when I use cURL from within PHP and turn verbose logging on using curl_setopt($connection, CURLOPT_VERBOSE, true); the output from cURL goes into Apache's error.log instead of the custom logfile I defined above. Why is this, and how can I get cURL's output to go into the correct log file?

I have a mail server set up on a Debian 7.2 machine running Dovecot 2.1.7 and Postfix 2.9.6. I have both Dovecot and Postfix set up to load virtual users from a database populated by Postfixadmin.

Currently the mailboxes are stored at /var/mail/example.com/username for each user for each domain, and Dovecot (IMAP) requires the full [email protected] to be given for authentication.

Would it be at all possible to add the ability to add alternative logins for certain e-mail addresses? Such as being able to login with admin instead of [email protected]?

I am currently using the flag -D var_name to start apache on certain machines so that I can use the apache conditional block <IfDefine !var_name> to apply certain apache directives.

Is there any way to check these apache parameters in PHP?

I am trying to translate outgoing UDP packets with a source port of X to a source port of Y.

I have done this using the following iptables rule:

iptables -t nat -A POSTROUTING -s 10.0.0.1 -p udp --sport X -j SNAT --to-source 10.0.0.1:Y

The counters for this rule increase when packets with a source port of X are generated, but completely vanish after that. I cannot find them in the counters of any other chain or table, and cannot see them on any interface using tcpdump.

If I remove that rule, then the packets are received fine with the source port of X. But as soon as I put the rule back, the packets vanish.

I am using iptables version v1.2.11 running on Voyage Linux. I am unable to easily update as this will need to be done on a few hundred remote devices.

What am I doing wrong?

Edit: iptables config added below, rules related to specific applications that can't affect this have been removed.

# Clear any existing rules 
iptables -v -t filter   -F
iptables -v -t nat      -F
iptables -v -t mangle   -F

iptables -v -t filter   -X
iptables -v -t nat      -X
iptables -v -t mangle   -X

# Policies
iptables -t mangle      -P PREROUTING   ACCEPT
iptables -t nat         -P PREROUTING   ACCEPT
iptables -t filter      -P INPUT        DROP
iptables -t filter      -P OUTPUT       ACCEPT
iptables -t filter      -P FORWARD      DROP

# Allow established connections.
iptables -t filter      -A INPUT      -m state --state ESTABLISHED -j ACCEPT
iptables -t filter      -A INPUT      -m state --state ESTABLISHED,RELATED -j ACCEPT  
iptables -t filter      -A FORWARD      -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t filter      -A FORWARD      -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -t filter      -A OUTPUT       -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t filter      -A OUTPUT       -m state --state ESTABLISHED,RELATED -j ACCEPT

# Allow localhost to talk to itself.
iptables -t filter  -A INPUT      -i lo -j ACCEPT

# Drop stealth scan. 
iptables -t filter      -A INPUT      -p tcp -s 0/0 -d 0/0 --tcp-flags ALL NONE -j DROP                      
iptables -t filter      -A INPUT      -p tcp -s 0/0 -d 0/0 --tcp-flags ALL ALL -j DROP                       
iptables -t filter      -A INPUT      -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP
iptables -t filter      -A INPUT      -p tcp -m tcp --tcp-flags SYN,FIN SYN,FIN -j DROP
iptables -t filter      -A INPUT      -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -j DROP
iptables -t filter      -A INPUT      -p tcp -m tcp --tcp-flags FIN,RST FIN,RST -j DROP 
iptables -t filter      -A INPUT      -p tcp -m tcp --tcp-flags ACK,FIN FIN -j DROP
iptables -t filter      -A INPUT      -p tcp -m tcp --tcp-flags ACK,URG URG -j DROP

# Allow forwarding from LAN to WAN.
iptables -t filter      -A FORWARD      -i lanif -o wanif -j ACCEPT

# The NAT, strict with fixed IP address - might be different with a DHCP assigned WAN_IP
iptables -t nat         -A POSTROUTING  -o wanif -j SNAT --to-source $WAN_IP
iptables -t nat         -A POSTROUTING  -m mark --mark 11 -j ACCEPT

# Change source port X to Y - why does this not work???
iptables -t nat     -A POSTROUTING  -s lanif -p udp --sport X -j SNAT --to-source wanif:Y

This an old spare server I use for a Minecraft server and a web server. It current has 2.5GB of RAM. I recently purchased 4GB (4x1GB) of new RAM and when I installed them, the server would not boot. The fan starts, and there are no non-green lights on the motherboard, but it doesn't actually boot.

The current RAM is PC3200 400MHz ECC CL3, and the RAM I purchased is the same, as far as I can tell. Is there anything I can do to get the server to boot? I've tried only using 2 of the new chips, and I've tried different combinations, but none of them have been successful.

Edit: I've just noticed that one of the current pieces of RAM is PC3200U and the rest just say PC3200, whereas the new RAM is all PC3200R. Is this a problem?

Memory controller information from dmidecode:

Handle 0x0005, DMI type 5, 24 bytes
Memory Controller Information
    Error Detecting Method: 8-bit Parity
    Error Correcting Capabilities:
            None
    Supported Interleave: One-way Interleave
    Current Interleave: One-way Interleave
    Maximum Memory Module Size: 1024 MB
    Maximum Total Memory Size: 4096 MB
    Supported Speeds:
            70 ns
            60 ns
    Supported Memory Types:
            SDRAM
    Memory Module Voltage: 3.3 V
    Associated Memory Slots: 4
            0x0006
            0x0007
            0x0008
            0x0009
    Enabled Error Correcting Capabilities:
            Unknown

Current memory information from dmidecode:

Handle 0x0006, DMI type 6, 12 bytes
Memory Module Information
        Socket Designation: DIMM1
        Bank Connections: 0 1
        Current Speed: Unknown
        Type: DIMM SDRAM
        Installed Size: 512 MB (Double-bank Connection)
        Enabled Size: 512 MB (Double-bank Connection)
        Error Status: OK

Handle 0x0007, DMI type 6, 12 bytes
Memory Module Information
        Socket Designation: DIMM2
        Bank Connections: 2 3
        Current Speed: Unknown
        Type: DIMM SDRAM
        Installed Size: 512 MB (Double-bank Connection)
        Enabled Size: 512 MB (Double-bank Connection)
        Error Status: OK

Handle 0x0008, DMI type 6, 12 bytes
Memory Module Information
        Socket Designation: DIMM3
        Bank Connections: 0 1
        Current Speed: Unknown
        Type: DIMM SDRAM
        Installed Size: 512 MB (Double-bank Connection)
        Enabled Size: 512 MB (Double-bank Connection)
        Error Status: OK

Handle 0x0009, DMI type 6, 12 bytes
Memory Module Information
        Socket Designation: DIMM4
        Bank Connections: 2 3
        Current Speed: Unknown
        Type: DIMM SDRAM
        Installed Size: 1024 MB (Double-bank Connection)
        Enabled Size: 1024 MB (Double-bank Connection)
        Error Status: OK

I have recently added IPv6 to our network as per the instructions at http://www.chronos-tachyon.net/reference/debian-ipv6-and-hurricane-electric.

However, the hosts on the network automatically configure the default route to the link-local address of the router instead of the global address.

The article at http://ipvsix.me/?p=88 says:

You will find that on the LAN host, their default route and gateway point to the Link-Local address of eth1 on the Linux machine acting as the IPv6 gateway/router. This is entirely normal and expected.

My problem is that the router (running a derivation of Debian) does not respond to NDP requests for its link-local address because it has a global address configured.

Is there any way to either:

• Get the hosts to automatically use the global address of the router for the default host, or
• Get the router to reply to NDP requests for its link-local address.

/etc/radvd.conf on the router:

interface eth0 {
    AdvSendAdvert on;
    AdvLinkMTU 1480;
    MinRtrAdvInterval 60;
    MaxRtrAdvInterval 180;
    prefix 2001:xxxx:xxxx:xxxx::1/64 {
        AdvRouterAddr on;
        AdvPreferredLifetime 600;
        AdvValidLifetime 3600;
    };
    route ::/0 {
    };
    RDNSS 2001:xxxx:xxxx:xxxx::2 {};
};

I am trying to set up part of a Virtualhost in apache to require client authentication. The VirtualHost in question also acts as a reverse proxy for the actual web server. Here's what I have done:

• Created ca.crt, ca.csr, and ca.key on the server I am using as the CA.
• Modified the config of the VirtualHost to look like this:

...

ProxyPass / http://xxx.xxx.xxx.xxx:80/
ProxyPassReverse / http://xxx.xxx.xxx.xxx:80/
ProxyPassReverseCookiePath / /

SSLEngine On
SSLCertificateFile "/private/etc/apache2/server.crt"
SSLCertificateKeyFile "/private/etc/apache2/server.key"
SSLCertificateChainFile "/private/etc/apache2/ca_bundle.crt"
SSLCACertificateFile "/private/etc/apache2/self_ca.crt"
SSLVerifyClient none
SSLOptions StrictRequire   
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

<Location /clientauth>
    # These options force the client to authenticate with a client certificate.
    SSLVerifyClient require
    SSLVerifyDepth 1
</Location>

• Created a test client certificate using my custom CA.
• Installed the client certificate in to the login keychain on Mac OS X Lion, and manually into Firefox.

But I am unable to browse to the /clientauth path.

• Firefox says "SSL peer was unable to negotiate an acceptable set of security parameters."
• Opera says "Secure connection: fatal error (40) from server."
• Chrome and Safari say "HTTP 403 Forbidden".
• cURL (using the .p12 file) for some reason cannot find the key...
• cURL (using the .crt and .key files) does the handshake, sends the request and then says "Empty reply from server".
• The apache error logs keep repeating the line Re-negotiation handshake failed: Not accepted by client!?

Is this a conflict between using client authentication and being a reverse proxy? Or have I done something else wrong?

I currently have a virtualhost within Apache that is using mod_cband and mod_rewrite. I am using mod_cband to limit the number of connections per remote user. When this limit is exceeded, it is supposed to return 503 Service Unavailable which is the mod_cband default.

If the limit is not exceeded then mod_rewrite should rewrite the URL according to the rules I have specified.

Unfortunately, mod_rewrite seems to take some sort of priority over mod_cband as the rewrite occurs even when the limit is exceeded and 503 Service Unavailable is never returned.

Is there anyway to force mod_cband to be applied before mod_rewrite? Config is as follows:

<VirtualHost *:80>
    ServerName a.domain.com
    ServerAdmin [email protected]

    CBandRemoteSpeed 1024 1 10

    RewriteEngine on
    # Some other rewrite rules.

    RewriteRule (.*) https://a.domain.com? [R]

    ...

</VirtualHost>

I would like to be able to count the number of bytes going to a given MAC address using iptables or ebtables or some other linux utility. I have tried looking at the byte counts in ebtables but they are always 0, am I doing something wrong here?

I have a website, say www.foo.com with an IP address 1.2.3.4 I have an SSL certificate for www.foo.com and when I visit https://www.foo.com all is good. However if I visit https://1.2.3.4 it says the certificate is invalid, which is fair enough. Is there any way to get https://1.2.3.4 to redirect to https://www.foo.com using apache2 or am I stuck with it having a certificate error?

I have a machine on which I do not want finder to run, so initially I made it unexecutable:

sudo chmod -R a-x /System/Library/CoreServices/Finder.app

But then realised that launchd was still trying to launch finder multiple times every second, resulting in colossal log files consisiting of millions of lines of:

com.apple.launchd.peruser.502[109] (com.apple.Finder[93799]) <Error>: posix_spawn("/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder", ...): Permission denied
com.apple.launchd.peruser.502[109] (com.apple.Finder[93799]) <Warning>: Exited with exit code: 1

So I edited /System/Library/LaunchAgents/com.apple.Finder.plist so that it would not launch anymore. The problem I have now is forcing launchd to reload the plist, and therefore stop trying to launch finder. However, I cannot restart the machine.

I have tried using launchctl to both remove and unload the process but that doesn't appear to work:

$ sudo launchctl unload -w /System/Library/LaunchAgents/com.apple.Finder.plist 
launchctl: Error unloading: com.apple.Finder
$ sudo launchctl remove com.apple.Finder
launchctl remove error: No such process

Is there anyway I can stop launchd continuously trying to load finder without restarting the machine?

I have apache2 running on a Mac OS X (10.6) machine, and it is currently serving PHP pages fine, using php5_module but I would like to configure fastcgi_module to handle the php pages.

I have tried using the configuration found on www.fastcgi.com but I get the following error:

[warn] FastCGI: (dynamic) server "/Path/to/script.php" has failed to remain running for 30 seconds given 3 attempts, its restart interval has been backed off to 600 seconds
[warn] FastCGI: server "/usr/bin/php" has failed to remain running for 30 seconds given 3 attempts, its restart interval has been backed off to 600 seconds

I'm thinking this is because PHP has not been compiled with FastCGI, but seeing as it came with Mac OS X i'm not sure how to recompile it. Is this the problem? And if so, how do I recompile PHP with FastCGI?

I have recently purchased an SSL Certificate. The CommonName (CN) of the certificate is www.mydomain.com and has several AlternativeNames such as subdomain1.mydomain.com, subdomain2.mydomain.com etc.

I have installed this on a server using Apache 2.2.17 and mod_ssl, and all works fine, except I am gettings a warning saying:

[warn] RSA server certificate CommonName (CN) `www.mydomain.com` does NOT match server name!?

This is because the ServerName is defined as subdomain1.mydomain.com. The certificate is still valid, but is there anything I can do to remove the warning? Or can I just ignore it?

I have a website project in Eclipse using servlets which is running on Tomcat. In one of the servlets I reference an external stylesheet as such:

<link rel="stylesheet" type="text/css" href="style.css" />

Where would I put this style.css for it to work? I have tried almost every folder in the project directory and in the site directory under Tomcat and it still won't work.

I am currently running Exchange Server 2010 on Windows Server 2008 R2. I have a user that I would like to be able to create/delete public folders in the root public folder.

How do I give this user permission to do this?

So far I have tried adding the user to the Public Folder Management, Domain Admins, and Administrators groups, and running the following scripts in the powershell:

Add-PublicFolderAdministrativePermission -Identity "\" -User "Username" -AccessRights AllExtendedRights -InheritanceType SelfAndChildren

This appears to have done something, but the user still cannot create public folders in the root public folder.

 AddUsersToPFRecursive.ps1 -toppublicfolder \ -User "Username" -Permissions Owner

This gives me an access denied error.

Any ideas?