The only way I know how to switch regions using the EB CLI is eb init. This feels like a hack because in addition to selection my region, I have to re-answer a bunch of questions I've already answered.
Is there a way to just switch regions on the EB CLI without going through all the eb init steps?
The SSL cert for my site, https://www.snipsalonsoftware.com/, doesn't work on Android. In troubleshooting this problem I've plugged my site into the Qualys SSL Labs testing tool:
https://www.ssllabs.com/ssltest/analyze.html?d=www.snipsalonsoftware.com&s=50.57.181.104
This report seems to tell me that I have "chain issues". Something is "incomplete". But I'm having trouble understanding exactly what is incomplete.
In the next section, under "Certification Paths", I see in orange (and I'm guessing orange means "kinda bad") "Extra download". I have no idea what this means or how to fix it. I found this thread, but I can't tell how to translate what they're saying into a solution for me.
What should I do?
I have two SSL certificates:
snipsalonsoftware.com which is currently in place and working properly.app.snipsalonsoftware.com which has been purchased but not yet installed.What I'm trying to do right now is simply verify the validity of the snipsalonsoftware.com certificate so that, when I try to verify the app.snipsalonsoftware.com, I know that I'm getting a meaningful answer.
This is a professionally signed certificate from Comodo by way of DreamHost, not a self-signed certificate. How can I verify the trust chain using openssl or some other method?
Here's what I get right now when I try:
$ openssl verify domain.pem
domain.pem: /OU=Domain Control Validated/OU=Provided by New Dream Network, LLC/OU=DreamHost Basic SSL/CN=snipsalonsoftware.com
error 20 at 0 depth lookup:unable to get local issuer certificate
But to me it's like duh, of course you can't get the local certificate - there isn't one. I don't get how I'm supposed to verify a professionally-signed certificate.
I realize this is a really elementary question but I can't seem to find a good answer to my question through googling.
I want to set up an email address on my domain, e.g. [email protected]. I think I'd like it to forward to my GMail account.
I'm on Ubuntu and I already have Postfix installed.
All my websites are down right now. My domain registrar's site is also down periodically (mydomain.com).
I think I could probably get around the fact that my domains aren't working by getting somebody else to point a subdomain at the IP for one of my servers. But I don't know the IP for any of my servers because none of their domains are working.
Can anyone think of a way to find out what my server's IP WAS? Any other ideas for getting around this problem?
I'm the sysadmin at my company out of necessity. I'm not actually that knowledgeable. It's probably helpful to know that when I'm asking my question.
We have a DNS server here that I set up a few months ago. Today our internet stopped working (somebody unplugged the firewall) and after we plugged the firewall back in I restarted the DNS server. When the DNS server booted back up, the internet still didn't work, so I ran sudo named on the DNS server and the internet started working for everyone again.
However, domains on our intranet don't work anymore. I have several intranet sites on the .office domain that have never had problems and now they don't work anymore. The machines the DNS server pointed to now have different IP addresses, but I updated those IP addresses, so it seems like it should work.
I'm using Ubuntu with BIND. Given my limited experience with DNS, I don't know what to try. Any suggestions?
I'm trying to get Apache to interpret my Ruby files but I don't understand how to do it. I'm not concerned with Rails right now, only Ruby. What I've found by Googling only confuses me. Any advice?
How do I grant view-related privileges to a user in MySQL (without granting all privileges)? I get this error when I try to do a mysqldump:
mysqldump: Couldn't execute 'show create table `view_household`': SHOW VIEW command denied to user 'backup'@'localhost' for table 'view_household' (1142)
We just bought a machine to serve as our in-house production server. For security reasons, we don't want this machine connected to the internet. However, we do have an intranet with a wiki and all the workstations in the office need to be able to get to pages on our intranet. I don't see how this could easily be done because if the server is connected to the router, it will automatically be on the internet (as far as I understand), and if the server is not connected to the router, I don't know how the other workstations would be able to see it.
For all I know, maybe the idea of letting all our workstations (which are connected to the internet) connect to the server defeats the purpose of having the server not be on the internet.
My question is: Is it just as bad to have our server connected to a machine that's connected to the internet as it would be to have the server connected to the internet itself? If not, is there an easy way to allow all our office's workstations to connect to the server?
I keep running these two commands over and over:
$ ps aux | grep php | grep -v grep
www-data 3663 100 14.8 328620 304900 ? R 12:56 0:54 php /home/jason/projects/mcif/./symfony import:process --id=91
jason@gob:~/projects/mcif$ sudo kill 3663
Is there a quick and easy way to just grab the pid and kill that? The closest I've come is this:
$ ps aux | grep php | egrep -o ' [0-9]+ ' | head -n1
3836
But I don't know how to pipe that through kill.
I have two DNS servers in my office, Gob and Tobias. They are both running Ubuntu and BIND. Their BIND config files are identical. We've been using Gob for the last month or so. When we switched to Tobias for the first time today, everything kept working fine except we were no longer able to print. Switching back to Gob fixed the problem.
Any idea as to why changing DNS servers, which doesn't seem to me to have all that much to do with printing, could make it so people can't print anymore?
Edit: After some more testing, it's unclear whether only Gob works, only Tobias works, it works sometimes under either, or if the printing problem is even related to the DNS server switch at all. Pretty cool.
I'm backing up a Linux machine (Ubuntu 10.04) with rsync over SSH.
If I specify for my path something like "home/jason" it works just fine. "home/jason" is translated into "/home/jason". But how do I back up my root directory, i.e. "/"? Logic would have it that, since a slash gets slapped onto the front of whatever you put for path, a blank path would come through as "/". That's not the case, though. A trick like "home/../" doesn't work, either.
How do I back up the root directory?
I have a "backup" user on my server that needs to have read permissions everywhere. Doing chown 444 -R / backup doesn't seem like the right thing to do, so what should I do?
I'm trying to set up rsync backups on my ReadyNAS and I'm getting the following error:
ERROR: The remote path must start with a module name not a /
This error is accompanied by the following information:
Job: 015
Protocol: rsync
Source: 192.168.140.25::/home/jason
Destination: [gob]/
I think the error makes sense because look what happens when I try this:
$ rsync -r 192.168.140.25::/home/jason dest/
ERROR: The remote path must start with a module name not a /
The command fails. If I change it only slightly, it succeeds:
$ rsync -r 192.168.140.25:/home/jason dest/
So the question is: Why is the ReadyNAS trying to run an rsync command with an extra colon? Is there something about the way rsync works that I don't understand?
I want to monitor my DNS server with Nagios. I understand there's a check_dns plugin but I'm a total Nagios noob and I have no idea how I would go about using the plugin. All I want to do is the equivalent of making sure an nslookup command succeeds. Can someone point me in the right direction?
I'm trying to set up a single sign-on for my intranet. I've found a couple solutions online but I'm not sure if they apply to my particular situation.
I have several subdomains on the same server. One level of user should be able to access all subdomains and another level of user should only be able to access some subdomains.
Signing into one subdomain should make it so you don't have to log into any others.
Can anyone point me in the right direction? I'm on Ubuntu using Apache.
Since I recently had some unexpected frustrations with my DNS server, I'd like get an e-mail if my DNS server ever stops behaving as expected. Is there a tool out there already that will do this for me or am I better off writing a shell script?
I know this sounds a little subjective. My main question is "is there a tool already out there that will do this?" which I don't believe is subjective at all.
I'm protecting a few different directories with LDAP. My problem is that you have to log into each directory separately even though it's the same user for almost all of them. Here's the pertinent part of my httpd.conf:
LoadModule vhost_alias_module /usr/lib/apache2/modules/mod_vhost_alias.so
<Directory /var/www/wiki>
AuthType Basic
AuthName "Restricted Files"
AuthUserFile /etc/apache2/passwords
Require user galapagos
</Directory>
<Directory /var/www/staging>
AuthType Basic
AuthName "Restricted Files"
AuthUserFile /etc/apache2/passwords
Require user galapagos
</Directory>
<Directory /var/www/mantis>
AuthType Basic
AuthName "Restricted Files"
AuthUserFile /etc/apache2/passwords
Require user galapagos
</Directory>
<Directory /home/jason/projects>
AuthType Basic
AuthName "Restricted Files"
AuthUserFile /etc/apache2/passwords
Require user jason
</Directory>
How do I factor out all the parts that are the same and only require galapagos' login once?
I have the following in my Apache config:
<VirtualHost *:80>
VirtualDocumentRoot /var/www/hosts/%0
ServerAlias *.test.galapagos.office
</VirtualHost>
In /var/www/hosts, I have a directory called jason.test.galapagos.office and one called bill.test.galapagos.office. If I go to jason.test.galapagos.office in a browser, I get what I expect to see. Same with bill. In other words, everything is working perfectly.
However, I'm not quite satisfied with what's going on. Instead of /var/www/hosts/jason.test.galapagos.office and /var/www/hosts/bill.test.galapagos.office/, I'd like /home/jason/web and /home/bill/web.
How can I tell Apache to map to those subdirectories instead?
Thanks, Jason
I have a bunch of subdomains set up on my company's intranet. I set up each subdomain manually. I would like certain subdomains to get created automatically.
For example, if I have /home/jason/foo and /home/jason/bar, I want to be able to go to foo.jason.mydomain.local and bar.jason.mydomain.local without having to manually set up those subdomains. (The "jason" part can be hard-coded; I just want the "foo"/"bar" part to be automatic.)
I've found this page, which seems to be pretty much what I want, but I can't bridge the gap between their examples and what I'm doing. Can someone please help me out?
Thanks, Jason