I am trying to setup an AD domain and I have certain users that need some "power" privileges for installing software on their own machine (and on their own machine only).
I am thinking about creating a users group called Power Users, add the users I want to be eligible, but I am missing how to apply this only on their own computers.
I don't want that they are local Administrators, when they are loggin on other users computers.
I have a strange problema with a fresh install of ProFTPD on Ubuntu 20 LTS.
I noticed that after changing some option on the configuration files, when I run services proftpd restart the modifications does not apply, only if I restart the system the changes will make effects.
So I try to sop the service with services proftpd stop but I can keep connecting with the ftp client. So there is something weird here. Can you help me on what to verify?
some output
root@b205d:~# which proftpd
/usr/sbin/proftpd
root@b205d:~# whereis proftpd
proftpd: /usr/sbin/proftpd /usr/lib/proftpd /etc/proftpd /usr/share/proftpd /usr/share/man/man8/proftpd.8.gz
I need to automatically add some GET parameters when someone is typing a specific url from inside my LAN.
Example, you digit www.example.com and you will redirect to www.example.com?variable=1
I have an internal DNS, internal firewall (fortigate) and AD, if can help
I am trying to use nginx as a proxy for load balancing 2 servers. I don't know the best practices here, but this is the scenario:
Since only the official domain will be public, the others two are "private", I don't want a user or a search engine will see these domains so I was thinking of modifying the /etc/hosts and force the 2 ips on the two hostnames. I did it on the nginx container and on the host too, but without success. Nginx is telling me that it cannot resolves app1.domain.com
I know that if I create a public hostname on the domain for app1 and app2 this should work, but I want to tell nginx to resolve locally these domain.
Edit
the output of getent hosts app1.domain.com or on app2.domain.com either on the container or the hosts is the same. With the correct ip. Both are resolving correctly now, but just because I add the ip on the public domain but now I have Bad Gateway
I am testing a AD environment with one Domain Controller and some clients.
My user has many problems. I am member of "domain admins, domain users and administrators" groups and in I cannot resolve these 2 problems:
gpedit.msc I see a red box tells me that i have no permission to run it and contact my sys admin. There are not any policy enabled on the domain. How to verify this, or reset the default policies for the users? The client is a Windows 10 last release. I try to create a new local users andd the start menu is working and saves the state after reboot, so is related to te domain/ad!
AFTER SOME TESTS Seems that the problem is not DOMAIN related. I log off the computer from the domain and create a new user. I cannot run gpedit or computer management since app is blocked. The start menu save states is working tho.
I have a Linux workstation with an iSCSI LUN mapped on the directory /mnt/nas509
the LUN is on /dev/sdb and with a partition /dev/sdb1
I expand it by the NAS Web Interface, and execute this command on the linux workstation:
sudo growpart /dev/sdb 1
Now the partition seems correctly expanded but I keep seeing 1.0 TB instead of 1.5TB.
fdisk /dev/sdb with command F (show unallocated space) shows 0.
fdisk -l
Disk /dev/sdb: 1.5 TiB, 1610612736000 bytes, 3145728000 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 1048576 bytes / 1048576 bytes
Disklabel type: dos
Disk identifier: 0xe6af84e5
/etc/fstab
UUID=166030333DFC9F33 /mnt/nas509 ntfs _netdev 0 0
df -h
Filesystem Size Used Avail Use% Mounted on
udev 974M 0 974M 0% /dev
tmpfs 200M 972K 199M 1% /run
/dev/mapper/urbackup--vg-root 29G 5.6G 22G 21% /
tmpfs 996M 0 996M 0% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 996M 0 996M 0% /sys/fs/cgroup
/dev/sda1 472M 130M 319M 29% /boot
/dev/sdb1 1000G 216G 785G 22% /mnt/nas509
So bitbucket upgade his TLS version and now I have problem pulling from bitbucket repos. I have only one server affected and I can't figure out what is wrong.
The error is
[SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:581)
I have Debian 8.7 and Mercurial 3.1.2. I tried to remove/purge the package and reinstall it, no way. I did update some tls libraries too.
I can't upggrade the distro cause I need these exact versions of php and mysql.
I have a server with sendmail and I need to send email througt PHP. I have an internal SMTP server on the same subnet, so I configured sendmail with FEATURE(nullclient', mail.server.local')dnl where mail.server.local is solved with an internal IP in /etc/hosts
There is no way that I can change the from address and domain. It's always [email protected].
Mar 20 16:18:48 nameoftheserver sm-mta[16402]: v2KFImVi016402: from=<[email protected]>, size=406, class=0, nrcpts=1, msgid=<[email protected]>, proto=ESMTP, daemon=MTA-v4, relay=localhost [127.0.0.1]
The output of /etc/mail/sendmail.mc:
(short domain name) $w = nameoftheserver
(canonical domain name) $j = nameoftheserver.localdomain.local
(subdomain name) $m = localdomain.local
(node name) $k = nameoftheserver
How I can change this values?
I can't figure out what I am missing. I'm setting up a new mail server and had this erorre every time I receive an email.
The user is inside the group mail
mail:x:8:dovecot,user.name
The perms directory are here /var/mail
drwxrwsr-x 3 root mail 4096 nov 11 12:20 mail/
This is dovecot configuration
# 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.4.13 (7b14904)
# OS: Linux 4.4.0-47-generic x86_64 Ubuntu 16.04.1 LTS ext4
auth_mechanisms = plain login
mail_location = mbox:/var/mail/%u
namespace inbox {
inbox = yes
location =
mailbox Drafts {
special_use = \Drafts
}
mailbox Junk {
special_use = \Junk
}
mailbox Sent {
special_use = \Sent
}
mailbox "Sent Messages" {
special_use = \Sent
}
mailbox Trash {
special_use = \Trash
}
prefix =
}
passdb {
driver = pam
}
protocols = " imap pop3"
service auth {
unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
}
}
ssl = no
userdb {
driver = passwd
}
I successful converted a machine from physical to virtual. The physical machine has one hard disk with two partitions.
I made a fixed vhd of 300gb and I see 2 partition, one of the system and the other one is unallocated. I don't want to create a new partition, I want only one with the full space.
I tried with partition magic but it says that there aren't any parittion to merge.
This is what I see in disk management
Preamble: In my company we add a new Vodafone's router that's already compromised my working DHCP server. That's because Vodafone refuse to disable the DHCP server of their router. So I figure out to split the lan in 2 subnets and put a firewall in the middle to block the DHCP server.
The firewall I'm using is an old Zyxel Zywall 10w but I think it's ok for the purpose. It has 2 ports (1 LAN and 1 WAN). I configured all the firewall rules but there is a problem. The WAN led isn't blinking so it doesn't work.
I think it's because it want a WAN attached to the WAN port, I'm connecting another LAN. Is it the problem? There is an option to set this? (maybe encapsulation, rip, etc etc)
I'm trying to install Windows2008r2 64bit on a Ubuntu 12.04 64bit host. After created the VM (with --ostype windows2008_64 I boot up the installation iso but windows says:
Attempting to load a 64-bit application, however this cpu is not compatible with 64-bit mode
I did --vtxvpid on but nothing changes.
# uname -i
x86_64
# grep flags /proc/cpuinfo | head -1
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good nopl aperfmperf pni dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm dca sse4_1 xsave lahf_lm dts tpr_shadow vnmi flexpriority
What I have to verify?
I'm using an old login with ssh-rsa public/private key and all was good.
I noticed that a couple of days ago the authorizazion was avoid with message "server refused our keys". After diggin' I figured out that the couple of keys stop working after exactly 5 years of their creation.
So I make a new pair of keys, take the public one, paste inside a file in ~/.ssh of the username that I'm using, converted it with ssh-keygen -if and paste the new file into authorized_keys but the I still get "server refused our key".
It's ok to copy and paste the real key without transfer it?
What I'm missing? This isn't my first time using a pair of keys and I follow the same procedure as described. I'm in doubt if I'm changing the correct authorized_keys file but I've take a look in /etc/passwd and see where is the home of the login which I'm using.
I have an old RedHat 4 server with sendmail and I want to replace it with a new Ubuntu one. I need to have both on the same MX record for tests if the new one is working properly.
The users accounts on the new server are in different form from the old one. For example, the old is [email protected], the new is [email protected].
If I put the new server in the same mx record with a lowest priority, theorically when the first fails the email is sended to the other one (the new one). But if a I send an email address that isn't in the old server, sendmail respond me with error 5.1.1 'user doesn't exists'. There is a way to change this error, maybe with one 4xx so the relay comes to the other server?
I don't know if I did explain this well...hope you understand.
I know this is already asked but I can't find a clear answer. I put a new Ubuntu server in my LAN and I can't ping it but the hostname. I don't want to edit all my LAN windows hosts's file (+40 pcs) and add the entry. Perhaps I have another Ubuntu server and I can ping it by hostname without change anything.
All servers and client are using another internal DNS server based on an old redhat installation.
The hostname in the server that I can't ping is setted. What I have to do/check?
I'm setting up a new mail server for my company with Ubuntu Server 11.04 and postfix/dovecot. I'm new on this so I have some problems. I'm getting it works only for receving mails from any address outside the lan and I can send only for the same domain. If I try to send a new message with it to an outside address (eg gmail) I have Relay denied.
So, my server had 2 network interface, 1 for my lan (192.168.1.xxx) and one had a public static ip address. My domain, for testing pourpose, is enti.centropaghe.it and I create an MX record to mail.enti.centropaghe.it
My goal is to get a full functionaly imap/smtp/pop3 server, with autentication on both side and it can send email to all address:)
I post some of my configuration file so you can digg it:
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
readme_directory = no
# TLS parameters
smtpd_use_tls=yes
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
mydomain = enti.centropaghe.it
myhostname = mail.enti.centropaghe.it
mydestination = $myhostname, localhost.$mydomain, $mydomain, localhost
relayhost = $mydomain
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.1.0/24
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = $mydomain
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
default_transport = error
relay_transport = error
mail_spool_directory = /var/mail/
search enti.centropaghe.it
nameserver 192.168.1.221 #is my dns server on my lan
127.0.0.1 localhost.localdomain localhost
192.168.1.148 mail.enti.centropaghe.it darwin
; <<>> DiG 9.7.3 <<>> enti.centropaghe.it mx
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65356
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
;; QUESTION SECTION:
;enti.centropaghe.it. IN MX
;; ANSWER SECTION:
enti.centropaghe.it. 8381 IN MX 10 mail.enti.centropaghe.it.
;; AUTHORITY SECTION:
centropaghe.it. 71334 IN NS dns2.telemar.it.
centropaghe.it. 71334 IN NS dns.telemar.it.
;; ADDITIONAL SECTION:
mail.enti.centropaghe.it. 7333 IN A 213.178.198.62
dns.telemar.it. 28595 IN A 213.178.196.1
dns2.telemar.it. 20154 IN A 213.178.195.254
;; Query time: 1 msec
;; SERVER: 192.168.1.221#53(192.168.1.221)
;; WHEN: Wed Feb 29 15:24:47 2012
;; MSG SIZE rcvd: 151
; <<>> DiG 9.7.3 <<>> enti.centropaghe.it any
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58752
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 3
;; QUESTION SECTION:
;enti.centropaghe.it. IN ANY
;; ANSWER SECTION:
enti.centropaghe.it. 8342 IN MX 10 mail.enti.centropaghe.it.
enti.centropaghe.it. 7266 IN A 213.178.198.58
;; AUTHORITY SECTION:
centropaghe.it. 71295 IN NS dns2.telemar.it.
centropaghe.it. 71295 IN NS dns.telemar.it.
;; ADDITIONAL SECTION:
mail.enti.centropaghe.it. 7294 IN A 213.178.198.62
dns.telemar.it. 28556 IN A 213.178.196.1
dns2.telemar.it. 20115 IN A 213.178.195.254
;; Query time: 0 msec
;; SERVER: 192.168.1.221#53(192.168.1.221)
;; WHEN: Wed Feb 29 15:25:27 2012
;; MSG SIZE rcvd: 167
Feb 29 17:11:10 darwin postfix/smtpd[8207]: warning: 213.178.xxx.xxx: hostname ip.213.178.xxx.xxx.telemar.it verification failed: Name or service not known
Feb 29 17:11:10 darwin postfix/smtpd[8207]: connect from unknown[213.178.xxx.xxx]
Feb 29 17:11:10 darwin postfix/smtpd[8207]: NOQUEUE: reject: RCPT from unknown[213.178.xxx.xxx]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.1.138]>
Feb 29 17:11:13 darwin postfix/smtpd[8207]: disconnect from unknown[213.178.xxx.xxx]
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
inet_interfaces = all
mail_spool_directory = /var/mail/
mailbox_size_limit = 0
mydestination = $myhostname, localhost.$mydomain, $mydomain, localhost
mydomain = enti.centropaghe.it
myhostname = mail.enti.centropaghe.it
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.1.0/24
myorigin = $mydomain
readme_directory = no
recipient_delimiter = +
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes
I hope that's all. If you need something else, let me know.
With last modifications, now using the internal ip address of the smtp I can send email to outside address. But doesn't work using mail.enti.centropaghe.it
I'm doing some tests with a brand new Ubuntu Server 11.10 installation.
I installed postfix and courier-pop for pop3 and, from what I could gather, it looks like courier doesn't support mbox filetype but only Maildir format.
So I've created a user with his home in /home/username, with maildirmake.courier I created the directory structure in /var/mail/username and set the correct rights and owner.
I sent some test mail to the new account and all works like a charm. Postfix created the new email in /var/mail/username/new
The problem is that I can't download the email via pop3 without creating a symbolic link from /home/username/Maildir to /var/mail/username/.
Now, the problem is that not all users have their own home folder, so the symlink thing won't obviously work.
This is the directory set in /etc/postfix/main.cf:
mail_spool_directory = /var/mail/
and this is for the courier's conf file:
MAILDIRPATH=Maildir
I tried to change to something like /var/mail/ or /var/mail/$USER but didn't work either.
I'm probably missing something in courier-pop's configuration.
Any ideas?
I have this error. The server works fine but sendmail doesn't. I can't reach it for download emails but it sends them.
I have this when I type dmesg:
TCP: Treason uncloaked! Peer 192.168.1.183:50792/110 shrinks window 824242349:824248613. Repaired.
many times. .183 is an IP of my lan, a normal computer. I don't know what it's happening, I turn off the 183 but doesn't change anything.
I have two machines, same hardware (one should be for backup), same software (red hat 4). I need to know how to sync all the users used for ftp and email accounts. It's enough to copy the /etc/passw and /etc/shadow to the other machine for getting this to work?
Maybe with cron and using rsync?
I have a list of +30.000 directory and I have to delete all the directories and their content from 2005 to 2006, via terminal. Thanks for help