anta40's questions

My main work machines are Macs these days, but I still have a Linux VPS running for tinkering purposes. For convenience, I use Termius

There are 2 accounts on my Linux VPS: root and anta40. To login, I use SSH keys instead of password. Login as root works fine. There is trouble login as anta40, though. Here's the log, which says " Authentication that can continue: publickey" :

 Starting a new connection to: "XXX.XXXX.XXX.XXX" port "22"
⚙️ Starting address resolution of "XXX.XXXX.XXX.XXX"
⚙️ Address resolution finished
⚙️ Connecting to "XXX.XXXX.XXX.XXX" port "22"
? Connection to "XXX.XXXX.XXX.XXX" established
⚙️ Starting SSH session
⚙️ Remote server: SSH-2.0-OpenSSH_9.0p1 Debian-1+b1
⚙️ Agreed KEX algorithm: ecdh-sha2-nistp256
⚙️ Agreed Host Key algorithm: ecdsa-sha2-nistp256
⚙️ Agreed server-to-client cipher: aes128-ctr MAC: hmac-sha2-256
⚙️ Agreed client-to-server cipher: aes128-ctr MAC: hmac-sha2-256
⚙️ Agreed client-to-server compression: none
⚙️ Agreed server-to-client compression: none
⚙️ Handshake finished
? Checking host key: XX:XXX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX
? Host "XXX.XXXX.XXX.XXX":"22" is known and matches
? Authenticating to "XXX.XXXX.XXX.XXX":"22" as "anta40"
⚙️ Available client authentication methods: publickey,password,keyboard-interactive
⚙️ Authentication that can continue: publickey
? Authenticating using publickey method
❗ Authentication failed (publickey)
⚙️ Partial success: no
⚙️ Authentication that can continue: publickey
? No more authentication methods to try

Here's what I already did so far (as root):

• Create a /home/anta40/.ssh/authorized_keys which contains anta40's public key
• chmod 700 /home/anta40/.ssh
• chmod 600 /home/anta40/.ssh/authorized_keys
• chown -R anta40:anta40 /home/anta40/.ssh

What's wrong here?

I've a website (running on CentOS at Google Cloud, Apache 2.4.37), say it's name is awesomesite.co.id.

There are certain pages on that website, e.g awesomesite.co.id/dev123/secret.html which is not supposed to be accessible from any network, except from whitelisted IPs. So here's what I already did:

1. Edited /etc/httpd/conf.d/awesome-site.conf. I put 2 whitelisted IPs on it.

    <VirtualHost *:80>
    ServerName awesomesite.co.id
    DocumentRoot /var/www/html/awesome
    ErrorLog /var/log/httpd/awesome-site-error.log
    CustomLog /var/log/httpd/awesome-site-requests.log combined
    #commented for testing PHP proxy, allow both http and https work
    RewriteEngine on
    RewriteCond %{SERVER_NAME} =awesomesite.co.id
    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
    </VirtualHost>
    
    <Directory /dev123/*>
            Order deny,allow
            Deny from all
            Allow from 123.123.100.100
            Allow from 200.200.44.59
    </Directory>

2. Restarted Apache: systemctl restart http.service

I tried to access awesomesite.co.id/dev123/secret.html on a few mobile devices (all different telco providers). The result is all devices could accessed that page normally.

So what's the correct way, then?

I already installed Apache 2.4 and PHP 7.4 on Centos 8, which is running on Google Cloud Platform.

Apache:

● httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disabled)
  Drop-In: /usr/lib/systemd/system/httpd.service.d
           └─php-fpm.conf, php74-php-fpm.conf
   Active: active (running) since Wed 2020-07-29 07:55:37 UTC; 41min ago
     Docs: man:httpd.service(8)
 Main PID: 20366 (httpd)
   Status: "Total requests: 19; Idle/Busy workers 100/0;Requests/sec: 0.0076; Bytes served/sec:  63 B/sec"
    Tasks: 278 (limit: 9312)
   Memory: 35.4M
   CGroup: /system.slice/httpd.service
           ├─20366 /usr/sbin/httpd -DFOREGROUND
           ├─20368 /usr/sbin/httpd -DFOREGROUND
           ├─20369 /usr/sbin/httpd -DFOREGROUND
           ├─20370 /usr/sbin/httpd -DFOREGROUND
           ├─20371 /usr/sbin/httpd -DFOREGROUND
           └─20583 /usr/sbin/httpd -DFOREGROUND

Jul 29 07:55:37 test-app-devel1 systemd[1]: Stopped The Apache HTTP Server.
Jul 29 07:55:37 test-app-devel1 systemd[1]: Starting The Apache HTTP Server...
Jul 29 07:55:37 test-app-devel1 systemd[1]: Started The Apache HTTP Server.
Jul 29 07:55:37 test-app-devel1 httpd[20366]: Server configured, listening on: port 443, port 80

PHP:

php --version
PHP 7.4.8 (cli) (built: Jul  9 2020 08:57:23) ( NTS )
Copyright (c) The PHP Group
Zend Engine v3.4.0, Copyright (c) Zend Technologies
    with Zend OPcache v7.4.8, Copyright (c), by Zend Technologies

Running PHP scripts directly using php command works fine. The problem is cannot execute PHP file via browser. I got this 503 error:

Service Unavailable The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.

There are a few current entries from the apache log:

xxx.xxx.xxx.xxx - - [29/Jul/2020:08:15:17 +0000] "GET /test.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
xxx.xxx.xxx.xxx - - [29/Jul/2020:08:15:19 +0000] "GET /test.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
xxx.xxx.xxx.xxx - - [29/Jul/2020:08:15:32 +0000] "GET /ASF20thAnniversary.jpg HTTP/1.1" 200 72242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
xxx.xxx.xxx.xxx - - [29/Jul/2020:08:15:41 +0000] "GET /phpinfo.php HTTP/1.1" 503 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
xxx.xxx.xxx.xxx - - [29/Jul/2020:08:16:01 +0000] "-" 408 - "-" "-"

Both txt and jpg files are loaded properly. But not the php file. How to fix this?

I'd like to download a directory from a FTP, which contains some source codes. Initially, I did this:

wget -r ftp://path/to/src

Unfortunately, the directory itself is a result of a SVN checkout, so there are lots of .svn directories, and crawling over them would take longer time. Is it possible to exclude those .svn directories?

In my office, there are several PCs running Windows. Each of them has its own printer. Is it possible to print a file from my laptop simultaneously on those printers, using IP address/lpt/whatever? In the UNIX world, it's possible by using CUPS.