I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes.
This is explicitly local log data, not remote syslog, logstash, etc. Obviously, there's several ways to address this issue. What I'd like to know is if there is a fairly "standardized" way to solve this issue.
Typically, I solve this problem with sudo but either POSIX groups or acls is attractive as it's few chars for the users to type and it removes entries from the sudo log. However, I don't believe I've ever seen that done before. What is your experience? How do large install base sites address this?
I am not a Linux newbie, but haven't touched SuSE in a very very long time (last time I tried it, it was SuSE 7!). Finally now I felt like giving it a try, and many things seem strange or unnecessarily complex. I have a series of questions.
How do I ensure that my packages are uptodate? It sounds silly, but I tried the obvious methods already. I have disabled the default repositories that show up when you do zypper lr, and added Tumbleweed and packman repositories (Essentials, Multimedia, Extra). Then I did a sudo zypper ref --force and then sudo zypper dup, and it tells me many dependencies are not met. I have already added solder.allowVendorChange=true to /etc/zypp/zypp.conf, so it should not care which repository the latest versions are in, and just upgrade to it. Even when I chose to skip the packages with unmet dependencies, and seemed like quite a bit happened in the background, I opened Firefox afterwards and the version was 7! I am guessing things did not go as expected. But of course this is not a problem with SuSE, but I am not understanding the system right. How do I do it right?
When I start typing arguments of a command, for example sudo zypper install, when I type sudo zypper ins and keep hitting TAB, nothing happens! It always worked in Ubuntu and I feel very uneasy with this. Is this how SuSE is supposed to be?
When I try to install something, and I start writing its name, even though the package exists and I am sure of it, hitting TAB does not autocomplete it. This is also quite inconvenient. Why is it not happening?
There are many things in SuSE that are really great, and I think I will stay with it and not go back to Ubuntu once I settle these very rudimentary issues. But right now they are giving me a lot of grief! Please help!
I am interested in setting up a raspberry pi as the local end of a printing solution. In my testing the pi chokes on acting as a complete cups based print server. It seems a little underpowered for some of the ghostscipt processing and other filtering that occurs-- particularly on larger or complex documents the processing time can be 5 or more minutes.
My question is can the processing be largely done elsewhere and the prepared end product of the processing chain be fed to the pi for output on the connected printer?
So in this scenario any arbitrary document (html, pdf, text) is initially 'printed' on a relatively powerful machine but the output is stored in a file. This file is then grabbed by the pi and with all the heavy work out of the way easily printed using cups. I know files can be pushed through cups in raw mode but I am fuzzy on the pros and cons and the applicability in what I describe. I have tested this with pdftops creating a ps file then feeding that raw to cups and I think it works but it seems like there may be a cleaner solution.
This scenario would ideally work for any number of printer types.
What is the most efficient way to block access to 8-10k IP addresses?
My server runs EngineX on Debian.
If possible, I would like to show all of the addresses an Internal Server Error (500).
We have an ongoing problem here at work. We have a lot of websites set up on shared hosts, our cms writes many files to these sites and allows users of the sites to upload files etc..
The problem is that when a user uploads a file on the site the owner of that file becomes the webserver and therefore prevents us being able to change permissions etc via FTP.
There are a few work arounds, but really what we need is a way to set a sticky owner if that's possible on new files and directories that are created on the server. Eg, rather than php writing the file as user apache it takes on the owner of the parent directory.
I'm not sure if this is possible (I've never seen it done.) Any ideas?
We're obviously not going to get a login for apache to the server, and I doubt we could get into the apache group either.
Perhaps we need a way of allowing apache to set at least the group of a file, that way we could set the group to our ftp user in php and set 664 and 775 for any files that are written?
Cheers,
John.
Can't boot after I did a aptitude full-upgrade and let it update menu.lst (did a diff first and it looked good).
This is what I've done so far in the BusyBox shell:
mkdir /tmp/xvda1
mount /dev/xvda1 /tmp/xvda1
chroot /dev/xvda1
nano /boot/grub/menu.lst
This file looks like this:
title Ubuntu 12.04.1 LTS, kernel 3.2.0-31-virtual
root(hd0,0)
kernel /boot/vmlinuz-3.2.0-31-virtual root=UUID=/dev/xvda1 ro quiet splash
initrd /boot/initrd.img-3.2.0-31-virtual
title Ubuntu 12.04.1 LTS, kernel 3.2.0-31-virtual (recovery mode)
root(hd0,0)
kernel /boot/vmlinuz-3.2.0-31-virtual root=UUID=/dev/xvda1 ro single
initrd /boot/initrd.img-3.2.0-31-virtual
titleUbuntu 12.04.1 LTS, kernel 3.2.0-24-virtual
root(hd0,0)
kernel/boot/vmlinuz-3.2.0-24-virtual root=UUID=/dev/xvda1 ro quiet splash
initrd/boot/initrd.img-3.2.0-24-virtual
titleUbuntu 12.04.1 LTS, kernel 3.2.0-24-virtual (recovery mode)
root(hd0,0)
kernel/boot/vmlinuz-3.2.0-24-virtual root=UUID=/dev/xvda1 ro single
initrd/boot/initrd.img-3.2.0-24-virtual
titleUbuntu 12.04.1 LTS, kernel 3.2.0-24-generic
root(hd0,0)
kernel/boot/vmlinuz-3.2.0-24-generic root=UUID=/dev/xvda1 ro quiet splash
initrd/boot/initrd.img-3.2.0-24-generic
titleUbuntu 12.04.1 LTS, kernel 3.2.0-24-generic (recovery mode)
root(hd0,0)
kernel/boot/vmlinuz-3.2.0-24-generic root=UUID=/dev/xvda1 ro single
initrd/boot/initrd.img-3.2.0-24-generic
titleChainload into GRUB 2
root(hd0,0)
kernel/boot/grub/core.img
titleUbuntu 12.04.1 LTS, memtest86+
root(hd0,0)
kernel/boot/memtest86+.bin
From what I remember, the upgrade added the UUID= string. Should I remove these? Or rather, how do I get my system back online again? Thanks.
Update: Seems like I can't even edit the file.
[ Error writing /boot/grub/menu.lst: Read-only file system ]
I have a jar that runs forever (infinite loop with socket listening thread) and need it to run in the background at all times. An example would be: "java -jar test.jar" How do I do this? Thanks in advance!
I trying to find the best way to upgrade from PHP 5.1 to 5.3. The CRM software I am running on this server requires this upgrade or else I probably wouldn't even perform it, because it seems like it's going to be perhaps trickier than I hoped it would be. Being still new to the programming world, these routine upgrades are still worrisome to me.
I am running apache 2.2.6 (Fedora), PHP 5.1.6 and MySQL 5.0.27 on this server.
Hi,
I need a binary/script (php) that does the following.
Start n process of X in the background and maintain the number processes.
An example:
- n = 50
- initially 50 processes are started
- a process exits
- 49 are still running
- so 1 should be started again.
Please, this is urgent.
Thanks!
Michael
I just got my new computer with a much bigger harddisk. I think I copied all important files over but just to be sure, I'd like to keep a disk image of my old disk. To save space, I'd like to compress it but I didn't find an option to mount a compressed image.
My goals:
Result must be easy to access
No need to decompress the whole thing before I can access anything
Files should be quick to locate - no TAR/CPIO archive
Necessary space should be less than just copying the files over
So ideally, I'm looking for a read-only, compressed file system which I can create in a file and which grows automatically.
Configured Clear OS to be in Gateway mode on a machine with two NIC cards.
eth0:192.168.2.0/24 with ip 192.168.2.27 which is connected to a modem and thus have internet connectivity.
eth1:192.168.122.0/24 with ip 192.168.122.10 which is connected to other machines in LAN through switch.
LAN machines with network 192.168.122.0 is not getting internet.How can they get internet Through Clear OS gateway.I have enabled packet forwarding in clear os using "ip_forward=1" What am i missing?.Can you please help me in this.
Following are the static routing i have added:
on LAN machine1 with ip address 192.168.122.11
ip route add 192.168.2.0/24 via 192.168.122.10 dev eth0
ip route show
192.168.2.0/24 via 192.168.122.10 dev eth0
192.168.122.0/24 dev eth0 proto kernel scope link src 192.168.122.11
But still 192.168.2.0/24 network is not reachable.Where can be the problem??
How can I specify a port for the destination ip? When I do scp -p 0000 it still tries to connect on port 22, not the one I'm specifying.
scp svn_backup.tgz [email protected]:/path/to/new/svn/
I have following problem - I damaged my system (Gentoo - by rebuilding using gcc 4.5) beyond repair. I unmounted /home, copied /etc + other important files and I've started reinstalling system.
However I forgot to copy init script. It is still present in kernel image that I have. How to extract it? Please note that initrd is not a separate file but is in the kernel image.
I would like to know how to load balance two Business DLS links which have fixed IPs. I believe it would look something like this:
ip route add default scope global \
nexthop via gatewayDLS1 dev interface1 weight 1 \
nexthop via gatewayDLS2 dev interface2 weight 1
Is this be all I need in order to get multipath routing? Please, give me a more detailed answer if possible, thanks you.
I have an old server running Fedora 4 that occasionally just stops responding via network for about an hour. This happens 1-2 times a week.
Also no connection from the server itself to any other computer on the network is possible when it happens. The network settings and routes look fine. There are no unusual log messages and no unusual processes running at that time.
If I restart the network or just do an ifconfig eth0 down & ifconfig eth0 up it works fine afterwards.
I know that the server should be updated to a currently supported OS, but that is not really an easy option right now.
Any ideas on how I could diagnose and fix that problem?
I have a ubuntu server 12.04 which was connected to my wireless network with no problem
I replaced the wireless router but kept the ESSID and password the same.
All other devices on network have connected correctly.
However the Ubuntu Server will not route correctly.
It will connect to the wifi router, and get a dhcp served IP address, however it will not route anything. I cannot ping the router from the server. the contents of /etc/resolve.conf are updated with the information from the router, (the host name has been served)
I know there is nothing wrong with the router or the server, or the wireless card etc.
I'm assuming there's some cached setting that associates the old router with the ESSID and causing the issue.
I've got a lot of other devices connected to the router, so don't want to change the name of the ESSID.
How do I fix this?
EDIT:
outputs (abbreviated as I've got no cut and paste)
netstat -rn:
Kernel IP Routing table
Dest Gate Gen Flags MSS Window irtt Iface
0.0.0.0 192.168.0.1 0.0.0.0. UG 0 0 0 wlan0
192.168.0.0 0.0.0.0. 255.255.255.0 U 0 0 0 wlan0
Here's my situation:
an Ubuntu 12.04 Host running VirtualBox;
two guest VMs running Ubuntu Server 12.04
home network, so my Host pc has a wireless connection to the router of my ISP.
My problem is in one of the virtual machines: it has 3 NICs, one in NAT mode and the others in Host Only mode. My purpose is to use eth0 (NAT) for Internet access and eth1, eth2 (Host Only) for management of internal virtual network (eth1 uses a VBoxNet with this IP 192.168.69.254).
Whenever I try to $ping 8.8.8.8 I get Destination Host Unreachable.
While if I $ping 192.168.69.10, that is the IP of the other VM, it works.
I can't also ping my Host nor my router
My /etc/network/interfaces file is:
auto lo
iface lo inet loopback
auto eth0
iface eth0 inet dhcp
auto eth1
iface eth1 inet static
address 192.168.69.1
netmask 255.255.255.0
auto eth2
iface ifconfig $IFACE 0.0.0.0 up
up ip link set $IFACE promisc on
down ip link set $IFASE promisc off
down ifconfig $IFACE down
$route -n returns:
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 10.0.2.2 0.0.0.0 UG 100 0 0 eth0
10.0.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
192.168.69.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
192.168.100.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
Forgetting for now what eth2 needs to do and its setup, why I can't go outside the Host box?
What can I do to help you helping me? :-)
I know that there's a Ubuntu-specific StackExchange website, but I thought that I'd ask here because it's a server-specific question. If I'm wrong in my logic... Well, you people are better at this than I am! O=) On with the show!
I'm in the process of installing Oracle Database 11g R2 Standard Edition onto Ubuntu Server 11.10. I found a guide on the Oracle Support Forums that walks you through the process fairly easily. Unfortunately, I'm running into issues installing one particular dependency: slapd.
When I go to install it, I get this error message:
(Reading database ... 64726 files and directories currently installed.)
Unpacking slapd (from .../slapd_2.4.25-1.1ubuntu4.1_amd64.deb) ...
Processing triggers for man-db ...
Processing triggers for ufw ...
Processing triggers for ureadahead ...
Setting up slapd (2.4.25-1.1ubuntu4.1) ...
Usage: slappasswd [options]
-c format crypt(3) salt format
-g generate random password
-h hash password scheme
-n omit trailing newline
-s secret new password
-u generate RFC2307 values (default)
-v increase verbosity
-T file read file for new password
Creating initial configuration... Loading the initial configuration from the ldif file () failed with
the following error while running slapadd:
str2entry: invalid value for attributeType olcRootPW #0 (syntax 1.3.6.1.4.1.1466.115.121.1.15)
slapadd: could not parse entry (line=1051)
dpkg: error processing slapd (--configure):
subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
slapd
E: Sub-process /usr/bin/dpkg returned an error code (1)
After much Google searches and forum trolling, I have yet to find a definitive answer as to what's going wrong. The error messages seem straight forward enough, but I have no idea how to debug this. Can anyone offer some assistance? Again, if I'm asking in the wrong place, I apologize. If I'm indeed asking properly, then thank you for any and all help!
Hi,
I have to install jre1.5.0_10 but jre1.6.0_16 is already installed.
How can i remove jre1.6.0_16.
The application i am try to access requires jre1.5.0_10.
Please Help
I have following scenarios:
Single partition mounted as /, with lots of disk space.
There is a range of directories (/pg/tbs1, /pg/tbs2, /pg/tbs3 and so on), and I would like to limit total size of these directories.
One option is to make some big files, and then mkfs them, and mount over loopback, and then set quota, but this makes expansion a bit problematic.
Is there any other way to make the quota work per directory?
I have set up a single laptop (I have 10 of these exact models) for a demonstration next week. I want to copy the configuration (Fedora 13 with the software for demonstration) to the 9 other machines. Is this simply a dd operation? I may be thinking that I require more than what is really needed.
Thanks for the assistance!
Hi,
I am running under Debian and I have recently upgraded to Squeeze.
Since then, I am having so much problems with Webmin. So I have decided to remove it using:
apt-get remove webmin
And then I downloaded the sources of Webmin 1.530 and compiled it. But the installation process has been stucked for an hour so I canceled it. I even tried to install it using the .deb file without success (installation stucks for hours).
From now, I cannot install Webmin since I uninstalled it.
So I would like to know how can I make a full clean up of any traces of Webmin on my server. And then I will retry to install it.
Hi.
I've set up dead simple NAT:
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -o ppp0 -j MASQUERADE
Everything works almost ok. Almost.
The problem I've expirienced is some hosts are not reachable by NAT clients, i.e.
there's http://code.jquery.com/jquery-1.4.2.min.js - I can download it from server, but
in case of NAT client download stalls on connection stage. I thought its FFs fault, but wget has the same
issue. I didn't find any logs/messages that can shed some light on this situtation.
Any ideas what's going on?
Maybe some tricky thing in sysclt is causing this?
P.S. 3/3 client boxes are expiriencing this issue. This is definitely server trouble.
For security reasons, I have two workstations i front of me, and I can only transfer data between them through a USB key.
As you can imagine, it can get quickly tiresome, but the most annoying is having to unmount the things before removing them. Not umounting them results in missing files most of the time, even if I remove them a while after having last written to them.
Now, since they're only used for transferring smallish files, and each are basically written once and read once, I don't need the fancy pansy caching infrastructure that makes clean unmounting a necessary step. And since the data is always a copy of something I have at hand, I don't care if the filesystem croaks from time to time.
But anyway the system doesn't need to force that on me, it could simply make sure everything is committed with a second, and works synchronously. Then when I remove the key, nothing is lost. Is there a way to do this?
I would appreciate any other tips on handling this situation.
Edit: it appears the situation has changed between RHEL5 and Fedora up to F11 on one hand, and F12 on the other. The latter use DeviceKit-disk, and I haven't quite figured out how to do this. The method provided below in gconf does not work anymore.