Rescue Linux System - UK Datacenter
May 7, 2009Does rapidswitch and poundhost offer Rescue Linux System on their portal?
I want to load a linux distro on server RAM and do my own FreeBSD installation.
Does rapidswitch and poundhost offer Rescue Linux System on their portal?
I want to load a linux distro on server RAM and do my own FreeBSD installation.
I have a hard drive installed with CentOS 5 before.
Now the hard drive had crash (kernel panic)
I insert in Fedora rescue cd and succesfully booted and it mount under /mnt/sysimage
The question is how do I get into the hard drive? I just need to copy 2 files inside my home directory
I cannot see any sdb or anything like that /dev except for sda1~sda15 which I believe is the rescue cd image
#df
/dev /dev
/tmp/loop0 /mnt/runtime
/dev/sda2 /mnt/sysimage
/dev/sda1 /mnt/sysimage/boot
/dev/sda5 /mnt/sysimage/tmp
/dev /mnt/sysimage/dev
i'm now at
sh-3.2#
First time logging in rescue mode, so I'm a little bit confuse, how to change the root passwd?
View 5 Replies View RelatedSomebody knew password databases of my forum do not know how then enter and modify the forum style templates and add iframe codes. Among the actions of its currency, although that problem still:
Initially I found phpshell uploaded on my site and I delete him , and I realized that there is no other phpshell.
1- I have changed database password and ftp password.
2 - I coded config file using zend
3- I make chmod 751 for directory and 644 for files.
I worked all these actions, however hacked on a daily basis.
How come this hackers to my server?
How closed this issue?
What is the log files, which would know from which all the details from entering the database?
I am planning to start linux hosting but don't have much knowledge about linux Operating system... can I do this without having sufficient knowledge of linux background?
Also please suggest me some good links from where I can get basic linux command and some kind of flash tutorials from which I get to know how to do work in Appache and dns etc.
how to download tar file using Terminal,
Where would someone go to learn Linux System Administration?
Are the Redhat courses worthwhile?
Without having all of the operating systems at my disposal for testing, I would like to figure out a way to determine the operating system of a remotely accessed Linux machine.
It seems pretty strange though, since cPanel reports both machines I am using as being
CENTOS Enterprise 4.5 i686, yet one's uname -a reports:
Code:
Linux hostsentry.crucialwebhost.com 2.6.9-023stab044.4-enterprise #1 SMP Thu May 24 17:41:23 MSD 2007 i686 i686 i386 GNU/Linux
Code:
Linux main.7kb.org 2.6.9-55.0.6.ELsmp #1 SMP Tue Sep 4 21:36:00 EDT 2007 i686 i686 i386 GNU/Linux
I'm assuming there is a way to determine the OS from this information. Anyone know how?
I would like to know which Linux family Operating System is more stable and have a better support for a Dedicated Server .....?
View 8 Replies View RelatedHow to install ASSP on linux system without cpanel.
View 2 Replies View RelatedI do not know how this happened though. When I use find command on shell, I got the following error.
find: File system loop detected; `/var/named/chroot/var/named' is part of the same file system loop as `/var/named'.
It is minimal CentOS6.3 install with plesk 11.
I enabled rkhunter in Plesk 12 to check the system weekly. I get a warning now, which I never got in older versions of Plesk:
The current hash function (/usr/bin/sha1sum) or package manager (DPKG) is incompatible with the hash function (Unset) or package manager (Unset) used to store the values. Debian 7.6 x64
in CENTOS 6.6 / PLESK 12 when I use the find command I get this notice:find: File system loop detected; "/var/named/chroot/var/named" is part of the same file system loop as "/var/named".
View 2 Replies View RelatedIs it possible to query for a list of system users using the API RPC? I know it's possible with a MySQL query
Code:
select id, login, account_id from sys_users order by login;
I've searched through the API RPC manual, but I don't see a way to do this. I always have to specify a filter, I can't find a way to just query for all users.
I got a new Server with Plesk 12.0.8 (old one has 11.5.30). Now I have to migrate all Subscriptions of the old System into the new one.
I tested it with one item and all time I get this warning:
Warning:SSL certificate "default certificate" Execution of /opt/psa/admin/plib/api-cli/certificate.php --create default certificate -cert-file /opt/psa/PMM/tmp/pmm-cert-GzVcei -key-file /opt/psa/PMM/tmp/pmm-privkey-PgXbaU -print-signature -admin -ignore-nonexistent-options failed with return code 1. Stderr is Unable to create certificate "default certificate": Unable to set the private key: Probably, the private key format is invalid.
My /var/www/vhosts/system directory was accidentally deleted. The actual vhost directories are unharmed, e.g. /var/www/vhosts/example.com. Is there a non-destructive script I can run to re-initialize the system directory? I am on Plesk 11.5.30.
View 2 Replies View RelatedI have just used rsync to backup a dedicated server to a new cloud server. I put the files in a plesk webspace 'Backup' folder for ease of use (gui). In File Manager for that webspace it shows the folder user and group as root, which is obviously correct as rsync maintains users etc?
Thats fine, I just wanted to be able to back them up along with the rest of the server configuration and content.
However, when I run backup it says "For security reasons, backing up is performed on behalf of subscription's system user. This system user has no read access to:" and "So it was not backed up. All other data was backed up successfully. To fix this issue you may grant access read/write to the file or directory for system user "(username)" or "apache"."
I don't know how to give read/write access to the system user? Through file manager there is no option to change permissions.
I have a Cloud VPS with 1and1 and Plesk is installed on it. I happen to have a VPS view that doesn't include DNS functionality for the domains.
So, i have added domain to the system, create an email address... because i dont see on how i can manage DNS settings I have set up cloudflare and pointed domain to the cloudflare and cloudflare is pointing to server.
so I have email: me@domain.com
on cloudflare i have:
A domain @ IP
A www @ IP
CNAME mail @ domain
MX 10 mail.domain
In plesk i have set up an alias, mail.domain for domain, that has access to email.
I go to the network-tools.com to look up me@domain.com:
[Resolving mail.domain...]
[Contacting mail.domain [IP]...]
[Timed out]
I have a server with openSuSE 13.1 and Plesk 12.0.18#7 and get following Warnings:
Warning: phpinfo(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone. in /srv/www/vhosts
Warning: getdate(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone. in /srv/www/vhosts/s535829144.online.de/httpdocs/contenido/includes/pseudo-cron.inc.php on line 306
I set php.ini from UTC to Europe/Berlin and restart the Server, thats no Effect.
etc/php5/apache2/php.ini
etc/php5/fastcgi/php.ini
etc/php5/cli/php.ini
My company and I are currently discovering Plesk on a CentOS 6.6 based system. We are migrating from an old system on which FTP usernames could hold uppercase letters, which apparently is not the case in Plesk 11 (or is it because of CentOS?).
Anyway, as we can't change these FTP account names, I was thinking about creating a rule with mod_rewrite in the proftpd.conf file.
So the question is: how can I reinstall/reconfigure proftpd with this module activated? I don't even know where to find the corresponding package (which repo, correct version, etc...)
When I deny all other traffic for the "System policy for incoming traffic" to secure the server by only allowing the explicit ports I've requested to open, my server stops operating correctly.
It appears when I set the "System policy for incoming traffic" to deny, it appears to be disrupting various functions such as web traffic over ports 80/443, FTP, SSH, they either work extremely slow or don't work at all.
I brought this up with my Plesk license provider and they stated that the Plesk firewall doesn't add any tracking for ephemeral ports, therefore if you set the policy to drop for incoming/outgoing, it's not going to allow proper TCP communication since the return socket can't be opened. Also that the firewall is an explicit deny system rather than explicit allow based system.
Am I doing something wrong? All I want to do is to block all ports other than the ones I've set to allow. Is this how it is supposed to work?
I've written a script to send property data to rightmove.co.uk as part of their new automated data feed. However they require a secure connection to their systems when posting the data. They have provided me with a .pem file which is a security certificate. I need to install this on my plesk server but where to start as most certificates require a private key and the actual certificate. The private key I have been provided is only an 8 charter string, like a password.
View 1 Replies View RelatedI thought this problem was fixed in Plesk 11.5 but I'm still getting the following backup warnings in Plesk 12..."For security reason backup is performed on behalf of subscription system user...."
My phpbb forum creates cache files which have apache ownership and Plesk backup manager gives warnings that it cannot backup the files due to ownership errors.
I have searched for days for a solution without success. If I change the permissions to owner instead of apache the forums don't function correctly.
Is this a Plesk bug that is still evident in Plesk 12?
I have a new CentOS 7, with Plesk 12, CentOS 7 by default has XFS filesystem.
I try migrate sites from another Plesk Server but Plesk agent say: "hard disk quota is not supported due to configuration of server file system" (my CentOS 7)
My CentOS7:
CentOS Linux 7.0.1406 64 bits
Plesk 12.0.36
My fstab
[root@ns ~]$ cat /etc/fstab
/dev/mapper/centos-root / xfs defaults,usrquota,grpquota 1 1
UUID=ba391bd5-786c-4ae7-8bbd-f36f831ae6eb /boot xfs defaults 1 2
/dev/mapper/centos-swap swap swap defaults 0 0
I added "usrquota,grpquota", then mount -o remount / ; but when I try quotacheck -fmv / I gest this:
[root@ns ~]$ quotacheck -fmv /
quotacheck: Skipping /dev/mapper/centos-root [/]
quotacheck: Cannot find filesystem to check or filesystem not mounted with quota option.
but quotaon command works:
[root@ns ~]$ quotaon /
quotaon: Enforcing group quota already on /dev/mapper/centos-root
quotaon: Enforcing user quota already on /dev/mapper/centos-root
The problem here is why Plesk does not recognize quotas as enabled on CentOS 7??
If I try this command it seems good:
[root@ns ~]$ /usr/local/psa/admin/sbin/usermng --isquotable
0
Also I do this:
- Disabled Selinux
- Check all packages as quota, etc.
I have been using some reference: [URL] ....
Would like to know what are the dangers of backing up and restoring full entire system backups (with plesk installed) to another server with a different ip address? Will the restored plesk setup operate properly and offer an ip address change in the system, or will there be any pre-requisites required such as manual ip changing within the system core files?
View 1 Replies View RelatedI've been trying to fight off a hacker's attack for the past 24 hours. Chronologically, this is how the events evolved:
- Yesterday, I tried SSH-ing into my server as usual and I got an error saying that the host's key was not recognized, which made a bit suspicious
- I tried logging into my VPS' PowerPanel, but my root password did not work, which I found disturbing. I reached out to support and they reset the password
- I ignored Putty's warning and SSH-ed into the server and was greeted by this, which I've never seen before:
Code:
Last login: Wed Mar 14 2007 14:13:35 -0500
No mail.
This made even more conscious and I started actively searching for indicators of a breach.
- The following processes were running, and I did not recognize them:
Code:
named 15756 0.0 0.4 36088 2256 ? S Mar14 0:00 /usr/sbin/named -u named -t /var/named/chroot
dmorg 26360 0.0 0.1 2264 872 pts/2 T 20:40 0:00 sh -c (cd /usr/share/man && (echo ".ll 14.2i"; echo ".pl 1100i"; /usr/bin/gunzip -c '/usr/share
dmorg 26361 0.0 0.1 2264 512 pts/2 T 20:40 0:00 sh -c (cd /usr/share/man && (echo ".ll 14.2i"; echo ".pl 1100i"; /usr/bin/gunzip -c '/usr/share
- Then I found a user called 'pma' in the /home directory, which I had never created. I could not find any suspicious files in the user's directory
- I finally spotted the point of breach in /var/log/messages:
Code:
Mar 15 15:05:25 xxxxxxxxx passwd(pam_unix)[28121]: password changed for root
Mar 15 15:06:34 xxxxxxxxx su(pam_unix)[30182]: session opened for user news by (uid=0)
Mar 15 15:07:16 xxxxxxxxx su(pam_unix)[30182]: session closed for user news
Mar 15 15:22:04 xxxxxxxxx sshd[20118]: Listener created on port 22.
Mar 15 15:22:04 xxxxxxxxx sshd[20119]: Daemon is running.
Mar 15 15:28:01 xxxxxxxxx su(pam_unix)[32568]: session opened for user pma by (uid=0)
Mar 15 15:28:45 xxxxxxxxx su(pam_unix)[32568]: session closed for user pma
Somehow they had gotten in as root and then opened sessions for news and pma.
- This morning I finally found where the hacker's files are hiding. He had created a new user overnight and a directory in there called "...". The folder contains various files:
Code:
[root@xxxxxxxxx root]# ls -al
total 445
drwxr-x--- 8 root root 1024 Mar 16 15:48 .
drwxr-xr-x 20 root root 1024 Mar 16 15:48 ..
drwxr-xr-x 2 1004 1004 1024 Dec 17 08:57 ...
-rw-r--r-- 1 root root 1126 Aug 23 1995 .Xresources
-rw------- 1 root root 14641 Mar 16 15:47 .bash_history
-rw-r--r-- 1 root root 24 Jun 10 2000 .bash_logout
-rw-r--r-- 1 root root 234 Jul 5 2001 .bash_profile
-rw-r--r-- 1 root root 176 Aug 23 1995 .bashrc
-rw-r--r-- 1 root root 210 Jun 10 2000 .cshrc
-rw------- 1 root root 38 Jul 26 2005 .mysql_history
drwx------ 2 root root 1024 Mar 15 18:01 .ssh
drwxr-xr-x 2 root root 1024 Mar 15 15:21 .ssh2
-rw-r--r-- 1 root root 196 Jul 11 2000 .tcshrc
Code:
[root@xxxxxxxxx root]# cd "..."
[root@xxxxxxxxx ...]# ls -al
total 420
drwxr-xr-x 2 1004 1004 1024 Dec 17 08:57 .
drwxr-x--- 8 root root 1024 Mar 16 15:48 ..
-rwxr-xr-x 1 1004 1004 141817 Sep 3 2001 init
-rw-r--r-- 1 1004 1004 113482 Mar 15 15:09 log
-rw------- 1 1004 1004 640 Feb 18 05:34 messages
-rw-r--r-- 1 1004 1004 664 Feb 27 01:12 muhrc
-rwxr-xr-x 1 1004 1004 165596 Nov 2 2004 pico
-rw------- 1 1004 1004 5 Mar 15 15:09 pid
[root@xxxxxxxxx ...]#
- Here's what's in the log file:
Code:
[root@xxxxxxxxx ...]# less log
[Thu 08 May 08:03:27] + ---------- NEW SESSION ----------
[Thu 08 May 08:03:27] + muh version 2.05d - starting log...
[Thu 08 May 08:03:27] + listening on port 6667.
[Thu 08 May 08:03:27] + muh's nick is 'StefanG'.
[Thu 08 May 08:03:27] + trying server 'geneva.ch.eu.undernet.org' on port 6667...
[Thu 08 May 08:03:28] + tcp-connection to 'geneva.ch.eu.undernet.org' established!
[Thu 08 May 08:03:29] + connected to 'Geneva.CH.EU.Undernet.org'.
[Thu 08 May 08:03:30] + caught client from 'pcp02588223pcs.shlb1201.mi.comcast.net'.
[Thu 08 May 08:03:45] + authorization successful!
[Thu 08 May 08:03:45] + reintroducing channels...
[Thu 08 May 08:07:54] + ---------- NEW SESSION ----------
[Thu 08 May 08:07:54] + muh version 2.05d - starting log...
[Thu 08 May 08:07:54] + listening on port 6667.
[Thu 08 May 08:07:54] + muh's nick is 'StefanG'.
[Thu 08 May 08:07:54] + trying server 'eu.undernet.org' on port 6667...
[Thu 08 May 08:07:55] + tcp-connection to 'eu.undernet.org' established!
[Thu 08 May 08:08:05] + connected to 'Diemen.NL.EU.Undernet.org'.
[Thu 08 May 08:08:05] + caught client from 'pcp02588223pcs.shlb1201.mi.comcast.net'.
[Thu 08 May 08:08:05] + authorization successful!
[Thu 08 May 08:08:05] + reintroducing channels...
There is a whole lot of these in that log file, and the timestamps look odd. I am not sure what all this is.
- This is where I am at right now. Can you guys help figure this thing out?
How did they get in? What sort of vulnerability are they using? How can I patch things up?
- Here is my server info:
Code:
[root@xxxxxxxxx ...]# uname -a
Linux xxxxxxxxx.org 2.6.9-023stab033.9-enterprise #1 SMP Tue Dec 5 14:40:57 MSK 2006 i686 athlon i386 GNU/Linux
[root@xxxxxxxxx httpd]# vmstat 5 5
procs -----------memory---------- ---swap-- -----io---- --system-- ----cpu----
r b swpd free buff cache si so bi bo in cs us sy id wa
1 0 0 390688 0 0 0 0 0 0 0 8365 1 0 99 0
0 0 0 390524 0 0 0 0 0 0 0 0 0 0 100 0
0 0 0 390524 0 0 0 0 0 0 0 0 0 0 100 0
0 0 0 390528 0 0 0 0 0 0 0 0 0 0 100 0
0 0 0 390528 0 0 0 0 0 0 0 0 0 0 100 0
- I have Apache & MySQL & PHP running. I host 3 websites. They run Simple Machines Forum 1.1.2, phpMyAdmin, phpcollab, awstats and that's about it.
how the inside of a DC is but I was looking at NetDepot's.
I thought that they used rackmounts in datacenters?
Like these:[url]
These appear to me as desktops?
[url]
Am I mistaken?