Posts Tagged ‘Server’

openssl with version information under sles11sp1

If you getting errors like this one $ /path/to/program /usr/lib/libcrypto.so.0.9.8: no version information available you need a libcrypto.so and a libssl.so with version information. Here are some information about the problem. openssl has evolved to a very important library in Linux distribution. A lot of cryptographic applications link to it including system libraries like pam [...]

JBoss Cluster – ServerPeerID

$SERVER/deploy/messaging/messaging-service.xml <attribute name="ServerPeerID">${jboss.messaging.ServerPeerID:0}</attribute> For clustered environment each jboss node need a unique ServerPeerID which must be a valid integer.

Linux Virtual Tape Library

to save for later… mhvtl – A Linux Virtual Tape Library http://sites.google.com/site/linuxvtl2/ That could be a really nice backup solution.

Nagios plugin for JBoss monitoring – check_ajp

Released check_ajp v1 – see here

Create a shared disk for VMware ESX guests

To create a shared disk between two or more VMs, login into one of your ESX hosts and create a disk image. cd /vmfs/volumes/#volume-name#/#vm-name#/; vmkfstools -d thick -a lsilogic -c 50G shareddisk.vmdk; Add the new hardrive to the guest(s) and select a new SCSI bus (like SCSI 2:0). VMware create a new SCSI controller. Set [...]

Apache Tomcat & logrotate

Some linux distribution are shiped without a config for the catalina.out (Tomcat application server) $ cat /etc/logrotate.d/tomcat /var/log/tomcat/base/catalina.out { compress copytruncate create 644 tomcat tomcat rotate 30 size 4M } The catalina.out will be rotated after 4 mb and stored for 30 days (/var/log/tomcat/base/catalina.out.1; /var/log/tomcat/base/catalina.out.2.gz and so on)

Linux routing basics

You getting from your ISP a subnet like this 172.30.26.16/28, and your router has the ip 172.30.26.17 ! You need to enable the ip forwarding in the kernel sysctl -w net.ipv4.ip_forward=1 And we need to enable proxy arp! This is necessary because your router must answer all arp request for hosts other than itself sysctl [...]

Ubuntu PHP hardening with Suhosin

Ubuntu includes the php suhosin patches…. Install suhosin extension aptitude install php5-suhosin /etc/php5/{apache2,cli,cgi}/php.ini ; suhosin parameters suhosin.executor.include.max_traversal = 4 suhosin.executor.disable_eval = On suhosin.executor.disable_emodifier = On suhosin.mail.protect = 2 suhosin.sql.bailout_on_error = On Restart apache service apache2 restart Sometimes it could be necessary to set suhosin.session.encrypt to off for some login scripts.

Postfix as relayhost with SASL auth

Client configuration (notebook, workstation what ever) Edit your /etc/postfix/main.cf # TLS client parameter smtp_use_tls = yes smtp_enforce_tls = yes # for postfix < 2.3 # smtp_tls_security_level = secure smtp_sasl_tls_security_options = $smtp_sasl_security_options smtp_tls_CAfile = /etc/ssl/certs/cacert.org.pem smtp_tls_loglevel = 0 [...] relayhost = [mx1.example.com]:587 mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 inet_interfaces = loopback-only [...] smtp_sasl_auth_enable = yes smtp_sasl_password_maps = [...]

z-push, imap server and *irony* a user-friendly Debian whatever *irony*

If you want to use z-push with your imap server (which requires php5-imap) you must add to following line to you /etc/php5/apache2/conf.d/imap.ini file # configuration for php IMAP module extension=imap.so Why is that not set Debian ?