I have set up a nis slave server on Fedora 14. It was set up on a laptop so that the user can log in when he is at home (no NFS, local home dir). However, whenever the eth0 is disconnected, ypbind fails.
I have tried the same setup on a RHEL 4 (configured it as a slave server) against the same master nis as on the Fedora 14. Disabling eth0 on it however does not fail ypbind.
I don't know how configure or how explain what i want to do .... i have one server with dhcpd and dns name cache (also squid as a transparent proxy and iptables), this works fine but logs show this code...
View 1 Replies View Relatedhow can i teste that my slave dns work better;knowing that my primary dns is in an other machine .i tried to dig the slave ;i have the response but when i halt my primary dns ,i couldn't dig the slave dns.
View 6 Replies View Relatedim running two name servers using bind9 in my infrastructure. both are identical distros ubuntu 10.04Both are also receiving updates from each other, so no worries there.The issue is, when the master name server goes down, the slave for some reason doesnt take over and act as a primary name server. Can someone please help me on how to enable this feature using bind9?What basically I want to happen is when the master server goes down, slave will take over the primary role till the master comes back online
View 7 Replies View RelatedHave someone used Linux heartbeat to send email when the Slave server becomes the Master? I've read I can configure the MailTo under.
But I really don't know how to do it. I basically need my primary server to send an email when it becomes inactive and all the activities are manage by the secondary node.
I need to setup a Linux VPN server at work for resources' sharing, I currently have a server running CentOS 5.4, and tried endless tutorials on the web, but to no avail, and can't find where the logs are kept for the VPN server to check where the error is. But all my attempts to try to connect keep failing.
View 9 Replies View RelatedI have two servers on a vlan at my datacentre/colocation and previously both servers had public IPs on their eth0 interfaces. The servers are HP ProLiant DL360s - one is a G4 and one is a G5 The newer G5 is now the LAMP server and the G4 has been retired and I want to repurpose it as an iSCSI target using openfiler freenas or similar.
My G5 has public/static IPs lashed to the eth0 physical interface and the eth1 is not configured to do anything yet. The G4 will have both interfaces available - perhaps one for ssh access from one of my static public IPs and the other to be a private IP on the local vlan. Here is what I am trying to get my head around...
The G5
eth0 - Public IP - full LAMP services on two or three virtual interfaces
eth1 - Private IP 192.168.0.1
The G4
eth0 - Public IP for ssh
eth1 - Private IP 192.168.0.2
Because my traffic between eth1 on these boxes is via private IPs on the local private vlan it doesn't add to my quota for bandwidth. How do I go about configuring the routing and gateways and other aspects of this so that I can run a private IP space network between the eth1s and still serve the outside world from the eth0s...
I am afraid that if I assign the private IPs to the eth1 interfaces the routing may either not work or interfere with the access to the production internet facing interfaces (eth0s).
I got two IP's in my dedicated server. Both are external IP's. I would like to make connections using 2nd IP address under eth0:0 interface. For example: when using "lynx whatismyip.com" should display my 2nd IP. How to do this using iptables ?
View 1 Replies View RelatedI am studying RHEL myself, not clear with following topics How to configure DNS slave server in RHEL 5 Whether named.rfc1912.zones file entry can be included in named.conf itslef,if not What is following entry means inside named.conf file
zone "." in{
type hint;
file "root.servers";
[code]...
I configured a master DNS server 192.168.2.10 working OK. After that I configure a DNS Slave Server (92.168.2.11)the initial replication worked fine. This is test environment for my certification. I see how the zones from my master are transferred
zones in Master
training.com.db
transferred zone to my slave when I started named service
sec.training.com.db
That's Ok but I added some IPs to resolve to my master zone
webserver IN A 192.168.2.30
fileserver IN A 192.168.2.31
I restart/reload named on master and after that I go to slave and restart/reload but zones wuth the new values are not replicated. How long does it take for slave to take the changes from master? how is the procedure manual or automatic? I see If I go to slave and delete sec.training.com and restart named the zone with the changes is transferred but that is very manual... I am including my DNS Configuration so you can take a look.
I have bind configured with Internal and External views, but the slave server is transferring only the Internal zone files for both Internal and External - a diff shows no difference, and the log shows the same serial number.What am I missing in the config so the slave server properly receives updates from the master for both views?
View 2 Replies View RelatedI recently set up replication on a production server and some rows are not making it to the tables on the slave. After 3 days I can see 200+ entries (of 161,000~) that are on the master and not the slave. Logs under /var/log including mysqld.log, mysql.status, messages do not show any problem.I have already tried dropping the DB on the slave and setting up the replication again by doing a stop slave, set slave options such as were in the logging to start, drop table, restore the dump previously made by the master, start slave, but the issue persists.
I following the documentation on the MySQL site for setting up replication so I'm not sure why this is having issues.What can I do to investigate and fix this?
OS :: Debian Lennyldap :: Openldap (newest one/get from apt-get)replication :: yes (on different machine)secure :: yes (tls)hi there i got problem on slave ldapwhat i am trying to do now is to have machine authenticate at slave ldapwhen master ldap die. So i stop slapd service at master ldap and try to authen. As a result of it, the prompt for login appears to fill in username but with the correct password couldn't make login successfully. I have checked at log file but there is any authen log of that login I wonder if it doesn't direct authen to slave ldap server. Here is my client config ::
#
# LDAP Defaults
#
[code]....
I have set up a master BIND DNS server with 2 slaves. All the services start up fine on all 3 servers, but zones and named.conf info is not being replicated. The 3 servers are tentatively installed on a Xen virtual server for testing purposes. All 3 servers are 64bit and installed with: -> CentOS release 5.4 (Final) - 2.6.18-164.10.1.el5xen -> BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2
All 3 servers are fully updated. All 3 servers have static IP addresses. The services on all 3 servers start up without any apparent issues. Master server: # /etc/init.d/named restart ; tail -f /var/log/messages
[Code]...
I have a secondary slave dns server setup, it has transferred all the records from the primary master.But when I run a few checks from outside using tools on the net it says:Tried to fetch SOA record for domain, but DNS server ns2.domain.com returned error code Refused.I disabled iptables, and tried again, same result. So I think it is something in the named.conf file? I appreciate any extra set of eyes on it. Just feel like I'm so close!
key "rndckey" {
algorithm hmac-md5;
secret "mysecretkey";
[code]....
I have a large environment with many VLANs and NIS slaves serving the VLANs. Previously we have not used a securenets file (don't worry; we don't use NIS for passwords, just NFS maps), but I'd like to start. The number of NIS slaves makes it annoying to update a securenets file on each when we add a new VLAN. Is there a way to propagate the securenets file to each slave when I update it on the master?If not, I guess I can live with propagating the file once and only visiting new slaves when I build them, because in 99% of cases a NIS slave only serves its own subnet.
View 1 Replies View RelatedI have configured master and slave Bind servers. Everything works fine. But whenever I add a new zone entry at master server it is not getting updated at slave server in logs I see this error:
client 192.168.1.1#43428: view external: received notify for zone 'yourdomainname.com': not authoritative
At master server I do not see any error or warning message. This error clearly indicates that named.conf file does not have zone entry in it or domain name is wrong. While checking the named.conf file I see that the zone entry has not been updated at slave server. If I update it manually and reload named on slave then zone files (db files) are getting created without any issue and any modification at master server for the zone records are also getting updated. My concern is why zone record is not getting appended at slave server in named.conf file.
Is there anything I am missing in the configuration. I am pasting the steps which I have followed to configure my master and slave server:
Configure Bind as master and slave server
Install Bind on your server
yum install bind
OR
sudu apt-get install bind9
Generate RNDC Key using the command
rndc-confgen -a -k rndc-key
it will stored in /etc/rndc-key file
Master Server IP 192.168.0.1
Slave Server IP 192.168.1.1
Master Server Configuration
options .....
I am trying to setup Rocks Cluster on a Cluster containing 1 Master node and 23 slave nodes connected via a Switch. The master node's eth1 is connected to public IP and eth0 is connected to the slave nodes via the switch.
I was able to install the Rocks cluster on the machine, I configured the IP for master through DHCP. When I run the command 'insert-ethers' on the master node, it doesnot get me any slave nodes.
setting up the Rocks cluster on all the nodes?
In our Server they configure Master / Slave Dns using SSL authentication while tranfering the zone files, i dont have much idea about ssl authentication for Dns, how it will works
View 3 Replies View RelatedI try to generate a server client code. What i try to do is sending video streams from eth0 and eth1 to the other server programs' eth0 and eth1. In order to do that, i decided to use SO_BINDTODEVICE. But the code is not working. Am i misunderstood the usage of SO_BINDTODEVICE.
1-Defining two ports
2-Defining two sockets
3-Assigning host ips on them
[code]....
I started over combining the first parts of this guide: [URL]..ubuntu8.04 (Only the first few parts in terms of configuration and naming). Then I used this guide: [URL]..Surprisingly enough all steps worked.
1. Now I need to set up LAMP servers with MySQL master/slave replication and Apache rsync.
2. Next i need to add BIND to both my Load Balancers with master/slave backup and replication...
Are there any guides to look at to follow on these? Can tou point me to the right direction for BIND with replication.
I can't figure out how to prevent Zend Server starting at boot up. My temporary solution is to issue the following after boot-up:
Code:
sudo /usr/local/zend/bin/zendctl.sh stop
I'd like to:
1. Prevent it from starting during boot
2. Create two launcher icons to Start and Stop Zend Server
There are over a dozen of servers that I need to monitor for services running on them. Hence, I have created a separate VM on which I am hosting scripts for various purposes. I have written a script (bash) that checks the status of the services running on those servers. Since my script has this line of command (for example):
Code: /sbin/service vsftpd status I have created a user (let's name it user_monitor) and added it to /etc/sudoers file by issuing "visudo" on all the servers. Since I need to execute the command remotely from the VM so I have generated a Public RSA Key (ssh-heygen) and added it to "authorized_keys" file on all the servers. But on some servers when issue a command such as the following:
[Code]....
I�m installing fail2ban to improve the security of a home asterisk server which from time to time becomes the target of some sip account cracker and/or ssh brute force attack.For those not familiar with fail2ban, this utility monitors log files to find matches with user specified expressions to identify the presence of a brute force attack. Then configures iptables rules to block the offending IP.Here�s an example:
Code:
NOTICE[1734] chan_sip.c: Registration from '"613"<sip:613@xx.xxxx.xxx.xxx>' failed for 'yyy.yyy.yyyy.yyy' - No matching peer found
[code].....
I wanted to know if it is possible to turn off readdirplus calls at the server side. I am currently using a fedora core 8 server.
View 1 Replies View RelatedI'm using CentOS 5 and just found out that there are people using my Apache Web Server as proxy (version 2.2.3 the OS's default).
I've checked out that my mod_proxy is already disabled but the unauthorized incoming request is still very large.
So I tried to compile an Apache from raw (2.2.17) just enabling mod_rewrite and then found out that the 'proxy' request is still there.
Tried httpd -l and here are the modules inside the Apache :
Code:
# /opt/apachew/bin/httpd -l
Compiled in modules:
core.c
mod_authn_file.c
[Code]....
There should be no mod_proxy but why should it still accepting proxy request? I checked the access_log file and still found [URL] and so on.
My question is : - How to block all the proxy request and only accepting the normal web server request? I also have tried to enable proxy in the previous Apache and then setting up "ProxyRequest Off" and Proxy * only from localhost but the request is still there.
I tried by myself using the webserver as proxy in browser and all the URLs I opened including the false URL will be redirected to my index.php and this should show me that 'you-can't-use-this-as-proxy-anymore' right?
Insane people still believe they could use my server and they keep trying and trying.
I couldn't block the IP addresses because some of them are using the mobile data (GPRS/UMTS) and that is our market for the website.
I have a Centos NIS server that is working fine with other linux clients. i need to have a Solaris 8 client bind to the NIS domain and found out that Sol8 does not support MD5 format passwords that the NIS master is generating. so i am trying to disable the MD5 encryption on the nis master and it does not seem to work. i run this command
authconfig --disablemd5 --enablenis --nisdomain=lab --updateall
and it restarts portmap and nis services ok. on the master server i then do a yppasswd username and a make passwd and it still uses the 34 char password format. what do i need to do to disable MD5 passwords in a centos nis server?
We are having 12 windows computers xp which are connected to a linux machine which has samba server installed on it for backup purposes of these 12 windows users. We want the like this , that a user copy a folder from their local machine and paste it to the samba server . but they cannot delete this folder once the backup is there at linux machine.
So this is working fine. But our users are able to Rename the folder they have pasted at linux machine which we dont want . and even they are able to cut and paste files from 1 folder to another folder in the samba server. We just want them to copy a file or folder from their local windows machine and paste to samba server and they can also read it (copy and paste back to their windows computer)whenever they want . but we dont want them to cut and paste within linux machine and rename that file as well.
I have created a VPN through network manager to a Windows 2003 server.
However when I try connecting it fails every time, I have tested with a windows XP client and this works so this would indicate I am doing something wrong in the network manager configuration.
I seem to be having a problem with mod_proxy and https websites. A simple connection to port 80 works fine but all calls to 443 fail.
I had a look at my firewall but can't see anything that would block port 443, although I get no tcpdump traffic on that port on the deb01 client when I try and connect to it. I disabled the firewall but still no luck.
My configuration consists of 3 VMs (KVM) each running a different website.
I get the following error when connecting to ssl deb01
Code: An error occurred during a connection to deb03.example.com.
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)
The following is what can be found on the host
Code: