I'd like to upgrade libssl to 0.9.8l version on my Lucid-based server, because of CVE-2009-3555 - they say that 0.9.8l disables SSL renegotiation, fixing the security issue. But there is no 0.9.8l in Ubuntu repositories - only 0.9.8k-7 is available. how can I upgrade this library? BTW. it is really strange why such significant security fix is not available in Ubuntu repositories. why it is not available?
View 9 Replies
I saw, there is a new OpenSSL v 1.0.0 and I wanna ask how to install it. I have this server now Apache/2.2.14 (Ubuntu) PHP/5.2.10-2ubuntu6.4 with Suhosin-Patch mod_ssl/2.2.14 OpenSSL/0.9.8k
And I try to install by reading the Install file in the package but I still have 0.9.8k.
$ ./config
$ make
$ make test
$ make install
Quote: Security expert Georgi Guninski has pointed out a security issue in the 1.0 branch of OpenSSL that potentially allows SSL servers to compromise clients. Apparently the hole can be exploited simply by sending a specially crafted certificate to the client, causing deallocated memory to be accessed in the ssl3_get_key_exchange function (in ssls3_clnt.c). While this usually only causes an application to crash, it can potentially also be exploited to execute injected code.
View 1 Replies View RelatedHow to install Bugzilla 3.6 on Ubuntu Lucid 10.4 through the Advanced Packaging Tool(apt-get install) ???
View 4 Replies View RelatedI'm trying to install 10.04 server into a virtual machine using virtualbox. When I start the virtual machine and try to install using the server ISO, I get the following error:
Code:
This kernel requires an x86-64 CPU, but only detected an i686 CPU. Unable to boot Here is my cpuinfo from lshw:
Code:
*-cpu:0
description: CPU
product: AMD Athlon(tm) 64 X2 Dual Core Processor 5200+
[Code]...
The host OS is 32bit Lucid Lynx desktop, and virtualbox works fine with a Win7 guest. Does anyone know why this might be happening?
Is there a proper way to install 32-bit Firefox 3.5.11 with Sun Java 1.6.0 on 64-bit Lucid 10.04 Ubuntu? I want to run VMWare guest on Lucid and 64-bit Firefox 3.6.9 has issue with VMware.
View 3 Replies View RelatedI asked on irc, and received a sad 'not unless the version in synaptics is with ssl'. Is it not possible to change this ? - or is the only way out to compile/build it yourself?
View 1 Replies View RelatedI need to run a proprietary VPN client (Aventail) that can't use the openssl libraries that are packaged with 64bit F10:The Fedora openssl package does something differently from the original openssl.org package that makes it incompatible with Aventail (see bugzilla ticket 477073) I also believe the Aventail client software requires 32-bit libraries. So, I've determined I need to install 32bit openssl directly from openssl.org, then link my Aventail client to that. Note that I don't want to replace the 64bit openssl libraries currently on my system.
Based on the Bugzilla ticket, I believe I know how to hook up Aventail before I install it simply by supplying a few specific soft links if I can make/compile/whatever the 32bit openssl.org libraries and keep them in their own isolated directory. how to get the 32bit openssl libraries installed in a little corner by themselves on my 64bit system. give a step-by-step on on the commands necessary to place a 32bit version of openssl all by itself in a directory of my choosing?
I'm trying to install the Guest Additions for a VM running a guest Lucid Lynx Server. The problem I'm encountering is this: The vboxadd-install.log for vbox says it "couldn't find the sources of your current Linux kernel" and to "Specify KERN_DIR=<directory> and run Make again."
View 4 Replies View Relatedserver configuration: SCSI 36gig -> sdd; boot and root as it was first in the box;2 IDE hard drives -> sda/sdb for data; and1 SATA drive -> sdc for data.After upgrading to Lucid (not right away, but a bit later), it stopped booting:'Gave up waiting for root device.'ALERT! /dev/disk/by-uuid/........... does not exist. Dropping to a shell!(initramfs)Happily, pushing ^D let it resume booting, but it kept repeating. After some study, I found the Lucid release notes that said "if you upgrade to ext4, you have to manually update Grub". A quick check showed that sdd was now, indeed ext4 - nobody told me! And, why couldn't it update Grub by itself? But, I dutifully ran grub-install and life went back to normal.
Until last night, when I updated the kernel, etc. with apt-get and restarted, and grub dropped dead:More googling turned up this solution, which I used with an install CD:http://tinyurl.com/2dhswzzWhich worked, but it brought back the first problem, and running grub-install doesn't fix it. So, what do I do now?
How to bond NICs in Ubuntu server 10.04/10.10 correctly.
I installed ifenslave-2.6 on a fresh install. Then I tried going into the /etc/network/interfaces file and adding a new entry for bond0 to the file and adding bond-mode 6, bond-miimon 100 and slaves eth1 eth2 to the end of the bond0 config.
That did not work, it keep telling me it cannot bring up the interface even after a reboot it still does not work.
I also followed some tutorial I found online about editing /etc/modprobe.d/aliases
That did not work really well either, the interface came up but had no slaves.
Can anyone give a clue or a current method to bond interfaces in the 10.04/10.10
I'm trying to setup a server for my home office, But I heard that using Maverick is not for office purpose and asked me to use Lucid instead.Should I download the Lucid version install it or do direct downgrade to Lucid?
View 4 Replies View RelatedI would like to disable the ctrl-alt-del feature for a Lucid Lynx server.
i found some info on how to enable this in desktop environments, however nothing explaining how to disable it for a server.
I googled around and can't seem to find the solution to this problem... Ok, I have a server that used to run openSuSE until last week . From it, I ran my shop's website as well as a dokuwiki installation in the same folder as the basic web site:
- DocumentRoot is /var/www/htdocs
- The wiki is /var/www/htdocs/dokuwiki
So, this worked: [URL] Than I move to 10.04 Server... I transfer my web material into /var/www/htdocs, modify the default config in sites-availables and restart apache. What I now see:
[Code]....
I want to pull a couple of packages from Debian Testing, but I can not get apt pinning to lower the testing repo's priorityI add the testing repo to the bottom of /etc/apt/sources.lst.I then add this in /etc/apt/preferences but when I do 'sudo aptitude update' and then 'sudo aptitude full-upgrade', it wants to upgrade all packages to the versions in debian testing.
View 5 Replies View RelatedI've installed Sun Java, tomcat6 and tomcat6-admin on 10.04 server 64-bit. By default, tomcat is configured to run as the tomcat6 user. Everything runs just fine on tcp/8080 as initially configured. Modifying the connector port in /etc/tomcat6/server.xml to anything below 1024 (e.g. port 80) results in:
SEVERE: Error starting endpoint
java.net.BindException: Permission denied <null>:80
This all begs the question... do you *really* have to run tomcat as root to bind to a well-known port? I.e. is there really no way for tomcat to start as root, bind to a privileged port and then drop privs?
I have a (very old) svn repositoy on an ubunta dapper machine. I want to switch to another machine with lucid running. I simply want to "copy" the whole repository to the new machine. I've tried several ways, but the most succesful one was to do a dump on the old machine, copy the file to the new machine and do a load there. The repository has about 28.000 revisions. At revision 3130 it stopped with an error saying some path was not in UTF-8. I tried running a UTF-8 migrationtool on the dapper machine but this told me all files were UTF-8 compatible already. I am really stuck, even a two and a half hour google session didn't provide any answer.
edit: more specific, the error I get is:
Quote:
svnadmin: Path 'beginofpath?218tabase' is not in UTF-8
The end should have been /database instead of ?218tabase. When I look in the revision on the dapper machine this path shows a square at that location, so this is wrong also. When I try to open the dumpdile in gedit I get an errormessage saying:
Quote:
Could not open the file /home/usrname/repo.svndump using the Unicode (UTF-8 ) character encoding
When I change the encoding I get the same error for that encoding.
I am trying to set up Vista on my Lucid within VirtualBox so I can run 3CX IP PBX. I have installed the virtualBox and set up a virtual space called "Vista", but when I start it (Power on) I get an error message - see screenshot enclosed. If I run the command
HTML Code:
'/etc/init.d/vboxdrv setup'
as instructed in terminal I get.
HTML Code:
root@server:/home/server# /etc/init.d/vboxdrv setup
WARNING: All config files need .conf: /etc/modprobe.d/dahdi, it will be ignored in a future release.
WARNING: All config files need .conf: /etc/modprobe.d/dahdi.blacklist, it will be ignored in a future release.
[code]....
Anyone have a tutorial to get puppetmaster and Puppet Dashboard installed? It is way over my head. Requires knowledge of ruby, apache2 passenger module, etc.
Quote: [URL]... Puppet Dashboard Overview The Puppet Dashboard is a web interface for Puppet, an open source system configuration management tool. The Puppet Dashboard currently displays reports with the detailed status and history of Puppet-managed servers (nodes), and can assign Puppet classes and parameters to them.
I have Ubuntu Server 8.04 (LTS) installed and running well, but there a few packages that I'd like to upgrade, without upgrading the entire system (e.g, apache2). Is it possible to include both the Hardy (8.04) and Lucid (10.04) distributions in sources.list? Is that even safe? By the same token, can I add a Maverick repo to my list? I'm using "apache2" as an example, but this is more of a general question.
How should situations like this usually be handled, when only a select few packages would profit from an upgrade that resides in a different Ubuntu release?
On a similar note, is it possible to install two different versions of the same package using the APT tools? Let's say I want two different versions of php5 -- how would I go about doing that?
My apache2 logs aren't being rotated, I have 1 log nearing 100MB in size.
Error shown below when a logrotate happens on apache2 logs:
Code:
error: other_vhosts_access.log:5381 unknown option 'jack' -- ignoring line
error: other_vhosts_access.log:5381 unexpected text
"jack" is a sub-domain.
Ran 'do-release-upgrade -d'on my server running Hardy.No problems during the upgrade.Rebooted after the upgrade completed, and I was presented with the new plymouth screen. This sucks for servers.It sat there displaying the logo for ~5 minutes.Hit CTRL+ALT+F1 through F8 and didn't see anything on the virtual consoles.Finally figured out that I had to hit ESC on the plymouth screen to actually see what was going on.It said /dev/sdi1 had problems along with /dev/md0.It sat there forever with no fsck status and no HDD lights blinking.
SysRq+REISUB and tweaked the boot parameter to remove 'quiet splash' and appended 'S' for single-user mode.Got the attached screenshot.The box has been sitting like this for ~15 minutes.Not entirely sure what to report a bug against at the moment. Plus the somewhat-new requirement of running 'ubuntu-bug' is pretty retarded in this situation. (Yeah, I know I can add some string to the URL to get around it.Why is it such a pain in the *** to report a bug?)I'm going to do some more digging to try and find out what is dying during boot.The new boot process is a bit of a mystery to me still, so if anyone has pointers or any devs want more detailed information,
I just upgraded my server from 9.10 to 10.04. I have ISPconfig installed on it and worked like a charm until the upgrade. Now when I point a browser to my site the page just hangs as if it is trying to load it but I never get an error nor does it load the page. I have tried to restart apache using /etc/init.d/apache2 restart in which I receive an fail error:
root@ubuntu:~# /etc/init.d/apache2 restart
* Restarting web server apache2 (9Address already in use: make_sock: could not bind to address 0.0.0.0:80
no listening sockets available, shutting down
[Code].....
After this I still get the same results when trying to load the page in the browser.
I cannot load anything in the www root or virtual host files.
After my 8.04 debacle here:I basically gave up on trying to write an install guide for Hardy and Amanda. Others had done it better and with how muddled I was by the end of getting a working server, I wasn't sure I could repeat it.Now in Lucid, I've managed to get another working amanda server going, I'm fairly sure I can repeat it and but I question:Installation with 'apt-get install amanda-server' uses the user backup in the group backup.Installation of the ZWC client uses the user amandabackup. while thankfully ZWC has included reg keys:
HKEY_LOCAL_MACHINESOFTWAREmandaWC1.0Install BackupUserHKEY_LOCAL_MACHINESOFTWAREmandaWC1.0Install RecoveryUserto change the user on the client, this is messy, requires regedit (which normally is locked out by group policy), editing the service in service.msc and creation of a new user account named backup in addition to the installer's default on each client.The actual question is:1) Is there a reason for the use of backup:backup? (rather than amandabackup:disk or amandabackup:backup)
2) Is there any sort of flag that could be set, script to change the user within the repo atinstall time.Or generally an easier way of doing this than compiling each time I do an install.
I have a new lucid server. When I login to it via ssh it shows:
Code:
Linux syn 2.6.32-22-server #36-Ubuntu SMP Thu Jun 3 20:38:33 UTC 2010 x86_64 GNU/Linux
Ubuntu 10.04 LTS
[code]....
I just installed opendkim but I have no idea how to set it up.
View 2 Replies View RelatedHaving finally got Samba shares and printer shares working on my Lucid Lynx server, I've noticed that the throughput from/to those shares is very slow to what I was used to when I had those shares on a W2K server.Having Googled this problem, I noted that there was a known issue with this in Karmic (believe Brian Wu was looking at it). However, I don't see any results in Google as to this being a problem in Lucid.
I know ipv6 can cause a problem in this regard but having issued the command:
lsmod | grep inet6
I know that ipv6 is indeed disabled on my Lucid server. Any further information on whether the error reported in Karmic still applies in Lucid, and can this be addressed in any way?
I have a laptop and a Desktop both systems only used by myself behind a router. Ubuntu Lucid on both and 64 bit systems. I have installed NFS with the desktop as server and Laptop as client. The NFS only works with the firewalls (UFW) disabled on both machines. My current setup on the desktop ufw is
[Code]...
how you change the default version of python in Lucid. Lucid comes packaged with 2.6 but we use 2.5 where I work. I didn't see much of anything on the web for this topic so figured I'd post something. If you are installing python2.5 on Lucid version 10.04 (comes package with 2.6 only)
View 1 Replies View RelatedI hope someone can help me setting up receiving e-mail on my home server. Ubuntu Lucid and Zarafa from repository. Zarafa is running well. I can send e-mail via the relay smtp host from my ISP. But though the e-mail address should be correct I never see this e-mail appear in zarafa inbox.The e-mail reaches the server via an open 25 port forwarded to my server, but it seems postfix does not know how to handle it. Or is there something else going wrong here? Below are my settings. These are the settings I added or edited. the rest is Ubuntu Lucid (10.04) standard.
/etc/postfix/main.cf
Code:
myhostname = xxxx.dyndns.org
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
[Code]...
