Category: CentOS Red Hat Enterprise Smeserver Bluequartz Strongbolt

Security: Webserver HTTPS with Self Signed Certificate Do it yourself in 5 Minutes!!

Today the Point of Security and encrypted Webserver Communication is rolling over every User who hosts own Websites on the Internet. Last decades HTTPS was only used by Online Login Pages like Shops and Banks to verify the Communication between a User PC and the Website. But after January 2015 the most Search Engines like google decides to force index of Websites with HTTPS Protocol. The Background is that a TLS encrypted Connection isn’t easy to track and to force “drive-by-load-Viruses” to the Website Visitors. But a lot of Webmasters of the Opensource Community were angry about this handling. Thats […]

Owncloud: Howto harden owncloud access with a ssh tunnel and squid

If you want to use a private secure owncloud (WebDAV Space Server) as Backup for all your devices you can harden the access thru a openssh Login with key auth and a squid as relay. Install apache2, php5, mysql-Server, openssh, squid3 config Apache2 to listen on https://localhost:443 setup squid3  and config the Proxy to listen only on localhost:3128 install owncloud to /var/WWW with forced “https” settings at the config.php create ssh-keys to auth with password protected key to the SSH Server If done, you can access the private Backup-Server via a Terminal/ Putty with the Tunneling Options $ssh -L 3128:localhost:3128 username@owncloudserver.home Open your Browser on your […]

Ubuntu 13.04 Bug: gvfs smb Nautilus freeze hangs on copy files from a Samba Share

gvfs-smb Bug #1075923 (seen on Debian+Ubuntu+Centos..more..) Workaround: downgrade gvfs-* to Version 1.12 of 12.10 with: add /etc/apt/sources.list deb precise main deb-src precise main run: sudo apt-get update install synaptic: sudo apt-get install synaptic run synaptic: sudo synaptic remove all gvfs-* nautilus with synaptics (REALLY CHECK ALL! see “dpkg -l | grep gvfs”) search gvfs-*, select, press CTRL+E (Force Menu) select: gvfs-* Versions 1.12 install by run install button search and install nautilus again.. Voila…Test Nautilus copy 1TB Files without freeze

Linux Tip: Split Console Screen on Widescreen Laptop / PCs with “screen” and “terminator”

Current Laptops / PCs uses 16:9 Widescreen Displays and if you dont want to use Xorg (Gnome,unity,Openbox Desktops) you can use on Linux Console the program called “screen” it offers: – Split Consoles horizontally and vertically – disconnect the screen and let the scripts/commands active on remote Systems – reconnect if the remote Session was broken cause network problems On Gnome or unity you can use “terminator” see: – manpage of screen –

Linux Info: UEFI + GPT + Secure Boot = Dongled OS = Printing Dollars

UEFI+GPT+dongled OS = Printing endles Dollars for PC Manufacter and  M$.   UEFI was offered for “security reasons” but in my opinion the normal users should be prevented by this “UEFI LOCK” to use Dual Boot or remove Windows on owned hardware, in cases of Mainboard failures the Users are forced to buy new Mainboards with OS-Key. Legacy Mode on Bios will disappear in the next generation of PCs than every OS is “dongled” to Hardware like MacOS to their Products…  

Linux FreeBSD: Protect your Disc Data against power loss

Problem: If you use IDE or SATA Disc Drives inside your Workstation or Server without a additional uninterruppted power supply after a power loss your Disc Drives can lose data, do not boot clean up agian or damage the drive headers and sectors. Background: SATA or IDE Drives uses “Disc Cached Controllers”, the count of this disc cache reach from 8 to 64 megabytes. In case of data write to disc, the disc controllers do cache some data who are often used. A Raid 1 Disc Mirror is affected too by this problem. SCSI od SAS are not using Cache […]

FreeBSD Linux: Remove Clear GPT Partition Table from drives

Problem: FreeBSD 9 use GPT Partitionlabel by default to remove with Linux do: fdisk message: WARNING: GTP (GUID Partition Table) detected on '/dev/sdX' The util fdisk isn't support GPT. do on console: sudo parted /dev/sdX mklabel msdos (Enter Yes!) quit now use Linux fdisk to recreate a new partion Table

Linux Bug: SATA failed command: WRITE FPDMA QUEUED ata3.00 ncq freeze hang

Problem: If you copy or install Files from Disk to Disk somtimes the fresh installed Debian Ubuntu Linux in Textmode (server minimal setup) current kernel freezes or lost connect to the Disks. Take a CLOSER LOOK the Error often affects ALL DISKS !! If only one Disk  affected replace the Drive to SATA600 Hardware:  Asus M4n75TD NEW with Phenom 1090T X6 and 8GB Ram and /dev/sda: Model=Hitachi, FwRev=GM4OA52A, SerialNo=GEA530RF1RDDGA Config={ HardSect NotMFM HdSw>15uSec Fixed DTR>10Mbs } RawCHS=16383/16/63, TrkSize=0, SectSize=0, ECCbytes=56 BuffType=DualPortCache, BuffSize=15118kB, MaxMultSect=16, MultSect=off CurCHS=16383/16/63, CurSects=16514064, LBA=yes, LBAsects=976773168 IORDY=on/off, tPIO={min:120,w/IORDY:120}, tDMA={min:120,rec:120} PIO modes:  pio0 pio1 pio2 pio3 pio4 DMA modes:  […]

Centos 4.7 4.8 SME Server 7.4 7.5.1 LSI Megaraid ATA PERC 2 Driver (Dell Poweredge 600SC 1600SC)

For install of Centos 4.7 / 4.8 and SME Server 7.4 / 7.5.1 with Kernel 2.6.9-89.0.16.EL Kernel 2.6.9-89.0.16.ELsmp take my compiled Driver here and copy it to /lib/modules/2.6.9-89.0.16.ELsmp/kernel/drivers/scsi/megaraid look for only this modules, remove old or other! megaraid.ko (my compiled driver) megaraid_mm.ko megaraid_sas.ko edit with: #nano /etc/modprobe.conf change first line!!! to: alias scsi_hostadapter megaraid go: cd /boot make: mv initrd-2.6.9-89.0.16.ELsmp.img run to make new kernel-initrd: mkinitrd initrd-2.6.9-89.0.16.ELsmp.img 2.6.9-89.0.16.ELsmp check for new kernel-initrd: ls [Enter] shows: initrd-2.6.9-89.0.16.ELsmp.img ..ok try to reboot.. Attention! After every signal-event post-upgrade/yum update check modprobe.conf for first line!!! is set to “megaraid” Enjoy your old PERC […]

SME Server usefull Backup Tips Custom Templates Customizing SME

On SME Server: Data Path which are saved by Console Backup – save all Custom-Scripts which you run with Cron or Root at Location /root – save all modified Custom Templates at /etc/e-smith/templates-custom – all ibays – all /home – if you not know how to make /etc/e-smith/templates-custom files copy the standard templates from /etc/e-smith/templates to /etc/e-smith/templates-custom and modify them there don’t forget to run after customize: #signal-event post-upgrade and #signal-event reboot

SME Server USB Disk Stick mount Problem at SME Server Backup Console

Problem: On SME Server the HAL Daemon often not recognize a USB Stick or Disk which you can use for “Console” Backup Program. Solution: – Create a Script with #nano /root/ – insert: service haldaemon restart service messagebus restart console exit This restart the HAL Environment before Console (SSH-Admin-Tool)is opened. To prevent Users to write on the Shares if you run the Backup you can add: service haldaemon restart service messagebus restart service smb stop console service smb start exit This will stop Samba-Windows Shares! and prevent File-Access-Lockwaits!