gmane.linux.devices.blueonyx.user

[BlueOnyx:10667] Re: Slightly OT: openwebmail last access for anaccount?

Randy Smith — 2012-05-25T19:18:38

Look at /var/log/openwebmail.log

grep username /var/log/openwebmail.log | grep login

or

grep "username - login" /var/log/openwebmail.log

[BlueOnyx:10666] Re: Slightly OT: openwebmail last access foranaccount?

Ken - Precision Web Hosting, Inc — 2012-05-25T18:57:31

----- Original Message ----- 
From: Roy Urick

We have a possible security issue we are dealing with , and need to see when 
the last time openwebmail was accessed for a particular mailbox.
 Does anyone know a definitive way to tell when the last successful login 
was?
<<

Roy

Have you tried
cat /var/log/openwebmail.log | grep login | grep 
"the-actual-account-username-here"


----
Ken Marcus
Precision Web Hosting, Inc.
http://www.precisionweb.net

[BlueOnyx:10665] Slightly OT: openwebmail last access for anaccount?

Roy Urick — 2012-05-25T18:47:08

We have a possible security issue we are dealing with , and need to see when
the last time openwebmail was accessed for a particular mailbox. 

 

Does anyone know a definitive way to tell when the last successful login
was?

[BlueOnyx:10664] Re: FTPS on Blueonyx?

Matt James — 2012-05-25T13:49:47

I've been wondering about this for a while and wondering what the best way would be to prevent such security issues while still maintaining SFTP.

In my research, I found this link: http://blog.hackedexistence.com/locking-down-sftp-user-without-ssh-on-centos-5

Has anyone tried this kind of technique before?  Are there any loopholes you can think of that the author didn't reference?

Having said all of this, I hadn't heard of FTPS before, so I'll look into that as another option as well.

Thanks for the info, guys!

--
Matt James
Web Programmer
RainStorm Consulting
(207) 866-3908



On May 24, 2012, at 1:00 PM, Chuck Tetlow wrote:

[BlueOnyx:10663] Re: Automate Secondary DNS

Richard Morgan — 2012-05-24T23:27:36

Hi Dan

I like the script... the import routine I tried was 95% Michael's script:

http://data.smd.net/scripts/dns-slaves/

I found clearing the dns data before the import was easiest.  Maybe it's in 
need or revisiting.

Regards, Richard


----- Original Message ----- 
From: "Dogsbody" <dan-BgfCaCeoFIFg9hUCZPvPmw< at >public.gmane.org>
To: "BlueOnyx General Mailing List" <blueonyx-tmYmGKlYHG7xDQNxMPk8KQ< at >public.gmane.org>
Sent: Thursday, May 24, 2012 11:20 PM
Subject: [BlueOnyx:10662] Re: Automate Secondary DNS

[BlueOnyx:10662] Re: Automate Secondary DNS

Dogsbody — 2012-05-24T22:20:25

Here is the export script... https://gist.github.com/2784525

Good point on having to remove all the secondary DNS data for the import 
but should be fixable by doing two diffs to remove domains that have 
gone and add new ones.

What commands did you use to add the secondary DNS data?

Dan


On 24/05/2012 13:24, Richard Morgan wrote:

[BlueOnyx:10661] Re: FTPS on Blueonyx?

Chuck Tetlow — 2012-05-24T17:00:08

Yes there is a difference.  And SFTP can be a BAD thing!  Because while the FTP server limits where a site user or admin can go - SFTP doesn't.

If you FTP in as a site admin, you can only go up to the site's root / directory - which translates to /home/sites/www.domain1.tld/.  In the FTP session - a user or admin can't even see there is anything higher, let alone get into it.

But if you SFTP in as that same site admin, you can go all the way up to the system's root directory.  They can browser the entire server's directory tree, and read anything that has readable permissions.  Whether they can write files elsewhere in the system or modify them depends on the directory permissions.  But that's plausible, especially in the /tmp directory.  (Can you imagine what could be done by someone placing executable code in the /tmp directory and then executing it by calling it from a PHP script in their website??)

Also with SFTP, a site admin can also down from /home/sites/ into other site's /home/site/www.dom

[BlueOnyx:10660] Re: FTPS on Blueonyx?

Wayne Michael — 2012-05-24T16:32:52

There is a difference with FTPS and SFTP isn't there? 

one uses SSH and other does not. 

I use SFTP and that requires SSH to be turned on (Shell access).

[BlueOnyx:10659] Re: Automate Secondary DNS

Richard Morgan — 2012-05-24T12:24:57

Yes please, I'd love to see the primary export script.

I've done (ok, tried) similar by using some of the DNS tools to export a 
primary list
and on the secondary DNS to import it - never quite got it working as I
wasn't happy with needing to remove all secondary DNS data for the import to
work.

----- Original Message ----- 
From: "Dogsbody" <dan-BgfCaCeoFIFg9hUCZPvPmw< at >public.gmane.org>
To: "BlueOnyx General Mailing List" <blueonyx-tmYmGKlYHG7xDQNxMPk8KQ< at >public.gmane.org>
Sent: Thursday, May 24, 2012 12:25 PM
Subject: [BlueOnyx:10658] Automate Secondary DNS

[BlueOnyx:10658] Automate Secondary DNS

Dogsbody — 2012-05-24T11:25:22

Hi All,

Has anyone done anything with automatically adding secondary DNS entries 
on a BO system?

I have a customer that is always adding and removing domains on their BO 
server.  They are happily doing the Primary DNS and I am doing the 
secondary DNS on a couple of other BO servers that are in separate 
datacentres.  Of course this means changing the secondary servers every 
time a domain is added or removed.

I used to use a great service from an ISP where you could FTP them a 
file that contained the domain (zone) name and primary DNS server and 
they would automatically secondary host those domains.  I automated the 
sending of this from BO easy enough and I'd like to add the same sort of 
secondary functionality to BO if possible.

I'm happy to share my code if anyone else is interested.

Dan

[BlueOnyx:10657] dovecot master user

Stuart Clark (Datacenta — 2012-05-24T08:17:13

I wonder if anyone has used this before. Most of what I have found on the net is relating to older versions of dovecot.
I am migrating a couple of servers and want to use imapsync or similar to sync all mail accounts using this one master user.

I have followed a couple of guides and I still get authentication problems. Can anyone outline the best method.

Regards,

Stuart

[BlueOnyx:10656] Re: FTPS on Blueonyx?

Michael Stauber — 2012-05-24T03:21:22

Hi Dirk,


Just connect to the box with an SFTP capable FTP client. If I have to use 
Windows for FTP (happens rarely enough) I use FlashFXP, which (among other 
things) supports SFTP. 

Some clients (like FlashFXP) need to know which "SSL method" or which "SSL 
authentication method" they should use when they connect to the server. Set 
this to "Auth SSL" or "Auth TLS", which our ProFTPd supports out of the box.

Other than that you don't need to do anything special.

[BlueOnyx:10654] Re: Ploop

Michael Stauber — 2012-05-23T12:57:09

Hi Steffan,


Yeah, I follow the discussions there as well to stay in the loop about 
interesting ideas and approaches.

I looked at Ploop and experimented a little with it on 6106R.

Naturally many users on the OpenVZ mailing list are comfortable using bleeding 
edge code. And there is quite some infatuation with experimental file systems.

Last year GlusterFS (http://www.gluster.org) was "the next big thing" for 
OpenVZ, this year it is Ploop. I also checked GlusterFS, as it was a 
particularly nice alternative to DRBD for clustered systems. 

But at this time there is one thing that both Ploop and GlusterFS have in 
common and it really affects the ability to market it as a fundamental 
component in a commercial environment:

Both are experimental and not yet finished.

Don't get me wrong: Ploop is indeed interesting in so far as it allows to 
compartmentialize the VPS's in a fashion that isolates them better from the 
master node. That has a few advantages over basing a VPS directly on a 
"regular" files

[BlueOnyx:10653] Ploop

Steffan — 2012-05-23T08:34:45

Hello Michael,

Is this something for Aventuring
http://wiki.openvz.org/Ploop
I read a lot of positive results

Steffan

[BlueOnyx:10652] Munin

Howie Dines — 2012-05-23T06:40:15

Hi all,

 

Has anyone put together a Munin package for 5108R /
2.6.32-220.7.1.el6.x86_64 (SMP) x86_64 ?

Or even a how to with list of files needed etc.

I had a play last night and got trapped in a loop of perl-Digest-HMAC
needing perl-Digest-SHA and visa versa.

 

I know I should go at look at my notes from when I put together the Dincom
BQ version, but I'm getting lazy in my old age ;)

 

Best Regards,

Howie

 

http://www.dincom.co.uk/bq

[BlueOnyx:10651] Re: php session 5107R

Michael Stauber — 2012-05-23T00:31:50

Hi Steffan,


By OS defaults that directory to 770 has permissions. And it reverts back to 
that every time the SO supplied "php" RPMs are updated.

However, there is a mechanism in place in BlueOnyx that sets it back to 777 
upon CCEd restart or after automated YUM updates that were scheduled through 
the GUI.

We need the 777 permissions on that directory so that suPHP enabled Vsites can 
store their session data in it.

[BlueOnyx:10650] Re: word press install.php memory error

Ernie — 2012-05-22T06:40:05

Another things to watch is some Wordpress plugins need more memory too.

You don't realize until you install the plugin and start gettingthings
like blank pages. Best to over allocte memory a bit.


- Ernie.

[BlueOnyx:10649] Re: word press install.php memory error

Greg Kuhnert — 2012-05-22T05:03:30

There is actually something better than a doc. Compass / Solarspeed have 
a pkg that takes care of the hard work for you.

http://www.compassnetworks.com.au/shop/wordpress-p-30.html

or for German users...

http://www.compassnetworks.com.au/shop/wordpressgerman-p-115.html

These packages have pre-configured settings embedded in the package that 
take care of minimum requirements to install a wordpress site. It also 
has an app backup and database backup system. It also allows CMU 
migration of the meta data allowing a site to be easily ported from one 
server to another. It also has an upgrade function, making it easy to 
update to newer wordpress versions as they are released your existing 
sites with the click of a button.

Regards,
Greg.

[BlueOnyx:10648] Re: word press install.php memory error

DD — 2012-05-21T22:31:13

allocate 7680 bytes) in /home/.sites/28/site1/web/wp-includes/pluggable.php
on line 852"

I've had this during installation of 3.3.2 - increasing the amount of memory
from 16MB to 24MB solved it for the installation issues but I then found I
was unable at one point to create/edit new posts/pages (I forget which)
until I increased it to 32MB.


DD

[BlueOnyx:10647] Re: PHP Breaking

Steven Howes — 2012-05-21T20:10:23

Yep. If it helps track it down, if I go in and disable PHP, then add an alias and at the same time re-enable PHP, it malfunctions. So it appears to be a change in alias preventing the PHP setting being written (even if the PHP setting is being changed at that time)

Steve

[BlueOnyx:10646] Re: word press install.php memory error

Administrator — 2012-05-21T19:36:51

It looks like we have a wordpress install screen...

I will print out your items list for future sites.

Thanks for all your help.

-----Original Message-----
From: blueonyx-bounces-tmYmGKlYHG7xDQNxMPk8KQ< at >public.gmane.org [mailto:blueonyx-bounces-tmYmGKlYHG7xDQNxMPk8KQ< at >public.gmane.org] On Behalf Of Administrator
Sent: Monday, May 21, 2012 12:18 PM
To: BlueOnyx General Mailing List
Subject: [BlueOnyx:10645] Re: word press install.php memory error

That's the first thing I did, im an restarting the server....

-----Original Message-----
From: blueonyx-bounces-tmYmGKlYHG7xDQNxMPk8KQ< at >public.gmane.org [mailto:blueonyx-bounces-tmYmGKlYHG7xDQNxMPk8KQ< at >public.gmane.org] On Behalf Of Ken - Precision Web Hosting, Inc
Sent: Monday, May 21, 2012 11:56 AM
To: BlueOnyx General Mailing List
Subject: [BlueOnyx:10643] Re: word press install.php memory error


----- Original Message ----- 
From: "Administrator" <Administrator-RVFJ52jnSpRZR/UsZiPJyHxStJ4P+DSV< at >public.gmane.org>




Set the allowed PHP memory to a higher number;