Search Results

(2024-02-08) Problem The local, internally generated certificate that the Fortigate presents for various things has expired. Solution # execute vpn certificate local generate default-ssl-key-certs Are you sure to re-generate the default RSA, DSA, ECDSA and Ed...

(2023-02-21) How many can I define? On the device in question: fgt300d-a # print tablesize system.vdom: 0 0 10 system.datasource: 0 0 0 system.accprofile: 0 0 18 system.npu:port-cpu-map: 0 256 512 system.np6: 0 256 512 [...] Output isn't greppable, unfortuna...

(2024-02-06) Problem CLI way to duplicate the "policy lookup" tool Solution diagnose firewall iprope lookup <src ip> <src port> <dst ip> <dst port> <protocol> <Incoming_interface> eg: # di fire iprope lookup 10.291.12.21 999 10.150.32.144 1433 tcp port1 (Sou...

(2023-11-15) Example Link Monitor Configuration config system link-monitor edit "VLAN601" set srcintf "VLAN601 set server "172.26.2.49" set gateway-ip 172.26.2.49 set source-ip 172.26.2.50 set interval 1000 set failtime 15 set recoverytime 15 next end Example...

Problem # telnet localhost 110 Trying 127.0.0.1… Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. +OK dovecot ready. user $USERNAME +OK pass $PASSWORD +BYE internal login failure. error report written to server log. Solution In /etc/d...

(7 August 2012) Problem Running a yum operation on CentOS 4, I get the error: not using ftp, http[s], or file for repos, skipping - 4 is not a valid release or hasnt been released yet Solution CentOS 4 is now EOL and has to be retrieved from the vault: Open ...

Problem You has some variety of the Adaptec 2010s RAID SCSI controller installed. Solution CentOS 4.7 (and earlier 4.x) includes a driver for it, but the autodetection routines don’t work. You have to do this at the install CD boot prompt: Boot: linux text nop...

Installing ntfs support for CentOS RedHat and CentOS do not include ntfs, possibly for legal reasons. Update (thank you Dr Tru Huynh): A RPMforge-friendly method detailed here; this is probably safer in the long term as it means it is more likely that you'll g...

Letting rdate work from other machines # chkconfig time-stream on Add a rule to /etc/sysconfig/iptables , probably just after the ssh rule (port 22): -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 37 -j ACCEPT

Problem (Asked on SuperUser.com) I have a CentOS 4.x server running software raid. The server has two scsi disks in hot-swap trays. mdadm reports that the raid has failed, and so I would like to replace it. I examine /proc/mdstat, which tells me my two raid de...

Problem I have a user who wants PHP 5 on our server. Solution This is a horrible problem. Advice on the mailing group is to rebuild apache and php from scratch and run that. Personally I'd prefer shooting the user, but since that generally frowned upon I got t...

(2014-01-16) Problem I want to run Subversion v1.85, client and server, on CentOS 5 (today's victim server is 5.10). Solution You can't do that. Well you can, but it is ugly. You have several problems: Subversion wants a newer version of sqlite than is shippe...

Mounting nfs file systems in the %POST section of a CentOS 5 kickstart mount 172.20.0.1:/home /mnt/temp -o nolock,udp The nolock option seems to be a new requirement.

Problem If I create a file on an nfs-mounted filesystem on one machine, the file may not be immediately visible to another machine looking at the same nfs-mounted filesystem. In our case this happened with a compute farm environment, where a job was dispatched...

Problem I am running a CentOS 5.3 x86_64 (fully updated as of today). It has a video card I cannot identify -- I run lspci and it identifies itself as: 01:00.0 VGA compatible controller: nVidia Corporation Unknown device 0615 (rev a2) The previous admin left ...

(26 September 2012) Process Accounting # chkconfig psacct on; service psacct start This will create a file /var/account/pacct which will record processes. It will get rotated; by default 30 days are kept. You can look at it in a couple ways: lastcomm # ...

Displaying Remote X Applications On Your Local Display ...ie, connect to a remote machine, run the X application there, but displayed on your local CentOS 5 desktop. The "correct" solution is to use tunneled X displays through ssh: $ ssh -Y user@remote remote$...

Jailing sftp/scp connections (1206.12) Short notes: this uses the rssh functionality from rpmforge. To set up a jail for $USER: # chsh -s /usr/bin/rssh $USER # cd ~$USER # ls -ld . (make note of $GROUP) # /usr/local/sbin/mkchroot.sh `pwd` $USER 2755 $GROUP (lo...