Tag Info

Hot answers tagged

14

sudo python -m SimpleHTTPServer 80 Ports below 1024 require root privileges. As George added in a comment, running this command as root is not a good idea - it opens up all kinds of security vulnerabilities. However, it answers the question.


10

Download the netinstall iso, boot it and select non-graphical install. I actually made a video once for it: http://www.youtube.com/watch?v=JOGSupJury4 The difference between ubuntu and debian is the way they are doing package testing. Debian is all about stability and ubuntu is more about all the new things (less stability).


8

Advantages of Ubuntu: LTS releases are supported for 5 years for the server seed. Ubuntu has been certified to work on certain hardware For those wanting more up-to-date packages & are willing to use a non-LTS release, the 6 month release cycle means that a new stable release happens more frequently than with Debian Ubuntu has some better integration ...


8

The option accesslog.filename is for the mod_accesslog module, so you need to load that module. server.modules += ( "mod_accesslog" )


8

If you want a machine for local development (a desktop machine), and you want to learn a lot - then go with Arch. It will kind of force you to learn about some under-the-hood things about GNU/Linux because you have to assemble everything from command line, so be prepared, quite a lot of reading will be required although it's not actually that hard as people ...


8

I always run services with a dedicated user. So I would create these users: nginx mongo apache mysql redis You should never run the actual services as root! Often when installing these applications using your distributions package manager, as part of the installation, a user will be automatically created for each of these services. I typically use ...


7

This is a big topic, but I'll try to keep it short. You could try DevStack, which will get you up and running with less configuration work. If you want to really understand the inner workings of the platform, and since you have the hardware, I would go ahead and install it from scratch on your distro of choice (CentOS and Fedora are fully supported ...


6

Actually, a slight modification to warl0ck's plan (because I'm paranoid) create the new partition boot to single-user mode mount the new partition as /new_var or something, and rsync as described you might as well run aptitude autoclean before running rsync, to reduce the amount getting copied over (or even ... clean if you don't mind re-downloading your ...


6

Even though password brute force attempts may not be successful on your system, using fail2ban has other benefits than simply blocking the attack: Keeps your auth log from filling up too much, saving disk space and making analysis easier. Reduces unnecessary CPU cycles and bandwidth servicing bruteforce attempts. fail2ban is a great tool for more than ...


6

Although POSIX has a standard for capabilities which I think includes CAP_NET_BIND_SERVICE, these are not required for conformance and may in some ways be incompatible with the implementation on, e.g., linux. Since webservers like apache are not written for only one platform, using root privileges is the most portable method. I suppose it could do this ...


5

For Apache, see if http://httpd.apache.org/docs/2.2/en/mod/mod_userdir.html#userdir and http://httpd.apache.org/docs/2.2/en/howto/public_html.html helps.


5

You're probably looking for mod_userdir: "This module allows user-specific directories to be accessed using the http://example.com/~user/ syntax." Don't be scared of fiddling with the config, just have backups of the config files and make sure your firewall blocks your apache to the outside world.


5

Assuming this isn't a typo, the install section in your typo service file contains a typo. It should be, multi-user.target instead of mulit-user.target (multi vs. multi), e.g: [Install] WantedBy=multi-user.target


5

Delays like this are often caused by reverse DNS lookups (i.e. resolving an IP address to a hostname). Do you have HostNameLookups turned on in the apache config? If so, turn it off. See also http://serverfault.com/questions/100225/apache-httpd-wont-stop-doing-reverse-dns-requests-for-clients-ips for other tips on disabling hostname resolution in apache.


4

I assume that your gateway device to the internet does NAT (network address translation), i.e. your home network uses for example a private network like 192.168.0.* and you dynamically get one IP from your ISP which is used by the gateway. In that case someone on the internet only is able to access port 80 on your home network web-server, when you have ...


4

Your question is quite subjective, and configuring the port should be very easy with any http server. Though, I would recommend lighttpd with server.port = 1080 (or whatever above 1024 for non-root users) in a configuration file: server.document-root = "/home/foo/www" server.port = 1080 It's a complete enough http server, and for serving static ...


4

There is no such thing like a "system' webserver in unix and different "methods". You can install software on your system which contains a simple webserver and use it or not. python -m SimpleHttpServer just loads the SimpleHttpServer module, which contains a basic webserver. Something simliar exists for Perl, just have a look at CPAN: ...


4

There are many tutorials for apache on how to do this. This is one of them. Here is another one One thing that you would change if you already have a certificate generated you would copy the certificate files to appropriate locations vs. generating them yourself. If you are not using apache please post the webserver you're using.


4

If you have mod_status enabled (and possibly ExtendedStatus set to On), and you're in a whitelist like this: # # Allow server status reports generated by mod_status, # with the URL of http://servername/server-status # Change the ".example.com" to match your domain to enable. # <Location /server-status> SetHandler server-status Order deny,allow ...


4

Generally, your thoughts are all in the right direction. Specific answers to your questions: "Can I run a cron which will push via rsync or SMB to the NAS box?" Yes, absolutely. "How would I use rsync to pull down the /home directory on my remote server? Is it easy? Yes, here's the command I use. Check rsync docs for explanations: rsync -vrltpz --force ...


4

There really isn't any "right" distribution. The good thing about free/libre/open source software is that most of them are available free (as in beer) as well. So you can experiment with whatever distribution you like, see if it fits your needs and try another if it doesn't. Your requirement to host web apps is perhaps a bit too general. LAMP ...


4

Note: $CATALINA_HOME is where Tomcat is installed. If the application is a WAR file, just drop it in $CATALINA_HOME/webapps and TC will automatically create the web app for you. If you have all of the contents of the application, you must distribute as so: The root path of your application: $CATALINA_HOME/webapps/newfolder Define your web.xml file here: ...


4

Daemon processes generally are unable to login for a number of reasons. Among other security is a significant issue. www-data is assumed to be available on your system if you are running a web servers on many platforms. If I can log on to that user id, I can easily compromise your web-server and/or its content. (Think serving up malware.) It is best not ...


4

Your box has multiple interfaces. Each interface can have multiple IP addresses. (among others there is 127.0.0.1 on lo and 10.1.5.5 on eth0, or something like that. - See ip addr for details.) Now you have some kind of web server running on that box. To be accessible to others it has to bind to some interfaces or IP adresses. Somewhere in the config file ...


4

The easiest way is to trick your local DNS resolver by putting IP address - server name entries into /etc/hosts. Then you can access the website with the correct name because your browser sends the correct Host in the HTTP request header. See http://stackoverflow.com/questions/857376/send-host-header-when-accessing-ip-address-in-firefox for more options.


4

Debian probably configured/patched nginx for their package to put the pid file someplace specific that it doesn't do by default. When you replaced it via something compiled from source, it doesn't match the expectations of the service infrastructure. I'd look at what patches and configuration options were done by the debian folks and recompile your 1.4.x ...


4

(to summarise my comments on the OP) The three-way handshake that they are refering to is part of the TCP connection establishment, the option in question doesn't relate specifically to this. Also note that data exchange is not part of the three way handshake, this just creates the TCP connection in the open/established state. Regarding the existance ...


3

The reason that your output is not display is because you are not following the CGI protocol. You must send server response headers before any other output. TOP=`top -n 1`; PS=`ps aux`; echo "Content-Type: text/plain" # response header echo "" # end of headers echo "that's top\n" $TOP; echo "ps\n" $PS; Use text/plain will give ...


3

The output of plain top is not suitable for displaying on anything but a terminal. You should use the -b switch to get plain text output. And the end of line characters are going to get stripped (replaced by spaces) by your shell with what you're doing - there's no reason for you to store those outputs in variables, you could simply run those commands when ...



Only top voted, non community-wiki answers of a minimum length are eligible