http://dokuwiki.starlab.cz/ 2026-04-18T18:23:50+0200 http://dokuwiki.starlab.cz/ http://dokuwiki.starlab.cz/lib/tpl/desert/images/favicon.ico text/html 2012-01-11T19:20:57+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:acl&rev=1326306057&do=diff Quick ACL guide * show current acls getfacl /path/to/Finance * add recursively an user setfacl -R -m u:c2c-backoffice:rwx Finance/ * add recursively a group setfacl -R -m h:c2c-stuff:rwx DSC text/html 2017-12-26T16:07:54+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:alix&rev=1514300874&do=diff Some tags before we begin: * alix * amd geode * debian pxe netboot netinstall * no vga / headless <ftp://ftp.cz.debian.org/debian/dists/stretch/main/installer-i386/20170615+deb9u2+b1/images/netboot/> The good news * <https://www.debian.org/releases/stable/i386/release-notes/ch-whats-new.en.html> The 32-bit PC support (known as the Debian architecture i386) now no longer covers a plain i586 processor. The new baseline is the i686, although some i586 processors (e.g. the “AMD Geode”… text/html 2013-09-09T12:48:36+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:amavis&rev=1378723716&do=diff IP whitelist @mynetworks = qw( 127.0.0.0/8 10.0.0.0/24 192.168.1.0/24 11.22.33.120 55.77.99.78 ); # allow all mail from local IPs: $policy_bank{'MYNETS'} = { # clients in @mynetworks bypass_spam_checks_maps => [1], # don't spam-check internal mail bypass_banned_checks_maps => [1], # don't banned-check internal mail bypass_header_checks_maps => [1], # don't header-check internal mail }; text/html 2008-10-26T17:25:25+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:analyza&rev=1225038325&do=diff Zakladni analyza serveru ---------- Existuji i rozsirena a bezpecnostni, ktere zde neuvadim. Prohlizeni disku Zejmena teploty a realokovanych sektoru: smartctl -a /dev/sda. Nekdy se musi S.M.A.R.T. povolit prikazem: smartctl -S on /dev/sda. U starsich kernelu s libata pro sata disky: smartctl -d ata -a /dev/sda. Prohledneme velikost volneho mista df -h a pro jistotu jeste df -i, jestli nedochazi i-nody. text/html 2009-01-04T02:09:23+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:apache&rev=1231031363&do=diff Apache A zacneme hned “swiss army knife” mod_rewrite www.username.host.domain.com --> domain.com/foo/username/bar HTTP/1.1 requests which contain a Host: HTTP header RewriteEngine on RewriteCond %{HTTP_HOST} ^www\.[^.]+\.host\.com$ RewriteRule ^(.+) %{HTTP_HOST}$1 [C] RewriteRule ^www\.([^.]+)\.host\.com(.*) /home/$1$2 text/html 2015-12-07T16:16:21+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:cluster&rev=1449501381&do=diff Cluster.conf <?xml version="1.0"?> <cluster name="starlab_cluster" config_version="185"> <quorumd interval="1" label="QourumDisk"> <heuristic interval="5" program="/bin/ping -c2 10.0.0.101" tko="30"> </heuristic> </quorumd> <fencedevices> <fencedevice name="man-fence" agent="fence_manual"/> <fencedevice agent="fence_ipmilan" ipaddr="10.0.255.2" login="Mngmt" name="ipminode1" passwd="Born2runILO" delay="5"/> <fencedevice agent="fence_ipmilan" ipaddr="10.0.255.14"… text/html 2015-11-06T16:02:05+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:clvm&rev=1446822125&do=diff Cluster LVM sources: <https://www.suse.com/documentation/sle_ha/book_sleha/data/sec_ha_clvm_config.html> <https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Cluster_Administration/s1-admin-manage-nodes-delete-add-cli-CA.html> <https://www.ibm.com/developerworks/community/blogs/mhhaque/resource/RHCS_IBM_POWER.pdf?lang=zh> Installation (Debian Jessie) * install necessary packages: apt-get install clvm cman * edit /etc/lvm/lmv.conf, set: mirror_logs_require_s… text/html 2016-11-27T16:09:20+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:device_mapper&rev=1480259360&do=diff Just short notes synopsis: a disk appears and the system automaticly starts RAID (if there is one) that could cause a lot of headache solution: remove trigger “on add” /lib/udev/rules.d/55-dm.rules -ACTION!="add|change", GOTO="dm_end" +ACTION!="change", GOTO="dm_end" text/html 2016-01-18T16:01:40+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:django-postfix-admin&rev=1453129300&do=diff API URI GET POST PUT DELETE /api/domain/ list of domains new domain - delete all domains /api/domain/address.com/ domain info - edit domain delete domain /api/mailbox/ list of mailboxes new mailbox - delete all mailboxes text/html 2014-08-26T12:03:00+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:dkim&rev=1409047380&do=diff Implementace DKIM do postfixu sudo apt-get install opendkim opendkim-tools do /etc/opendkim.conf AutoRestart Yes AutoRestartRate 10/1h UMask 002 Syslog yes SyslogSuccess Yes LogWhy Yes Canonicalization relaxed/simple ExternalIgnoreList refile:/etc/opendkim/TrustedHosts InternalHosts refile:/etc/opendkim/TrustedHosts KeyTable refile:/etc/opendkim/KeyTable SigningTable … text/html 2013-03-08T03:51:14+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:dmcrypt_luks&rev=1362711074&do=diff dm-crypt luks apt-get install cryptsetup-luks cryptsetup --verbose --verify-passphrase luksFormat /dev/xvdc1 cryptsetup luksOpen /dev/xvdc1 nazev_oddilu Do /etc/fstab patri /dev/mapper/nazev_oddilu /home ext4 defaults 0 2 Tak todle zvladne i cvicena opice. text/html 2018-10-19T14:50:37+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:dns&rev=1539953437&do=diff Popisu obranu proti utoku, ktery jsem nahodou dnes v noci detekoval. Priznaky: * podezrele plny conntrack dotazama do DNS * podezrele velky tok z DNS serveru obsluhujiciho jen par domen * v logu bindu (syslog) zadne zaznamy, kdyz ho mate spatne nastaveny text/html 2010-09-02T11:33:26+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:dnssec&rev=1283420006&do=diff Cele je to vicemene (modulo nejaka magie) o tom, ze ke kazdemu RR se vytvori druhy, ktery je jeho podpisem. Pro bind: klic se generuje pomoci dnssec-keygen (coz je tentyz nastroj jako na generovani klice pro NSUPDATE). Vysledekm jsou dva soubory, .key se $INCLUDEuje do zony ke ktere patri a private se nekam schova (takovy odhad je, ze je docela dobry napad ho mit root-readable u te zony, viz dale) text/html 2010-04-16T00:35:55+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:dokuwiki&rev=1271370955&do=diff Dokuwiki Search: cd /var/www/dokuwiki bin/indexer.php text/html 2009-09-07T00:58:13+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:dos&rev=1252277893&do=diff Dos Box Po delsim pouzivani DOSEMU jsem presel na DOSBOX. Vynikajici vec Z:\> MOUNT C /path/to/ Z:\> C: C:\> ajedem.exe Todle dosemu neumi. Pozor na mapovani klaves! Nektere je treba premapovat CTRL-F1. Links * <http://www.dosbox.com/wiki/Basic_Setup_and_Installation_of_DosBox> text/html 2013-02-07T15:36:45+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:ext3&rev=1360247805&do=diff buggy_init_scripts=1 only works if the time difference is smaller than 1 hour. Try that int /etc/e2fsck.conf: [problems] # Superblock last mount time is in the future (PR_0_FUTURE_SB_LAST_MOUNT). 0x000031 = { preen_ok = true preen_nomessage = true } # Superblock last write time is in the future (PR_0_FUTURE_SB_LAST_WRITE). 0x000032 = { preen_ok = true preen_nomessage = true } text/html 2020-12-09T23:29:43+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:fail2ban&rev=1607552983&do=diff Fail2ban ban hosts that cause multiple authentication errors Installation from git Version included in wheezy repository (0.8.6) has serious issues with timezones and other bugs, so you would like to use last version from git repository * clone repository text/html 2013-05-03T19:14:31+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:fibre-channel&rev=1367601271&do=diff dvouhlava QLA2342 (ISP2312 chip) a ted ji prepnout do targetu :) Nejprve zazalohujeme existujici firmware: http://ldriver.qlogic.com/firmware/qla_dmp.sh chmod a+x qla_dmp.sh # pro scsi host cislo 5 ./qla_dmp.sh 5 Ja tam zadny fw nemel, takze nebylo co resit :). text/html 2013-05-01T21:50:15+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:fw&rev=1367437815&do=diff Dedikovany Firewall problem [2810676.056586] nf_conntrack: table full, dropping packet reseni (zalezi hodne na pameti fw, toto je pro RAM 256MB) cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max echo 65000 > /proc/sys/net/ipv4/netfilter/ip_conntrack_max cat /sys/module/nf_conntrack/parameters/hashsize echo 8192 > /sys/module/nf_conntrack/parameters/hashsize text/html 2019-10-23T10:41:27+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:haproxy&rev=1571820087&do=diff global log /dev/log local0 log /dev/log local1 notice chroot /var/lib/haproxy stats socket /run/haproxy/admin.sock mode 660 level admin stats timeout 30s user haproxy group haproxy daemon # Default SSL material locations ca-base /etc/ssl/certs crt-base /etc/ssl/private text/html 2008-10-21T23:31:50+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:hylafax&rev=1224624710&do=diff Hylafax Pred samotnou instalaci doporucuji externi modem oznacovany Class 1, podle terminologie hylafaxu. Zakladni instalace aptitude install hylafax-server faxsetup a zrejme podrzet enter ;-) jen pri volbe Do you want to run faxaddmodem to configure another modem [yes]? no text/html 2014-07-21T11:06:00+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:iceweasel&rev=1405933560&do=diff Icedove is already running, but ... rm .icedove/q7ij062i.default/.parentlock rm ./.mozilla/firefox/zcbvxozs.default/.parentlock Kody locku se muzou menit, kazdopadne se musi smazat. text/html 2015-11-11T09:40:15+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:ilo&rev=1447231215&do=diff iLo Pro ssh pristup je nutne pouzit parametry: ssh -o ForwardAgent=no -o ForwardX11=no -o HostKeyAlgorithms=ssh-rsa,ssh-dss user@ip Pro novejsi OpenSSH je treba pouzit nasledujici alias: alias ilossh='ssh -o PasswordAuthentication=yes \ -o ChallengeResponseAuthentication=no \ -o GSSAPIAuthentication=no \ -o HostbasedAuthentication=no \ -o PubkeyAuthentication=no \ -o RSAAuthentication=no \ -o Compression=no \ -o ForwardAgent=no \ -o ForwardX11=no \ -o KexAlgorithms=diffie-hellman-group1-sha1… text/html 2013-01-08T13:41:32+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:ipmi&rev=1357648892&do=diff V linuxu je vec jmenem ipmitool primarni aplikace asi je sprava lokalniho BMC, ovsem da se taky pouzivat vzdalene: ipmitool -H 10.0.0.11 -U user -P heslo -I lanplus (na tyan nesmyslu pro testovani: Admin a Bazmekt) Prikazu to umi docela dost, zajimave je: text/html 2010-12-27T18:15:20+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:iptables&rev=1293470120&do=diff Lepsi NAT 1:1 nezli SNAT+DNAT: iptables -t nat -A PREROUTING -d 172.20.68.27 -j NETMAP --to 10.1.0.7 iptables -t nat -A POSTROUTING -s 10.1.0.7 -j NETMAP --to 172.20.68.27 text/html 2014-06-19T16:40:44+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:klavesnice&rev=1403188844&do=diff Česko-anglická klávesnice alt-shift V konzoli setxkbmap -option grp:switch,grp:alt_shift_toggle,grp_led:scroll us,cz Permanentně do X: soubor /etc/X11/xorg.conf.d/10-keyboard.conf Section "InputClass" Identifier "system-keyboard" MatchIsKeyboard "on" Option "XkbLayout" "us,cz" Option "XkbModel" "pc104" # Option "XkbVariant" "dvorak" Option "XkbOptions" "grp:switch,grp:alt_shift_toggle,compose:ralt,grp_led:scroll" # Option "XkbOptions" "grp:al… text/html 2019-01-11T13:14:20+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:kvm&rev=1547208860&do=diff Instalace KVM TODO: udelat tutorial :) aptitude -y install qemu-kvm libvirt-bin virtinst bridge-utils Vytvoreni guesta Debian 8 * Install gues: virt-install -n vps1 --ram=2048 --vcpus=2 --location='http://ftp.cz.debian.org/debian/dists/jessie/main/installer-amd64/' --disk path=/dev/shared_vg/vps1 --network bridge=br0 --os-type linux --console pty,target_type=serial --graphics none --os-variant generic --extra-args 'console=ttyS0,115200n8 serial' text/html 2010-07-22T21:38:57+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:ldap&rev=1279827537&do=diff V debianu se nainstaluje slapd a ldap-utils. Pri konfiguraci slapd se debconf pta na heslo. V /etc/ldap/slapd.conf je konfigurace serveru, v /etc/ldap/ldap.conf je konfigurace klientskych nastroju (tu je potreba upravit urcite, na spravnou domenu a text/html 2009-10-13T15:53:02+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:lilo&rev=1255441982&do=diff lilo ma takovou zajimavou vlastnost, opsna raid-extra-boot v konfigu dela to, ze instaluje svuj bootblock na vice zarizeni zaroven, muze tam byt budto tupe seznam nebo nekolik ruznych specialnich hodnot, ktere znamenaji, ze si spravnou kombinaci nejde samo (jako asi nejsmysluplnejsi zni mbr-only) text/html 2019-02-05T21:26:12+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:lio&rev=1549398372&do=diff Quick start /etc/init.d/target stop rmmod qla2xxx modprobe qla2xxx qlini_mode="disabled" We have already LVM group vg_0 lvcreate -L 10G -n deset vg_0 targetcli /> cd /backstores/fileio /backstores/fileio> create sovgut /dev/testlio/deset cd /qla2xxx create 21:00:00:1b:32:1f:74:39 create 21:01:00:1b:32:3f:74:39 cd 21:00:00:1b:32:1f:74:39/luns create /backstores/fileio/sovgut cd /qla2xxx/21:00:00:1b:32:1f:74:39/acls /qla2xxx/21:0...3f:74:39/acls> text/html 2017-09-18T15:15:02+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:lvm&rev=1505740502&do=diff LVM pvcreate /dev/md1 vgcreate vg_data /dev/md1 vgchange -a y vg_data pvdisplay vg_data lvcreate -L 200G -n lv_data vg_data Obnoveni smazanych lvm disku Co delat, kdyz si smazete disky, napr. pomoci prikazu? lvremove neexistujici_disk mach3 text/html 2009-01-29T14:38:13+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:mantis&rev=1233236293&do=diff * Mantis Homepage <http://www.mantisbt.org> * Upgrade <http://www.mantisbt.org/manual/manual.installation.upgrading.php> text/html 2009-05-04T02:48:43+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:moodle&rev=1241398123&do=diff * stahneme wget <http://download.moodle.org/stable19/moodle-1.9.4.tgz> * rozbalime do /var/www, tar xzf moodle-1.9.4.tgz * mv moodle moodle.firma.cz' * nastavime domenu v apache2 a napiseme a2ensite moodle.firma.cz * zmenime si bud DNS nebo /etc/hosts na spravny server a zamirime browser na <http://moodle.firma.cz> text/html 2017-01-07T21:09:51+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:mplayer&rev=1483819791&do=diff Mplayer zoom, volume, czech subtitles Options I use almost for every movie * -zoom * -idx * -softvol -softvol-max 300 * -subcp cp1250 text/html 2017-03-13T17:24:33+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:multipath&rev=1489422273&do=diff Multipath Zakladni prikazy: * zobrazeni aktivnich multipathu: multipath -ll * reload podle kofigurace: multipath -v2 Vzorova konfigurace * nastavuje failover nad storage pripojnou pomoci FC a iSCSI * blacklistuje vsechna zarizeni mimo tech s wwid uvedenym v blacklist exceptions text/html 2019-10-21T09:53:45+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:mysql&rev=1571644425&do=diff MySQL Backup Simple //naive// backup Back up all databases into one file at once is a bad idea. * If there is a single problem (corrupted table, unreadable file, whatever), the rest of DB will not be dumped * Restoring one DB within many from one file is difficult, time consuming and with slightly bigger databases ~ 10GB i wish you a lot of RUM text/html 2016-09-01T12:58:21+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:navody&rev=1472727501&do=diff Vytvareni, mazani a zmeny uzivatelu na Sambe * Linux -> Terminal * Prihlaseni na server Bart ssh uziv@i-brigada.cz * password: (viz RATTIC) * Prihlaseni jako root: su - * password: (viz RATTIC) * Vytvoreni uzivatele jahoda: adduser --disabled-password text/html 2015-12-11T12:26:45+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:netio-fencing&rev=1449833205&do=diff Install apt-get install make dh-autoreconf python-suds python-requests python-pycurl git cd /usr/src git clone https://github.com/ClusterLabs/fence-agents.git cd fence-agents/ ./autogen.sh ./configure make make install * note: in case you are getting this error: text/html 2010-01-19T02:28:25+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:openpgp&rev=1263864505&do=diff Best Practise $ gpg --gen-key$ gpg --list-keys /home/dast/.gnupg/pubring.gpg ----------------------------- pub 1024D/4C59DAEC 2008-07-07 uid Dalibor Straka <dast@panelnet.cz> sub 2048g/5B508C71 2008-07-07 $ gpg --send-keys --keyserver keyserver.ubuntu.com 4C59DAEC $ gpg --recv-key 4C59DAEC --keyserver keyserver.ubuntu.com text/html 2013-05-14T12:23:27+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:performance&rev=1368527007&do=diff Original Source: <http://www.ahammer.ch/104> RH <https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Performance_Tuning_Guide/index.html> HardInfo <http://hardinfo.berlios.de/HomePage> Linux Performance The following summary is a braindump of many, many pages from the internet and the tipps and tricks they descriped. IO Benchmarsks: bonnie++ - IOMeter RedHat 6 Deployment notes for high performance and Performance Tuning Guide text/html 2009-05-18T03:11:17+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:php&rev=1242609077&do=diff <http://www.php.net/releases/> <http://pecl.php.net/package/imagick/> Building extra php version 5.0.4 with mysql, libpdf and imagick Story Some private company I work for have an expensive licence (EUR 800) for libpdf 6.0.4 working only with php 5.0.3 (according to documentation). Because it is compiled against PHP_ text/html 2010-07-14T18:17:46+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:phpldapadmin&rev=1279124266&do=diff Kdyz se nainstaluje z .debu tak out of the box vicemene funguje. V debianu je konfigurace v /etc/phpldapadmin, asi se da predpoklada, ze kdyz to clovek nainstaluje primo, tak bude nekde uplne jinde (odhadem .). V konfiguracnim souboru je spousta vcelku nezajimavych voleb, kterymi se to da spise prispusobit a pak jmeno serveru ke kteremu se pripojit a jak se autentifikovat, je to vcelku dost komentovane. Je vcelku dobry napad vyhodit z konfigurace BaseDN, kdyz tam neni napsano nic, tak se na to… text/html 2011-12-02T01:00:03+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:postfix&rev=1322784003&do=diff Autentizace smerem ven (ie. ke smarthostu) This document describes 5 easy steps to setup your Postfix email server as smarthost to relay on DNS Exit mail relay server for all email sending. The mail relay service from dnsExit.com can be found at here 1. Create password maps file (it assigns username/passwords to specified mail servers). You can choose any name, let's say it is /etc/postfix/relay_passwd. It's content should be as follows: relay.dnsexit.com USERNAME:PASSWORD Not… text/html 2009-03-03T18:03:07+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:printing&rev=1236099787&do=diff CUPS wget http://www.openprinting.org/foomatic-db/db/source/PPD/Kyocera/en/Kyocera_Mita_FS-1900_en.ppd lpadmin -p "Kyocera1" -v parallel:/dev/lp0 -P /home/administrator/Kyocera_Mita_FS-1900_en.ppd cupsenable Kyocera1 accept Kyocera1 lpadmin -d Kyocera1 text/html 2010-12-09T16:23:39+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:prutok&rev=1291908219&do=diff Mereni prutoku dat interfacem na routeru/firewallu pres snmp a mrtg. ---------- Hned na uvod poznamenavam, ze existuji i jine zpusoby mereni. Treba z vystupu firewallovacich pravidel iptables nebo podle ip adres. Nasledujici text je uzitecny pro vsechna sitova zarizeni (routery, fw, nektere chytre switche), ktere maji moznost SNMP a tech je dnes na trhu vetsina. Ukazu nejprve prvni cast jak rozchodit snmp na linuxu, pak druhou jak data ze snmp stahnout a vytvorit graf pres mrtg. text/html 2019-01-28T15:16:59+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:puppet&rev=1548685019&do=diff Client side First apt install puppet You can choose how to reach the server by configuring it or using dns, which is a great advantage if you have all the servers in one domain. Config way puppet config set server puppet.starlab.cz DNS way text/html 2018-08-18T00:41:19+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:puppet_links&rev=1534545679&do=diff Links * <https://puppet.com/docs/puppet/4.9/quick_start_user_group.html> * <https://puppet.com/docs/puppet/5.5/modules_fundamentals.html> text/html 2009-09-10T17:22:32+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:qmail&rev=1252596152&do=diff Vacation pres qmailadmin ke sve cinnosti potrebuje uzasnou binarku /var/qmail/bin/autorespond Na strankach qmailadminu jsou ke stazeni zdrojaky tehle veci: <http://www.inter7.com/index.php?page=software> Jinak ta cela zalezitost qmail+vpopmail+qmailadmin vlastne vypada, ze na tom skoro neni co konfigurovat. text/html 2017-03-20T11:51:17+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:raid&rev=1490007077&do=diff SW RAID Quick reference Create a RAID 1 volume from two drives. mdadm --create /dev/md0 --level=1 --raid-devices=2 /dev/sdc /dev/sde To add RAID device 'md0' to /etc/mdadm.conf so that it is recognized the next time you boot. mdadm -Es | grep '''md0''' >>/etc/mdadm.conf text/html 2015-11-04T10:01:57+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:redmine&rev=1446627717&do=diff Redmine A free and open source, web-based project management and issue tracking tool. It allows users to manage multiple projects and associated subprojects. It features per project wikis and forums, time tracking, and flexible role based access control. It includes a calendar and Gantt charts to aid visual representation of projects and their deadlines. Redmine integrates with various version control systems and includes a repository browser and diff viewer. text/html 2009-05-20T02:00:17+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:routing&rev=1242777617&do=diff Source based routing Solves the problem with two default gateways ip addr add 81.0.212.65/27 dev eth0 root@wd1:~# echo "200 webdomena" >> /etc/iproute2/rt_tables root@wd1:~# ip rule add from 81.0.212.64/27 table webdomena root@wd1:~# ip route add default via 81.0.212.94 dev eth0 table webdomena root@wd1:~# ip route flush cache text/html 2010-04-14T21:41:23+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:rsync&rev=1271274083&do=diff Zalohovani rsyncem s inkrementalnimi zalohami pozpatku: rsync --backup --backup-dir=../${DATE} --exclude='*NOBACKUP*' -av /home/samba/ /media/backup/current/ text/html 2010-11-23T21:25:54+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:samba&rev=1290543954&do=diff Samba standalone, tdbsam Backend * pridame uzivatele do systemu adduser foobar * pridame systemoveho uzivatele do samby, kde muze mit jineheslo smbpasswd -a foobar Soubor lze prolistovat prikazy pdbedit -Lw a pdbedit -Lv foobar Samba - vyborny logovani - audit text/html 2008-11-25T17:30:34+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:samba2&rev=1227630634&do=diff Share folders via Samba without a password - easy! ---------- Coming from the Windows world to Linux, one of the first things I wanted to do was to share directories on Ubuntu with my Windows laptop to easily transfer files. In Windows I can just right click a folder, go to sharing, and enable it. No users and passwords to set up. It goes without saying that this is not secure and you want to be careful doing it, but it’s a great way to share files between computers at home. Here’s how…… text/html 2012-10-03T15:05:42+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:san&rev=1349269542&do=diff Server aptitude install iscsitarget ed -s /etc/default/iscsitarget <<< $',s/ISCSITARGET_ENABLE=false/ISCSITARGET_ENABLE=true/g\nw' Install iscsitarget and open-iscsi on Debian Squeeze This shouldn't be to difficult in Debian: apt-get update apt-get install iscsitarget iscsitarget-source open-iscsi module-assistant text/html 2016-09-06T17:35:01+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:screen&rev=1473176101&do=diff Try this quick start: $ screen <in the screen> $ ls -al / <in the screen> Ctrl+A d $ screen -r <see :), you're back to you screen> Put this into you ~/.screenrc to get fancy colours. At least you'll see what is happening. hardstatus alwayslastline hardstatus string '%{= kG}[ %{G}%H %{g}][%= %{=kw}%?%-Lw%?%{r}(%{W}%n*%f%t%?(%u)%?%{r})%{w}%?%+Lw%?%?%= %{g}][%{B}%Y-%m-%d %{W}%c %{g}]' # Default screens screen -t shell1 0 screen -t shell2 1 screen -t server 2 ssh me@myserver text/html 2017-02-06T12:16:06+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:scst&rev=1486379766&do=diff SCST install 388 echo blacklist qla2xxx >/etc/modprobe.d/blacklist-qla2xxx.conf 389 rmmod qla2xxx 390 make 2release 391 aptitude install make 392 make 2release 393 BUILD_2X_MODULE=y CONFIG_SCSI_QLA_FC=y CONFIG_SCSI_QLA2XXX_TARGET=y make all install 394 BUILD_2X_MODULE=y CONFIG_SCSI_QLA_FC=y CONFIG_SCSI_QLA2XXX_TARGET=y make all install 395 BUILD_2X_MODULE=y CONFIG_SCSI_QLA_FC=y CONFIG_SCSI_QLA2XXX_TARGET=y make all install 396 modprobe scst 397 modprobe iscsi-scst 398 depmod -a 399 … text/html 2010-11-24T19:49:41+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:spark&rev=1290624581&do=diff Error: Couldn't find per display information - JDK 1.6 on Linux Running Spark on java 1.6.0 in Linux always gets the error: Error: Couldn't find per display information It is caused by a bug in jdic tray icon library. Latest version of jdic has solved this problem. text/html 2011-05-26T02:46:30+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:ssh&rev=1306370790&do=diff ssh se necha pouzivat jako celkem funkcni nahrada za VPN. moznost a: (bez nejake vetsi konfigurace) ssh -D <lokalni_port> skrze ssh se pak tuneluje SOCKS(5) provoz, staci treba ve firefoxu (nebo obecne kdekoliv) nastavit SOCKS5 proxy. Pokud se pouziva SOCKS5 ve firefoxu za timhle ucelem, je vhodne v about:config nastavit: text/html 2014-07-31T11:53:36+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:start&rev=1406800416&do=diff Setup tunel from (to) secured inaccessibe LAN web server to (from) public host. You create the tunnel from LAN to public host. The data flows to LAN from public host. ssh -p2258 -nNT -R 8888:localhost:80 dada.panelnet.cz SSH TUNEL Slouzi k tunelovani do vzdalene site a zpristupneni portu na vzdalene siti. Priklad: text/html 2012-03-13T17:50:26+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:svn&rev=1331657426&do=diff wncgvxpseqsftt, <http://www.texasbluebirds.com/valium.html> Online pharmacy buy valium, DgqNStJ, <http://feedsdirect.com/world.html> The online pharmacy, vJxNUFZ, <http://www.henrysdiner.net/location.html> Low price levitra, DszfmRd, <http://www.ridecatamountride.com/ambien.html> Buy cheap ambien, kgNhOsd, <http://www.mikecaracciolo.com/kfbshop/shopcustadminlogin.asp> Buy Vicodin, IPeCwwg, <http://www.wcsbid.com/> Tramadol, JYEOmLG. text/html 2017-02-20T11:54:52+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:teamviewer&rev=1487588092&do=diff How to install teamviewer on Debian Jessie 8 Teamviewer has only i386 installation package. wget https://downloadeu9.teamviewer.com/download/version_12x/teamviewer_12.0.71510_i386.deb dpkg --add-architecture i386 apt-get update dpkg -i teamviewer_12.0.71510_i386.deb apt-get install -f text/html 2010-04-14T21:47:02+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:tipy_triky&rev=1271274422&do=diff hromadna nahrada textu v souborech jeden: ed -s vseprostrechy.cz <<< $',s/confucius/mail/g\nw' vsechny: for i in /etc/nekde/*; do ed -s $i <<< $',s/confucius/mail/g\nw' done taky: sed -i -e 'blablabla' soubor a: -r - extended regexpy text/html 2010-10-04T08:32:17+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:vlan&rev=1286173937&do=diff <http://www.techonia.com/create-vlan-on-linux-with-cisco-catalyst-switch> Linux side We will use eth1 interface in the Linux box. We have to bring the interface up without IP address assigned to it before we can use it. ifconfig eth1 0.0.0.0 up We will create interface vlan 11 and vlan 12 on this eth1 interface. To create a vlan interface, use ‘vconfig add’ command as below: text/html 2008-09-23T17:28:19+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:vnc&rev=1222183699&do=diff Konfigurace vncserveru ---------- Instalace na Debianu: aptitude install xtightvncviewer tightvncserver Take jsou potreba veci z baliku x11-xserver-utils, pokud ho nemate nainstalovany. Mozna bude treba nahradit vncviewer prikazem xtightvncviewer a podobne u ostatnich. text/html 2010-08-30T15:17:25+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:voip&rev=1283174245&do=diff VoIP dokumentace Tutorial Krasny tutorialek od Jonnyho Martina * Popis Návod * <http://www.kryonchatphoto.org/XliteandVoxalot.htm> * codecs <http://asterisk.hosting.lv/> Troubleshooting * z neznameho duvodu mi nefungovalo volani bez radky v extensions.conf [macro-dial] exten => s,n+2(normdial),Dial(${ds}) Modemy Zyxel 660RU-T3, ktere dodava O2 ADSL zakaznikum text/html 2018-12-10T14:01:01+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:windows_guest_agent&rev=1544446861&do=diff tvorba guest agenta na virtual windows do config (virsh edit) virtualniho serveru se pripise <channel type='unix'> <target type='virtio' name='org.qemu.guest_agent.0'/> <address type='virtio-serial' controller='0' bus='0' port='1'/> </channel> text/html 2011-01-05T22:19:59+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:wordpress&rev=1294262399&do=diff Cestina se meni v wp-config.php define ('WPLANG', 'cs_CZ'); musi existovat wp-content/languages/ text/html 2010-04-14T21:42:22+0200 Anonymous (anonymous@undisclosed.example.com) http://dokuwiki.starlab.cz/doku.php?id=linux:zaloha&rev=1271274142&do=diff Metodika zalohovani ---------- * zaloha jednou za tyden na nas server * kompletni zaloha systemu bez dat pro rychlou obnovu * pravidelna zaloha dat ---------- * vlastnim skriptem na zakazku * inkrementalni zalohy * rotacni kompletni zalohy