Bind9 local DNS not forwarding query to public DNS

[Muhammad Yousuf Khan]

  Dear All,
Need your experience advice, We have a BIND9 DNS server that operates both
privately and publicly for the domain example xyz.com. I use the private
DNS for certain secure nodes on our local network. I want all VPN users to
be able to resolve these secure nodes using our local DNS, which is
functioning correctly.

So I force assign all VPN user local DNS so that they can access the secure
records and local DNS can forward their query to public DNS in case the
record is not found in the zone file.

 locally everything is working just fine, the issue arises when a VPN user
queries an A record that is on public. For example, if "secure.xyz.com" has
a local entry in the zone file, it works as expected. However, when the
entry is not present, I expect BIND to conditionally forward the query to a
remote DNS server and resolve it for the VPN client. Unfortunately, this is
not happening. BIND only searches for entries that are available in the
local zone file and then times out. Here are my configuration files.

here is my bind config


 options {
 directory "/var/cache/bind";
 recursion yes;   // Enable DNS recursion
 allow-recursion { localhost; };
 //acl trusted { 192.168.1.0/24; };
 querylog yes;
 allow-transfer { none; };   // Disable zone transfers
by default
 allow-query { any; };   // Allow queries from any
IP address
 forwarders {
  8.8.8.8;
 };
 dnssec-validation auto;
 listen-on-v6 { any; };
 };

  zone "xyz.com" {
  type master;
  file "/etc/bind/db.xyz.com";
  forwarders {
  8.8.8.8;
  8.8.4.4;// Additional forwarder (optional)
  };
  };



Thanks,

Yousuf

Re: preseed ansible problem

[Muhammad Yousuf Khan]

Adding List.

On Sun, Oct 4, 2020 at 7:44 PM Muhammad Yousuf Khan 
wrote:

> > Oct  4 08:01:44 in-target: Ign:1 cdrom://[Official Debian GNU/Linux Live
>> > 10.6.0 xfce 2020-09-26T13:15] buster InRelease
>> > Oct  4 08:01:44 in-target: Err:2 cdrom://[Official Debian GNU/Linux Live
>> > 10.6.0 xfce 2020-09-26T13:15] buster Release
>> > Oct  4 08:01:44 in-target:   Please use apt-cdrom to make this CD-ROM
>> > recognized by APT. apt-get update cannot be used to add new CD-ROMs
>>
>> This seems to be your real issue: the CDROM seems to be (still?) listed
>> in your apt sources list (look around /etc/apt/sources.list and below
>> /etc/apt/sources.list.d).
>>
>> To fix that, you'll first have to get clear on where your to-be Debian
>> install is going to get its packages from (really from the CDROM?) and
>> adjust those files accordingly.
>>
>
> Thank you for the response. can you please help me fix this actually i
> tried the following but still i am getting the same issue.
> d-i apt-setup/disable-cdrom-entries boolean true
> But this seems to be not working and still throwing the same issue. can
> you please help.
>
> Thanks.
>
>
>> Cheers
>>  - t
>>
>

preseed ansible problem

[Muhammad Yousuf Khan]

Hi all,

I am trying to run a ansible playbook through preseed file. everything is
going good. but  when i try to run ansible-playbook via in-target command
via preseed it ends with an error here is the syslog output of preseed
installation

 preseed: running preseed command preseed/late_command: in-target apt-get
update; in-target apt-get -y upgrade; in-target apt-get -y dist-upgrade;
in-target apt-get -y install sudo less ssh ansible htop openssh-server
wget; in-target --pass-stdout /usr/bin/mkdir /opt/newfolder; in-target
--pass-stdout wget -P /opt/newfolder http://10.51.100.35/install.yml;
in-target --pass-stdout ansible-playbook /opt/newfolder/install.yml;

Oct  4 08:01:44 log-output: dpkg-divert: warning: diverting file
'/sbin/start-stop-daemon' from an Essential package with rename is
dangerous, use --no-rename
Oct  4 08:01:44 in-target: Ign:1 cdrom://[Official Debian GNU/Linux Live
10.6.0 xfce 2020-09-26T13:15] buster InRelease
Oct  4 08:01:44 in-target: Err:2 cdrom://[Official Debian GNU/Linux Live
10.6.0 xfce 2020-09-26T13:15] buster Release
Oct  4 08:01:44 in-target:   Please use apt-cdrom to make this CD-ROM
recognized by APT. apt-get update cannot be used to add new CD-ROMs
Oct  4 08:01:45 in-target: Hit:3 http://http.us.debian.org/debian buster
InRelease
Oct  4 08:01:45 in-target: Hit:4 http://security.debian.org/debian-security
buster/updates InRelease
Oct  4 08:01:45 in-target: Hit:5 http://http.us.debian.org/debian
buster-updates InRelease
Oct  4 08:01:46 in-target: Reading package lists...
Oct  4 08:01:47 in-target:
Oct  4 08:01:47 in-target: E
Oct  4 08:01:47 in-target: :
Oct  4 08:01:47 in-target: The repository 'cdrom://[Official Debian
GNU/Linux Live 10.6.0 xfce 2020-09-26T13:15] buster Release' does not have
a Release file.
Oct  4 08:01:47 in-target:
Oct  4 08:01:47 log-output: dpkg-divert: warning: diverting file
'/sbin/start-stop-daemon' from an Essential package with rename is
dangerous, use --no-rename
Oct  4 08:01:47 in-target: Reading package lists...
Oct  4 08:01:47 in-target:
Oct  4 08:01:47 in-target: Building dependency tree...
Oct  4 08:01:48 in-target:
Oct  4 08:01:48 in-target: Reading state information...
Oct  4 08:01:48 in-target:
Oct  4 08:01:48 in-target: Calculating upgrade...
Oct  4 08:01:48 in-target:
Oct  4 08:01:48 in-target: The following package was automatically
installed and is no longer required:
Oct  4 08:01:48 in-target:   libjsoncpp1
Oct  4 08:01:48 in-target: Use 'apt autoremove' to remove it.
Oct  4 08:01:48 in-target: The following packages will be upgraded:

Any help will be highly appreciated.

Thanks,
yousuf

Re: having issue installing any package. i get 403 forbidden messsage.

[Muhammad Yousuf Khan]

Thank you for your response it probably something else i am not using *
moreover as a temporary workaroud i create a proxy on cloud where i allow
only my static IP to access the proxy. then i routed everything through
that proxy. no things are work.
however i am very very confuse that why things are not working through my
internet.
Actually i have two different internet. one in USA and one in my home
country. both servers from both datacenters are doing exactly same
could it be virus ? or something else.

On Wed, Oct 3, 2018 at 10:04 PM bw  wrote:

>
>
> On Wed, 3 Oct 2018, Muhammad Yousuf Khan wrote:
>
> > Dear All,
> >
> > When i try to install any package. in this case nfs-kernel-server i get
> > this error. i am using Proxmox on top of Debian 9.x. kindly advice.
> >
> >
> > *root@king:/zok/k-backup# apt install nfs-kernel-server*
> > *Reading package lists... Done*
> > *Building dependency tree   *
> > *Reading state information... Done*
>
> Here's what I get from similar command, why are you installing pkg with a
> wildcard on the end?  Are you using bash, or some other shell?
>
> # apt -s install nfs-kernel-server*
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> Note, selecting 'nfs-kernel-server' for glob 'nfs-kernel-server*'
>
>

Re: apt installing package 403 forbidden

[Muhammad Yousuf Khan]

Latest update is.
When i even wget on the same linux server i get forbidden message 403.
[image: image.png]
however on same network on windows platform i can easily open the same path
and download the file on windows.
Thanks,


On Tue, Oct 9, 2018 at 5:14 PM Muhammad Yousuf Khan 
wrote:

> Dear All,
> I have been using debian for around 10 years i havent seen such issue in
> my entire life.
> i have placed my servers in two different countries. means both have
> different internet connection so it is not related to internet issue.
> My first datacenter (USA) is using verizon and second (south asian) using
> local internet.
>
> no matter what i do. if i install new Debian when i reach the mirror
> select part of the installation it show me red sceen telling me that
> "merror does not support correct debian version"
> . . if i use old debian machines which are working for me for 5 or 6 years
> now started throwing error.
> I assume ( i can be wrong) first the issue was happeing in south asian
> datacenter then moved then later start to face in USA.
>
> [image: image.png]
> [image: image.png]
> Can you guys please share what is going on.
>
> Thanks,
> Yousuf
>

apt installing package 403 forbidden

[Muhammad Yousuf Khan]

Dear All,
I have been using debian for around 10 years i havent seen such issue in my
entire life.
i have placed my servers in two different countries. means both have
different internet connection so it is not related to internet issue.
My first datacenter (USA) is using verizon and second (south asian) using
local internet.

no matter what i do. if i install new Debian when i reach the mirror select
part of the installation it show me red sceen telling me that "merror does
not support correct debian version"
. . if i use old debian machines which are working for me for 5 or 6 years
now started throwing error.
I assume ( i can be wrong) first the issue was happeing in south asian
datacenter then moved then later start to face in USA.

[image: image.png]
[image: image.png]
Can you guys please share what is going on.

Thanks,
Yousuf

having issue installing any package. i get 403 forbidden messsage.

[Muhammad Yousuf Khan]

Dear All,

When i try to install any package. in this case nfs-kernel-server i get
this error. i am using Proxmox on top of Debian 9.x. kindly advice.


*root@king:/zok/k-backup# apt install nfs-kernel-server*
*Reading package lists... Done*
*Building dependency tree   *
*Reading state information... Done*
*The following packages were automatically installed and are no longer
required:*
*  apt-transport-https attr ceph-common cifs-utils corosync cstream
dmeventd dtach ebtables faketime fontconfig fontconfig-config
fonts-dejavu-core fonts-font-awesome gdisk genisoimage glusterfs-client*
*  glusterfs-common ifenslave ipset libacl1-dev libaio1
libanyevent-http-perl libanyevent-perl libappconfig-perl libapt-pkg-perl
libarchive13 libasound2 libasound2-data libasync-interrupt-perl*
*  libasyncns0 libattr1-dev libauthen-pam-perl libbabeltrace-ctf1
libbabeltrace1 libboost-iostreams1.62.0 libboost-program-options1.62.0
libboost-random1.62.0 libboost-regex1.62.0 libboost-system1.62.0*
*  libboost-thread1.62.0 libcaca0 libcairo2 libcephfs1 libcfg6
libclone-perl libcmap4 libcorosync-common4 libcpg4
libcrypt-openssl-bignum-perl libcrypt-openssl-random-perl
libcrypt-openssl-rsa-perl*
*  libdatrie1 libdbi1 libdevel-cycle-perl libdevmapper-event1.02.1 libdw1
libev-perl libfaketime libfcgi-bin libfcgi0ldbl libfile-chdir-perl
libfile-readbackwards-perl libfile-sync-perl*
*  libfilesys-df-perl libflac8 libfontconfig1 libgraphite2-3 libguard-perl
libharfbuzz0b libibverbs1 libice6 libintl-perl libintl-xs-perl
libio-multiplex-perl libio-stringy-perl libipset3 libiscsi7*
*  libjemalloc1 libjpeg62-turbo libjs-extjs liblinux-inotify2-perl
liblockfile-simple-perl liblog-agent-perl liblvm2app2.2 liblvm2cmd2.02
libmime-base32-perl libnet-dbus-perl libnet-dns-perl*
*  libnet-ip-perl libnetfilter-log1 libnl-route-3-200 libnspr4 libnss3
libogg0 libpango-1.0-0 libpangocairo-1.0-0 libpangoft2-1.0-0 libpixman-1-0
libpulse0 libpve-access-control libpve-apiclient-perl*
*  libpve-common-perl libpve-guest-common-perl libpve-http-server-perl
libpve-storage-perl libqb0 libquorum5 librados2 librados2-perl
libradosstriper1 librbd1 librdmacm1 libreadline5 librgw2 librrd8*
*  librrds-perl libsdl1.2debian libsm6 libsmbclient libsnappy1v5
libsndfile1 libstatgrab10 libstring-shellquote-perl libtemplate-perl
libthai-data libthai0 libtie-ixhash-perl libtotem-pg5 liburcu4*
*  libusbredirparser1 libuuid-perl libvorbis0a libvorbisenc2 libvotequorum8
libx11-xcb1 libxcb-render0 libxcb-shm0 libxi6 libxml-libxml-perl
libxml-twig-perl libxml-xpathengine-perl libxrender1*
*  libxslt1.1 libxtst6 linux-image-4.9.0-4-amd64 lvm2 lzop novnc-pve
numactl proxmox-widget-toolkit pve-cluster pve-container pve-docs
pve-edk2-firmware pve-firewall pve-ha-manager pve-i18n*
*  pve-libspice-server1 pve-manager pve-qemu-kvm pve-xtermjs python-cephfs
python-cffi-backend python-chardet python-cryptography python-enum34
python-idna python-ipaddress python-openssl python-pyasn1*
*  python-rados python-rbd python-requests python-urllib3 qemu-server
rrdcached rsync smartmontools smbclient socat spiceterm sqlite3
thin-provisioning-tools vncterm x11-common xsltproc*
*Use 'apt autoremove' to remove them.*
*The following NEW packages will be installed:*
*  nfs-kernel-server*
*0 upgraded, 1 newly installed, 0 to remove and 85 not upgraded.*
*Need to get 124 kB of archives.*
*After this operation, 334 kB of additional disk space will be used.*
*Err:1 http://deb.debian.org/debian 
stretch/main amd64 nfs-kernel-server amd64 1:1.3.4-2.1*
*  403  Forbidden [IP: 151.101.80.204 80]*
*E: Failed to fetch
http://deb.debian.org/debian/pool/main/n/nfs-utils/nfs-kernel-server_1.3.4-2.1_amd64.deb

 403  Forbidden [IP: 151.101.80.204 80]*
*E: Unable to fetch some archives, maybe run apt-get update or try with
--fix-missing?*
Thanks,
Yousuf

Question on HA configuration.

[Muhammad Yousuf Khan]

Dear Sir,

As you have mentioned earlier below.

wtprd0X (search for ‘wtprd0’) - these are front end web server nodes for an
HA cluster (uses HAProxy in pfSense)
wtsqlprd01-3 (search for wtsql) - these are 3 MySQL servers for the backend
of a site in HA

I can understand the purpose of 3 frontends but how 3 Mysqls are designed
are they replicating to each other get updated or or is this a enterprise
cluster.
Cluster in a sense where you are running multple nodes of MYSQL but
application sees only one and if any of the instance goes down the other
stands for backup. is it like.

 how does the 3 MYsql stack works. ?

Thanks,
yousuf

Re: confusion in /etc/network/interfaces

[Muhammad Yousuf Khan]

sorry what i meant is eth1:1 sorry my mistake.
but thanks for the clarification.

On Sun, Mar 5, 2017 at 12:45 AM, Muhammad Yousuf Khan <sir...@gmail.com>
wrote:

> sorry what i meant is eth1:1 sorry my mistake.
> but thanks for the clarification.
>
>
> On Sat, Mar 4, 2017 at 11:40 PM, Pascal Hambourg <pas...@plouf.fr.eu.org>
> wrote:
>
>> Le 04/03/2017 à 18:40, Dominik George a écrit :
>>
>>>
>>> eth:1 is nonsense.
>>>
>>
>> Why ? There could be an interface named "eth".
>>
>>
>

confusion in /etc/network/interfaces

[Muhammad Yousuf Khan]

Hi All,

I need to know that what is the difference b/w eth1.0101 and eth:1.
actually i need to know what is the main difference in "." and ":".
any suggestion will be highly appreciated.

Thanks,
Yousuf

Re: Sub interface not working in Debian 8

[Muhammad Yousuf Khan]

Yes the assumption was correct, Thanks mate. thank you all for your
advices. i really appreciate

On Fri, Dec 30, 2016 at 6:26 PM, Muhammad Yousuf Khan <sir...@gmail.com>
wrote:

> Yes the assumption was correct, Thanks mate. thank you all for your
> advices. i really appreciate
>
> On Wed, Dec 28, 2016 at 2:16 PM, Xen <l...@xenhideout.nl> wrote:
>
>> Muhammad Yousuf Khan schreef op 28-12-2016 8:10:
>>
>>> Thanks issue is resolved. as i mentioned tcpdump command not receving
>>> packets from ISP gateway. thus we discussed this matter with ISP and
>>> the restarted the router. and things got fixed. it seems that ISP
>>> router keeps the old MAC entries thats why it didn't worked
>>>
>>
>> Nice, so assumption was correct. Thank you.
>>
>>
>

Re: Sub interface not working in Debian 8

[Muhammad Yousuf Khan]

Thanks issue is resolved. as i mentioned tcpdump command not receving
packets from ISP gateway. thus we discussed this matter with ISP and the
restarted the router. and things got fixed. it seems that ISP router keeps
the old MAC entries thats why it didn't worked


On Tue, Dec 27, 2016 at 8:41 PM, Xen <l...@xenhideout.nl> wrote:

> Muhammad Yousuf Khan schreef op 27-12-2016 15:15:
>
>> Thanks this is what i already did and i was about to send you guys the
>> details and fortunately your msg comes in.
>> tcpdump is telling me very interesting story.
>> when i 'tcpdump -i eth3 icmp' it shows all the ping packet that are
>> received for ip 50.x.x161 but not for 50.x.x.162
>> that means ISP gateway is not sending packets to virtual IPs. so this
>> issue pointing to ISP or MAC related issue.
>>
>> but confusion is the system before current system it has the Virtual
>> IPs and it was working fine it has debian 5 (old version)
>>
>
> Only thing I can say is to not give the address to the alias but see what
> happens if you just give it to eth3.
>
> I don't know how you assign it but if this is your public IP then of
> course there is no such thing as "Virtual IP". They are just two IPs
> assigned to the same interface right, which is perfectly normal.
>
> IPtables chokes on eth3:1 syntax though. Do not use it for your firewall
> pls :).
>
> Regards.
>
> Or if you do: iptables-save | sed "s/ eth3:. / eth3 /g" | iptables-restore
>
> But maybe it is completely different, I don't know, it's just odd I guess
> to me.
>
> Regards.
>
>

Re: Sub interface not working in Debian 8

[Muhammad Yousuf Khan]

Thanks this is what i already did and i was about to send you guys the
details and fortunately your msg comes in.
tcpdump is telling me very interesting story.
when i 'tcpdump -i eth3 icmp' it shows all the ping packet that are
received for ip 50.x.x161 but not for 50.x.x.162
that means ISP gateway is not sending packets to virtual IPs. so this issue
pointing to ISP or MAC related issue.

but confusion is the system before current system it has the Virtual IPs
and it was working fine it has debian 5 (old version)


Thanks,


On Tue, Dec 27, 2016 at 6:46 PM, Xen <l...@xenhideout.nl> wrote:

> Muhammad Yousuf Khan schreef op 27-12-2016 13:58:
>
>> I didnt route anything as default gateway was already there. can you
>> please explain your routes more. i didnt get the context of that
>> routes you define.
>>
>
> Nothing special there, if you use the same gateway it won't be needed. I
> just have a 2nd IP on a second subnet, so I need to use the second router
> for that second subnet.
>
> From your other reply it seems that your router is not routing to your
> address..
>
> Maybe nothing changed in Debian but your host is not functioning for your
> second IP?
>
> It would be weird unless something else was going on that you could not
> receive pings on that interface from the outside.
>
> They are probably being sent out, but not getting back, because your
> router is not configured for your 2nd IP?
>
> Of course you can check with tcpdump -i eth3 | grep ""
>
> Or tcpdump -i eth3 | grep "" | grep echo
>
> Regards.
>
>

Re: Sub interface not working in Debian 8

[Muhammad Yousuf Khan]

one more thing i can ping to gateway with virtual ip no problem.

hping3 -1 50.x.x.174 -a 50.x.x.162
HPING 50.x.x.174 (eth3 50.x.x.174): icmp mode set, 28 headers + 0 data bytes
len=46 ip=50.x.x.174 ttl=64 id=56571 icmp_seq=0 rtt=3.4 ms
len=46 ip=50.x.x.174 ttl=64 id=56572 icmp_seq=1 rtt=3.3 ms
len=46 ip=50.x.x.174 ttl=64 id=56573 icmp_seq=2 rtt=3.3 ms

On Tue, Dec 27, 2016 at 6:20 PM, Muhammad Yousuf Khan <sir...@gmail.com>
wrote:

> btw i never use ip command due to its complexity. i user route command
> instead. which is way more easier. however i tried your commands and it
> didn't work for me any help or idea  guys?
>
> On Tue, Dec 27, 2016 at 5:58 PM, Muhammad Yousuf Khan <sir...@gmail.com>
> wrote:
>
>> I didnt route anything as default gateway was already there. can you
>> please explain your routes more. i didnt get the context of that routes you
>> define.
>>
>> On Tue, Dec 27, 2016 at 5:39 PM, Xen <l...@xenhideout.nl> wrote:
>>
>>> Muhammad Yousuf Khan schreef op 27-12-2016 12:22:
>>>
>>> can you guys please guide what is going on . in old Debian version i
>>>> do this with no problem sub interfaces were very easy task. but here i
>>>> invest the whole day.
>>>>
>>>
>>> I must say I have run into many problems on my own machine but never
>>> this one.
>>>
>>> Are you sure your gateway recognises your secondary IP?
>>>
>>> I even have 2 IPs on such an alias and they all work fine:
>>>
>>> iface eth0 inet manual
>>>   pre-up ip link set eth0 up
>>>
>>> iface eth0:0 inet dhcp
>>>
>>> iface eth0:1 inet static
>>>   address 149.x.x.127
>>>   netmask 255.255.255.0
>>>
>>> In my case I do additional routing:
>>>
>>> ip rule add from 149.x.x.127 (that's the secondary) lookup 2
>>> ip route add default via 149.x.x.1 (gateway address for the second IP)
>>> table 2
>>>
>>>
>>
>

Re: Sub interface not working in Debian 8

[Muhammad Yousuf Khan]

btw i never use ip command due to its complexity. i user route command
instead. which is way more easier. however i tried your commands and it
didn't work for me any help or idea  guys?

On Tue, Dec 27, 2016 at 5:58 PM, Muhammad Yousuf Khan <sir...@gmail.com>
wrote:

> I didnt route anything as default gateway was already there. can you
> please explain your routes more. i didnt get the context of that routes you
> define.
>
> On Tue, Dec 27, 2016 at 5:39 PM, Xen <l...@xenhideout.nl> wrote:
>
>> Muhammad Yousuf Khan schreef op 27-12-2016 12:22:
>>
>> can you guys please guide what is going on . in old Debian version i
>>> do this with no problem sub interfaces were very easy task. but here i
>>> invest the whole day.
>>>
>>
>> I must say I have run into many problems on my own machine but never this
>> one.
>>
>> Are you sure your gateway recognises your secondary IP?
>>
>> I even have 2 IPs on such an alias and they all work fine:
>>
>> iface eth0 inet manual
>>   pre-up ip link set eth0 up
>>
>> iface eth0:0 inet dhcp
>>
>> iface eth0:1 inet static
>>   address 149.x.x.127
>>   netmask 255.255.255.0
>>
>> In my case I do additional routing:
>>
>> ip rule add from 149.x.x.127 (that's the secondary) lookup 2
>> ip route add default via 149.x.x.1 (gateway address for the second IP)
>> table 2
>>
>>
>

Re: Sub interface not working in Debian 8

[Muhammad Yousuf Khan]

I didnt route anything as default gateway was already there. can you please
explain your routes more. i didnt get the context of that routes you
define.

On Tue, Dec 27, 2016 at 5:39 PM, Xen <l...@xenhideout.nl> wrote:

> Muhammad Yousuf Khan schreef op 27-12-2016 12:22:
>
> can you guys please guide what is going on . in old Debian version i
>> do this with no problem sub interfaces were very easy task. but here i
>> invest the whole day.
>>
>
> I must say I have run into many problems on my own machine but never this
> one.
>
> Are you sure your gateway recognises your secondary IP?
>
> I even have 2 IPs on such an alias and they all work fine:
>
> iface eth0 inet manual
>   pre-up ip link set eth0 up
>
> iface eth0:0 inet dhcp
>
> iface eth0:1 inet static
>   address 149.x.x.127
>   netmask 255.255.255.0
>
> In my case I do additional routing:
>
> ip rule add from 149.x.x.127 (that's the secondary) lookup 2
> ip route add default via 149.x.x.1 (gateway address for the second IP)
> table 2
>
>

Re: Sub interface not working in Debian 8

[Muhammad Yousuf Khan]

adding further i can ping the virtual interfaces from local network and
through vpn users
but can not ping public IPs
.

On Tue, Dec 27, 2016 at 4:22 PM, Muhammad Yousuf Khan <sir...@gmail.com>
wrote:

> Dear All,
>
> I want to reach sub interface ip from internet but i can not ping no
> matter what i do.
>
>
> inet 50.x.x.161/28 brd 50.255.203.175 scope global eth3 valid_lft forever
> preferred_lft forever
>
> inet 50.x.x.162/28 brd 50.255.203.175 scope global secondary eth3:1
> ce public ip which is set up like this
>
> i can reach the ip address  50.x.x.161 from internet but i can not ping
> 50.x.x.162. i disabled the firewall but still no luck.
>
> i can not ping from 50.x.x.161 but can not ping from 50.x.x.162. like this
>
> hping3 -1 8.8.8.8 -a 50.255.203.161
>
> HPING 8.8.8.8 (eth3 8.8.8.8): icmp mode set, 28 headers + 0 data bytes
> len=46 ip=8.8.8.8 ttl=57 id=17110 icmp_seq=0 rtt=27.6 ms
> len=46 ip=8.8.8.8 ttl=57 id=17833 icmp_seq=1 rtt=23.3 ms
>
>
>  hping3 -1 8.8.8.8 -a 50.255.203.162
> HPING 8.8.8.8 (eth3 8.8.8.8): icmp mode set, 28 headers + 0 data bytes
> (it stays there for every)
>
>
>
> can you guys please guide what is going on . in old Debian version i do
> this with no problem sub interfaces were very easy task. but here i invest
> the whole day.
>
> Thanks,
> Yousuf
>
>
>
>

Sub interface not working in Debian 8

[Muhammad Yousuf Khan]

Dear All,

I want to reach sub interface ip from internet but i can not ping no matter
what i do.


inet 50.x.x.161/28 brd 50.255.203.175 scope global eth3 valid_lft forever
preferred_lft forever

inet 50.x.x.162/28 brd 50.255.203.175 scope global secondary eth3:1
ce public ip which is set up like this

i can reach the ip address  50.x.x.161 from internet but i can not ping
50.x.x.162. i disabled the firewall but still no luck.

i can not ping from 50.x.x.161 but can not ping from 50.x.x.162. like this

hping3 -1 8.8.8.8 -a 50.255.203.161

HPING 8.8.8.8 (eth3 8.8.8.8): icmp mode set, 28 headers + 0 data bytes
len=46 ip=8.8.8.8 ttl=57 id=17110 icmp_seq=0 rtt=27.6 ms
len=46 ip=8.8.8.8 ttl=57 id=17833 icmp_seq=1 rtt=23.3 ms


 hping3 -1 8.8.8.8 -a 50.255.203.162
HPING 8.8.8.8 (eth3 8.8.8.8): icmp mode set, 28 headers + 0 data bytes
(it stays there for every)



can you guys please guide what is going on . in old Debian version i do
this with no problem sub interfaces were very easy task. but here i invest
the whole day.

Thanks,
Yousuf

having issue on been in new 8.6 installation

[Muhammad Yousuf Khan]

Dear all i am seeing this issue.
erst: can not request [mem 0xd7e6e000-0xd7e6] for erst
Loading, please wait...
mdadm: No device listed in conf file were found.

Gave up waiting for root device. Common problems:
- Boot args (cat /proc/cmdline)
  - Check rootdelay= (did the system wait long enough?)
  - Check root= (did the system wait for the right device?)
- Missing modules (cat /proc/modules; ls /dev)
ALERT! /dev/disk/by-uuid/5887d2e0-bae1-4ce8-ac6f-168fb183d7b0 does not
exist.
Dropping to a shell!
modprobe: module ehci-orion not found in modules.dep

now it ends up in the rescue  prompt.
now the interesting thing is i happens randomly some time system boots just
fine and some time it throw this message.

Any advice will be hihgly appreciated.

Thanks,
Yousuf

need help on Debian machine monitoring.

[Muhammad Yousuf Khan]

i have been using different monitoring tools for different time period.
like cacti and nagios. now this time for few different level of requirement
i have selected VNSTATI. to create bandwidth usage graphs.

The problem with vnstati is when i use -d it shows the result of last 30
days and now i need a vnstati chart on back date. like at least a month
old.  let say i need the output of whole month of May 2016 only. how can
this happen. please help.

Any information or advice will be highly appreciated.


Thanks,
Yousuf

Re: user History File.

[Muhammad Yousuf Khan]

Thanks Alot for your input Tomas.

I don't know exactly what your problem is, but take into account that bash
> only appends its (in-memory) history to .bash_history at exit (so while
> the shell is active you won't see any changes)


Actually i never worked on multi user environment. this is the first time
that i am dealing with multiple users. i  want to monitor what hey are
doing. so i thought history is the best option to do.but when i try to scan
their history i see nothing. so my Question is why i can not see any thing
new in their history file.
so how can i track user activity.

user History File.

[Muhammad Yousuf Khan]

I have been trying one user to monitor his history. however every time i
"cat /home/username/.bash_history" i see always the same history as old one.
I want to monitor his history. no matter how many sessions but every
command should go to same history file.

Any advice or guidance will be highly appreciated.

Thanks,
Yousuf

root login in Jessie

[Muhammad Yousuf Khan]

Dear All,

I have two machines for testing some services on jessie.  however i can not
allow access to root remote ssh.
i have read this on saveral places that
/etc/ssh/ssh_config  has a line PermitRootLogin without-password which has
to be change to yes
first of all i can not find this line in whole file. however when i
manually type this line it didn't work
can you guys please help.

Thanks,
Yousuf

Re: root login in Jessie

[Muhammad Yousuf Khan]

Thanks Tobias, it was a mistake of just a single "d" :)

Thanks Alot.

Yousuf

On Wed, Feb 3, 2016 at 12:46 PM, Tobias Weiß 
wrote:

> You were looking into the wrong fiie for the PermitRootLogin directive. I
> have overseen this when I first replied to you. I am sorry :)
>
> It is /etc/sshd_config not /etc/ssh_config. The first file configures the
> server, the second the cli client.
>
> When you change it to yes, you may login as root providing username and
> password. Best security practice on the other hand is to use public/private
> key which is the without-password directive, esp. if ssh port is
> accessiable in public networks.
>
> Best,
>
> Tobias
>
>
>
>
>
> --
> Date: Wed, 3 Feb 2016 12:11:45 +0500
> Subject: Re: root login in Jessie
> From: sir...@gmail.com
> To: tobias-we...@outlook.com
>
>
> Thanks for the response Tobias. i even restarted the machine. BTW just
> like to mention that i am using LXC virtual container. i think this
> should't be an issue here.
>
> Thanks,
> Yousuf
>
> On Wed, Feb 3, 2016 at 11:47 AM, Tobias Weiß 
> wrote:
>
>
> You probaly forgot to restart ssh after changing the config?
>
> Best,
>
> --
> Date: Wed, 3 Feb 2016 11:43:40 +0500
> Subject: root login in Jessie
> From: sir...@gmail.com
> To: debian-user@lists.debian.org
>
>
> Dear All,
>
> I have two machines for testing some services on jessie.  however i can
> not allow access to root remote ssh.
> i have read this on saveral places that
> /etc/ssh/ssh_config  has a line PermitRootLogin without-password which has
> to be change to yes
> first of all i can not find this line in whole file. however when i
> manually type this line it didn't work
> can you guys please help.
>
> Thanks,
> Yousuf
>
>
>

Re: L7 filter and iptables Problem

[Muhammad Yousuf Khan]

Thanks i manage to do that with IPtable string  and ipp2p
although still in monitoring however i am seeing some good result.
hopefully that will work.
Thanks,
Yousuf

On Tue, Dec 1, 2015 at 10:58 PM, Roman <rome...@gmail.com> wrote:

> Hi,
>
> Even if it would be supported there is no much use of iptables l7 filters.
> They never worked as expected. Get yourself a small juniper srx  :)
>
> 2015-12-01 19:51 GMT+02:00 Peter Ludikovsky <pe...@ludikovsky.name>:
>
>> -BEGIN PGP SIGNED MESSAGE-
>> Hash: SHA1
>>
>> Hi,
>>
>> According to to project site [0] there hasn't been any real
>> development since 2013, which was a patch against the 2.6 kernel line.
>> That kernel line is out of support since mid-2015.
>>
>> I'm afraid the string matching module would be your best bet for now.
>>
>> Regards,
>> /peter
>>
>> [0] http://l7-filter.clearos.com/
>>
>> Am 01.12.2015 um 08:56 schrieb Muhammad Yousuf Khan:
>> > Hello,
>> >
>> > i am using  Debian jessie and I have been trying to work with L7
>> > filter to block p2p but its not working
>> >
>> > iptables -I FORWARD -m layer7 --l7proto bittorrent -j DROP iptables
>> > v1.4.21: Couldn't load match `layer7':No such file or directory
>> >
>> > Try `iptables -h' or 'iptables --help' for more information.
>> >
>> > can you guys Please help.  string match with ip tables is easy but
>> > i am looking to use L7 filter on jessie. all the how-tos are out
>> > dated. example kernel patch etc.
>> >
>> > Please help.
>> >
>> > Thanks, Yousuf
>> >
>> -BEGIN PGP SIGNATURE-
>> Version: GnuPG v2.0.22 (MingW32)
>>
>> iQIcBAEBAgAGBQJWXd4OAAoJEM+6Ng5pbtyZAd8P/3vM3gVfiaUcVVdxsNPkRIzb
>> NddWvxnWwYp4DNCHRj5sKAJ4X5DhdqClEysT8eLMBfG+IXLW44mF/M3NBeVsbMAk
>> 5ugH4hlyaIK2Pxh1yIHOCz1uP7yRnj8X6ASp5PxbzBTowmHLynjyka0OnEdg0pR4
>> hsNvw9RyxPKPuqBTXy37SXGbp8mBmuFbQucaX7G80e8n5reCL9CvLTHKLiQ3BGdc
>> KanmYQjZ7K1/FISuBpl653iiR/Kpb4bfY2x2Nl54Pxs2ueFMwskIqsfGyxU6nSPb
>> Hk9OpDpJlQ14PTxZ2Tw/tvPJIhFqvQshrVD57OvQhgXrda+7o/sz1DbL5djLSAPj
>> b05luaVW9U+88XgAkcNPNZfrohy3JY1EnXPY5n3M83yZZ7QPPlwxc66Nu2PBS/rM
>> B0erP4t0c2tqxpMoewSmlX3Q0qm83IRET9ozSMqoEWbFYho499MR+uyTCkw1YO05
>> JfHS/4o/t+z9PzHo1h2r0tqij52WcgeD4TSZ8W4MdZxMmwk6w+XOsJYDpY7eX2gt
>> a6IRr5/pgzv6PLWjpXSwj1XCtQUxoZkWS7GPF5qfbBh1/t3hjRe6Hv8MwQPP0oSw
>> LelvMIhii2NVvlPueuSWH46XencEQId66wTkAx02YxP84FMctw7jJl7oljb/JrQ7
>> EXo9Iaaohz1ZjLSH3+Ht
>> =rHnt
>> -END PGP SIGNATURE-
>>
>>
>
>
> --
> Best regards,
> Roman.
>

L7 filter and iptables Problem

[Muhammad Yousuf Khan]

Hello,

i am using  Debian jessie and I have been trying to work with L7 filter to
block p2p but its not working

iptables -I FORWARD -m layer7 --l7proto bittorrent -j DROP
iptables v1.4.21: Couldn't load match `layer7':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

can you guys Please help.  string match with ip tables is easy but i am
looking to use L7 filter on jessie. all the how-tos are out dated. example
kernel patch etc.

Please help.

Thanks,
Yousuf

How to install Debian on 3TB drive.

[Muhammad Yousuf Khan]

Dear All,

I have 3TBx2 drives and want to install debian on them as RAID1. i know
rest of the thing. i have been creating software raid on less then 2TB
drives for years but now since HD size is growing as per the market trend i
need to go with it.

Both drives are detected in the manual partition menu of Debian Jessi setup
process. when i try to create bigger partition it give me error like this
 partition length of sectors   exceeds the
msdos-partition-table-imposed maximum of xxx

i know this is happening because of MBR limitation. therefore i need your
help.

can you guys please guide me how can i create bigger partition while
installing Debian.
Easiest way would be i install smaller drive and create bigger partition
with gdisk . but i do not want this i only have 3TB drives and want to
install Debian on top of it and also want to make Debian to boot from the
drives. i know the RAID part but missing part is How to create GPT
partition during installation.

Any help would be highly appreciated.

Thanks,
Yousuf

Re: Problem VNC (Vino) access from windows or other clients

[Muhammad Yousuf Khan]

Thanks for help :)

On Sat, Sep 19, 2015 at 10:24 AM, Seeker <seeker5...@comcast.net> wrote:

>
>
> On 9/18/2015 10:59 AM, Muhammad Yousuf Khan wrote:
>
>>
>>
>> can you please also advice any client for windows. right now the only
>> platform i have is Windows to access the machine. and Remmina does not work
>> for Windows.
>>
>> Any suggestion please?
>>
>> Thanks,
>> Yousuf
>>
>> RealVNC or UltraVNC if you want security that is built in.
>
> TightVNC is another option, but doesn't have the level of security built
> in that you would want
> if you are connecting over the internet.
>
> If you can't get the Windows clients to play well with the security in the
> Linux servers, then you
> could use SSH to create a secure connection, then go over the SSH
> connection to connect the client
> to the server. If you google 'ssh tunnel' there are lots of 'HOW TO' links.
>
> If you don't have any objections to using stuff that requires a Google
> account, you could try using
> Chrome Remote Desktop.
>
>
> https://chrome.google.com/webstore/detail/chrome-remote-desktop/gbchcmhmhahfdphkhkmpfmihenigjmpp
>
>  I tried it when it was first released only long enough to see it work
> between my phone as the client
> and a computer running Windows with Google Chrome as the server. At that
> time it wasn't working
> for me on my Linux desktop using Chromium, so could still be an issue
> using it with Chromium. It
> allows you to set up a permanent connection for yourself, may be an issue
> if you want to allow other
> people to connect without you having to be there to generate a code.
>
> Later, Seeker
>
>

Gray screen vnc viewer (Debian 8.3)

[Muhammad Yousuf Khan]

All,

I am having gray screen issue no matter what setting i put in my xstartup
file.

when ever i connect the client it shows me something gray screen i can not
see anything in the log i dont know what is going on. it never happend to
me before.
no xstartup config is working in this.

any suggestion would be highly appreciated.


#!/bin/sh
# Uncomment the following two lines for normal desktop:

#unset SESSION_MANAGER
#unset DBUS_SESSION_BUS_ADDRESS

# exec /etc/X11/xinit/xinitrc


[ -x /etc/vnc/xstartup ] && exec /etc/vnc/xstartup
[ -r $HOME/.Xresources ] && xrdb $HOME/.Xresources

xsetroot -solid grey
vncconfig -iconic &

#x-terminal-emulator -geometry 80x24+10+10 -ls -title "$VNCDESKTOP Desktop"
&
#gnome-session &

gnome-session --session=gnome-classic &










Thanks,
Yousuf

Re: Gray screen vnc viewer (Debian 8.3)

[Muhammad Yousuf Khan]

Just sharing: i am no longer using default vino server. i am using
vnc4server and also tightvncserver both shows the same result.


On Sat, Sep 19, 2015 at 10:41 PM, Muhammad Yousuf Khan <sir...@gmail.com>
wrote:

> All,
>
> I am having gray screen issue no matter what setting i put in my xstartup
> file.
>
> when ever i connect the client it shows me something gray screen i can not
> see anything in the log i dont know what is going on. it never happend to
> me before.
> no xstartup config is working in this.
>
> any suggestion would be highly appreciated.
>
>
> #!/bin/sh
> # Uncomment the following two lines for normal desktop:
>
> #unset SESSION_MANAGER
> #unset DBUS_SESSION_BUS_ADDRESS
>
> # exec /etc/X11/xinit/xinitrc
>
>
> [ -x /etc/vnc/xstartup ] && exec /etc/vnc/xstartup
> [ -r $HOME/.Xresources ] && xrdb $HOME/.Xresources
>
> xsetroot -solid grey
> vncconfig -iconic &
>
> #x-terminal-emulator -geometry 80x24+10+10 -ls -title "$VNCDESKTOP
> Desktop" &
> #gnome-session &
>
> gnome-session --session=gnome-classic &
>
>
>
>
>
>
>
>
>
>
> Thanks,
> Yousuf
>

Re: Mdadm grub install problem

[Muhammad Yousuf Khan]

Thanks for the detail Pascal.


On Tue, Sep 15, 2015 at 2:00 AM, Pascal Hambourg <pas...@plouf.fr.eu.org>
wrote:

> Muhammad Yousuf Khan a écrit :
> > command "grub-install --modules=part_gpt /dev/sdc" resolved the issue for
> > me.
>
> Glad to hear it.
>
> > however i also wanted to know that how it actually works.
> > what is the difference. i can understand i am mentioning gpt module in
> > the command but what is the theoretical story behind this to work. or
> > what is the difference b/w grub-install /dev/sdc and grub-install
> > --modules=part_gpt /dev/sdc
>
> A typical GRUB boot loader comes in 2 or 3 parts :
> 1) A "boot image" installed in the boot sector of a disk (MBR) or a
> partition (PBR). Not used for EFI boot.
> 2) A "core image" installed either in a special place outside a
> filesystem (gap between the MBR and 1st partition in a MSDOS format
> disk, BIOS boot partition in a GPT format disk) or as a regular file in
> a filesystem, /boot/grub/core.img or /boot/grub/i386-pc/core.img for PC
> BIOS, or /boot/efi/EFI/debian/grubx64.efi for UEFI.
> 3) Various files in /boot/grub/, including the config file grub.cfg and
> modules.
>
> The BIOS firmware loads the boot image which loads the core image, or
> the EFI firmware loads directly the core image. Then the core image
> reads files in /boot/grub to display the boot menu, then reads files in
> /boot/grub and other locations to boot the selected entry.
>
> The boot image uses block lists to load the core image, so it does not
> have to understand partition tables, filesystems or whatever. But the
> core image read files, so it has to understand the filesystem, partition
> table, RAID array or LVM volume these files reside in. GRUB modules are
> just like Linux kernel modules : they provide loadable capabilities to
> the core image (~ GRUB kernel) to read filesystems such as ext2/3/4,
> btrfs, NTFS, FAT, containers such as LVM or RAID, partition tables such
> as GPT or MSDOS and so on. The purpose of this modular design is to keep
> the core image small, otherwise it may not fit into the post-MBR gap
> (previously 31 KiB, now 1 MiB). But modules are files, and the core
> image must be able to load them before it can use their capabilities. So
> the required modules to read files in /boot/grub must be embedded into
> the core image. grub-install is supposed to auto-detect all needed
> modules and include them when building the core image. However, it seems
> that in your case it didn't. Maybe it was confused by the presence of
> both MSDOS and GPT partition tables. The --modules option instructed
> grub-install to include the module providing the missing capability to
> read GPT partition tables.
>
>

Re: Problem VNC (Vino) access from windows or other clients

[Muhammad Yousuf Khan]

Thanks for help. when i am running the command that you have mentioned it
is giving me an error please the result below.

root@nas:/home/ykhan# gsettings set org.gnome.Vino require-encryption false

(process:1744): dconf-WARNING **: failed to commit changes to dconf: Cannot
autolaunch D-Bus without X11 $DISPLAY.

can you please also advice any client for windows. right now the only
platform i have is Windows to access the machine. and Remmina does not work
for Windows.

Any suggestion please?

Thanks,
Yousuf





On Fri, Sep 18, 2015 at 11:29 AM, Reco <recovery...@gmail.com> wrote:

> Hi.
>
> On Fri, 18 Sep 2015 09:44:38 +0500
> Muhammad Yousuf Khan <sir...@gmail.com> wrote:
>
> > I am using  Debian  8.2. i enable screen sharing but when i try to
> connect
> > client side shows me this message
> >
> > unable to connect VNC server using your chosen security setting. Either
> > upgrade the VNC server to more recent version from realVNC or select
> weaker
> > level of encryption.
>
> This message is half-true. You don't need to upgrade VNC server, you
> need to upgrade to VNC client that supports TLS-over-VNC. Or to disable
> VNC encryption altogether.
>
> The problem is - about the only client that seems to support that
> cryptic 'VNC security type 18' seems to be Remmina.
>
> So - you need to connect from the Windows client - you need to have an
> insecure configuration on server side. Presumably - it's done like this:
>
> gsettings set org.gnome.Vino require-encryption false
>
> Reco
>
>

Problem VNC (Vino) access from windows or other clients

[Muhammad Yousuf Khan]

I am using  Debian  8.2. i enable screen sharing but when i try to connect
client side shows me this message

unable to connect VNC server using your chosen security setting. Either
upgrade the VNC server to more recent version from realVNC or select weaker
level of encryption


and i see this on server /var/log/messages.
 [IPv4] Got connection from client 192.168.1.10
Sep 18 00:35:24 nas gnome-session[1547]: 18/09/2015 12:35:24 AM   other
clients:
Sep 18 00:35:24 nas gnome-session[1547]: 18/09/2015 12:35:24 AM
192.168.1.10
Sep 18 00:35:24 nas gnome-session[1547]: 18/09/2015 12:35:24 AM Client
Protocol Version 3.7
Sep 18 00:35:24 nas gnome-session[1547]: 18/09/2015 12:35:24 AM Advertising
security type 18
Sep 18 00:35:26 nas gnome-session[1547]: 18/09/2015 12:35:26 AM Client
192.168.1.10 gone
Sep 18 00:35:26 nas gnome-session[1547]: 18/09/2015 12:35:26 AM Statistics:
Sep 18 00:35:26 nas gnome-session[1547]: 18/09/2015 12:35:26 AM
framebuffer updates 0, rectangles 0, bytes 0


Any help will be highly appreciated.

Thanks,
Yousuf

"

Re: Mdadm grub install problem

[Muhammad Yousuf Khan]

command "grub-install --modules=part_gpt /dev/sdc" resolved the issue for
me. however i also wanted to know that how it actually works.
what is the difference. i can understand i am mentioning gpt module in
the command but what is the theoretical story behind this to work. or
what is the difference b/w grub-install /dev/sdc and grub-install
--modules=part_gpt /dev/sdc

On Mon, Sep 14, 2015 at 12:28 PM, Pascal Hambourg <pas...@plouf.fr.eu.org>
wrote:

> Gary Dale a écrit :
> > On 13/09/15 04:28 PM, Muhammad Yousuf Khan wrote:
> >>
> >> GRUB loading.
> >> Welcome to GRUB!
> >>
> >> error: no such device: 2
> >> Entering rescue mode...
> >> grub rescue>
> >>
> >> moreover when i use command "ls"
> >>
> >> it shows me (hda0)
> >
> > mdadm doesn't care about partition tables.
>
> But GRUB does. "No such device" seems to indicate that GRUB did not find
> the disk, partition or RAID array specified in the $prefix variable,
> where the files in /boot/grub/ are supposed to be located. Also, ls
> showing only the whole disk (hd0) without any partition seems to
> indicate that it could not read the partition table. GRUB has specific
> modules to read each partition table format, and such module(s) need to
> be embedded into the core image by grub-install in order to be able to
> read the partition table of the disk(s) containing /boot/grub. Same with
> RAID modules.
>
> > It just wants to be able to
> > find the arrays. However to start the array, grub needs the initramfs.
>
> GRUB does not need an initramfs to start RAID arrays. The Linux kernel
> does. GRUB just loads the initramfs in memory for the Linux kernel.
>
>

Mdadm grub install problem

[Muhammad Yousuf Khan]

I am trying to replacing 1 TB drives with 2TB i am using RAID 1 mdadm
i successfully replaced the first drive and it is synced and working
normally.
i also installed grub by this commad "grub-install /dev/sdc"
/dev/sdc is my new drive.
Please note that  i am using gdisk to create GPT partition on new 2TB drive.
i copied the same partition table from MBR to GPT with gdisk utility.
however when i try to boot my system only with /dev/sdc
it end up saying

GRUB loading.
Welcome to GRUB!

error: no such device: 2
Entering rescue mode...
grub rescue>


when i connect the first drive i mean 1TB drive with array of 2TB it works
fine
when i boot single 1TB it works fine. however when i boot with 2TB alone it
shows the above error. i am very new to this i request you guys to please
help.
moreover when i use command "ls"

it shows me (hda0)

Thanks,
MYK

issue with Taskbar in Kde on debian 8.1

[Muhammad Yousuf Khan]

i am using multiple chat clients in office. i am using spark and skype for
official use. however the problem is when ever some one send a message it
does not show the indication color.
so when ever i leave my desk and comeback i leave most of the messages
unread due to this problem. can please some one guide me how to fix that.
it is not just happening with skype but also happening with Spark chat
client for our XMPP messenger client.

Thanks,
Yousuf

Re: installation issue package krb5-users (unmet dependencies)

[Muhammad Yousuf Khan]

Ok  i found out the issue. worked with aptitude command.

Thanks,


On Wed, Jul 29, 2015 at 10:09 AM, Muhammad Yousuf Khan sir...@gmail.com
wrote:

 when i am installing the package it is throwing this issue. and i want to
 install krb5-user for samba.
 any help will be highly appreciated.


 oot@nas:~# apt-get install krb5-user
 Reading package lists... Done
 Building dependency tree
 Reading state information... Done
 Some packages could not be installed. This may mean that you have
 requested an impossible situation or if you are using the unstable
 distribution that some required packages have not yet been created
 or been moved out of Incoming.
 The following information may help to resolve the situation:

 The following packages have unmet dependencies:
  krb5-user : Depends: libkrb5-3 (= 1.8.3+dfsg-4squeeze7) but
 1.10.1+dfsg-5+deb7u2 is to be installed
 E: Broken packages

mdadm increasing the partition size.

[Muhammad Yousuf Khan]

Dear All,

I have 4 partitions in my /dev/sdb total size of a whole drive is 2 TB in
where main partition is of 1TB in size.

however i want to increase this 1TB partition. therefore i added new 3TB
/dev/sda and replicated the partition tables with with gdisk.

which worked great.

now the partition that was in the size of 1TB and copied to the new drive
/dev/sda i deleted the partition. and created the new one with increase
size of 2TB.

now i have also attached sda 2TB partition with sdb 1TB partition. sync is
in progress which will probably be synced in few hours.



My question is if i add another new 3TB drive by replace the old 2TB drive.
similarly i copy the partition table from gdisk from old 3TB to now 3TB.
but point of notice is now the size of 1TB partition should become 2TB. do
you guys think this will happen automatically or i have to make some
changes in order to grow the size.

Any help/guidance will be highly appreciated.

Thank,
Yousuf

Re: mdadm increasing the partition size.

[Muhammad Yousuf Khan]

Thanks Gene and Gary and yes you got it correctly.

Two steps resolved my issue. (AH) in case other may need help with
same issue can follow.

1- mdadm -G /dev/md(*) -z max
2- resize2fs /dev/md(*)




On Wed, Jul 29, 2015 at 6:34 PM, Gene Heskett ghesk...@wdtv.com wrote:

 On Wednesday 29 July 2015 06:30:46 Muhammad Yousuf Khan wrote:

  Dear All,
 
  I have 4 partitions in my /dev/sdb total size of a whole drive is 2 TB
  in where main partition is of 1TB in size.
 
  however i want to increase this 1TB partition. therefore i added new
  3TB /dev/sda and replicated the partition tables with with gdisk.
 
  which worked great.
 
  now the partition that was in the size of 1TB and copied to the new
  drive /dev/sda i deleted the partition. and created the new one with
  increase size of 2TB.
 
  now i have also attached sda 2TB partition with sdb 1TB partition.
  sync is in progress which will probably be synced in few hours.
 
 
 
  My question is if i add another new 3TB drive by replace the old 2TB
  drive. similarly i copy the partition table from gdisk from old 3TB to
  now 3TB. but point of notice is now the size of 1TB partition should
  become 2TB. do you guys think this will happen automatically or i have
  to make some changes in order to grow the size.
 
  Any help/guidance will be highly appreciated.

 You will have to do that by hand.
 
  Thank,
  Yousuf


 Cheers, Gene Heskett
 --
 There are four boxes to be used in defense of liberty:
  soap, ballot, jury, and ammo. Please use in that order.
 -Ed Howdershelt (Author)
 Genes Web page http://geneslinuxbox.net:6309/gene


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/201507290934.01962.ghesk...@wdtv.com

Samba issue after RAID1 recovery

[Muhammad Yousuf Khan]

I had a RAID 1 array for our (fileserver)samba setup  which is integrated
with AD . last week one drive died along with motherboard.i attached the
drive to another one everything seems working fine till today. now i am
seeing error on windows client end.
\\MySambaServer is not accessible you might not have permission to use
this network resource ..

now i can not track this issue.

wbinfo shows the correct list of ad users and group.
ls -l shows the correct permission.
however i can not see the error in log. /var/log/samba/log.MyClientIP

can anyone guys where i can track this issue. so that my fileserver can
come back on-line.

any help will be appreciable.

Thanks
MYK

installation issue package krb5-users (unmet dependencies)

[Muhammad Yousuf Khan]

when i am installing the package it is throwing this issue. and i want to
install krb5-user for samba.
any help will be highly appreciated.


oot@nas:~# apt-get install krb5-user
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 krb5-user : Depends: libkrb5-3 (= 1.8.3+dfsg-4squeeze7) but
1.10.1+dfsg-5+deb7u2 is to be installed
E: Broken packages

Re: RAID b/w GPT and NON GPT partition.

[Muhammad Yousuf Khan]

Thanks Gary and Pascal and all for your very informative inputs and
support. now it works and my drive is bootable now.

however one thing i have notice which is also off the topic is that i can
not boot my new GPT hard drive with supergrub CD. when i reaches where
kernel loads it restart immediately. can you please throw some light on
this too.
otherwise drive is working perfectly.

Thanks,
yousuf

On Wed, Jul 1, 2015 at 2:38 PM, Pascal Hambourg pas...@plouf.fr.eu.org
wrote:

 Gary Dale a écrit :
  On 30/06/15 02:17 PM, Pascal Hambourg wrote:
 
  What I would do is shrink partition 5 by 100M then create a new ef02
  partition in the freed space.
 
  Why on earth would you want to do such a dangerous and useless thing ?
  As I wrote in a previous message, there is plenty of free space on the
  disk to create a new BIOS boot partition of suitable size.
 
  There is, but 2048 sectors is only 1M.

 As previously written, 1 MB is plenty enough for a BIOS boot partition.
  It is not an EFI system partition nor /boot. It just contains GRUB's
 core image for BIOS. The current size of this image is less than 50 kB
 in the worst case, and I don't see it grow bigger than 1 MB any time
 soon because it is also designed to fit in the 1 MB MBR gap for
 MBR-style disks. GRUB's fancy and heavy stuff is kept out of the core
 image, in /boot/grub or other places.

 Besides, as previously written, there is a 500 GB unallocated space at
 the end of the 2 TB disk so there is really really no need to shrink
 anything.


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/5593b518.5010...@plouf.fr.eu.org

Re: RAID b/w GPT and NON GPT partition.

[Muhammad Yousuf Khan]

Partition is created and grub is installed as instructed in the thread.
Also Grub is installed now.

should i make any config changes ( or not )in the /boot/grub/ directory?

Number  Start (sector)End (sector)  Size   Code  Name
   12048 7813119   3.7 GiB FD00  Linux RAID
   2  342047   1007.0 KiB  EF02  BIOS boot partition
   327344896  1980469247   931.3 GiB   FD00  Linux RAID
   4  1980469248  2930276351   452.9 GiB   FD00  Linux RAID
   5 781516827344895   9.3 GiB FD00  Linux RAID
root@nasbox:~# grub-install /dev/sdb
Installation finished. No error reported.

Re: RAID b/w GPT and NON GPT partition.

[Muhammad Yousuf Khan]

Thanks Arno, Pascal and Gary with your input i manage to copy the partition
to new drive in GPT format and my all drives (mdadm devices) are synced
now.

I have 4 RAID1 Partitions for all for different purpose.


md1 : active raid1 sdb5[2] sda5[0]
  9763768 blocks super 1.2 [2/2] [UU]

md3 : active raid1 sdb4[2] sda4[0]
  474902392 blocks super 1.2 [2/2] [UU]

md2 : active raid1 sdb3[2] sda3[0]
  976561016 blocks super 1.2 [2/2] [UU]

md0 : active raid1 sdb1[2] sda1[0]
  3904500 blocks super 1.2 [2/2] [UU]


but there are few confusions. actually in my old drive. there was a
extended partition for SWAP. however when i copy the partition table with
gdisk x and u option it created the file successfully however. i can
not see extended in the output. gdisk -l /dev/sdb


Number  Start (sector)End (sector)  Size   Code  Name
   12048 7813119   3.7 GiB FD00  Linux RAID
   327344896  1980469247   931.3 GiB   FD00  Linux RAID
   4  1980469248  2930276351   452.9 GiB   FD00  Linux RAID
   5 781516827344895   9.3 GiB FD00  Linux RAID


number 5 is the swap partition as i know it from size. and i also
attached that partition to my mdadm drive md1 which was set to swap by me
and it is successfully synced. now my question is as i can not see the
extended partition type in the list by attaching 5 partition to the swap
directory. have i done it the right way thing or i have done it wrong?

my last question is making the new 2TB drive able to boot.
when i run the command grup-install it gives me error.
# grub-install /dev/sdb
/usr/sbin/grub-setup: warn: This GPT partition label has no BIOS Boot
Partition; embedding won't be possible!.
/usr/sbin/grub-setup: error: embedding is not possible, but this is
required when the root device is on a RAID array or LVM volume.
if i change the type to ef02 (Bios Boot Partition) i may not be able to
attach that partition to my current raid level. this is what i think i
haven't don't hit and trial technique as i am working on production server.

can you guys please share how can i make the new drive bootable?

your guidance will be highly appreciated in this regard.

Thanks,

Yousuf

Re: RAID b/w GPT and NON GPT partition.

[Muhammad Yousuf Khan]

Sorry Arno my last message was mistakenly sent to you only and not the list.

Thanks all for you comments.


Pascal thanks for the tip about extending one of the partition and using
the free space i will do so but for now my primary problem is to create a
boot partition so that i can boot and replace the old 1.5 TB with 2TB
drive. as you said boot partition in GPT can be created anywhere not
necessarily at start.

Number  Start (sector)End (sector)  Size   Code  Name
   12048 7813119   3.7 GiB FD00  Linux RAID
   327344896  1980469247   931.3 GiB   FD00  Linux RAID
   4  1980469248  2930276351   452.9 GiB   FD00  Linux RAID
   5 781516827344895   9.3 GiB FD00  Linux RAID

As you can see partition 2 is missing. when i am creating the new partition
it is starting from the 2930276352 (+1 ending sector of partition 4)

should i create partition 2 of a size of 1 GB. and make it as a boot
partition and install grup on that partition. do you think performing these
steps will do the job. or i have to more in order to boot my New 2TB GPT
drive.

Thanks,
Yousuf

Re: RAID b/w GPT and NON GPT partition.

[Muhammad Yousuf Khan]

  Ramadan Kareem Yousuf.




 What I would do is shrink partition 5 by 100M then create a new ef02
 partition in the freed space. This should be completely safe since it is
 just a swap partition and contains no permanent data.

 Do this on both drives after stopping swap (swapoff) then /dev/md1.

 There is no need for RAID on the ef02 partition.


Thanks for the wishing the Ramadan Kareem :)

Thanks for your tip. however what i am looking is more easy way. as Pascal
is saying i already have free space in my new drive and there is no need
for shrinking a partition. which is i think dangerous at this point because
only 1 drive is left. if i loose the data i have to go back to my archive
and restore all the data from my old backup drive which going to be a
headache.

so what i am trying to find out if creating a new partition is sufficient
that i will choose that route.

Thanks,
Yousuf

RAID b/w GPT and NON GPT partition.

[Muhammad Yousuf Khan]

Dear All,

i have 2 drives installed way back in 2013 /dev/sda and /dev/sdb

I have been using RAID1 b/w  two 1.5 TB  drives which worked great with
fdisk. now one of the drive is failed and there is no more 1.5 TB available
in the market. the least available drive is 2TB. Which means fdisk 2TB
issue.

Faulty drive is (/dev/sdb) now i want to replace the dead drive with the
new 2TB drive that will definitely be a GPT.

in old times i could use sfdisk command to copy partition table now since
the new drive is 2TB my question is can i use sfdisk on 2TB drive.? i think
this will not work since old drive is non GPT which means copying non GPT
partition to a drive supports only GPT will not work.

so this is the point where i am confuse and need your help.

- i want to copy my old drive (1.5TB) partition table (non GPT)  to new 2TB
partition table (GPT)?

- and then further want to replace the bad drive from mdadam?

can you guys please guide me. step by step

Thanks,
Yousuf

SNMP v2c and v3 on debian wheezy

[Muhammad Yousuf Khan]

Dear All,


i am very new to snmp and trying to learn it therefore if you guys find
this a stupid question kindly guide me to correct route.


i have a snmp base monitoring server and it supports v2c for now. not v3.
i found out (by using snmpwalk) some difference in v2c and v3 on debian
wheezy system which is that v2c shows less then 30 OIDs entries and v3 show
countless entries.
thus my monitoring server does provide the information on v2c that i can
see on v3 which i need via v2c.


i have a firewall Pfsense working on same v2c but as you may know it is
BSD-base OS.the difference is pfsense gives me the same amount of OIDs that
are present in debian wheezy snmp v3

so my first question is why freebsd snmpwalk on v2c showing hugelist of
OIDs then Debian Wheezy v2c OIDs.


i may be wrong but my finding is that it is happening because in pfsense i
found out that it works on list of snmp module  unlike debian default
snmpd.conf file.

here is the list of pfsense modules.

-mibll
-netgraph
-PF
-Host Resource
- UCD
- Regex.


so i am thinking may be if there is a way i can install all those modules
in debian and get the same amount of information which i need for that
monitoring server.


any suggestion or guidance will be highly appreciated.

Thanks,
Yousuf

Re: Jumbo frame Debian Wheezy.

[Muhammad Yousuf Khan]

Thanks for the reply yes you are correct. i assume and find out the same. i
could to change the MTU of the local LAN. then i added 4x1Gb intel  LAN on
the same system and it was working as expected. that shows limit was with
the Hardware.

Thanks,
Yousuf

On Mon, Jan 5, 2015 at 4:14 PM, Alexis flexibe...@gmail.com wrote:


 Muhammad Yousuf Khan writes:

  i am trying to enable jumbo frame on Debian wheezy however nothing
  works.
 
  i ran a command ifconfig eth0 mtu 9000
 
  and receive invalid argument
 
  then i edit /etc/network/interfaces and added mtu 9000
  when i ifdown and ifup eth0
  it shows the same error invalid argument
 
  Please help.

 It might be that your Ethernet adaptor doesn't support an MTU of
 9000. For example, the maximum MTU of the adaptor in my laptop is 6122;
 attempts to set the MTU to a larger value than that produces the
 SIOCSIFMTU: Invalid argument error.


 Alexis.


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/87y4phqy2k@gmail.com

Re: Jumbo frame Debian Wheezy.

[Muhammad Yousuf Khan]

Another finding is that i can change the mtu less then 1500  my system is
dell precision 490. i have other system on squeeze with no issue at all.
but they are on proxmox.

i have tested that i can set any value less then or equals to 1500 mtu but
when i even try 1501 it says
SIOCSIFMTU: Invalid argument

i have same system working on proxmox. deployed on debian squeeze and i can
go up to 9000 with no problem.
this  problem is  in non proxmox  system having debian wheezy with libvirt.

Please guide.

Thanks,
Yousuf

On Wed, Dec 31, 2014 at 10:43 AM, Muhammad Yousuf Khan sir...@gmail.com
wrote:

 i am trying to enable jumbo frame on Debian wheezy however nothing works.

 i ran a command ifconfig eth0 mtu 9000

 and receive invalid argument

 then i edit /etc/network/interfaces and added mtu 9000
 when i ifdown and ifup eth0
 it shows the same error invalid argument

 Please help.

 Thanks,
 Yousuf

Jumbo frame Debian Wheezy.

[Muhammad Yousuf Khan]

i am trying to enable jumbo frame on Debian wheezy however nothing works.

i ran a command ifconfig eth0 mtu 9000

and receive invalid argument

then i edit /etc/network/interfaces and added mtu 9000
when i ifdown and ifup eth0
it shows the same error invalid argument

Please help.

Thanks,
Yousuf

freenas bootable USB in debian.

[Muhammad Yousuf Khan]

I am using Debian as my desktop and GUI. i want to install/write freenas
usb boot image *.img file to Empty USB.

for windows we have windows32diskimager but i am looking for an alternative
of this software in debian.
can you guyz please help.

Thanks alot in advance.

Thanks,
MYK.

Re: Block size confusion.

[Muhammad Yousuf Khan]

Thank for you detail update.
can you please also share with your experience that. when i dstat i some
time see wait time between 10-17 and at that time my system works slow. and
my processor shows normal. what i have read about that wait values this is
due to IO issues.
now my question is how would i mitigate that issue. by purchasing a SAS or
SSD or can i handle it by customizing the block size. how can i determine
what is needed?

Thanks,
MYK

Block size confusion.

[Muhammad Yousuf Khan]

Dear experts,

i know its frustrating because i always ask theoretical question. i hope
and believe you guyz will not mind and  i really learn alot from this list.

So, coming to the point, I want to clear my confusion on block size.
theoretically i  know what block size is but practically i dont know that
what are the reasons that one might want to change the block size and how
it effects the IO performance.


i have heard that people would want to use bigger block size if they are
hosting or storing big files like videos, or other big size data. on the
other hand people recommends to use small size when we have many small
files. actually i know the science behind that if i create a bigger block
size and file size is small it will create the same size file as block size
which end up eating space when we have large database of small file.

so in context of above. my questions are.

why to change the block size? and what are the basic reasons that make some
one to think about that?

did it really help in increasing the performance by changing the block size?

can it effect the RAID (mdadm) or hardware RAID performance if we change
the block size?

what is the deference b/w block size and cylinder. ?

why it is recommended that we should use same size of block in both VG and
LV as the size of PV?



Thanks,
Myk

Re: need help in rights delegation to a freelance web developer

[Muhammad Yousuf Khan]

On Wed, Nov 12, 2014 at 6:54 PM, Miles Fidelman mfidel...@meetinghouse.net
wrote:

 Muhammad Yousuf Khan wrote:




 NOTE: These help, but if you end up on the attacking end of a
 distributed bot attack, it's likely that your Apache server will
 get hosed -- at times, I've had to tune Apache (number of
 concurrent processes, number of concurrent queries), to keep our
 server from getting so overloaded that it crashes.



 Thank for sharing every bit of information. yes i do want to tweak Apache
 concurrent connection and other settings. is there any formula to do this.
 would you like to share your thoughts on this.

  Unfortunately, what I shared is about all I know on the topic.  Most of
 my hardening of Wordpress and Apache was on-the-fly, in response to a
 botnet attack.  I did some googling and searching the WordPress plug-in
 site to find the plug-ins that I use, played with the settings a bit just
 to get things working, nothing orderly or that I could share as a best
 practice.  For Apache, I just started in the config file and reducing max_
 settings until I reached a level where I wasn't having to restart Apache
 every few minutes, or rebooting the machine.  Unfortunately, the Wordpress
 site still becomes unreachable at times (when under attack), and the site
 runs slow at other times (limited number of concurrent accesses), but at
 least it doesn't take down the entire server - which is a good thing as the
 Wordpress site is a sideline, the server is really for mail and list
 processing.

 I did come across some references to software that could dynamically tune
 IP chains, based on wordpress level attacks -- to block IP addresses
 earlier in the processing chain, and I expect one could push that back to
 an external firewall -- but I never went all that far in exploring these.
 (If you end up doing so, please report back!).


I am actually a system and network eng. i did all the protection on FW end.
installed IPS/scan detection on linux machine. and my machine is behind
firewall. which i believe is properly configured so there are many layers
of security. but protecting apache traffic it self is a different domain of
security. because WP and template coding may have loopholes which you may
not control from FW. therefore learning the security of web application it
self is an art.

By the way i am working on mod_security and also working on All in one WP
security module. for application layer which i belive will help in bot and
other attackes. i am also planning to install fail2ban however as i know of
F2B it working on bruteforce attacks. which lower in my working priorityies.

BTW thanks for All for sharing your inputs i have learned alot from this
threat. if any one like to add more please go ahead it will help newbies in
protecting there websites.

Thanks,
MYK




 Happy Tuning,

 Miles

 --
 In theory, there is no difference between theory and practice.
 In practice, there is.    Yogi Berra


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a
 subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: https://lists.debian.org/54636694.2090...@meetinghouse.net

Re: Re: need help in rights delegation to a freelance web developer

[Muhammad Yousuf Khan]

 NOTE: These help, but if you end up on the attacking end of a distributed
 bot attack, it's likely that your Apache server will get hosed -- at times,
 I've had to tune Apache (number of concurrent processes, number of
 concurrent queries), to keep our server from getting so overloaded that it
 crashes.



Thank for sharing every bit of information. yes i do want to tweak Apache
concurrent connection and other settings. is there any formula to do this.
would you like to share your thoughts on this.

how to find the cause of restart of my debian 7 machine.

[Muhammad Yousuf Khan]

my machine was ON for several weeks but today it restarted for unknown
reason. now it is working find. since the server is restarted there are too
many log entries in var/log/messager and syslog as startup events. is there
any easy way to reach the specific entry related to the event.
i have search keywords like error and others in the log that i was
expecting but failed.


Thanks,
Yousuf

need help in rights delegation to a freelance web developer

[Muhammad Yousuf Khan]

for some testing we first want to install our Wordpress website inhouse.
and for that i have designed a Debian 7. and installed all the necessary
 packages that are needed for the deployment.
now i want to grant rights to our freelance web developer so he can deploye
the website. i never did this in pas i am a one man army. now Firewall and
all security related things are already deployed with 1 to 1 NAT.  however
now i want to give him very limited right so that he can install the
website with out complaining and i can also feel secure.


any help or suggestion will be highly appreciated.


Thanks,

MYK

Re: need help in rights delegation to a freelance web developer

[Muhammad Yousuf Khan]

Thanks for sharing your input. what would be the rights of /var/www and its
sub-directories.
currently it is root : root and 775

Secondly do you guys have any advice on more security of WP. i have heard
that word press is kind of week in security. maybe i am wrong but i have
heard that.

no problem with the data base we only have single data base only with one
user.

Moreover, our developer is also saying that he is having problem running
our website on our current debian 7 VM. do you guys think there should be
some modules required in order to work things properly.

Thanks,
MYK





On Mon, Nov 10, 2014 at 7:32 PM, Carl Fink c...@finknetwork.com wrote:

 On Mon, Nov 10, 2014 at 07:20:46PM +0500, Muhammad Yousuf Khan wrote:
  for some testing we first want to install our Wordpress website inhouse.
  and for that i have designed a Debian 7. and installed all the necessary
   packages that are needed for the deployment.
  now i want to grant rights to our freelance web developer so he can
 deploye
  the website. i never did this in pas i am a one man army. now Firewall
 and
  all security related things are already deployed with 1 to 1 NAT.
 however
  now i want to give him very limited right so that he can install the
  website with out complaining and i can also feel secure.

 If you have already installed WordPress and set up its database, you don't
 need to give your developer any system-wide rights at all. Just make him
 administrator of the WordPress site itself. If it's properly installed, he
 can then install plugins, themes, etc. from the WP GUI.

 If security is a concern (and it probably should be) you might consider
 sandboxing WorPress and having its MySQL instance be separate from any
 other
 MySQL uses on your server. Or maybe even putting it on its own virtual
 instance.
 --
 Carl Fink   nitpick...@nitpicking.com

 Read my blog at blog.nitpicking.com.  Reviews!  Observations!
 Stupid mistakes you can correct!


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/20141110143254.ga4...@panix.com

Re: need help in rights delegation to a freelance web developer

[Muhammad Yousuf Khan]

 On Mon, Nov 10, 2014 at 11:24:55PM +0500, Muhammad Yousuf Khan wrote:
  Thanks for sharing your input. what would be the rights of /var/www and
 its
  sub-directories.
  currently it is root : root and 775

 I would havw www-data.www-data as owner, but it isn't likely to matter.
 Does
 your Apache run as root? That is not considered good practice last I heard.


ok changing the rights as suggested.
Since i am new, any guide or advice on run apache as non root will be
highly appreciable.



  Secondly do you guys have any advice on more security of WP. i have heard
  that word press is kind of week in security. maybe i am wrong but i have
  heard that.

 I've had no problems in several  years of hosting WP.

 I do recommend NOT using the Debian package for WordPress. For security and
 also better features, use the most recent version available at
 wordpress.org. Installation is actually only slightly harder than the
 Debian
 package--their claim of a 5-minute install is totally valid.

 Again, your WordPress developer DOES NOT NEED A SHELL ACCOUNT OR ANY SERVER
 PRIVILEGES at all, aside from being the administrator of the WordPress
 site.
 Unless you are asking him to also INSTALL WordPress?

 If WordPress works, permissions are OK. Again, none of this matters to the
 WP developer once WordPress is installed.

 And again, for best security give WordPress its own VM. You can get one for
 literally $1 per month from http://www.nosupportlinuxhosting.com.


Thanks for sharing knowledge i will check this out.


  Moreover, our developer is also saying that he is having problem running
  our website on our current debian 7 VM. do you guys think there should be
  some modules required in order to work things properly.

 Much more information needed. Is this developer also doing non-WordPress
 things? Is this a different developer? Most importantly, exactly what
 problems is he having?


i think there is nothing he is doing out side WP.AFAIK.
last time he was facing issue with rewrite module. however i have installed
that module for sure. even i have check with apachectl command tool. though
it is resolved for now.
so i thought, in advance if there is any list of necessary modules that are
needed in default website deployment. that would be great. thus i will just
directly install the stuff without wasting time in research.




 --
 Carl Fink   nitpick...@nitpicking.com

 Read my blog at blog.nitpicking.com.  Reviews!  Observations!
 Stupid mistakes you can correct!


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/20141110191454.ga18...@panix.com

systemd vs init

[Muhammad Yousuf Khan]

this email is intended for my learning purpose only.

i am a debian user for many years and have been working on different
services.i am not a high level linux kernel hacker just working like a
normal system admin as they suppose to work. however
 now a days i am hearing too much about systemd vs init  fights which is
capturing my attention. actually i know the use of initd and what it is
actually doing i have heard that systemd is replacing init.d which is fine
too. but why many people are against systemd. just like
http://debianfork.org/ why they are against this change. can some one
please explain.

when we talk about debian forks we talk about OS like ubuntu and mint. why
people considering the addition of systemd as a fork?


Thanks,
Yousuf

Re: Debian wheezy libvirt+virt-manager very slow performence.

[Muhammad Yousuf Khan]

Thanks it worked.


On Tue, Oct 21, 2014 at 6:20 PM, Reco recovery...@gmail.com wrote:

  Hi.

 On Tue, Oct 21, 2014 at 02:58:45PM +0500, Muhammad Yousuf Khan wrote:
  Hi,
 
  I have a debian wheezy machine with 12GB RAM and 500GB 7200 RPM
 harddrive WD black 32MB cache.
 
  copying host node (local or remote) working fine. however when i create
 a KVM guest on the top and try to install XP it take almost half day to
 install the XP/
  other operating systems. my processor and disk IO are showed up very
 stable in virt-manager graph. also the console very smooth no jerking at
 all.
 
  Actually i am using Proxmox virtualization platform and i am using it
 for many years. i haven't face issue like this in Proxmox. they are
 basically based on
  Debian OS now trying to learn Libvirt too for polishing my skills or for
 bed time as it seems in near future Proxmox will be a paid solution.
 
  Can anyone please share what can be the issue and how can i solve it.

 By default qemu should use sync I/O on host OS, which is safe
 (presumably), but annoyingly slow.

 Try [1] before installing guest OS.

 [1]

 http://www.ducea.com/2011/07/06/howto-improve-io-performance-for-kvm-guests/

 Reco


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/20141021132007.GA26302@x101h

understanding kernel compilation and

[Muhammad Yousuf Khan]

actually i never compile or patch any kernel before for some reasons and
learning i am installing kernel 3.16 stable with patch.
now the question is when i visit kernel.org website i see 3.16 kernel and
patch and inc.patch.

i can understand what is patch it could be a fix to some bugs but what is
inc.patch or incremental patch.


Kernel location :
https://www.kernel.org/pub/linux/kernel/v3.x/linux-3.16.6.tar.xz
Patch location :
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.16.6.xz
inc patch :
https://www.kernel.org/pub/linux/kernel/v3.x/incr/patch-3.16.5-6.xz

any help will be highly appreciated.

Thanks,
Yousuf

Re: understanding kernel compilation and

[Muhammad Yousuf Khan]

Thanks for your guidence,
can you please share that i do not see kernel architecture on the website.
does that kernel file contain both x86 and amd64?

On Thu, Oct 23, 2014 at 2:51 PM, tv.deb...@googlemail.com 
tv.deb...@googlemail.com wrote:

 On 23/10/2014 10:20, Muhammad Yousuf Khan wrote:

 actually i never compile or patch any kernel before for some reasons and
 learning i am installing kernel 3.16 stable with patch.
 now the question is when i visit kernel.org website i see 3.16 kernel and
 patch and inc.patch.

 i can understand what is patch it could be a fix to some bugs but what is
 inc.patch or incremental patch.


 Kernel location :
 https://www.kernel.org/pub/linux/kernel/v3.x/linux-3.16.6.tar.xz
 Patch location :
 https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.16.6.xz
 inc patch :
 https://www.kernel.org/pub/linux/kernel/v3.x/incr/patch-3.16.5-6.xz

 any help will be highly appreciated.

 Thanks,
 Yousuf



 Hello,

 incremental patches do what is implied by the naming, they move from one
 minor version in a branch to the next, patch-3.16.5-6.xz moves from 3.16.5
 to 6, so has to be applied to 3.16.5 (only).

 Patches to 3.x.y versions are meant to be applied to the previous main
 version in the branch, patch-3.16.6.xz is to be applied to 3.16 sources
 (not 3.16.5) and will take you all the way to 3.16.6.

 Patches to main 3.x versions are to be applied to the previous main
 version 3.(x-1), for instance patch-3.16.xz is to be applied to kernel
 sources 3.15

 You can see this in the patch itself, toward the beginning you will see a
 section like this:

 
  VERSION = 3
  PATCHLEVEL = 16
 -SUBLEVEL = 0
 +SUBLEVEL = 6
 

 You can see that in diff parlance the - minus sign before SUBLEVEL =
 0 means it is removed and replaced by the line beginning with the + plus
 sign SUBLEVEL = 6.

 You may also notice that the sizes of the patches are quite different due
 to the amount of changes they carry.

 Don't forget to rename the source directory after patching to keep track
 of the real version of the sources.

 Hope it helps.


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a
 subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
 Archive: https://lists.debian.org/5448cfaa.7040...@googlemail.com

Re: understanding kernel compilation and

[Muhammad Yousuf Khan]

Actually the problem is i am trying to install KVM guest windows 7 64 bit.
during the installation everything went well. but when guest start for the
first time my KVM guest shows booting from harddirve... and struck.
my /var/log/libvirt/qemu/(myguestfile) show  this

KVM: entry failed, hardware error 0x8021

If you're running a guest on an Intel machine without unrestricted mode

support, the failure can be most likely due to the guest entering an
invalid

state for Intel VT. For example, the guest maybe running in big real mode

which is not supported on less recent Intel processors.:


my kernel is 3.2.x which comes with Wheezy as default kernel.i found this
error in many places that this is a kernel bug and shall be fix if i patch
or update the kernel.


So my KVM host is not a production server so i thought it is a best time to
play with the kernal patching because i am working on linux for years but
never perform such task i always rely on default/stable debian repository
but this is a first time i am doing some thing out of the box for fixing
and learning purpose both


so that's the whole story. if you have any other suggestion please share.


Thanks,









On Thu, Oct 23, 2014 at 3:51 PM, Raffaele Morelli 
raffaele.more...@gmail.com wrote:

 On 23/10/14 at 03:37pm, Muhammad Yousuf Khan wrote:
  Thanks for your guidence,
  can you please share that i do not see kernel architecture on the
 website.
  does that kernel file contain both x86 and amd64?
 

 ...of course it does.

 But, do you know what are you doing?


 --
 « Nunc est bibendum, nunc pede libero pulsanda tellus »


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/20141023105140.ga1...@gmail.com

KVM libvirt issue on Debian Wheezy specifically Windows 7 64bit

[Muhammad Yousuf Khan]

i am trying to install a 64bit Windows 7 and i fail to start the guest i
tried my best. i upgraded the kernel to 3.16 i upgraded the Qemu-kvm
package from backports.

where ever i start the machine shows this error.

2014-10-23 13:55:45.281+: starting up
LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
HOME=/ QEMU_AUDIO_DRV=none /usr/bin/kvm -name Win7ForDev -S -machine
pc-1.1,accel=kvm,usb=off -cpu kvm64,+pdcm,+xtpr,+cid,+vmx,+ds_cpl,$
char device redirected to /dev/pts/1 (label charserial0)
KVM internal error. Suberror: 1
emulation failure
EAX=0010 EBX=0080 ECX= EDX=0080
ESI=0025da4a EDI=0007da4a EBP=1f20 ESP=0200
EIP=009b EFL=00010002 [---] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0020 0200  9300
CS =b000 000b  9f00
SS =0020 0200  9300
DS =0020 0200  9300
FS =0020 0200  9300
GS =0020 0200  9300
LDT=   8200
TR =   8b00
GDT= 002b 0027
IDT=  03ff
CR0=0010 CR2= CR3= CR4=
DR0= DR1= DR2=
DR3=
DR6=0ff0 DR7=0400
EFER=
Code=ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
ff ff

for more detail please see below.


root@hippo:~# lscpu
Architecture:  x86_64
CPU op-mode(s):32-bit, 64-bit
Byte Order:Little Endian
CPU(s):8
On-line CPU(s) list:   0-7
Thread(s) per core:2
Core(s) per socket:2
Socket(s): 2
NUMA node(s):  1
Vendor ID: GenuineIntel
CPU family:15
Model: 6
Stepping:  4
CPU MHz:   3193.240
BogoMIPS:  6386.05
Virtualization:VT-x
L1d cache: 16K
L2 cache:  2048K
NUMA node0 CPU(s): 0-7



root@hippo:~# uname -a
Linux hippo 3.16-0.bpo.2-amd64 #1 SMP Debian 3.16.3-2~bpo70+1 (2014-09-21)
x86_64 GNU/Linux

root@hippo:~# dpkg -l | grep qemu
ii  ipxe-qemu
 1.0.0+git-2013.c3d1e78-2.1~bpo70+1 all  PXE boot firmware -
ROM images for qemu
ii  qemu   1.1.2+dfsg-6a+deb7u4
  amd64fast processor emulator
ii  qemu-kvm   2.1+dfsg-5~bpo70+1
  amd64QEMU Full virtualization on x86 hardware
ii  qemu-slof  20131015+dfsg-1~bpo70+1
   all  Slimline Open Firmware -- QEMU PowerPC version
ii  qemu-system2.1+dfsg-5~bpo70+1
  amd64QEMU full system emulation binaries
ii  qemu-system-arm2.1+dfsg-5~bpo70+1
  amd64QEMU full system emulation binaries (arm)
ii  qemu-system-common 2.1+dfsg-5~bpo70+1
  amd64QEMU full system emulation binaries (common files)
ii  qemu-system-mips   2.1+dfsg-5~bpo70+1
  amd64QEMU full system emulation binaries (mips)
ii  qemu-system-misc   2.1+dfsg-5~bpo70+1
  amd64QEMU full system emulation binaries (miscelaneous)
ii  qemu-system-ppc2.1+dfsg-5~bpo70+1
  amd64QEMU full system emulation binaries (ppc)
ii  qemu-system-sparc  2.1+dfsg-5~bpo70+1
  amd64QEMU full system emulation binaries (sparc)
ii  qemu-system-x862.1+dfsg-5~bpo70+1
  amd64QEMU full system emulation binaries (x86)
ii  qemu-user  1.1.2+dfsg-6a+deb7u4
  amd64QEMU user mode emulation binaries
ii  qemu-utils 2.1+dfsg-5~bpo70+1
  amd64QEMU utilities

Re: understanding kernel compilation and

[Muhammad Yousuf Khan]

Thanks Dervin, for the encouragement and it is really nice to know that
there is a community exist for newbies as well.i will definitly start
working on your given information it is very helpful.
just sharing to all  after lots of efforts and updates nothing has achieved
so far.
started a new email trail. Qemu-kvm problem, no guest is starting on
windows 7 64 bit :(

On Thu, Oct 23, 2014 at 5:05 PM, Devrin Talen dc...@cornell.edu wrote:

 Muhammad Yousuf Khan sir...@gmail.com writes:

  So my KVM host is not a production server so i thought it is a best time
 to
  play with the kernal patching because i am working on linux for years
 but never
  perform such task i always rely on default/stable debian repository but
 this is
  a first time i am doing some thing out of the box for fixing and learning
  purpose both

 I think it's great that you're starting to learn how to work with the
 kernel.  You had a question earlier about x86 vs. amd64 support and the
 answer is that the kernel supports both architectures depending on how
 it's configured.  There's a lot of information out there to help folks
 get started building kernels and a great one to start with is Linux
 Kernel Newbies [1].  If you have questions or get stuck on the actual
 build process you may want to try using their mailing list or IRC
 channel.

 [1]: http://kernelnewbies.org/

 The Gentoo handbook [2] is also a great resource.  It's written with
 running Gentoo in mind but the build process that it goes over is
 somewhat applicable to generic kernels as well.

 [2]:
 http://www.gentoo.org/doc/en/handbook/handbook-amd64.xml?part=1chap=7

 --
 Devrin Talen dc...@cornell.edu

Re: KVM libvirt issue on Debian Wheezy specifically Windows 7 64bit

[Muhammad Yousuf Khan]

just adding some more info.

I have been using Proxmox 3.x for quite some time on the same hardware but
for some learning purpose i installed libvirt and virt-manager.

Proxmox also based on same KVM engine and Debian destro and my windows 7 64
bit is working great even i have installed Server 2012 in proxmox with no
issue on same hardware with VT ON.

therefore it seems to me the limitation or problem is not the hardware. it
is something in the software.

moreover i have installed Windows XP 32 bit. on the said debian Guest with
KVM+libvirt which is working fine on any version combination of libvirt and
KVM. only thing which is not working is higher version of windows such as
windows 7 and server 2008. i never tried vista though.

Any information or help will be highly appreciated.

Thanks,
Yousuf


On Thu, Oct 23, 2014 at 7:06 PM, Muhammad Yousuf Khan sir...@gmail.com
wrote:

 i am trying to install a 64bit Windows 7 and i fail to start the guest i
 tried my best. i upgraded the kernel to 3.16 i upgraded the Qemu-kvm
 package from backports.

 where ever i start the machine shows this error.

 2014-10-23 13:55:45.281+: starting up
 LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 HOME=/ QEMU_AUDIO_DRV=none /usr/bin/kvm -name Win7ForDev -S -machine
 pc-1.1,accel=kvm,usb=off -cpu kvm64,+pdcm,+xtpr,+cid,+vmx,+ds_cpl,$
 char device redirected to /dev/pts/1 (label charserial0)
 KVM internal error. Suberror: 1
 emulation failure
 EAX=0010 EBX=0080 ECX= EDX=0080
 ESI=0025da4a EDI=0007da4a EBP=1f20 ESP=0200
 EIP=009b EFL=00010002 [---] CPL=0 II=0 A20=1 SMM=0 HLT=0
 ES =0020 0200  9300
 CS =b000 000b  9f00
 SS =0020 0200  9300
 DS =0020 0200  9300
 FS =0020 0200  9300
 GS =0020 0200  9300
 LDT=   8200
 TR =   8b00
 GDT= 002b 0027
 IDT=  03ff
 CR0=0010 CR2= CR3= CR4=
 DR0= DR1= DR2=
 DR3=
 DR6=0ff0 DR7=0400
 EFER=
 Code=ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ff ff ff

 for more detail please see below.


 root@hippo:~# lscpu
 Architecture:  x86_64
 CPU op-mode(s):32-bit, 64-bit
 Byte Order:Little Endian
 CPU(s):8
 On-line CPU(s) list:   0-7
 Thread(s) per core:2
 Core(s) per socket:2
 Socket(s): 2
 NUMA node(s):  1
 Vendor ID: GenuineIntel
 CPU family:15
 Model: 6
 Stepping:  4
 CPU MHz:   3193.240
 BogoMIPS:  6386.05
 Virtualization:VT-x
 L1d cache: 16K
 L2 cache:  2048K
 NUMA node0 CPU(s): 0-7



 root@hippo:~# uname -a
 Linux hippo 3.16-0.bpo.2-amd64 #1 SMP Debian 3.16.3-2~bpo70+1 (2014-09-21)
 x86_64 GNU/Linux

 root@hippo:~# dpkg -l | grep qemu
 ii  ipxe-qemu
  1.0.0+git-2013.c3d1e78-2.1~bpo70+1 all  PXE boot firmware -
 ROM images for qemu
 ii  qemu   1.1.2+dfsg-6a+deb7u4
 amd64fast processor emulator
 ii  qemu-kvm   2.1+dfsg-5~bpo70+1
 amd64QEMU Full virtualization on x86 hardware
 ii  qemu-slof  20131015+dfsg-1~bpo70+1
all  Slimline Open Firmware -- QEMU PowerPC version
 ii  qemu-system2.1+dfsg-5~bpo70+1
 amd64QEMU full system emulation binaries
 ii  qemu-system-arm2.1+dfsg-5~bpo70+1
 amd64QEMU full system emulation binaries (arm)
 ii  qemu-system-common 2.1+dfsg-5~bpo70+1
 amd64QEMU full system emulation binaries (common files)
 ii  qemu-system-mips   2.1+dfsg-5~bpo70+1
 amd64QEMU full system emulation binaries (mips)
 ii  qemu-system-misc   2.1+dfsg-5~bpo70+1
 amd64QEMU full system emulation binaries (miscelaneous)
 ii  qemu-system-ppc2.1+dfsg-5~bpo70+1
 amd64QEMU full system emulation binaries (ppc)
 ii  qemu-system-sparc  2.1+dfsg-5~bpo70+1
 amd64QEMU full system emulation binaries (sparc)
 ii  qemu-system-x862.1+dfsg-5~bpo70+1
 amd64QEMU full system emulation binaries (x86)
 ii  qemu-user  1.1.2+dfsg-6a+deb7u4
 amd64QEMU user mode emulation binaries
 ii  qemu-utils 2.1+dfsg-5~bpo70+1
 amd64QEMU utilities

Debian wheezy libvirt+virt-manager very slow performence.

[Muhammad Yousuf Khan]

Hi,

I have a debian wheezy machine with 12GB RAM and 500GB 7200 RPM harddrive
WD black 32MB cache.

copying host node (local or remote) working fine. however when i create a
KVM guest on the top and try to install XP it take almost half day to
install the XP/other operating systems. my processor and disk IO are showed
up very stable in virt-manager graph. also the console very smooth no
jerking at all.

Actually i am using Proxmox virtualization platform and i am using it for
many years. i haven't face issue like this in Proxmox. they are basically
based on Debian OS now trying to learn Libvirt too for polishing my skills
or for bed time as it seems in near future Proxmox will be a paid solution.

Can anyone please share what can be the issue and how can i solve it.

Thanks,

24/7 servers and FSCK

[Muhammad Yousuf Khan]

hello all,

i have several debian server and they are up 24/7. even i have a server
which is up for 1.5 years. without restart.

now i know when ever i restart this for the maintenance it will run the
fsck to check the disk. which is fine and i have heard that it is very
important to run on boot but what i want to know if fsck process is that
critical do i need to run fsck manually. so that i can save my server from
restart just for fsck.
or i can cron job the task once every moth or two is this a good idea.

Thanks,
MYK

Re: /etc/network/interface file auto reset.

[Muhammad Yousuf Khan]

Thanks Reco, Cindy and all for useful comments. i will try all suggestion
next working day and will update you accordingly.

Thanks,
MYK

On Sat, Sep 20, 2014 at 6:10 PM, Cindy-Sue Causey butterflyby...@gmail.com
wrote:

 On 9/19/14, Darac Marjal mailingl...@darac.org.uk wrote:
 
  Put this into /etc/network/interfaces.d/br0
 
 allow-hotplug br0
 iface br0 inet static
 address 10.xx.xx.18
 netmask 255.xx.xx.xx
 network 10.xx.xx.0
 gateway 10.xx.xx.3
 broadcast 10.xx.xx.255
 dns-nameservers 10.xx.xx.8
 bridge_ports eth1
 bridge_stp off
 auto br0
 
  Now, if something clobbers your /etc/network/interfaces file, hopefully
  it won't touch the br0 file and that'll still come up fine :)


 *GREAT* point I felt should see another go to help highlight for
 fellow users who haven't discovered dot d (.d) directories yet. Just
 made the connection myself couple weeks ago via /etc/grub.d.

 Our dot d directories are a place where necessary personalizations
 remain static for programs that reset configurations on a regular
 basis. On another thread, someone mentioned they create a backup, if
 not an entirely separate place, for their own /etc directory because
 of its importance to them. Excellent place to focus a piece of
 self-training on with respect to preserving the kinds of tweaks such
 as is being discussed here..

 PS Apologies in advance if this shows up twice. Had a dialup glitch
 JUST as it was sending but not seeing it posted yet.

 Cindy :)

 --
 Cindy-Sue Causey
 Talking Rock, Pickens County, Georgia, USA

 * I comment, therefore I am (procrastinating elsewhere) *


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive:
 https://lists.debian.org/CAO1P-kCQG2iLZojYYzXrQM4V95BrLf=jgR_2=25ldq8rl-q...@mail.gmail.com

Re: /etc/network/interface file auto reset.

[Muhammad Yousuf Khan]

I also apologies for my wrong posting style. actually i am not aware of
what top posting is. can any of you please tell me what top posting means
so that i can avoid this in future.


Thanks,
MYK

/etc/network/interface file auto reset.

[Muhammad Yousuf Khan]

Hi guys,

i am using wheezy with libvirt virtualization i have configured a bridge
interface for that purpose.
i have statically set the bridge interface in interfaces file.
like this

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug eth1
allow-hotplug br0
#iface eth1 inet dhcp
#iface eth1 inet static
iface br0 inet static
address 10.xx.xx.18
netmask 255.xx.xx.xx
network 10.xx.xx.0
gateway 10.xx.xx.3
broadcast 10.xx.xx.255
dns-nameservers 10.xx.xx.8
bridge_ports eth1
bridge_stp off
auto br0


now when ever i restart the wheezy server i shows me something like this.
auto lo
iface lo inet loopback
iface br0 inet dhcp
   bridge_ports eth1
bridge_stp off
auto br


and eventually my connection gets broken.
Please help.

Thanks,
MYK

Re: /etc/network/interface file auto reset.

[Muhammad Yousuf Khan]

@softwatt
Thanks for the info but there are many workaournd like these. what i wanted
is to investigate the cause.

@Reco
thinks for your input. but i want to investigate which process is doing
this?

On Fri, Sep 19, 2014 at 12:39 PM, softwatt softw...@gmx.com wrote:

 Thanks for explaining. Debian guys teach me something new every day.

ufw on KVM host server for KVM guest

[Muhammad Yousuf Khan]

i don't know if this is related to Debian or not however as bridging of the
interface is involve in this question i hope you guys will not mind.

i have a KVM visualization server and i want the inside hosts to control
via UFW.
i some
i add a below line in before.rule file
-I FORWARD -m physdev --physdev-is-bridged -j ACCEPT

which allowed all the traffic from inside out in firewall language
anywhere to anywhere.

now regardless of any rule by traffic is going though the interfaces.
whatever i apply as block i does not apply. to any host or to any ip. can
you guyz please guide me what is happening.

am i making mistake in bridging or ufw

btw, my UFW config files are almost default nothing has changed.

Thanks,

MYK

need Partition utility and Mdadm gui.

[Muhammad Yousuf Khan]

i need a utility that looks like the one which we normally see during the
debian installation.
or can i call that utility after the installation from CLI.

Secondly, i also need to perform remote RAID related tasks with GUI
utility. like replacing the disk, and attaching the new one and all admin
related task.


can you guyz please help me in this regard.

Thanks,
Myk

need suggestion on Virtualization backup/DR site.

[Muhammad Yousuf Khan]

Dear All,

we are planning to rent a new server with RAID1 in the cloud and the
purpose of this server will be Qemu KVM virtualization. everything is fine
but the show stopper is Disaster recovery Site.

i think of 4 options and all of them are not upto my requirement and limits.

1st, Option was DRBD but splitbrain on 5Mb link will be a killer.

however, the thing come in my mind to sync only updates/Snapshots to DR
site the way ZFS and BTRFS does. so our second option become ZFS.

2nd option is ZFS and that is a very high in cost as Lots of RAM,SSDs are
involve for ARC1 and 2 so we drop that one.

3rd. option is Btrfs. as it is now Stable but still on back group level or
storage level lots of works still needs to be done. so it fails to gain my
confidence

4th, was Rsync. it can do the trick , it can also send only
updates/snapshots instead of big VMs but it corrupts the VM.

now my mind is empty and nothing is coming inside my mind. can you guys
please suggest anything that can be done to replicate the VMs b/w two
nodes. when both nodes are in different countries.

Thanks
Myk

Re: need suggestion on Virtualization backup/DR site.

[Muhammad Yousuf Khan]

@B please ignore my first message i forgot to add the list.

Thanks for the input i really appreciate that. but i have a confusion to
clear. if i use direct rsync and rsync with Backuppc what is the difference?

actually i am asking because i and the software both use same utility then
what is that software can do that i can not. please throw some light on
this issue.
Thanks,

MYK

On Fri, Sep 12, 2014 at 7:08 PM, B lazyvi...@gmx.com wrote:

 On Fri, 12 Sep 2014 18:58:48 +0500
 Muhammad Yousuf Khan sir...@gmail.com wrote:

 I would use backuppc through ssh with the rsync method;
 this way, your VM would be fully reconstructible, band
 width wouldn't be clobbered and backup(s) wouldn't take
 much place.


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/20140912160831.25246189@msi.defcon1

Re: Network speed drop down to 10MBPS for unknown reason.

[Muhammad Yousuf Khan]

@Bzzz, cables are self made.

@bob
if you mean speed and duplex mode then here is the detail

Supported ports: [ TP ]
Supported link modes:   10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Supports auto-negotiation: Yes
Advertised link modes:  10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Advertised pause frame use: No
Advertised auto-negotiation: Yes
Speed: 1000Mb/s
Duplex: Full
Port: Twisted Pair



On Wed, Sep 3, 2014 at 2:25 AM, Bob Proulx b...@proulx.com wrote:

 Muhammad Yousuf Khan wrote:
  i am using wheezy 7.x and for some unknown reason my network speed drop
  down to 10MBPS.
  i can see anything in /var/log/messages and /var/log/syslog related to
 the
  issue. when i restart the server it back to normal and shows above 50MBPS
  while transferring file.
  any idea what is happening .

 Please report what ethtool says about it.

   # apt-get install ethtool
   # ethtool eth0

 Bob

Network speed drop down to 10MBPS for unknown reason.

[Muhammad Yousuf Khan]

i am using wheezy 7.x and for some unknown reason my network speed drop
down to 10MBPS.
i can see anything in /var/log/messages and /var/log/syslog related to the
issue. when i restart the server it back to normal and shows above 50MBPS
while transferring file.
any idea what is happening .

Thanks,
MYK

Debian 7.X : 2TB HD installation successful but not booting

[Muhammad Yousuf Khan]

i have a 2TB hard disk and installation went fine no errors. however i can
not manage to boot it from hard disk. my partitions are like this.

1. /boot : Boot Flag ON.
1. Swap : Boot Flag Off.
1. /   : Boot Flag off.

but the weird part is when i press F10 and select harddrive to boot it
amazingly boot. it seems like more of a BIOS issue but the same system is
booting fine with a 250GB drive.

any idea what is going on.

Thanks,
MYK

Re: Debian Wheezy additional IP through Gnome-network-manager

[Muhammad Yousuf Khan]

Thanks for you help Tom


On Mon, Jul 7, 2014 at 4:30 PM, Tom H tomh0...@gmail.com wrote:

 On Mon, Jul 7, 2014 at 6:18 AM, Muhammad Yousuf Khan sir...@gmail.com
 wrote:
  On Mon, Jul 7, 2014 at 2:04 PM, Tom H tomh0...@gmail.com wrote:
  On Mon, Jul 7, 2014 at 4:20 AM, Muhammad Yousuf Khan sir...@gmail.com
  wrote:
 
  for some reason i need to assign an additional IP to My LAN. which i
 did
  from Gnome-network-manager but ipconfig doesn't show the new IP, i even
  server networking restart which didnt help. i dont want to restart my
  computer for this small task. i want this to be done with out restart.
 
  I assume that you can't see the new ip address when you use ifconfig
  not ipconfig.
 
  Forget about ifconfig, use ip addr (or ip a).
 
  Thanks for the correction ifconfig
 
  Thanks for the tip TOM.
 
  instead of ip addr command is there anyway i can use network-manger and
  /etc/network/interfaces at the same time. actually what changes i made in
  network Manger does not reflect in interfaces file. both have their pros
 and
  cons so i do wana use both options.

 You're welcome.

 I wasn't saying that you should use ip to set up an address but to check
 it.

 NM will use the ifupdown settings in /etc/network/interfaces to
 bring up and set up an interface (although I'm not sure that it'll
 know to assign two ip addresses to one interface that way) if you
 change managed=false to managed=true in the [ifupdown] section
 of /etc/NetworkManager/NetworkManager.conf. But NM won't change the
 settings in /etc/network/interfaces.


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive:
 https://lists.debian.org/CAOdo=SyNNFvZqFXg2fGUzMMY7DL1_Mm_KY5NDV=iucfcj2y...@mail.gmail.com

copy new backup file from different locations

[Muhammad Yousuf Khan]

i have five server creating different format files for backup on daily
basis. i keep 1 month archive in the folder and delete all the old files
prior to 1 month. and i have to do it manually. i want this to be
automated. i have created a script which is working fine but i need backup
softwares like bacula or backuppc do this for me. can i do this, because i
dont wana backup i actually wont to copy and bring all the data to
centralized network folder and it should ignore all the old file and only
select new file from the backup list. please help

Thanks,

Yousuf

Re: copy new backup file from different locations

[Muhammad Yousuf Khan]

Thanks Steve, I will take care.


On Wed, Jul 9, 2014 at 1:08 AM, Steve Litt sl...@troubleshooters.com
wrote:

 On Tue, 8 Jul 2014 16:00:30 +0500
 Muhammad Yousuf Khan sir...@gmail.com wrote:

  i have five server creating different format files for backup on daily
  basis. i keep 1 month archive in the folder and delete all the old
  files prior to 1 month. and i have to do it manually. i want this to
  be automated. i have created a script which is working fine but i
  need backup softwares like bacula or backuppc do this for me. can i
  do this, because i dont wana backup i actually wont to copy and bring
  all the data to centralized network folder and it should ignore all
  the old file and only select new file from the backup list. please
  help
 
  Thanks,
 
  Yousuf

 Hi Yousuf,

 Can't you just run your existing rsync backup from a cron job? That
 would probably do exactly what you need. Once a day your cron could
 also fire off a job that would use find to find everything more than 30
 days old, and delete them.

 Could I please ask a favor of you? I read over 500 non-spam emails a
 day, so I need to do it fast, and rely on traditional capitalization and
 punctuation for fast reading. Could I please ask you to capitalize i,
 as well as the first letter of every sentence? When reading fast, it
 really does make a difference.

 Thanks,

 SteveT

 Steve Litt*  http://www.troubleshooters.com/
 Troubleshooting Training  *  Human Performance


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive:
 https://lists.debian.org/20140708160825.1bd7e...@mydesq2.domain.cxm

Re: copy new backup file from different locations

[Muhammad Yousuf Khan]

Thanks i found the book too.



On Wed, Jul 9, 2014 at 1:31 AM, B lazyvi...@gmx.com wrote:

 On Tue, 8 Jul 2014 16:00:30 +0500
 Muhammad Yousuf Khan sir...@gmail.com wrote:

  i have five server creating different format files for backup on
  daily basis. i keep 1 month archive in the folder and delete all
  the old files prior to 1 month. and i have to do it manually. i
  want this to be automated. i have created a script which is
  working fine but i need backup softwares like bacula or backuppc
  do this for me. can i do this, because i dont wana backup i
  actually wont to copy and bring all the data to centralized
  network folder and it should ignore all the old file and only
  select new file from the backup list. please help

 Use bacukppc, it'll do all of that and more (unattended
 backups, integrated http svr usable by users (or not),
 hardlinking unmodified files (dramatically reducing the
 size of all backups), auto management of backups (no need
 to restore a full one, just restore the file/whole day
 you want), backups compression during night, etc).

 It is easy to configure (you might have to change the disks
 formatting options (more inodes), though), and _very_ easy
 to use.
 The kind of software you totally forget :)

 --
 Sebim he insulted my mother, I spitted in his double-cheese
 skarioka YOU'RE INSANE!!
 Sebim what would you do is someone treated your mother bitch?
 skarioka it already happened
 skarioka I stuck a fork in his hand
 skarioka and then I got yeld at by my mother because, well,
he was still my brother

Debian Wheezy additional IP through Gnome-network-manager

[Muhammad Yousuf Khan]

for some reason i need to assign an additional IP to My LAN. which i did
from Gnome-network-manager but ipconfig doesn't show the new IP, i even
server networking restart which didnt help. i dont want to restart my
computer for this small task. i want this to be done with out restart.
Please help me.

Thanks.
MYK

Re: Debian Wheezy additional IP through Gnome-network-manager

[Muhammad Yousuf Khan]

Thanks for the correction ifconfig

Thanks for the tip TOM.

instead of ip addr command is there anyway i can use network-manger and
/etc/network/interfaces at the same time. actually what changes i made in
network Manger does not reflect in interfaces file. both have their pros
and cons so i do wana use both options.

Thanks
MYK


On Mon, Jul 7, 2014 at 2:04 PM, Tom H tomh0...@gmail.com wrote:

 On Mon, Jul 7, 2014 at 4:20 AM, Muhammad Yousuf Khan sir...@gmail.com
 wrote:
 
  for some reason i need to assign an additional IP to My LAN. which i did
  from Gnome-network-manager but ipconfig doesn't show the new IP, i even
  server networking restart which didnt help. i dont want to restart my
  computer for this small task. i want this to be done with out restart.

 I assume that you can't see the new ip address when you use ifconfig
 not ipconfig.

 Forget about ifconfig, use ip addr (or ip a).


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive:
 https://lists.debian.org/CAOdo=symtj-ca624--vspmxuvkkxj8vsvm3sevqtyjm00zw...@mail.gmail.com

Gnome classic wheezy applications menu

[Muhammad Yousuf Khan]

Dear All,

i am using wheezy and my Applications menu shows me  top bottom arrow
keys. to scroll down and up however, whole desktop space remains to display
the full  list. it only shows 8 items. and if i add further menu it shows
me scroll buttons up and down. i want a full list view with out any
navigation button. please help.

Thanks

Myk

Spark chat client no message indication for new message.

[Muhammad Yousuf Khan]

I am using Debian 7 with Classic desktop,I have installed spark chat client
for destkop support but when any user send me a message it does not
indicate the new message arrival,eventually message remain unread, can i do
something to resolve this issue


Thanks,

MYK

QOS htb and DSCP

[Muhammad Yousuf Khan]

when i google QOS for linux i always find HTB in most of my searches, i
have been working on a linux base DD-WRT router and HTB is the part of it.
my question is not related to DDWRT my question is does HTB works on DSCP
base classes from AF21 to AF40 or HTB is some thing else. i am asking
this just to clear my concept.

Thanks,
MYK

Rar for debian wheezy

[Muhammad Yousuf Khan]

i some how installed a rar binary which is working in my old system now i
can not back track how i installed it.i want that to install in my Debian
wheezy desktop as i am receving many rar files. and unrar is not good
enough for me.

by the way just sharing that old version having rar is Squeeze and i am
using new version on desktop which is debian 7.




~# dpkg -s rar
Package: rar
Status: install ok installed
Priority: optional
Section: non-free/utils
Installed-Size: 1156
Maintainer: Martin Meredith m...@debian.org
Architecture: amd64
Version: 2:3.9.3-1
Suggests: unrar
Conffiles:
 /etc/rarfiles.lst f7f45aed82c9b18337389cf453289c92
Description: Archiver for .rar files
 This is the RAR archiver from Eugene Roshal. It supports multiple volume
 archives and damage protection. It can also create SFX-archives. There are
 versions which run on DOS, Windows (3.1x,95,NT), FreeBSD, BSDI.

~# apt-cache policy rar
rar:
  Installed: 2:3.9.3-1
  Candidate: 2:3.9.3-1
  Version table:
 *** 2:3.9.3-1 0
100 /var/lib/dpkg/status

Re: Rar for debian wheezy

[Muhammad Yousuf Khan]

ok guyz sharing you two outputs. unrar is failing and not extracting many
files out of one archive. however rar is doing the job for me. therefore
for future i only wanted to use rar non unrar. please see the behaviour of
both command with same archive.

/tmp# unrar -x CSR.rar

unrar 0.0.1  Copyright (C) 2004  Ben Asselstine, Jeroen Dekkers


Extracting from /tmp/CSR.rar

Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/a.gif Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/icon_star_3.gif Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/icon_thumbdown.gif OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/icon_thumbsup.gif OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/index.css Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/index.jpg Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/index.php Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/kayako-logo-blue.png OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/newsfeed.js Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS1.JPG Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS2.JPG Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS3.JPG Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS5.JPG Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS7x-4.png Failed
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software.htm Failed




/tmp# rar x CSR.rar

RAR 3.93   Copyright (c) 1993-2010 Alexander Roshal   15 Mar 2010
Shareware version Type RAR -? for help


Extracting from CSR.rar

CreatingCSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/a.gif  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/icon_star_3.gif  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/icon_thumbdown.gif  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/icon_thumbsup.gif  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/index.css  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/index.jpg  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/index.php  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/kayako-logo-blue.png  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/newsfeed.js  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS1.JPG  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS2.JPG  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS3.JPG  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS5.JPG  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software_files/ssl-IIS7x-4.png  OK
Extracting  CSR Generation  Microsoft IIS 7.x - Powered by Kayako Help Desk
Software.htm  OK
All OK


please tell me how can i install rar (only).

Thanks,



On Fri, May 23, 2014 at 1:59 PM, Chris Angelico ros...@gmail.com wrote:

 On Fri, May 23, 2014 at 6:55 PM, Andrei POPESCU
 andreimpope...@gmail.com wrote:
  On Vi, 23 mai 14, 13:10:36, Muhammad Yousuf Khan wrote:
  i some how installed a rar binary which is working in my old system now
 i
  can not back track how i installed it.i want that to install in my
 Debian
  wheezy desktop as i am receving many rar files. and unrar is not good
  enough for me.
 
  See if 'unar' (not a typo) helps.

 Thanks for that tip, Andrei! I just installed and tested it. While
 unrar does work, I'm happier to use something from 'main' than from
 'non-free' :)

 ChrisA


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive:
 https://lists.debian.org/CAPTjJmrP0=fr8bmahgbe01ynvw+-r1za1yv+mtpnvzzje9j...@mail.gmail.com

Re: want to revert back to gnome classic mode.

[Muhammad Yousuf Khan]

Yes, it is always is gnome 3 shell.



On Thu, May 22, 2014 at 12:55 PM, David Dušanić ivanovne...@gmail.comwrote:

   If I remember correctly LXDE is going through a  transition to Qt.
 Maybe
   the reason why?
 
  There were some intermittent issues with those menu options in xfce a
  little while ago but I thought they were related to lightdm/systemd
  issues. In any event it all seems to work fine now.

 Yes, it was related to systemd and LightDM.

 --
 David Dusanic


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/3292711400745...@web29j.yandex.ru

Re: want to revert back to gnome classic mode.

[Muhammad Yousuf Khan]

thanks alot guyz, i am actually a server side guy using mostly terminal
window. i am new to gnome and xfce.
so my question is, are all the applications from gnome will be available in
xfce, is it like a layer on the top of gnome 3. are all gnome utilities
will be available as well? like system monitor  etc.



On Wed, May 21, 2014 at 11:24 AM, Zenaan Harkness z...@freedbms.net wrote:

 On 5/21/14, Muhammad Yousuf Khan sir...@gmail.com wrote:
  i have just installed debian 7 and i am feeling a bit uncomfortable with
  the new look (unity type) i want the all time old menu gnome classic.
  how can i enable that.

 Basically, your options are:
 1) Install XFCE desktop
 apt-cache show xfce4
 http://www.xfce.org/
 http://en.wikipedia.org/wiki/Xfce

 2) Install Cinnamon desktop
 apt-cache show cinnamon # sid only/ incomplete?
 http://cinnamon.linuxmint.com/
 http://en.wikipedia.org/wiki/Cinnamon_(software)

 3) Install Mate desktop
 apt-cache show mate-desktop # sid only?
 http://mate-desktop.org/
 http://en.wikipedia.org/wiki/MATE_(desktop_environment)

 4) Gnome plugins to make it look more like gnome classic
 ??

 http://thearchway.wordpress.com/2012/03/14/turning-gnome-3-into-a-usable-thing/
 https://extensions.gnome.org/

 Good luck,
 Zenaan


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive:
 https://lists.debian.org/CAOsGNSSinJ0JRdE2thb+xzbhNzmyjQcnDCak=VM4uXcKHA==f...@mail.gmail.com

Re: want to revert back to gnome classic mode.

[Muhammad Yousuf Khan]

do i have to uninstall gnome3 in order to work with xfce4 actually i wanted
to run both by enabling one and disabiling other for testing puporse or to
evaluate which one is better for me.
btw i installed xfce4 and restarted the system however it again gave me the
gnome 3 desktop.


On Wed, May 21, 2014 at 12:00 PM, Chris Angelico ros...@gmail.com wrote:

 On Wed, May 21, 2014 at 4:57 PM, Muhammad Yousuf Khan sir...@gmail.com
 wrote:
  thanks alot guyz, i am actually a server side guy using mostly terminal
  window. i am new to gnome and xfce.
  so my question is, are all the applications from gnome will be available
 in
  xfce, is it like a layer on the top of gnome 3. are all gnome utilities
 will
  be available as well? like system monitor  etc.

 Applications should run just fine. I've used gnome-system-monitor
 under Xfce no problem. (Also gnome-terminal works, but I prefer
 xfce4-terminal.)

 ChrisA


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive:
 https://lists.debian.org/captjjmqfm+2frhupbjb2nynn1vwuvr_hf8o11kaxooru+12...@mail.gmail.com

Re: want to revert back to gnome classic mode.

[Muhammad Yousuf Khan]

Thanks Joe, David , Chirs and all . actually login screen step worked for
me. even i am also trying xfce4.
can i make gnome classic default loging environment?

Thanks




On Wed, May 21, 2014 at 1:49 PM, Joe j...@jretrading.com wrote:

 On Wed, 21 May 2014 13:00:47 +0500
 Muhammad Yousuf Khan sir...@gmail.com wrote:

  do i have to uninstall gnome3 in order to work with xfce4 actually i
  wanted to run both by enabling one and disabiling other for testing
  puporse or to evaluate which one is better for me.
  btw i installed xfce4 and restarted the system however it again gave
  me the gnome 3 desktop.
 
 

 Depending on what display manager you use, have a poke around the login
 screen, most have a box which allows choice of the session type.

 Generally every possible DE and window manager installed are offered,
 usually a 'failsafe' one, with a default to the last one used.

 I'm using KDM, there are several other display managers.

 --
 Joe


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/20140521094949.60b39...@jretrading.com

want to revert back to gnome classic mode.

[Muhammad Yousuf Khan]

i have just installed debian 7 and i am feeling a bit uncomfortable with
the new look (unity type) i want the all time old menu gnome classic.
how can i enable that.

Thanks,
Myk

Re: confusion on KVM virtualization (debian admin handbook)

[Muhammad Yousuf Khan]

Thanks for sharing your thought.

just learn from some where, that creating disk with virt-install can only
create raw on the other hand qcow2 first needs to be initiated as volume

Thanks,


On Mon, Mar 24, 2014 at 3:28 PM, Jonathan Dowland j...@debian.org wrote:

 On Mon, Mar 24, 2014 at 11:45:26AM +0500, Muhammad Yousuf Khan wrote:
  Book teaches us to create volume first then assign it to vm with
  Virt-install command however, we can also create image on runtime with
  virt-install command. we do not need volume to be set before creating a
 VM.
  so my question is what is the difference b/w the two methods.
  if i create Volume first then assign or if i create image directly from
  virt-installl command what are the pros and cons.

 I think it's mostly six of one and half a dozen of the other. If you are
 not using sparse volumes, disk creation can take quite a lot of time, so
 it might be logistically easier to batch the creation of a lot of
 volumes before you start installing VMs, especially if you need to
 re-run the install process a few times as you tweak parameters.


 --
 To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
 with a subject of unsubscribe. Trouble? Contact
 listmas...@lists.debian.org
 Archive: https://lists.debian.org/20140324102840.gb...@bryant.redmars.org

confusion on KVM virtualization (debian admin handbook)

[Muhammad Yousuf Khan]

i have been going through Administration handbook and got confused in KVM
virtualization section.

Book teaches us to create volume first then assign it to vm with
Virt-install command however, we can also create image on runtime with
virt-install command. we do not need volume to be set before creating a VM.
so my question is what is the difference b/w the two methods.
if i create Volume first then assign or if i create image directly from
virt-installl command what are the pros and cons.

Thanks,

Myk

moving buffers/caching from RAM to SSD

[Muhammad Yousuf Khan]

i dont know why i am saying is even practical or not.

here is my free command

@thor:# free -g
 total   used   free sharedbuffers cached
Mem:31 31  0  0  0 26
-/+ buffers/cache:  3 27
Swap:   93  0 93


as you can see 27GB is being used in caching. i have few 160GB SSDs.
can i move this buffers/caching load to my SSD. so that things could work
more better.

Thanks,
Myk