Category Archives: FreeBSD

All the stuff i run into working with BSD and Linux & share how i fixed it.

Hacked!

Lol my wordpress website got hacked by multiplie script “heroes”, if ur reading this! Please contact me. Im wondering how you guys did it :) who@knows.nl feel free!

Well ive fixed the filepermissions, so i dont think they can do anything anymore.

But i dont know ill wait and see, Im no programmer :)I chmodded all files within the wordpress site with 664 permissions, and all the directory’s with 755. This does mean a file upload wont work anymore.. so u better chmod the upload directory wp-content or so with 777 it depends on the type of webserver u use and under what user u run those programs.

They really did there best.. i see all sorts of commands in my error logs
cat: /proc/version: No such file or directory
cat: /etc/issue.net: No such file or directory
cat: /etc/*-realise: No such file or directory
cat: /proc/cpuinfo: No such file or directory
free: not found
lsattr: not found

Basicly they cant change anything as apache is running under a special www user. And most of the ppl who try this suspect a Linux box.. :)

gr gr!

Qmail PLAIN SMTP Auth failure, after upgrade to FreeBSD 9/10x, vpopmail,

vpopmail[37658]: vchkpw-smtp: vpopmail user not found karen@:95.*.*.*

After upgrading certain shared servers to FreeBSD 10x i came to the follwing conclusion:

chmod ug+s /usr/local/vpopmail/bin/vchkpw

The servers needed that after i manually selected SMTP AUTH in the make config of the port:
/usr/ports/mail/qmail

Or the qmail user couldnt execute it right and created MASS CHAOS in the building where i worked at that moment. Ppl couldnt auth right with authenticated SMTP, vpopmail.

smtp_auth_

Gr gr: Thomas

Cacti not filling certain RRDTool db’s on FreeBSD

Hi,

We reinstalled one of our nameservers with BSD 10.

Ive syced the RRA files over from RRDTool using the follwing command:
rsync -avz /usr/local/share/cacti/rra/ usert@hostname.nl:/home/cacti/rra/.
rsync -avz /local/directory username@kwomkwommr.nl:/destination/dir/.

it kept on running on a high load if it ran the poller.php and cmd.php from cacti on it.

I coulda dig into it and maby? solve it, but we are running into like 400+ hosts and alotta dataqueries, so i knew spine is a cleaner and better way to poll hosts, so why not give it a try…

Ive gone to Console > Settings > Poller tab > And put it on Spine instead of cmd.php
It did not work instant, i had to edit the settings file /usr/local/etc/spine.conf and put in the MySQL database details

After this it filled 3/4 of the RRD database, but a few hosts kept showing there down, so i didnt get what was going on. After a while i discovered a chmod on the spine binairy was wrong.

So after a quick:
chmod a+s spine

On the binairy file it was sorted, and the 4 hosts that where showing there down where “up” and recovering again. Very wierd… still dont know why a few hosts needed this. These werent hosts that had any special plugins… lol

Hope this will help u on your quest to polled hosts,
gr gr Thomas

WordPress drama – wp-login.php

Hi,
We experiece alot of occasions lately that ppl are trying to crack a wordpress “admin”  login. to post spam or something on a wordpress blog. Change the standard username / password if u wanna be safe and dont wanna have a hosting company complain at u. We have been experiencing a higher load then useual on our shared servers lately.

If someone wont respond then we take action and use one of the following samples:

Create a .htaccess file or edit it, and put in the following:

<Files wp-login.php>
AuthUserFile /home/vhosts/kwomkwommr.nl/www/.htpasswd
AuthName “Private access”
AuthType Basic
require valid-user
</Files>

Generate a .passwd file on the desired location:
htpasswd -c /home/vhosts/kwomkwommr.nl/www/.htpasswd username

I know, i havent done anything like that yet, i dont care till i will be spammed till a load of 10, and then ill see if i use this or use any of the following options on the WordPress FAQ

gr gr Thomas ;)

Xenserver stuck VM / VDI is not available / Master switch

Xenserver stuck VM / VDI is not available / Master switch

Hi!

Please only execute these commands if ur comfy with ssh and xenserver, if u dont know what ur doing u can get urself in alot of trouble by killing the wrong vm’s etc. Dont blame me if u seriously break something :).

Stuck VM:

  1. Try it first the normal way if a powerstate is stuck…
    xe vm-reset-powerstate force=true vm= “windows2″
    If this does not work, try the the next method.
  2. List the domains on the server and grep the UUID of the hung vm. U can find this info under the general tab in xencenter or under # xe vm-list on the host where its running.
    list_domains | grep 84e7e227-63b3-c518-4904-5d8b9cba7091
    The number it finds under the uuid is the domain of the hung vm.

    cd /opt/xensource/debug/xenops destroy_domain -domid 27
    xe-toolstack-restart

VDI is not available:
If u have an犀利士
y snapshots, remove those.. it will confuse u.. there might be a way to do it without removing them, but i do that most of the times.. or i just convert them to a new vm.

On the xenserver where the vm was last active and running:
xe vdi-list | grep -B1 [vmname] | grep uuid
Use that uuid to paste in the following command:
xe vdi-forget uuid=4dfb5f8c-0df7-4b4a-b5b0-c484c2f7247a
This will make your vm loose from the disk, and u need to reattach it.
Do a rescan on your storage repository, and click the vm u just deattached the disk of and reattach it.

Xenserver master change/switch:
First disable the High availibilty on the pool of servers:
xe pool-ha-disable
Check what server is the poolmaster(99% its the server in the top):
xe host-list
Copy the UUID from the new master host, paste/execute the next command with the new uuid (just a example):
xe pool-designate-new-master host-uuid=116ceeb1-c923-40ec-8ac6-243c89512908
Your xencenter will disconnect for a abit till its fully back again, and no servers are in mainance, activate HA again:
xe pool-ha-enable

Grgr Thomas!

Xenserver Tools stuck on installation 6.1 Windows

The driver that causes it and is making the installer freeze:
Citrix Xen Windows x64 PV Drivers
Its not visible from Software in configuration screen.

Remove everything from Citrix from your server, reboot and execute the following in cmd with administration rights:
wmic product where name=’Citrix Xen Windows x64 PV Drivers’ call uninstall

Reboot and reinstall the tools again.

gr gr Thomas

FreeBSD: ./+INSTALL: Permission denied

====> Compressing man pages (compress-man)
===> Building package for perl5-5.16.3_3
Creating package /usr/ports/lang/perl5.16/work/perl5-5.16.3_3.tbz
Registering depends:.
Registering conflicts: perl5.12-* perl5.14-* perl5.16-* perl5.18-*.
Creating bzip’d tar ball in ‘/usr/ports/lang/perl5.16/work/perl5-5.16.3_3.tbz’
===> Installing for perl5-5.16.3_3
===> Checking if lang/perl5.16 already installed
./+INSTALL: Permission denied
pkg_add: install script returned error status
*** [install-package] Error code 1

Stop in /usr/ports/lang/perl5.16.
*** [install] Error code 1

Stop in /usr/ports/lang/perl5.16

The error is caused because your /tmp is mounted with noexec in the fstab

mkdir /usr/tmp
export TMPDIR=/usr/tmp

And try again with make install, did work for me :)

gr gr!

perl-5.10 to lang/perl5.12

20100715:
  AFFECTS: users of lang/perl*
  AUTHOR: skv@FreeBSD.org

  lang/perl5.12 is out. If you want to switch to it from, for example
  lang/perl5.10, that is:

  Portupgrade users:
    0) Fix pkgdb.db (for safety):
        pkgdb -Ff

    1) Reinstall new version of Perl (5.12):
        env DISABLE_CONFLICTS=1 portupgrade -o lang/perl5.12 -f perl-5.10.*

    2) Reinstall everything that depends on Perl:
        portupgrade -fr perl

  Portmaster users:
        portmaster -o lang/perl5.12 lang/perl5.1犀利士
0

        Conservative:
        portmaster p5-

        Comprehensive (but perhaps overkill):
        portmaster -r perl-

  Note: If the "perl-" glob matches  more than one port you will need to
        specify the name of the Perl directory in /var/db/pkg explicitly.