Reset lxadmin password

To reset the LXADMIN password, do the following steps:

1. First you want to restart lxadmin service from the back end.

/etc/init.d/lxadmin restart

2. Now go to the password reset page, and give the new password. Click update all.

If LXADMIN is not restarted before changing the password, it won’t get reset.

Filed under: Uncategorized by — aaron @ 8:59 pm

Swap memory not coming on in Xen VPS

Sometimes swap memory is not detected when a Xen VPS starts, and can be fixed by doing the following.

After logging into the VDS, check the entries in /etc/fstab/. If swap entry is there, then use the command “swapon -a” and then use the “mount -a” command.

If swap entry is not present in /etc/fstab, add that first.
==================
/dev/sda2 swap swap defaults 0 0
==================

After that, apply the above commands.

Filed under: Uncategorized by — aaron @ 8:54 pm

How to install RED5 on a server

The steps for installing RED5 are as follows:

1. Install Java – JDK and JRE

* For installing Java JDK and JRE, we can use the RPM. Visit the link “http://java.sun.com/javase/downloads/index.jsp”.

* Setup the environment variables to include the path for java.
export JAVA_HOME=/usr/java/

2. Install Apache ant

wget http://apache.mirror.transip.nl/ant/binaries/apache-ant-1.7.0-bin.tar.gz
tar -zxf apache-ant-1.7.0-bin.tar.gz
mv apache-ant-1.7.0 /opt/ant
ln -s /opt/ant/bin/ant /usr/bin/ant

* Setup the environment variables to include the path for Apache ant.
export ANT_HOME=/opt/ant

3. Now download and install RED5.

wget http://dl.fancycode.com/red5/0.6.3/src/red5-0.6.3.tar.gz
tar -zxf red5-0.6.3.tar.gz
mv red5-0.6.3 red5

cd red5
/opt/ant/bin/ant prepare
/opt/ant/bin/ant build

4. Now the directory “dist” contains compiled files and ready to run the server

cd dist
sh red5.sh

* RED5 should now run http server on port 5080 and rtmp service on port 1935

5. For testing, check

http://ip:5080/demos/port_tester.swf

Filed under: Uncategorized by — aaron @ 8:40 pm

Xen: Dom0 and DomU can ping, but no other network connectivity – checksum problems

This appears to be a long standing bug with Xen which has not yet been fixed, it has shown its face in a few of our servers recently – but not all.  Basically once Xen is installed on Dom0 you are able to ping it, however anything other network services do not work, such as SSH.  From what I have read this is due to checksums being done in numerous places, and seems that there is a bug somewhere while this is being done which results in the checksums not matching, and the packets being dropped.   The solution to this is to run the following:

ethtool -K eth0 tx off

This same issue arises in the DomUs (Guest) , and the same fix can be used.  Its probably a good idea to place in /etc/rc.local on Redhat/Centos/Fedora systems.

Filed under: Uncategorized by — aaron @ 11:20 pm

Xen: How to check if Intel VT is enabled?

This method can be used to check if Intel VT is running in any Linux distribution including when you are running Xen.  Its easier than having to reboot, especially if the server is active!

cat /proc/cpuinfo

Check for the vmx flag, an example is as follows:

processor       : 7
vendor_id       : GenuineIntel
cpu family      : 6
model           : 23
model name      : Intel(R) Xeon(R) CPU           E5410  @ 2.33GHz
stepping        : 6
cpu MHz         : 2333.410
cache size      : 6144 KB
physical id     : 7
siblings        : 1
core id         : 0
cpu cores       : 1
fpu             : yes
fpu_exception   : yes
cpuid level     : 10
wp              : yes
flags           : fpu tsc msr pae mce cx8 apic mtrr mca cmov pat pse36 clflush d                                   ts acpi mmx fxsr sse sse2 ss ht tm syscall nx lm constant_tsc pni monitor ds_cpl                                    vmx est tm2 cx16 xtpr lahf_lm
bogomips        : 5836.28
clflush size    : 64
cache_alignment : 64
address sizes   : 38 bits physical, 48 bits virtual
power management:

Filed under: Uncategorized by — aaron @ 10:15 pm

How to add and remove software on Debian 3 or 4

Installing software on Debian:

apt-get install [softwarepackage]

Removing software on Debian:

apt-get remove [softwarepackage]

Filed under: Uncategorized by — aaron @ 8:45 pm

Multiple SSH Tabs Windows – Putty

Are you having trouble managing all your SSH connections?  Do you need a tabbed solution?  Something free?

Then this is the perfect solution for you,  the Putty Connections Manager: http://puttycm.free.fr/

I found this today while looking for something to handle my ever growing number of Putty SSH and telnet terminals.

Filed under: Uncategorized by — aaron @ 8:01 pm

Exchange 2007 Error: A matching connector cannot be found to route the external recipient

Exchange 2007 Error:

A matching connector cannot be found to route the external recipient

If you are receiving this error while trying to send mail from Exchange, attempt the following:

Go to Exchange Management Console -> Organization Configuration -> Hub Transport -> Send Connectors

And add a new send connection with Address Space ‘*’.

Filed under: Uncategorized by — aaron @ 6:56 am

How to add an additional domain Exchange 2007

You can add additional domains to Exchange by Opening the Exchange Management Console -> Organization Configuration -> Hub Transport -> Accepted Domains Tab.  Right click to add a new domain.

Filed under: Uncategorized by — aaron @ 6:28 am

Joomla 1.5 Exploit Fix mod_security – Token Password Reset Exploit and SQL Injection

If you are running sites running Joomla, and have not recently patched your installation you will probably have found your installation has been hacked one or more times.  As a system adminsitrar you may find a number of sites on a server running Joomla 1.5 getting hacked.  To prevent this at the firewall level, and help stop your Joomla installations being hacked implement the following mod_security 1.x rule on each server:

# Joomla 1.5 null token password reset exploit – RM/BC 20 Aug 08
SecFilterSelective ARG_task “confirmreset” chain
SecFilterSelective POST_PAYLOAD “token=(‘|%27)”

# Joomla 1.5 SQL injection – 20 Aug 08
# nb: need case independence, on by default in 1.x!
SecFilterSelective ARGS_VALUES “;.*declare%20.*exec”

A permanent fix/solution for each Joomla installation is as follows:

Upgrade to latest Joomla! version (1.5.6 or newer), or patch /components/com_user/models/reset.php with the code below:

After global $mainframe; on line 113 of reset.php, add:

if(strlen($token) != 32) {
$this->setError(JText::_(‘INVALID_TOKEN’));
return false;
}

Filed under: Uncategorized by — aaron @ 9:47 pm