Linux for web

Update cPanel webmail roundcube, squirrelmail and horde

2015-12-21T14:37:00.002-08:00

Update roundcube

# /usr/local/cpanel/bin/update-roundcube --force

Update squirrelmail

# /usr/local/cpanel/bin/update-squirrelmail --force

Update horde

# /usr/local/cpanel/bin/update_horde_config --full

Remove old kernels with YUM utilities

2015-12-21T14:26:00.002-08:00

First install YUM utilities

# yum install yum-utils -y

Then run command below to remove old kernels, "count=2" mean how many kernels want to keep

# package-cleanup --oldkernels --count=2 -y

Fix cPanel user owner and permissions

2015-12-21T14:15:00.002-08:00

Simple command to fix cPanel user owner and permissions

Just change USERXXX with cPanel user name

fixuser=USERXXX ; chown -R $fixuser:$fixuser /home/$fixuser ; chmod 711 /home/$fixuser ; chmod 750 /home/$fixuser/public_html ; chown $fixuser:nobody /home/$fixuser/public_html /home/$fixuser/.htpasswds ; chown $fixuser:mail /home/$fixuser/etc /home/$fixuser/etc/*/shadow /home/$fixuser/etc/*/passwd

another method to fix all cPanel users

for user in `ls /var/cpanel/users | sed -e '/\.\.\?/d'` ; do chown -R $user:$user /home/$user ; chmod 711 /home/$user ; chmod 750 /home/$user/public_html ; chown $user:nobody /home/$user/public_html /home/$user/.htpasswds ; chown $user:mail /home/$user/etc /home/$user/etc/*/shadow /home/$user/etc/*/passwd ; done

Install and configure PHPSuHosin with cPanel

2014-12-22T05:11:00.002-08:00

First you need to install SuHosin

# /usr/local/cpanel/scripts/phpextensionmgr install PHPSuHosin

Then you need to edit php.ini and add configurations

# vim /usr/local/lib/php.ini

Search for

extension="suhosin.so"

add below

suhosin.log.syslog = 511 & ~32
suhosin.log.syslog.facility = 9
suhosin.log.syslog.priority = 1
suhosin.log.sapi = 511 & ~32
suhosin.log.script = 0
suhosin.log.phpscript = 0
suhosin.log.script.name =
suhosin.log.phpscript.name =
suhosin.log.use-x-forwarded-for = Off
suhosin.executor.max_depth = 0
suhosin.executor.include.max_traversal = 4
suhosin.executor.include.whitelist =
suhosin.executor.include.blacklist =
suhosin.executor.func.whitelist =
suhosin.executor.func.blacklist = exec, show_source, passthru, init_get_all, system, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, pfsockopen, leak, apache_child_terminate, escapeshellcmd, hypot, pg_host, pos, ps_fill, diskfreespace, mysql_list_dbs, mysql_get_host_info, mysql_get_proto_info, ini_restore, shell_exec, php_uname, posix_kill, posix_getpwuid, posix_getgrgid, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, posix_access, posix_getcwd, posix_getgid, posix_getpid, posix_getsid, posix_getuid, posix_mknod, posix_setgid, posix_times, posix_uname, posix_getegid
suhosin.executor.eval.whitelist =
suhosin.executor.eval.blacklist =
suhosin.executor.disable_eval = Off
suhosin.executor.disable_emodifier = Off
suhosin.executor.allow_symlink = Off
suhosin.simulation = Off
suhosin.apc_bug_workaround = Off
suhosin.sql.bailout_on_error = Off
suhosin.sql.user_prefix =
suhosin.sql.user_postfix =
suhosin.multiheader = Off
suhosin.mail.protect = 0
suhosin.session.encrypt = On
suhosin.session.cryptkey =
suhosin.session.cryptua = On
suhosin.session.cryptdocroot = On
suhosin.session.cryptraddr = 0
suhosin.session.checkraddr = 0
suhosin.session.max_id_length = 128
suhosin.cookie.cryptkey =
suhosin.cookie.cryptua = On
suhosin.cookie.cryptdocroot = On
suhosin.cookie.cryptraddr = 0
suhosin.cookie.checkraddr = 0
suhosin.cookie.cryptlist =
suhosin.cookie.plainlist =
suhosin.filter.action =
suhosin.cookie.max_array_depth = 100
suhosin.cookie.max_array_index_length = 64
suhosin.cookie.max_name_length = 64
suhosin.cookie.max_totalname_length = 256
suhosin.cookie.max_value_length = 10000
suhosin.cookie.max_vars = 100
suhosin.cookie.disallow_nul = On
suhosin.get.max_array_depth = 50
suhosin.get.max_array_index_length = 64
suhosin.get.max_name_length = 64
suhosin.get.max_totalname_length = 256
suhosin.get.max_value_length = 512
suhosin.get.max_vars = 10000
suhosin.get.disallow_nul = On
suhosin.post.max_array_depth = 100
suhosin.post.max_array_index_length = 64
suhosin.post.max_name_length = 64
suhosin.post.max_totalname_length = 256
suhosin.post.max_value_length = 9999999
suhosin.post.max_vars = 10000
suhosin.post.disallow_nul = On
suhosin.request.max_array_depth = 100
suhosin.request.max_array_index_length = 64
suhosin.request.max_totalname_length = 256
suhosin.request.max_value_length = 9999999
suhosin.request.max_vars = 10000
suhosin.request.max_varname_length = 64
suhosin.request.disallow_nul = On
suhosin.upload.max_uploads = 25
suhosin.upload.disallow_elf = On
suhosin.upload.disallow_binary = Off
suhosin.upload.remove_binary = Off
suhosin.upload.verification_script =

Restart apache

# /etc/init.d/httpd restart

Convert mysql db from innodb to myisam or obverse

2014-12-22T04:58:00.001-08:00

Bash script below help to change all database tables with one setp.

# vim myisam.sh

Copy and past script below at myisam.sh file.

#!/bin/bash

MYSQLCMD=mysql
db=database name    #chnage to database name

        for table in `echo show tables | $MYSQLCMD $db | grep -v Tables_in_`; do
                TABLE_TYPE=`echo show create table $table | $MYSQLCMD $db | sed -e's/.*ENGINE=$[[:alnum:]\]\+$[[:space:]].*/\1/'|grep -v 'Create Table'`
                if [ $TABLE_TYPE = "InnoDB" ] ; then
                        echo "ALTER TABLE $table ENGINE = MyISAM" | $MYSQLCMD $db
                fi
        done

Change "db=database name" with database name that want to convert

# sh myisam.sh

Note: If you want to convert from myisam to innodb you can edit script and swap.

Disable cphulk via ssh

2014-07-22T04:05:00.002-07:00

# /usr/local/cpanel/etc/init/stopcphulkd

Disable Core Dumps

2014-07-22T04:00:00.003-07:00

A core dump file is the memory image of an executable program when it was terminated by the operating system due to various error behavior.

Disable Core Dumps

To disable core dumps for all users, open /etc/security/limits.conf, enter:

# nano /etc/security/limits.conf

Make sure the following config directive exists and uncomment #

* hard core 0

Save and close the file. Once a hard limit is set in /etc/security/limits.conf, the user cannot increase that limit within his own session. Add fs.suid_dumpable = 0 to /etc/sysctl.conf file

# echo 'fs.suid_dumpable = 0' >> /etc/sysctl.conf # sysctl -p

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings

2014-06-20T06:34:00.000-07:00

You probably need to put the timezone in your php.ini file.

# nano /usr/lib/php.ini

Add this if not found and make sure to uncomment ;

[Date]
; http://php.net/date.timezone
date.timezone = America/New_York

# /etc/init.d/httpd restart

Custom php.ini for cpanel users

2014-06-13T10:56:00.001-07:00

All Cpanel users will have a custom php.ini file at path /usr/local/cpanel/cgi-sys/userphp

Create custom php.ini directory and change permissions and owner.

# mkdir /usr/local/cpanel/cgi-sys/userphp

# chown root.wheel /usr/local/cpanel/cgi-sys/userphp

# chmod 755 /usr/local/cpanel/cgi-sys/userphp

Add this at end of prewwwacct scipt

# vim /usr/local/cpanel/scripts/prewwwacct

user=`echo $@ | grep -Po '(?<=user\s)\w+'`
echo '#!/bin/sh' > /usr/local/cpanel/cgi-sys/userphp/$user
echo "exec /usr/bin/php" >> /usr/local/cpanel/cgi-sys/userphp/$user
chown root:wheel /usr/local/cpanel/cgi-sys/userphp/$user
chmod +x /usr/local/cpanel/cgi-sys/userphp/$user

If you are use Suhosin add this

user=`echo $@ | grep -Po '(?<=user\s)\w+'`
echo '#!/bin/sh' > /usr/local/cpanel/cgi-sys/userphp/$user
echo "exec /usr/bin/php -d suhosin.sql.user_prefix=${user}_" >> /usr/local/cpanel/cgi-sys/userphp/$user
chown root:wheel /usr/local/cpanel/cgi-sys/userphp/$user
chmod +x /usr/local/cpanel/cgi-sys/userphp/$user

Execut :

# chmod +x /usr/local/cpanel/scripts/prewwwacct

Add to virtual host template at the end of the file before </VirtualHost>

# vim /var/cpanel/templates/apache2/vhost.default

FCGIWrapper /usr/local/cpanel/cgi-sys/userphp/[% vhost.user %] '.php'

Now you need to create custom php.ini files for current users by run this script.

# touch userphp

# vim userphp

for user in `ls /var/cpanel/users | sed -e '/\.\.\?/d'` ; do
echo '#!/bin/sh' > /usr/local/cpanel/cgi-sys/userphp/$user
echo "exec /usr/bin/php" >> /usr/local/cpanel/cgi-sys/userphp/$user
chown root:wheel /usr/local/cpanel/cgi-sys/userphp/$user
chmod +x /usr/local/cpanel/cgi-sys/userphp/$user
done

# chmod +x userphp

# ./userphp

# rm -rf userphp

If you are use Suhosin use

# touch userphpsuhosin

# vim userphpsuhosin

for user in `ls /var/cpanel/users | sed -e '/\.\.\?/d'` ; do
echo '#!/bin/sh' > /usr/local/cpanel/cgi-sys/userphp/$user
echo "exec /usr/bin/php -d suhosin.sql.user_prefix=${user}_" >> /usr/local/cpanel/cgi-sys/userphp/$user
chown root:wheel /usr/local/cpanel/cgi-sys/userphp/$user
chmod +x /usr/local/cpanel/cgi-sys/userphp/$user
done

# chmod +x userphpsuhosin

# ./userphpsuhosin

# rm -rf userphpsuhosin

Now rebuild apache then restart

# /scripts/rebuildhttpdconf

# /etc/init.d/httpd restart

** EXAMPLE : increase memory limit for USER

# vim /usr/local/cpanel/cgi-sys/userphp/USER

it will look like this

#!/bin/sh
exec /usr/bin/php

Change to

#!/bin/sh
exec /usr/bin/php - d memory_limit=512M

# /etc/init.d/httpd restart

Apache “Error retrieving pid file logs/httpd.pid”

2014-06-11T06:49:00.001-07:00

The following error while trying to restart the apache service on the cpanel server

Internal error: Error retrieving pid file logs/httpd.pid

# mv /usr/local/apache/logs/httpd.pid /usr/local/apache/logs/httpd.pid--bak

# /etc/init.d/httpd restart

Reset Root Password on CentOS

2014-06-08T03:16:00.001-07:00

From the GRUB menu, select the appropriate kernel version and press the "e" key.

You will now be presented with the option menu for the kernel version.

Highlight the list item with vmlinuz in it by using the arrow keys and press "e".

At the end of the line type single.

Press enter and "b" to boot the system, The system will boot into single user mode with bash prompt.

Change you password then reboot

# passwd root

# reboot

NOTE: If you are CentOS-6 with selinux you need to run this first.

# setenforce 0

Install PHP5.2 with FCGI at Cpanel

2014-06-07T18:14:00.001-07:00

# cd /var/cpanel/easy/apache/custom_opt_mods

# wget https://documentation.cpanel.net/download/attachments/2326651/custom_opt_mod-PHP5217update-fastcgi.tar.gz

# tar -xzf custom_opt_mod-PHP5217-fastcgi.tar.gz

# /scripts/easyapache

Choose custom profile and at PHP version select NONE, Then at next option list select PHP 5.2.17 support (with FastCGI)

# /usr/local/cpanel/bin/rebuild_phpconf 5 none fcgi 1

Then Install PHP extension on Cpanel without recompile apache

# php -v
PHP 5.2.17 (cli) (built: Jun 8 2014 04:02:06)
Copyright (c) 1997-2010 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2010 Zend Technologies
    with eAccelerator v0.9.6.1-ea, Copyright (c) 2004-2012 eAccelerator, by eAccelerator
    with XCache v3.0.3, Copyright (c) 2005-2013, by mOo
    with the ionCube PHP Loader v4.6.1, Copyright (c) 2002-2014, by ionCube Ltd., and
    with Zend Optimizer v3.3.9, Copyright (c) 1998-2009, by Zend Technologies
    with XCache Cacher v3.0.3, Copyright (c) 2005-2013, by mOo
    with Suhosin v0.9.33, Copyright (c) 2007-2012, by SektionEins GmbH
Segmentation fault (core dumped)

If you need to remove a custom module from the server, delete the files with that custom module and recompile apache.

Monitoring Hard Disks with SMART CentOS

2014-06-07T12:15:00.004-07:00

Installation

# yum install -y smartmontools

Turn on smartd capabilities at sda

# smartctl -s on -d ata /dev/sda

Show summary of health status

# smartctl -H /dev/sda

# smartctl -d ata -a /dev/sda

# /usr/sbin/smartctl -q errorsonly -H -l selftest -l error /dev/sda

Write some data to check Hard Disk Speed

# hdparm -tT /dev/sda

# dd if=/dev/zero of=/output.img bs=8k count=256k

# rm -rf /output.img

Migrating all cpanel server accounts via ssh

2014-06-07T09:03:00.000-07:00

First make a new directory for new backup files at source server.

# mkdir /home/bak

Backup all server accounts.

# for i in `ls /var/cpanel/users`;do /scripts/pkgacct $ /home/bak i; done

# cd /home/bak

Send backup files from source server to destination server, 22 and 10.0.0.1 with destination server ssh port and ip address.

# scp -P 22 *.tar.gz root@10.0.0.1:/home

Restore all backup accounts.

# for i in `ls /home/*.tar.gz`;do /scripts/restorepkg --skipres $i;done

MySQL exporting & importing databases

2014-06-06T22:42:00.001-07:00

Export

SQL format

# mysqldump -u root -p dbname > dbfilename.sql

Gzip format with compress

# mysqldump -u root -p dbname | gzip -9 > dbfilename.sql.gzip

Import

First create a blank database

# mysqladmin -u root -p create dbname

# mysql -u root -p dbname < dbfilename.sql

Install Memcache on CentOS cPanel

2014-06-06T13:08:00.003-07:00

# yum install -y libevent memcached

Now add the PHP extension

# wget http://pecl.php.net/get/memcache

# mv memcache memcache.tar.gz

# tar -xvf memcache.tar.gz

# cd memcache-*

# phpize

# ./configure

# make

# make install

# echo extension = "memcache.so" >> /usr/local/lib/php.ini

# nano /etc/sysconfig/memcached

Change configration with

PORT="11211"
USER="memcached"
MAXCONN="1000"
CACHESIZE="1024"
OPTIONS=""

# chkconfig memcached on

# /etc/init.d/memcached start

# /etc/init.d/httpd restart

Install & Uninstall Nginx Admin

2014-06-06T12:53:00.003-07:00

Install Nginx Admin

# cd /usr/local/src

# wget http://nginxcp.com/latest/nginxadmin.tar

# tar xf nginxadmin.tar

# cd publicnginx

# ./nginxinstaller install

# /etc/init.d/nginx start

Uninstall Nginx Admin

# cd /usr/local/src

# wget http://nginxcp.com/latest/nginxadmin.tar

# tar xf nginxadmin.tar

# cd publicnginx

# ./nginxinstaller uninstall

Reset Forgotten MySQL Root Password Via SSH

2014-06-05T12:10:00.002-07:00

# /etc/init.d/mysql stop

Now lets start up the mysql daemon and skip the grant tables which store the passwords.

# mysqld_safe --skip-grant-tables &

Now you should be able to connect to mysql console without a password

# mysql -u root

# use mysql;

# update user set Password=PASSWORD('new-password') where user='root';

# flush privileges;

# quit

# /etc/init.d/mysql stop

# /etc/init.d/mysql start

Test the new password by logging in:

# mysql -u root -p

Got error 28 from storage engine

2014-06-05T11:59:00.002-07:00

This error is related to disk space ,So you have to check server disk usage

# df -h

If look like 100% /tmp , Empty tmp by the following command

# rm -rf /tmp/*

Install PHP extension on Cpanel without recompile apache

2014-06-05T11:44:00.001-07:00

Install ionCube Loader

# /scripts/phpextensionmgr install IonCubeLoader

Install Zend Guard Loader

# /scripts/phpextensionmgr install Zendopt

Install Suhosin

# /scripts/phpextensionmgr install PHPSuHosin

Install Xcache

# /scripts/phpextensionmgr install Xcache

Install EAccelerator

# /scripts/phpextensionmgr install EAccelerator

Install Source Guardian

# /scripts/phpextensionmgr install SourceGuardian

Installing cPanel & DNSONLY

2014-06-05T11:36:00.005-07:00

Install cPanel :

# cd /home

# wget -N http://httpupdate.cpanel.net/latest

# sh latest

Install Perl modules

# wget http://layer1.cpanel.net/perl588installer.tar.gz

# tar xfvz perl588installer.tar.gz

# cd perl588installer

# ./install

Installing cPanel DNSONLY :

# cd /home

# wget -N http://httpupdate.cpanel.net/latest-dnsonly

# sh latest-dnsonly

Modsec cron problem

2014-06-05T11:11:00.000-07:00

The following error when trying to access mod_security from the WHM :

The mod_security plugin could not connect to the database. Please verify that MySQL is running. Error: Access denied for user 'modsec'@'localhost' (using password: YES)

The error occurs due to the password being mis configured in the file /etc/cron.hourly/modsecparse.pl .

Do the following Steps:

# nano /etc/cron.hourly/modsecparse.pl

You can find the following details in the file :

my $dbhost     = 'localhost';
my $dbuser     = 'modsec';
my $dbpassword = 'Password-Here';
my $dbname     = 'modsec';
my $tblname    = 'modsec';

Take the password from the file ,then connect to mysql DB server and update the password there:
# mysql
# use mysql;
# UPDATE user SET Password=PASSWORD('Password-Here') WHERE User='modsec';

This will change the password for the DB modsec in the file /etc/cron.hourly/modsecparse.pl

run the following command to ensure the DB is fixed :

# perl -w /etc/cron.hourly/modsecparse.pl

If it runs without error the problem is solved.

Linux for web

Update cPanel webmail roundcube, squirrelmail and horde

Remove old kernels with YUM utilities

Fix cPanel user owner and permissions

Install and configure ​PHPSuHosin with cPanel

Convert mysql db from innodb to myisam or obverse

Disable cphulk via ssh

Disable Core Dumps

Warning: date() [function.date]: It is not safe to rely on the system's timezone settings

Custom php.ini for cpanel users

Apache “Error retrieving pid file logs/httpd.pid”

Reset Root Password on CentOS

Install PHP5.2 with FCGI at Cpanel

Monitoring Hard Disks with SMART CentOS

Migrating all cpanel server accounts via ssh

MySQL exporting & importing databases

Install Memcache on CentOS cPanel

Install & Uninstall Nginx Admin

Reset Forgotten MySQL Root Password Via SSH

Got error 28 from storage engine

Install PHP extension on Cpanel without recompile apache

Installing cPanel & DNSONLY

Modsec cron problem

Install and configure PHPSuHosin with cPanel