denzfarid

Gtk-WARNING **: cannot open display: :0

noreply@blogger.com (root) — Thu, 01 Feb 2018 03:08:00 +0000

resolve
in user and root type

xhost +local:

output

non-network local connections being added to access control list

run your apps again

source in here sir!

Disable recent file nautilus

noreply@blogger.com (root) — Thu, 12 Oct 2017 01:35:00 +0000

Open a terminal and type the following:

1. echo "" > ~/.local/share/recently-used.xbel

2. sudo chattr +i ~/.local/share/recently-used.xbel

Enable recent files nautilus

1. sudo chattr +i ~/.local/share/recently-used.xbel

Good Luck~

docker-ce fedora 26

noreply@blogger.com (root) — Mon, 07 Aug 2017 03:53:00 +0000

dnf install https://download.docker.com/linux/fedora/25/x86_64/stable/Packages/docker-ce-17.06.0.ce-1.fc25.x86_64.rpm
 --allowerasin

 more info

git-completion bash

noreply@blogger.com (root) — Wed, 26 Jul 2017 09:43:00 +0000

[1] install dulu bash_completion

Centos / Fedora
dnf install -y bash_completion

Debian / Ubuntu
sudo apt-get install bash-completion

[2] rubah .bashrc

https://raw.githubusercontent.com/helmuthdu/dotfiles/master/.bashrc

[3] download git-prompt & git-completion 

https://raw.githubusercontent.com/git/git/master/contrib/completion/git-completion.bash
https://raw.githubusercontent.com/git/git/master/contrib/completion/git-prompt.sh

taro di /etc/bash_completion.d 

[4] rubah .bashrc

cari /usr/share/git/completion/ dan /usr/share/git/ di .bashrc dan rubah ke /etc/bash_completion.d/

source ~/.bashrc

jenkins rsync for send script to server

noreply@blogger.com (root) — Mon, 20 Feb 2017 05:07:00 +0000

Jenkins is a service account, it doesn't have a shell by design. It is generally accepted that service accounts. shouldn't be able to log in interactively.

To resolve "Jenkins Host key verification failed", do the following steps. I have used mercurial with jenkins.

1)Execute following commands on terminal

sudo su -s /bin/bash jenkins

2)Generate public private key using the following command:

ssh-keygen -N "" -f ~/.ssh/id_rsa -t rsa -b 4096

ssh-keygen -N "" -f ~/.ssh/id_rsa -o -a 100 -t ed25519

https://blog.g3rt.nl/upgrade-your-ssh-keys.html#multi-key-aware-ssh-client

3) Disable prompt Yes/No Authenticity host

echo -e "StrictHostKeyChecking no \nUserKnownHostsFile=/dev/null" > ~/.ssh/config

4)Go to --> cat /var/lib/jenkins/.ssh/id_rsa.pub
5)Copy key from id_rsa.pub to server production or you can use this script

https://denzfarid.blogspot.co.id/2016/12/automate-pushing-of-ssh-copy-id-to.html#

6) open jenkins dashboar , go to your project , cofigure, and in build -> add build step -> execute shell

rsync -e "ssh" -a -P -z --force --include=".htaccess" --include="uploads/" --exclude=".*" . user@production:/var/www/html

source : http://stackoverflow.com/questions/15174194/jenkins-host-key-verification-failed

Install Thumbor Centos and Nginx aliasing url

noreply@blogger.com (root) — Fri, 06 Jan 2017 09:33:00 +0000

Update System & install development tools

yum update -y ; yum groupinstall "development tools" -y

Install Package

yum install -y epel-release deltarpm openssl-devel sqlite-devel bzip2-devel

Install & config nginx

yum install -y nginx ; /sbin/chkconfig nginx on;

create file thumbor.conf

nano /etc/nginx/conf.d/thumbor.conf

upstream thumbor  {
    server 127.0.0.1:8000;
    server 127.0.0.1:8001;
    server 127.0.0.1:8002;
    server 127.0.0.1:8003;
}

server {
    listen       80;
    server_name  <INSERT YOUR DOMAIN NAME>;
    client_max_body_size 10M;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header HOST $http_host;
        proxy_set_header X-NginX-Proxy true;

        proxy_pass http://thumbor;
        proxy_redirect off;
    }
}

Install Thumbor Lib

yum install libjpeg-turbo-devel.x86_64 libjpeg-turbo-utils.x86_64 libtiff-devel.x86_64 libpng-devel.x86_64 pngcrush jasper-devel.x86_64 libwebp-devel.x86_64 python-pip -y
pip install pycurl numpy
pip install thumbor==4.12.2

create file optimizer plugins pngcrush for png

nano /usr/local/lib64/python2.7/site-packages/thumbor/optimizers/pngcrush.py

paste this

#!/usr/bin/python
# -*- coding: utf-8 -*-

# thumbor imaging service
# https://github.com/thumbor/thumbor/wiki

# Licensed under the MIT license:
# http://www.opensource.org/licenses/mit-license


import os
import subprocess

from thumbor.optimizers import BaseOptimizer
from thumbor.utils import logger


class Optimizer(BaseOptimizer):
    def __init__(self, context):
        super(Optimizer, self).__init__(context)

        self.runnable = True
        self.pngcrush_path = self.context.config.PNGCRUSH_PATH
        if not (os.path.isfile(self.pngcrush_path) and os.access(self.pngcrush_path, os.X_OK)):
            logger.error("ERROR pngcrush path '{0}' is not accessible".format(self.pngcrush_path))
            self.runnable = False

    def should_run(self, image_extension, buffer):
        return 'png' in image_extension and self.runnable

    def optimize(self, buffer, input_file, output_file):
        command = '%s -reduce -q %s %s ' % (
            self.pngcrush_path,
            input_file,
            output_file,
        )
        with open(os.devnull) as null:
            subprocess.call(command, shell=True, stdin=null)

Generate Config file

thumbor-config > /etc/thumbor.conf

change LOADER in file thumbor.conf for load file image from server

LOADER = 'thumbor.loaders.file_loader'

enable Optimizer in thumbor.conf

OPTIMIZERS = [
    'thumbor.optimizers.jpegtran',
    'thumbor.optimizers.pngcrush',
]

JPEGTRAN_PATH = '/usr/bin/jpegtran'
PNGCRUSH_PATH = '/usr/bin/pngcrush'

Install & configure supervisor

easy_install supervisor

create file /etc/init.d/supervisord

#! /bin/sh
### BEGIN INIT INFO
# Provides:          supervisord
# Required-Start:    $remote_fs
# Required-Stop:     $remote_fs
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: Supervisor init script
# Description:       Supervisor init script    
### END INIT INFO

# Supervisord auto-start
#
# description: Auto-starts supervisord
# processname: supervisord
# pidfile: /var/run/supervisord.pid

SUPERVISORD=/usr/local/bin/supervisord
SUPERVISORCTL=/usr/local/bin/supervisorctl
ARGS="-c /etc/supervisord.conf"

case $1 in
start)
        echo -n "Starting supervisord: "
        $SUPERVISORD $ARGS
        echo
        ;;
stop)
        echo -n "Stopping supervisord: "
        $SUPERVISORCTL shutdown
        echo
        ;;
restart)
        echo -n "Stopping supervisord: "
        $SUPERVISORCTL shutdown
        echo
        echo -n "Starting supervisord: "
        $SUPERVISORD $ARGS
        echo
        ;;
esac

create file /etc/supervisord.conf and paste

[unix_http_server]
file=/tmp/supervisor.sock   ; (the path to the socket file)

[supervisord]
logfile=/tmp/supervisord.log ; (main log file;default $CWD/supervisord.log)  
logfile_maxbytes=50MB        ; (max main logfile bytes b4 rotation;default 50MB)  
logfile_backups=10           ; (num of main logfile rotation backups;default 10)  
loglevel=info                ; (log level;default info; others: debug,warn,trace)  
pidfile=/tmp/supervisord.pid ; (supervisord pidfile;default supervisord.pid)  
nodaemon=false               ; (start in foreground if true;default false)  
minfds=1024                  ; (min. avail startup file descriptors;default 1024)  
minprocs=200                 ; (min. avail process descriptors;default 200)

; the below section must remain in the config file for RPC
; (supervisorctl/web interface) to work, additional interfaces may be
; added by defining them in separate rpcinterface: sections
[rpcinterface:supervisor]
supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface

[supervisorctl]
serverurl=unix:///tmp/supervisor.sock ; use a unix:// URL  for a unix socket

[program:thumbor]
; The following command uses a different thumbor config file for each
; processes, however we want the same setup for each so that isn't necessary
; command=thumbor --ip=127.0.0.1 --port=800%(process_num)s --conf=/etc/thumbor800%(process_num)s.conf
; Instead we'll use this command to use just the one conf file
command=/usr/local/bin/thumbor --ip=127.0.0.1 --port=800%(process_num)s --conf=/etc/thumbor.conf  
process_name=thumbor800%(process_num)s  
numprocs=4  
autostart=true  
autorestart=true  
startretries=3  
stopsignal=TERM  
; Output logs for each of our processes
stdout_logfile=/var/log/thumbor.stdout.log  
stdout_logfile_maxbytes=1MB  
stdout_logfile_backups=10  
stderr_logfile=/var/log/thumbor.stderr.log  
stderr_logfile_maxbytes=1MB  
stderr_logfile_backups=10

start supervisord and nginx

chmod +x supervisord ; /etc/init.d/supervisord start; /etc/init.d/nginx start

optional for custom or change unsafe url add in nginx thumbor configuration
location ~* /thumb/(.*)/(.*\.(jpg|jpeg|png|gif|JPG))$ {

proxy_pass http://localhost:8000/unsafe/$1/$2;
}
change url http://localhost:8000/unsafe/300x300/file.jpg to
http://localhost:8000/thumb/300x300/file.jpg

complate installation in here source

thank you

Centos 6 Upgrade python 2.6 to python 2.7

noreply@blogger.com (root) — Fri, 06 Jan 2017 01:18:00 +0000

Install Paket yang di butuhkan

yum install -y zlib-dev openssl-devel sqlite-devel bzip2-devel gcc
yum groupinstall -y 'development tools'

Download Source Python

cd /usr/src;wget https://www.python.org/ftp/python/2.7.12/Python-2.7.12.tgz

Extrack and Compile

tar xzf Python-2.7.12.tgz;cd Python-2.7.12;./configure;make -j4;make install;make altinstall

Optional with Threads and shared

./configure --with-threads --enable-shared;make -j4;make install;make altinstall

error libpython2.7.so.1.0 not found

ln -s /usr/local/lib/libpython2.7.so.1.0 /usr/lib/libpython2.7.so.1.0

ln -s /usr/src/Python-2.7.12/libpython2.7.so.1.0  /usr/lib/libpython2.7.so.1.0

Good Luck

mariadb replication master slave all databases on CentOS

noreply@blogger.com (root) — Thu, 29 Dec 2016 11:06:00 +0000

sebelum memulai sebaiknya kita berdoa terlebih dahulu

selesai

setelah berdoa saatnya kita menginstall service mariadb terlebih dahulu pada kedua server tersebut,

buat file repo terlebih dahulu

vi /etc/yum.repos.d/MariaDB.repo

[mariadb]

name = MariaDB

baseurl = http://yum.mariadb.org/10.0/centos7-amd64

gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB

gpgcheck=1

yum install MariaDB-server MariaDB-client -y

systemctl start mariadb

systemctl enable mariadb

jika terdapat konfik atau error dengan maria-libs-xxx

yum remove mariadb-libs*

start service

/etc/init.d/mysql start

setup mysql login

mysql_secure_installation

setelah itu pada master

Redis snmp monitoring & redis prtg monitoring sensors

noreply@blogger.com (root) — Thu, 29 Dec 2016 07:53:00 +0000

setelah install redis lalu bagaimana cara memoitoring redis tersebut, berapa jumlah koneksi yang ada pada redis, berapa jumlah konsumsi memori oleh redis, di sini saya akan membahas monitoring redis menggunakan snmp, dan nanti akan ada lanjutan untuk monitoring PRTG atau cacti nantinya

oke langsung saja

1. install cpan dan snmp perl untuk modulenya untuk depedensi perl, cpan ini seperti layaknya pip atau easy_install pada python

yum install cpan net-snmp-perl -y

2. install module perl yang lain yang di butuhkan oleh aplikasi

cpan -I Unix::Syslog
cpan -I IO::Socket::INET

3. clone redis-snmp dan compile dari github

git clone https://github.com/masterzen/redis-snmp.git;cd;redis-snmp/;make install

4. jalankan service redis-snmp

redis-snmp --host=127.0.0.1

jika redis menggunakan auth maka gunakan perintah berikut

redis-snmp --host=127.0.0.1 -p <your pass redis>

5. reconfigure snmpd.conf tambahkan ini dan restart

master agentx
view systemview included .1.3.6.1
view systemview included .1.3.6.1.2.1

service snmpd restart

6. test outuput

snmpbulkwalk -m 'REDIS-SERVER-MIB' -v 2c -c public 127.0.0.1 .1.3.6.1.4.1.20267.400

hasil

REDIS-SERVER-MIB::redisConnectedClients.0 = Gauge32: 1

REDIS-SERVER-MIB::redisConnectedSlaves.0 = Gauge32: 0

REDIS-SERVER-MIB::redisUsedMemory.0 = Counter64: 41466936 Bytes

atau gunakan -o untuk melihat OIDs untuk prtg

snmpbulkwalk -m 'REDIS-SERVER-MIB' -v 2c -O n -c public 127.0.0.1 .1.3.6.1.4.1.20267.400

hasil

.1.3.6.1.4.1.20267.400.1.1.0 = Gauge32: 1

.1.3.6.1.4.1.20267.400.1.2.0 = Gauge32: 0

.1.3.6.1.4.1.20267.400.1.3.0 = Counter64: 41466936 Bytes

untuk prtg silakan menggunakan OIDs tersebut berikut list nya

.1.3.6.1.4.1.20267.400.1.1.0  (redisConnectedClnts)
.1.3.6.1.4.1.20267.400.1.2.0  (redisConnectedSlavs)
.1.3.6.1.4.1.20267.400.1.3.0  (redisUsedMemory)
.1.3.6.1.4.1.20267.400.1.4.0  (redisChangsSncLstSv)
.1.3.6.1.4.1.20267.400.1.5.0  (redisTotalConnectns)
.1.3.6.1.4.1.20267.400.1.6.0  (redisCommandsPrcssd)

untuk PRTG gunakan custom sensors dan gunakan aplikasi PRTG REDIS SENSORS Prtg version 15-16

Good Luck

Automate pushing of ssh-copy-id to multiple servers

noreply@blogger.com (root) — Wed, 21 Dec 2016 13:34:00 +0000

kadang suka aga aga males kalo harus masukin ssh key ke server, ya kalo 1-2 server si ga apa, gimana kalo servernya itu lebih dari 10?
udah males ngetik satu satu, plus harus masukin passwordnya pula, kalo passwordnya panjang gimana?, akhirnya scripting dikit buat mempercepet aja si sebenernya cekidot gan!

buat file ~/.ssh/config isi dengan ini

StrictHostKeyChecking no
UserKnownHostsFile=/dev/null

itu gunanya biar ga ketik yes jika keluar

The authenticity of host 'yourserver.com.sg (192.168.1.1)' can't be established.
RSA key fingerprint is 8d:e7:92:ef:86:1a:fb:4a:01:00:6a:fc:8c:23:ed:15.
Are you sure you want to continue connecting (yes/no)?

setelah itu kita buat file dengan nama host_list yang di mana isinya adalah host/server yang ingin kita copy ssh key milik kita

192.168.1.1
192.168.1.2
192.168.1.3
192.168.1.4
192.168.1.5
192.168.1.6
192.168.1.7
ect..

selanjutnya kita buat bash script yang isinya menggunakan perulangan for

for i in `cat ~/host_list`;    
    do
       sshpass -p 'SERVER_PASSWD' ssh-copy-id -i .ssh/id_rsa.pub root@${i}
    done

pada for terdapat petik ` ` , petik tersebut di gunakan untuk membaca file host_list dengan menggunakan cat
pada sshpass -p 'SERVER_PASSWD' server_passwd ganti dengan password user pada server tujuan tersebut, *Sukur" passwd usernya sama ga beda beda"
jika ingin menggunakan port yang berbeda bukan port 22 maka tambahkan -p <port> pada belakang ${i}
maka nanti akan menjadi seperti ini

for i in `cat ~/host_list`;    
 do
  sshpass -p 'SERVER_PASSWD' ssh-copy-id -i .ssh/id_rsa.pub root@${i} -p <port>
 done

kemudian chmod +x file bash dan eksekusi file tersebut

sekian :D

Inode problems and full disks , how to free inode usage

noreply@blogger.com (root) — Mon, 21 Nov 2016 09:54:00 +0000

cannot create temp file for here-document: No space left on device

coba cek dengan df -h

 df -h
Filesystem                   Size  Used Avail Use% Mounted on
udev                         1.9G  4.0K  1.9G   1% /dev
tmpfs                        379M  416K  379M   1% /run
/dev/mapper/vol_root  7.3G  2.2G  4.7G  32% /

di sana terlihat bahwa size masih lega, tapi kita ga bisa nulis dan system memberitahu bahwa udah penuh??

cek df dengan inode df -i atau df -Thi

 df -i
Filesystem                  Inodes  IUsed  IFree IUse% Mounted on
udev                        209623    445 209178    1% /dev
tmpfs                       214814    381 214433    1% /run
/dev/mapper/vol_root 488640 488640      0  100% /

ternyata yang penuh adalah inode nya maka system tidak dapat menulis karena inodenya penuh

faq:
1. terus clean up inode bisa?
2. apa harus di buat partisi baru? liat dr errornya itu adalah temp nya penuh

jawab
1. bisa, clean up dengan cara mencari file yang memakan inode banyak lalu menghapus file tersebut
pertama kita cari dulu file mana yg memakan inode banyak dari / a.k.a root

find / -xdev -printf '%h\n' | sort | uniq -c | sort -k 1 -n

nanti akan keluar banyak file yang memakan inode pada disk, cari aja yg paling banyak kasus di sini adalah
/var/lib/php5/sessions/ yg memakai inode sebanyak 387204
setelah udah tau penyebabnnya selanjutnya adalah hapus semua file yg ada di dalam folder itu sebagian, bisa dengan penghapusan file mulai dr yg terlama masanya atau bisa dari yg terbaru sesuai kebutuhan

pada kasus ini nama file atau string file terlalu panjang jika penghapusan dengan cara biasa aliias dengan perintah rm maka akan keluar

rm: Argument list too long

contoh nama file di sini seperti ini

ls /var/lib/php5/sessions/ci_session1aca9c05635d1b32ffdd87b9f274b1124eeb93fb

maka penghapusan file dengan cara agar tidak keluar list to long

find /var/lib/php5/sessions/ -name "ci_session*"  -print0 | xargs -0 rm

2. ga perlu karena /tmp menyatu pada / a.k.a root maka error yang keluar seperti itu

kesimpulannya alangkah baiknya menggunakan filesystem xfs

rujukan

maintenance mode haproxy [ no reboot ]

noreply@blogger.com (root) — Mon, 17 Oct 2016 14:39:00 +0000

ketika satu host sedang ada perbaikan, gimana caranya buat nandain haproxy kalo host itu lagi bermasalah dan butuh reconfigure

ternyata di haproxy itu udh ana, kita cukup disable backend server mana dan hostname mana yg sedang maintenance mode

pertama install socat

yum install socat -y

lalu pastikan pada global sudah ada socket

global

stats socket /var/run/haproxadm.sock mode 660 level admin

selanjutnya adalah perintah untuk enable disable host

echo "disable server backend_name/host_name" | socat stdio /var/run/haproxadm.sock

yang di mana backend_name adalah nama backend yng di gunakan atau di seting pada /etc/haproxy/haproxy.cfg
contoh backend ws_server untuk host_name adalah penamaan hostname pada backend server ws1 192.168.1.10 , maka untuk menggunakan nya menjadi

echo "disable server ws_server/ws1" | socat stdio /var/run/haproxadm.sock

atau jika menggunakan file , atau di simpan menjadi file akan seperti ini, save dengan nama disable.sh

echo "disable server $1/$2" | socat stdio /var/run/haproxadm.sock

untuk menggunakannya

./disable.sh ws_server ws1

untuk enable host, cukup dengan mengganti nama disable menjadi enable

echo "enable server ws_server/ws1" | socat stdio /var/run/haproxadm.sock

nginx minify css js html

noreply@blogger.com (root) — Thu, 29 Sep 2016 03:52:00 +0000

awalnya iseng iseng bisa ga nginx nih nge minify js sama css nya on de felay
browsing dikit terus nemu git ini cekitdot

terus coba aja iseng okay ini setep by setep di centos ya

pertama karena tutor di sana make source maka di sini make aplikasi cpan make cpan krn di perl kalo di python biasanya pip atau easy_install okeh

1. install cpan

yum install cpan

2. install modul perl buat nginx , ga perlu recompile

yum install nginx-module-perl.x86_64 #nginx repo if use epel its default install

3. install deh paketan yg di butuhin di saa bilang pake XS

HMTL => cpan install HTML::Packer
CSS => cpan install CSS::Minifier::XS
JS => cpan install JavaScript::Minifier::XS

4. load module nginx.conf di luar htmls section atau bawah log jg gpp

load_module modules/ngx_http_perl_module.so;

5. masukin di bagian html section ini (ikutin yg di github)

# minify
perl_modules perl;
perl_require Minify.pm;

6. selanjutnya ke bagian vhost section server kaya gini aja kalo pake gzip

#minify
       location ~ \.html$ { perl Minify::html_handler; expires 1y; add_header Cache-Control "public";}
       location ~ \.css$ { perl Minify::css_handler; expires 1y; add_header Cache-Control "public";}
       location ~ \.js$   { perl Minify::js_handler;   expires 1y; add_header Cache-Control "public";}

6. yang ga pake gzip bisa ikutin yg di git

location ~ \.html$ { perl Minify::html_handler; }

location ~ \.css$ { perl Minify::css_handler; }

location ~ \.js$ { perl Minify::js_handler; }

7. buat folder perl di /etc/nginx

mkdir /etc/nginx/perl; ln -s /etc/nginx/perl /usr/share/nginx/perl

8. masuk ke folder itu terus download Minify.pm nya

cd /etc/nginx/perl; wget -c https://raw.githubusercontent.com/nginx-modules/nginx-minify/master/perl/Minify.pm

9. test config dulu udah oke baru reload

nginx -t;

service nginx reload

trus buka deh webnya liat js/css di server sama di browser
#CMIIW

-good luck-

SSL A+ HAProxy

noreply@blogger.com (root) — Mon, 19 Sep 2016 02:18:00 +0000

step 1: install haproxy

Centos :

yum install haproxy

Ubuntu :

apt-add-repository ppa:vbernat/haproxy-1.5;apt-get install haproxy

step 2: edit haproxy config

vim /etc/haproxy/haproxy.conf

step 3 : add this configuration for creating an A+ rating:

global

ssl-default-bind-options no-sslv3 no-tls-tickets

ssl-default-bind-ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

frontend https-in

rspadd set-header Strict-Transport-Security max-age=31536000;\ includeSubdomains;\ preload

rspadd set-header X-Frame-Options DENY

http-response set-header X-Content-Type-Options nosniff

-good luck-

Zero Downtime HAproxy Reload!!

noreply@blogger.com (root) — Mon, 19 Sep 2016 02:06:00 +0000

simply trick for reload your haproxy without drop traffic with iptables (centos user)

############################################
# R Farid N , 09 September 2016 04:04 #
# <farid_@msn.com> #
# please use this trick for reload haproxy #
# for zero downtime or no drop current traffic#
############################################
iptables -I INPUT -p tcp -m multiport --dports 80,443 --syn -j DROP
sleep 1
service haproxy restart
iptables -D INPUT -p tcp -m multiport --dports 80,443 --syn -j DROP

save with name zero-downtime-haproxy.sh
chmod +x zero-downtime-haproxy.sh

just do it

- good luck-

Add Multiple Hosts in phpMyAdmin

noreply@blogger.com (root) — Mon, 19 Sep 2016 00:12:00 +0000

step 1 : install phpmyadmin (fedora user)

yum install phpmyadmin -y

step 2 : edit file /etc/phpMyAdmin/config.inc.php

vim /etc/phpMyAdmin/config.inc.php

step 3 : Now add the following entries at the end of file.

 $i++;
 $cfg['Servers'][$i]['verbose'] = 'Database Server 2';
 $cfg['Servers'][$i]['host'] = '192.168.1.102';
 $cfg['Servers'][$i]['port'] = '';
 $cfg['Servers'][$i]['socket'] = '';
 $cfg['Servers'][$i]['connect_type'] = 'tcp';
 $cfg['Servers'][$i]['extension'] = 'mysqli';
 $cfg['Servers'][$i]['auth_type'] = 'cookie';

After adding the above entries in configuration file and access phpMyAdmin in web browser and you will get an option of server choice. Select server name to which you need to connect.

or you can use this to not enter username and password

$cfg['Servers'][$i]['user'] = 'YOURusername';
$cfg['Servers'][$i]['password'] = 'YOURPASSWORD';

-good luck-

Generate Letsencrypt Certificate CENTOS 5

noreply@blogger.com (root) — Sat, 17 Sep 2016 19:32:00 +0000

problems that are often encountered when generate ssl certificate from letsencrypt is openssl is too old, so it failed

then discovered the latest technology and how it can be used for CentOS 5 and the new.
the simple way with little jutsu "sed, perl, and openssl"
lets begin \ ('') /

setep 1: clone repo letsencrypt.sh

git clone https://github.com/lukas2511/letsencrypt.sh

and change dir

cd letsencrypt.sh

step 2: create a virtual folder for verification of acme server (on a domain server that would be made ssl) httpd user like this

Alias /.well-known/acme-challenge /var/www/letsencrypt

<Directory /var/www/letsencrypt/>

</Directory>

/var/www or /var/www/html , whatever, adjust to your DocumentRoot

restart httpd & test
service httpd restart

http://yourdomain.com/.well-known/acme-challenge/

step 3: create file config.sh like this

WELLKNOWN="/var/www/letsencrypt"

step 4: create file domains.txt and put your domain in here

yourdomain.com

use space for multiple domain names

yourdomain.com blog.yourdomain.com

remember response 200 to
http://yourdomain.com/.well-known/acme-challenge/
http://blog.yourdomain.com/.well-known/acme-challenge/

step 5: GENERATE !!!!

./letsencrypt.sh --config config.sh --cron

step 6: check certificate, & copy

ls certs/domain.com

cp -r certs /etc/pki

step 7: enable in ssl.conf

SSLCertificateFile /etc/pki/certs/domain.com/fullchain.pem
SSLCertificateKeyFile /etc/pki/certs/domain.com/privkey.pem
SSLCertificateChainFile /etc/pki/certs/domain.com/chain.pe

step 8: crontab every day
@daily /etc/pki/letsencrypt.sh --config /etc/pki/config.sh --cron > /var/log/letsencrypt/renew.log

TIPS OF THE DAY!!!

copy all files like
letsencrypt.sh domains.txt config.sh to /etc/pki/

for a better future

source

basic http authentication Solr 5.X?

noreply@blogger.com (root) — Sat, 17 Sep 2016 19:32:00 +0000

step 1 : setting solr listen in localhost

edit jetty-http.xml in server/etc/jetty-http.xml

add

 default="localhost"

after like this

<Set name="host"><Property name="jetty.host" default="localhost"/></Set>

restart your solr

step 2 : install nginx, create file /etc/nginx/conf.d/solr.conf that looks like this:

server
{
  #This is the external port
  listen 8000;

  # Disable proxy buffering because it was causing problems
  proxy_buffering off;

  # All other urls expect admin permission
  location / {
    # Make sure to add new users to htpasswd!
    auth_basic "Private";
    auth_basic_user_file /etc/nginx/htpasswd;
    proxy_pass http://localhost:8983;
  }
}

step 3. install httpd-tools yum install httpd-tools Create the user/passwd like this:

sudo htpasswd -c /etc/nginx/htpasswd yourusernamehere

or you can use tools generator

step 4. restart nginx and open http://YOURIP:8000

If you enter it correctly, you should see the Solr admin panel VIOLLA!

[FIX] Access denied; you need (at least one of) the SUPER privilege(s) for this operation [ AMAZON RDS ]

noreply@blogger.com (root) — Thu, 23 Jul 2015 11:26:00 +0000

mysqldump generate trigger

DELIMITER ;;
/*!50003 CREATE*/ /*!50017 DEFINER=`root`@`%`*/ /*!50003 TRIGGER `after_insert_lead` AFTER INSERT ON `leads` FOR EACH ROW BEGIN
UPDATE analytics.mapping SET id_lead = NEW.id_lead WHERE mc_email = NEW.email;
END */;;
DELIMITER ;

find him!!!!

cat yourDB | grep DEFINER= | less

so finish HIM!! remove DEFINER
just do it

perl -pe 's/\sDEFINER=`[^`]+`@`[^`]+`//' < oldfile.sql > newfile.sql

or with source

mysql > source /path/your/file.sql

source

source2

solr loging

noreply@blogger.com (root) — Tue, 21 Jul 2015 05:00:00 +0000

mkdir /var/log/solr
chown tomcat /var/log/solr

cd solr-4.9.0/example/lib/ext/

cp * /usr/share/tomcat6/lib
cp * /usr/share/tomcat6/webapps/solr/WEB-INF/lib/

cd slf4j-1.7.12/

cp slf4j-api-1.7.12.jar /usr/share/tomcat/lib/
cp slf4j-api-1.7.12.jar /usr/share/tomcat6/webapps/solr/WEB-INF/lib/

cp slf4j-log4j12-1.7.12.jar /usr/share/tomcat/lib/
cp slf4j-log4j12-1.7.12.jar /usr/share/tomcat6/webapps/solr/WEB-INF/lib/

mkdir /usr/share/tomcat6/webapps/solr/WEB-INF/classes
chown -R tomcat /usr/share/tomcat6/webapps/solr/WEB-INF/classes

Create a log4j.properties in this folder with the following sample content

log4j.rootLogger=WARN, solrLog
log4j.appender.solrLog=org.apache.log4j.DailyRollingFileAppender
log4j.appender.solrLog.File=/var/log/solr/solr.log
log4j.appender.solrLog.Append=true
log4j.appender.solrLog.Encoding=UTF-8
log4j.appender.solrLog.DatePattern=’-‘yyyy-MM-dd
log4j.appender.solrLog.layout=org.apache.log4j.PatternLayout
log4j.appender.solrLog.layout.ConversionPattern=%d [%t] %-5p %c – %m%n
log4j.logger.org.apache.solr=INFO

service tomcat restart
Now you will find a solr.log inside/var/log/solr/

source1

source2

solr 4 data import handle configuration {mysql}

noreply@blogger.com (root) — Mon, 20 Jul 2015 08:47:00 +0000

Set-Up

Firstly we need the libraries that are required to use Data Import Handler.

setings env library in here

install mysql-connector-java

yum install mysql-connector-java.noarch

Add this to the solrconfig.xml file:

<lib dir="../../../contrib/dataimporthandler/lib/" regex=".*\.jar" />
<lib dir="../../../dist/" regex="apache-solr-dataimporthandler-\d.*\.jar" />

make sure

ls ../../../contrib/dataimporthandler/lib/
activation-1.1.1.jar mail-1.4.3.jar

Now we modify the solrconfig.xml file. Add the following :

<requestHandler name="/dataimport" class="org.apache.solr.handler.dataimport.DataImportHandler">
           <lst name="defaults">
                           <str name="config">mysql-config.xml</str>
                                    </lst>
                                      </requestHandler>

create file mysql-config.xml This is for the Data Import Handler configuration. It should look similar to:

<dataConfig>
<dataSource type="JdbcDataSource" driver="com.mysql.jdbc.Driver"
url="jdbc:mysql://HOST/mydb" user="users"
password="secret" />
<document>
<entity name="user" query="SELECT id, name from users">
<field column="id" name="id" />
<field column="name" name="name" />
<entity name="birthday" query="select birthday from table where id=${user.id}">
<field column="description" name="description" />
</entity>
</entity>
</document>
</dataConfig></dataConfig>

For other database engines enter the specific driver, url, user and password attributes.

We now need to modify the fields section of the schema.xml file to something like the following snippet:

<field name="id" type="string" indexed="true" stored="true"
required="true"/>
<field name="name" type="text" indexed="true" stored="true" />
<field name="birthday" type="text" indexed="true" stored="true"/>
<field name="description" type="" indexed="true"
stored="true"/>

 http://localhost:8080/solr/dataimport?command=full-import

 source

solr RequestHandler init failure

noreply@blogger.com (root) — Mon, 20 Jul 2015 08:31:00 +0000

analyze : solr-dataimporthandler-*.jar not in lib dir
error : solr RequestHandler init failure
fix : copy file solr-dataimporthandler in root solr directory egg:
cd solr-4.9.0/dist

cp *.jar /usr/share/tomcat6/webapps/solr/WEB-INF/lib/

choose N(No) if overwrite

restart tomcat6

violaa :D

source

install activemq with selinux centos and Solr

noreply@blogger.com (root) — Wed, 15 Jul 2015 10:01:00 +0000

First things first, install the Puppet Labs repository:

rpm -Uvh http://yum.puppetlabs.com/el/6/products/x86_64/puppetlabs-release-6-5.noarch.rpm

yum -y install tomcat6 tomcat6-webapps tomcat6-admin-webapps httpd java java-1.6.0-openjdk activemq

or you can download jdk and jre in http://www.oracle.com/technetwork/java/javase/downloads/index.html

download rpm file and install with yum localinstall

service activemq restart

Selinux for activemq

allow port

semanage port -l | grep '^http_port_t'
semanage port -a -t http_port_t -p tcp 8161

service httpd start

add in /etc/httpd/conf/httpd.conf

NameVirtualHost *:80
<VirtualHost *:80>
ProxyPreserveHost On
ProxyRequests Off
ServerName YOURDOMAIN
ServerAlias YOURDOMAIN
ProxyPass / http://127.0.0.1:8161/admin/
ProxyPassReverse / http://127.0.0.1/:8161/admin/
</VirtualHost>

Install solr

Now you have to set up a manager role for Tomcat to be able to administrate the instance:

Shell

1

vi /etc/tomcat6/tomcat-users.xml

Edit the /etc/tomcat6/tomcat-users.xml file and add the following lines between the line while replacing YourUserName and YourSecretPassword with your own values:

INI

1

2

3

<role rolename="manager" />

<role rolename="admin" />

<user username="YourUserName" password="YourSecretPassword" roles="manager,admin" />

Installing Apache Commons Loggins
Download Apache Commons Logging (Binaries) fromhttp://commons.apache.org/proper/commons-logging/download_logging.cgi to your directory of choice (e.g. your home directory) and copy them to your/usr/share/tomcat6/lib directoy:

Shell

1

2

3

4

5

cd /home

wget http://mirror.metrocast.net/apache//commons/logging/binaries/commons-logging-1.1.3-bin.tar.gz

tar zxf commons-logging-1.1.3-bin.tar.gz

cd commons-logging-1.1.3-bin

cp commons-logging-*.jar /usr/share/tomcat6/lib

Installing Simple Logging Facade for Java (SLF4J)
Download SLF4J from http://www.slf4j.org/ to your directory of choice (e.g. your home directory) and also copy them to your /usr/share/tomcat6/lib directoy. Please note that you have to exclude (or remove after copy) a couple of Android files (slf4j-android-1.7.7.jar and slf4j-android-1.7.7-sources.jar), otherwise your Tomcat server won’t start!

Shell

1

2

3

4

5

6

cd /home

wget http://www.slf4j.org/dist/slf4j-1.7.7.tar.gz

tar zxf slf4j-1.7.7.tar.gz

cd slf4j-1.7.7

cp slf4j-*.jar /usr/share/tomcat6/lib

rm /usr/share/tomcat6/lib/slf4j-android-1.7.7.jar /usr/share/tomcat6/lib/slf4j-android-1.7.7-sources.jar

Installing Apache Solr
Download Apache Solr from http://lucene.apache.org/solr/downloads.html to your directory of choice (e.g. your home directory) and uncompress your archive:

Shell

1

2

3

4

cd /home

wget http://www.carfab.com/apachesoftware/lucene/solr/4.9.0/solr-4.9.0.tgz

tar zxf solr-4.9.0.tgz

cd solr-4.9.0

Copy and rename the included Solr solr.war to your Tomcat apps folder (please note, that we are in the /home/solr-4.9.0/ directory):

Shell

1

cp dist/solr-4.9.0.war /usr/share/tomcat6/webapps/solr.war

Now you have to create a folder where Solr stores all its files for your index. You are free to set this directory outside from your solr web-apps directory. I recommend you to edit the schema.xml file because Solr comes along with some predefined example structures which may result in unused overhead if you leave this file untouched. In my case I’ve created the solr folder in /var/www/:

Shell

1

2

3

mkdir /var/www/solr

cp -R /home/solr-4.9.0/example/solr/* /var/www/solr

chown -R tomcat /var/www/solr

You can find the schema.xml in the default collection directory:/var/www/solr/collection1/conf/.

Time to restart your Tomcat server!

Shell

1

service tomcat6 restart

Once your Tomcat server restarted it unpacked the solr.war file mentioned above. You finally have to edit the web.xml file to get Solr running:

Shell

1

vi /usr/share/tomcat6/webapps/solr/WEB-INF/web.xml

Look for the following code and edit it with your Solr home directory (in my example: /var/www/solr). Don’t forget to remove the comment markers!

INI

1

2

3

4

5

<env-entry>

    <env-entry-name>solr/home</env-entry-name>

    <env-entry-value>/var/www/solr</env-entry-value>

    <env-entry-type>java.lang.String</env-entry-type>

</env-entry>

Another restart of Tomcat and you’re almost done!

Shell

1

service tomcat6 start

source solr
source activemq
source activemq with passwd
source discus activemq with passwd
source selinux
source selinux serverfault
source activemq with source

[SOLVED] recursive write permission during installation on Fedora 18-2X

noreply@blogger.com (root) — Wed, 13 May 2015 10:12:00 +0000

in fact the problem is located at 2 places.

1. on some Linux web server, owner of web site (files/folders) should be apache. so as a group and user >> chown -R apache:apache

2. on some linux server like Fedora SELinux Alert Browser also play a role and to allow apache to perform some actions read/write, change permissions etc... you need to allow them.

so to check what is needed to do on "httpd" you can use:

getsebool -a | grep httpd

or directly:

setsebool -P httpd_enable_cgi on
setsebool -P httpd_unified on
setsebool -P httpd_builtin_scripting on

now you can give a 644 to all files and 705 to folders. It should work perfectly.

Hope it will help you

Telegram in fedora

noreply@blogger.com (root) — Tue, 07 Apr 2015 10:06:00 +0000

download telegram desktop

https://desktop.telegram.org/

Extract file to /opt directory.

$ sudo tar xvf tsetup.0.7.2.tar.xz -C /opt
Telegram/
Telegram/Updater
Telegram/Telegram

Create executable file

$ sudo ln -s /opt/Telegram/Telegram /usr/bin/telegram

Now, you can execute telegram on your favorite shell/ terminal.

Download Telegram icon.

$ sudo wget https://telegram.org/img/t_logo.png -O /opt/Telegram/icon.png

Add the following script to /usr/share/applications/telegram.desktop file.

$ sudo nano /usr/share/applications/telegram.desktop

[Desktop Entry]
Version=0.7.2
Name=Telegram
GenericName=Telegram
Comment=Private and Secure Messenger
Exec=telegram
Icon=/opt/Telegram/icon.png
Terminal=false
Type=Application
StartupNotify=true
Categories=Network;WebBrowser;
Keywords=chat;messenger;internet;

Check Application Menu > Internet > Telegram , find your friend and start private and secure conversation.