OCSP (Online Certificate Status Protocol) is an Internet protocol used to determine the status of a website's certificate used for secure communications. This article describes how to fix or work around the error message, The OCSP server has no status for the certificate. For other security-related error messages, see Troubleshoot the "Secure Connection Failed" error message.

vSphere 5.x does not allow operations to be performed directly on an ESX host managed by a virtual center. This error is given while connected directly to an ESXi server with vSphere client, attempting to resize a virtual disk on a VM (to add more capacity). However as this ESXi server and its virtual machines was managed by vCenter server, it would not let me modify its "resource settings" i.e. its disk size. There is a way to remove the host from thinking it was connected to vCenter. This is probably not supported by VMware and I do not support it but it works. 1. Connect to the ESXi server either on the console or via SSH 2. Edit /etc/vmware/vpxa/vpxa.cfg vi /etc/vmware/vpxa/vpxa.cfg Remove the whole vpxa section including <vpxa> and </vpxa> "d" <vpxa> <bundleVersion>1000000</bundleVersion> <datastorePrincipal>root</datastorePrincipal> <hostIp>123.123.123.123</hostIp> <hostKey>52e16e0d-07e4-366e-7bf6-73279af3c8f0</hostKey> <hostPort>443</hostPort> <licenseExpiryNotificationThreshold>15</licenseExpiryNotificationThreshold> <memoryCheckerTimeInSecs>30</memoryCheckerTimeInSecs> <serverIp>123.123.123.123</serverIp> <serverPort>902</serverPort> </vpxa> Save it ":wq!! 3. Restart the services /sbin/services.sh restart 4. Connect back to the ESXi server with vSphere client and it should now let you make the changes Note: I would very much assume at this point if the host was managed by vCenter you will have to disconnect and reconnect the host to push out the VPXA agent and config, otherwise you wont be able to manage the host via vCenter. As it happens the ESXi server I had this issue with was no longer managed by vCenter server as someone has rebuilt vCenter, but had not removed this host from vCenter before doing so. Before I did a fresh install of vCenter,I want to add some more…

If you start to get "413 request entity too large" when you upload files in your Pydio after you followed this QUICK FIX. It's probably because you are using Nginx and its setting is happy with the large upload. We need to modify it. Nginx configuration The client_max_body_size directive assigns the maximum accepted body size of client request, indicated by the line Content-Length in the header of request. If size is greater the given one, then the client gets the error "Request Entity Too Large" (413). To fix this issue edit your nginx.conf. Open the Terminal or login to the remote server using ssh client. Type the following command to edit your nginx.conf using a text editor such as vi or joe: edit the file: /etc/nginx/nginx.conf . if you are not sure about the file location (it might be a different name), find / -name "nginx.conf"   Add the following line to http or server or location context to increase the size limit in nginx.conf, enter: # set client body size to 8192M # client_max_body_size 8192M; Save and close the file. Reload the nginx webserver, enter: # /usr/local/nginx/sbin/nginx -s reload OR # /sbin/nginx -s reload OR use the following on RHEL/CentOS/Debian/Ubuntu Linux: # service nginx reload Please check the previous QUICK FIX for PHP configuration modification.  

Pydio is a web based file manager, formerly known as AjaXplorer. You can take a look at the online demo (use demo as login and password). This contrib integrate Pydio with the SharedFolders contrib. If Pydio is installed, you'll see a new option in the configuration of shared folders asking you if you want to enable access to this shared folders through Pydio. some people encounter the error, "File is too big", when they try to upload a large file. The cause of this problem can be various. I've listed a few solutions that help solve the problem 1. Check and modify the settings in "php.ini" If you are not sure where is your "php.ini", type the following command to find out find / -name "php.ini" edit php.ini. Here I just use 8192 because I need to upload large ISO images. #This sets the maximum amount of memory in bytes that a script is allowed to allocate memory_limit = 32M #The maximum size of an uploaded file. upload_max_filesize = 8192M #Sets max size of post data allowed. This setting also affects file upload. To upload large files, this value must be larger than upload_max_filesize post_max_size = 8192M safe_mode = Off 2. Check the Uploader plugin settings in Pydio admin panel. This two steps should solve your "file is too big" problem. However, if you, then, encounter the error "413 Request Entity Too Large Error and Solution". You should click HERE to follow this QUICK FIX post.  

A fully qualified domain name (FQDN), sometimes also referred to as an absolute domain name, is a domain name that specifies its exact location in the tree hierarchy of the Domain Name System (DNS) after registering a domain. It specifies all domain levels, including the top-level domain and the root zone. A fully qualified domain name is distinguished by its lack of ambiguity: it can only be interpreted one way. incorrectly configured FQDN can cause mail server malfunction and many other problems.  Ubuntu/Debian: 1.you need to edit /etc/hostname server1 CentOS/Redhat: 1. you need to edit /etc/sysconfig/network HOSTNAME=server1.domain.com 2. you need to use 'hostname -F' to setup the hostname -F, --file             read host name or NIS domain name from given file hostname -F /etc/hostname 3. edit  /etc/hosts to setup FQDN 127.0.0.1 localhost.localdomain localhost wan_ip server1.anydomain.com server1  

Q. How do I find out all large files in a directory?A. There is no single command that can be used to list all large files. But, with the help of find command and shell pipes, you can easily list all large files. Usage: find [-H] [-L] [-P] [-Olevel] [-D help|tree|search|stat|rates|opt|exec] [path...] [expression] default path is the current directory; default expression is -print expression may consist of: operators, options, tests, and actions: operators (decreasing precedence; -and is implicit where no others are given): ( EXPR ) ! EXPR -not EXPR EXPR1 -a EXPR2 EXPR1 -and EXPR2 EXPR1 -o EXPR2 EXPR1 -or EXPR2 EXPR1 , EXPR2 positional options (always true): -daystart -follow -regextype normal options (always true, specified before other expressions): -depth --help -maxdepth LEVELS -mindepth LEVELS -mount -noleaf --version -xdev -ignore_readdir_race -noignore_readdir_race tests (N can be +N or -N or N): -amin N -anewer FILE -atime N -cmin N -cnewer FILE -ctime N -empty -false -fstype TYPE -gid N -group NAME -ilname PATTERN -iname PATTERN -inum N -iwholename PATTERN -iregex PATTERN -links N -lname PATTERN -mmin N -mtime N -name PATTERN -newer FILE -nouser -nogroup -path PATTERN -perm [+-]MODE -regex PATTERN -readable -writable -executable -wholename PATTERN -size N[bcwkMG] -true -type [bcdpflsD] -uid N -used N -user NAME -xtype [bcdpfls] actions: -delete -print0 -printf FORMAT -fprintf FILE FORMAT -print -fprint0 FILE -fprint FILE -ls -fls FILE -prune -quit -exec COMMAND ; -exec COMMAND {} + -ok COMMAND ; -execdir COMMAND ; -execdir COMMAND {} + -okdir COMMAND ; Report (and track progress on fixing) bugs via the findutils bug-reporting page at http://savannah.gnu.org/ or, if you…

Is WGET slow for you ? Did you tried increasing TCP Buffer and still not having the results you expect for downloads ? Do you need resume and multi connection functionality ? The solution is Axel In Windows we have many download manager softwares that let us download with the maximized speed and resume ability but with Linux there are a few based on CLI as the most are with GUI. Axel Installation : Here we are going to install Axel and then explain how to use it. - Debian Based Distro : If you’re on a Debian Based distributions like Ubuntu you can install Axel easily with apt-get . apt-get install axel - Redhat Based Distro : Axel is not included in Yum repository by default if you don’t have EPEL / Remo so you need to install it from scratch via source code or use RPMs which is faster and more easy. rpm -ivh http://pkgs.repoforge.org/axel/axel-2.4-1.el6.rf.x86_64.rpm   Command-Line Switches : You can have a complete list of command lines if you do “man axel” or “axel –help” but here we mention a few of usable command lines for general usages. --max-speed=x -s x Specify maximum speed (bytes per second) --num-connections=x -n x Specify maximum number of connections --output=f -o f Specify local output file --header=x -H x Add header string --user-agent=x -U x Set user agent --no-proxy -N Just don't use any proxy server --quiet -q Leave stdout alone --verbose -v More status information   Examples : - Downloads with max number of connections set to 10 axel -n 10 http://cachefly.cachefly.net/200mb.test - Downloads at…

Posted on October 2, 2013 by Mark Achtemichuk There is a lot of outdated information regarding the use of a vSphere feature that changes the presentation of logical processors for a virtual machine, into a specific socket and core configuration. This advanced setting is commonly known as corespersocket. It was originally intended to address licensing issues where some operating systems had limitations on the number of sockets that could be used, but did not limit core count. KB Reference: http://kb.vmware.com/kb/1010184 It’s often been said that this change of processor presentation does not affect performance, but it may impact performance by influencing the sizing and presentation of virtual NUMA to the guest operating system. Reference Performance Best Practices for VMware vSphere 5.5 (page 44):http://www.vmware.com/pdf/Perf_Best_Practices_vSphere5.5.pdf Recommended Practices #1 When creating a virtual machine, by default, vSphere will create as many virtual sockets as you’ve requested vCPUs and the cores per socket is equal to one. I think of this configuration as “wide” and “flat.” This will enable vNUMA to select and present the best virtual NUMA topology to the guest operating system, which will be optimal on the underlying physical topology. #2 When you must change the cores per socket though, commonly due to licensing constraints, ensure you mirror physical server’s NUMA topology. This is because when a virtual machine is no longer configured by default as “wide” and “flat,” vNUMA will not automatically pick the best NUMA configuration based on the physical server, but will instead honor your configuration – right or wrong – potentially leading to a topology mismatch that does affect performance. To…

What should you do when dpkg-reconfigure tzdata is not working How will you change server time? On Linux Server:: ========== 1. Login as a Root. 2. The time zones are located on server in the directory /usr/share/zoneinfo, so change the directory to that one. Code: root@Server [~]# cd /usr/share/zoneinfo 3. Copy or move the current local time zone so that you will be able to set the time zone as per requirement. Code: root@Server [~]#cp -p /etc/localtime /etc/localtime-back Or root@Server [~]#mv /etc/localtime /etc/localtime-back 4. Now say for example, if you want to set the BST [British Summer Time] time zone for your server then, you will need to create a symbolic link for the same. The command is as follows. Code: root@Server [~]#ln -s /usr/share/zoneinfo/America/Los_Angeles /etc/localtime Verify the changes done by “date” command.Code: root@Server [~]#date Mon Oct 20 04:51:57 BST 2008 If you get the below error while trying to change the time, you need to allow permission to the VPS to change time in the main node. Error:- # date 031612482009 date: cannot set date: Operation not permitted Fix:- To correct this problem, exit from the container (#exit) and issue the following commands. Login to the main node # vzctl stop # vzctl set –save –capability sys_time:on # vzctl start Where <veid> is your Virtual Environment ID. Next, log back into your virtual environment and issue the following commands to set the appropriate time-zone for the Virtual Environment (VE). # vzctl enter # mv /etc/localtime /etc/localtime.old # ln -s /usr/share/zoneinfo/America/Los_Angeles /etc/localtime # date

  I was trying to put VMware ESXI 5.1 on the dedi I got yesterday. This error kept popping up during the ESXI installation. The dedi is using Dell 5/i raid card with four 1T hard drives in 4 disks Raid-5. After a few times installation failures, I found out the VT-d setting in the BIOS was causing the problem. Turn it off, install ESXI, all good. You can turn it on later after finish the installation.

We love using OVA templates to speed up our deployment of virtual machines. I recently upgraded one of my servers to ESXi 5.1 (which also required an update to vSphere). ESXi 5.1 provides support for Windows 8 and Server 2012, which is incredibly useful. However, whilst building OVA templates for these operating systems, I stumbled across an issue. I ran through the ‘New Virtual Machine’ wizard, selecting Windows 8 (or Server 2012), leaving all settings default. Installed my operating system, and made the required customization, shutdown the machine and exported an OVA template through vSphere – excellent, how easy! However, whilst trying to re-deploy the OVA to the ESXi 5.1 host, through the ‘Deploy OVA template’ wizard, it failed immediately after completing the wizard (right before it shows the deployment progress bar). Now, I have a particular hate for misleading error messages, and this one seems to fall right in-to that category - Failed to deploy OVF package: The task was canceled by a user. How misleading. I, or any other user, certainly didn’t cancel the task. So what happened? I took a look through the (horrendous) hostd.log on the ESXi box and found absolutely nothing of any value. Frustrated by the inability to redeploy a template I spent so long preparing, I broke open the OVA template and took a look inside. There were three files with different extensions, .ova - OVF descriptor, written in XML, which describes the hardware requirements .mf – contains SHA1 checksums of the .OVA and .VMDK .vmdk – the virtual hard disk for the…

sometimes when we excute "apt-get update", we get this error "W: GPG error: http://extras.ubuntu.com precise Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY XXXXXXXXXXXXXXXX" . This is caused by a missing key. We can just simply excute the following to solve the problem. apt-get update 2> /tmp/keymissing; for key in $(grep "NO_PUBKEY" /tmp/keymissing |sed "s/.*NO_PUBKEY //"); do echo -e "\nProcessing key: $key"; gpg --keyserver subkeys.pgp.net --recv $key && sudo gpg --export --armor $key | apt-key add -; done  

By default, Internet Explorer Enhanced Security Configuration is enabled on Windows Server 2003. When you start Microsoft Internet Explorer, you receive the following message: Microsoft Internet Explorer's Enhanced Security Configuration is currently enabled on your server. This enhanced level of security reduces the risk of attack from Web-based content that is not secure, but it may also prevent Web sites from displaying correctly and restrict access to network resources. Internet Explorer Enhanced Security Configuration established a configuration for your server and for Microsoft Internet Explorer that decreases the exposure of your server to potential attacks that can occur through Web content and application scripts. As a result, some Web sites may not display or perform as expected. This article describes the effects of Internet Explorer Enhanced Security Configuration in Windows Server 2003 / 2008 / 2012. Windows Server 2003 Find "Control Panel" Click on "Add or Remove Programs" Click on "Add/Remove Windows Components" Uncheck "Internet Explorer Enhanced Security Configuration" Click on Next Done   Windows Server 2008 Find "Administrative Tools" Click on "Server Manager" Click on "Configure IE ESC" Turn IE ESC off Done   Windows Server 2012  

Author: Sandeep Verma Well… I am working on alternatives to make OWN CDN… I have few options to create such CDN * Google App Engine http://24ways.org/2008/using-google-app-engine-as-your-own-cdn http://www.digitalistic.com/2008/06/09/10-easy-steps-to-use-google-app-engine-as-your-own-cdn/

The Test Author: kbeezie I’ll show you a very simple demonstration of Nginx’s Limit Request module and how it may be helpful to you in keeping your website up if you are hit by excessive connections or HTTP based denial-of-service attacks. For this test I’m using a copy of my site’s about page saved as about.html, and the Blitz.io service (which is free at the moment) to test the limit_req directive. First I test the page with the following command in Blitz, which will essentially ramp the number of concurrent connections from 1 to 1,075 over a period of 1 minute. The timeout has been set to 2 minutes, and the region set to California. I also set it to consider any response code other than 200 to be an error, otherwise even a 503 response will be considered a hit.

This glitch is caused by wrong svn address. nano /var/lib/dpkg/info/w3af.postinst replace: svn co https://w3af.svn.sourceforge.net/svnroot/w3af/trunk w3af with: svn co https://svn.code.sf.net/p/w3af/code/trunk w3af apt-get upgrade if this doesn't solve your problem. Try the following method: aptitude remove se-toolkit aptitude purge se-toolkit aptitude clean aptitude autoclean git clone https://github.com/trustedsec/social-engineer-toolkit/ set/ cd set/ ./setup.py install This will help you install se-toolkit from a github source. then run: apt-get upgrade you shouldn't get any error.

dpkg -i <package.deb> Installs a package file; one that you downloaded manually, for example. dpkg -c <package.deb> Lists the contents of <package.deb> a .deb file. dpkg -I <package.deb> Extracts package information from <package.deb> a .deb file.

apt-get install <package> Downloads <package> and all of its dependencies, and installs or upgrades them. apt-get remove [--purge] <package> Removes <package> and any packages that depend on it. --purge specifies that packages should be purged. apt-get update Updates packages listings from the repo, should be run at least once a week.