http://www.randombugs.com Just another Bastard Operator From Hell. Everything from *nix to programming Thu, 05 Jan 2012 11:44:55 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 http://www.randombugs.com/php/apache-dynamic-virtual-hosting-php-security.html http://www.randombugs.com/php/apache-dynamic-virtual-hosting-php-security.html#comments Mon, 06 Jun 2011 10:35:21 +0000 admin http://www.randombugs.com/?p=739
It’s been a while since I configured the latest Dynamic Mass Virtual Hosting Server. Last time I used mod_vhost_alias to create a dynamic virtual hosting and it worked without any problem for what we need in that time. Then we didn’t care about the ftp and virtual users, the sites was updated from web pages and security was pretty much handled by upload application who managed the virtual hosting. Now, the problem is a little bit changed: We need a secure sever which should support ftp virtual users with quota ...]]> http://www.randombugs.com/php/apache-dynamic-virtual-hosting-php-security.html/feed 1 http://www.randombugs.com/java/glassfish/installing-glassfish-31-cluster-debian-60-command-line.html http://www.randombugs.com/java/glassfish/installing-glassfish-31-cluster-debian-60-command-line.html#comments Wed, 04 May 2011 12:48:05 +0000 admin http://www.randombugs.com/?p=729
Finlay is here. For me, Glassfish 3.1, was one of most awaited piece of software, for all it’s new features and clustering support. Glassfish 3.1 slightly changed the way to install cluster, in a much better and integrated way. This version come with a lot of new functionality, but also with improved parts related to Glassfish 2.1. The most interesting features of Glassfish 3.1 are: Clustering (100 instances per domain), SSH provisioning, Centralized management (with the help of ssh), High Availability Session Persistence, High Availability Java Message Service, RMI-IIOP Load ...]]> http://www.randombugs.com/java/glassfish/installing-glassfish-31-cluster-debian-60-command-line.html/feed 1 http://www.randombugs.com/headline/reading-list-read-future.html http://www.randombugs.com/headline/reading-list-read-future.html#comments Fri, 25 Feb 2011 11:58:48 +0000 admin http://www.randombugs.com/?p=682 Howdy everyone! Because I travel a lot, I build a list of books which I should buy and read next in the airports, bus stations etc or everywhere I should wait some amount of time. This list contain everything what an System / Application Administrator should know. I’m usually dealing with Java/Tomcat/Glassfish/Jboss under Linux, but also I have a strong background of networking, security and cloud computing. This books are my choice and I think is a good choice for everyone who want to learn or improve your skills as ...]]> http://www.randombugs.com/headline/reading-list-read-future.html/feed 2 http://www.randombugs.com/linux/atomic-modsecurity-rules-debian-lenny-50.html http://www.randombugs.com/linux/atomic-modsecurity-rules-debian-lenny-50.html#comments Thu, 30 Dec 2010 11:26:26 +0000 admin http://www.randombugs.com/?p=666
Everyone, with a decent Linux security knowledge, should know about ModSecurity – Open Source Web Application Firewall. Personally, I know this mod from 2004 and it help me a lot in detecting and/or preventing malicious attacks before reaching my customers applications.]]> http://www.randombugs.com/linux/atomic-modsecurity-rules-debian-lenny-50.html/feed 0 http://www.randombugs.com/linux/compile-configure-modqos-prevent-slowloris-ddos-apache-2-debian-lenny-distribution.html http://www.randombugs.com/linux/compile-configure-modqos-prevent-slowloris-ddos-apache-2-debian-lenny-distribution.html#comments Tue, 04 May 2010 20:00:13 +0000 admin http://www.randombugs.com/?p=650
mod_qos is becoming a very popular module for Apache, from the discover of Slowloris DDoS Attack. It seems, mod_qos is the best solution for Slowloris attack on Apache 2, but you can also check mod_evasive, mod_security or http accelerator “Varnish”. In this post I will try to present a step by step tutorial how to install mod_qos and configure to prevent Slowloris DDoS attack. This post is just a compendium of other good posts: How To Defend slowloris DDoS With mod_qos (Apache2 On Debian [Lenny]) DDoS, Apache2 and mod_qos How to best defend ...]]> http://www.randombugs.com/linux/compile-configure-modqos-prevent-slowloris-ddos-apache-2-debian-lenny-distribution.html/feed 4 http://www.randombugs.com/java/glassfish/glassfish-cluster-211-httpsessions-replication-multithread-concurrent-access.html http://www.randombugs.com/java/glassfish/glassfish-cluster-211-httpsessions-replication-multithread-concurrent-access.html#comments Wed, 03 Mar 2010 10:07:06 +0000 admin http://www.randombugs.com/?p=634
I have several clusters with Glassfish 2.1.1 in a BIG virtual environment and all worked fine … until I add new processors to this clusters. After upgrade, I started to have problems with HttpSession replication. Starting debugging JXTA, Shoal and the Web Container didn’t help at all. Until I found this page Memory Replication & Multi-threaded Concurrent Access to HttpSessions. My applications was doing multi-thread concurrent access some times (Ajax) and this was the root cause of all lost sessions. I modified sun-web.xml from my application, accordingly with the ...]]> http://www.randombugs.com/java/glassfish/glassfish-cluster-211-httpsessions-replication-multithread-concurrent-access.html/feed 3 http://www.randombugs.com/java/glassfish/upgrade-glassfish-21-211.html http://www.randombugs.com/java/glassfish/upgrade-glassfish-21-211.html#comments Tue, 29 Dec 2009 13:39:54 +0000 admin http://www.randombugs.com/?p=625
For some reasons the asupgrade tool from Sun Glassfish doesn’t work if you want to upgrade your Glassfish from 2.1 to 2.1.1. The upgrade method what I will present you in the next post, probably, is not recommended by SUN, but it will work in most cases (clustered or not). Just follow this steps: 1. Stop all domains, node agents, instances from all cluster (or only the domain if you have only 1 server) 2. Rename Glassfish folder to g2.1 3. Install glassfish 2.1.1 $ java -Xmx256m -jar glassfish-installer-v2.1.1-b31g-linux.jar $ cd glassfish $ chmod +x lib/ant/bin/ant $ ...]]> http://www.randombugs.com/java/glassfish/upgrade-glassfish-21-211.html/feed 1 http://www.randombugs.com/recovery/vmfs-datastore-missing-2.html http://www.randombugs.com/recovery/vmfs-datastore-missing-2.html#comments Thu, 22 Oct 2009 11:17:19 +0000 admin http://www.randombugs.com/?p=617
After successfully install of ESXi 3.5 server, my datastore1 disappeared unexpectedly after first or second reboot. Is possible to be because of my “hacks” in “Advanced Settings”, but I’m not very sure about that. Looking in /var/log/messages I spotted some very strange errors: Error Stream from partedUtil while getting partitions: Error: The partition table on /dev/disks/vmhba0:0:0:0 is inconsistent. There are many reasons why this might be the case. However, the most likely reason is that Linux detected the BIOS geometry for /dev/disks/vmhba0:0:0:0 incorrectly. GNU Parted suspects the ...]]> http://www.randombugs.com/recovery/vmfs-datastore-missing-2.html/feed 3 http://www.randombugs.com/java/glassfish/changing-logging-system-glassfish-21.html http://www.randombugs.com/java/glassfish/changing-logging-system-glassfish-21.html#comments Mon, 28 Sep 2009 18:04:20 +0000 admin http://www.randombugs.com/?p=606
A lot of people are not satisfied by the default Java Logging (JUL) in Glassfish. Also, myself I encountered some problems on clustered environments where we should have one single log and not one log for each instance. Trying to change the logging system in Glassfish it looks to be almost impossible , but I found a very interesting project java.util.logging to log4j Bridge and the sky become more clear for Glassfish logging. Jul to Log4J Bridge are part of log4J project and is very useful when you ...]]> http://www.randombugs.com/java/glassfish/changing-logging-system-glassfish-21.html/feed 0 http://www.randombugs.com/java/dbappender-log4j-12.html http://www.randombugs.com/java/dbappender-log4j-12.html#comments Thu, 24 Sep 2009 20:19:46 +0000 admin http://www.randombugs.com/?p=595
Initially, DBAppender for Log4j was introduced in version 1.3 of Log4j, but this version was ABANDONED by Apache team. DBAppender is very useful when we want to send our log on a JNDI resource and not on standard JDBC or file. If you need just logging in a database for your application, then you should use JDBCAppender. If you want to log on a JNDI or Database Connection Pool the DBAppender is for you. In this post I will show you how to get, compile and quick test the DBAppender. 1. ...]]> http://www.randombugs.com/java/dbappender-log4j-12.html/feed 6