Life Runs on Code

[roozbehkblog-blog]

Checking Populare Software Version Linux

Apache httpd -v | grep version BIND named -v Java /usr/lib/jvm/jre/bin/java -Xmx2m -version MySQL mysqld -V NTP ntpd --version OpenSSH ssh -V OpenSSL openssl version Perl perl -v | grep built PHP php -v | grep built Python python -V SNMP snmpd -v | grep version SSMTP ssmtp -V syslog-ng syslog-ng -V Tomcat rpm -qa | grep tomcat ZebOS rpm -qa | grep -i zebos

[roozbehkblog-blog]

Yahoo Mail Down?

I find it daunting that  Yahoo mail could be down for almost a whole day. This might not be widespread but for those people effected can be a real issue. 

It is hard for me to explain to my dad why his email is down for almost a day. He works remotely and email is his only way of communication.

[roozbehkblog-blog]

Sync Windows Time Server - W32Time with external source

Time Server The PDC emulator of a domain is authoritative for the domain time. The PDC emulator at the root of the forest becomes authoritative for the enterprise, and should be configured to gather the time from an external source. All PDC FSMO role holders follow the hierarchy of domains in the selection of their in-bound time partner. Here is how you sync your AD that has the PDC Role with external source so your clients/servers can always sync time through AD.

W32tm /config /syncfromflags:manual /manualpeerlist:"time.ucla.edu time2.ucla.edu time3.ucla.edu time4.ucla.edu" W32tm /config /reliable:yes Net Start W32Time W32tm /config /update W32tm /resync

Please note to chanage time.ucla.edu time2.ucla.edu ... to your own campus time server or one of nist free time server below: http://tf.nist.gov/tf-cgi/servers.cgi

Check Configuration:

w32tm /query /configuration

All Other DCs and Servers Run the following:

net stop w32Time w32tm /unregister w32tm /register net start w32time

[roozbehkblog-blog]

How to Show My Computer Icon on Windows 2012 Server

Desktop Expriencese is disabled by default and needs to be installed for you to be able to show desktop icons. but there is a secret command that allows you to enable the feature without installing the Desktop Experience mentioned here:

We must install ‘Desktop Experience’ feature to get back personalize options which will help to get My computer back on Windows 2012 server desktop.

http://www.sysprobs.com/how-to-show-my-computer-icon-on-windows-2012-server-desktop-add-run-to-windows-task-bar

Just run this command line and you will be able to select the icons to show on your desktop

"%Systemroot%\system32\rundll32.exe" shell32.dll,Control_RunDLL desk.cpl,,0

[roozbehkblog-blog]

Redirect URL within Apache VirtualHost

If you ever need to redirect a naked domain to www subdomain.

<VirtualHost *:80 > ServerName example.com Redirect 301 / http://www.example.com </VirtualHost >

[roozbehkblog-blog]

Godaddy suspends domains? have they gone too far

at the first glance, I thought the hosting might be down but after a quick ping, the domain did not resolve.

given that the domain is registered with godaddy, I quickly searched to see if the domain is expired or not. Nope that was not the case. 

the next step was to actually login into godaddy and checkout the DNS entries. 

to my surprise the domain is not even in the domain list anymore.

I have my friend call godaddy and after an hour of long talk. Go daddy sends him this message.  

Dear Sir/Madam, Your domain name, XXX, has been suspended after Go Daddy received complaints from Internet users that they received unsolicited email messages (aka spam) from you. Multiple warnings were sent by Go Daddy's Network Abuse Department to give you an opportunity to address the complaints we have received. These warnings were sent to the following addresses: - The contact for your domain name, [email protected] on 6/20/2013. We did not receive a reply from you to these email warnings so we then attempted to contact you via telephone at the following numbers: - The telephone number you submitted when you set up your Go Daddy account XXX, on 6/24/2013. Left 12hour suspension voice mail.  We had no choice but to suspend your domain name when you did not respond to our attempts to contact you. We are willing to re-activate your domain name and close this matter if you do the following: 1. Remove the following file which appears in the body of the spam message: hxxp://XXX/images/aExe.html 2. Provide a statement that you will take steps to secure the site to prevent this type of abuse from reoccurring in the future. Once we have received this information and verified that the content has been removed, we will re-activate your domain name and close the issue. Thank you for your cooperation. Sincerely, Domain Name Abuse GoDaddy.com Hotline: [phone]

Is Godaddy the internet police now? isn't Goddady suppose to let the hosting know about such issues?

Godaddy has gone too far and taken the liberty of disabling a domain which has MX entries for google apps which is crucial to my friends business.

Such  practices should not be in the hand of a company that manages the domain. 

My friend has gone two days without email because his site has malware and his site has nothing to do with his email. His email is hosted under mail.xxx.com

What do you guys think?

[roozbehkblog-blog]

Winners make things happen. Losers let things happen.

Unknown

[roozbehkblog-blog]

If I had a tattoo for every time I heard a CEO claim that she’d just hired “the best VP in the industry, I’d be Lil’ Wayne.

http://bhorowitz.com/2013/03/04/staying-great/

[roozbehkblog-blog]

Anatomy of a hack: How crackers ransack passwords like qeadzcwrsfxv1331

Some buzz on the internet over the past week has been this article. anyone interested should read it. it's a good read.

For Ars, three crackers have at 16,000+ hashed passcodes—with 90 percent success.

[roozbehkblog-blog]

Disappointed at Google I/O. Are You?

Google opened registration for its annual I/O developer conference today at 7 AM PDT. I was up at 6 AM ready to secure my ticket. I was determined, I was excited and yet unsure if I was going to get it. How excited you ask? excited enough that I would make those kids that stay in line for the new iPhone look like mediocres.

Getting a ticket for this event has become hit or miss. I like to share my frustration with you.

It is now 6:59 AM PSD, Los Angeles time.

20 secs left! yay I am excited yooo.

So here I am following the google guidelines 

No hammering of javascript end points

Do Not Reload

Do Not open multiple tabs

Blah Blah Wallet check , CC check

 I just want my ticket!!

Moment of Truth comes~ It's 7:00 AM!!!!!

Internal Server Error! come on Google! I had more faith in you!!

  At this point I knew it was a lost cause because these tickets are limited and if you are not the lucky few. You are pretty much out of luck.

after a few reloads, I am now able to select my ticket type, agree to terms and get in the 6 minutes line!!!!

So now I am in line! 

I have a feeling Ashton Kutcher is behind this wheel and I am about to get punk'd 

Ok I have been kicked off three times back to the front page registration. I have to start over and I am totally hopeless at this moment. Thank you google for the 6 minute line wait. Couldnt have at least made this a little better? Ask stubhub, there are pretty good at this. 

I know it's early but coffe doesn't cut it anymore!! 

meanwhile I am chatting with a friend who is also having trouble getting his ticket.

Maybe I am not alone. I am feeling better already...

OOOH Wait there is a glimpse of hope!!!! I love you Google! I almost gave up on you!

At this point I am willing to pay 900 dollars for a ticket that I can purchase for 300 dollars since I work at an academic institution .

I dislike (hate is a strong word) you Google Wallet :*****(

What!! we encountered a problem. What is this? I did not expect this from my favorite tech company. 

After many tries and spinning wheels. I am kicked off again. I am not losing hope. I am late for work but I am not giving up! let's get back in line.

Google I/O sold out.

After being up for an hour before the registration. Google has failed me two years in a row. 

I am protesting my anger but making bing my homepage for the next couple of weeks/days/years who knows. I might not ever get over this.

I have come to love Google for what it is as a company but today Google has disappointed me. Did Google let you down today as well? 

I can be reached at here

[roozbehkblog-blog]

No Password for Sudo Users

Edit  /etc/sudoers

vim /etc/sudoers.d

Add following

# ubuntu user is default user in cloud-images. # It needs passwordless sudo functionality. sudousername ALL=(ALL) NOPASSWD:ALL

replace sudousername with your username.

You should not be asked for password next time you sudo a command with your username.

[roozbehkblog-blog]

Proactively protect your Wordpress Joomla websites

According to http://feross.org 1% of CMS-Powered Sites Expose Their Database Passwords.

To better protect your temp files from accidentally showing up to malicious users who are looking for these files, you should disallow access to such files. here is a code you can add to your virtual host file or .htaccess in apache

< Files ~ "(^#.*#|~|\.sw[op])$"> Order allow,deny Deny from all < /Files>

[roozbehkblog-blog]

Read Only Directory , Read Only Files Linux

Make files in the directory and sub directory read only.

First lets makes the directories read only 555 will make the folders read only and allows you to traverse through them.

find . -type d -exec chmod 555 {} \;

change the permissions of the files to read only.

find . -type f -exec chmod 444 {} \;

[roozbehkblog-blog]

List files that were changed in linux

find ./ -type f -mtime -4 -exec ls -al {} \;

Find and Display files older than 30 days , younger than 60 days.

find ./ -type f -mtime -60 ! -mtime -30 -exec ls -la {} \;

[roozbehkblog-blog]

Diff between folders in linux and copy output to another folder

vim diff.sh

#!/bin/bash # setup folders for our different stages DIST=/var/www/html/new_site/ DIST_OLD=/var/www/html/old_site/ DIST_UPGRADE=/var/www/html/diff_site/ cd $DIST find . -type f | while read filename do if [ ! -f "$DIST_OLD$filename" ]; then cp --parents "$filename" $DIST_UPGRADE continue fi diff "$filename" "$DIST_OLD$filename" > /dev/null if [[ "$?" == "1" ]]; then # File exists but is different so copy changed file cp --parents $filename $DIST_UPGRADE fi done

chmod +x diff.sh ./diff.sh

After the script is run check /var/www/html/diff_site/ for changed files.

[roozbehkblog-blog]

Create MySQL database via command line

root@localhost:~# mysql -u root -p

Now, create your database:

mysql> CREATE DATABASE test;

Now, add your user and his access:

mysql> GRANT ALL PRIVILEGES ON test.* TO test_user@localhost IDENTIFIED BY 'test_pass';

All done!

[roozbehkblog-blog]

CloudFlare Two-factor Authentication (Authy)

My Accounts

To turn two-factor authentication on, you simply log into your CloudFlare account, navigate to “My account” and select “2-factor authentication”

2-factor authentication

Once there, you will enter your mobile phone,password information and click Enable 2-factor authentication

 text message

You will then receive a text message. The text message includes a link to download the Authy app. The Authy app will ask you to enter your your mobile phone number. It will then text you a setup pin that you need to enter into the Authy app.

Once you have enabled your Authy account. find CloudFlare in your app.

Enter Authentication token

Enter Cloudflare token in your setup. The Authy app will then be authorized and able to generate authentication tokens unique to your account. 

When you login to CloudFlare for the first time after enabling two-factor authentication, you will need to launch the Authy app on your phone. It will generate a unique, 7-digit authentication token. The authentication token is good for 30 seconds and then will change to a new token.

You can store your authentication for 14 days. If you login from an unrecognized device, or after your authentication expires, you’ll need to open the Authy app and get your new authentication token for that device. The Authy app does not rely on you having network access, so you can retrieve your code even if your phone is not connected to the Internet.

If you ever your your phone or get a new one you can reassociate your account by following the reset instructions on Authy’s website.