Posts made by Emsanator

@JaredBusch hi,

I'm definitely resetting the Http server after every processing, I even started it again. I didn't succeed

I checked opcache with a small Php script. Opcache works successfully But Nextcloud does not see it.

Hi, I installed the OPcache ext. but I'm still getting OPcache alert on the Nextcloud admin page. I have added the OPcache values to the PHP.ini file.

What could be the reason?

@manxam

 listen FTP  
       bind *:21,:10000-10250
       mode tcp 
       server ftp01 192.168.1.4 check port 21
       server ftp02 192.168.1.5 check port 21

I do not get HAproxy error with this method

FileZilla Log:

 Status:	Connecting to <Public IP>:21...
 Status:	Connection established, waiting for welcome message...
 Status:	Initializing TLS...
 Status:	Verifying certificate...
 Status:	TLS connection established.
 Status:	Server does not support non-ASCII characters.
 Status:	Logged in
 Status:	Retrieving directory listing...
 Status:	Server sent passive reply with unroutable address. Using server address instead.
 Command:	MLSD
 Error:	The data connection could not be established: ECONNREFUSED - Connection refused by server

I tried every way in few days but I can not connect with FTP.

@manxam said in FTP Connection in the HAproxy:

You're missing a name declaration beside the listen in the last example that you posted.
listen <my_service_here>
and optionally the hostname and bind port:
listen <my_service_here> localhost:8080

I have one "listen" and for statistics.
Could you give an example for FTP listen?

@scottalanmiller

I added this lines in HAproxy conf. file:

 listen 
    bind <public IP>:21
    mode tcp  
    server web-second <local IP>:21 check

Result:

[root@rp ~]# sudo systemctl restart haproxy
Job for haproxy.service failed because the control process exited with error code. See "systemctl status         haproxy.service" and "journalctl -xe" for details.
[root@rp ~]# systemctl status haproxy.service
● haproxy.service - SYSV: HA-Proxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments.
Loaded: loaded (/etc/rc.d/init.d/haproxy; bad; vendor preset: disabled)
Active: failed (Result: exit-code) since Thu 2018-04-05 19:48:57 UTC; 1s ago
Docs: man:systemd-sysv-generator(8)
Process: 15215 ExecStop=/etc/rc.d/init.d/haproxy stop (code=exited, status=0/SUCCESS)
Process: 15223 ExecStart=/etc/rc.d/init.d/haproxy start (code=exited, status=1/FAILURE)
Main PID: 15197 (code=killed, signal=TERM)

Apr 05 19:48:57 rp.domain.com systemd[1]: Starting SYSV: HA-Proxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments....
Apr 05 19:48:57 rp.domain.com haproxy[15223]: [ALERT] 094/194857 (15227) : parsing [/etc/haproxy/haproxy.cfg:81] :     'listen' expects an <id> argument and
Apr 05 19:48:57 rp.domain.com haproxy[15223]: optionally supports [addr1]:port1[-end1]{,[addr]:port[-end]}...
Apr 05 19:48:57 rp.domain.com haproxy[15223]: [ALERT] 094/194857 (15227) : Error(s) found in configuration file : /etc/haproxy/haproxy.cfg
Apr 05 19:48:57 rp.domain.com haproxy[15223]: Errors found in configuration file, check it with 'haproxy check'.
Apr 05 19:48:57 rp.domain.com systemd[1]: haproxy.service: control process exited, code=exited status=1
Apr 05 19:48:57 rp.domain.com systemd[1]: Failed to start SYSV: HA-Proxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments..
Apr 05 19:48:57 rp.domain.com systemd[1]: Unit haproxy.service entered failed state.
Apr 05 19:48:57 rp.domain.com systemd[1]: haproxy.service failed.

Where am I making mistakes?

@scottalanmiller No, will I set it in configuration file of vsftpd on the FTP machine?

@jaredbusch said in 302 Moved Error:

That auto generated stuff is only sending stuff to the Apache host on the same box as Nginx.

Thanks for your valuable comments.

I solved this problem.
I've erased all routing on Nginx/Apache :smiling_face_with_smiling_eyes: ,

I created a virtual server for HAproxy, I installed HAproxy and currently all virtual servers routing process was completed.

Only I have one problem with HAproxy conf. file, I do not know how to do FTP Routing.
if you want to see the topic, please visit this topic.

Hi,

This is my HAproxy conf. file and everything works right without FTP connection.

I can not access the servers via FTP.

 global
log 127.0.0.1   local0
 log 127.0.0.1   local1 notice
#log loghost    local0 info
maxconn 4096
chroot /var/lib/haproxy
user haproxy
group haproxy
daemon
#debug
#quiet
stats socket /var/lib/haproxy/stats

 defaults
log     global
mode    http
option  httplog
option  dontlognull
retries 3
redispatch
maxconn 2000
contimeout      5000
clitimeout      50000
srvtimeout      50000
 
listen stats
bind *:8080
    mode http
    option forwardfor
    option httpclose
    stats enable
    stats show-legends
    stats refresh 5s
    stats uri /stats
    stats realm Haproxy\ Statistics
    stats auth hello:world
    stats admin if TRUE

frontend MAIN 
bind *:21 
bind *:80 
bind *:143 
bind *:443 
bind *:993 
mode http 

    acl server1_URL hdr_dom(host) -i domain1.com
    acl server2_URL hdr_dom(host) -i domain2.com
    acl server3_URL hdr_dom(host) -i domain3.com
    acl server4_URL hdr_dom(host) -i domain4.com
    acl server5_URL hdr_dom(host) -i domain5.com 

use_backend server1 if server1_URL
use_backend server2 if server2_URL
use_backend server3 if server3_URL
use_backend server4 if server4_URL
use_backend server5 if server5_URL   

backend server1
mode http
server web-first 192.168.1.2:80

backend server2
mode http
server web-first 192.168.1.3:80

backend server3
mode http
server web-first 192.168.1.4:80
 
backend server4
mode http
server web-second 192.168.1.6:80
 
backend server5
mode http
server web-third 192.168.1.7:80 

I tried this: it did not work

listen FTP :21,:10000-10250
mode tcp
server ftp01 192.168.1.4 check port 21

What should I do for it?
Thank you.

@scottalanmiller said in 302 Moved Error:

So if you bypass the Nginx reverse proxy, does the site work normally on the LAN?

Yes, If I directly access the server [ 192.168.1.7 ], There is nothing problem.

@scottalanmiller said in 302 Moved Error:

I'm especially curious as to the intention of this section:

location \@backend {
internal;
proxy_pass http://192.168.1.2:8181;
include proxy.inc;
}
location \@custom {
internal;
proxy_pass http://192.168.1.2:8181;
include proxy.inc;
}
location ~ .*\.(php|jsp|cgi|pl|py)?\$ {
proxy_pass http://192.168.1.2:8181;
include proxy.inc;
}
location ~ /\.ht {
deny all;
}

I did not create this part, this is an automatically generated.

@scottalanmiller

I have update my question.

I have 2 VM for a Nextcloud and publishing my internet sites. These two servers are connected with ProxyPass.

(vhost.conf for 192.168.1.2)

<VirtualHost 192.168.1.7:8181>
ServerName domain.com
ServerAlias www.domain.com
ServerAdmin [email protected]
DocumentRoot /home/username/public_html/
UseCanonicalName Off
ScriptAlias /cgi-bin/ /home/username/public_html/_SubDomains/domain/cgi-bin/

# Custom settings are loaded below this line (if any exist)
# Include "/usr/local/apache/conf/userdata/username/domain.com/*.conf

<IfModule mod_userdir.c>
	UserDir disabled
	UserDir enabled username
</IfModule>

<IfModule mod_suexec.c>
	SuexecUserGroup username username
</IfModule>

<IfModule mod_suphp.c>
	suPHP_UserGroup username username
	suPHP_ConfigPath /home/username
</IfModule>

ProxyPass / http://192.168.1.7/
ProxyPassReverse / http://192.168.1.7/

 </VirtualHost>

Nginx:

# Virtual host file starts here

server {
listen 192.168.1.2:443;
access_log /var/log/nginx/access.domain.com.log;
error_log /var/log/nginx/error.domain.com.log;
server_name domain.com www.domain.com;
root /home/domain/public_html;

ssl                  on;
ssl_certificate      /etc/pki/tls/certs/domain.com.bundle;
ssl_certificate_key  /etc/pki/tls/private/domain.com.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS;
ssl_prefer_server_ciphers   on;

ssl_session_cache   shared:SSL:20m;
ssl_session_timeout 60m;

add_header Strict-Transport-Security "max-age=31536000";
add_header X-Content-Type-Options nosniff;

location / {
location ~.*\.(3gp|gif|jpg|jpeg|png|ico|wmv|avi|asf|asx|mpg|mpeg|mp4|pls|mp3|mid|wav|swf|flv|html|htm|txt|js|css|exe|zip|tar|rar|gz|tgz|bz2|uha|7z|doc|docx|xls|xlsx|pdf|iso|woff|ttf|svg|eot|sh)\$ {
expires 7d; #Comment this out if you are using the apache backend cache-control/expires headers.
try_files \$uri \@backend;
}
error_page 405 = \@backend;
error_page 500 = \@custom;
add_header X-Cache "HIT from Backend";
proxy_pass http://192.168.1.2:8181;
include proxy.inc;
}
location \@backend {
internal;
proxy_pass http://192.168.1.2:8181;
include proxy.inc;
}
location \@custom {
internal;
proxy_pass http://192.168.1.2:8181;
include proxy.inc;
}
location ~ .*\.(php|jsp|cgi|pl|py)?\$ {
proxy_pass http://192.168.1.2:8181;
include proxy.inc;
}
location ~ /\.ht {
deny all;
}
}

# Virtual host file ends here

I am getting this error while loading the file:

    PUT            XHR              https://domain.com/@custom           [HTTP/1.1 302 Moved Temporarily 0ms]

There's only trouble adding files. Display, delete actions are no problem.

What could be the reason for this?
Also, no problem if I use the local IP address.
Thank you.

@aaronstuder & @scottalanmiller

I installed on Fedora 27 and I get same errors.

I prepared a GIF to better explain it.

@aaronstuder Yes,

5 minutes ago I solved this problem. I added this code into the conformation file of LXC.

lxc.aa_profile: unconfined
lxc.cgroup.devices.allow: a
lxc.cap.drop:

I'm trying to install Guacamole right now.

@scottalanmiller

Hi!

My name is Emre and It is so nice to be in this beautiful community!

@scottalanmiller

I want to connect to the console (other VM) via Guacamole and I getting this 404 error. I will try again today.

@aaronstuder

I tried to install it with Fedora 27 and I refer to this page for this.

I got an error installing MySQL with Docker

 [root@my ~]# docker pull guacamole/guacamole
 Using default tag: latest
 latest: Pulling from guacamole/guacamole
 a3ed95caeb02: Extracting      32B/32B
 c06482b548c8: Download complete
 954f07d4dc14: Download complete
 0bd71cf3b59f: Download complete
 12d3f8630eca: Download complete
 d6e16c3ae29a: Download complete
 ea9df2460d2a: Download complete
 66a4ea6d102d: Download complete
 2b6aeca0d35e: Download complete
 3ac1388b912d: Download complete
 67accb67652a: Download complete
 failed to register layer: ApplyLayer exit status 1 stdout:  stderr: permission denied


 [root@my ~]# docker pull guacamole/guacd
 Using default tag: latest
 latest: Pulling from guacamole/guacd
 af4b0a2388c6: Extracting  73.67MB/73.67MB
 dcdd9c2ece80: Download complete
 674a18e16f54: Download complete
 0e6dd708fc82: Download complete
 300b33db8291: Download complete
 failed to register layer: ApplyLayer exit status 1 stdout:  stderr: permission denied


 [root@my ~]# docker pull mysql/mysql-server
 Using default tag: latest
 latest: Pulling from mysql/mysql-server
 4040fe120662: Extracting  42.56MB/42.56MB
 d049aa45d358: Download complete
 8804e1dda06d: Download complete
 47202558e57c: Download complete
 failed to register layer: ApplyLayer exit status 1 stdout:  stderr: permission denied


 [root@my ~]# docker pull mysql/mysql-server
 Using default tag: latest
 latest: Pulling from mysql/mysql-server
 4040fe120662: Extracting  42.56MB/42.56MB
 d049aa45d358: Download complete
 8804e1dda06d: Download complete
 47202558e57c: Download complete
 failed to register layer: ApplyLayer exit status 1 stdout:  stderr: permission denied


 [root@my ~]# docker pull mariadb:latest
 latest: Pulling from library/mariadb
 f2b6b4884fc8: Extracting  52.61MB/52.61MB
 26d8bdca4f3e: Download complete
 74f09e820cce: Download complete
 5390f1fe4554: Download complete
 3d3f1706a741: Download complete
 2942f66426ea: Download complete
 97ee11d39c75: Download complete
 590c46ef722b: Download complete
 32eb4b9666e5: Download complete
 fc883f98a064: Download complete
 bb8bee61bc1e: Download complete
 failed to register layer: ApplyLayer exit status 1 stdout:  stderr: permission denied

"O mecanismo"

https://www.imdb.com/title/tt6873658/reference

Hi, I get this error:

404 Not Found - 192.168.1.76:8080/guacamole/CLIENT.URL_OSK_LAYOUT

What would be the reason?
Thanks