主页 / user-144048

Aaron A's questions

Martin Hope
Aaron A
Asked: 2020-01-06 08:04:01 +0800 CST
  • 1

我有一个围绕 ISPMail 指南松散设置的电子邮件系统 - https://workaround.org/ispmail/buster/

我正在尝试为自动密码方案迁移设置脚本，但遇到了问题。我一直在遵循与此类似的指南：https ://wiki.dovecot.org/HowTo/ConvertPasswordSchemes

每当我启用 userdb 预取时，都会Couldn't drop privileges: User is missing UID (see mail_uid setting)出现错误。

我的 user_query 和 password_query 如下：

user_query = SELECT user, \ concat('*:bytes=', quota) AS quota_rule, \ '/var/vmail/%d/%n' AS home, \ 5000 AS uid, 5000 AS gid \ FROM users WHERE user='%u';

password_query = SELECT user, password, \ '%w' AS userdb_plain_pass, \ concat('*:bytes=', quota) AS quota_rule, \ '/var/vmail/%d/%n' AS home, \ 5000 AS uid, 5000 AS gid \ FROM users WHERE user='%u';

我有以下配置：（按此顺序）

passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext }

查看调试日志，当我删除预取并且一切都按预期工作时：

Jan 5 15:21:38 m1 dovecot: auth: Debug: master userdb out: USER#0114090494977#011aaron@example.com#011plain_pass=Password1234#011quota_rule=*:bytes=0#011home=/var/vmail/example.com/aaron#011uid=5000#011gid=5000#011auth_token=bdxxxxx

但是，启用预取时，它不会获取 passdb 中的 uid 和 gid：

Jan 5 15:18:36 m1 dovecot: auth: Debug: master userdb out: USER#0113382444033#011aaron@example.com#011plain_pass=Password1234#011auth_token=bdxxxx

关于使用预取时如何解决此问题的任何建议？

谢谢！

debian
Martin Hope
Aaron A
Asked: 2019-03-18 11:23:34 +0800 CST
  • 0

我正在测试将我的 Roundcube 1.3.8 安装转移到 php 7.3。它是负载平衡的，我一直在使用 memcache 进行 php 5 的会话存储，没有任何问题： $config['session_storage'] = 'memcache';

// Use these hosts for accessing memcached
// Define any number of hosts in the form of hostname:port or unix:///path/to/socket.file
$config['memcache_hosts'] = array( 'server1:11211','server2:11211');

当我在 php 7.3.3 上尝试相同的配置时，我收到以下错误：

[17-Mar-2019 19:11:16 +0000]: DB Error: Failed to connect to memcached. Please check configuration in /path/to/roundcube/program/lib/Roundcube/rcube_session_memcache.php on line 49 (GET /mail/)

我已经能够从 php 7.3 运行一个简单的测试脚本来验证 memcache 确实在工作。

有什么建议为什么这不适用于 Roundcube 1.3.8？

memcached
Martin Hope
Aaron A
Asked: 2018-03-13 20:17:31 +0800 CST
  • 1

我需要一个 gluster 卷以在启动时挂载。将它放在 /etc/fstab 中不会产生可靠的结果。

我设置了以下 systemd 服务：

[Unit]
Description=Gluster Mount

[Service]
Type=oneshot
ExecStart=/bin/mount /data
TimeoutSec=0
StandardOutput=tty
RemainAfterExit=yes
SysVStartPriority=99

[Install]
WantedBy=multi-user.target

当此服务在启动时运行时，它会返回以下内容：

root@web1:~# systemctl status gluster-mount.service
â gluster-mount.service - Gluster Mount
   Loaded: loaded (/etc/systemd/system/gluster-mount.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Tue 2018-03-13 04:05:43 UTC; 3min 20s ago
  Process: 627 ExecStart=/bin/mount /data (code=exited, status=1/FAILURE)
 Main PID: 627 (code=exited, status=1/FAILURE)

Mar 13 04:05:39 web1 systemd[1]: Starting Gluster     Mount...
Mar 13 04:05:43 web1 systemd[1]: gluster-mount.service: Main process exited, code=exited, status=1/FAILURE
Mar 13 04:05:43 web1 systemd[1]: Failed to start Gluster Mount.
Mar 13 04:05:43 web1 systemd[1]: gluster-mount.service: Unit entered failed state.
Mar 13 04:05:43 web1 systemd[1]: gluster-mount.service: Failed with result 'exit-code'.

当我登录后在此服务上发出“重新启动”时，它工作正常。我错过了什么？

debian
Martin Hope
Aaron A
Asked: 2017-02-27 09:17:17 +0800 CST
  • 0

我正在尝试给工头一个尝试，我按照网站上的教程将它安装在 Debian 8 上。但是，当我尝试加载工头时，我得到：

Sinatra 不知道这个小曲。

# in usr/share/foreman-proxy/modules/root/root_api.rb
class Proxy::RootApi
  get '/' do
    "Hello World"
  end
end

我在生产日志中也没有看到任何有用的东西。有什么建议么？我应该查看其他日志吗？

foreman puppet-foreman
Martin Hope
Aaron A
Asked: 2016-01-11 18:36:45 +0800 CST
  • 1

我正在尝试通过 IPtables 将单个端口重定向到本地服务器。目前我有以下规则：

iptables -t nat -A PREROUTING -p tcp -m tcp --dport 55555 -j DNAT --to-destination 10.188.44.125:3306
iptables -t nat -A POSTROUTING -j MASQUERADE

当我制定了这些规则时，我的 ssh rsync 进程将失败。我假设这里有一些冲突，但我不确定是什么。有什么建议么？谢谢！

更新：这是我制定的允许 rsync over ssh 连接的规则。我的输入策略设置为丢弃。其他政策被设置为接受。

iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT
iptables -A INPUT -s 127.0.0.1/32 -d 127.0.0.1/32 -i lo -j ACCEPT

更新 2

以下是 nat 的 iptables-save 的结果：

*nat
:PREROUTING ACCEPT [8:468]
:INPUT ACCEPT [7:408]
:OUTPUT ACCEPT [2:134]
:POSTROUTING ACCEPT [0:0]
[0:0] -A PREROUTING -p tcp -m tcp --dport 53306 -j   DNAT --to-destination 10.183.42.125:3306
[2:134] -A POSTROUTING -j MASQUERADE
COMMIT
debian
Martin Hope
Aaron A
Asked: 2013-01-14 06:06:28 +0800 CST
  • 0

我有一个要维护的高流量站点，但有时会遇到峰值：

 (mod_fastcgi.c.2900) backend is overloaded; we'll disable it for 2 seconds and send the request to another backend instead: reconnects: 0 load: 2541

目前的统计是：

absolute (since start)
Requests    15 kreq
Traffic 20.02 Mbyte
average (since start)
Requests    81 req/s
Traffic 106.24 kbyte/s
average (5s sliding average)
Requests    94 req/s
Traffic 99.23 kbyte/s

3952 connections

该站点本身是一个非常简单的 PHP 站点，不涉及 MySQL。我确实安装并配置了 APC。

我已将建议的更改添加到 /etc/sysctl.conf：

# These ensure that TIME_WAIT ports either get reused or closed fast.
net.ipv4.tcp_fin_timeout = 1
net.ipv4.tcp_tw_recycle = 1

# TCP memory
net.core.rmem_max = 16777216
net.core.rmem_default = 16777216
net.core.netdev_max_backlog = 262144
net.core.somaxconn = 262144

net.ipv4.tcp_syncookies = 1
net.ipv4.tcp_synack_retries = 2
net.ipv4.tcp_syn_retries = 2
net.ipv4.tcp_max_syn_backlog = 2048
net.ipv4.tcp_max_syn_backlog = 262144
net.ipv4.tcp_max_orphans = 262144

我的 lighttpd.conf 看起来像：

server.max-fds = 12000
server.max-keep-alive-requests = 0
server.event-handler = "linux-sysepoll"
server.max-connections = 10000

fastcgi配置：

## Start an FastCGI server for php (needs the php5-cgi package)
fastcgi.server    = ( ".php" =>
    ((
            "bin-path" => "/usr/bin/php-cgi",
            "socket" => "/tmp/php.socket",
            "max-procs" => 14,
            "bin-environment" => (
                    "PHP_FCGI_CHILDREN" => "30",
                    "PHP_FCGI_MAX_REQUESTS" => "100000"
            ),
            "bin-copy-environment" => (
                    "PATH", "SHELL", "USER"
            ),
            "broken-scriptfilename" => "enable"
    ))
)

服务器利用率：

top - 08:04:26 up 97 days, 15:14,  1 user,  load average: 0.10, 0.08, 0.04
Tasks: 570 total,   3 running, 567 sleeping,   0 stopped,   0 zombie
Cpu(s):  0.9%us,  0.2%sy,  0.0%ni, 98.5%id,  0.3%wa,  0.0%hi,  0.0%si,  0.0%st
Mem:   4056176k total,  3716120k used,   340056k free,   631600k buffers
Swap:   995988k total,    15544k used,   980444k free,  1631236k cached

我尝试了各种各样的事情。我知道拥有高 mac procs 通常不好，但是如果我把它放低，服务器会立即开始抛出 500 错误。

有没有人对尝试调整其他内容以保持网站稳定有任何建议？在单个服务器上支持这种级别的流量是否合理？

lighttpd