Re: Apache clustering w/ load balancing and failover

2003-09-18 Thread Markus Oswald
On Wed, 2003-09-17 at 20:52, Shri Shrikumar wrote:

> Thanks for the response. Let me just clarify. If I have two boxes, I can
> configure both of them to be webservers and one of them to be the lvs
> node. I dont need a third machine to be a dedicated node. Is this
> correct ?

No, I don't think this would work. You'll need a third box which will do
the balancing (well, maybe you could get it to work but it's not
intended this way).

As I said before, the balancer doesn't have to be a fast machine -
almost anything you can find will be sufficient. 

best regards,
  Markus
-- 
Markus Oswald <[EMAIL PROTECTED]>  \ Unix and Network Administration
Graz, AUSTRIA \ High Availability / Cluster
Mobile: +43 676 6485415\ System Consulting
Fax:+43 316 428896  \ Web Development


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Apache clustering w/ load balancing and failover

2003-09-18 Thread Simon McCartney
On Thu, Sep 18, 2003 at 04:46:45PM +0200, Markus Oswald wrote:
> On Wed, 2003-09-17 at 20:52, Shri Shrikumar wrote:
> 
> > Thanks for the response. Let me just clarify. If I have two boxes, I can
> > configure both of them to be webservers and one of them to be the lvs
> > node. I dont need a third machine to be a dedicated node. Is this
> > correct ?
> 
> No, I don't think this would work. You'll need a third box which will do
> the balancing (well, maybe you could get it to work but it's not
> intended this way).
> 
> As I said before, the balancer doesn't have to be a fast machine -
> almost anything you can find will be sufficient. 

Has anybody played with vrrpd for creating a failover pair?

I have a quite a low load, but would like to be able to handle a failure
cleanly, so a pair of machines would do fine.  The only other issue I have
is a lack of external IP space, can you get vrrpd to do it's keep alive
thing via a subinterface on a seperate ip range?

McC

-simonm (E: [EMAIL PROTECTED] W: +44 28 9072 5060 M: +44 7710 836915)
One line sigs are cool. This isn't one of them.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Apache clustering w/ load balancing and failover

2003-09-18 Thread Jason Lim

>
> No, I don't think this would work. You'll need a third box which will do
> the balancing (well, maybe you could get it to work but it's not
> intended this way).
>
> As I said before, the balancer doesn't have to be a fast machine -
> almost anything you can find will be sufficient.
>

Strangely enough, you might find FreeBSD (or one of the BSDs) working
better as the forwarded than Linux, due to it's better ability to handle
many multiple concurrent connections. YMMV of course.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Apache clustering w/ load balancing and failover

2003-09-18 Thread Markus Oswald
On Thu, 2003-09-18 at 17:44, Jason Lim wrote:

> Strangely enough, you might find FreeBSD (or one of the BSDs) working
> better as the forwarded than Linux, due to it's better ability to handle
> many multiple concurrent connections. YMMV of course.

Is the balancer-functionality build into the FreeBSD kernel like LVS?
How does *BSD handle it? Any URL?

best regards,
  Markus
-- 
Markus Oswald <[EMAIL PROTECTED]>  \ Unix and Network Administration
Graz, AUSTRIA \ High Availability / Cluster
Mobile: +43 676 6485415\ System Consulting
Fax:+43 316 428896  \ Web Development


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Web administration Apache - Virtual domains

2003-09-18 Thread Dominik Schulz
Hi Matias,
I'd suggest you have a look at mod_sqlinclude from where you can proceed
to build your own frontend (php+mysql).

I'm currently working on something that's supposed to be a frontend to
apache, exim, spamassassin and proftpd. It's still immature and far from
finished but I could send you the sources (It's basicly php, some bash
scripts a some pieces of C) to have a closer look at it.

I'm very busy at the moment but I'm going to setup a anon-cvs server and
package the whole thing as a debian package - someday ;)

"Matias G. Lambert ( OSInet )" <[EMAIL PROTECTED]> wrote on Tue, 9 Sep 2003 12:10:18 
-0300:
> Hi,  I'm looking for an apache virtual domain web admin tool.
> Does anyone know a open source solution for that?
> And anyone know complete solution for a ISP? ( vpopmail, apache, proftp,
> tinydns )

Mit freundlichen Gruessen / Best regards
Dominik Schulz


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Apache clustering w/ load balancing and failover

2003-09-18 Thread Sébastien Lefebvre


Has anybody played with vrrpd for creating a failover pair?

I have a quite a low load, but would like to be able to handle a failure
cleanly, so a pair of machines would do fine.  The only other issue I have
is a lack of external IP space, can you get vrrpd to do it's keep alive
thing via a subinterface on a seperate ip range?
 

You might want to use keepalived which includes a vrrp implementation.
I'm running it on the clusters I set up :
http://keepalived.sourceforge.net/
I even use it on Netfilter firewalls without any trouble (without the 
LVS support)

Sébastien



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


Re: Exim problem mails stucks in /var/spool/exim/input/

2003-09-18 Thread UnKnown
Thx, for the tip y will be working on it.

Cheers,
rak

On Tue, Sep 16, 2003 at 11:39:45PM -0500, Rod Rodolico wrote:
> On a mail server with any kind of traffic, this directory should have some files in 
> it most of
> the time. There should be a file with a -H at the end that matches the -D. Look in
> /etc/cron.d/exim and see when the incoming messages are processed (standard install 
> is every
> 15 minutes). If I understand correctly, exim is called when an incoming message is 
> received,
> and it puts the message in /var/spool/exim/input. Then, every 15 minutes, another 
> copy is
> started which processes the files and delivers them. So, this directory should have 
> files in
> it most of the time.
> 
> However, if the files stay there for a while, they may be frozen. Try the following:
> 
> exim -bp | grep "*** frozen ***"
> 
> I get a lot of frozen messages on my server and, after looking at them, simply 
> delete them. I
> do this with the following Perl script. THIS SCRIPT DOES NO ERROR CHECKING. Do not 
> use it
> unless you know you want to delete all frozen messages.
> 
> Rod
> 
> #! /usr/bin/perl -w
> `exim -bp | grep "*** frozen ***" > unfreeze.txt`;
> my $badmessages;
> open BADMAIL, " while ( $line =  ) {
>my ( $time, $size, $messagenumber, $sender, $status ) = split( ' ', $line );
>print "Time on queue => $time\tSize=>$size\tMessage #=>$messagenumber\n";
>$badmessages .= ' ' . $messagenumber;
> }
> close BADMAIL;
> `exim -Mrm $badmessages`;
> 1;
> 
> > Hi people,
> > Got some problems here im runing a Debian Woody, the system is up to
> > date and the mail server is exim with amavis and McAfee uvscan antivirus.
> > For some reason that I couldn't find out the mail is beeing stored
> > in the /var/spool/exim/input directory and not deliver to its destinated
> > users on the system. The amavis config has been double check and its ok and
> > the exim it self has no special configuration it is the MX server on the
> > domain and has a couple of secondary names...
> > The problem is that the input dir is fill with file of the tipe
> > 19yvpW-0001Fz-00-D and we try to reproces the queue with exim -fq but with
> > no success.
> > If anyone got a clue of what is happening or can point me to some
> > "good" reading I would be thanks.
> >
> > Cheers,
> > rak
> >
> >
> > --
> > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> >
> >
> 
> 
> -- 
> BRITANNUS(shocked): Caesar, this is not proper.
> THEODOTUS(outraged): How?
> CAESAR (recovering his self-possession): Pardon him, Theodotus: he is a barbarian, 
> and thinks
> that the customs of his tribe and island are the laws of nature.
> Caesar and Cleopatra, Act II
>   --George Bernard Shaw


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



apt-get update failure???

2003-09-18 Thread Dan MacNeil

We've a couple debian systems to patch for the new sshd problems.

On one of them that is monitored closely and patched quickly. The other is
patched less quickly.

The system that is patched less quickly claims to be up to date but nobody
remembers patching it. There are some wierd things about file sizes &
strings on the less closely monitored system. Are we missing something?

apt-get update; apt-get upgrade;
[snip]
0 packages upgraded, 0 newly installed, 0 to remove and 0  not upgraded.


I've looked (quickly) at the man pages, but am a bit short of sleep and
have probably missings some basic answers.

Where are the logs?

Is there a way to force a package update/re-install?

Further some important files have different sizes

# less closely monitored system
-rwxr-xr-x1 root root   230216 Oct 13  2002 /usr/bin/ssh

# more closely monitored system
-rwxr-xr-x1 root root   230248 Sep 16 22:07 /usr/bin/ssh


and different strings:

# less closely monitored
#strings /usr/bin/ssh | grep OpenSSH
 OpenSSH_3.4p1 Debian 1:3.4p1-4
 OpenSSH_3.4p1 Debian 1:3.4p1-4

# more closely monitored
#strings /usr/bin/ssh | grep OpenSSH
 OpenSSH_3.4p1 Debian 1:3.4p1-1.woody.2
 OpenSSH_3.4p1 Debian 1:3.4p1-1.woody.2


# both systems have sources.list as:

deb http://debian.lcs.mit.edu/debian woody main contrib non-free
deb http://http.us.debian.org/debian woody main contrib non-free
deb http://security.debian.org/ woody/updates main contrib non-free
deb http://non-us.debian.org/debian-non-US stable/non-US main contrib non-free


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: apt-get update failure???

2003-09-18 Thread Tarragon Allen
On Friday 19 September 2003 14:04, Dan MacNeil wrote:
> We've a couple debian systems to patch for the new sshd problems.
>
> On one of them that is monitored closely and patched quickly. The other is
> patched less quickly.
>
> The system that is patched less quickly claims to be up to date but nobody
> remembers patching it. There are some wierd things about file sizes &
> strings on the less closely monitored system. Are we missing something?
>
>   apt-get update; apt-get upgrade;
>   [snip]
>   0 packages upgraded, 0 newly installed, 0 to remove and 0  not upgraded.
>
>
> I've looked (quickly) at the man pages, but am a bit short of sleep and
> have probably missings some basic answers.
>
> Where are the logs?
>
> Is there a way to force a package update/re-install?
>
> # both systems have sources.list as:
>
> deb http://debian.lcs.mit.edu/debian woody main contrib non-free
> deb http://http.us.debian.org/debian woody main contrib non-free
> deb http://security.debian.org/ woody/updates main contrib non-free
> deb http://non-us.debian.org/debian-non-US stable/non-US main contrib
> non-free

I'd try hashing out all except the security.debian.org lines , 

apt-get update ; apt-get install ssh

... and see what the outcome is.

Are there any proxy servers involved with your apt access? It may be that the 
Release and Packages.gz is being cached from the older version.

Failing that, you can grab the package manually and "dpkg -i" it, although 
this won't explain why you can't see the updates with apt-get. You might try 
using one of the mirrors and see if you get different results.

As an aside, you can use the --resinstall option with apt-get to force it to 
reinstall a package it already considers up-to-date.

re: logs - I'm not sure that apt-get actually does any logging, aptitude 
writes a log file though.

t
-- 
GPG: http://n12turbo.com/tarragon/public.key


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]