Mana zināšanu grāmata - Recent changes [en]

Main Page

Kaspars — Thu, 16 Apr 2026 08:42:27 GMT

← Older revision		Revision as of 10:42, 16 April 2026
Line 1:		Line 1:
	~~<strong>MediaWiki has been installed.</strong>~~		*[[Joomla\|Joomla]]
			*[[EID_VPN\|eID VPN]]
	~~Consult the~~ [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents User's Guide~~] ~~for information on using the wiki software.~~		*[[Ubuntu\|Ubuntu Servers]]
			*[[Suse\|OpenSUSE servers]]
	~~== Getting started ==~~		*[[Windows\|Windows Servers]]
	* [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Configuration settings list~~]		*[[Mikrotik\|Mikrotik]]
	* [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki FAQ~~]		*[[XenServer\|XenServer]]
	* [~~https://lists.wikimedia.org/postorius/lists/mediawiki-announce.lists.wikimedia.org/ MediaWiki release mailing list~~]		*[[VMWare\|VMWare]]
	* [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Localisation#Translation_resources Localise MediaWiki for your language~~]		*[[MacOS\|MacOS]]
	* [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Combating_spam Learn how to combat spam on your wiki~~]		*[[Zabbix\|Zabbix]]
			*[[Gitlab\|Gitlab]]
			*[[CentOS\|CentOS]]
			*[[Docker\|Docker]]
			*[[Bash_scripting\|Bash Scripting]]

XenServer/XenServer 7.1 instalējamās komandas

Kaspars — Thu, 16 Apr 2026 08:41:34 GMT

Kaspars imported XenServer/XenServer 7.1 instalējamās komandas by file upload (1 revision)

New page

<div class="mw-parser-output">
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">nano /etc/yum.repos.d/CentOS-Base.repo</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">change #baseurl lines of the repo's you want:</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">1) uncomment baseurl line (remove #)</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">2) replace $releasever with 7.2.1511</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">3) change enabled=0 to enabled=1</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">exit</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">yum install epel-release</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">yum install sshfs mc -y</div> </div>

XenServer/xcp-ng server upgrade

Kaspars — Thu, 16 Apr 2026 08:41:34 GMT

Kaspars imported XenServer/xcp-ng server upgrade by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
= XCP-ng 7.5 =

Download xcp-ng.iso on virusstyle.lv server
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cd /tmp</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">wget [https://xcp-ng.org/7.5/xcp-ng-7.5.0.iso Download XCP-ng 7.5 ISO here]</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">mount -o loop -t iso9660 xcp-ng.iso /mnt</div>
 

Ejam uz direktoriju /var/www/html/xcp un izdzēšam visu saturu

Pārkopējam visu no /mnt direktorijas uz /var/www/html/xcp

 

ejam uz XCP-NG servera konsoli
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">xe host-list</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">xe host-call-plugin plugin=prepare_host_upgrade.py host-uuid=750d9176-6468-4a08-8647-77a64c09093e fn=testUrl args:url=http://<ip-address>/xcp/</div>
The returned output must be '''true''' to continue.

Now tell the host to automatically boot to the ISO and upgrade itself on next reboot (using the UUID and URL from before):
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">xe host-call-plugin plugin=prepare_host_upgrade.py host-uuid=750d9176-6468-4a08-8647-77a64c09093e fn=main args:url=http://<ip-address>/xcp/</div>
 

The output should also be '''true'''. It has created a temporary entry in the grub bootloader which will automatically load the upgrade ISO on the next boot. It then automatically runs the XCP-NG upgrade with no user intervention required. It will also backup your existing XenServer dom0 install to the secondary backup partition, just like the normal upgrade.

To start the process, just tell the host to reboot. It is best to watch the progress by using KVM if it’s available, but if not, it should proceed fine and boot into upgraded XCP-NG in 10 to 20 minutes.
</div> </div> </div>

Zabbix

Kaspars — Thu, 16 Apr 2026 08:41:34 GMT

Kaspars imported Zabbix by file upload (1 revision)

New page

== [[Zabbix/Clean_up_Zabbix_database|Clean up Zabbix database]] ==

 

Zabbix/Clean up Zabbix database

Kaspars — Thu, 16 Apr 2026 08:41:34 GMT

Kaspars imported Zabbix/Clean up Zabbix database by file upload (1 revision)

New page

<div class="mw-parser-output">delete FROM alerts;<br/> delete FROM acknowledges;<br/> delete FROM events;<br/> delete FROM history;<br/> delete FROM history_uint ;<br/> delete FROM history_str;<br/> delete FROM history_text;<br/> delete FROM history_log;<br/> delete FROM trends;<br/> delete FROM trends_uint;</div>

Sākumlapa

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Sākumlapa by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
*<span style="font-size:x-large">[[Joomla|Joomla]]</span>

*<span style="font-size:x-large">[[EID_VPN|eID VPN]]</span>

*<span style="font-size:x-large">[[Ubuntu|Ubuntu Servers]]</span>

*<span style="font-size:x-large">[[Suse|OpenSUSE servers]]</span>

*<span style="font-size:x-large">[[Windows|Windows Servers]]</span>

*<span style="font-size:x-large">[[Mikrotik|Mikrotik]]</span>

*<span style="font-size:x-large">[[XenServer|XenServer]]</span>
*<span style="font-size:x-large">[[VMWare|VMWare]]</span>
*<span style="font-size:x-large">[[MacOS|MacOS]]</span>

*<span style="font-size:x-large">[[Zabbix|Zabbix]]</span>

*<span style="font-size:x-large">[[Gitlab|Gitlab]]</span>

*<span style="font-size:x-large">[[CentOS|CentOS]]</span>

*<span style="font-size:x-large">[[Docker|Docker]]</span>

*<span style="font-size:x-large">[[Bash_scripting|Bash Scripting]]</span>
</div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div>

Ubuntu

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
= Ubuntu Servers =

== [[Ubuntu/Sudoers|Sudoers]] ==

== [[Ubuntu/Static_IP_address|Static IP address]] ==

== [[Ubuntu/disable_wlan_if_wired/cable_network_is_available|Disable WLan if Wired/Cable Network is available]] ==

== [[Ubuntu/How_to_Disable_IPv6_on_Ubuntu_16.04_and_Ubuntu_17.04|How to Disable IPv6 on Ubuntu 16.04 and Ubuntu 17.04]] ==

== [[Ubuntu/Clean_BOOT_partition_if_full|Clean BOOT partition if full]] ==

== [[Ubuntu/Update_script|Update script]] ==

== [[Ubuntu/Ubuntu_VirtualHost_batch_script|Ubuntu VirtualHost batch script]] ==

== [[Ubuntu/How_to_upgrade_from_PHP_7.0_to_PHP_7.1|How to upgrade from PHP 7.0 to PHP 7.1]] ==

== [[Ubuntu/Joomlas_uzstādīšana_PHP7_+_Postgresql|Joomlas uzstādīšana PHP7 + Postgresql]] ==

== [[Ubuntu/ElasticSearch_uzstādīšana_uz_Ubuntu_16.04|ElasticSearch uzstādīšana uz Ubuntu 16.04]] ==

== [[Ubuntu/Jenkins_on_Ubuntu_16.10|Jenkins on Ubuntu 16.10]] ==

== [[Ubuntu/Enable_SSL_with_Let's_Encrypt|Enable SSL with Let's Encrypt]] ==

== [[Ubuntu/Samba_Shares|Samba Shares]] ==

== [[Ubuntu/Fail2ban_unban_IP_by_jail_name|Fail2ban unban IP by jail name]]  ==

== [[Ubuntu/direktorijas_izmers|Direktorijas izmērs]] ==

== [[Ubuntu/RoundCube_webmail_force_SSL|RoundCube webmail force SSL]] ==

== [[Ubuntu/Configure_Fail2Ban_for_permanent_and_persistent_bans|Configure Fail2Ban for permanent and persistent bans]] ==

== [[Ubuntu/Automatic_addressbook_plugin_for_ROUNDCUBE|Automatic addressbook plugin for ROUNDCUBE]] ==

== [[Ubuntu/Linux/SSH_Login_Without_Password|Linux/SSH Login Without Password]] ==

== [[Ubuntu/Wildcart_Self-Signed_Cert|Wildcart Self-Signed Cert]] ==

== [[Ubuntu/Change-System_Time|Change System Time]] ==
</div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div>

Ubuntu/Automatic addressbook plugin for ROUNDCUBE

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Automatic addressbook plugin for ROUNDCUBE by file upload (1 revision)

New page

<div class="mw-parser-output"> </div> <div class="mw-parser-output">
Installing automatic addressbook plugin<br/> ---------------------------------------

You need roundcube > 0.4 installed.

automatic_addressbook plugin version 0.2 has been tester against roundcube 0.5 and 0.6.<br/> above versions have been tested against roundcube 0.8.0 and 0.8.1 with larry skin and mysql backend.

Download the latest version archive

1. Uncompress it and move it to the roundcube plugins dir :
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">    tar xvjf automatic_addressbook-latest.tar.bz2<br/>     mv automatic_addressbook <path_to_roundcube>/plugins/</div>
2. Execute the relevant SQL/<db engine>.initial.sql script on your database (process depends on your DB engine)
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Execute the relevant SQL/<db engine>.initial.sql script on your database</div>
    If your Roundcube Database starts with a prefix set the prefix also in the SQL Statement: "REFERENCES `PREFIX_users`(`user_id`)"
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">3. Add "automatic_addressbook" to the plugins list in<br/>    <path_to_roundcube>/config/main.inc.php or <path_to_roundcube>/config/config.inc.php depending on your roundcube version, for example :</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">    $rcmail_config['plugins'] = array('automatic_addressbook',);</div>
It works :)

<br/> Configuration<br/> -------------

You can customize some settings :
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">    copy config/config.inc.php.dist to config/config.inc.php<br/>     edit config/config.inc.php as you fancy</div>
Among others, you can choose if your users will have automatic_addressbook enabled or disabled by default (use_auto_abook option).
</div>

Ubuntu/Change-System Time

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Change-System Time by file upload (1 revision)

New page

<div class="mw-parser-output">docker info</div> <div class="mw-parser-output">docker swarm ca | openssl x509 -noout -text</div> <div class="mw-parser-output">timedatectl</div> <div class="mw-parser-output"> </div> <div class="mw-parser-output">hwclock --set --date="2019-05-01 09:46:00"</div> <div class="mw-parser-output">date --set="2019-05-01"</div> <div class="mw-parser-output">timedatectl set-local-rtc 1 --adjust-system-clock</div> <div class="mw-parser-output">timedatectl</div> <div class="mw-parser-output"> </div> <div class="mw-parser-output"> </div> <div class="mw-parser-output">docker swarm ca --rotate</div>

Ubuntu/Clean BOOT partition if full

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Clean BOOT partition if full by file upload (1 revision)

New page

Ubuntu/Configure Fail2Ban for permanent and persistent bans

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Configure Fail2Ban for permanent and persistent bans by file upload (1 revision)

New page

<div class="mw-parser-output"> </div> <div class="mw-parser-output">
= Configure permanent bans =

----

This is the easiest part. Ban time can be set either globally (ie: for all jails), or per jail. It is controlled through the ‘bantime‘ parameter which defines the number of seconds an IP is banned.

To set a permanent ban, simply set the bantime parameter to a value of -1. Edit the jail.conf file, comment out the existing ‘bantime’ line, and set a new bantime to -1 :

 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># "bantime" is the number of seconds that a host is banned.</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># bantime  = 600</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> </div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Permanent ban</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>bantime = -1</code></div>
 

= Configure persistent bans =

----

In order for bans to persist across a service restart, they obviously have to be saved somewhere. No fancy database required, a simple text file will do the trick.

The principle is simple: every time Fail2Ban sets a new ban on an IP, we’ll save the information « jail name and IP address » in a file along the way. Next, upon each Fail2Ban service start, we’ll load this file a re-create the corresponding bans. All it takes is two lines in the right configuration file.

Each ban action is defined in a corresponding configuration file. Within this file, there’s two parameters we’re interested in:

#actionstart : here we can define a list of commands that will be executed only once at the start of Fail2Ban. So we’ll add a custom command loading the file /etc/fail2ban/persistent.bans and re-create the corresponding iptables entries.
#actionban : here we can defined a list of commands that will be executed when banning an IP. So we’ll add a custom command to save the useful information to the file /etc/fail2ban/persistent.bans.

The default action in Fail2Ban is iptables-multiport (as defined in the file jail.conf), so we have to edit the action.d/iptables-multiport.conffile and add the following highlighted lines:

 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>[Definition]</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> </div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Option:  actionstart</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Notes.:  command executed once at the start of Fail2Ban.</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Values:  CMD</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>#</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>actionstart = iptables -N fail2ban-<name></code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>              </code><code>iptables -A fail2ban-<name> -j RETURN</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>              </code><code>iptables -I <chain> -p <protocol> -m multiport --dports <port> -j fail2ban-<name></code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>          </code><code><span style="background-color:#FFFF00;">cat /etc/fail2ban/persistent.bans | awk '/^fail2ban-<name>/ {print $2}' \</span></code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code><span style="background-color:#FFFF00;">          </span></code><code><span style="background-color:#FFFF00;">| while read IP; do iptables -I fail2ban-<name> 1 -s $IP -j <blocktype>; done</span></code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> </div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Option:  actionstop</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Notes.:  command executed once at the end of Fail2Ban</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Values:  CMD</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>#</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>actionstop = iptables -D <chain> -p <protocol> -m multiport --dports <port> -j fail2ban-<name></code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>             </code><code>iptables -F fail2ban-<name></code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>             </code><code>iptables -X fail2ban-<name></code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> </div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Option:  actioncheck</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Notes.:  command executed once before each actionban command</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Values:  CMD</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>#</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>actioncheck = iptables -n -L <chain> | grep -q 'fail2ban-<name>[ \t]'</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> </div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Option:  actionban</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Notes.:  command executed when banning an IP. Take care that the</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>#          command is executed with Fail2Ban user rights.</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Tags:    See jail.conf(5) man page</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code># Values:  CMD</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>#</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>actionban = iptables -I fail2ban-<name> 1 -s <ip> -j <blocktype></code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>        </code><code><span style="background-color:#FFFF00;">echo "fail2ban-<name> <ip>" >> /etc/fail2ban/persistent.bans</span></code></div>
 

Once done, it is required to restart Fail2Ban in order for those change to be applied.

 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>service fail2ban restart</code></div>
 
</div>

Ubuntu/Enable SSL with Let's Encrypt

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Enable SSL with Let's Encrypt by file upload (1 revision)

New page

<div class="mw-parser-output"> </div> <div class="mw-parser-output"><div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cd /home/username</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo wget [https://dl.eff.org/certbot-auto https://dl.eff.org/certbot-auto] && sudo chmod a+x certbot-auto</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo ./certbot-auto --apache --agree-tos --rsa-key-size''4096''' --email '''user@'''''domain.org''' --redirect -d '''nc.domain.org'''</div>
Where:<br/> <code>--apache</code> uses the Apache plugin to fully setup and integrate with the existing Apache configuration<br/> <code>--agree-tos</code> simply pre-agrees to the TOS, preventing it popping up during installation<br/> <code>--rsa-key-size</code> defines the length (and therefore security) of the RSA key. Default is 2048.<br/> <code>--email</code> is the email address to register against the certificate (used for reminders by Let’s Encrypt)<br/> <code>--redirect</code> will create both the SSL virtualhost configuration file and add a redirect for HTTP traffic to HTTPs (80 to 443)<br/> <code>-d</code> is the domain to secure

 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo crontab -e</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">0 0 * * 0 '''/home/username/'''certbot-auto renew</div> </div>

Ubuntu/Fail2ban unban IP by jail name

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Fail2ban unban IP by jail name by file upload (1 revision)

New page

<div class="mw-parser-output"> </div> <div class="mw-parser-output" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">fail2ban-client set JAILNAMEHERE unbanip IPADDRESSHERE</div>

Ubuntu/How to Disable IPv6 on Ubuntu 16.04 and Ubuntu 17.04

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/How to Disable IPv6 on Ubuntu 16.04 and Ubuntu 17.04 by file upload (1 revision)

New page

<div class="mw-parser-output"><div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">nano /etc/sysctl.conf</div>
faila beigās pievienojam:
<pre>net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1" | sudo tee /etc/sysctl.d/99-my-disable-ipv6.conf</pre>
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">service procps reload</div> <pre>cat /proc/sys/net/ipv6/conf/all/disable_ipv6</pre>

 

Ja parādās 1, tad IPV6 ir atslēgts, savādāk parādīsies 0
</div>

Ubuntu/How to upgrade from PHP 7.0 to PHP 7.1

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/How to upgrade from PHP 7.0 to PHP 7.1 by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
== '''Install PHP 7.1''' ==

Lets stop our server first, then install PHP 7.1.
<div style="background:#eee; border:1px solid #ccc; padding:5px 10px">$ service apache2 stop<br/> $ sudo apt-get install php7 php7.1</div>
We'll also install some extra packages for our PHP installation - these are needed for Laravel and Composer!
<div style="background:#eee; border:1px solid #ccc; padding:5px 10px">$ sudo apt-get install php7.1-curl php7.1-xml php7.1-zip php7.1-gd php7.1-mysql php7.1-mbstring</div>
Once that is done, lets check PHP is updated on the CLI
<div style="background:#eee; border:1px solid #ccc; padding:5px 10px">$ php -v</div>
If the first row looks like this, we've done good so far!<span> </span>'''PHP 7.1.11-1+ubuntu16.04.1+deb.sury.org+1 (cli) (built: Oct 27 2017 13:49:56) ( NTS )'''

== '''Remove PHP 7.0''' ==

Now we have PHP7.1, lets get rid of PHP7.0
<div style="background:#eee; border:1px solid #ccc; padding:5px 10px">$ sudo apt-get purge php7.0 php7.0-common</div>
== '''Make PHP7.1 used by Apache''' ==

Finally, we need to tell Apache to use PHP7.1 now PHP 7.0 is not being used. Lets enable the PHP mod!
<div style="background:#eee; border:1px solid #ccc; padding:5px 10px">$ a2enmod php7.1<br/> $ service apache2 restart</div>
 
</div> </div> </div> </div> </div>

Ubuntu/Linux/SSH Login Without Password

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Linux/SSH Login Without Password by file upload (1 revision)

New page

<div class="mw-parser-output"> </div> <div class="mw-parser-output"> </div>

<div class="mw-parser-output">
=== Step 1: Create public and private keys using ssh-key-gen on local-host ===
<div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">jsmith@local-host$ <span style="color:#FF0000;">[Note: You are on local-host here]</span></div> <div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> jsmith@local-host$ '''ssh-keygen'''<br/> Generating public/private rsa key pair.<br/> Enter file in which to save the key (/home/jsmith/.ssh/id_rsa): <span style="color:#FF0000;">[Enter key]</span><br/> Enter passphrase (empty for no passphrase): <span style="color:#FF0000;">[Press enter key]</span><br/>     Enter same passphrase again: <span style="color:#FF0000;">[Pess enter key]</span><br/> Your identification has been saved in /home/jsmith/.ssh/id_rsa.<br/>   Your public key has been saved in /home/jsmith/.ssh/id_rsa.pub.<br/> The key fingerprint is:<br/> 33:b3:fe:af:95:95:18:11:31:d5:de:96:2f:f2:35:f9  jsmith@local-host</div>
 
</div>

<div class="mw-parser-output">
=== Step 2: Copy the public key to remote-host using ssh-copy-id ===
<div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">jsmith@local-host$ '''ssh-copy-id -i ~/.ssh/id_rsa.pub remote-host'''<br/> jsmith@remote-host's password:<br/> Now try logging into the machine, with "ssh  'remote-host'", and check in:</div> <div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">.ssh/authorized_keys</div> <div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">to make sure we haven't added extra keys that you weren't expecting.</pre></div> <div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">'''Note:''' ssh-copy-id '''appends''' the keys to the remote-host’s .ssh/authorized_key.</div> </div>

<div class="mw-parser-output">
<div class="mw-parser-output"><div class="mw-parser-output">
=== Step 3: Login to remote-host without entering the password ===
<div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">jsmith@local-host$ '''ssh remote-host'''<br/> Last login: Sun Nov 16 17:22:33 2008 from 192.168.1.2<br/> <span style="color:#FF0000;">[Note: SSH did not ask for password.]</span></div> <div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">jsmith@remote-host$ <span style="color:#FF0000;">[Note: You are on remote-host here]</span></div> <div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">jsmith@local-host$ '''ssh-copy-id -i remote-host'''<br/> jsmith@remote-host's password:<br/> Now try logging into the machine, with "ssh 'remote-host'", and check in:<br/> .ssh/authorized_keys</div> <div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">to make sure we haven't added extra keys that you weren't expecting.<br/> <span style="color:#FF0000;">[Note: This has added the key displayed by ssh-add -L]</span></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Step 4: Fire up a text editor and point it to this file:</div> <div class="_" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">~/.ssh/config</div> </div>
[[File:Config-file.png]]
</div>

Ubuntu/RoundCube webmail force SSL

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/RoundCube webmail force SSL by file upload (1 revision)

New page

<div class="mw-parser-output">
== METHOD 1: ==

This method is the most recommended and it applies to any Linux distribution using both Apache or Nginx.

All you have to do is to go to directory were roundcube is located >> config and edit file '''defaults.inc.php'''

Assuming that roundcube is installed in '''/var/www/roundcube''', you will have this command: '''sudo vi /var/www/roundcube/defaults.ing.php'''

Now look for the following two lines and change from:

{| border="0" cellpadding="0" cellspacing="0"
|-
| <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>$config[</code><code>'use_https'</code><code>] = </code><code>false</code><code>;</code></div>
|}

to

{| border="0" cellpadding="0" cellspacing="0"
|-
| <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>$config[</code><code>'use_https'</code><code>] = </code><code>true</code><code>;</code></div>
|}

This method is the easiest and should work. However '''if it is not working''' (like in my case) you may want to try another approach. Please read bellow:

== METHOD2 ==

All what we do using this method is to redirect any HTTP traffic to our webmail to HTTPS directly from Apache web server! Please note that it works only if your server is powered by Apache!

This is possible to do this directly from apache '''.conf''' file, but we will do it a little bit simple using an .htaccess file.

All you have to do is to '''create a .htaccess''' file with the following content:

{| border="0" cellpadding="0" cellspacing="0"
|-
| <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code><IfModule mod_rewrite.c></code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>   </code><code>RewriteEngine On</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>   </code><code>RewriteCond %{HTTPS} !=on</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>   </code><code>RewriteRule ^(.*)$ https:</code><code>//</code><code>%{HTTP_HOST}/$1 [R=301,L]</code></div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code><</code><code>/IfModule</code><code>></code></div>
|}

and place it on the root of roundcube directory, where php files are located. This will force any incoming request to use HTTPS instead of HTTP.

That’s all, now you can read your emails a little bit more safe!
</div>

Ubuntu/Static IP address

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Static IP address by file upload (1 revision)

New page

<div class="mw-parser-output"><pre># This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# test

# The primary network interface
auto ens33
iface ens33 inet static
address 192.168.1.100
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.1
dns-nameservers 8.8.8.8 8.8.4.4</pre>
</div>

Ubuntu/Sudoers

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Sudoers by file upload (1 revision)

New page

<div class="mw-parser-output" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo bash -c 'echo "$(logname) ALL=(ALL:ALL) NOPASSWD: ALL" | (EDITOR="tee -a" visudo)'</div>

Ubuntu/Ubuntu VirtualHost batch script

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Ubuntu VirtualHost batch script by file upload (1 revision)

New page

<div class="mw-parser-output"> </div> <div class="mw-parser-output"><div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">nano /opt/createVirtualHost.sh<br/> chmod a+x /opt/createVirtualHost.sh </div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">#!/bin/bash<br/> read -p "Please enter sitename: " SITENAME<br/> mkdir /var/www/$SITENAME/ /var/www/$SITENAME/htdocs/ /var/www/$SITENAME/logs/<br/> cat > /var/www/$SITENAME/htdocs/index.html <<- _EOF_<br/> <HTML><br/> <HEAD><br/>   <TITLE>$SITENAME</TITLE><br/> </HEAD><br/> <BODY><br/>   $SITENAME<br/> </BODY><br/> </HTML><br/> _EOF_<br/> cat > /etc/apache2/sites-available/$SITENAME.conf <<- _EOF_<br/> <VirtualHost *:80><br/>       ServerAdmin administrator@$SITENAME<br/>       ServerName  $SITENAME<br/>       #ServerAlias www.$SITENAME<br/>       DocumentRoot /var/www/$SITENAME/htdocs/<br/>       <Directory /><br/>               Options +FollowSymLinks<br/>               AllowOverride All<br/>       </Directory><br/>       <Directory /var/www/$SITENAME/htdocs><br/>               Options +Indexes +FollowSymLinks +MultiViews<br/>               AllowOverride All<br/>               Order allow,deny<br/>               allow from all<br/>       </Directory><br/>       ScriptAlias /cgi-bin/ /var/www/$SITENAME/cgi-bin/<br/>       <Directory "/var/www/$SITENAME/cgi-bin"><br/>               AllowOverride None<br/>               Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch<br/>               Order allow,deny<br/>               Allow from all<br/>       </Directory><br/>       ErrorLog /var/www/$SITENAME/logs/error.log<br/>       # Possible values include: debug, info, notice, warn, error, crit,<br/>       # alert, emerg.<br/>       LogLevel warn<br/>       CustomLog /var/www/$SITENAME/logs/access.log combined<br/>       ServerSignature On<br/>   Alias /doc/ "/usr/share/doc/"<br/>   <Directory "/usr/share/doc/"><br/>       Options +Indexes +MultiViews +FollowSymLinks<br/>       AllowOverride None<br/>       Order deny,allow<br/>       Deny from all<br/>       Allow from 127.0.0.0/255.0.0.0 ::1/128<br/>   </Directory><br/> </VirtualHost><br/> _EOF_<br/> chown -R www-data:www-data /var/www/$SITENAME<br/> chmod -R 775 /var/www/$SITENAME</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">a2ensite $SITENAME.conf<br/> service apache2 reload</div> </div>

Ubuntu/Update script

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Update script by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">nano /opt/update.sh</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cat > /opt/update.sh <<EOL</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">#!/bin/bash</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo find /var/log -type f -name '*.[0-99].gz' -exec rm {} +</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo apt-get update && sudo apt-get dist-upgrade -y && sudo apt-get autoremove -y</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">if [ -f /var/run/reboot-required ]; then</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">  reboot</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">fi</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">EOL</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">chmod a+x /opt/update.sh</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">crontab -e</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><pre>0 1 * * * /opt/update.sh > /dev/null 2>&1</pre>
</div> </div> </div> </div> </div> </div> </div> </div> </div> </div>

Ubuntu/Wildcart Self-Signed Cert

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/Wildcart Self-Signed Cert by file upload (1 revision)

New page

<div class="mw-parser-output"> </div> <div class="mw-parser-output">
''just change out app_name for your purposes''
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">openssl genrsa 2048 > app_name-wildcard.key</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">openssl req -new -x509 -nodes -sha1 -days 3650 -key app_name-wildcard.key > app_name-wildcard.cert</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"># Common Name (eg, your name or your server's hostname) []:*.app_name.com</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">openssl x509 -noout -fingerprint -text < app_name-wildcard.cert > app_name-wildcard.info</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cat app_name-wildcard.cert app_name-wildcard.key > app_name-wildcard.pem</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">chmod 644 app_name-wildcard.key app_name-wildcard.pem</div>
''example nginx conf below''
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"># SSL</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">server {<br/>   listen 443;<br/> server_name *.app_name.com;</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> ssl                  on;<br/> ssl_certificate      /etc/nginx/ssl/app_name-wildcard.pem;<br/> ssl_certificate_key  /etc/nginx/ssl/app_name-wildcard.key;<br/> ssl_session_timeout  5m;</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">}</div> </div>

Ubuntu/direktorijas izmers

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/direktorijas izmers by file upload (1 revision)

New page

Ubuntu/disable wlan if wired/cable network is available

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Ubuntu/disable wlan if wired/cable network is available by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo nano /etc/NetworkManager/dispatcher.d/99-wlan</div> </div> </div>
 
<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">#!/bin/bash</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">eth0_status=$(cat /sys/class/net/eth0/operstate)<br/> enp0_status=$(cat /sys/class/net/enp0s31f6/operstate)<br/> wlan0_status=$(cat /sys/class/net/wlp2s0/operstate)</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">if [[ "$eth0_status" = "up" ]];<br/>     then<br/>         nmcli radio wifi off</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">elif [[ "$enp0_status" = "up" ]];<br/>     then<br/>         nmcli radio wifi off</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">#elif [[ "$wlan0_status" = "down" ]] && [[ "$eth0_status" = "down" ]] && [["$enp0_status" = "down"]];<br/> #    then<br/> else<br/>         nmcli radio wifi on<br/> fi<br/>  </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div>

VMWare

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported VMWare by file upload (1 revision)

New page

<div class="mw-parser-output">
== [[VMWare/Resize_LVM_disk_after_extending_Virtual_Machine_disk_(vmdk)|Resize LVM disk after extending Virtual Machine disk (vmdk)]] ==
</div>

VMWare/Resize LVM disk after extending Virtual Machine disk (vmdk)

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported VMWare/Resize LVM disk after extending Virtual Machine disk (vmdk) by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"> </div> <div class="mw-parser-output">
Follow these simple steps to resize a Virtual machine disk (vmdk) and then extend the volume using LVM. '''Make sure that you have/make a backup before carrying out these steps'''. First go ahead and extend the vmdk from ESXi/vCenter. I increased the disk size from '''20GB-->>30GB.'''

'''Before'''

[[File:Vmdk resize 8.png]]

'''After'''

[[File:Vmdk resize 9.png]]

Then Go ahead and run these commands to extend the LVM volume on Linux host.

First check the existing partitions
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">lsblk</div>
[[File:Vmdk resize 1.png]]

'''Note:''' If new size is not visible, Run a re-scan of iscsi bus
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ls /sys/class/scsi_disk/</div>
[[File:Vmdk resize 2.png]]
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">echo "1" > /sys/class/scsi_disk/2:0:2:0/device/rescan</div>
[[File:Vmdk resize 3.png]]

'''Note:''' as it’s the 2nd disk = sdb, scan the 2nd entry

'''Now resize the physical volume'''
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pvresize /dev/sdb</div>
[[File:Vmdk resize 4.png]]

Check the FREE PE '''(Physical Extents)'''
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pvdisplay</div>
[[File:Vmdk resize 5.png]]

Take a note of the PE and use it to extend the partition. I want to extend the var_lv as displayed below.
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">df -h | grep var</div>
[[File:Vmdk resize 6.png]]

Now extend
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">lvextend -l +2560 /dev/mapper/VolGroup01-var_lv</div>
(OR)
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">lvextend -L+1GB /dev/mapper/VolGroup01-var_lv '''(For specific size extension)'''</div>
And then resize the partition (using FRE PE).
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">resize2fs /dev/mapper/VolGroup01-var_lv</div>
And that’s it you should up and running with the extra space with no downtime required or data loss as its LVM.

[[File:Vmdk resize 7.png]]
</div> </div> </div>

Windows

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Windows by file upload (1 revision)

New page

== [[Windows/ad_used_firewall_ports|AD Used FireWall Ports]] ==

Windows/ad used firewall ports

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported Windows/ad used firewall ports by file upload (1 revision)

New page

<div class="mw-parser-output">
= Here’s the list with an explanation of each port: =

 

{| border="0" cellpadding="0" cellspacing="0" width="886"
|-
| height="61" width="217" |
<font face="Calibri" size="3">Protocol and Port</font>

| width="523" | <font face="Calibri" size="3">AD and AD DS Usage</font>
| width="146" | <font face="Calibri"><font size="3">Type of traffic</font><font>  </font></font>
|-
| height="22" width="217" | <font>TCP 25</font>
| width="523" | <font>Replication</font>
| width="146" | <font>SMTP</font>
|-
| height="64" width="217" | <font>TCP 42</font>
| width="523" | <font>If using WINS in a domain trust scenario offering NetBIOS resolution</font>
| width="146" | <font>WINS</font>
|-
| height="22" width="217" | <font>TCP 135</font>
| width="523" | <font>Replication</font>
| width="146" | <font>RPC, EPM</font>
|-
| height="43" width="217" | <font>TCP 137</font>
| width="523" | <font>NetBIOS Name resolution</font>
| width="146" | <font>NetBIOS Name resolution</font>
|-
| height="43" width="217" | <font>TCP 139</font>
| width="523" | <font>User and Computer Authentication, Replication</font>
| width="146" | <font>DFSN, NetBIOS Session Service, NetLogon</font>
|-
| height="64" width="217" | <font>TCP and UDP 389</font>
| width="523" | <font>Directory, Replication, User and Computer Authentication, Group Policy, Trusts</font>
| width="146" | <font>LDAP</font>
|-
| height="64" width="217" | <font>TCP 636</font>
| width="523" | <font>Directory, Replication, User and Computer Authentication, Group Policy, Trusts</font>
| width="146" | <font>LDAP SSL</font>
|-
| height="64" width="217" | <font>TCP 3268</font>
| width="523" | <font>Directory, Replication, User and Computer Authentication, Group Policy, Trusts</font>
| width="146" | <font>LDAP GC</font>
|-
| height="64" width="217" | <font>TCP 3269</font>
| width="523" | <font>Directory, Replication, User and Computer Authentication, Group Policy, Trusts</font>
| width="146" | <font>LDAP GC SSL</font>
|-
| height="64" width="217" | <font>TCP and UDP 88</font>
| width="523" | <font>User and Computer Authentication, Forest Level Trusts</font>
| width="146" | <font>Kerberos</font>
|-
| height="64" width="217" | <font>TCP and UDP 53</font>
| width="523" | <font>User and Computer Authentication, Name Resolution, Trusts</font>
| width="146" | <font>DNS</font>
|-
| height="85" width="217" | <font>TCP and UDP 445</font>
| width="523" | <font>Replication, User and Computer Authentication, Group Policy, Trusts</font>
| width="146" | <font>SMB, CIFS, SMB2, DFSN, LSARPC, NbtSS, NetLogonR, SamR, SrvSvc</font>
|-
| height="22" width="217" | <font>TCP 9389</font>
| width="523" | <font>AD DS Web Services</font>
| width="146" | <font>SOAP</font>
|-
| height="22" width="217" | <font>TCP 5722</font>
| width="523" | <font>File Replication</font>
| width="146" | <font>RPC, DFSR (SYSVOL)</font>
|-
| height="64" width="217" | <font>TCP and UDP 464</font>
| width="523" | <font>Replication, User and Computer Authentication, Trusts</font>
| width="146" | <font>Kerberos change/set password</font>
|-
| height="22" width="217" | <font> </font>
| width="523" | <font> </font>
| width="146" | <font> </font>
|-
| height="22" width="217" | <font>UDP 123</font>
| width="523" | <font>Windows Time, Trusts</font>
| width="146" | <font>Windows Time</font>
|-
| height="43" width="217" | <font>UDP 137</font><font> </font>
| width="523" | <font>User and Computer Authentication</font>
| width="146" | <font>NetLogon, NetBIOS Name Resolution</font>
|-
| height="64" width="217" | <font>UDP 138</font>
| width="523" | <font>DFS, Group Policy, NetBIOS Netlogon, Browsing</font>
| width="146" | <font>DFSN, NetLogon, NetBIOS Datagram Service</font>
|-
| height="106" width="217" | <font>UDP 67 and UDP 2535</font>
| width="523" | <font>DHCP (Note: DHCP is not a core AD DS service but these ports may be necessary for other functions besides DHCP, such as WDS)</font>
| width="146" | <font>DHCP, MADCAP, PXE</font><br/>  
|}

 
</div>
<div class="mw-parser-output">
= The Short list without port explanations: =

 

{| border="0" cellpadding="0" cellspacing="0" width="389"
|-
| height="22" width="160" | <font>Protocol</font>
| width="228" | <font>Port</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>25</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>42</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>135</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>137</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>139</font>
|-
| height="22" width="160" | <font>TCP and UDP</font>
| width="228" | <font>389</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>636</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>3268</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>3269</font>
|-
| height="22" width="160" | <font>TCP and UDP</font>
| width="228" | <font>88</font>
|-
| height="22" width="160" | <font>TCP and UDP</font>
| width="228" | <font>53</font>
|-
| height="22" width="160" | <font>TCP and UDP</font>
| width="228" | <font>445</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>9389</font>
|-
| height="22" width="160" | <font>TCP</font>
| width="228" | <font>5722</font>
|-
| height="22" width="160" | <font>TCP and UDP</font>
| width="228" | <font>464</font>
|-
| height="22" width="160" | <font>UDP</font>
| width="228" | <font>123</font>
|-
| height="22" width="160" | <font>UDP</font>
| width="228" | <font>137</font>
|-
| height="22" width="160" | <font>UDP</font>
| width="228" | <font>138</font>
|-
| height="22" width="160" | <font>UDP</font>
| width="228" | <font>67</font>
|-
| height="22" width="160" | <font>UDP</font>
| width="228" | <font>2535</font>
|-
| height="22" width="160" | <font>TCP & UDP</font>
| width="228" | <font>1024-5000</font>
|-
| height="22" width="160" | <font>TCP & UDP</font>
| width="228" |
<font>49152-65535</font>

|}

 

  </div> </div>
</div>

XenServer

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported XenServer by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
== [[XenServer/XenServer_7.1_instalējamās_komandas|XenServer 7.1 instalējamās komandas]] ==

== [[XenServer/xcp-ng_server_upgrade|XCP-NG Server upgrade from terminal]] ==

== [[XenServer/Local_ISO_Storage|Local ISO Storage]] ==

== [[XenServer/BACKUP_uz_montējamo_disku|BACKUP uz montējamo disku]] ==

== [[XenServer/How_to_Add_a_Storage_Repository_on_XenServer|How to Add a Storage Repository on XenServer]] ==

== [[XenServer/How_to_Remove_a_Storage_Repository_from_XenServer|How to Remove a Storage Repository from XenServer]] ==

== [[XenServer/Xenserver_7_-_SATA_passthrough_to_VM|Xenserver 7 - SATA passthrough to VM]] ==

== [[XenServer/How_to_Manually_Import_Virtual_Machines_to_Xenserver_Storage_Repository|How to Manually Import Virtual Machines to Xenserver Storage Repository]] ==

== [[XenServer/Xenserver_6.5_SP1_to_7.0_xe-guest_utilities_issue|Xenserver 6.5 SP1 to 7.0 xe-guest utilities issue]] ==

== [[XenServer/Decreasing_XenServer_Virtual_Disk_size|Decreasing XenServer Virtual Disk size]] ==

== [[XenServer/Palielināt_VM_LVM_partīcijas_izmēru|Palielināt VM LVM partīcijas izmēru]] ==

== [[XenServer/How_to_Introduce_a_Local_Storage_Repository_in_XenServer|How to Introduce a Local Storage Repository in XenServer]] ==

== [[XenServer/Linux_Virtual_Machines_are_Unable_to_Boot_from_DVD_on_XenServer|Linux Virtual Machines are Unable to Boot from DVD on XenServer]] ==
</div> </div> </div>

XenServer/Linux Virtual Machines are Unable to Boot from DVD on XenServer

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported XenServer/Linux Virtual Machines are Unable to Boot from DVD on XenServer by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output">
== Symptoms or Error ==

On XenServer, a user can run both Linux and Windows virtual machines, and like physical machines, it can be set to boot from various sources. However, when a Linux virtual machine is set to boot from DVD, it can fail with the following error message:

[[File:RtaImage-2.jpeg]]

== Solution ==

To allow the Linux virtual machine to boot from DVD, set the virtual machine to start in '''Recovery Mode''', as shown in the following screen shot:

[[File:RtaImage.jpeg]]

== Problem Cause ==

Unlike Microsoft Windows, which uses device drivers for paravirtualization, Linux virtual machines have a paravirtualized kernel. During the installation of Linux, it is actually running as a Hardware-Assisted Virtual Machine (HVM) and has access to DVD just like Windows.<br/> When the Linux installation is complete, a Xen kernel is swapped in. However, as the paravirtualization is kernel based, this causes issues with accessing the DVD on boot, as the kernel is not loaded.
</div> </div>

XenServer/Local ISO Storage

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported XenServer/Local ISO Storage by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output">
== Create a store directory ==
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">mkdir -p /var/opt/xen/ISO</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">xe sr-create name-label=LocalISO type=iso device-config:location=/var/opt/xen/ISO device-config:legacy_mode=true content-type=iso</div> </div> </div>

XenServer/Palielināt VM LVM partīcijas izmēru

Kaspars — Thu, 16 Apr 2026 08:41:33 GMT

Kaspars imported XenServer/Palielināt VM LVM partīcijas izmēru by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">df -h</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">lvs</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">lvextend -L+10G /dev/mapper/vg-lvroot</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">resize2fs /dev/mapper/vg-lvroot</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">df -h</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">This should be relatively easy, since you're using LVM:</div>
#<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">First, as always, take a backup. </div>
#<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Resize the disk in Xen (you've already done this; despite this, please re-read step 1). </div>
#<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Use parted to resize the extended partition (<code>xvda2</code>); run <code>parted /dev/xvda</code>, then at the parted prompt <code>resizepart 2 -1s</code> to resize it to end at the end of the disk (BTW: <code>quit</code> will get out of parted). </div>
#<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> </div>
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">'''Either''' (a) create another logical partition (<code>xvda6</code>) with the free space, then:</div>
#
##<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">reboot to pick up the partition table changes </div>
##<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>pvcreate /dev/xvda6</code></div>
##<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>vgextend xenhosting-vg /dev/xvda6</code></div>
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">'''or''' (b) </div>
#
##<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">extend xvda5 using <code>resizepart 5 -1s</code></div>
##<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">reboot to pick up the partition table changes </div>
##<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><code>pvresize /dev/xvda5</code></div>
#<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> </div>
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Finally, if you want to add that to your root filesystem, <code>lvextend -r -l +100%FREE /dev/xenhosting-vg/root</code>. The <code>-r</code> option to <code>lvextend</code> tells it to call <code>resize2fs</code> itself.</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"> </div>
 
</div> </div> </div>

Docker/Infrastruktūras dokumentācija un receptes

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Docker/Infrastruktūras dokumentācija un receptes by file upload (1 revision)

Show changes

Docker/Joomla + MySql + phpMyAdmin in Docker

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Docker/Joomla + MySql + phpMyAdmin in Docker by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"> </div> <div class="mw-parser-output">
Ok. I’m a novice of Docker, so probably exists better ways for run Joomla + MySql + phpMyAdmin on Docker, I dont know, but for now this is my way:

=== MYSQL ===

First step open the terminal and download MySql Docker Image:

 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">docker pull mysql</div>
 

After we can start our instance, we will named it test-mysql, root as user and 12345678 as password.

After we must to create a “volumes”, a local folder from the host on the container to store the database files.

 
<div id="d489" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">docker run --name test-mysql -e MYSQL_ROOT_PASSWORD=12345678 -d mysql</div>
 

By default, our mysql should be run on port 3306.

=== phpMyAdmin ===

Download phpMyAdmin Docker Image

 
<div id="7165" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">docker pull phpmyadmin/phpmyadmin</div>
 

Now we start the instance, naming it test-phpmyadmin and link it to the database mysql test-mysql that we have created before, and run it on the port 8084.

 
<div id="9704" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">docker run --name test-phpmyadmin -d --link test-mysql:db -p 8084:80 phpmyadmin/phpmyadmin</div>
 

Now, if we connect with our browser at the address [http://localhost:8084/ http://localhost:8084] we should have phpMyAdmin login page, and we can access with username: root and password: 12345678 

=== Joomla ===

Ok, now it’s the turn of Joomla, as already done before, we must download the image:

 
<div id="92e8" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">docker pull joomla</div>
 

Now we start the instance on the port 8080 with the name of test-joomla, link it at the database and create a volumes.

 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">docker run --name test-joomla --link test-mysql:db -e JOOMLA_DB_HOST=db:3306 -e JOOMLA_DB_USER=root -e JOOMLA_DB_PASSWORD=12345678 -p 80:80 -d joomla</div>
 

if it’s all correct, at the address [http://localhost/ http://localhost] we should find our joomla installation.

 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">dbhost = test-mysql</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">dbuser=root</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">dbpassword=12345678</div> </div> </div>

EID VPN

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported EID VPN by file upload (1 revision)

New page

EID VPN/eID VPN

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported EID VPN/eID VPN by file upload (1 revision)

New page

<div class="mw-parser-output">
= Ubuntu 20.04 =

<div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output">

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output">
<div class="mw-parser-output"><div class="mw-parser-output">
<div class="mw-parser-output"><div class="mw-parser-output">
<div class="mw-parser-output">
= Centos 7 =
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">yum install nss-tools nss-pam-ldapd esc pam_pkcs11 pam_krb5 opensc pcsc-lite-ccid authconfig authconfig-gtk krb5-libs krb5-workstation krb5-pkinit pcsc-lite pcsc-lite-libs gnutls-utils gnutls-devel openconnect</div>
Uzinstalēt latvia-eid-middleware paku<br/> pārsaukt /opt/latvian-eid par /opt/latvian-eid.bak

Atspiest latvia-eid arhīvu un pārkopēt uz /opt direktoriju

pārliecināties, vai ir fails /opt/latvia-eid/lib/eidlv-pkcs11.so
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ls -la /opt/latvia-eid/lib/eidlv-pkcs11.so</div>
pārliecināties, vai ir /usr/lib64/eidlv-pkcs11.so fails, ja nav, tad izveidot symlink
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ln -s /opt/latvia-eid/lib/eidlv-pkcs11.so /usr/lib64/eidlv-pkcs11.so</div>
Izveidot pkcs11 moduļi
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cp /usr/share/p11-kit/modules/opensc.module /etc/pkcs11/modules/opensc.module<br/> echo "module:/usr/lib64/eidlv-pkcs11.so" > /etc/pkcs11/modules/opensc.module</div>
pārbaude
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pcsc_scan</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):<br/> 3B DD 18 00 81 31 FE 45 90 4C 41 54 56 49 41 2D 65 49 44 90 00 8C<br/>     Identity card (eID) Republic of Latvia<br/>     [http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html]</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-tokens</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Token 2:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/>     Label: User PIN (LATVIA ID)<br/>     Type: Hardware token<br/>     Flags: RNG, Requires login<br/>     Manufacturer: Oberthur Technologies<br/>     Model: PKCS#15<br/>     Serial: 010011761431013F<br/>     Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><br/> Token 3:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29<br/>     Label: Signature PIN (LATVIA ID)<br/>     Type: Hardware token<br/>     Flags: RNG, Requires login<br/>     Manufacturer: Oberthur Technologies<br/>     Model: PKCS#15<br/>     Serial: 010011761431013F<br/>     Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">warning: no token URL was provided for this operation; the available tokens are:</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust<br/> pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=Default%20Trust<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29</div>
Izmanto iegūto certifikātu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs 'pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29'</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Object 0:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert<br/>     Type: X.509 Certificate (RSA-2048)<br/>     Expires: Sun Jun 20 05:02:52 2021<br/>     Label: Authentication certificate<br/>     ID: a7:82:78:84:61:ce:53:39:0e:e2:34:45:6e:4a:01:bf:c6:ad:49:a1<br/>  </div>
Atrast atrašanās vietu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">find / -name "hipreport.sh"</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/usr/libexec/openconnect/hipreport.sh</div>
Atspiest magic.zip, kur saturā ir lvrtc root sertifikāts eid kartei un novietot ~/magic.pem
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">unzip magic.zip && mv magic.pem ~/magic.pem</div>
Izpildīt komandu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo openconnect -v --dump-http-traffic --user="KASPARS BŪCENS" -c \<br/> "pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert" \<br/> --protocol=gp \<br/> --os=win \<br/> --csd-wrapper="/usr/libexec/openconnect/hipreport.sh" \<br/> --cafile="/home/kasparsb/Documents/magic.pem" \<br/> vpn1.eveseliba.gov.lv</div>
 

[[:File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86_641.rpm|File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86 641.rpm]]<br/> [[:File:latvia-eid.zip|File:latvia-eid.zip]]<br/> [[:File:magic.zip|File:magic.zip]] </div> </div>
<div class="mw-parser-output"><div class="mw-parser-output"> </div> </div> </div>

<div class="mw-parser-output">
= CentOS 8 =
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">yum install nss-tools nss-pam-ldapd esc opensc pcsc-lite-ccid authconfig krb5-libs krb5-workstation krb5-pkinit pcsc-lite pcsc-lite-libs gnutls-utils gnutls-devel openconnect</div>
Uzinstalēt latvia-eid-middleware paku<br/> pārsaukt /opt/latvian-eid par /opt/latvian-eid.bak

Atspiest latvia-eid arhīvu un pārkopēt uz /opt direktoriju

pārliecināties, vai ir fails /opt/latvia-eid/lib/eidlv-pkcs11.so
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ls -la /opt/latvia-eid/lib/eidlv-pkcs11.so</div>
pārliecināties, vai ir /usr/lib64/eidlv-pkcs11.so fails, ja nav, tad izveidot symlink
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">ln -s /opt/latvia-eid/lib/eidlv-pkcs11.so /usr/lib64/eidlv-pkcs11.so</div>
Izveidot pkcs11 moduļi
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">cp /usr/share/p11-kit/modules/opensc.module /etc/pkcs11/modules/opensc.module<br/> echo "module:/usr/lib64/eidlv-pkcs11.so" > /etc/pkcs11/modules/opensc.module</div>
pārbaude
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pcsc_scan</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):<br/> 3B DD 18 00 81 31 FE 45 90 4C 41 54 56 49 41 2D 65 49 44 90 00 8C<br/>     Identity card (eID) Republic of Latvia<br/>     [http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html http://www.pmlp.gov.lv/lv/pakalpojumi/passes/eid.html]</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-tokens</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Token 2:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/>     Label: User PIN (LATVIA ID)<br/>     Type: Hardware token<br/>     Flags: RNG, Requires login<br/>     Manufacturer: Oberthur Technologies<br/>     Model: PKCS#15<br/>     Serial: 010011761431013F<br/>     Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"><br/> Token 3:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29<br/>     Label: Signature PIN (LATVIA ID)<br/>     Type: Hardware token<br/>     Flags: RNG, Requires login<br/>     Manufacturer: Oberthur Technologies<br/>     Model: PKCS#15<br/>     Serial: 010011761431013F<br/>     Module: /usr/lib/pkcs11/eidlv-pkcs11.so</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">warning: no token URL was provided for this operation; the available tokens are:</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust<br/> pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=Default%20Trust<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29<br/> pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=Signature%20PIN%20%28LATVIA%20ID%29</div>
Izmanto iegūto certifikātu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">p11tool --list-all-certs 'pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29'</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Object 0:<br/>     URL: pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert<br/>     Type: X.509 Certificate (RSA-2048)<br/>     Expires: Sun Jun 20 05:02:52 2021<br/>     Label: Authentication certificate<br/>     ID: a7:82:78:84:61:ce:53:39:0e:e2:34:45:6e:4a:01:bf:c6:ad:49:a1<br/>  </div>
Atrast atrašanās vietu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">find / -name "hipreport.sh"</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/usr/libexec/openconnect/hipreport.sh</div>
Atspiest magic.zip, kur saturā ir lvrtc root sertifikāts eid kartei un novietot ~/magic.pem
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">unzip magic.zip && mv magic.pem ~/magic.pem</div>
Izpildīt komandu
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">sudo openconnect -v --dump-http-traffic --user="KASPARS BŪCENS" -c \<br/> "pkcs11:model=PKCS%2315;manufacturer=Oberthur%20Technologies;serial=010011761431013F;token=User%20PIN%20%28LATVIA%20ID%29;id=%a7%82%78%84%61%ce%53%39%0e%e2%34%45%6e%4a%01%bf%c6%ad%49%a1;object=Authentication%20certificate;type=cert" \<br/> --protocol=gp \<br/> --os=win \<br/> --csd-wrapper="/usr/libexec/openconnect/hipreport.sh" \<br/> --cafile="/home/kasparsb/Documents/magic.pem" \<br/> vpn1.eveseliba.gov.lv</div>
  [[:File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86_641.rpm|File:latvia-eid-middleware-2.0.6-1-linux-centos-6.10-x86 641.rpm]]<br/> [[:File:latvia-eid.zip|File:latvia-eid.zip]]<br/> [[:File:magic.zip|File:magic.zip]]</div> </div>
</div>

Gitlab

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Gitlab by file upload (1 revision)

New page

<div class="mw-parser-output">
== [[Configuring_an_Apache_reverse_proxy_server_with_LetsEncrypt_SSL_certificates|Configuring an Apache reverse proxy server with LetsEncrypt SSL certificates]] ==
</div>

Joomla

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Joomla by file upload (1 revision)

New page

<div class="mw-parser-output">
== [[Joomla/Form_field_type_Media_-_Shows_no_PDF's|Form field type Media - Shows no PDF's]] ==
</div>

Joomla/Form field type Media - Shows no PDF's

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Joomla/Form field type Media - Shows no PDF's by file upload (1 revision)

New page

<div class="mw-parser-output">
== Form field type Media - Shows no PDF's ==
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">Just go to:<br/> '''administrator/components/com_media/models/list.php'''<br/> <br/> case 'pdf':</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">case 'doc':</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">case 'docx':</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">case 'xls':</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">case 'xlsx':</div> </div>

MacOS

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported MacOS by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
== [[MacOS/openXenManager_Installing_on_Mac_OS_(Any_Version)|openXenManager Installing on Mac OS (Any Version)]] ==

== [[MacOS/Install_HighSierra_disable_APFS|Install HighSierra disable APFS]] ==

 
</div> </div> </div> </div>

MacOS/Install HighSierra disable APFS

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported MacOS/Install HighSierra disable APFS by file upload (1 revision)

New page

<div class="mw-parser-output"> </div> <div class="mw-parser-output">(Optional) Prevent APFS file system- default to HFS<br/> Some users may prefer HFS file system and want to install without converting the system disk to the new default APFS file system. To this end, we've created a script called No-Convert which is included when creating your bootable USB installer using UniBeast. Running that script in Terminal will prevent automatic APFS file system conversion. Skip this step to default to APFS.<br/>   <div style="padding-left: 30px">a. Press the hotkey to choose boot device (F12 for Gigabyte motherboards, F8 for ASUS motherboards, F11 for ASrock motherboards)<br/> b. Choose '''USB'''<br/> c. At Clover boot screen, choose '''Boot OS X Install from Install macOS High Sierra '''again<br/> d. After the installer completely boots, In the top menu bar choose '''Utilities''', and open '''Terminal'''<br/> e. Type the following: <div class="bbCodeBlock bbCodeCode"><div class="type">Code (Text):</div> <div class="code" style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/Volumes/Image\ Volume/No-Convert</div> </div> f. Reboot<br/> </div> 10. Press the hotkey to choose boot device (F12 for Gigabyte motherboards, F8 for ASUS motherboards, F11 for ASrock motherboards)<br/> 11. Choose '''USB'''<br/> 12. At the Boot Screen, choose '''High Sierra'''<br/> 13. Complete macOS installation. The system will automatically reboot.</div>

MacOS/openXenManager Installing on Mac OS (Any Version)

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported MacOS/openXenManager Installing on Mac OS (Any Version) by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
#First you need to install the [https://brew.sh/ Homebrew] package manager. You can do this by executing the following in a terminal.<br/> <code>/usr/bin/ruby -e "$(curl -fsSL [https://raw.githubusercontent.com/Homebrew/install/master/install https://raw.githubusercontent.com/Homebrew/install/master/install])"</code>
#Update Homebrew like this: <code>brew update && brew upgrade</code>
#Install XQuartz: <code>brew cask install xquartz</code>
#Install the other dependencies: <code>brew install python gtk pygtk FLTK</code>
#Install [http://tigervnc.org/ TigerVNC]: <code>brew install [https://gist.githubusercontent.com/steakknife/064302dc55e76231d612/raw/tiger-vnc.rb https://gist.githubusercontent.com/steakknife/064302dc55e76231d612/raw/tiger-vnc.rb]</code>
#Install configobj: <code>pip install configobj</code>
#Clone the latest OXM source.
#*<code>mkdir ~/tmp</code>
#*<code>cd ~/tmp</code>
#*<code>git clone [https://github.com/OpenXenManager/openxenmanager https://github.com/OpenXenManager/openxenmanager]</code>
#*<code>cd openxenmanager</code>
#Build OXM: <code>python setup.py build</code>
#Install OXM: <code>python setup.py install</code>
#Start OXM for the first time. After startup close it: <code>/usr/local/bin/openxenmanager</code>
#Modify the config file:
#*<code>vi ~/.config/openxenmanager/oxc.conf</code>
#*Find the <code>vnc_viewer</code> property and replace it's value with: <code>/usr/local/bin/vncviewer</code>

OpenXenManager is now installed and ready for use. You can even use the remote console.

[[File:OpenXenManager.app.zip|OpenXenManager.app.zip]]

Medawiki:Common.css

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Medawiki:Common.css by file upload (1 revision)

New page

Mikrotik

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Mikrotik by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
== [[Mikrotik/IPsec_tunelis_starp_darbu_un_mājām|IPsec tunelis starp darbu un mājām]] ==

== [[Mikrotik/Update_Script_EoIP|Dinamic update script EoIP tunnel]] ==

== [[Mikrotik/fw_filter_openports_for_dc|FireWall Filter Open Ports For Domain Controller]] ==

== [[Mikrotik/Become_Wireless_AP|Become Wireless AP]] ==

== [[Mikrotik/Ubuntu_L2TP_IPsec|Ubuntu L2TP IPsec]] ==

</div> </div> </div>

Mikrotik/Become Wireless AP

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Mikrotik/Become Wireless AP by file upload (1 revision)

New page

<div class="mw-parser-output"> </div> <div class="mw-parser-output">
# RouterOS 6.34.6

# http://wiki.mikrotik.com/wiki/Connect_to_an_Available_Wireless_Network

# https://www.medo64.com/2017/01/access-point-and-station-combo-on-mikrotik/

 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"># Optional, configure all ports as a switch</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/interface ethernet</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">set [ find default-name=ether2 ] master-port=ether1</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">set [ find default-name=ether3 ] master-port=ether1</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">set [ find default-name=ether4 ] master-port=ether1</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">set [ find default-name=ether5 ] master-port=ether1</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"># Create bridge</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/interface bridge</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">add name=bridge-LAN</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"># Put all ports (via master) and the Wifi adapter in the same bridge</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/interface bridge port</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">add bridge=bridge-LAN interface=ether1</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">add bridge=bridge-LAN interface=wlan1</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"># Create a connection to remote AP</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/interface wireless</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no frequency=auto mode=station-bridge wps-mode=disabled ssid=MYSSID</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"># remote AP</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/interface wireless connect-list</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">add interface=wlan1 security-profile=default ssid=MYSSID</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"># password to AP</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/interface wireless security-profiles</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" group-key-update=20m mode=dynamic-keys wpa2-pre-shared-key=PASSWORD1</div>
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;"># become a client of AP</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">/ip dhcp-client</div> <div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">add default-route-distance=0 dhcp-options=hostname,clientid disabled=no interface=wlan1</div> </div>

Mikrotik/IPsec tunelis starp darbu un mājām

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Mikrotik/IPsec tunelis starp darbu un mājām by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
 
<div style="background:#eee;border:1px solid #ccc;padding:5px 10px;">8a2a081735a3.sn.mynetname.net</div>
 

{| border="1" cellpadding="1" cellspacing="1" style="width: 100%;"
|-
| style="text-align: center;" | '''Mājas'''
| style="text-align: center;" | '''Darbs'''
|-
|
WAN: 81.198.230.53

LAN: 10.10.10.0/24

|
WAN: 80.232.197.38

LAN: 10.10.48.0/24

|-
| /ip ipsec peer add address=80.232.197.38:500 auth-method=pre-shared-key secret="zebiekste"
| /ip ipsec peer add address=81.198.230.53:500 auth-method=pre-shared-key secret="zebiekste"
|-
| /ip ipsec policy add src-address=10.10.10.0/24 dst-address=10.10.48.0/24 sa-src-address=81.198.230.53 sa-dst-address=80.232.197.38 tunnel=yes action=encrypt proposal=default
| /ip ipsec policy add src-address=10.10.48.0/24 dst-address=10.10.10.0/24 sa-src-address=80.232.197.38 sa-dst-address=81.198.230.53 tunnel=yes action=encrypt proposal=default
|-
| /ip firewall nat add chain=srcnat action=accept place-before=0 src-address=10.10.10.0/24 dst-address=10.10.48.0/24
| /ip firewall nat add chain=srcnat action=accept place-before=0 src-address=10.10.48.0/24 dst-address=10.10.10.0/24
|}

 
</div> </div> </div>

Mikrotik/Ubuntu L2TP IPsec

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Mikrotik/Ubuntu L2TP IPsec by file upload (1 revision)

New page

<div class="mw-parser-output">
'''1. '''   Open the "'''Terminal'''"

 

 

 

 

'''2'''.    To install L2TP dependencies type following commands one by one:

 

 
<pre data-code-brush="text" rel="highlighter"><code>sudo apt-get update
sudo apt-get install network-manager-l2tp
sudo apt-get install network-manager-l2tp-gnome</code></pre>

<br/>  

 

'''3.'''    Click on the "Network" icon in top right corner and choose Settings button in bottom left corner

 

https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/5099597202/original/tJvn5m1_pcOxQK8fDqwfBpwQbI6rl6JFEg.png?1532013935

 

 

 

'''4'''.   Click on the''' plus''' icon on your right to add new VPN connection

 

 

 

 

 

'''5.'''   Select "'''Layer 2 Tunneling Protocol (L2TP)'''" as your connection type

 

https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/5099597278/original/xtY8jWvN_x3CDcCLKQCKhJegK32uipxMCQ.png?1532014024

 

 

'''6'''.    Enter the following information:

 

*'''''Name:''''' Enter a name for the connection you are adding, i.e. '''VPNTunnel'''
*'''''Gateway:''''' Enter the PPTP or L2TP server address of the location/server that you wish to connect to from our [https://vpntunnel.com/en/account/server-info '''<u>server list</u>''']
*'''''User name:''''' Enter your VPNTunnel user name
*'''''Password:''''' Enter your VPNTunnel password

 

https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/5099599728/original/RpwhHEVqNNDSV19gqSIYvrvhcm-q1p8qkA.png?1532018051

 

 

Click ''''IPsec Settings...'''"

 

Tick "'''Enable IPsec tunnel to L2TP host'''" and enter Pre-shared key: "'''''vpntunnel'''''". 

Then specify connection algorithms in '''Advanced''' section: '''3des-sha1-modp1024''' for phase 1and'''3des-sha1''' for phase 2.

 Сlick "'''OK'''" and then click "'''Add'''" in the top right corner

 

https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/5099597349/original/YHKLR6OFuNZYTyyfBnZsq-HmUkqcoRFgmQ.png?1532014110

 

 

 

'''7'''.    Enable your vpn by swiping the toggle.

 

 

 

All of your online activities are now 100% secure and anonymous while connected to VPNTunnel.

 

If you have any questions, or experience any issues while installing and setting up your 

Ubuntu device to connect to the VPNTunnel VPN servers - please '''[https://vpntunnel.com/contact-us/ <u>contact</u>]'''''' '''our Support Team anytime.
</div>

Mikrotik/Update Script EoIP

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Mikrotik/Update Script EoIP by file upload (1 revision)

New page

<div class="mw-parser-output">:global "eoipint1" "eoip-tunnel-work" <br/> :global "eoipconnectclient1" "8a2a081735a3.sn.mynetname.net" <br/> :global "eoip1hostip" [:resolve $"eoipconnectclient1"] <br/> :global "eoipconnectto" [/interface eoip get $eoipint1 remote-address]<br/> :if ($eoip1hostip != $eoipconnectto) do={ <br/> :log info "****** Updating EOIP Tunnel for $eoipint1" <br/> /interface eoip set $"eoipint1" remote-address=$"eoip1hostip"}<br/> :if ($eoip1hostip = $eoipconnectto) do={ <br/> :log info "**** No Update necessary for EOIP Tunnel $eoipint1"}</div>

Mikrotik/fw filter openports for dc

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Mikrotik/fw filter openports for dc by file upload (1 revision)

New page

== UDP ports ==
<div class="mw-parser-output"> </div> <div class="mw-parser-output">chain=forward</div> <div class="mw-parser-output">dst-address=domain controller ip</div> <div class="mw-parser-output">protocol=udp</div> <div class="mw-parser-output">dst-ports=389,88,53,445,464,123,137,138,67,2535</div> <div class="mw-parser-output"> </div>
== TCP ports ==
<div class="mw-parser-output"> </div> <div class="mw-parser-output">chain=forward</div> <div class="mw-parser-output">dst-address=domain controller ip</div> <div class="mw-parser-output">protocol=tcp</div> <div class="mw-parser-output">dst-ports=42,53,88,135,137,139,389,445,636,3268,3269,9389,5722,464</div>

Suse

Kaspars — Thu, 16 Apr 2026 08:41:32 GMT

Kaspars imported Suse by file upload (1 revision)

New page

<div class="mw-parser-output"><div class="mw-parser-output"><div class="mw-parser-output">
=== [[Suse/Sudoers|Sudoers]] ===

=== [[Suse/Xenserver_Xen-tools|Xenserver Xen-tools]] ===

=== [[Suse/Remove_DVD_Repo|Remove DVD Repo]] ===

=== [[Suse/SSHD_Configuration|SSHD Configuration]] ===

=== [[Suse/Creating_Logical_Volume_On_Existing_Volume_Group|Creating Logical Volume On Existing Volume Group]] ===

=== [[Suse/How_To_Upgrade_To_openSuse_leap_43.3_From_openSuse_13.2|How To Upgrade To openSuse Leap 42.3 From openSuse 13.2]] ===

=== [[Suse/add_opensuse_leap_42.3_gitlab_repo|Add OpenSUSE Leap 42.3 Gitlab Repo]] ===
</div> </div> </div>

← Older revision		Revision as of 10:42, 16 April 2026
Line 1:		Line 1:
	~~<strong>MediaWiki has been installed.</strong>~~		*[[Joomla\|Joomla]]
			*[[EID_VPN\|eID VPN]]
	~~Consult the~~ [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents User's Guide~~] ~~for information on using the wiki software.~~		*[[Ubuntu\|Ubuntu Servers]]
			*[[Suse\|OpenSUSE servers]]
	~~== Getting started ==~~		*[[Windows\|Windows Servers]]
	* [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Configuration settings list~~]		*[[Mikrotik\|Mikrotik]]
	* [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki FAQ~~]		*[[XenServer\|XenServer]]
	* [~~https://lists.wikimedia.org/postorius/lists/mediawiki-announce.lists.wikimedia.org/ MediaWiki release mailing list~~]		*[[VMWare\|VMWare]]
	* [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Localisation#Translation_resources Localise MediaWiki for your language~~]		*[[MacOS\|MacOS]]
	* [~~https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Combating_spam Learn how to combat spam on your wiki~~]		*[[Zabbix\|Zabbix]]
			*[[Gitlab\|Gitlab]]
			*[[CentOS\|CentOS]]
			*[[Docker\|Docker]]
			*[[Bash_scripting\|Bash Scripting]]