Jun 23

Force unmount (umount) of a hung NFS share

By agatewood Linux Comments Off on Force unmount (umount) of a hung NFS share

When an NFS share gets hung and a standard ‘umount /mnt/share’ yields something like:

umount.nfs: 10.1.1.15:/nfs/share: not found / mounted or server not reachable

Try to force it with a ‘lazy’ unmount (umount):

umount -l /mnt/share

Tagged with:
Jun 11

Allow passive FTP on ProFTPD

By agatewood Linux Comments Off on Allow passive FTP on ProFTPD

Most FTP clients attempt to use passive FTP by default. Passive FTP is not enabled on ProFTPD. Fortunately, enabling it is very simple. Edit /etc/proftpd.conf and add ‘PassivePorts <low port> <high port>’ to the first section (global), then restart ProFTPD. You should use a really high port range to avoid conflicts. For example, you might want to add:

‘PassivePorts 63121 63129’

The number of ports needed is determined by the number of simultaneous FTP clients you expect to have.

If you are running a firewall, you may need to allow these ports in to your server. This will depend on the firewall – some will view this traffic as related, some will not.

Tagged with:
Jun 10

Re-create PIX/ASA certificate after getting sec_error_reused_issuer_and_serial error in browser

By agatewood Firewall Comments Off on Re-create PIX/ASA certificate after getting sec_error_reused_issuer_and_serial error in browser

If you receive the following error, ‘Error: sec_error_reused_issuer_and_serial’, in Firefox when attempting to connect to a Cisco PIX or ASA firewall, connect to the firewall via the console or SSH and issue the following commands in configuration mode:

ca zeroize rsa
ca generate rsa key

where is 512, 1024, or whatever bit-size you feel that the key should be (I would suggest 1024).

The key will be re-generated and you should be able to connect to the firewall and launch PDM or ASDM via the browser.

Tagged with:
preload preload preload