Is there a safe way to force an IIS log file rollover on a production web server?

I often have to look at problems on live web servers, would like to know if there is a safe way to force an IIS log file rollover on a production server.

From serverfault Luke Girvin

• Are you sure about this, I've been supporting IIS web farms for years and had no issues with copying the current IIS log file to get all entries up to that point....(IIS 4,5,6 and 7)

  How are you copying them?

  Luke Girvin : I often use Symantect pcAnywhere to copy the files, so perhaps it's something peculiar to that program that's causing me problems. I'll edit the question slightly but I'd still like to know if there's a way to force a log file rollover, this sort of functionality is common in the UNIX world and SQL Server also has it.
  From Daed

• You could try temporarily changing the log file rollover settings, as described here:

  http://technet.microsoft.com/en-us/library/cc754615(WS.10).aspx

  Once the logs have rolled over, revert to your previous settings.

  From blueberryfields

Mysqlhotcopy message: audit_log_user_command(): Connection refused

Im trying backup db. It works but give this message before backup process:

audit_log_user_command(): Connection refused

what this means?

From serverfault $pageUsers[$entry.posts[0].author].name

• This is a sudo error.
  How are you running mysqlhotcopy ?

  From Marcel

• This is an issue with sudo. Update to latest version.

  From

How do you add a site to the Internet Explorer Trusted Zone through GPO in server 2003?

How do you add a site to the Internet Explorer Trusted Zones through GPO in server 2003?

If you do push a site through a GPO does it erase other Trusted Sites that may have been entered on the end users computer?

Thank You,
Keith

From serverfault Keith Sirmons

• To set a trusted site, in Group Policy editor: Navigate to
  User Config\Admin Templates\Windows Components\Internet Control Panel\Security Page\

  Policy: Site to Zone Assignment List

  Any site you add to the list with a value to 2, will be in the trusted sites zone.

  I think it will merge with existing sites if you have not locked down the zone

  see Internet Explorer security zones registry entries for advanced users

  and Group Policy and Internet Explorer 8

  Keith Sirmons : Thank you... I was typing my answer and didnt see yours.
  From Jim B

• This does clear all the users prevoiusly added sites to ALL their securitys lists.

  1. Open Group Policy Manager
  2. Create New GPO and Link it.
  3. Edit GPO.
  4. Browse to User Config -> Admin Temp -> Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page
  5. Open "Site to Zone Assignment List"
  6. Enable it
  7. Click Show and add your site name and the value 2 for the Trusted Zones list

  Keith

  From Keith Sirmons

Enable live streaming on website

I have a server colocated in a datacentre (dedicated 1Gbit line, SSDs, etc.) running CentOS 5.4 64-bit.

I want to stream live video from a device (webcam, camcorder, whatever.) to my server which inturn can re-broadcast it on demand through a flash player (such as Flowplayer) so that more users will be able to watch the stream since the server is quite fast.

Does a solution like this exist already (streaming software from live source to flash media server) or will I need to hire someone to code it? I see that VLC has an option to stream video.. will that be suitable in this case? Or is there a better way to do it? I don't want a browser based solution on my end. It'll be great if this can be done without running an X server but I don't mind either way. This will be running on a dedicated PC at home.

From serverfault $pageUsers[$entry.posts[0].author].name

• http://www.wikihow.com/Stream-Your-Webcam

  I googled: linux webcam streaming

  From aspitzer

• Thanks.

  I'll try and see if this stream can be made to play with flowplayer.

  From $pageUsers[$post.author].name

Access rights escalation requiring multiple sysadmin authorisation

I was just wondering if there is a way to give a user root access escalation on a *nix system, kind of like sudo, but which requires more than one sysadmin authorisation. I am thinking of something sort of like how a self-destruct command on a starship requires multiple command-level authorisations.

From serverfault sybreon

• There's nothing like this, by default, but SELinux and and Posix ACLs might be able to be leveraged by denying everyone root except in cases where multiple tokens (or files, or processes, or whatever) exist and are owned by the proper people. Sort of like an even more complicated use of semaphores.

  Check out this article in Linux Journal about making root unprivileged.

  BTW, in case you didn't know, you're meddling in Deep Magic.

  troyengel : deep, deep bayou voodoo magic. there is a man with a skull and tooth necklace standing over you as you attempt to continue... :)
  From Matt Simmons

• Maybe you could abuse a securid token by setting up the root account with the token. Then give the token to the "partially trusted person number 1 (manager)" and the PIN to "partially trusted person number 2 (admin)". Partially trusted person number 2 has to phone trusted person number 1. and ask him the number on the display of the token. That way 1 and 2 have to come together to make it possible to log in. I'd be a bit wary of relying on it, though you could put 2 locks on the door of an office and issue the keys to the semi-trusted parties who would again need to come together to open the office to get at the secure workstation?

  I wouldn't be surprised if there are bits bolted onto some operating systems that do this but you'll probably have to join an organisation where you are expected to salute and say "Sir" a lot before you can use them.

  This blog entry by someone who designed/built just such a system is interesting: Dr Rick (Crypto)Smith Blog

  From davey

Forum Solution in Ruby or Python

I need to find a suitable forum in Ruby or Python for my company's web site. I've been given the following general criteria:

1. Data Migration: How do they store the data? Preferably in database not flat files.
2. User Management: Need to be able to do single login via our own current LDAP
3. Email Integration: -- Daily Digest Checkbox, etc. -- RSS Feeds
4. Language: Ruby/Rails or Python (our current single sign on LDAP is in Python)
5. Easy to skin (CSS, etc.)
6. Not phpbb (management's decision)

Any suggestions, stories from the trenches, etc.?

From serverfault Rob

• I'd go with a simple forum package like Beast; it won't necessarily do everything you need out of the box, but it's Rails-based and pretty easy to tweak to suit your custom requirements.

  From womble

• This was answered a while ago in ServerFault's sister site: http://stackoverflow.com/questions/375551/forum-software-written-in-python

  Should digging through SourceForge as suggested there not be your cup of tea, perhaps the following list of Django-based forums might be of interest:

  http://sct.sphene.net/wiki/show/Board/

  http://code.google.com/p/snapboard/

  http://code.google.com/p/django-forum/

  Disclaimer: I have no personal experience with any of these applications, but I'd imagine once you got past the learning curve of Django itself, not only would you solve the forum requirement, but you'd also have a robust and extensible python framework in place to grow according to future requirements.

  Hope this helps.

  From Zayne S Halsall

pop3 IIS 6 , allow remote connections

I'm using a EC2 windows 2003 instance. I managed to install pop3 and i can connect to it locally (using outlook express with the remote desktop) and the server address is the machine name. I also added MX record on the DNS (mail.mydomain.com) but still i can't connect to the pop3 server remotely using either mail.mydomain.com or even the server IP.

From serverfault $pageUsers[$entry.posts[0].author].name

• The first thing that comes to mind is your firewall, have you opened port 110 on your firewall?

  From Sam Cogan