Recent Questions - Server Fault |
- Tracking TCP Connection in background
- systemd raspbian wpa_supplicatant access point not working
- Can Google Cloud Organization be used for internet uptime?
- DNS VIEW not working for any
- Change time in Xampp Apache
- apache reverse proxy to main domain on one port and subdomain on another port
- Need to deploy Laps via GPO cant use computer configuration or user configuration
- Back up arbitrary config files on linux servers in RANCID
- SSSD integration with Ldap Error 'Could not start TLS encryption. TLS: hostname does not match CN in peer certificate'
- ldapsearch fails with TLS: hostname does not match CN in peer certificate
- Apache 2.4 LDAP lookup sllow
- Cheapest way to setup a domain controller with AD-DS for a small business with multiple locations
- Deploy MSI via GPO to specific users "Admin right issue"
- How to find source of inherited permission on Exchange online mailbox?
- Port accessing error for a docker app on google compute engine VM instance
- AWS Windows EC2 instance does not recognize assigned IAM role
- mod_evasive doesn't do anything on Ubuntu server 16.04
- Https on iis not working with domain name of ip address
- Chef Private Key Could Not Be Loaded from /user.pem
- How to change sites-available configurations in NGinx
- Apache returns invalid Content-Length for gzip compressed 204 response
- Dovecot dict: Can't open configuration file, Permission denied
- htaccess - redirect based on the request origin
- How to debug 403 error on Cent OS?
- Active Directory control client hyper-v permissions
- Make an error page folder serve a 403 error to external requests
- vmware thin disk usage powercli
- Apache forces Cache-Control: private automatically for HTTPS requests
- Preferred format of file names which include a timestamp
Tracking TCP Connection in background Posted: 31 Mar 2021 10:14 PM PDT I am looking for a daemon utility to track all non local TCP connections and which binaries establish the TCP connections (actively and passively) with which IPs and ports.
Following this post, I notice that the following rule captures all connections: I see many entries like these: I wonder whether there is a way to filter by the AF family, limiting to IPv4 and IPv6. I can add a filter to capture Thanks. |
systemd raspbian wpa_supplicatant access point not working Posted: 31 Mar 2021 09:44 PM PDT Moving on from my prior question about identifying source of a wireless SSID, I am now ready to move on to the next challenge. Most of the documentation I found for wpa_supplicant and creation of a new access point revolved around a change from dhcpcd networking to systemd networking. Though I feel it was a mistake to do so, I have done this. Problems: No IP address on wlan0 at boot; my SSID does not show up on wifi devices. I'm sure these are related. I have the following configuration: (DNS and DHCP provided by dnsmasq) /etc/systemd/network/04-wired.network /etc/systemd/network/08-wifi.network /etc/wpa_supplicant/wpa_supplicant-wlan0.conf (some values masked) I have done the appropriate systemctl enable magic, and on reboot, eth0 has its static address, but wlan0 does not get a DHCP address. This is the dnsmasq.conf minus all the dhcp-host and comment entries I can see that wpa_supplicant began running at startup: When other devices connect via ethernet, they receive an IP address, so I believe dnsmasq is OK. Supporting that, if I do killall wpa_supplicant and then run it locally : then wlan0 gets an IP address (10.158.54.162) from dnsmasq. But I never see the cfg2021.xx.com network in the list of SSIDS on my wireless devices. (/tmp/wpa-debug.txt is a 36KB file by the time I kill the process. I'm way out of my league when it comes to systemd networking. (Again, I think it was a mistake to go that route since originally the networking was more traditional - and it worked. For a long time. But here we are.) I'd appreciate your guidance. There are two problems I perceive: |
Can Google Cloud Organization be used for internet uptime? Posted: 31 Mar 2021 07:31 PM PDT Maybe I'm barking up the wrong tree! I just want to be able to monitor our internet connection (i.e. ping every 15 sec) and get a notification (email or preferably text) when it goes down for more than a minute. I have the NetUptime Monitor installed on one PC and it works great, keeps a log, but does not notify me. I've just spent hours trying different (Spiceworks, Zabbix, PRTG) solutions but they either had issues or seemed like overkill. Does Google have a solution? |
Posted: 31 Mar 2021 04:42 PM PDT I have configured a dns view configuration view "local-lan" { match-clients { 192.168.0.0/24 }; zone "localtesting.com" { type master; file "internal/internal.localtesting.com";};}; view "any" { match-clients { any }; zone "betatesting.com" { type master; file "external/betatesting.com"; }; }; When i tried to access betatesting.com domain from 192.168.0.0/24 network server it matches with only local-lan view and returned NXDOMAIN. I hope it suppossed to match any if the zone is not present in local-lan. Anybody please give me some details on it. |
Posted: 31 Mar 2021 04:38 PM PDT I want to know if there is a way to change Apache time to another time. for example, we are in 2021,31, March. but I want to set time in Apache to 2021,1, March to test my applications. |
apache reverse proxy to main domain on one port and subdomain on another port Posted: 31 Mar 2021 04:04 PM PDT I am trying to add a subdomain to an existing configuration using a different port than the main domain. The existing config looks like this: I have tried adding another config file with essentially the exact same information, but replacing My certificate is for |
Need to deploy Laps via GPO cant use computer configuration or user configuration Posted: 31 Mar 2021 11:17 PM PDT I am trying to deploy Laps to all my users via GPO but issue i am having is nobody has local admin rights on their machines so obviously the install wont work with user config and i cant really use computer configuration as most of my users are now working from home and are not logged into the vpn at startup/shutdown so the policy never triggers. Is there another way to achieves this? |
Back up arbitrary config files on linux servers in RANCID Posted: 31 Mar 2021 08:37 PM PDT I use RANCID to back up router and switch configurations. I'd also like to be able to have it take automatic backups of configuration files on my servers so I can easily see when changes occur and if something breaks, revert to the last known config. There are a number of approaches to this, but RANCID has everything I'm looking for in terms of features and I already use it, so it would be ideal if I could have it built in to that. I see this question from 9 years ago asking the same thing and the top answer pretty much just says "build your own module" - I've had a look at the RANCID modules and I can't wrap my head around how to do that, so looking to see if in the past 9 years if anyone knows of a module that's now out there for this. Edit: Not yet a complete solution, but I found this repository which seems to have the basics for what I'd need to be able to grab files by SCP and load them into RANCID: https://github.com/drewbeer/rancid-scp |
Posted: 31 Mar 2021 11:09 PM PDT We are currently using Wildcard certificate with SAN. I can successfully run ldapsearch from my client machine when I added TLS_REQSAN allow in openldap configuration. Now i'm trying to integrate SSSD with secure LDAP but getting the below error 'Could not start TLS encryption. TLS: hostname does not match CN in peer certificate' How can I force SSSD to check for Subject Alternate Name(SAN) instead of CN. Is there a property I could set in SSSD configuration. |
ldapsearch fails with TLS: hostname does not match CN in peer certificate Posted: 31 Mar 2021 11:09 PM PDT I'm trying to configure secure LDAP client using the certificates (RootCA, IntermediateCA, IssuingCA and Server certificate) and created the truststore. ldap.conf: LDAP server FQDN: Do I need to create a new certificate for the client using the provided certificates, if yes how? |
Posted: 31 Mar 2021 04:53 PM PDT Server is running RHEL 7 and Apache 2.4.6; this is a pretty new (about a week old) problem. My department Intranet uses authentication against the university's Active Directory environment, and authentication for end-users takes over 30 seconds. Subsequent page loads are nearly-instant, and after some time (timeout, I assume), the problem is back. Here are some relevant lines from error_log: |
Cheapest way to setup a domain controller with AD-DS for a small business with multiple locations Posted: 31 Mar 2021 10:04 PM PDT I work for a small business with little IT infrastructure. We want to be able to join all computers throughout the company to a single domain to push group policies and conduct other management functions, however, we have 15 offices with 1-2 employees at each office and 10 at corporate with a total of 36 employees. To me, it doesn't make sense to invest in the infrastructure to setup a domain controller with a firewall at each location. Based on my research it seems like moving everything to the cloud (Azure) or doing a hybrid approach with our on-premise server would make more sense. Is my thinking correct here? Would there be a cheaper way? |
Deploy MSI via GPO to specific users "Admin right issue" Posted: 31 Mar 2021 07:01 PM PDT I'm trying to deploy an MSI via GPO to specific users (120 users) from different departments and sites, the problem is that they don't have admin rights so the application cannot be installed due to insufficient privileges. Can anyone have an idea to get around this problem? Thanks |
How to find source of inherited permission on Exchange online mailbox? Posted: 31 Mar 2021 09:02 PM PDT Example: Shows permissions with In on premise exchange I would use There is a permission we want to remove, but can't because it's inherited: |
Port accessing error for a docker app on google compute engine VM instance Posted: 31 Mar 2021 05:04 PM PDT I'm trying to deploy an web app in a VM instance at Google Compute Engine (GCP). I connect to instance via ssh and deployed docker-compose orchestrated app. Which runs two docker containers as below. As per my previous experiences I mapped host instance's port 8065 to the wordpress container's port 80 (which works fine on my local machine and some other machines) So as you could see above docker has properly done the mapping I assume. To test the setup from the instance, when I run Since I can't make the internal mapping work, its useless to map from outside also. However I've made new ingress and egress firewall rules to enable tcp:8065 for this instance. However still no luck. I'm aware that GCP recommends to use their Kubernates Engine to deploy containerized apps. However switching to that option is not the solution I'm expecting here. I just want to make sure what went wrong and how to make the current setup work in the same platform. |
AWS Windows EC2 instance does not recognize assigned IAM role Posted: 31 Mar 2021 07:09 PM PDT Initially I launched a brand-new Windows Server 2016 server EC2. I assigned a S3 full admin IAM role to this instance when launching it. I installed CLI on it. I started a CMD window, and typed in "aws s3 ls". It lists all my buckets. All working fine. I then created an AMI from this instance. I launched a new instance from this instance with that S3 full admin IAM role. "aws s3 ls" still works. Then, after a number of days, when I repeat the above process (launching an instance from the same AMI), "aws s3 ls" will stop working, with the following error: It happened many times. Every time I rebuilt a new Windows Server, install CLI, assign the S3 full admin role to the instance, it works. After a number of days, when I launch a new instance from the exact same AMI, "aws s3 ls" will stop working. It is so mysterious! Can someone shed some light on this please? |
mod_evasive doesn't do anything on Ubuntu server 16.04 Posted: 31 Mar 2021 05:04 PM PDT I set up I only changed The first time I used Because it worked the first time, shouldn't there be a log of it? I checked Could it be because I'm redirecting |
Https on iis not working with domain name of ip address Posted: 31 Mar 2021 06:03 PM PDT Using Windows 2012 R2 Standard server with IIS. Windows firewall has preset rules World Wide Web Services (HTTP Traffic-In) and World Wide Web Services (HTTPS Traffic-In) enabled. The server has one web with the following bindings: http - empty value / any domain - 80 Urls tried from external machine: Urls tried from local server So http works for all addresses from all locations. Https works when run on local machine with address localhost but https does not work in any other way. What am I missing? Do I need to open other firewall rules/ports other than 443? |
Chef Private Key Could Not Be Loaded from /user.pem Posted: 31 Mar 2021 11:07 PM PDT I just finished the install chef-server tutorial at Chef's website, using an ec2 instance for my chef-server (t2.medium Ubuntu 16.04 AMI), and my laptop for my workstation, which also runs Ubuntu 16.04. It appears that I succeeded in setting up a chef-workstation and chef-server. However, my 'user.pem' key is not being located. This is bazaar because my pem keys were successfully pulled from my chef-server to my chef-workstation using 'scp'. I can see them in my chef-repo directory on my workstation. Might anyone be kind enough to help figure out why my pem key is not being located? From my chef-workstation at: I run: I get: So now I have a: file as expected. Next I run: I get: But when I run: I get: My 'knife.rb.' settings are: On my chef-server, my /etc/hosts, and /etc/hostname settings are both: Strangely enough, I had to set 'chef_server_url' in 'knife.rb' to: as opposed to: or else it wouldn't fetch my keys What I am missing? |
How to change sites-available configurations in NGinx Posted: 31 Mar 2021 11:00 PM PDT I am new to Linux. I want to deploy my asp.net core application on Ubuntu 16.04 LTS virtual machine. I installed asp.net core on Ubuntu and managed to run a simple asp.net core web application on Ubuntu. In addition, I want to setup Nginx web server as the reverse proxy for my application. I followed this article in order to install Nginx. Eventhough Nginx server successfully installed I cannot change following configurations on default file of Nginx Sites-Available section as above article explained since the whole directory is read only. What have I done wrong and please tell me how to edit this file. |
Apache returns invalid Content-Length for gzip compressed 204 response Posted: 31 Mar 2021 08:06 PM PDT When apache returns a gzip compressed response with 204 response code and empty body server returns invalid header Without gzip compression (without Request and response with compression: Request and response without compression: Setting I found this bug in Apache bugtracker https://bz.apache.org/bugzilla/show_bug.cgi?id=51350 where developer says that this bug fixed in 2.4.1 version. I have 2.4.7 version installed and this bug still occurs. How i can disable gzip compression for 204 responses, or for responses with empty body? Or maybe there is a way to disable overwriting |
Dovecot dict: Can't open configuration file, Permission denied Posted: 31 Mar 2021 04:00 PM PDT I'm trying to set up a dovecot mysql dict for quota in a FreeBSD jail. This is the log I'm getting: These are my file permissions: This is And this is my What am I missing? |
htaccess - redirect based on the request origin Posted: 31 Mar 2021 07:01 PM PDT Please help me out here. I would like to use .htaccess to redirect based on request origin, for example: User requests: And should be redirected to: This is very simple to accomplish BUT on the homepage there is a link to: And it should work just WHEN the request comes from that link. In other words my goal is to force all users through the homepage BEFORE other URLs even if they know the page URL (bookmarked or otherwise) and it is a valid one. Is it possible? |
How to debug 403 error on Cent OS? Posted: 31 Mar 2021 06:03 PM PDT I'm trying to install phpMyAdmin and I'm getting a 403. /etc/httpd/conf/httpd.conf /etc/httpd/conf.d/phpMyAdmin.conf This is running on CentOS 6.6 on Apache 2.2 I've tried a ton of combinations and none of these files seem to make a difference. I have a feeling there is another file having effect but the logs say nothing about how to find it. The Apache ErrorLog and AccessLog give nothing of use. I am running a Django site inside of Virtual Env at the domain root. |
Active Directory control client hyper-v permissions Posted: 31 Mar 2021 09:02 PM PDT I've done lots of googling and the only thing I find relates to, I believe, Hyper-V server and not client Hyper-V. The scenario is that we have a domain here at the college and we are trying to use client Hyper-V on the win8 pro machines. The students are part of the Hyper-V Administrators group and we tried using Authorization Manager, but nothing has worked to allow students to run Hyper-V Manager without being an Administrator or having an administrator use their credentials to run Hyper-V Manager with elevated permissions. The administrator walking around running Hyper-V Manager with elevated privileges is not really convenient, so what we are looking for is a way to control the ability of students to run Hyper-V Manager and load their Win2012r2 VMs and create new VMs without the administrator's credentials and without making the students administrators. The students very specifically only need administrative privileges for client Hyper-V or for client Hyper-V not to require administrative privileges. |
Make an error page folder serve a 403 error to external requests Posted: 31 Mar 2021 08:06 PM PDT I'm fiddling about with a server, and I've made one of the subdomains a proxy for a service that isn't always up. The This serves My issue is that I would like to make any external request to Is this possible? How would I go about it? I have tried seemingly meaningful combinations of Barring that, can I at least serve a 403 to anything that would otherwise 404 in |
vmware thin disk usage powercli Posted: 31 Mar 2021 10:04 PM PDT I want to ask a question about thin provisioning. |
Apache forces Cache-Control: private automatically for HTTPS requests Posted: 31 Mar 2021 11:00 PM PDT I'm trying to get browsers to cache assets over HTTPS. I am using MD5 fingerprinting method to allow long-term caching and I have this part working OK. What doesn't work is setting the Cache-Control headers in Apache. My config for both regular and SSL vhost contains: HTTP request to /test.css produces headers: But HTTPS request to same file produces headers: BTW, Adding this right after the ExpiresByType: removes these headers from HTTP, but not from HTTPS request. Also, I have verified that any other header I set gets passed, but not cache related headers like Cache-Control or Expires - these get overwritten somewhere. Is this normal Apache behavior or some Oracle or Red Hat patch that aims to security? Can this be turned off somehow? System info: |
Preferred format of file names which include a timestamp Posted: 31 Mar 2021 06:28 PM PDT As we all know "unix" can have anything in a file except '/' and '\0', sysadmins however tend to have a much smaller preference, mainly due to nothing liking spaces as input ... and a bunch of things having a special meaning for ':' and '@' among others. Recently I'd seen yet another case where a timestamp was used in a filename, and after playing with different formats a bit to make it "better" I figured I'd try to find a "best practice", not seeing one I figured I'd just ask here and see what people thought. Possible "common" solutions (p=prefix and s=suffix):
...so anyone want to give a preference and a reason, or more than one (Eg. don't care about TZ if it's 95+% to stay machine local, but care a lot if it isn't). Or, obviously, something not in the above list. |
You are subscribed to email updates from Recent Questions - Server Fault. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States |