Recent Questions - Server Fault |
- mysql 8.0.23 enterprise backup issue
- Script without put ran as administrator leaves no file
- How to instruct Postfix to block a specific Hash (to protect against a known IOC attack) of attached files or content?
- OOM killer invoked gfp_mask=0x24201ca
- How do I get TLS 1.2 working on windows server 2008 SP2?
- Use SNI with pip/pypi on Ubuntu 14 Trusty
- cron is not restarting pm2
- Nginx + uWSGI + Flask Connection Reset
- Azure File "System error 1396 has occurred. The target account name is incorrect."
- How can I remove all cookies except session cookies from nginx responses?
- Debian Gnome display - unable to create directory '/run/user/1001/dconf
- How does Cloudflare Firwall rules order work?
- Sent items do not appear in the "Sent Items" folder in Outlook for Desktop, Outlook Mobile (iOS), or Outlook 365
- Cron is not running from docker container... failed
- IIS URL Rewrite - Redirect root to subfolder
- GCP - "kubectl rollout restart" results: error: unknown command "restart"
- TLS 1.2 only on Windows Server with RD Services breaks RDP
- How to create my own simple autoresponder for Postfix with custom conditions?
- Securely add a host (e.g. GitHub) to the SSH known_hosts file
- Is there any point in having proxy config instead a match-all Location?
- Using Let's Encrypt certs on LAN with DNS redirection?
- Powershell find orphaned processes
- How can I get Laravel app routing to work in a sub-folder of a WordPress site?
- OwnCloud and Azure Active Directory integration
- nginx 405's with try_files for a DELETE request instead of proxying
- lighttpd: remove charset=UTF-8 from content type
- bash rsync is Killed by signal 2
- rsync over active ssh connection
- strftime returning time for wrong timezone
- Configure a Local DNS Resolver That Only Caches for a Short Period
| mysql 8.0.23 enterprise backup issue Posted: 01 Apr 2021 10:24 PM PDT MySQL backup issue find the below error while doing from workbench ? error-main error unknown option --h MySQL backup exit code :7,invalid arguments MySQL backup failed with errors  |
| Script without put ran as administrator leaves no file Posted: 01 Apr 2021 09:36 PM PDT I am trying to run this script as administrator. When I run it without admin rights the log file is save in C:\Windows\System32. I put echo %~dp0 in the script and it echos to the current directory. If I hard set the log file as this: I can get a log in that location. But I only need to run it on machines with issues and I would like to have the file on the USB.  |
| Posted: 01 Apr 2021 08:22 PM PDT an attack is ongoing and we want to block at the relay mail level, some Hashes (of attached files or even the email content) to be sent or received. I want to instruct postfix to reject mail with those hashes, how can i do this ? i tried and searched but didn't succed. Thank you so much in advance.  |
| OOM killer invoked gfp_mask=0x24201ca Posted: 01 Apr 2021 07:29 PM PDT I am trying to find out what causes memory to overload OOM killer to perform it actions. It is coming once in around three hours, average live client count is around 300, and I cannot figure out what is the trigger in this cause, because oom-killer can be called from different processes starting from server-host process, to beamium and noderig, the server-host process also fills up the memory even tho clients might disconnect from the server/the count of them is lowering. Looking for extra knowledge because I am just out of ideas, any way to debug deeper? Maybe the problem is around swap? free -h information System log:  |
| How do I get TLS 1.2 working on windows server 2008 SP2? Posted: 01 Apr 2021 08:12 PM PDT https://sparkleflooring.com.au Background: I have been working on installing a certificate on my local website http://sparkleflooring.com.au and found out the hard way that the certificate clients don't work on server 2008 for x86 anymore. Finally got the certificate installed by using a ubuntu host and copying it across using https://rajbos.github.io/blog/2019/08/27/LetsEncrypt-Windows. Now: I think the certificate is installed correctly but don't know how to test it. Im getting these ssl errors which lead me to the information that TLS is required but not installed on 2008 server. I tried the suggested patch https://www.catalog.update.microsoft.com/search.aspx?q=kb4019276 but it said it's not suitable for my system. I then used a 3rd party stand alone program to add the keys but still it doesn't work. I have also checked the date and time which is correct. Internet Explorer Firefox: Chrome: .  |
| Use SNI with pip/pypi on Ubuntu 14 Trusty Posted: 01 Apr 2021 06:30 PM PDT
https://github.com/pypa/pypi-support/issues/978 explains:
I'm maintaining a legacy code base; I need to pursue the least invasive option possible to get  |
| Posted: 01 Apr 2021 06:22 PM PDT I've tried many things but cron just won't restart pm2. I set the crontab -e with: And the I type: cat /var/log/cron.log And it says:
So it looks like its restarting every 10 minutes, but its not.  |
| Nginx + uWSGI + Flask Connection Reset Posted: 01 Apr 2021 05:07 PM PDT ProblemI have a Flask app deployed using Elastic Beanstalk's "Single Container Docker" platform (latest revision 3.2.5 at the time of writing), with an "Application Load Balancer" in front of it. I had this same Flask app deployed in EB with the "Python 3.6" platform (and a "Classic Load Balancer") for ages, but have since started having issues after upgrading to the new deployment. I am a relative novice when it comes to configuring Nginx / uWSGI, bear with me... Specific IssueI see the following errors in my Nginx I see these errors across requests to different endpoints, using different HTTP methods ( DiscussionI ended up reading and trying a lot of stuff, so I'll recount my experience for posterity. The answer I arrived at seems so simple that I'm still suspicious that I've got it right. From the reading I've done, this sounded like a pretty straightforward issue with some misconfigured timeouts between Nginx + uWSGI. I was encouraged after reading this post which describes almost my exact situation with Elastic Beanstalk. Part 1: Semi-Random FlailingIn the numerous and varied answers on this post I found some things to try:
I realized from reading the docs that these uWSGI settings definitely weren't going to help, although I held out hope for At this point I did notice a relatively significant decrease in the frequency of these errors, but they did not go away altogether. Like a bad engineer, I changed multiple variables at once in some of these trials. Thus, it's hard to know exactly what helped. I suspect I made things better by setting Nginx Part 2: A fix, I think...I decided to try overriding the default All I did was replace this with my own upstream, change the Nginx This seems to work... Since putting in the change I have basically seen zero
I'm not sure where that is documented, but I didn't notice it when reading about using uWSGI + Nginx. If that's accurate, it certainly explains a lot. Conclusion / Help?I'm really glad I was able to figure this one out and the API seems to be working really well, but I can't kick the feeling that I don't understand why this works or I've committed some grave sin with this configuration. It felt a bit cumbersome to override this stuff in Elastic Beanstalk, which makes me think I shouldn't have. With the popularity of uWSGI for python webapps, my spidey-sense is telling me that there should have already been numerous posts about this Nginx If you've read this far and know things, feel free to weigh in on the situation. Hopefully, at the very least, the next person to see those errors in their Nginx logs has another data point as to what the problem could be.  |
| Azure File "System error 1396 has occurred. The target account name is incorrect." Posted: 01 Apr 2021 04:39 PM PDT I'm testing out deploying out Azure File using AD DS permissions. I was able to sync our onprem file server to Azure. I am able to mount/map the drive using "net use \storageaccountname.file.core.windows.net\filesharename STORAGEACCOUNTKEY /user:Azure\storageaccountusername However when I try to map the drive not using "STORAGEACCOUNTKEY /user:Azure\storageaccountusername" I get the message System error 1396 has occurred. The target account name is incorrect Anyone seen this issue before?  |
| How can I remove all cookies except session cookies from nginx responses? Posted: 01 Apr 2021 04:02 PM PDT I'm serving several WordPress sites via nginx & PHP-FPM. Sometimes plugins randomly set cookies that are unwanted, and that do not have consent. For those, and for privacy in general, I want to suppress all cookies except those that are needed to support admin logins, i.e. session cookies. I don't know the names, paths or domains of the cookies that are set ahead of time. Essentially if it's a I've seen alternatives where configs set new cookies that have the same names but immediate expiry times, but I don't want these cookies to ever get as far as the client. I have looked at the stock nginx config options and that doesn't seem to be possible – though it's very easy to set more! The nginx headers_more extension has slightly more power in its So I'm wondering if I need to dive into Lua scripting to get nginx to do this, which I have no idea how to do! Any better ideas how to do this?  |
| Debian Gnome display - unable to create directory '/run/user/1001/dconf Posted: 01 Apr 2021 03:52 PM PDT In order to Show Gnome Version from ssh commandline i get
how can this issue be fixed ?  |
| How does Cloudflare Firwall rules order work? Posted: 01 Apr 2021 03:51 PM PDT how does the order of Cloudflare rules work? I read the documentation but doesn't explain it (it's self explanatory apparently) but is it? For example if i want to block a ASN but allow an IP inside of it, what order should i use? ORDER A: ORDER B:
Or
I think this is very vital information to know.  |
| Posted: 01 Apr 2021 07:39 PM PDT One of our users is no longer able to see any mail in his "Sent Items" folder. When he sends out a message it sits in the Outbox until he manually selects "Send/Receive" from the menu. I checked the Outlook Admin Center and confirmed the messages are sending, but they do not appear under "Sent Items" on Desktop, Mobile (iOS), or Online. I did confirm that he has the app configured to save sent mail, and his Windows edition does not have group policy settings. Microsoft says the Exchange service is up and no other users have reported an issue. Can anyone provide guidance as to where I should look next?  |
| Cron is not running from docker container... failed Posted: 01 Apr 2021 06:00 PM PDT I am trying create cron a task in docker container. Everything are configured according to the @VonC 's answer But the cron service doesn't start up by default the cron service starts work after pushing it explicitly from the container what's wrong?  |
| IIS URL Rewrite - Redirect root to subfolder Posted: 01 Apr 2021 05:03 PM PDT I want: http://somesite.com to redirect to http://somesite.com/subfolder Seems like a pretty simple request. I've followed the sources online, and they all indicate I should use My web.config looks like this: Requests to the root domain do not redirect. Why isn't it working?  |
| GCP - "kubectl rollout restart" results: error: unknown command "restart" Posted: 01 Apr 2021 10:21 PM PDT My GCP kubernetes cluster version is: When I run in the cloud shell I am getting the error: What might be the reason? update Thanks  |
| TLS 1.2 only on Windows Server with RD Services breaks RDP Posted: 01 Apr 2021 09:05 PM PDT I've been experiencing an RDP issue whenever TLS 1.0 is disabled in my environment. I've seen many others report the same issues across the web. In November 2018, Microsoft released a patch for Server 2012 R2 that fixed a silent bug wherein FIPS policy would silently re-enable TLS1.0/1.1 support. A Server 2012R2 or 2016 server running Remote Desktop Services will fail to allow non-console connections when TLS 1.0/1.1 is turned off. The above linked article proposes: a. Not using RDS with a Connection Broker, which breaks our use case b. Not disabling TLS 1.0, which breaks our security posture c. Configure a HA Connection Broker on a dedicated SQL server, which seems like a large effort with additional cost we'd prefer to avoid. Has anyone else resolved this issue any other way? Or, is it possible to set up a HA connection broker without actually having a second RDS Server? We could place the SQL connection on a server that already exists in the environment in that case.  |
| How to create my own simple autoresponder for Postfix with custom conditions? Posted: 01 Apr 2021 04:07 PM PDT Postfix/Dovecot I want to create my simple custom autoresponder for Postfix, in Python, for instance. I don't need any third-party ready-to-user one. I want it to have some custom conditions such as "autoreply only when 'from == A' or/and 'to == B' or/and "there's have been no autoprely to that email today', etc... I've found out that I'll need to use either content_filter or spawn in master.cf. Not milter, because milter is triggered because a message has been put into a queue, whereas I'll need to autoreply to messages that already have come through. Probably. Other better options? How to do implement that?  |
| Securely add a host (e.g. GitHub) to the SSH known_hosts file Posted: 01 Apr 2021 04:13 PM PDT How can I add a host key to the SSH I'm setting up a development machine, and I want to (e.g.) prevent I know that I can use So far, I've found...
How do I combine these facts? Given a prepopulated list of fingerprints, how do I verify that the output of I guess I'm asking the following: How do I get the fingerprint for a key returned by Let's assume that I've already been MITM-ed for SSH, but that I can trust the GitHub HTTPS page (because it has a valid certificate chain). That means that I've got some (suspect) SSH host keys (from Related: how do I hash the host portion of the output from  |
| Is there any point in having proxy config instead a match-all Location? Posted: 01 Apr 2021 05:03 PM PDT I have inherited a system and there are a few things that no one knows why there are how there are anymore. In the httpd configuration, I've come across a few occurrences of Location directives that match all paths: Isn't the above just equivalent to not having the Location directive? Is there any advantage of the first over the second?  |
| Using Let's Encrypt certs on LAN with DNS redirection? Posted: 01 Apr 2021 09:05 PM PDT I'm trying to use existing LE certs with a server on my LAN. I exposed port 443 to get the certs for mine.example.com and https access works fine from the WAN. However, I assumed (perhaps foolishly) that I might be able to use the same certs internally by setting up DNS redirection (using dnsmasq on a separate box) on my LAN to point mine.example.com to the local IP. Redirection works fine and points local machines to the internal IP when I go to mine.example.com but the certs now show 'Certificate Authority Invalid' errors. Perhaps I misunderstand how the CA process works but I assumed that, since LE certs are DNS based, they should still work with local DNS redirection. Does anyone know how to make this work? Or can anyone explain why it doesn't work? I know I can get different certs for local machines from LE but that would mean trying to configure the server to use different certs for internal and external access. Assuming I need to do this, is there an easy way to use different certs depending on source traffic? I'll be serving web content through nginx and also a Webmin admin panel so it may be relatively easy to do for nginx given the flexibility in the configs (although google hasn't been too helpful here either) but not sure about other web services running on the machine? P.S. sorry if this turns out to be a duplicate but couldn't find anything with a lot of searching here (or on the Googles).  |
| Powershell find orphaned processes Posted: 01 Apr 2021 10:03 PM PDT I am looking for a way to find processes that do not have a parent process running (orphaned processes). Im attempting to do this using win32_process. I have the query that returns the attributes needed, its the comparison im struggling with: I have tried compare-object -includeequal against the two arrays and get an overwhelming number of results- so much so i doubt truth of the operator given the arrays i'm feeding it. I think there is value added in the diff command, but am not familiar with the usage other than feeding it arrays as well. Does anyone have experience with the diff command and/or another solution? The end goal is to compare or diff the two arrays from the above wmi call: And then return only the ones that do not appear in both (orphaned). Thanks in advance!  |
| How can I get Laravel app routing to work in a sub-folder of a WordPress site? Posted: 01 Apr 2021 06:00 PM PDT I've got an existing WordPress site and I need to get a Laravel app to work in a sub-folder called 'api'. This is an nginx site, so .htaccess redirects will not work, and the best solution if it needs a redirect would be a PHP solution as I'm not sure I'll be able to access the nginx config directly on this particular server. I'm able to access the index.php file in the /public/ folder of the Laravel app, but going to /api/route/ takes me to a WordPress 404 page. I tried doing redirects in nginx config and PHP but nothing seems to be working. Is there something specific I need to do for putting a Laravel app in a sub-folder? I've inherited the project from another person and it is currently working where it is but it needs to be moved to a new server. My routes look like this:  |
| OwnCloud and Azure Active Directory integration Posted: 01 Apr 2021 07:05 PM PDT Is it possible to integrate ownCloud (https://owncloud.org) with Azure Active Directory for auth?  |
| nginx 405's with try_files for a DELETE request instead of proxying Posted: 01 Apr 2021 10:03 PM PDT I have nginx proxying to php-fpm with the following config: ``` Everything is working great until a DELETE request comes in like:
When this happens nginx returns a 405 (method not allowed) and doesn't appear to proxy the request to php-fpm. What's the best way to get DELETE/PUT requests to proxy? Is there way to bypass When hitting this URL, I see nothing in the error.log but access.log shows:
I've confirmed that I'm not hitting the proxy. My assumption is that nginx is blocking DELETE on the first "try" of  |
| lighttpd: remove charset=UTF-8 from content type Posted: 01 Apr 2021 04:07 PM PDT
How can I remove that? Setting the content type in PHP itself does not help; lighttpd still adds the charset parameter - as soon as the mime type begins with Removing from my config does also not help.  |
| bash rsync is Killed by signal 2 Posted: 01 Apr 2021 08:02 PM PDT I'm trying to prevent the user from cancelling the script by using ctrl + c. The following script executes completely, except Is it possible to avoid script: I'm suspecting that the ssh channel is dying before  |
| rsync over active ssh connection Posted: 01 Apr 2021 08:02 PM PDT Trying to script as clean as possible, I wonder if there is some solution for the following situation: One Linux server running sshd and one android device, with dropbear ssh client and rsync installed (no server). I'm writing a script to be run remotely with a cron that backups the android memory to the linux server. The cron calls something like: runthisscript.sh performs a few things with the existent data, and, what I want to do, in the middle of the script, is to rsync from the android device back to the server, taking advantage of the ssh connection that is already opened (as there is no sshd running on the android). I've developed other solutions, like breaking my server script in several parts and calling them one after another, with the rsync (android to server direction) in the middle, but I was looking for a more elegantly implemented solution (single script, most of the work done in the server side). Ideas?  |
| strftime returning time for wrong timezone Posted: 01 Apr 2021 07:05 PM PDT I'm trying to get "dts" to echo the current local time in vim (cygwin under Windows 7) byt the output is GMT+1 instead of the localtime (GMT-7). My abbreviation works fine on other machines, but I can't get it to work on this one. The abbreviation is: From the cygwin command line, TZ is set to America/Los_Angeles and the I have been unable to figure out what "ric" means.  |
| Configure a Local DNS Resolver That Only Caches for a Short Period Posted: 01 Apr 2021 06:18 PM PDT I am working on an application that will be used to verify new domains are configured correctly as they're set up for hosting. Part of this checks the validity of SPF, DomainKey, DKIM records, etc. I currently use a default TTL of one hour for most of these records. Occasionally a mistake is found in one of the records so it needs to be updated. Currently, if I've just tested the domain I have to wait for the system's resolver's cached record to expire before I can verify it is correct with my application. (Yes, I can check manually but I wrote the application so I don't have to). I would like to set up a DNS server on the system to act as a normal caching resolver except that it will expire records in a maximum of a set time such as five minutes or just not cache at all. Not all of the domains have DNS hosted on my normal name servers so this system would have to query the authoritative name servers for a domain rather that use upstream resolvers (which would just use their cached records). This machine is not currently running DNS of any kind so I can install BIND or djbdns (or something else if there's a good suggestion.  |
| You are subscribed to email updates from Recent Questions - Server Fault. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
| Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | |
No comments:
Post a Comment