Recent Questions - Server Fault |
- Can't access VNC port from local network
- Is there any rhyme or reason behind when to use list- and when to use describe- for the AWS CLI?
- Consul proxy sidecar, peer certificate mismatch
- Strange behaviour in CENTOS 7 where binary is not available as root, but is available to user data process
- Path of connection between two EC2 instances
- Putty customization
- Can I get ip lease from DHCP router for linux virtual interface?
- ssh port forwarding (tunneling in HPC)
- How to hide "Alterative names" SSL certificates (in SSLlabs test)?
- SSSD - Server does not see subdomains
- Intermediate CA Certificate Renewal for Direct Access
- postfix won't send mail via Amazon SES - Host or domain name not found
- Windows server 2016 Failover Cluster does not complete Forming the cluster
- How to Use Azure Key Vault w/ Web App
- SuspiciousRemoteServerError what I can do?
- IIS returning 404 on PDF File
- Zabbix- agent hostname no dns
- Periodic broken connections between Nginx and uWSGI
- <IfModule prefork> in Apache 2.4 (Amazon) is not in httpd.conf
- Skype for Business/Lync 2013 - Wrong Display Names
- Receiving multicast traffic on host-only interface
- How do I connect a SoftEther bridge to a server without getting an authentication error?
- Proxmox vps container connection problems
- 2-way SSL with apache forward proxy
- Debugging Gunicorn + Nginx + Django
- Why is pfSense blocking multicast traffic when it is explicitly enabled?
- Stop nginx from trimming file name in directory list?
- GPO Comparison Tool
- IIS7 hundreds of connections in CLOSE_WAIT
- Setting up PerformancePoint Services on Sharepoint 2010: connection errors
| Can't access VNC port from local network Posted: 08 Apr 2021 10:18 PM PDT I've installed VNC on CentOS and enabled it on port 5901. I made sure that selinux, firewalld and iptables were disabled/stopped on the system for troubleshooting purposes. Now I can successfully test access to port 5901 (using netcat) using localhost, but if I use the IP address, even if connecting locally, I get "connection refused": Needless to say, I can't connect with a VNC client. Does anyone have any idea of what I've missed either in my VNC configuration or firewall settings that could be causing this? Thanks in advance.  |
| Is there any rhyme or reason behind when to use list- and when to use describe- for the AWS CLI? Posted: 08 Apr 2021 05:53 PM PDT For the AWS CLI the right command is: But not: But there is: My current workflow is:
But I wish I knew some reason to help choose between  |
| Consul proxy sidecar, peer certificate mismatch Posted: 08 Apr 2021 03:47 PM PDT I'm trying to connect two services web and db(mysql) use the tutorial in Secure Service Communication with Consul Service Mesh and Envoy | Consul - HashiCorp Learn as model. When I try to connect from web into db got this lines on web proxy: and this line on db proxy: I use this line to run the proxy on web: And this line for db: Thanks in advance Nomar  |
| Posted: 08 Apr 2021 03:38 PM PDT In AWS EC2, I am using Centos 7, I observe strange behaviour where a binary for Hashicorp Vault CLI (/usr/local/bin/vault) is available during boot to commands I run in user data. It is also available for users normally. However, if I run Why would a command be available in user data as root, but not if I try to login as root using  |
| Path of connection between two EC2 instances Posted: 08 Apr 2021 06:58 PM PDT I have an EC2 instance running in my own VPC. One of my partners also has an EC2 running in their own VPC in AWS. The two instances connect to each other via TCP to exchange data. Connection is made through their DNS address. I am wondering about two scenarios:
What is the path taken by the TCP connection between the two instances? Does it matter that they both live within AWS? When the instances are in the same region, does the connection ever leave AWS to an external network switch / router?  |
| Posted: 08 Apr 2021 06:06 PM PDT Advice, please, how to customize Putty, that this window got normal? I mean tables, all this xx qqq and so on. My - is default.  |
| Can I get ip lease from DHCP router for linux virtual interface? Posted: 08 Apr 2021 10:34 PM PDT I have a mikrotik router that acts as a DHCP server. I created some virtual interface on my raspberry pi using : Though I can ping them, but they are not visible in my routers DHCP lease list. Can I make them appear as a real device on my router?  |
| ssh port forwarding (tunneling in HPC) Posted: 08 Apr 2021 06:19 PM PDT I have an application server that runs on a compute node. The server opens a port (9000) and I then run a command for tunneling between my local machine and the server:
Once this is done I can essentially use my server's web interface on a browser with I use  |
| How to hide "Alterative names" SSL certificates (in SSLlabs test)? Posted: 08 Apr 2021 10:28 PM PDT when running ssllabs.com's test on my website, the output contains "Certificate #2" for (one of the) other domains hosted on the NGINX web server. It is red and not Trusted but I prefer to simply not have this option, where a program can see which other domains are hosted on this server.  |
| SSSD - Server does not see subdomains Posted: 08 Apr 2021 03:37 PM PDT Good morning, I have four servers in the same subnet, all running RHEL 7 and using SSSD to authenticate against an Active Directory domain controller. With one (and only one) of them I have an issue where the server isn't able to read the AD global catalog. The offending server: And its peer: I've turned the logging verbosity up. When I restart SSSD I see this in the logs The thing that's confusing me is the other machines have the same resolv.conf and host files. Does anyone know what I'm doing wrong? Additional info: I explicitly enabled the global catalog in sssd.conf: And I'm now seeing some additional errors in the log: I don't think this is a fix, but it feels like progress.  |
| Intermediate CA Certificate Renewal for Direct Access Posted: 08 Apr 2021 03:56 PM PDT Background: We have DA, single site config. Enterprise PKI with Offline Root and online Intermediate CA (Intermediate CA used to issue Computer Certs to clients for DA). The Intermediate CA's cert is expiring, and we have issued a new Intermediate Cert. That cert has propagated across the enterprise and is in the trusted intermediate store for all domain joined clients, servers, including DA servers, etc. Both the old and new Intermediate Certs are valid and in clients Intermediate Trusted CA stores. Problem: Direct Access servers show IPSec error as the configuration still has the old Intermediate CA Certificate in it and needs to be updated. Question: What is the impact to DA clients once we switch over in that configuration? I understand it will update GPO and clients will get that GPO, but will it immediately break DA clients until they get a GP Update, or will this change not impact client connectivity?  |
| postfix won't send mail via Amazon SES - Host or domain name not found Posted: 08 Apr 2021 10:05 PM PDT I have been trying to configure my Amazon EC2 instance (running Ubuntu 20.04) to send mail via Amazon SES. I have various settings I've borrowed from an earlier (successful) configuration to prevent any local mail delivery on this machine and to make sure all outgoing mail is coming from a single sender address. For some reason, postfix refuses to send the mail. The errors always look like this (I have redacted identifiable domains etc): Here is my postconf: The file where the XXX... and YYY... are credentials that currently work from an older server. I have seen a variety of posts on this forum addressing this type of error, but the solutions they suggest don't solve my problem:
 |
| Windows server 2016 Failover Cluster does not complete Forming the cluster Posted: 08 Apr 2021 04:04 PM PDT I am trying to set up a 2 Node failover cluster using Windows server 2016. I deployed the servers in AWS. Here are the details. I used ;
Attaching the iSCSI disks are successful. Cluster Validation is also successful. But when I am going to create the Cluster, it stuck in the FORMING CLUSTER stage for a long time and gives me the following errors. I did a lot of research and I granted the domain administrators' permissions necessary to create cluster resource objects (computers). All the servers are in the same folder. While creating the cluster I can see it creates a computer with the same cluster name I gave. But it does not finish creating the cluster. I struggled so hard to solve this but still no luck. Seeking for a solution. I did a lot of research and I granted the domain administrators' permissions necessary to create cluster resource objects (computers). All the servers are in the same folder. While creating the cluster I can see it creates a computer with the same cluster name I gave. But it does not finish creating the cluster. Specially, I remember when I tried to add NODEs, I only could add the local node by its netbios name. When I use the netbios name for remote node, it gives an error. I used IP addresses and then it worked. But in the tutorial videos I can see they add both NODES with their short netbios name. I am doubting if that is the problem. I struggled so hard to solve this but still no luck. Seeking for a solution.  |
| How to Use Azure Key Vault w/ Web App Posted: 08 Apr 2021 09:04 PM PDT I have an Azure Web App for a client project. The project also requires Azure SQL Databases and Blob Storage. All pieces mentioned are up and running but we've been told we can't have any password stored in the web.config or in the azure portal under application settings. I created my Key Vault and created an access policy for the web app and my user account. If I select "secrets" in the keyvault menu I only see a few of the database connection strings but not all. I also don't see anything about the connection to our blob container. Where exactly is keyvault pulling this information from - is it from the application settings menu for the web app or in the web.config code? I'd appreciate any clarity or direction somebody can provide.  |
| SuspiciousRemoteServerError what I can do? Posted: 08 Apr 2021 06:00 PM PDT from some time i have a problem with send e-mails. I have a Exchange 2013 with SP2, newest CU. When I try to send e-mail with attachment I get a error: I have a kaspersky security 8.0. SMTPSEND.SuspiciousRemoteServerError; remote server disconnected abruptly; retry will be delayed};{FQDN=}; What i've tried:
I dont have any more idea what I can do. Ive tried SMTPDiag but everything looks fine. Help me please...  |
| Posted: 08 Apr 2021 10:06 PM PDT I have a IIS 10.0 server that everything is working fine, with one issue. Any .pdf file returns 404. I know permissions are correct as all the image files in the same folder are working fine. The PDF mime type exists in both the IIS root and the site and there is no Request filtering set. Most the results on the web are for an older version of IIS, so I am out of ideas. Anyone else run into this?  |
| Posted: 08 Apr 2021 07:02 PM PDT I have two windows computers with agents installed. I have setup my host on Zabbix Server. The agents(from home) can communicate with Zabbix server(AWS) via VPN. VPN has been confirmed and is up. Right now the Zabbix server is failing to communicate with agents due to hostname. From the Zabbix server terminal i cannot resolve the windows hostname due to no DNS. They are both not connected to a DC However I added the host names with IPs to the servers /etc/hosts. I can now resolve, but Zabbix is still cannot find hostname Do i really need to make the computers with agents part of domain and use DNS?  |
| Periodic broken connections between Nginx and uWSGI Posted: 08 Apr 2021 06:00 PM PDT My Django site is hosted under Nginx/uWSGI. The site becomes unreachable from time to time for a period from few minutes to few hours. It just returns 500 after long waiting. I can see harakiri messages in uWSGI log when this happens. Requests do not reach Django application (I've tried debugging). Instead I'm getting errors in Nginx log: In uWSGI logs I see this kind of messages: It seems the uwsgi messages depend on harakiri value. I can't be sure because the problem is on the heavy loaded production server and I can't do enough experiments. I've set Nginx settings: uWSGI settings: What is the problem and how do I fix this?  |
| <IfModule prefork> in Apache 2.4 (Amazon) is not in httpd.conf Posted: 08 Apr 2021 07:02 PM PDT I am running an AWS EC2 instance with LAMP (apache 2.4 (amazon). I am trying to tune the prefork module but I can't find it. I have checked the httpd.conf file and it is not in there. I have confirmed that it is running prefork mpm. I am looking for the somthing similar to the following: Does anyone know where those files are located?  |
| Skype for Business/Lync 2013 - Wrong Display Names Posted: 08 Apr 2021 04:04 PM PDT Recently we've been noticing an issue where when searching for a user in Skype For Business/Lync 2013, a different user will show up in the search results. Doing some research, this seems to be related to "proxy addresses" as I notice the user that shows up incorrectly in place of the actual user (we're searching for) has their email address added as an alias (smtp) address in Exchange. So we search for user A, but User B's name shows up. User B's email address (an ex-employee that isn't in Exchange anymore) is added as an alias (smtp) address as part of User A's email addresses in Exchange. The link below seems to describe our issue, but we're running Lync server 2013 and not 2010. Is there anyway to fix this issue for Lync Server 2013? http://www.markc.me.uk/markc/Blog/Entries/2012/8/8_Lync_showing_wrong_name_for_a_user.html  |
| Receiving multicast traffic on host-only interface Posted: 08 Apr 2021 05:01 PM PDT I have a VirtualBox host (linux) with a Windows 8.1 guest. The virtual network configuration for that guest:
After disabling auto metric on the host-only Adapter2 (in the guest OS) and fixing it to either 1 or 800 (i.e. it doesn't matter if it is higher or lower than the metrics of Adapter1), I could send multicast traffic (via tcpreplay) from the host to the paravirtualized interface (eth0), and an app on the guest can receive it on Adapter1. When sending the same data to host-only adapter (vboxnet0) though, I cannot receive it in the guest on Adapter2. Although wireshark does capture the packets:
This looks similar to when I try to receive packets that arrive on the NIC, without joining the multicast groups, i.e. it looks like the network stack discarding packets because the app has not joined for those multicast addresses. So how is it possible to receive multicast data on a host-only adapter?  |
| How do I connect a SoftEther bridge to a server without getting an authentication error? Posted: 08 Apr 2021 09:04 PM PDT I've been playing around with SoftEther, and I'm trying to use the VPNCMD utility to create a site to site VPN. However, when I try to get the Cascade connection up between the bridge and the server, I get a user authentication error. Which is weird, because the user doesn't even have a password set on it. These are all in VM's that have no trouble pinging each other. Here's my code on the bridge side: All of the settings are correct to what's set up on the cluster controller. However, we get an error: Any ideas?  |
| Proxmox vps container connection problems Posted: 08 Apr 2021 08:02 PM PDT I have Proxmox on my node server which have ip:5.189.190.* and I created openvz container on an ip : 213.136.87.* and installed centos 6 on it The problem: Cann't connect to container ssh directly Can't open apache server centos welcome page When I enter container from the node can't ping any sites or wget any url but I can connect 127.0.0.1 and the main node ip My Configuration: container /etc/resolv.conf container /etc/sysconfig/network-scripts/ifcfg-venet0 container /etc/sysconfig/network-scripts/ifcfg-venet0 node /etc/network/interfaces node /etc/resolv.conf having DC nameservers correctly container ping result: container traceroute result: node ping result: node traceroute result: Any ideas will be welcomed Thanks  |
| 2-way SSL with apache forward proxy Posted: 08 Apr 2021 10:06 PM PDT I'm working to set up Apache as a forward proxy with a client that uses 2-way SSL. The basic flow is myApplication --via http--> Apache proxy --via 2 way SSL--> client. After setting everything up, when I try to start Apache, I'm getting a "incomplete client cert configured for SSL proxy (missing or encrypted private key?)" error. What I can't figure out is that the client cert I'm using in the SSLProxyMachineCertificateFile directive has both the unencrypted private key and the public cert already. Any suggestions on what I'm missing and/or anything else I can try? Does the all-in-one machine cert need to have the chain in it as well? Here's what my vhost looks like. EDIT: I updated the basic flow to clarify what kind of connection I'm trying to use between the application, apache, and the client.  |
| Debugging Gunicorn + Nginx + Django Posted: 08 Apr 2021 05:01 PM PDT I'm trying to deploy a readthedocs instance on my own server. The recommended way to deploy is using Gunicorn + nginx with postgres. Because there's basically no documentation on how to do this (except from their fabfiles which of course, only works on their server), I've been trying to setup my own server, manually. Here's my The The command I use to run the gunicorn server is: Then if I try to access Now I am not a sysadmin, and have basically 0 experience with django, gunicorn, or nginx before. I've been googling and playing around the configuration for weeks, with 0 result. My question is:
Thank you very much.  |
| Why is pfSense blocking multicast traffic when it is explicitly enabled? Posted: 08 Apr 2021 07:19 PM PDT I have a pair of pfSense firewall/routers set up in CARP/XML Config cluster. On the LAN side, the switch also has a pair of servers running corosync/pacemaker/drbd. These are on a different ip network, but still generate multicast packets. For the life of me, I cannot get pfSense to allow the packets. I tried using the easy rule button, but that failed. I also added a rule that allows all ports, all addresses with a destination of the multicast address, and enabled "allowopts" and "nostate"; all to no avail. The traffic is still stopped by the default rule. Any idea what I might be doing wrong? Here is a shot of the rules (and yes, they've been reloaded a few times: I've also tried "no state." The rule under the title there is the Easy-Rule, and it chose the 239 address for both the source and destination; the src port is * and the dest port is 5405. Here is the log showing the rejection by the default rule: It's worth noting that it originally showed the scrubbing rule was also blocking, so I disabled the packet fragment scrubbing.  |
| Stop nginx from trimming file name in directory list? Posted: 08 Apr 2021 05:54 PM PDT Just a quick question: How can I prevent nginx from trimming file name with ... in listing directory?  |
| Posted: 08 Apr 2021 06:09 PM PDT Does anyone know of a GPO comparison tool, preferably free (or cheap). I need to compare settings from two GPOs to see what's missing in the target GPO. edit: just to clarify, I need a tool which can compare the settings for me. I can do it manually, but it is cumbersome and also has the potential for me making mistakes.  |
| IIS7 hundreds of connections in CLOSE_WAIT Posted: 08 Apr 2021 05:14 PM PDT I have a .Net application on my IIS7 server it was working fine until I had to move it to another server. I moved the exact same code to the new server and I noticed that after some hours the website stopped responding to remote requests but if I did remote desktop to the server it responded to the request done to localhost. If I stop the website and the application pool it started working fine again. I was able to track the problem to hundreds of requests left in CLOSE_WAIT state to the http port that are never closed (I waited a few hours and they remain the same). Any ideias?  |
| Setting up PerformancePoint Services on Sharepoint 2010: connection errors Posted: 08 Apr 2021 08:02 PM PDT I have tried to setup PerformancePoint Services on SharePoint 2010, but every time I try to use the dashboard designer, I get this error: "An error has occurred attempting to contact the specified SharePoint site" I have tried these steps but it hasn't helped. Any ideas? The event log gives the following information:
 |
| You are subscribed to email updates from Recent Questions - Server Fault. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
| Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | |
No comments:
Post a Comment