Saturday, July 3, 2021

Recent Questions - Server Fault

Recent Questions - Server Fault


How should i debug a Microsoft CIM that fails because MSFT_NetRoute be "not found"?

Posted: 03 Jul 2021 05:49 AM PDT

In general, how should one debug a failure related to CmdletizationQuery_NotFound messages, and why would the MSFT_NetRoute module register such an error?

Details

Specifically, my Kubernetes CNI provider (antrea) is posting an error message related to MSFT_NetRoute when it starts up, because it can't succesfully run a powershell query necessary for bootstrapping itself. The error message has a suspicious string, which i think might be related to powershell version, or external things i havent installed... That is, this error message seems unrelated to any CNI specific logic...

   + FullyQualifiedErrorId : CmdletizationQuery_NotFound,Get-NetRoute  

That Get-NetRoute complaint, is puzzling because it seems to be indicating that Get-NetRoute is not a valid query, but https://docs.microsoft.com/en-us/powershell/module/nettcpip/get-netroute?view=windowsserver2019-ps seems to imply thet Get-NetRoute is available by default in powershell.

The error message

ROOT/StandardCimv2/MSFT_NetRoute class on the  CIM server: SELECT * FROM MSFT_NetRoute  WHERE ((DestinationPrefix LIKE  '0.0.0.0/0')) AND ((InterfaceIndex = 26)). Verify query parameters and retry.  At line:1 char:3  + $(Get-NetRoute -InterfaceIndex 26 -DestinationPrefix 0.0.0.0/0 ).Next ...  +   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~      + CategoryInfo          : ObjectNotFound: (MSFT_NetRoute:String) [Get-NetRoute], CimJobException      + FullyQualifiedErrorId : CmdletizationQuery_NotFound,Get-NetRoute    

Powershell version

The powershell version on this machine is seemlingy pretty up to date... (5.1 i think is normal on windows server 2019)...

Name                           Value  ----                           -----  PSVersion                      5.1.17763.1852  PSEdition                      Desktop  PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}  BuildVersion                   10.0.17763.1852  CLRVersion                     4.0.30319.42000  WSManStackVersion              3.0  PSRemotingProtocolVersion      2.3  SerializationVersion           1.1.0.1    

Note: I've tested this in similar versions of windows server 2019 with a similar 5.1.x powershell version (5.1.17763.1490) and not seen this failure. So,

Questions

  • is there something i need to do to make Get-NetRoute work properly on my machines?
  • is this related to something else (i.e. the way network interfaces are configured on the individual VM) ? Note that this is a VirtualBox VM, so if there was a issue with bridged or NAT networking, I woudln't be totally shocked.

How to disable caching in Google Cloud (php, magento, app.yaml?)

Posted: 03 Jul 2021 05:25 AM PDT

i'm new with google cloud and here is my problem:

I have a magento/bitnami installation in gcc and i have to run some php files for updating the product database

After the execution of a php file, the cloud (i suppose!) is caching the php-file for about 24 hours (Changes in the file will only occur after 24 hours min) In the documentation they are talking about only 10 minutes caching in the default configuration so i'm not sure if it's really the cloud which is caching.

I've tried a "header" function in the php file to disable the cloud cache: no results: (header("Cache-Control: no-cache, must-revalidate"); // HTTP/1.1)

I've tried to create a app.yaml file with "cache-control" but i don't know where to write and how to activate this specific app.yaml (i'm new, have read the documentation but i haven't find a step by step example...)

Can anyone help me? thanks.

kind regards

Why does Forticlient VPN stops connecting at 98% after being disconnected?

Posted: 03 Jul 2021 04:09 AM PDT

I'm using free version of FortiClient VPN (v6.4.3.1608) to connect to my company's VPN. Once in a while, my connection would drop automatically when there's a bad network or when I put my computer to sleep. Most of the time when I try to reconnect back, it would get stuck at 98% (see below) for half a minute enter image description here

Then, it would fail silently and clear the Password field.

enter image description here

My VPN Settings

enter image description here

ForitClient Error logs (last 50 lines)

NOTE#1: I have replaced sensitive data in the logs with the words REDACTED.

NOTE#2: The last 17 lines (starting from fortissl_connect: device=ftvnic) are my attempts in trying to reconnect to VPN unsuccessfully.

NOTE#3: I believe the connection was dropped at this line Ras: connection to fortissl terminated

...  02/07/2021 14:01:57 info    sslvpn  FortiSslvpn: 19960: Ras: connection to fortissl terminated  02/07/2021 14:01:57 error   sslvpn  FortiSslvpn: 32052: Error find interface for local_gwy 160aa8c0  02/07/2021 14:01:57 error   sslvpn  (repeated 1 times in last 1 sec) FortiSslvpn: 32052: Error find interface for local_gwy 160aa8c0  02/07/2021 14:02:00 info    system  date=2021-07-02 time=14:01:59 logver=1 id=96900 type=traffic subtype=system eventtype=traffic level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T.22 devicemac=Re-da-ct-ed-22-33 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@REDACTEDCOM msg="Traffic log" sessionid=306713590 srcname=sslvpn srcip=RED.DAC.T.22 srcport=0 direction=outbound dstip=vpn.REDACTEDCOM.net dstport=10443 proto=6 rcvdbyte=112206696283 sentbyte=51564226372 utmaction=passthrough utmevent=vpn threat=disconnect userinitiated=0 browsetime=0  02/07/2021 14:48:05 info    system  date=2021-07-02 time=14:48:04 logver=1 id=96823 type=systemevent subtype=system eventtype=status level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T2.139 devicemac=Re-da-ct-ed-22-22 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@REDACTEDCOM msg="Checking for updates"  02/07/2021 14:48:50 info    update  date=2021-07-02 time=14:48:49 logver=1 id=96819 type=systemevent subtype=update eventtype=status level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T2.139 devicemac=Re-da-ct-ed-22-22 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@REDACTEDCOM msg="Update was successful to the given version for the given module"  02/07/2021 14:48:50 info    update  date=2021-07-02 time=14:48:50 logver=1 id=96819 type=systemevent subtype=update eventtype=status level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T2.139 devicemac=Re-da-ct-ed-22-22 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@REDACTEDCOM msg="Update was successful to the given version for the given module"  02/07/2021 14:51:14 info    sslvpn  FortiSslvpn: 24572: fortissl_connect: device=ftvnic  02/07/2021 14:51:16 error   sslvpn  FortiSslvpn: 23844: error: unexpected 512 bytes read before tunnel start.  02/07/2021 14:51:16 error   sslvpn  FortiSslvpn: 23844: error: SslBlockingWrite() - Unknown error = 5  02/07/2021 14:51:16 error   sslvpn  FortiSslvpn: 23844: error: ssl_connect:1  02/07/2021 14:51:16 error   sslvpn  FortiSslvpn: 23844: tunnel_to_fgt error  02/07/2021 14:51:19 error   sslvpn  FortiSslvpn: 39664: error: ras_loop(), waitResult=1.  02/07/2021 15:02:15 info    sslvpn  FortiSslvpn: 19120: fortissl_connect: device=ftvnic  02/07/2021 15:02:18 error   sslvpn  FortiSslvpn: 24308: error: unexpected 512 bytes read before tunnel start.  02/07/2021 15:02:18 error   sslvpn  FortiSslvpn: 24308: error: SslBlockingWrite() - Unknown error = 5  02/07/2021 15:02:18 error   sslvpn  FortiSslvpn: 24308: error: ssl_connect:1  02/07/2021 15:02:18 error   sslvpn  FortiSslvpn: 24308: tunnel_to_fgt error  02/07/2021 15:02:20 error   sslvpn  FortiSslvpn: 10084: error: ras_loop(), waitResult=1.  02/07/2021 15:03:48 info    sslvpn  date=2021-07-02 time=15:03:47 logver=1 id=96602 type=securityevent subtype=sslvpn eventtype=status level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T2.139 devicemac=Re-da-ct-ed-22-22 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" msg="SSLVPN service started successfully" vpnstate=  02/07/2021 15:03:53 info    system  date=2021-07-02 time=15:03:51 logver=1 id=96823 type=systemevent subtype=system eventtype=status level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T2.139 devicemac=Re-da-ct-ed-22-22 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" msg="Checking for updates"  02/07/2021 15:13:15 error   sslvpn  date=2021-07-02 time=15:13:14 logver=1 id=96603 type=securityevent subtype=sslvpn eventtype=error level=error uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T2.139 devicemac=Re-da-ct-ed-22-22 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@redacted.pvt msg="SSLVPN tunnel connection failed" vpnstate= vpntunnel="REDACTEDCOM VPN SG" vpnuser=ricardo remotegw=vpn.REDACTEDCOM.net  02/07/2021 15:13:31 info    sslvpn  FortiSslvpn: 17004: fortissl_connect: device=ftvnic  02/07/2021 15:13:31 info    sslvpn  FortiSslvpn: 16988: PreferDtlsTunnel=0  02/07/2021 15:13:35 info    system  date=2021-07-02 time=15:13:34 logver=1 id=96900 type=traffic subtype=system eventtype=traffic level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T2.139 devicemac=Re-da-ct-ed-22-22 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@REDACTEDCOM msg="Traffic log" sessionid=1144101873 srcname=sslvpn srcip=RED.DAC.T.45 srcport=0 direction=outbound dstip=vpn.REDACTEDCOM.net dstport=10443 proto=6 rcvdbyte=4294968532 sentbyte=7113 utmaction=passthrough utmevent=vpn threat=connect userinitiated=0 browsetime=0  02/07/2021 15:13:35 info    sslvpn  date=2021-07-02 time=15:13:35 logver=1 id=96600 type=securityevent subtype=sslvpn eventtype=status level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T2.139 devicemac=Re-da-ct-ed-22-22 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@redacted.pvt msg="SSLVPN tunnel status" vpnstate=connected vpntunnel="REDACTEDCOM VPN SG"  02/07/2021 20:48:03 info    system  date=2021-07-02 time=20:48:02 logver=1 id=96823 type=systemevent subtype=system eventtype=status level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T.45 devicemac=Re-da-ct-ed-22-33 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@REDACTEDCOM msg="Checking for updates"  02/07/2021 20:48:31 info    update  date=2021-07-02 time=20:48:30 logver=1 id=96819 type=systemevent subtype=update eventtype=status level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T.45 devicemac=Re-da-ct-ed-22-33 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@REDACTEDCOM msg="Update was successful to the given version for the given module"  02/07/2021 20:48:30 info    update  (repeated 1 times in last 0 sec) date=2021-07-02 time=20:48:30 logver=1 id=96819 type=systemevent subtype=update eventtype=status level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T.45 devicemac=Re-da-ct-ed-22-33 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@REDACTEDCOM msg="Update was successful to the given version for the given module"  02/07/2021 21:09:01 info    sslvpn  FortiSslvpn: 13484: Ras: connection to fortissl terminated  02/07/2021 21:09:01 error   sslvpn  FortiSslvpn: 16960: Error find interface for local_gwy 2d0aa8c0  02/07/2021 21:09:01 error   sslvpn  (repeated 1 times in last 1 sec) FortiSslvpn: 16960: Error find interface for local_gwy 2d0aa8c0  02/07/2021 21:09:03 info    system  date=2021-07-02 time=21:09:02 logver=1 id=96900 type=traffic subtype=system eventtype=traffic level=info uid=UID_REDACTED_FOR_STACKOVERFLOW devid=DEVID_REDACTED hostname=redacted-laptop pcdomain=redacted.pvt deviceip=RED.DAC.T.45 devicemac=Re-da-ct-ed-22-33 site=N/A fctver=6.4.3.1608 fgtserial=DEVID_REDACTED emsserial=N/A os="Microsoft Windows 10 Professional Edition, 64-bit (build 19041)" user=ricardo@REDACTEDCOM msg="Traffic log" sessionid=1144101873 srcname=sslvpn srcip=RED.DAC.T.45 srcport=0 direction=outbound dstip=vpn.REDACTEDCOM.net dstport=10443 proto=6 rcvdbyte=4493243094 sentbyte=50396290 utmaction=passthrough utmevent=vpn threat=disconnect userinitiated=0 browsetime=0  02/07/2021 21:17:27 info    sslvpn  FortiSslvpn: 6216: fortissl_connect: device=ftvnic  02/07/2021 21:17:30 error   sslvpn  FortiSslvpn: 4348: error: unexpected 512 bytes read before tunnel start.  02/07/2021 21:17:30 error   sslvpn  FortiSslvpn: 4348: error: SslBlockingWrite() - Unknown error = 5  02/07/2021 21:17:30 error   sslvpn  FortiSslvpn: 4348: error: ssl_connect:1  02/07/2021 21:17:30 error   sslvpn  FortiSslvpn: 4348: tunnel_to_fgt error  02/07/2021 21:17:32 error   sslvpn  FortiSslvpn: 16448: error: ras_loop(), waitResult=1.  02/07/2021 21:18:20 info    sslvpn  FortiSslvpn: 23560: fortissl_connect: device=ftvnic  02/07/2021 21:18:22 error   sslvpn  FortiSslvpn: 21232: error: unexpected 512 bytes read before tunnel start.  02/07/2021 21:18:22 error   sslvpn  FortiSslvpn: 21232: error: SslBlockingWrite() - Unknown error = 5  02/07/2021 21:18:22 error   sslvpn  FortiSslvpn: 21232: error: ssl_connect:1  02/07/2021 21:18:22 error   sslvpn  FortiSslvpn: 21232: tunnel_to_fgt error  02/07/2021 21:18:25 error   sslvpn  FortiSslvpn: 17672: error: ras_loop(), waitResult=1.  02/07/2021 21:19:45 info    sslvpn  FortiSslvpn: 24152: fortissl_connect: device=ftvnic  02/07/2021 21:19:47 error   sslvpn  FortiSslvpn: 23772: error: unexpected 512 bytes read before tunnel start.  02/07/2021 21:19:47 error   sslvpn  FortiSslvpn: 23772: error: SslBlockingWrite() - Unknown error = 5  02/07/2021 21:19:47 error   sslvpn  FortiSslvpn: 23772: error: ssl_connect:1  02/07/2021 21:19:47 error   sslvpn  FortiSslvpn: 23772: tunnel_to_fgt error  02/07/2021 21:19:49 error   sslvpn  FortiSslvpn: 10176: error: ras_loop(), waitResult=1.  

Workaround

To get around this, I will have to either sign-out and sign-in to Windows again or restart my PC.

Override virsh network from xml file to apply custom dnsmasq options outside

Posted: 03 Jul 2021 03:59 AM PDT

I want to automatically add a DNS CNAME entry using the dnsmasq namespace. Since this seems too complex to be handled by virsh net-edit, my idea is to use virsh net-dumpxml, apply the modifications and re-import the network. While the export works, the import throws an error.

$ virsh net-update --xml network.yml  error: command 'net-update' requires <network> option  error: command 'net-update' requires <command> option  error: command 'net-update' requires <section> option  

It seems that net-update doesn't work that way, so I tried it with net-create

$ virsh net-create --file network.yml  error: Failed to create network from network.yml  error: Requested operation is not valid: network is already active as 'mynet.internal'  

According to the help, there is no switch to override an existing network.

Wildcard CNAME record specified by libvirts dnsmasq:options namespace doesn't work, only specific subdomains works

Posted: 03 Jul 2021 05:57 AM PDT

Since v5.6.0, libvirt added a dnsmasq namespace with the element, which allows to specify options directly to the underlying dnsmasq server. I'd like to create a wildcard DNS entry for my applications with that option. So I used virsh net-edit, changed <network> to <network xmlns:dnsmasq='http://libvirt.org/schemas/network/dnsmasq/1.0'> and added the following options:

  <dnsmasq:options>      <dnsmasq:option value='cname=boards.cnx65-k8s.hobel.internal,cnx65-k8s.hobel.internal'/>      <dnsmasq:option value='cname=*.app.cnx65-k8s.hobel.internal,cnx65-k8s.hobel.internal'/>    </dnsmasq:options>  

After that, the network was restarted (virsh net-destroy && virsh net-start) and the targeting VM too (virsh destroy && virsh start).

The cname=boards.cnx65-k8s.hobel.internal works perfectly:

$ dig +short boards.cnx65-k8s.hobel.internal @192.168.10.1  cnx65-k8s.hobel.internal.  192.168.10.136  

But dig +short x.app.cnx65-k8s.hobel.internal @192.168.10.1 doesn't resolve to any ip address. The generated configuration file /var/lib/libvirt/dnsmasq/hobel.internal.conf contains both cname entries at the end:

strict-order  user=libvirt-dnsmasq  local=/hobel.internal/  domain=hobel.internal  expand-hosts  pid-file=/run/libvirt/network/hobel.internal.pid  except-interface=lo  bind-dynamic  interface=virbr1  dhcp-range=192.168.10.10,192.168.10.254,255.255.255.0  dhcp-no-override  dhcp-authoritative  dhcp-lease-max=245  dhcp-hostsfile=/var/lib/libvirt/dnsmasq/hobel.internal.hostsfile  addn-hosts=/var/lib/libvirt/dnsmasq/hobel.internal.addnhosts  cname=boards.cnx65-k8s.hobel.internal,cnx65-k8s.hobel.internal  cname=*.app.cnx65-k8s.hobel.internal,cnx65-k8s.hobel.internal  

According to this answer, I added auth-server and interface-name to the options:

  <dnsmasq:options>      <dnsmasq:option value='cname=boards.cnx65-k8s.hobel.internal,cnx65-k8s.hobel.internal'/>      <dnsmasq:option value='cname=*.app.cnx65-k8s.hobel.internal,cnx65-k8s.hobel.internal'/>      <dnsmasq:option value='auth-server=cnx65-k8s.hobel.internal,virbr1'/>      <dnsmasq:option value='interface-name=cnx65-k8s.hobel.internal,virbr1'/>    </dnsmasq:options>  

But x.app.cnx65-k8s.hobel.internal is still not resolved:

$ dig x.app.cnx65-k8s.hobel.internal @192.168.10.1    ; <<>> DiG 9.16.1-Ubuntu <<>> x.app.cnx65-k8s.hobel.internal @192.168.10.1  ;; global options: +cmd  ;; Got answer:  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43624  ;; flags: qr rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1  ;; WARNING: recursion requested but not available    ;; OPT PSEUDOSECTION:  ; EDNS: version: 0, flags:; udp: 4096  ;; QUESTION SECTION:  ;x.app.cnx65-k8s.hobel.internal.        IN      A    ;; Query time: 0 msec  ;; SERVER: 192.168.10.1#53(192.168.10.1)  ;; WHEN: Sat Jul 03 12:14:05 CEST 2021  ;; MSG SIZE  rcvd: 59  

Why is this not working? Even the official libvirt documentation lists a cname wildcard entry as example:

<dnsmasq:option value="cname=*.foo.example.com,master.example.com"/>  

Connecting to Google Cloud MySql DB with a changing IP address

Posted: 03 Jul 2021 02:31 AM PDT

I connect to a Google Cloud MySql db from my laptop, however my IP address not only changes at home, but also when I travel. I have to specify the allowed public ip address in Google Cloud, but every time I reconnect I have to log in & update google cloud with my new IP address. What is the best solution to not have to do that?

Why can't re-install apache2?

Posted: 03 Jul 2021 01:39 AM PDT

Remove and purge the apache2 in my debian.

sudo apt-get remove --purge apache2  

And re-install it.

sudo apt update  sudo apt install apache2  Reading package lists... Done  Building dependency tree         Reading state information... Done  The following additional packages will be installed:    apache2-data  Suggested packages:    apache2-doc apache2-suexec-pristine | apache2-suexec-custom  The following NEW packages will be installed:    apache2 apache2-data  0 upgraded, 2 newly installed, 0 to remove and 33 not upgraded.  Need to get 0 B/416 kB of archives.  After this operation, 1,527 kB of additional disk space will be used.  Do you want to continue? [Y/n] y  Selecting previously unselected package apache2-data.  (Reading database ... 287559 files and directories currently installed.)  Preparing to unpack .../apache2-data_2.4.38-3+deb10u4_all.deb ...  Unpacking apache2-data (2.4.38-3+deb10u4) ...  Selecting previously unselected package apache2.  Preparing to unpack .../apache2_2.4.38-3+deb10u4_amd64.deb ...  Unpacking apache2 (2.4.38-3+deb10u4) ...  Setting up apache2-data (2.4.38-3+deb10u4) ...  Setting up apache2 (2.4.38-3+deb10u4) ...  Enabling module mpm_event.  Enabling module authz_core.  Enabling module authz_host.  Enabling module authn_core.  Enabling module auth_basic.  Enabling module access_compat.  Enabling module authn_file.  Enabling module authz_user.  Enabling module alias.  Enabling module dir.  Enabling module autoindex.  Enabling module env.  Enabling module mime.  Enabling module negotiation.  Enabling module setenvif.  Enabling module filter.  Enabling module deflate.  Enabling module status.  Enabling module reqtimeout.  Enabling conf charset.  Enabling conf localized-error-pages.  Enabling conf other-vhosts-access-log.  Enabling conf security.  Enabling conf serve-cgi-bin.  Enabling site 000-default.  Created symlink /etc/systemd/system/multi-user.target.wants/apache2.service → /lib/systemd/system/apache2.service.  Created symlink /etc/systemd/system/multi-user.target.wants/apache-htcacheclean.service → /lib/systemd/system/apache-htcacheclean.service.  Job for apache2.service failed because the control process exited with error code.  See "systemctl status apache2.service" and "journalctl -xe" for details.  invoke-rc.d: initscript apache2, action "start" failed.  ● apache2.service - The Apache HTTP Server       Loaded: loaded (/lib/systemd/system/apache2.service; enabled; vendor preset: enabled)       Active: failed (Result: exit-code) since Sat 2021-07-03 16:20:37 HKT; 9ms ago         Docs: https://httpd.apache.org/docs/2.4/      Process: 8751 ExecStart=/usr/sbin/apachectl start (code=exited, status=127)          CPU: 11ms    Jul 03 16:20:37 debian systemd[1]: Starting The Apache HTTP Server...  Jul 03 16:20:37 debian apachectl[8761]: /usr/sbin/apachectl: 174: /usr/sbin/apachectl: /usr/sbin/apache2: not found  Jul 03 16:20:37 debian apachectl[8751]: Action 'start' failed.  Jul 03 16:20:37 debian apachectl[8751]: The Apache error log may have more information.  Jul 03 16:20:37 debian systemd[1]: apache2.service: Control process exited, code=exited, status=127/n/a  Jul 03 16:20:37 debian systemd[1]: apache2.service: Failed with result 'exit-code'.  Jul 03 16:20:37 debian systemd[1]: Failed to start The Apache HTTP Server.  Processing triggers for man-db (2.8.5-2) ...  

Why is ansible running on a server if they already changed their password?

Posted: 03 Jul 2021 12:47 AM PDT

What happens is that once you run a playbook with the credentials of a server (your password changes randomly every 12 hours) but after the ansible password is changed you are still able to run the playbook even though the inventory file password is old and when I want to access the same server by ssh manually, it denies me access (since the password is old). I've been looking for the reason but I can't find anything.

Does anybody know what is it due to?

Thank you for reading.

TASK [common : Pulling common images]

Posted: 03 Jul 2021 12:32 AM PDT

I'm trying to install openstack wallaby with kolla-ansible. I followed this document https://docs.openstack.org/kolla-ansible/latest/user/quickstart.html and https://docs.openstack.org/kolla-ansible/latest/user/multinode.html to deploy multinode.

I created a local registry

docker run -d \   --name registry \   --restart=always \   -p 4000:5000 \   -v registry:/var/lib/registry \   registry:2  

docker ps -a show

CONTAINER ID   IMAGE         COMMAND                  CREATED          STATUS                      PORTS     NAMES  ea8b5750b84a   hello-world   "/hello"                 30 minutes ago   Exited (0) 30 minutes ago             eloquent_poincare  4e1a2028653f   registry:2    "/entrypoint.sh /etc…"   17 hours ago     Up 3 hours                            registry  

so that i try to push image to my local registry

kolla-build --base ubuntu --type binary --registry 10.102.196.118:4000 --push  

and it shows

TASK [common : Pulling common images] ******************************************************************************************************************************************************************* failed: [controller] (item={'key': 'fluentd', 'value': {'container_name': 'fluentd', 'group': 'fluentd', 'enabled': True, 'image': '10.102.196.118:4000/kolla/ubuntu-binary-fluentd:wallaby', 'environment': {'KOLLA_CONFIG_STRATEGY': 'COPY_ALWAYS'}, 'volumes': ['/etc/kolla/fluentd/:/var/lib/kolla/config_files/:ro', '/etc/localtime:/etc/localtime:ro', '/etc/timezone:/etc/timezone:ro', 'kolla_logs:/var/log/kolla/', 'fluentd_data:/var/lib/fluentd/data/'], 'dimensions': {}}}) => {"ansible_loop_var": "item", "changed": true, "item": {"key": "fluentd", "value": {"container_name": "fluentd", "dimensions": {}, "enabled": true, "environment": {"KOLLA_CONFIG_STRATEGY": "COPY_ALWAYS"}, "group": "fluentd", "image": "10.102.196.118:4000/kolla/ubuntu-binary-fluentd:wallaby", "volumes": ["/etc/kolla/fluentd/:/var/lib/kolla/config_files/:ro", "/etc/localtime:/etc/localtime:ro", "/etc/timezone:/etc/timezone:ro", "kolla_logs:/var/log/kolla/", "fluentd_data:/var/lib/fluentd/data/"]}}, "msg": "'Traceback (most recent call last):\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 268, in _raise_for_status\n response.raise_for_status()\n File "/usr/lib/python3/dist-packages/requests/models.py", line 940, in raise_for_status\n raise HTTPError(http_error_msg, response=self)\nrequests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-fluentd\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "/tmp/ansible_kolla_docker_payload_bjjz7o8w/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 1199, in main\n File "/tmp/ansible_kolla_docker_payload_bjjz7o8w/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 649, in pull_image\n File "/usr/local/lib/python3.8/dist-packages/docker/api/image.py", line 430, in pull\n self._raise_for_status(response)\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 270, in _raise_for_status\n raise create_api_error_from_http_exception(e)\n File "/usr/local/lib/python3.8/dist-packages/docker/errors.py", line 31, in create_api_error_from_http_exception\n raise cls(e, response=response, explanation=explanation)\ndocker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-fluentd: Internal Server Error ("Get http://10.102.196.118:4000/v2/: dial tcp 10.102.196.118:4000: connect: connection refused")\n'"} failed: [compute01] (item={'key': 'fluentd', 'value': {'container_name': 'fluentd', 'group': 'fluentd', 'enabled': True, 'image': '10.102.196.118:4000/kolla/ubuntu-binary-fluentd:wallaby', 'environment': {'KOLLA_CONFIG_STRATEGY': 'COPY_ALWAYS'}, 'volumes': ['/etc/kolla/fluentd/:/var/lib/kolla/config_files/:ro', '/etc/localtime:/etc/localtime:ro', '/etc/timezone:/etc/timezone:ro', 'kolla_logs:/var/log/kolla/', 'fluentd_data:/var/lib/fluentd/data/'], 'dimensions': {}}}) => {"ansible_loop_var": "item", "changed": true, "item": {"key": "fluentd", "value": {"container_name": "fluentd", "dimensions": {}, "enabled": true, "environment": {"KOLLA_CONFIG_STRATEGY": "COPY_ALWAYS"}, "group": "fluentd", "image": "10.102.196.118:4000/kolla/ubuntu-binary-fluentd:wallaby", "volumes": ["/etc/kolla/fluentd/:/var/lib/kolla/config_files/:ro", "/etc/localtime:/etc/localtime:ro", "/etc/timezone:/etc/timezone:ro", "kolla_logs:/var/log/kolla/", "fluentd_data:/var/lib/fluentd/data/"]}}, "msg": "'Traceback (most recent call last):\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 268, in _raise_for_status\n response.raise_for_status()\n File "/usr/lib/python3/dist-packages/requests/models.py", line 940, in raise_for_status\n raise HTTPError(http_error_msg, response=self)\nrequests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-fluentd\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "/tmp/ansible_kolla_docker_payload_em961l9o/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 1199, in main\n File "/tmp/ansible_kolla_docker_payload_em961l9o/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 649, in pull_image\n File "/usr/local/lib/python3.8/dist-packages/docker/api/image.py", line 430, in pull\n self._raise_for_status(response)\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 270, in _raise_for_status\n raise create_api_error_from_http_exception(e)\n File "/usr/local/lib/python3.8/dist-packages/docker/errors.py", line 31, in create_api_error_from_http_exception\n raise cls(e, response=response, explanation=explanation)\ndocker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-fluentd: Internal Server Error ("Get http://10.102.196.118:4000/v2/: dial tcp 10.102.196.118:4000: connect: connection refused")\n'"} failed: [compute02] (item={'key': 'fluentd', 'value': {'container_name': 'fluentd', 'group': 'fluentd', 'enabled': True, 'image': '10.102.196.118:4000/kolla/ubuntu-binary-fluentd:wallaby', 'environment': {'KOLLA_CONFIG_STRATEGY': 'COPY_ALWAYS'}, 'volumes': ['/etc/kolla/fluentd/:/var/lib/kolla/config_files/:ro', '/etc/localtime:/etc/localtime:ro', '/etc/timezone:/etc/timezone:ro', 'kolla_logs:/var/log/kolla/', 'fluentd_data:/var/lib/fluentd/data/'], 'dimensions': {}}}) => {"ansible_loop_var": "item", "changed": true, "item": {"key": "fluentd", "value": {"container_name": "fluentd", "dimensions": {}, "enabled": true, "environment": {"KOLLA_CONFIG_STRATEGY": "COPY_ALWAYS"}, "group": "fluentd", "image": "10.102.196.118:4000/kolla/ubuntu-binary-fluentd:wallaby", "volumes": ["/etc/kolla/fluentd/:/var/lib/kolla/config_files/:ro", "/etc/localtime:/etc/localtime:ro", "/etc/timezone:/etc/timezone:ro", "kolla_logs:/var/log/kolla/", "fluentd_data:/var/lib/fluentd/data/"]}}, "msg": "'Traceback (most recent call last):\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 268, in _raise_for_status\n response.raise_for_status()\n File "/usr/lib/python3/dist-packages/requests/models.py", line 940, in raise_for_status\n raise HTTPError(http_error_msg, response=self)\nrequests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-fluentd\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "/tmp/ansible_kolla_docker_payload_r459m9qj/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 1199, in main\n File "/tmp/ansible_kolla_docker_payload_r459m9qj/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 649, in pull_image\n File "/usr/local/lib/python3.8/dist-packages/docker/api/image.py", line 430, in pull\n self._raise_for_status(response)\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 270, in _raise_for_status\n raise create_api_error_from_http_exception(e)\n File "/usr/local/lib/python3.8/dist-packages/docker/errors.py", line 31, in create_api_error_from_http_exception\n raise cls(e, response=response, explanation=explanation)\ndocker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-fluentd: Internal Server Error ("Get http://10.102.196.118:4000/v2/: dial tcp 10.102.196.118:4000: connect: connection refused")\n'"} failed: [compute01] (item={'key': 'kolla-toolbox', 'value': {'container_name': 'kolla_toolbox', 'group': 'kolla-toolbox', 'enabled': True, 'image': '10.102.196.118:4000/kolla/ubuntu-binary-kolla-toolbox:wallaby', 'environment': {'ANSIBLE_NOCOLOR': '1', 'ANSIBLE_LIBRARY': '/usr/share/ansible'}, 'privileged': True, 'volumes': ['/etc/kolla/kolla-toolbox/:/var/lib/kolla/config_files/:ro', '/etc/localtime:/etc/localtime:ro', '/etc/timezone:/etc/timezone:ro', '/dev/:/dev/', '/run/:/run/:shared', 'kolla_logs:/var/log/kolla/', '/run/openvswitch:/run/openvswitch:shared'], 'dimensions': {}}}) => {"ansible_loop_var": "item", "changed": true, "item": {"key": "kolla-toolbox", "value": {"container_name": "kolla_toolbox", "dimensions": {}, "enabled": true, "environment": {"ANSIBLE_LIBRARY": "/usr/share/ansible", "ANSIBLE_NOCOLOR": "1"}, "group": "kolla-toolbox", "image": "10.102.196.118:4000/kolla/ubuntu-binary-kolla-toolbox:wallaby", "privileged": true, "volumes": ["/etc/kolla/kolla-toolbox/:/var/lib/kolla/config_files/:ro", "/etc/localtime:/etc/localtime:ro", "/etc/timezone:/etc/timezone:ro", "/dev/:/dev/", "/run/:/run/:shared", "kolla_logs:/var/log/kolla/", "/run/openvswitch:/run/openvswitch:shared"]}}, "msg": "'Traceback (most recent call last):\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 268, in _raise_for_status\n response.raise_for_status()\n File "/usr/lib/python3/dist-packages/requests/models.py", line 940, in raise_for_status\n raise HTTPError(http_error_msg, response=self)\nrequests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-kolla-toolbox\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "/tmp/ansible_kolla_docker_payload_i1vw3h3y/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 1199, in main\n File "/tmp/ansible_kolla_docker_payload_i1vw3h3y/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 649, in pull_image\n File "/usr/local/lib/python3.8/dist-packages/docker/api/image.py", line 430, in pull\n self._raise_for_status(response)\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 270, in _raise_for_status\n raise create_api_error_from_http_exception(e)\n File "/usr/local/lib/python3.8/dist-packages/docker/errors.py", line 31, in create_api_error_from_http_exception\n raise cls(e, response=response, explanation=explanation)\ndocker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-kolla-toolbox: Internal Server Error ("Get http://10.102.196.118:4000/v2/: dial tcp 10.102.196.118:4000: connect: connection refused")\n'"} failed: [compute02] (item={'key': 'kolla-toolbox', 'value': {'container_name': 'kolla_toolbox', 'group': 'kolla-toolbox', 'enabled': True, 'image': '10.102.196.118:4000/kolla/ubuntu-binary-kolla-toolbox:wallaby', 'environment': {'ANSIBLE_NOCOLOR': '1', 'ANSIBLE_LIBRARY': '/usr/share/ansible'}, 'privileged': True, 'volumes': ['/etc/kolla/kolla-toolbox/:/var/lib/kolla/config_files/:ro', '/etc/localtime:/etc/localtime:ro', '/etc/timezone:/etc/timezone:ro', '/dev/:/dev/', '/run/:/run/:shared', 'kolla_logs:/var/log/kolla/', '/run/openvswitch:/run/openvswitch:shared'], 'dimensions': {}}}) => {"ansible_loop_var": "item", "changed": true, "item": {"key": "kolla-toolbox", "value": {"container_name": "kolla_toolbox", "dimensions": {}, "enabled": true, "environment": {"ANSIBLE_LIBRARY": "/usr/share/ansible", "ANSIBLE_NOCOLOR": "1"}, "group": "kolla-toolbox", "image": "10.102.196.118:4000/kolla/ubuntu-binary-kolla-toolbox:wallaby", "privileged": true, "volumes": ["/etc/kolla/kolla-toolbox/:/var/lib/kolla/config_files/:ro", "/etc/localtime:/etc/localtime:ro", "/etc/timezone:/etc/timezone:ro", "/dev/:/dev/", "/run/:/run/:shared", "kolla_logs:/var/log/kolla/", "/run/openvswitch:/run/openvswitch:shared"]}}, "msg": "'Traceback (most recent call last):\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 268, in _raise_for_status\n response.raise_for_status()\n File "/usr/lib/python3/dist-packages/requests/models.py", line 940, in raise_for_status\n raise HTTPError(http_error_msg, response=self)\nrequests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-kolla-toolbox\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "/tmp/ansible_kolla_docker_payload_fhy2h219/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 1199, in main\n File "/tmp/ansible_kolla_docker_payload_fhy2h219/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 649, in pull_image\n File "/usr/local/lib/python3.8/dist-packages/docker/api/image.py", line 430, in pull\n self._raise_for_status(response)\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 270, in _raise_for_status\n raise create_api_error_from_http_exception(e)\n File "/usr/local/lib/python3.8/dist-packages/docker/errors.py", line 31, in create_api_error_from_http_exception\n raise cls(e, response=response, explanation=explanation)\ndocker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-kolla-toolbox: Internal Server Error ("Get http://10.102.196.118:4000/v2/: dial tcp 10.102.196.118:4000: connect: connection refused")\n'"} failed: [controller] (item={'key': 'kolla-toolbox', 'value': {'container_name': 'kolla_toolbox', 'group': 'kolla-toolbox', 'enabled': True, 'image': '10.102.196.118:4000/kolla/ubuntu-binary-kolla-toolbox:wallaby', 'environment': {'ANSIBLE_NOCOLOR': '1', 'ANSIBLE_LIBRARY': '/usr/share/ansible'}, 'privileged': True, 'volumes': ['/etc/kolla/kolla-toolbox/:/var/lib/kolla/config_files/:ro', '/etc/localtime:/etc/localtime:ro', '/etc/timezone:/etc/timezone:ro', '/dev/:/dev/', '/run/:/run/:shared', 'kolla_logs:/var/log/kolla/', '/run/openvswitch:/run/openvswitch:shared'], 'dimensions': {}}}) => {"ansible_loop_var": "item", "changed": true, "item": {"key": "kolla-toolbox", "value": {"container_name": "kolla_toolbox", "dimensions": {}, "enabled": true, "environment": {"ANSIBLE_LIBRARY": "/usr/share/ansible", "ANSIBLE_NOCOLOR": "1"}, "group": "kolla-toolbox", "image": "10.102.196.118:4000/kolla/ubuntu-binary-kolla-toolbox:wallaby", "privileged": true, "volumes": ["/etc/kolla/kolla-toolbox/:/var/lib/kolla/config_files/:ro", "/etc/localtime:/etc/localtime:ro", "/etc/timezone:/etc/timezone:ro", "/dev/:/dev/", "/run/:/run/:shared", "kolla_logs:/var/log/kolla/", "/run/openvswitch:/run/openvswitch:shared"]}}, "msg": "'Traceback (most recent call last):\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 268, in _raise_for_status\n response.raise_for_status()\n File "/usr/lib/python3/dist-packages/requests/models.py", line 940, in raise_for_status\n raise HTTPError(http_error_msg, response=self)\nrequests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-kolla-toolbox\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "/tmp/ansible_kolla_docker_payload_lwwkuzxg/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 1199, in main\n File "/tmp/ansible_kolla_docker_payload_lwwkuzxg/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 649, in pull_image\n File "/usr/local/lib/python3.8/dist-packages/docker/api/image.py", line 430, in pull\n self._raise_for_status(response)\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 270, in _raise_for_status\n raise create_api_error_from_http_exception(e)\n File "/usr/local/lib/python3.8/dist-packages/docker/errors.py", line 31, in create_api_error_from_http_exception\n raise cls(e, response=response, explanation=explanation)\ndocker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-kolla-toolbox: Internal Server Error ("Get http://10.102.196.118:4000/v2/: dial tcp 10.102.196.118:4000: connect: connection refused")\n'"} failed: [compute02] (item={'key': 'cron', 'value': {'container_name': 'cron', 'group': 'cron', 'enabled': True, 'image': '10.102.196.118:4000/kolla/ubuntu-binary-cron:wallaby', 'environment': {'DUMMY_ENVIRONMENT': 'kolla_useless_env'}, 'volumes': ['/etc/kolla/cron/:/var/lib/kolla/config_files/:ro', '/etc/localtime:/etc/localtime:ro', '/etc/timezone:/etc/timezone:ro', 'kolla_logs:/var/log/kolla/'], 'dimensions': {}}}) => {"ansible_loop_var": "item", "changed": true, "item": {"key": "cron", "value": {"container_name": "cron", "dimensions": {}, "enabled": true, "environment": {"DUMMY_ENVIRONMENT": "kolla_useless_env"}, "group": "cron", "image": "10.102.196.118:4000/kolla/ubuntu-binary-cron:wallaby", "volumes": ["/etc/kolla/cron/:/var/lib/kolla/config_files/:ro", "/etc/localtime:/etc/localtime:ro", "/etc/timezone:/etc/timezone:ro", "kolla_logs:/var/log/kolla/"]}}, "msg": "'Traceback (most recent call last):\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 268, in _raise_for_status\n response.raise_for_status()\n File "/usr/lib/python3/dist-packages/requests/models.py", line 940, in raise_for_status\n raise HTTPError(http_error_msg, response=self)\nrequests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-cron\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "/tmp/ansible_kolla_docker_payload_6iio6rgh/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 1199, in main\n File "/tmp/ansible_kolla_docker_payload_6iio6rgh/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 649, in pull_image\n File "/usr/local/lib/python3.8/dist-packages/docker/api/image.py", line 430, in pull\n self._raise_for_status(response)\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 270, in _raise_for_status\n raise create_api_error_from_http_exception(e)\n File "/usr/local/lib/python3.8/dist-packages/docker/errors.py", line 31, in create_api_error_from_http_exception\n raise cls(e, response=response, explanation=explanation)\ndocker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-cron: Internal Server Error ("Get http://10.102.196.118:4000/v2/: dial tcp 10.102.196.118:4000: connect: connection refused")\n'"} failed: [controller] (item={'key': 'cron', 'value': {'container_name': 'cron', 'group': 'cron', 'enabled': True, 'image': '10.102.196.118:4000/kolla/ubuntu-binary-cron:wallaby', 'environment': {'DUMMY_ENVIRONMENT': 'kolla_useless_env'}, 'volumes': ['/etc/kolla/cron/:/var/lib/kolla/config_files/:ro', '/etc/localtime:/etc/localtime:ro', '/etc/timezone:/etc/timezone:ro', 'kolla_logs:/var/log/kolla/'], 'dimensions': {}}}) => {"ansible_loop_var": "item", "changed": true, "item": {"key": "cron", "value": {"container_name": "cron", "dimensions": {}, "enabled": true, "environment": {"DUMMY_ENVIRONMENT": "kolla_useless_env"}, "group": "cron", "image": "10.102.196.118:4000/kolla/ubuntu-binary-cron:wallaby", "volumes": ["/etc/kolla/cron/:/var/lib/kolla/config_files/:ro", "/etc/localtime:/etc/localtime:ro", "/etc/timezone:/etc/timezone:ro", "kolla_logs:/var/log/kolla/"]}}, "msg": "'Traceback (most recent call last):\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 268, in _raise_for_status\n response.raise_for_status()\n File "/usr/lib/python3/dist-packages/requests/models.py", line 940, in raise_for_status\n raise HTTPError(http_error_msg, response=self)\nrequests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-cron\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "/tmp/ansible_kolla_docker_payload_de6juvjn/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 1199, in main\n File "/tmp/ansible_kolla_docker_payload_de6juvjn/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 649, in pull_image\n File "/usr/local/lib/python3.8/dist-packages/docker/api/image.py", line 430, in pull\n self._raise_for_status(response)\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 270, in _raise_for_status\n raise create_api_error_from_http_exception(e)\n File "/usr/local/lib/python3.8/dist-packages/docker/errors.py", line 31, in create_api_error_from_http_exception\n raise cls(e, response=response, explanation=explanation)\ndocker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-cron: Internal Server Error ("Get http://10.102.196.118:4000/v2/: dial tcp 10.102.196.118:4000: connect: connection refused")\n'"} failed: [compute01] (item={'key': 'cron', 'value': {'container_name': 'cron', 'group': 'cron', 'enabled': True, 'image': '10.102.196.118:4000/kolla/ubuntu-binary-cron:wallaby', 'environment': {'DUMMY_ENVIRONMENT': 'kolla_useless_env'}, 'volumes': ['/etc/kolla/cron/:/var/lib/kolla/config_files/:ro', '/etc/localtime:/etc/localtime:ro', '/etc/timezone:/etc/timezone:ro', 'kolla_logs:/var/log/kolla/'], 'dimensions': {}}}) => {"ansible_loop_var": "item", "changed": true, "item": {"key": "cron", "value": {"container_name": "cron", "dimensions": {}, "enabled": true, "environment": {"DUMMY_ENVIRONMENT": "kolla_useless_env"}, "group": "cron", "image": "10.102.196.118:4000/kolla/ubuntu-binary-cron:wallaby", "volumes": ["/etc/kolla/cron/:/var/lib/kolla/config_files/:ro", "/etc/localtime:/etc/localtime:ro", "/etc/timezone:/etc/timezone:ro", "kolla_logs:/var/log/kolla/"]}}, "msg": "'Traceback (most recent call last):\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 268, in _raise_for_status\n response.raise_for_status()\n File "/usr/lib/python3/dist-packages/requests/models.py", line 940, in raise_for_status\n raise HTTPError(http_error_msg, response=self)\nrequests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-cron\n\nDuring handling of the above exception, another exception occurred:\n\nTraceback (most recent call last):\n File "/tmp/ansible_kolla_docker_payload_szmrt81h/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 1199, in main\n File "/tmp/ansible_kolla_docker_payload_szmrt81h/ansible_kolla_docker_payload.zip/ansible/modules/kolla_docker.py", line 649, in pull_image\n File "/usr/local/lib/python3.8/dist-packages/docker/api/image.py", line 430, in pull\n self._raise_for_status(response)\n File "/usr/local/lib/python3.8/dist-packages/docker/api/client.py", line 270, in _raise_for_status\n raise create_api_error_from_http_exception(e)\n File "/usr/local/lib/python3.8/dist-packages/docker/errors.py", line 31, in create_api_error_from_http_exception\n raise cls(e, response=response, explanation=explanation)\ndocker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=wallaby&fromImage=10.102.196.118%3A4000%2Fkolla%2Fubuntu-binary-cron: Internal Server Error ("Get http://10.102.196.118:4000/v2/: dial tcp 10.102.196.118:4000: connect: connection refused")\n'"}

PLAY RECAP ********************************************************************************************************************************************************************************************** compute01 : ok=5 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
compute02 : ok=5 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
controller : ok=5 changed=0 unreachable=0 failed=1 skipped=0 rescued=0 ignored=0
localhost : ok=4 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0

Command failed ansible-playbook -i multinode -e @/etc/kolla/globals.yml -e @/etc/kolla/passwords.yml -e CONFIG_DIR=/etc/kolla -e kolla_action=pull /usr/local/share/kolla-ansible/ansible/site.yml

And i really don't know how to fix this. Can anyone help me?

Is it secure to still using an old version of VMWare ESXi for production after support ends?

Posted: 03 Jul 2021 12:05 AM PDT

I'm on a small sized business in which they own a HP ProLiant DL380 G7 Server for production. We would like to use a free license version of ESXi which is the version 6.7 U3 because we can't run modern versions on that server due to processors not been compatible.(X5650 x 2) The main problem here is that ESXi 6.7 support of security patches and updates will end in 2022, which makes me wonder if it would be risky to still use that version after the supports end. I know it's really important to use updated software and hardware but unfortunately this business can't afford a more updated server or a modern version of ESXi. Using an old version of ESXi could let hackers exploit some vulnerability of a virtual machine and access into the other ones ? Are there some business still using old versions of VMWare without trouble ? Our web application stores some user data, which should be protected. I was thinking of using Proxmox VE to solve this problem. Excuse me if this question looks a little bit silly, I'm new into this world of virtualization. Thank you for all your help.

Website have 5xx error

Posted: 03 Jul 2021 12:23 AM PDT

i have a website but sometime search console show 501 error in it. But when i open website it looks normal and open fine. Can anyone please help me out with this matter?

Postfix not receiving external mail and local mail stuck in queue

Posted: 03 Jul 2021 03:23 AM PDT

I have an issue that I can't find solution for. My Postfix server crashed, I re-installed it, but now, and no matter what I do, I can't get it to forward incoming emails to its designated domain. I can send among local users. This is from main.cf:

When I try inet_interfaces = all, it stops receiving all together, and when put back to Localhost, they come back in but get stuck in queue with connection refused.

readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES  myorigin = $mydomain  mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain  inet_interfaces = localhost    myorigin = $mydomain  mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain  mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128   

Here's the postconf -n

alias_database = hash:/etc/aliases  alias_maps = hash:/etc/aliases  command_directory = /usr/sbin  config_directory = /etc/postfix  daemon_directory = /usr/libexec/postfix  data_directory = /var/lib/postfix  debug_peer_level = 2  debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5  html_directory = no  inet_interfaces = localhost  inet_protocols = all  mailq_path = /usr/bin/mailq.postfix  manpage_directory = /usr/share/man  mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain  mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128  myorigin = $mydomain  newaliases_path = /usr/bin/newaliases.postfix  readme_directory = /usr/share/doc/postfix-2.10.1/README_FILES  sample_directory = /usr/share/doc/postfix-2.10.1/samples  sendmail_path = /usr/sbin/sendmail.postfix  setgid_group = postdrop  unknown_local_recipient_reject_code = 550  
Any help will be greatly appreciated. Thanks in advance  

Jun 24 18:45:02 ns10 dovecot: master: Dovecot v2.2.36 (1f10bfa63) starting up for imap, pop3 (core dumps disabled)  Jun 24 18:45:04 ns10 spamd[1374]: spamd: server started on IO::Socket::IP [127.0.0.1]:783, IO::Socket::IP [::1]:783 (running version 3.4.0)  Jun 24 18:45:04 ns10 spamd[1374]: spamd: server pid: 1374  Jun 24 18:45:04 ns10 spamd[1374]: spamd: server successfully spawned child process, pid 1869  Jun 24 18:45:04 ns10 spamd[1374]: spamd: server successfully spawned child process, pid 1870  Jun 24 18:45:04 ns10 spamd[1374]: prefork: child states: IS  Jun 24 18:45:04 ns10 spamd[1374]: prefork: child states: II  Jun 24 18:49:58 ns10 dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=98.249.241.145, lip=167.172.230.150, session=<GW5hfYfFP8di+fGR>  Jun 24 18:49:58 ns10 dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=98.249.241.145, lip=167.172.230.150, session=<JLxnfYfFQMdi+fGR>  Jun 24 18:49:58 ns10 dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=98.249.241.145, lip=167.172.230.150, session=<cslnfYfFQcdi+fGR>  Jun 24 18:49:59 ns10 dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=98.249.241.145, lip=167.172.230.150, session=<xQR6fYfFQsdi+fGR>  Jun 24 18:50:02 ns10 dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=98.249.241.145, lip=167.172.230.150, session=<4B6gfYfFQ8di+fGR>  Jun 24 18:50:04 ns10 dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=98.249.241.145, lip=167.172.230.150, session=<+OC6fYfFRMdi+fGR>  Jun 24 18:50:04 ns10 dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=98.249.241.145, lip=167.172.230.150, session=<P2rAfYfFRcdi+fGR>  Jun 24 18:50:04 ns10 dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=98.249.241.145, lip=167.172.230.150, session=<s6DAfYfFRsdi+fGR>  Jun 24 18:50:29 ns10 postfix/postqueue[3955]: warning: Mail system is down -- accessing queue directly  Jun 24 18:50:32 ns10 postfix/postfix-script[4067]: starting the Postfix mail system  Jun 24 18:50:32 ns10 postfix/master[4069]: daemon started -- version 2.10.1, configuration /etc/postfix  Jun 24 18:50:33 ns10 postfix/qmgr[4071]: C9D697CA466B: from=<info@dolorendyacon.com>, size=1470, nrcpt=1 (queue active)  Jun 24 18:50:33 ns10 postfix/smtp[4073]: connect to mail.dolorendyacon.com[167.172.230.150]:25: Connection refused  Jun 24 18:50:33 ns10 postfix/smtp[4073]: C9D697CA466B: to=<info@dolorendyacon.com>, relay=none, delay=12202, delays=12202/0.02/0/0, dsn=4.4.1, status=deferred (connect to mail.dolorendyacon.com[167.172.230.150]:25: Connection refused)  Jun 24 18:50:37 ns10 postfix/smtpd[4184]: connect from ns10.intrelligentsystems.com[::1]  Jun 24 18:50:37 ns10 postfix/smtpd[4184]: 756339804222: client=ns10.intrelligentsystems.com[::1]  Jun 24 18:50:37 ns10 postfix/cleanup[4190]: 756339804222: message-id=<83344af7190efe61e6e8ffb891c66e6c@login.intrelligent.com>  Jun 24 18:50:37 ns10 postfix/qmgr[4071]: 756339804222: from=<lblanca@intrelligent.com>, size=1469, nrcpt=1 (queue active)  Jun 24 18:50:37 ns10 postfix/smtpd[4184]: disconnect from ns10.intrelligentsystems.com[::1]  Jun 24 18:50:37 ns10 postfix/smtp[4073]: connect to mail.intrelligent.com[2604:a880:800:c1::463:f001]:25: Connection refused  Jun 24 18:50:37 ns10 postfix/smtp[4073]: connect to mail.intrelligent.com[167.172.230.150]:25: Connection refused  Jun 24 18:50:37 ns10 postfix/smtp[4073]: 756339804222: to=<lblanca@intrelligent.com>, relay=none, delay=0.05, delays=0.05/0/0/0, dsn=4.4.1, status=deferred (connect to mail.intrelligent.com[167.172.230.150]:25: Connection refused)  

     netstat -tuplen | grep 25  tcp        0      0 10.108.0.2:53           0.0.0.0:*               LISTEN      25         18467      1165/named  tcp        0      0 10.17.0.5:53            0.0.0.0:*               LISTEN      25         18465      1165/named  tcp        0      0 167.172.230.150:53      0.0.0.0:*               LISTEN      25         18463      1165/named  tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      25         18461      1165/named  tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      0          156921     23047/master  tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      25         18563      1165/named  tcp6       0      0 :::53                   :::*                    LISTEN      25         18457      1165/named  tcp6       0      0 ::1:25                  :::*                    LISTEN      0          156922     23047/master  tcp6       0      0 ::1:953                 :::*                    LISTEN      25         18564      1165/named  udp        0      0 10.108.0.2:53           0.0.0.0:*                           25         18466      1165/named  udp        0      0 10.17.0.5:53            0.0.0.0:*                           25         18464      1165/named  udp        0      0 167.172.230.150:53      0.0.0.0:*                           25         18462      1165/named  udp        0      0 127.0.0.1:53            0.0.0.0:*                           25         18460      1165/named  udp6       0      0 :::53                   :::*                                25         18455      1165/named  

Creating a stacked area distribution percentile graph in Google Cloud Monitoring

Posted: 03 Jul 2021 02:25 AM PDT

I've created a log based metric using logs stored in Google Cloud Logs based on HTTP response duration. I'd like to a graph which shows stacked area for 50th, 95th, and 99th percentile.

I've read the Google Cloud Monitoring docs on various charts and while I can get any single metric to display as a percentile; I can't seem to have all three percentiles render stacked at the same time.

What is possible is adding the 3 percentiles to a chart as 3 separate metrics with different alignment which seems to work well for regular line charts but if I change the chart type to stacked area then each percentile shades its area independentally of the other percentile lines.

I can also get all three lines to show up if I select a "Heatmap" chart with sum or delta alignment and click 'hide heatmap' button on the chart in Metrics explorer.

This is a very common way to visualize distribution percentiles so I think it should be possible (may by editing the query direction to include multiple percentiles) so any help is appreciated.

Metric Details:

Type: Distribution

Filter: logName = "projects/lv-server-1/logs/tail-logs" AND jsonPayload.httpRequest:*

Units: s

Field name: jsonPayload.duration

Labels:

  • "status, INTEGER, jsonPayload.status"
  • 'content_type, STRING,jsonPayload.resp_headers."Content-Type"'

Histogram Buckets:

  • Type: Exponential
  • Number of Buckets: 64
  • Exponetnial growth Factor: 2.0
  • Linear scale: .00005

How to query UCS network fabric information inside the OS?

Posted: 03 Jul 2021 03:22 AM PDT

On the Cisco UCS www page for the given POD, I can see what Fabric is used for a given vNIC.

But how can I query inside, from the OS (ex.: SLES12 or Windows server) what ethX (NIC) if from/via which network Fabric? ("A" or "B")

Or there is no tool that I can run inside the ex.: SLES OS to query these kinds of infos?

Not talking about the https://community.cisco.com/t5/cisco-developed-ucs-integrations/cisco-ucs-powertool-suite-powershell-modules-for-cisco-ucs/ta-p/3639523 with which I can query infos outside the OS (the OS that runs on the UCS, since I don't want to have auth infos for the UCS inside the OS what runs on the UCS)

How to avoid automatic patching for SQL Server 2016 via Windows automatic update service?

Posted: 03 Jul 2021 04:08 AM PDT

While updating OS patches, we see that SQL Server is also receiving hotfix patches; we don't want to install SQL Server patches and we don't want to stop OS patches from installing.

Microsoft says "By default, Windows Update client is configured to provide updates only for Windows. If you enable the Give me updates for other Microsoft products when I update Windows setting, you also receive updates for other products, including security patches for Microsoft SQL Server and other Microsoft software."

I did check this setting on the server and it was off and grayed out.

Hence, I believe when SQL Server was installed, the below option was checked and that is causing it to receive updates:

image

So how can we disable it through some policy or registry key?

GCP cloud shell disconnecting frequently

Posted: 03 Jul 2021 02:00 AM PDT

I logged into Google cloud and cloud shell keeps on disconnecting . Not sure why it is. Internet is fine. Error: The connection to your Google Cloud Shell was lost.

convert nginx reverse proxy config to apache

Posted: 03 Jul 2021 04:08 AM PDT

I have the following working nginx reverse proxy config

server {    listen 192.168.100.7:443;    server_name mysite.internal;    location / {      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;      proxy_set_header Host $http_host;      proxy_set_header X-Forwarded-Proto https;      proxy_redirect off;      proxy_pass http://192.168.100.8;      proxy_http_version 1.1;    }    ssl on;    ssl_certificate /etc/nginx/certs/mycert.cer;    ssl_certificate_key /etc/nginx/certs/mycert.key;    ssl_session_timeout  5m;  }  

and I'm trying to convert it to run under apache httpd but I'm not able to get it working

Removing default Claims Providers Trust - ADFS 2016

Posted: 03 Jul 2021 12:49 AM PDT

I want to know whether it is possible to remove/disable (or even hide) the default claims providers trust in the ADFS page. I have setup ADFS to point to my AzureAD so I wouldn't require the on-prem Claims providers trust anymore. Is there any way to remove it? enter image description here

Need help in figuring out if there is anything wrong with my DNS settings for mail delivery

Posted: 03 Jul 2021 12:03 AM PDT

Having issues with email delivery into outlook.com and hotmail. emails are going into junk mail.

Email flow is "Application > Exchange 2016 > Firewall > Office 365 > Mimecast"

MX records points to Mimecast and goes from there to Office 365.

We do not have our own SPF record, DKIM or DMARC set up for upp-ltd.com and I am not sure if Msft has anything set up for uppgroup.onmicrosoft.com.

besides for SPF, DKIM and DMARC does everything looks ok on the email headers below??

Received: from BY2NAM01HT037.eop-nam01.prod.protection.outlook.com   (2603:10a6:600:8a::34) by LNXP123MB2217.GBRP123.PROD.OUTLOOK.COM with HTTPS   via LO2P265CA0262.GBRP265.PROD.OUTLOOK.COM; Wed, 14 Aug 2019 14:11:45 +0000  ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=fail;   b=iGqdpGh8dZ1PolKaSc7GLSNQplFD5cfaiXeJje42bc4KrStG0/xG4UxKF2vzKFB5G33wbHWrQvrLRTxS59mIB0GLIya9mup5e3K53TtqhFAc3fVp9rKJ78bW9D3ij73OwNLumFQwDVQ5+FoHfZ+KMS+4D/QD61cpeOdytVznk5+btciClTDIFoldl0Ts8/un1A/VRP7TA4E96gU5/gwRFEpSgUl/y2xe6yOacbLrTfJ/TljPQUDtiPC8VKgU7TGCqjjtsXQlyT25vp9XysFMN9iuJk0PT74Dsoj1ntBgdLQcgk4HkQQv3h3c847z+u6VR1rKy57hgUoBHZgYmFQvZg==  ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;   s=arcselector9901;   h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;   bh=hjdRKAv3JPPxdyjOqp/ls+4OhOfFLeNhY2vYne4sP6U=;   b=NSkzWEcG5PnPFqnZJKgxeyN18naWRr8wVJxPtB3pf+0gNh8BIgXUgOscvufeD3Nq45SDmMr4phoX8uTYWTTEDsCHIeGBBkJG8E7Ay6Vf+nuaWyQ79stAlD3HTshiWjpHDNscd5TKAUbltGvKqST1bSajua2PQ8B/oyaA3hGZzwCC7+GUH3hpjUz+fwjRZ5N+DOW6jk3AXUcno12lRSMwi9unlFamIJ65hEjZXH0xsy9CtOcoyHzEU6dAwyGGGSeHhQKB5bE27xl4nHkYrr0LLL07SPju+mNctjwpaRIyUlf4mz7IODggloBX7zk4NStPaHuP3EQsii/Kwg0trFrH4g==  ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is   146.101.78.161) smtp.rcpttodomain=outlook.com smtp.mailfrom=upp-ltd.com;   dmarc=bestguesspass action=none header.from=upp-ltd.com; dkim=fail (signature   did not verify) header.d=uppgroup.onmicrosoft.com; arc=fail (48)  Received: from BY2NAM01FT047.eop-nam01.prod.protection.outlook.com   (10.152.68.54) by BY2NAM01HT037.eop-nam01.prod.protection.outlook.com   (10.152.69.61) with Microsoft SMTP Server (version=TLS1_2,   cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2157.15; Wed, 14 Aug   2019 14:11:44 +0000  Authentication-Results: spf=pass (sender IP is 146.101.78.161)   smtp.mailfrom=upp-ltd.com; outlook.com; dkim=fail (signature did not verify)   header.d=uppgroup.onmicrosoft.com;outlook.com; dmarc=bestguesspass   action=none header.from=upp-ltd.com;  Received-SPF: Pass (protection.outlook.com: domain of upp-ltd.com designates   146.101.78.161 as permitted sender) receiver=protection.outlook.com;   client-ip=146.101.78.161; helo=eu-smtp-delivery-161.mimecast.com;  Received: from eu-smtp-delivery-161.mimecast.com (146.101.78.161) by   BY2NAM01FT047.mail.protection.outlook.com (10.152.68.243) with Microsoft SMTP   Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id   15.20.2178.16 via Frontend Transport; Wed, 14 Aug 2019 14:11:43 +0000  X-IncomingTopHeaderMarker:   OriginalChecksum:ED2B93F1534F4D404DE43B0CE17F126879A62BAE875517B8EBFF2FDBB80BE594;UpperCasedChecksum:027F228F42324C7D6FC2C3D5A2A5A5C3E2D968B77459DFC8E3285B786E3F001E;SizeAsReceived:5993;Count:39  ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;   b=mOc6qu7csDpxsV0YJ98ohhcx24XWg7PxVUPf/dDkNjE31p5SPUMOLM1hkg9jX48zBy/JnLgGF8/R1QhF+6296ApDePTVkgDaSCnRK34IELjDLIcbfzlzuzk4qS/qXsObjNzCYkuiw2ghY/mFF/UnkTPdV5cejBHAsFlHohJKUWOEt/uC+0r9eBuzqg69Z9vWr7Y2U2WgBzQK7qHWbDGdqghHqkg9NP8i6gpryAXUqH0vFEsZ1zRUB5KhBdITbjGWSuhBrJcTtCfdQt7SeES13r3lS1U0nuboY8Q17thme1PQ2kqqC9CgreKfDWDHoCn6ySDbUW9BRr3IKlUrpAiVmQ==  ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;   s=arcselector9901;   h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;   bh=hjdRKAv3JPPxdyjOqp/ls+4OhOfFLeNhY2vYne4sP6U=;   b=KIaHZKQ+gOT89QlIxDCKLs9f2XdA99smKbPu07bsNyj4t20rkG8BVOAUOgulHkgLevIG90+b7xniMtIpbirl0QdBkr9iyCVOrsSBMUp6Rs+VbQetGy5awVqoNctgrPUeWuxIyBu0KLqmk9z1GqZz8aO8JKl0Nux1KR2gLPzvcbTIYYPD7favjaZXBkXEEcWrxhZVFke46dsgRgcSkzQ88z+d4OWe7PotYdyZHc5pYsKHy2G36Jq/QT/NguxJumlx0rBMATIljL1x4umdSLHKHBllG6huo8CraZbB5QTFHGZ2CDnfmvuyFR5GpPb66gyu+eKl9VrgtD0mreAnHCtMPw==  ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is   5.148.79.5) smtp.rcpttodomain=outlook.com smtp.mailfrom=upp-ltd.com;   dmarc=bestguesspass action=none header.from=upp-ltd.com; dkim=none (message   not signed); arc=none  DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;   d=uppgroup.onmicrosoft.com; s=selector2-uppgroup-onmicrosoft-com;   h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;   bh=hjdRKAv3JPPxdyjOqp/ls+4OhOfFLeNhY2vYne4sP6U=;   b=UxuaZ27XmxXEM2vHiEP9PBCuzmPjQlThNDzFKQkp4A7U+4V8g0nP0Ka4Z/FSa12K+fo6thELvkzNZlr6/gEK+Gnd9qBYVN+X6lilUIH/5dzKZ/OXkT/UPSzpSU+GIf0AQ6oqUWVAioIw7qGuWLXu93jHVTUdXjDe+6cw8h0NiKA=  Received: from EUR04-DB3-obe.outbound.protection.outlook.com   (mail-db3eur04lp2050.outbound.protection.outlook.com [104.47.12.50]) (Using   TLS) by relay.mimecast.com with ESMTP id   uk-mta-71-CV2Xd2PUM32uxn-g3cNB5A-1; Wed, 14 Aug 2019 15:11:40 +0100  Received: from HE1PR0902CA0033.eurprd09.prod.outlook.com (2603:10a6:7:15::22)   by VI1PR09MB4256.eurprd09.prod.outlook.com (2603:10a6:803:13a::12) with   Microsoft SMTP Server (version=TLS1_2,   cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2157.14; Wed, 14 Aug   2019 14:11:39 +0000  Received: from AM5EUR03FT053.eop-EUR03.prod.protection.outlook.com   (2a01:111:f400:7e08::205) by HE1PR0902CA0033.outlook.office365.com   (2603:10a6:7:15::22) with Microsoft SMTP Server (version=TLS1_2,   cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2157.18 via Frontend   Transport; Wed, 14 Aug 2019 14:11:38 +0000  Received: from mail.upp-ltd.com (5.148.79.5) by   AM5EUR03FT053.mail.protection.outlook.com (10.152.16.210) with Microsoft SMTP   Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id   15.20.2115.18 via Frontend Transport; Wed, 14 Aug 2019 14:11:38 +0000  Received: from UPPSRVEX4.upp-ltd.local (10.90.2.59) by UPPSRVEX4.upp-ltd.local   (10.90.2.59) with Microsoft SMTP Server (version=TLS1_2,   cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.1531.3; Wed, 14 Aug   2019 15:11:32 +0100  Received: from UPPSRVADMIN (10.90.2.65) by UPPSRVEX4.upp-ltd.local   (10.90.2.59) with Microsoft SMTP Server id 15.1.1531.3 via Frontend   Transport; Wed, 14 Aug 2019 15:11:32 +0100  From: Joe Blogs <Joe.Blogs@upp-ltd.com>  To: Jane Doe <janedoe@outlook.com>  Date: Wed, 14 Aug 2019 15:11:32 +0100  Subject: This is a sample mail  Message-ID: <e9d02a65-89fe-488f-a752-3e13e5eebce2@UPPSRVEX4.upp-ltd.local>  Return-Path: Joe.Blogs@upp-ltd.com  X-EOPAttributedMessage: 1  X-Forefront-Antispam-Report-Untrusted:   CIP:5.148.79.5;IPV:NLI;CTRY:GB;EFV:NLI;SFV:NSPM;SFS:(10019020)(346002)(136003)(376002)(39850400004)(396003)(2980300002)(199004)(40134004)(189003)(31696002)(5660300002)(70206006)(66574012)(14444005)(9686003)(5024004)(106002)(70586007)(8676002)(47776003)(126002)(23726003)(486006)(2906002)(44832011)(476003)(31686004)(478600001)(46406003)(7596002)(86362001)(305945005)(26005)(246002)(316002)(336012)(8746002)(6916009)(356004)(8936002)(7636002)(186003)(50466002)(97756001)(212503006);DIR:OUT;SFP:1102;SCL:1;SRVR:VI1PR09MB4256;H:mail.upp-ltd.com;FPR:;SPF:Pass;LANG:en;PTR:mail.upp-ltd.com;A:1;MX:1;  X-MS-PublicTrafficType: Email  X-MS-Office365-Filtering-Correlation-Id: 820361c8-f467-4627-a082-08d720c155d9  X-Microsoft-Antispam-Untrusted:   BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(8989299)(5600148)(711020)(4605104)(4709080)(1401327)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328);SRVR:VI1PR09MB4256;  X-MS-TrafficTypeDiagnostic: VI1PR09MB4256:|BY2NAM01HT037:  X-Microsoft-Antispam-PRVS:   <VI1PR09MB42564EA5364694A3882F9341CDAD0@VI1PR09MB4256.eurprd09.prod.outlook.com>  X-MS-Oob-TLC-OOBClassifiers: OLM:10000;  X-Forefront-PRVS: 01294F875B  X-MS-Exchange-SenderADCheck: 1  X-Microsoft-Antispam-Message-Info-Original:   zu5x4sRB0arC3TIrYjETVmA1xX1pScVvvUohKO5MsvTYhyjx5U6QFkUwvEZXdR31CtmKPh6UWQhuqpKmpt/79a8Ignuo1fBJGuU18AOlzG7NSgD+kPhDWHZTxegdwnmAxbWiEMq1Q+4ASkp6vWoGV4Eok1WeQ0iVC1imzHv7NZSs95GoWuY2K+Plh23EtQ+gRME0tYbDggYNFFnZmPAIJKRR8O0nwRZg5Q/3KGjh6pnx4CepC8iLzyanKxnLr444h6AqmbgyvinfHYQZ71bn2EDxesRiic/sdPVCRYQcG4RphbOm0C0ZYMuXCU9z82r9Ob8yHgExurV5vaf8UmZOqi7QgPCIYyj4Lobm4N0cBYQW3gTI4zcnPNKOguGsbaaOsOVwJ8RW+eqp87LwwY6UJ4tVnX9M7CMge1QCWBAPR4o=  X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR09MB4256  X-MC-Unique: CV2Xd2PUM32uxn-g3cNB5A-1  X-Mimecast-Spam-Score: 0  Content-Type: text/plain; charset=WINDOWS-1252  Content-Transfer-Encoding: quoted-printable  X-IncomingHeaderCount: 39  X-MS-Exchange-Organization-ExpirationStartTime: 14 Aug 2019 14:11:43.7317   (UTC)  X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit  X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000  X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit  X-MS-Exchange-Organization-Network-Message-Id:   820361c8-f467-4627-a082-08d720c155d9  X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0  X-MS-Exchange-Organization-MessageDirectionality: Incoming  X-MS-Exchange-Transport-CrossTenantHeadersStripped:   BY2NAM01FT047.eop-nam01.prod.protection.outlook.com  X-Forefront-Antispam-Report: EFV:NLI;  X-MS-Exchange-Organization-AuthSource:   BY2NAM01FT047.eop-nam01.prod.protection.outlook.com  X-MS-Exchange-Organization-AuthAs: Anonymous  X-MS-UserLastLogonTime: 8/14/2019 2:11:36 PM  X-MS-Office365-Filtering-Correlation-Id-Prvs:   17915081-b157-41f0-b5d7-08d720c152f1  X-Microsoft-Antispam:   BCL:0;PCL:0;RULEID:(2390118)(5000188)(710020)(711020)(4605104)(610169)(650170)(1124261)(8291501072);SRVR:BY2NAM01HT037;  X-MS-Exchange-EOPDirect: true  X-Sender-IP: 146.101.78.161  X-SID-PRA: JOE.BLOGS@UPP-LTD.COM  X-SID-Result: PASS  X-MS-Exchange-Organization-PCL: 2  X-MS-Exchange-AtpMessageProperties: SA|SL  X-MS-Exchange-ATPSafeLinks-Stat: 0  X-OriginatorOrg: outlook.com  X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Aug 2019 14:11:43.2513   (UTC)  X-MS-Exchange-CrossTenant-Network-Message-Id: 820361c8-f467-4627-a082-08d720c155d9  X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa  X-MS-Exchange-CrossTenant-FromEntityHeader: Internet  X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:   00000000-0000-0000-0000-000000000000  X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2NAM01HT037  X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.9405696  X-MS-Exchange-Processed-By-BccFoldering: 15.20.2157.000  X-Microsoft-Antispam-Mailbox-Delivery:      abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:1;auth:1;dest:J;OFR:ExclusiveSettings;ENG:(5062000261)(5061607266)(5061608174)(4900115)(4920090)(6515079)(4950130)(4990090)(9190016);RF:JunkEmail;  X-Message-Info:      qoGN4b5S4yrfUGew4atb642biW7lq1euRV2F1Jm2Nf1IMtpXXZRh/uqF0jI6rdHDGGErJKU6AhymbPO1WiG5DBzj6+RoCsLnA1cgjMGdVGjFT2jiqMA2/BXhzlzUysgBjqHGl3zyZRb6MGJToFClDREzFMFdB2c5TtSGh9vuT1l5OPCjSwDyJ26j1o9xReO8ErUY6v//W7odgr4hklq72g==  X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MjtHRD0xO1NDTD02  X-Microsoft-Antispam-Message-Info:      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  MIME-Version: 1.0  

Cannot connect to open port in remote server

Posted: 03 Jul 2021 01:03 AM PDT

On my remote server, I installed ElasticSearch, which can be accessed at http://localhost:9200/:

enter image description here

I defined an inbound security rule, Port9200, in the firewall for my remote server:

enter image description here

enter image description here

As you can see, Port 9200 is publicly accessible to everybody.

When I tried to access the remote ElasticSearch server from the browser in my local computer, I saw the following time-out message:

enter image description here

My router firewall does not have any rules blocking outbound traffic to any TCP port.

Any suggestions on how to make my remote ElasticSearch server accessible from my local machine?

How can I report on who has viewed a file in an Office 365 SharePoint library?

Posted: 03 Jul 2021 04:26 AM PDT

I want to store a bunch of policies in a SharePoint library (Office 365) and want to be able to report on all users who have viewed the document.

I could do it like this: https://support.office.com/en-us/article/Configure-audit-settings-for-a-site-collection-a9920c97-38c0-44f2-8bcb-4cf1e2ae22d2?ui=en-US&rs=en-US&ad=US (using auditing on the site) but it seems like overkill. I just need to report on each distinct user who has viewed each document, not every time they have accessed it.

Can this be done "out of the box" or if not is there a (O365 friendly) plugin?

Apache 2.4 ErrorDocument for multiple subdomains

Posted: 03 Jul 2021 03:02 AM PDT

we're running a large project for different customers, each has its own subdomain. Apache should not execute any script if an invalid subdomain is used. Instead, an error page should be shown.

Working:

this is out zzz-default.conf which is the last VHOST and matches all queries that are not catched by another VHOST.

<VirtualHost *:80>          ServerName project.example.com          ServerAlias *.project.example.com          Redirect 404 /          DocumentRoot /var/www/html/          ErrorDocument 404 "This Subdomain does not exist."          ErrorLog ${APACHE_LOG_DIR}/error.log          CustomLog ${APACHE_LOG_DIR}/access.log combined  </VirtualHost>  

What's not working:

ErrorDocument 404 /404.html  

This file is located in /var/www/html/ and contains pure html, no scripts.

Our problem seems to be the redirect rule, but we need this to match all subdomains and rewrite to /.

If I enable this and call an invalid subdomain, I get

Not Found

The requested URL / was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

Anybody knows why?

Edit: The other VHOSTs are defined as

<VirtualHost *:80>      ServerName client.project.example.com      Header always append X-Frame-Options SAMEORIGIN  </VirtualHost>    Include /path/to/local/client/httpd-vufind.conf  

There are 13 VHOSTs defined like this and then the above zzz-default.conf is loaded.

openssl cms not finding signer certificate

Posted: 03 Jul 2021 05:04 AM PDT

So I created a PKCS7 signed message and am trying to validate it with OpenSSL with the following command:

openssl cms -in demo.p7m -inform DER -verify  

Doing so returns me the following error:

140653850015376:error 2E09D08A:CMS routines:CMS_verify:signer certificate not found:cms_smime.c:353:  

I don't understand this error. Here's the output of openssl asn1parse -in demo.p7m -i -inform DER:

http://pastebin.com/AgkVbQjS

Here's the base64 encoded PKCS7:

http://pastebin.com/92mMPVw6

The X509 cert is as follows:

-----BEGIN CERTIFICATE-----  MIIB4zCCAU6gAwIBAgIAMAsGCSqGSIb3DQEBBTA5MRwwGgYDVQQKDBNwaHBzZWNsaWIgZGVtbyBj  ZXJ0MRkwFwYDVQQDDBB3d3cud2hhdGV2ZXIuY29tMCIYDzIwMTIwNjA0MDMxMDMxWhgPMjAxMzA2  MDQwMzEwMzFaMDkxHDAaBgNVBAoME3BocHNlY2xpYiBkZW1vIGNlcnQxGTAXBgNVBAMMEHd3dy53  aGF0ZXZlci5jb20wgZ0wCwYJKoZIhvcNAQEBA4GNADCBiQKBgQCtYr+TcpSQ043ZZi+akC1LR5Q6  MJPJ6/0MQ7IFPt/SCywaxsdFsNQ40+TOSFNkG68nscyB5nEPDkNzLJ7AklNSRHItqxTwohuW4a+f  BfzAi0vXS9IrM2iep13cHE9r5QW9pouRQiYfbi5FegEWbtIc5SrmAxHAH9K3KGRaXEeufwIDAQAB  MAsGCSqGSIb3DQEBBQOBgQBYEsMuWBA9ie4ulXxeLhLoQvEo6vgl5LDRFMuP+AhkKzfXUo2yEMWP  /QxbSglcPT/ycb+5+FhYGWxGatM5V+sB43ZBHZD14ZWPN35ePmDIfqXdRmphhXuhdNU7DWwp97ZR  c26CQXzHurRf29VloV8k5JKwsfnLRPVCrbJySMB6dg==  -----END CERTIFICATE-----  

The cert parses just fine with openssl x509 -in cert.txt -text -noout.

The cert is a self-signed cert. The issuer DN is as follows:

   92:d=6  hl=2 l=  57 cons:       SEQUENCE               94:d=7  hl=2 l=  28 cons:        SET                    96:d=8  hl=2 l=  26 cons:         SEQUENCE               98:d=9  hl=2 l=   3 prim:          OBJECT            :organizationName    103:d=9  hl=2 l=  19 prim:          UTF8STRING        :phpseclib demo cert    124:d=7  hl=2 l=  25 cons:        SET                   126:d=8  hl=2 l=  23 cons:         SEQUENCE              128:d=9  hl=2 l=   3 prim:          OBJECT            :commonName    133:d=9  hl=2 l=  16 prim:          UTF8STRING        :www.whatever.com  

That matches the issuer DN in the SignerInfo:

  782:d=14 hl=2 l=  57 cons:               SEQUENCE              784:d=15 hl=2 l=  28 cons:                SET                   786:d=16 hl=2 l=  26 cons:                 SEQUENCE              788:d=17 hl=2 l=   3 prim:                  OBJECT            :organizationName    793:d=17 hl=2 l=  19 prim:                  UTF8STRING        :phpseclib demo cert    814:d=15 hl=2 l=  25 cons:                SET                   816:d=16 hl=2 l=  23 cons:                 SEQUENCE              818:d=17 hl=2 l=   3 prim:                  OBJECT            :commonName    823:d=17 hl=2 l=  16 prim:                  UTF8STRING        :www.whatever.com  

Here's the serial number of the SignerInfo:

  841:d=12 hl=2 l=   1 prim:             INTEGER           :00  

This matches the serial number of the of the X509 cert:

   77:d=6  hl=2 l=   0 prim:       INTEGER           :00  

So why isn't it finding the signing cert?

pgpool2 parallel mode: Non-superusers must provide a password in the connection string

Posted: 03 Jul 2021 06:00 AM PDT

I have two AWS RDS postgres nodes backing a parallel mode pgpool setup on EC2. After using pgbench to populate test tables, I get odd behavior from test queries. Any query that uses a function produces the error mentioned in the subject line, while other queries work as expected. Three examples showing success, expected failure, and unexpected failure:

Success -- Yields the expected record set:

psql -c "SELECT aid FROM pgbench_accounts" "host=localhost port=9999 user=pgpool password=pass dbname=bench_parallel"  # Giant record set is returned here.  

Since the backing nodes are on RDS, md5 authentication is required. Authentication appears to be working fine in the case of non-function queries, as can be seen by replacing the correct password above with an incorrect one.

Expected authentication failure:

psql -c "SELECT aid FROM pgbench_accounts" "host=localhost port=9999 user=pgpool password=notmypass dbname=bench_parallel"  psql: FATAL:  password authentication failed for user "pgpool"  

Here's the part that has me baffled -- If I put a function like min() or count() into the query, I get authentication problems:

psql -c "SELECT count(aid) FROM pgbench_accounts" "host=localhost port=9999 user=pgpool password=pass dbname=bench_parallel"  ERROR:  password is required  DETAIL:  Non-superusers must provide a password in the connection string.  

As can be seen from this last query, the password is supplied in the connection string (to the fronted, anyway) and it is the correct password as shown in the first query.

Why would my first query work fine with no auth problems, but the third one fail? Have I overlooked a setting somewhere?

Edit 2014-10-23: Adding more information.

I added superuser privileges to user pgpool on the (frontend) system database and no longer get Non-superusers must provide a password in the connection string as the error. Now I get:

ERROR:  could not establish connection  DETAIL:  fe_sendauth: no password supplied  

Turning on debugging for pgpool and looking in the log, I see the query being rewritten as the following, which, in the call to dblink, does not contain the password specified in the original connection string:

2014-10-23 19:59:10 DEBUG: pid 1643: OneNode_do_command: Query:  SELECT       sum(pool_g$0) AS count FROM       dblink('host=ip-10-1-2-17 dbname=bench_parallel port=9999 user=pgpool',      'SELECT pool_parallel("SELECT count(aid) FROM pgbench_accounts")',false)       AS pool_t$0g (pool_g$0 bigint )  

using logrotate with prerotate/postrotate scripts

Posted: 03 Jul 2021 03:02 AM PDT

I need to deliver csv file with some data which will come from my application. Structure of file shall look like this:

time,time,meas_type,meas_val[1],meas_val[2],meas_val[3]  1379501121,1379501121,INTERNAL,123.2,133.4,144.2  1379501141,1379501141,INTERNAL,123.1,133.3,144.12  1379501161,1379501161,INTERNAL,123.4,133.3,144.3  1379501181,1379501181,INTERNAL,123.5,133.2,144.4  and so on...  

As you can see, there is a 'csv header':

time,time,meas_type,meas_val[1],meas_val[2],meas_val[3]  

and data from my application:

1379501121,1379501121,INTERNAL,123.2,133.4,144.2  

where each line is one measurement. During day I'm having 24 measurements. File which i have to deliver shall consists of csv header and data coming from my application, and for each day i need to have separate file. Thing is - my application is dummy, not extendable, and can only write data into a one file, without csv header, and also cannot create a new file when date is changed. I tought of using logrotate, which:

  1. when date is changed creates a new file

  2. in some prerotate or postrotate phase do like this:

    echo "time,time,meas_type,meas_val[1],meas_val[2],meas_val[3]" >> measurements.log

so in each new file i will have 'csv header' provided. Is it possible ?

regards J.

Asterisk behind a firewall

Posted: 03 Jul 2021 02:00 AM PDT

we have a bit a sticky problem on our Asterisk server, which we are struggling to resolve, I'm hoping someone with more knowledge than me can help.

We are running Asterisk 1.8.23.0 on Centos 6.4 and our phones and asterisk server are sitting on the inside of a firewall and our voip service providers are on the outside. The firewall is setup and managed by an external company.

We currently have two voip service providers, A, who handles most of of inbound traffic and all our outbound traffic, and B who handles some of our inbound traffic, which gets routed to our call centre via an external IVR.

In a recent security audit we were told that we should have all our voip traffic running through a firewall, and it's been decided that we we should do this in two phases.

The first phase is to put the inbound traffic that we recieve from B through a firewall, and then in phase two send the inbound and outbound traffic from A through the firewall as well. We are currently stuck on phase one.

Initially we tried setting externip and localnet in the [general] section of our sip.conf file, but that broke the voip traffic on our primary voip service provider A, so we've tried to set them in the specific entry in our sip.conf file for our secondary voip service provider, B, like this:

[A]  type=friend  disallow=all  allow=alaw  allow=g729  context=fromneotel  host=aaa.aaaa.aaa.aaa  insecure=port,invite  nat=no  directmedia=no    [B]  type=friend  disallow=all  allow=g711  allow=g729  allow=alaw  context=fromis1  host=bbb.bbb.bbb.bbb  insecure=port,invite  nat=yes  directmedia=no  externip=ccc.ccc.ccc.ccc  localnet=192.68.20.0/255.255.252.0  

where aaa.aaa.aaa.aaa is the ip of A and bbb.bbb.bbb.bbb is the ip of B and ccc.ccc.ccc.ccc is the external ip of the firewall.

With these settings in place, the call centre can recieve phone calls via the IVR, but once the calls are connected, the external caller can hear the call centre agent, but the call centre agent cannot hear the caller.

Our voip service provider tells us that in the 200 OK SIP response from ccc.ccc.ccc.ccc the SDP portion is giving them the ddd.ddd.ddd.ddd IP Adress to send media to.

ddd.ddd.ddd.ddd is the ip of our asterisk server that B would normally connect to when we are not trying to pass traffic through the firewall. this is the information we recieve from them:

Via: SIP/2.0/UDP bbb.bbb.bbb.bbb:5060;branch=z9hG4bKmm63qe00d8ogcio100k0.1;received=bbb.bbb.bbb.bbb       From: "Anonymous"<sip:<originating number from IVR>@bbb.bbb.bbb.bbb:5060;user=phone>;tag=1641833502-1377756054727-  To: "<call centre number>"<sip:<call centre number>@ccc.ccc.ccc.ccc:5060>;tag=as43201e45  Call-ID: BW0800547272908131094994481@eee.eee.eee.eee  CSeq: 609518180 INVITE  Server: Asterisk PBX 1.8.23.0  Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH  Supported: replaces, timer  Contact: <sip:<call centre number>@ccc.ccc.ccc.ccc>  Content-Type: application/sdp  Content-Length: 260    v=0  o=root 1148542603 1148542603 IN IP4 ddd.ddd.ddd.ddd  s=Asterisk PBX 1.8.23.0  c=IN IP4 ddd.ddd.ddd.ddd  t=0 0  m=audio 11064 RTP/AVP 18 101  a=rtpmap:18 G729/8000  a=fmtp:18 annexb=no  a=rtpmap:101 telephone-event/8000  a=fmtp:101 0-16  a=ptime:20  a=sendrecv  

according to B, our secondary voip service provider, this is the line causing the trouble: o=root 1148542603 1148542603 IN IP4 ddd.ddd.ddd.ddd

eee.eee.eee.eee is an ip address that I don't recognise and know nothing about.

Any help is greatly appreciated.

Can't request computer certificate

Posted: 03 Jul 2021 06:00 AM PDT

I am using MMC with the snaping of certificates. I am requesting certificates from a brand new installation of a CA.

Requesting User certificates works perfectly. Requesting Computer certificates fails and says the RPC service is unavailable.

What should I check?

Repairing Dynamics CRM 2011 Server

Posted: 03 Jul 2021 05:04 AM PDT

As stated above, I had a bit of an issue with my CRM 2011 server last week. I run a small computer repair company and use it to manage my clients. I was running the server in a VirtualBox VM and the host hard drive ran out of space. My original problem was that the virtual hard drive got corrupted towards the end. I was able to use Acronis to clone the VHD to a new one and got my Server 2008 R2 running again. Then I ran into a problem where SQL Server 2008 wasn't running correctly. Ran a repair on that and got access to my data again. When I went to log into my CRM, all of the dashboards threw a generic SQL error. I found a script on another blog that helped me fix that issue(script below). But now whenever I try to open any entity, I get a generic error. No information on whats going on and no error codes. I can see the specific entries in the list view, but the error comes up every time I try to open one of them. I tried repairing CRM multiple times with no change. Any help?

EXEC sp_resetstatus 'MicrosoftCRM_MSCRM';  ALTER DATABASE MicrosoftCRM_MSCRM SET EMERGENCY    DBCC checkdb('MicrosoftCRM_MSCRM')  ALTER DATABASE MicrosoftCRM_MSCRM SET SINGLE_USER WITH ROLLBACK IMMEDIATE    DBCC CheckDB ('MicrosoftCRM_MSCRM', REPAIR_ALLOW_DATA_LOSS)  ALTER DATABASE MicrosoftCRM_MSCRM SET MULTI_USER  

Edit. Link to Trace: http://www.onyx-computers.com/crmtrace.log

Trace was too big for the post so I added it to my FileSonic account.

I should also add that yesterday, I tried creating a new server from scratch and importing organizations database. That didnt help at all. It still does the same thing. I also noticed that when the error page comes up, there is a Try Again and Cancel button and when I click Try Again a few times, I get a 404 error.

Edit. Changed link from FileSonic to my web host.

How to make an OpenVPN connection over pptp connection in ubuntu

Posted: 03 Jul 2021 05:00 AM PDT

I need to connect to my ISP's server using pptp. And then I need to connect to the private network at my office using OpenVPN.

OS: Ubuntu 10.10

How can I make such connection?

Thank you.

In Amazon EC2, how do I make it run a python script when I “clone” that instance?

Posted: 03 Jul 2021 01:03 AM PDT

Suppose I have a script in

/home/myuser/go.py  

How do I run that script, when a new instance is booted? (I'm used to using the point-and-click control panel Amazon has...)

No comments:

Post a Comment