Recent Questions - Server Fault |
- Change number that stays the same in IP Address Range
- unable to login into VM using RDP
- How can I forward smartd alerts to multiple emails?
- How do I get smartctl offline test results emailed?
- What do Offline_Uncorrectable and Current_Pending_Sector mean in the context of SMART tests?
- LTO windows tape drivers vs IBM drivers in Win10/LTFS
- Sendmail authenticating with DKIM but Roundcube is not authenticating
- SMART offline test terminated with read failure while individual attributes are above the threshold
- Why does my Linux Kernel have missing directories / files that are crucial for ip_tables to run?
- Upgrade from 2012 Standard to 2019 Essentials
- Less aggressive garbage collection in Windows server [closed]
- Do network acls block inter-subnet traffic as well?
- rsync: [generator] failed to set permissions : Operation not supported (95)
- User is not authorized to perform: iam:PassRole on resource
- Windows Error reporting stopped one service?
- LDAP - Get CN, DC, OU for logged in account Windows
- Windows 10 network mapping using server name in hosts file
- SCSI virtual disks not showing up on RHEL 7.X KVM guests
- how to increase Apache mod_proxy Jetty 5minute timeout
- Windows Service with dependency cannot start automatically
- Limit Number of TCP connections in Linux Server, to avoid attack
- How can I dump nginx requests for a specific location while nginx is secured?
- Create route through OpenVPN via specific IP address / virtual interface on Linux
- VPN user restricted login to workstations cannot login to VPN server
- Dropping incoming requests for a specific file with iptables
- Debian package performance on XFS, btrfs, ext3, ext4
- ls hangs for a certain directory
- Some clients aren't updating using dhcpd's "ddns-update-style interim" with Windows dns servers
- How to add a timestamp to bash script log?
| Change number that stays the same in IP Address Range Posted: 03 Jul 2021 11:17 PM PDT I have a network with a firewall that failed and i would like to see if I can continue using the network without the firewall until i can get a new one. The ISP router has an IP address of 192.168.100.1 but my network is already set up to the range of 192.168.1.1 to 192.168.1.254. The default gateway on all the nodes was set to the firewall's ip address of 192.168.1.253 I would like to plug the ISP router directly into my switch and still keep the IP address range of 192.168.1.1 to 254 (as opposed to switching to the range of 192.168.100.1 - 254) How can i achieve this?  |
| unable to login into VM using RDP Posted: 03 Jul 2021 10:37 PM PDT I am unable to login the VM using RDP. I have tried various option and no luck. I have created the Azure VM using portal. but unable to login the VM using RDP. I have restarted/redeployed, nothing is working. When I reset the password it failed. It says that "provisioningState": "Failed". I am not what do the next.  |
| How can I forward smartd alerts to multiple emails? Posted: 03 Jul 2021 06:03 PM PDT I want to forward
However, on Ubuntu 18.04 and with smartmontools release 6.6, if I drop a line like this in the I do receive email in  |
| How do I get smartctl offline test results emailed? Posted: 03 Jul 2021 05:57 PM PDT I want to schedule  |
| What do Offline_Uncorrectable and Current_Pending_Sector mean in the context of SMART tests? Posted: 03 Jul 2021 05:35 PM PDT SMART shows there are 6  |
| LTO windows tape drivers vs IBM drivers in Win10/LTFS Posted: 03 Jul 2021 04:42 PM PDT I use two ibm 3580 hh6 LTO drives both in windows 7 and windows 10. The performance in windows 7 (same machine) is about 20% faster. I have read here and there that it is best to use the ibm drivers, and not the windows ones. I tried to install them in windows 10 but there would be an "incompatible with this version of windows message". Then I installed manually from the windows system management panel and it does install but shows a warning sign on the drive, like it does not work properly. I am not saying which version I tried because I tried many, but could provide the details. Just wanted to know if anyone has experience in switching to the IBM drivers in a non server windows and if they are worth the hassle installing. Thanks  |
| Sendmail authenticating with DKIM but Roundcube is not authenticating Posted: 03 Jul 2021 08:04 PM PDT So I have set up the mail server, Roundcube, and Sendmail both work as expected. but many of my emails were going to spam in Gmail and others, so I was setting up the DKIM auth and it was successful. [Side Note] for some reason, I set it up so SMTP uses port 25 instead of 587 (that other people recommended). So I don't know if that causes any issues. First I tested it with Roundcube and sent an email to my Gmail account, when I click on the But when I send in the terminal with Sendmail it does show under DKIM: What am I doing wrong? Does Roundcube have a plugin to enable DKIM? https://pastebin.pl/view/5d87eb76 <- that is the  |
| SMART offline test terminated with read failure while individual attributes are above the threshold Posted: 03 Jul 2021 04:22 PM PDT I ran an extended SMART test on a drive today which terminated early reporting a read filute. However, if I look at the individual attributes, they all are above the threshold. Should I be worried? Currently, the offline test just reports the LBA of the first failure. Is there any way to make the offline test run until completion in spite of the failures? In addition, my system email is flooded with a bunch of these messages:  |
| Why does my Linux Kernel have missing directories / files that are crucial for ip_tables to run? Posted: 03 Jul 2021 04:03 PM PDT as mentioned in the header - my Linux Kernel seems to be missing files / directories that are crucial for iptables to run properly. I'm able to temporarily resolve this by reinstalling my kernel, but it's not a permanent resolve as after a reboot I'm back to where I started. When I run Is it possible to reinstall the kernel module permanently, so I don't have to reinstall after every reboot to get iptables to work? I'm running Ubuntu 20.04.2, and as mentioned above my kernel is 5.8.0-59-generic. I appreciate any assistance I can get! edit: The output I get from And the ouput I get from The computer that is running is a Dell Optiplex 3020 with specs of:
 |
| Upgrade from 2012 Standard to 2019 Essentials Posted: 03 Jul 2021 08:38 PM PDT We have a client running a very old physical server running 2012 Standard. We want to upgrade to 2019 essentials. We want to switch to essentials since they will not need more than 25 cals. Is there any way to do an in-place install (even in multiple steps) so we do not have to re-install all of the software? I have tried some different approaches but the option to keep current files is always disabled.  |
| Less aggressive garbage collection in Windows server [closed] Posted: 03 Jul 2021 04:57 PM PDT I have a web request that uses around 400 MB of memory, and takes about four seconds if there is no GC. When the Visual Studio profiler shows that a GC takes place during the request, it takes five to six. When the GC is triggered the profiler shows only one GB of memory is in use. During stress testing, Dynatrace shows that only 14 GB out of 32 GB is ever used, and the average response time goes up to sixteen seconds. Is there any way to configure a less aggressive GC in a Windows server? More likely it would be a CLR setting. edit I was given permissions to access Dynatrace on the servers and found that there are no GC issues, so this is no longer an issue. It appears the task is CPU bound and the reports from the stress tests did not take that in to account when calling out the excessive response duration.  |
| Do network acls block inter-subnet traffic as well? Posted: 03 Jul 2021 05:13 PM PDT I have VMs placed in different AZs on AWS. In order to be able to do this, you need a subnet in each AZ. If I'm creating a network acl for the entire setup (ie to be associated with all subnets) do I need to specify allow rules from all the subnet CIDR ranges? If I don't, will the network acl block inter-subnet traffic based on my port rules? I'm assuming they will...but want confirmation.  |
| rsync: [generator] failed to set permissions : Operation not supported (95) Posted: 03 Jul 2021 04:05 PM PDT I want to virtualize correctly Android 10 on top of my Jetson nano (arm64) using qemu and kvm on ubuntu 18.04. This is the tutorial that I'm following : https://github.com/antmicro/kvm-aosp-jetson-nano everything went good until this command : something is not good because I get a lot of errors when I transfer the files and permissions from the source to the destination path (both are on the same disk and on the same ext4 partition. You can see the full log with the errors here : https://pastebin.ubuntu.com/p/W9GjPCt8G4/ the consequence of these errors is that when I try to emulate android with qemu like this : this is the error that I get : I've just edited my /etc/fstab file like this : and also like this : but the error still there : this is also interesting : and so on. someone knows why I get those errors and how can I fix them ? thanks.  |
| User is not authorized to perform: iam:PassRole on resource Posted: 03 Jul 2021 05:02 PM PDT I'm attempting to create an eks cluster through the aws cli with the following commands: And get the following error: However, I've created a permission policy, In the What am I missing? How can I go about debugging this error message? Thanks for any and all help.  |
| Windows Error reporting stopped one service? Posted: 03 Jul 2021 06:00 PM PDT I have the problem with one service in win2k8 One of my service terminated unexpectedly while going through event logs i have following logs After this log , it shows our application service was terminated unexpectedly Next, the Windows Error reporting entered stopped state what made the service terminate unexpectedly, in any case WER cause the service to terminate?  |
| LDAP - Get CN, DC, OU for logged in account Windows Posted: 03 Jul 2021 11:01 PM PDT I am not very familiar with LDAP but need to add LDAP authentication to an existing application. I am trying to test LDAP authentication using I am currently logged into my domain account on windows. Can I obtain the required parameters from this logged in user and use it as the bindDN ?  |
| Windows 10 network mapping using server name in hosts file Posted: 03 Jul 2021 09:06 PM PDT I want to map a samba shared folder on my Windows 10 Home PC. The server is a Linux - CentOS 7 with Samba 4.4.4. First with simple net view this works: I added the following to my hosts file: But got the following result: Pinging the server works fine using myserver UPDATE Using the IP I can access the server and the Get-SMBConnection result is: Using the server name I can not even browse the server.  |
| SCSI virtual disks not showing up on RHEL 7.X KVM guests Posted: 03 Jul 2021 06:00 PM PDT For whatever reason I can't get my virtual disks to show up on any of my RHEL 7.X guests (libvirt + KVM). The XML is configured just like my other guests so I know it isn't an issue on that end. It almost seems like my VMs are missing a SCSI driver or something but it's difficult to tell. /proc/scsi/scsi has no entries in it and none of the disks are in /dev or /dev/disk/by-*. I'm not exactly sure what I should be looking for, so if anyone has any ideas about why this would happen please let me know.  |
| how to increase Apache mod_proxy Jetty 5minute timeout Posted: 03 Jul 2021 07:03 PM PDT we use Apache and Jetty to do install components behind a firewall. Some actions take a while ( 10-15 minutes ). Apache is the proxy and Jetty is the proxy target on some machines. Everything works fine for actions taking less than 5 minutes. Actions taking longer than 5 minutes fail with a 502 proxy error. I have seen some similar topics and the advice was to define timeout and keepalive - both did not help. our setup ist: Windows 2012R2 Apache 2.4.9 Jetty 7 Initially I forgot to mention that there is a firewall between the apache and the Jetty. In apache httpd.conf we have: We hoped that timeout=3000 ( 3000 seconds ) would keep Apache waiting for about 50 minutes for the response from Jetty. Keepalive and and ttl are trials ... On Jetty we are calling a simple Groovy script that simply sits and waits for a long time. If the waittime is small this works as expected. If the waittime is beyond 5minutes we get an error: Apache Access: ( the request starts at 17:25 ) As you can see the duration is about 5Minutes ~ 300509428 and thus a timeout - it should have lastet for 10 minutes. Apache Error: ( the request times out at 17:30 ) Any ideas how to do to keep Apache waiting for a longer time ??  |
| Windows Service with dependency cannot start automatically Posted: 03 Jul 2021 08:02 PM PDT I have The scenario is:
And that's it, Windows doesn't bother to start  |
| Limit Number of TCP connections in Linux Server, to avoid attack Posted: 03 Jul 2021 08:02 PM PDT I want to limit the number of TCP connections in Linux server, I have used the following command.
It seems like, something is wrong and desired results are not coming. I get the number of active connections using the following command
Now, When I type the above command, I get the following results. As you can see there are more active tcp connections than allowed limit of 25. Can someone please help me with correct command , or What is going wrong in this ?  |
| How can I dump nginx requests for a specific location while nginx is secured? Posted: 03 Jul 2021 07:03 PM PDT I want to dump all request that nginx is getting for a specific location so I can debug a strange problem that I have. Usually tcpdump would be the solution but remember that nginx is accessed using HTTPS so dumping secured packages wouldn't be useful. Note: in fact I am mostly intereted to dump all headers as I need to find out if any proxy modified the requests made by the client. Obviously, I already used Wireshark or Charles on the client side but I came to the conclusion that that reaches the server is different that what it was sent by the client.  |
| Create route through OpenVPN via specific IP address / virtual interface on Linux Posted: 03 Jul 2021 04:02 PM PDT I have a Linux server at home, on which I run an OpenVPN client connected to some server on the Net. What I want to archive is this: I want my home server to expose an interface (e.g. an IP address), which I can put as the default gateway on another machine in my local network, which will then route traffic through the OpenVPN. For example, if my home server has the internal IP 192.168.1.1, the OpenVPN IP 10.0.1.1, my external server has the OpenVPN IP 10.0.1.2 and public IP 1.2.3.4, while another computer on my network has the internal IP 192.168.1.2, I would want a traceroute to public IP 9.8.7.6 like this:
where each  |
| VPN user restricted login to workstations cannot login to VPN server Posted: 03 Jul 2021 05:02 PM PDT We have a vendor that requires Domain Admin access on the servers where their software is deployed. (Obviously we want to restrict them to only being able to login to the servers where their software is deployed.) In AD, we have used the "Log On To..." to restrict that user to those particular servers. However, our VPN (Sonicwall NSA 2400) cannot authenticate the user when restricted servers are set. It returns: "80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 531, v1db1". According to this, the error is that the Sonicwall is not a permitted workstation. I have added the IP of the Sonicwall to the allowed workstations, but it has not removed the error. When I change the logon restriction to all workstations, the user is allowed to login to the VPN and the Sonicwall says login successful. Is there a way I can get the Sonicwall to authenticate the user while still keeping the restricted login? I am open to alternatives to our method.  |
| Dropping incoming requests for a specific file with iptables Posted: 03 Jul 2021 11:01 PM PDT Server is a standard LAMP stack configured via cpanel on CentOS 5.9. We have one file, call it bad.php, on one of our domains that is mistakenly being accessed about 10 times a second by a service provider. The file no longer exists, and we want to block these requests in the most efficient way possible. Currently we're returning bare-bones 410 responses, but that still involves tying up apache threads, sending headers, etc. Ideally I want to just drop the requests, not sending any response. Blocking by IP is not an option, because we need to allow these IPs to legitimately access other files. (And no, we can't just ask them to stop.) We also don't have an external firewall to work with (leased server, custom external firewall costs extra). My thinking is that the best option would be an iptables rule like this: Two questions: First, I tried that rule (with the domain's IP address in place of ip address), but it had no effect. It was the very first rule shown by iptables -L, so it should not be overridden by an earlier rule: Have I messed up somewhere there? I'm very much an iptables noob. Second question is, are there any caveats to this? Will there be significant overhead having iptables string match every request (compared to the apache RewriteRule with R=410, as we're using now)? Am I better off just living with it? Or is there a better option? (mod_security perhaps?) The server isn't anywhere close to being strained, so it's not a necessity, just an optimization. Edit in response to Saurabh Barjatiya: Here is everything I see from tcpdump when I make a request for the bad.php file: Obviously the actual url string is not here. My understanding is that iptables can filter for url strings though, so presumably I'm checking the wrong thing.  |
| Debian package performance on XFS, btrfs, ext3, ext4 Posted: 03 Jul 2021 09:06 PM PDT I did 4 clean installations of debian 6 and measured time of installing some average virtual package. FS options are default. I got very strange results (min:sec, less is faster): What is wrong with XFS and btrfs? 6 times slower than ext3? Am I doing something wrong?
Upd (some details): All LVM volumes are local to VM and are on idle RAID. CDROM image is local and the same, Internet connection is stable and it factors max 10-15 seconds. All the visible slowdowns are after downloads: XFS and btrfs guests think over 1 second every  |
| ls hangs for a certain directory Posted: 03 Jul 2021 06:10 PM PDT There is a particular directory (
I have had to kill my terminal sessions several times because of the
What else should I do to investigate this problem? It just randomly started happening today. UPDATE
And also,  |
| Some clients aren't updating using dhcpd's "ddns-update-style interim" with Windows dns servers Posted: 03 Jul 2021 04:02 PM PDT I am using dhcpd 3.0.5 and Windows 2008 R2 for dns. I have "ddns-update-style interim;" set and the Windows server is set to allow unauthenticated updates. Most of the time this works great, but occasionally I'm coming across computers that aren't resolving the hostname to the correct IP address. When I look at dns, there is an A record for the wrong ip, but no TXT record (so dhcpd must not have set it). Not surprisingly the dhcpd logs for that hostname will show "Has an A record but no DHCID, not mine." Does anyone have any idea how these A records got in there? I'm thinking the client somehow got it in there before dhcpd was able to set it. Is there some way to prevent this? Is there any way to make dhcpd update a record even if it does not have a TXT record? If the client is creating the A record, then it is also not updating itself, but that's not surprising because that seems to be common and is the reason I want dhcpd to do the updates in the first place. Also, it would be helpful if anyone knew of a way to script deleting an A record and then force dhcpd to retry updating the record (without having to go to the client and send another dhcp request)?  |
| How to add a timestamp to bash script log? Posted: 03 Jul 2021 04:08 PM PDT I have a constantly running script that I output to a log file: I'd like to add a timestamp before each line that is appended to the log. Like: Is there any jujitsu I can use?  |
| You are subscribed to email updates from Recent Questions - Server Fault. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
| Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | |
No comments:
Post a Comment