Tuesday, February 1, 2022

Recent Questions - Server Fault

Recent Questions - Server Fault


PROTONMAIL Customer Care ��– 1-8OO`'–972–882 O☎️Phone Number

Posted: 01 Feb 2022 06:03 AM PST

protonmail Customer care Number Want to take your financial consulting practice to the next level, earn client trust, and easily connect with a vast pool of potential customers? Certification as aprotonmail ProAdvisor brings you these and many more benefits. And the best part is, you can boost your business at no cost with just a few hours of your time. By joining theprotonmail ProAdvisor program and completing a test, your ProAdvisor certification demonstrates your superior knowledge of theprotonmail system. You will be prepared to provide both expert business and financial consulting. Certification as aprotonmailprotonmail Customer Support Number ProAdvisor will improve your efficiency and increase the success of your practice. We'll discuss these and more benefits in detail later in this article.

ICLOUD Customer Care ��– 1-8OO`'–972–882 O☎️Phone Number

Posted: 01 Feb 2022 05:59 AM PST

icloud Customer care Number Want to take your financial consulting practice to the next level, earn client trust, and easily connect with a vast pool of potential customers? Certification as aicloud ProAdvisor brings you these and many more benefits. And the best part is, you can boost your business at no cost with just a few hours of your time. By joining theicloud ProAdvisor program and completing a test, your ProAdvisor certification demonstrates your superior knowledge of theicloud system. You will be prepared to provide both expert business and financial consulting. Certification as aicloudicloud Customer Support Number ProAdvisor will improve your efficiency and increase the success of your practice. We'll discuss these and more benefits in detail later in this article.

Are LocalUser.LastLogon updated with IIS FTP logins?

Posted: 01 Feb 2022 06:01 AM PST

I'm trying to get a list of the latest users that connected to the IIS FTP server. I have an FTP group on my Windows 2008 R2 Server.

Get-LocalGroupMember -Group FTP | Select-Object LastLogon  

I know that I can check recent FTP logins with the FTP log file, but each LocalUser has a LastLogon property. Is this property updated when someone uses its account to connect to the FTP server?

I'm converting ints to chars and trying to send them from a C client to a Python server on another computer. Getting 'send: Bad address'

Posted: 01 Feb 2022 05:53 AM PST

On one computer with the client (written in C) I get the error send: Bad address when I try to send chars to another computer with a server written in Python. But the address is NOT bad.
If instead of chars I just send a written string, "A string written like this" I can send it just fine to the server and see it print with no problems. So, I don't think there is really a problem with an address.

I have also tried converting the int to a string. I get error when compiling cannot convert string to char. I have tried variations and I can only compile with the client written as it is below.

The client (in C)

#include <sys/socket.h>  #include <sys/types.h>  #include <netdb.h>  #include <unistd.h>  #include <iostream>  #include <string>  #include <vector>  #include <cstring>  #include <stdio.h>  #include <stdlib.h>    #define ADDR "192.168.0.112"  #define PORT "12003"    void sendall(int socket, char *bytes, int length)  {      int n = 0, total = 0;      while (total < length) {          n = send(socket, bytes + total, total-length, 0);          if (n == -1) {              perror("send");              exit(1);          }          total += n;      }  }    void thesock(char *ADDRf, char *PORTf, char *RAZZstr)  {      struct addrinfo hints = {0}, *addr = NULL;      hints.ai_family = AF_UNSPEC;      hints.ai_socktype = SOCK_STREAM;      int status = getaddrinfo(ADDRf, PORTf, &hints, &addr);      if (status != 0) {          std::cerr << "Error message";          exit(1);      }            int sock = -1;      struct addrinfo *p = NULL;      for (p = addr; p != NULL; p = addr->ai_next) {          sock = socket(p->ai_family, p->ai_socktype, p->ai_protocol);          if (sock == -1) {                  continue;          }          if (connect(sock, p->ai_addr, p->ai_addrlen) != -1) {                  break;          }          close(sock);      }      if (p == NULL) {          fprintf(stderr, "connect(), socket()\n");          exit(1);      }      sendall(sock, RAZZstr, 12);      close(sock);  }    int main()  {      int someInt = 321;      char strss[12];      sprintf(strss, "%d", someInt);              thesock(ADDR, PORT, strss);        return 0;  }  

This last part of the code above is where the chars, or string is entered. It's this part of the code where you can replace strss in thesock with a string written in the strss position "just like this" and it will send to the server on the other computer written in Python. Though, when compiling I do get warnings ISO C++ forbids converting a string constant to 'char*'.

The server (In Python)

import os  import sys  import socket    s=socket.socket()    host='192.168.0.112'  port=12003    s.bind((host,port))  s.listen(11)    while True:      c, addr=s.accept()      content=c.recv(29).decode('utf-8')        print(content)    

This server decodes utf-8. I don't know if I have the option for a different 'decode' here. I don't think Python has 'chars'.

Is CD polling from "SeaBIOS" after GRUB coming from VPS host (Vultr) or OS (Debian 10)?

Posted: 01 Feb 2022 05:43 AM PST

I'm new to the VPS hosting scene and it's been a while since I installed Debian, 7-Wheezy was my last.

I'm seeing polling for a CD rom drive after GRUB from SeaBIOS (see screenshot).

Is this being done by Debian (10) or by the VPS hosting company (Vultr)?

The thing confusing me most is that it polls for CD after GRUB. I thought GRUB came after the BIOS. Maybe it's a VPS thing I'm not aware of.

I'd like to disable CD polling on boot, just not sure how to proceed.

enter image description here

where does WordPress store wp-config values

Posted: 01 Feb 2022 05:42 AM PST

The Wordpress wp-config files has a number of values set to control how WP operates.

My question is, are those values only stored in session, or are they in the database somewhere?

Any advice appreciated.

Kerry

What does the "crt" abbreviation mean in certificates?

Posted: 01 Feb 2022 05:33 AM PST

I can find what all the other abbreviations mean like PEM and CSR as is mentioned here:

https://pki-tutorial.readthedocs.io/en/latest/index.html

but what does CRT stand for?

mdstat mismatch cnt unsynchronized blocks

Posted: 01 Feb 2022 04:47 AM PST

Both of our servers suffer from

mdstat mismatch cnt unsynchronized blocks  

Every start of the month we got this error and we have to repair the raid using

echo 'repair' >/sys/block/<md id>/md/sync_action  

This check is caused by mdcheck_start.timer.service if I'm not mistaken.
It takes around 5 hours to repair it, after that time it repairs itself, or at least I think so.

The question is if this is a correct way to fix unsynchronized blocks of the raid? What causes it and how can I tell if it's a hardware/disk error? Thank you!

Full time on, without hibernate

Posted: 01 Feb 2022 04:35 AM PST

I'm having difficulties in my VM. When I disconnect remote access, my VM hibernates. I need her to be active full time. How do I make it stay full time on?

nginx.service: Failed at step EXEC spawning /usr/sbin/nginx: No such file or directory

Posted: 01 Feb 2022 04:31 AM PST

Hello anyone can help?

I was running aws ligthsail using Nginx Instance. Everything is fine. when i configure vhosts.conf and other conf. when i sudo nginx -t error is this:

nginx: [emerg] "server" directive is not allowed here in /opt/bitnami/apps/capital/conf/nginx-vhosts.conf:1 nginx: configuration file /opt/bitnami/nginx/conf/nginx.conf test failed

and then i tried to check using this code `sudo service nginx status i get this error:

Jan 31 14:15:01 ip-172-26-12-145 systemd[5817]: nginx.service: Failed to execute command: No such file or directory Jan 31 14:15:01 ip-172-26-12-145 systemd[5817]: nginx.service: Failed at step EXEC spawning /usr/sbin/nginx: No such file or directory Jan 31 14:15:01 ip-172-26-12-145 systemd[1]: nginx.service: Control process exited, code=exited, status=203/EXEC Jan 31 14:15:01 ip-172-26-12-145 systemd[1]: nginx.service: Failed with result 'exit-code'. Jan 31 14:15:01 ip-172-26-12-145 systemd[1]: Failed to start The NGINX HTTP and reverse proxy server.

anyone can help please i am new using nginx server.

`

Server ML150 Gen9 nejde zapnout

Posted: 01 Feb 2022 04:24 AM PST

Dobrý den, koupil jsem ML150 G9 na bazaru, bez cpu, ram a HDD. CPU a RAM jsem objednal a po poskládání server nereaguje. Vepředu svítí jenom oranžová kontrolka (stanby), kontrolka zdroje nesvítí vůbec. Po připojení k síti se zdroj rozjede, ale server nejde zapnout. Uvnitř svítí oranžová kontrolka "ILO failure" u posledního slotu pro GPU. Při připojení Lan kabelu svítí že je připojený a občas problikne komunikace, ale v routru vidět není. UID nesvítí. Jsem už bezradný a náhodně kupovat komponenty se mi nechce. Restart přes DIP jsem zkoušel. Pokud by tu byl někdo z Prahy pro případnou diagnostiku, rád dovezu.

CPU: INTEL XEON E5-2650 V4

RAM: HPE 8GB 1Rx8 PC4-2400T-R DDR4

Bonding 802.3ad Ubuntu 20.04 and Aruba 6300M

Posted: 01 Feb 2022 04:18 AM PST

I have a problem with bonding mode 802.3ad between Ubuntu 20.04.3 and switch aruba 6300m.

Any problems :

The bonding work fine but after a reboot i need to shut / no shut my lag on 6300M switch for "actualize" the bonding. After that it's work fine. (Only mode 802.3ad have this problem).

sudo netplan apply does not work. I need to reboot my server for apply configuration

Netplan conf :

network:  version: 2  renderer: networkd  ethernets:    ens3f0np0:      dhcp4: false    eno5np0:      dhcp4: false  bonds:    bond0:      interfaces: [ens3f0np0,eno5np0]      addresses: [MyIP]      gateway4: MyGateway      nameservers:        addresses: [MyDNS]      parameters:        mode: 802.3ad        lacp-rate: fast        mii-monitor-interval: 100  

Conf LAG Aruba 6300M when it's works :

 Aggregated-interfaces       : 1/1/20 2/1/20   Aggregation-key             : 25   Aggregate mode              : active   Hash                        : l3-src-dst   LACP rate                   : fast   Speed                       : 20000 Mb/s   Mode                        : access  

Conf LAG Aruba 6300M When ubuntu was reboot :

State information : Disabled by LACP or LAG   Type                        : normal   Aggregated-interfaces       : 1/1/20 2/1/20   Aggregation-key             : 25   Aggregate mode              : active   Hash                        : l3-src-dst   LACP rate                   : fast   Speed                       : 0 Mb/s   Mode                        : access  

if I shut / no shut lag or make aggregate mode passive to active it's works.

can you help me please, i think i have a problem with my netplan configuration

Sudo netplan try :

bond0: reverting custom parameters for bridges and bonds is not supported    Please carefully review the configuration and use 'netplan apply' directly.  

SQL Developer PL/SQL script fails to display output over OpenVPN after running a certain amount of time

Posted: 01 Feb 2022 04:11 AM PST

The Problem:

When I try to run gather stats over OpenVPN on my Oracle 19c database, SQL Developer doesn't return the typical "PL/SQL procedure successfully completed" message if it runs for more than a certain amount of time.

Apparently, the connection hangs after a while, and I either need to disconnect from OpenVPN or kill SQL Developer in Windows Task Manager to close it.

My Oracle 19c database and OpenVPN server are on different cloud providers.

Running gather stats on this database typically takes about half an hour.

Running the gather stats command on SQL Developer

What I checked:

  1. Nothing unusual on the Iptables and OpenVPN logs on the OpenVPN Server or on the listener and alert logs on the Oracle 19c Server.

  2. net.ipv4.tcp_keepalive_time and net.netfilter.nf_conntrack_tcp_timeout_established are set to their default values of 7200 (2 hours) and 432000 (5 days) on both machines.

  3. If I connect to the database as system and run

select x.sid, x.serial#, x.username, x.status, x.osuser, x.machine, x.program, x.event, x.state, sql.sql_text
from v$sqlarea sql, v$session x
where x.sql_hash_value = sql.hash_value
and x.sql_address = sql.address
and x.username = 'myuser';

after about half an hour, I notice that the session for gather stats is inactive. So I assume that gather stats does indeed run and finish successfully, but just doesn't return the aforementioned output message.

Gather stats running on the database

Gather stats session inactive after about half an hour

What I tried:

  1. On a smaller database in the same instance, running gather stats over OpenVPN returns the aforementioned success message. This one takes around 10 minutes.

  2. Connecting directly (without OpenVPN) to the database by adding my IP address to the firewall of the cloud provider and running gather stats also returns the aforementioned success message.

Any ideas?

Bot detection by fail2ban

Posted: 01 Feb 2022 04:02 AM PST

I want to know if it is possible to use in fail2ban some rule / script that detects the bots, not just by maxretry in a given amount in seconds, but through identifying some patterns for every IP: for example, let's say that an IP accesses a page every from 10 to 15 seconds, but another IP accesses it every 30-45 seconds.

I have problems with users that use pyautogui scripts and I can not detect the IPs behind the bots because everyone has a different pattern.

Also, I use Sucuri, which has 0% protection in this usecase. I can not switch to another firewall service because this one has only 6 IPs (CloudFlare has over 20, for example) and I have only 10 firewall rules , also maximum IPs, to whitelist in my server provider (I protect myself by attacks through IP, not just by DNS).

Is another tool that can do that? Thanks in advance for help and suggestions!

Best kind regards!

getting permission denied errors with cronjobs and logs on rpi

Posted: 01 Feb 2022 03:53 AM PST

Hell everyone.

I am running a raspberry pi 3B+. I have a a cronjob that runs a script (which seems to work fine) but when I look at the syslog I see errors, which you can find below.

I can't really figure out what is wrong, and I wonder if you guys do know. my mail (cat /var/mail/pi) shows nothing.

I do run log2ram, if that makes any difference..

my crontab looks like this:

0 */4 * * * sh /home/pi/Projects/refresh-web-os.sh  

The script it runs looks like this:

#!/bin/sh    sessionToken=$( ssh -i <<CREDENTIALS>> -o StrictHostKeyChecking=no -p <<PORT>> <<SSH_ADDRESS> cat /var/luna/preferences/devmode_enabled )    if [ -z "${sessionToken}" ]; then    echo "sessionToken is empty"    sessionToken=$(cat /tmp/webos_devmode_token_tv.txt)  else    echo "saving session token in temporary file (/tmp/webos_devmode_token_tv.txt)"    echo ${sessionToken} > /tmp/webos_devmode_token_tv.txt  fi    if [ -z "${sessionToken}" ]; then    echo "Unable to get token" >&2    exit 1  fi    checkSession=$(curl --max-time 3 -s "<<CURL_CALL>>")    echo $checkSession  

and the syslog (grep cron /var/log/syslog -B 5 -A 5) looks like this:

Feb  1 04:00:01 raspberrypi CRON[23440]: (pi) CMD (sh /home/pi/Projects/refresh-web-os.sh)  Feb  1 04:00:01 raspberrypi CRON[23441]: (root) CMD (   PATH="$PATH:/usr/sbin:/usr/local/bin/" pihole updatechecker local)  Feb  1 04:00:07 raspberrypi cron[413]: 2022-02-01 04:00:07 1nEjOp-00066P-0e Cannot open main log file "/var/log/exim4/mainlog": Permission denied: euid=112 egid=119  Feb  1 04:00:07 raspberrypi cron[413]: 2022-02-01 04:00:07 1nEjOp-00066P-0e <= pi@raspberrypi U=pi P=local S=717  Feb  1 04:00:07 raspberrypi cron[413]: 2022-02-01 04:00:07 1nEjOp-00066P-0e Cannot open main log file "/var/log/exim4/mainlog": Permission denied: euid=112 egid=119  Feb  1 04:00:07 raspberrypi cron[413]: exim: could not open panic log - aborting: see message(s) above  Feb  1 04:00:07 raspberrypi exim[23461]: 2022-02-01 04:00:07 1nEjOp-00066P-0e <= pi@raspberrypi U=pi P=local S=717  Feb  1 04:00:07 raspberrypi exim[23461]: 2022-02-01 04:00:07 1nEjOp-00066P-0e Cannot open main log file "/var/log/exim4/mainlog": Permission denied: euid=112 egid=119  Feb  1 04:00:07 raspberrypi exim[23461]: exim: could not open panic log - aborting: see message(s) above  Feb  1 04:00:07 raspberrypi CRON[23439]: (pi) MAIL (mailed 141 bytes of output but got status 0x0001 from MTA#012)  

Limiting the outbound email count for AWS SES SMTP Credentials

Posted: 01 Feb 2022 03:50 AM PST

Is it possible to limit the maximum number of emails a SMTP credentials can be used to send in AWS Simple Email Service(SES).

I want to create SMTP Credentials that are only allowed to send, let's say <=10k emails every month.

Office 365 Admin - How to see what policy was triggered

Posted: 01 Feb 2022 05:53 AM PST

I am an admin for a 365 site. I received an email that was not sent to me nor CCed, it looks like I am in the BCC. so we are not sure how the email came to me. I am wondering if there is a policy somewhere that triggered this. Is there a way i can back-trace the email to see if an event was triggered or a policy was invoked for me to get a BCC of this email?

I tried Mail Trace, Mail Flow and Rules but there is nothing there .

Weird distribution of ping response [closed]

Posted: 01 Feb 2022 04:49 AM PST

I am pinging various servers with Python script (using library ping3), Windows 10, standard notebook. Some of the addresses (for example the attached pictures) looks really weird. There is not a single maximum in the histogram. Most of the tested addresses show this behavior (multiple high peaks, not a smooth distribution). Also there is different number of peaks and the peaks sit on a different values for different address.

Is this response pattern normal? Why is it caused? Or is it a systematical error of my experiment (software/hardware caused)?

Histogram

Ping in time

I run the experiment with totally different machine (Ubuntu, desktop pc, different location). I still get 2-3 peaks per remote adddress: enter image description here

Problems authenticating from Tacacs (pro bono) server against an LDAP server

Posted: 01 Feb 2022 04:15 AM PST

I am getting problems authenticating from Tacacs server against an LDAP server

tac_plus[82606]: x.x.x.x shell login for 'ldap_user' from x.x.x.x on tty2 failed [Invalid credentials (453)]  

I sanity checked against a different test server (LDAP server on a Linux machine) and this config worked ok and i managed to login.

Part of the config file below:

id = tac_plus {                  # LOGS          access log = ">/var/log/tac_plus/access/%Y%m%d.log"          accounting log = ">/var/log/tac_plus/acct/%Y%m%d.log"                  # CONNECTION TO AD          mavis module = external {                  #setenv LDAP_SERVER_TYPE = "microsoft"                  setenv LDAP_SERVER_TYPE = "generic"                  setenv LDAP_HOSTS = "ldaps://example.com:636"                  setenv LDAP_SCOPE = "sub"                  setenv LDAP_BASE = "dc=example,dc=com"                  setenv LDAP_FILTER = "(uid=%s)"                  setenv LDAP_USER = "cn=superuser,ou=superusers,o=org,dc=example,dc=com"                  setenv LDAP_PASSWD = "secret"                  setenv AD_GROUP_PREFIX = "test_"                  setenv REQUIRE_TACACS_GROUP_PREFIX = 0                  #setenv USE_TLS = 0                 # setenv FLAG_USE_MEMBEROF = 1                  exec = /usr/local/lib/mavis/mavis_tacplus_ldap.pl          }          login backend = mavis          user backend = mavis          #pap backend = mavis          host = world {                  address = x.x.x.x                  welcome banner = "[debug] TACACS connection works"                  #Crypt password generate by "openssl passwd -1 clear_text_password"                  #enable 15 = crypt $1345yujd6p0$jzhK5.                  #Tacacs passw                  key = "Secret"          }  

Additionally: I have tried this method and that does work but I would like to understand why the method that I have encountered issues with does not work. Any ideas?

How can I find who is preventing disks spin down

Posted: 01 Feb 2022 04:50 AM PST

The problem

  • After upgrading NAS system from Buster to Bullseye disks cannot spin down.

My NAS setup

  • 5x mechanical disk WD RED, no RAID, ext4 without journaling
  • Debian Bullseye, kernel 5.10
  • system is loading from sixth SSD disk (not to wake up mechanical ones)
  • hd-idle utility to set spin down after 30 mins of inactivity hd-idle -i 0 -a sda -i 1800 -a sdb -i 1800 -a sdc -i 1800 -a sdd -i 1800 -a sde -i 1800 -l /var/log/hd-idle.log
  • no hardware changes in NAS while upgrading to Bullseye, also no changes in config of hd-idle
  • NAS is in this hardware setup for 8+ years and also software setup, mainly disks were spinning down after 30 mins for years without any problems

What I have tried

  • If I use hd-idle -t sda, disk will immediately spin down, but after waking up (due to some regular disk activity), it never fall asleep again.
  • If disks are forced to spin down with hd-idle -t, they are not waking up without regular activity - so no repeating job is waking them.
  • I was suspicious about smartmontools, if there is some change in Bullseye which is waking them up. I was playing a little with /etc/smartd.conf and -n standby, but no success, so I disabled smartd completely to find if smartmontools are the hidden bad-man, but no luck, looks they aren't.
  • lsof | grep /media gives nothing (media is mountpoint for all those disks)
  • I was playing a little with iotop also with nmon. But nothing interesting found, only regular activity with SSD (system) disk.
  • I cannot run iosnoop for some reason. The packge perf-tools-unstable is installed properly, but calling iosnoop ends with bash: iosnoop: command not found even as a root. I did not find the cause of this.

It is obvious you cannot debug my system, but I will appreciate for any hints how to find the problem, who is preventing disks to spin down :-)

Codedeploy agent "The security token included in the request is invalid"

Posted: 01 Feb 2022 04:02 AM PST

Today our CodeDeploy setup started failing for one of the instances with the following error:

The overall deployment failed because too many individual instances failed deployment, too few healthy instances are available for deployment, or some instances in your deployment group are experiencing problems. (Error code: HEALTH_CONSTRAINTS)

Upon checking /var/log/aws/codedeploy-agent/codedeploy-agent.log on both servers, one of them has the following error:

2017-07-13 15:45:57 INFO [codedeploy-agent(10192)]: [Aws::CodeDeployCommand::Client 400 0.013838 0 retries] poll_host_command(host_identifier:"arn:aws:ec2:us-west-2:088736878764:instance/xxxx") Aws::CodeDeployCommand::Errors::UnrecognizedClientException The security token included in the request is invalid.

2017-07-13 15:45:57 ERROR [codedeploy-agent(10192)]: InstanceAgent::Plugins::CodeDeployPlugin::CommandPoller: Cannot reach InstanceService: Aws::CodeDeployCommand::Errors::UnrecognizedClientException - The security token included in the request is invalid.

How would one go about fixing this? I'm not sure what to start with.
The only change on this server was to set :max_revisions: 2 in codedeployagent.yml, restart codedeploy-agent and then delete (due to disk space constraints) an old revisions folder in /opt/codedeploy-agent/deployment-root/ which was dated to 2016.

I remember that manually deleting revisions (the ones starting with d-xxx) from an active revisions folder (the ones with the long hash id name) causes a big problem to CodeDeploy and the only solution is to recreate the deployment application. But this cannot be the case here, can it?

sss_cache keeps looking for a LOCAL domain, not purging LDAP records

Posted: 01 Feb 2022 05:00 AM PST

I've added a user to a group in LDAP. The user shows up in ldapsearch. However, the user does not show up when I list group members on my RHEL instance using getent group my_group.

Am I correct in assuming that this is because SSSD caches group membership?

When I try to purge the SSSD cache for the group, it doesn't do anything:

# sss_cache -d LDAP -g my_group  (Mon Dec 14 10:40:41:816191 2015) [sss_cache] [confdb_get_domain_internal] (0x0010): Unknown domain [LOCAL]  (Mon Dec 14 10:40:41:816364 2015) [sss_cache] [confdb_get_domains] (0x0010): Error (2 [No such file or directory]) retrieving domain [LOCAL], skipping!  # echo $?  0  

Specifically, the user still doesn't show up in the getent group my_group listing.

Why is it looking for a "LOCAL" domain when I specified the "LDAP" domain in the command?

Here's the SSSD configuration

# cat /etc/sssd/sssd.conf  [sssd]  config_file_version = 2  reconnection_retries = 3  sbus_timeout = 30  services = nss, pam  domains = LOCAL,LDAP  debug_level = 5    [nss]  filter_groups = root  filter_users = root  reconnection_retries = 3  entry_cache_timeout = 300  entry_cache_nowait_percentage = 75    [pam]  reconnection_retries = 3  offline_credentials_expiration = 2  offline_failed_login_attempts = 3  offline_failed_login_delay = 5    [domain/LDAP]  cache_credentials = true    id_provider = ldap  auth_provider = ldap    ldap_uri = ldaps://my_hostname.my_domain.com  ldap_search_base = dc=my_domain,dc=com  ldap_id_use_start_tls = true  ldap_tls_reqcert = never  ldap_tls_cacert = /etc/pki/tls/certs/ca-bundle.crt    debug_level = 5  
  1. Is this a bug in sss_cache?

  2. Should I just rm -f /var/lib/sss/db/cache_LDAP.ldb instead?

  3. At that point, should I just set cache_credentials = false in sssd.conf?

Finding and patching OpenSSL Apache on Windows

Posted: 01 Feb 2022 05:00 AM PST

I have seen that they have released updates for OpenSSL. I am running a Apache on Windows. If I run "OpenSSL version" it reports "OpenSSL 1.0.1i 6 Aug 2014".

This was a complete solution install, so I'm not clear if OpenSSL is running or not. I cannot find it in processes. I do see httpd.exe running mod_ssl.so. I followed the vendor's howto to create and install a certificate with OpenSSL, so I know OpenSSL exists on the server, I'm just not sure if it is being used. SSL web connections to it are working.

How can I tell if OpenSSL is running, what version is live, and how do I patch a Windows implementation?

Browser window that only shows the webpage content

Posted: 01 Feb 2022 03:47 AM PST

Would it be possible on a Linux box to show a browser window with only the content window, meaning no border around it, neither menu bars etc?

We need this for a big concert screen where a client program runs in the background. In front of that window we need to show a webpage, and it must look like the two programs are as one.

User per virtual host in Nginx

Posted: 01 Feb 2022 05:54 AM PST

Is it possible in nginx configure different user per virtual host?

Something like

 server {       user myprojectuser myprojectgroup;       ...   }  

run several bash scripts with expect code and leave them running

Posted: 01 Feb 2022 04:02 AM PST

I have a bunch of several bash scripts that will perform some actions that require user input, therefore I'm using expect with it.

However, I need one to keep running. But if I use expect, the expect command will wait while the script is running and my main script will not continue.

IE: script1 spawns a script as root:

#!/bin/bash  expect << EOF  spawn su root -c "/bin/bash script2.sh"  expect "Password:"  send "test\n"  set timeout -1  expect eof;  EOF  

script2.sh will spawn a screen:

#!/bin/bash  screen -dm nastyscript.sh  

nastyscript.sh will spawn a binary that must keep running:

#!/bin/bash  expect << EOF  spawn mybinary  expect "*Enter password for my binary"  send "test\r"  expect "*I am running"  set timeout -1  expect -re . { exp_continue } eof { exit }  expect eof;  EOF  

But, since one script is waiting for expect to finish, my main script won't continue.

Any way to do that?

No comments:

Post a Comment