Recent Questions - Server Fault |
- Repository of regular expressions for logs
- Managing WSUS with Powershell. How to remove an automatic approval rule?
- How is my DNSSEC enabled domain still serving a tiny number of NXDOMAIN response codes?
- Outlook not expanding M365 Groups
- Linux monthly network usage for virtual interfaces
- Can php-fpm and swoole coexist on the same virtual host /server block
- Best way to do 301 redirects
- If I have multiple versions of Postgres installed, how do I use a version specific tool?
- Are on-prem Windows Virtual Desktop servers still a thing?
- Is a valid SSL certificate important when accessing a localhost URL via SSH tunnel?
- Finding the ESX/ESXi host in vSphere cluster on which a virtual machine is running programmatically via REST API
- Where sieve file must be located if dovecot runs with virtual_mailbox_maps
- Create proxy server from home modem
- Files can't be uploaded on Google cloud after deleting user folder
- If 'dnssec-enable' is obsolete and must be removed, what is the alternative when creating a DNS server on BIND 9?
- qemu commandline can't see /dev/net/tun
- Using Office 365 now, can we pilot intune MDM on just 1-2 users or devices?
- nginx reverse proxy - proxy_pass leads to 503 service unavailable
- GCP - Shared VPC vs VPC Peering among projects - main differences?
- SFTP users can't remove files
- Slow DNS resolution inside docker container
- GCP Equivalent for AWS Landing zone solution
- Azure RDS HTML5 Web Client Unable to Access Gateway
- Uninstall Symantec Endpoint Protection 12.1 (with uninstall password) using PowerShell?
- squid proxy on ubuntu refuses connections
- SMTP network ACL on AWS
- Sendmail and Gmail
- Unable to bind OSX 10.9 to Active Directory 2008
- kvm guest can not connect to outside of host, vice versa
- Mount network drive as physical drive
| Repository of regular expressions for logs Posted: 14 Jul 2022 11:22 AM PDT Does a public repository of regular expressions exist for parsing out the dynamic fields of common logs on Linux machines? SSH logins, kernel faults, etc. |
| Managing WSUS with Powershell. How to remove an automatic approval rule? Posted: 14 Jul 2022 10:30 AM PDT I'm writing Powershell scripts to manage WSUS. One script can create, read, and update automatic approval rules. But it can't delete rules. WSUS allows admins to make rules with duplicate names. If there are multiple rules with the same name, the script needs to remove the duplicates before proceeding. I can't find a method to do that. I'm pulling a lot of information from Microsoft's documentation on the WSUS Class Library (https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ms744624(v=vs.85)) The script I have needs to set an automatic update approval rule to the right settings. |
| How is my DNSSEC enabled domain still serving a tiny number of NXDOMAIN response codes? Posted: 14 Jul 2022 11:03 AM PDT I enabled DNSSEC on my primary domain about a week ago. It's not a major website or anything -- just my personal domain name that I use for email and the like (TLD: Over the last 24 hours, the domain has received 15,605 queries. In response, it has dished out 15,601 How are NXDOMAIN responses still possible? What could be generating them? Personally I cannot trigger one no matter what query I attempt, and my understanding is that DNSSEC should, at least in theory, eliminate this response code entirely. Am I incorrect? |
| Outlook not expanding M365 Groups Posted: 14 Jul 2022 08:48 AM PDT Good morning Folks. I am having some issues and I am going to try and explain this to the best of my ability. I am reorganizing our Azure environment and part of that is converting mail enabled security groups to dynamic M365 groups. There is about 1600 groups. My PowerShell script to do this has been created and is working as expected. I have not made these changes to all 1600 groups my D-DAY is the 22nd. This brings me to my issue. When I created my test groups, I noticed that when I pull up the new group in the "To" field in outlook (pulled from the GAL, not using the autocomplete) I noticed that when I hover over the new group email in the "To" field I get a pop up saying there are no members in that group. I checked in Azure and o365 and I have all my 10 users in there, pulled in using my dynamic rule syntax. I do not know why it is showing no members. Being able to see who is in those groups will be well used by our users and something like this will generate a whole bunch of support calls\tickets. When I try to expand the group, I get an error saying "Cannot perform the requested operation. The command selected in not valid for this recipient. The operation failed" If anyone has any ideas I would love to hear them. Thank you Johan |
| Linux monthly network usage for virtual interfaces Posted: 14 Jul 2022 08:43 AM PDT I'm looking for something to keep track of network usage (rx and tx) for all virtual interfaces, not just the main interface. I tried vnstat, but it only recognizes the main interface. Any help is appreciated! |
| Can php-fpm and swoole coexist on the same virtual host /server block Posted: 14 Jul 2022 08:04 AM PDT I have been searching for days, and apart from this unanswered question os Stack Overflow no info whatsoever has appeared, a big zero. So I wonder if the wise people around here might know of a working nginx or apache configuration where swoole and php-fpm can coexist |
| Posted: 14 Jul 2022 08:04 AM PDT Which is the best way to do 301 redirects (for whole domains and also for specific pages/directories)? Using Apache virtual blocks, .htaccess or other solutions? "Best" for me probably means the fastest and most SEO-friendly option, but maybe there are other important factors (security, easier to configure and maintain...). Right now I'm using Apache, but for example for https apparently always checks the certificate of the old domain before redirecting to the new one, so maybe there are faster solutions? (I don't really know much about this subject, just asking) Thanks! |
| If I have multiple versions of Postgres installed, how do I use a version specific tool? Posted: 14 Jul 2022 07:58 AM PDT For development reasons I have both Postgres 12 and 14 installed on my local machine. However, often I also need to use the
If I simply run If I want to run version 14 I have to manually type: Is there any way I can quickly switch between them? Something like: |
| Are on-prem Windows Virtual Desktop servers still a thing? Posted: 14 Jul 2022 07:40 AM PDT My supervisor wants me to look into a virtual Windows 10/11 desktop solution leveraging our on-prem VMware cluster. Luckily, our cluster hardware has plenty of CPU/RAM/storage to accomplish the scope of the solution. The issue I'm running into is finding tutorials on how to set this up using Windows Server 2022-era products. All the solutions I can find seem to require an Azure tenant. I would have no issues recommending an Azure-integrated solution, except for the kicker: My company's Azure tenant is managed by a non-US corporation, to which we have no administrative access and getting an Azure VDI solution in place is so convoluted as to be effectively impossible. I know Windows Virtual Desktop is old tech and I totally understand why Microsoft is pushing Azure cloud services instead of on-prem solutions, but my situation dictates that I come up with an on-prem solution that will have the potential to last the next 3-5 years without Microsoft killing it with EoL support and security update cancellations. My question is two-fold:
|
| Is a valid SSL certificate important when accessing a localhost URL via SSH tunnel? Posted: 14 Jul 2022 08:24 AM PDT I've got a PHPMyAdmin installation set up, but accessible only via localhost. This means that to access the URL, I need to set up an SSH tunnel before I access the URL. When I do so, however, I get a warning saying that the SSL connection is unsafe because the certificate is not valid (my domain has a valid certificate). Is it safe to bypass this, considering I have many users who will be accessing the URL via SSH tunnel? If it is not, what do I have to do to rectify this issue? |
| Posted: 14 Jul 2022 07:14 AM PDT For any powered on VM in a given folder I want to retrieve its IP address and the ESXi host it's running on. I'm haveing problems finding an REST API endpoint to retrieve the ESXi host a VM is running. Albeit I'm able to retrieve the IP addresses of the VMs like so: 1. Get Session IDOutput 2. Get all VMs from a folderOutput 3. Get details (IP address) of VMOutput Does one know a way to retrieve the ESXi host for a given VM? I can see the ESXi host easily from the vSphere web UI. But don't find a suitable API endpoint in the vCenter api documentation. |
| Where sieve file must be located if dovecot runs with virtual_mailbox_maps Posted: 14 Jul 2022 07:33 AM PDT I have I want to do sieve for specific users. where I should put the sieve file, since there are no user directories? In dovecot configuration I have this: However, i do not want to use |
| Create proxy server from home modem Posted: 14 Jul 2022 07:15 AM PDT I live in New Delhi, India. I have virtual machines at Hetzner cloud (Finland, Helsinki). Each VM has a static IP address from Finland, Helsinki. I run some applications on the VM. How do I set the ip address of my internet connection at my home location, ac as a proxy ip of my VM ?So that:
|
| Files can't be uploaded on Google cloud after deleting user folder Posted: 14 Jul 2022 11:15 AM PDT I'm using CentOS 7 on Google Cloud. I deleted accidentally the folder with my username, /home/username, that folder was used for uploading files via Google SSH. I've created a folder with the same name. But now I can't upload any files. Is there something else I have to configure? |
| Posted: 14 Jul 2022 07:10 AM PDT I'm trying to set up a Forwarding DNS server, using this tutorial https://www.digitalocean.com/community/tutorials/how-to-configure-bind-as-a-caching-or-forwarding-dns-server-on-ubuntu-16-04. I've followed all the steps and inserted the line However, when running: It's telling me that
Therefore, what's the alternative? I've tried to search it on Goolge and make a quick look on Bind 9 doc but doesn't say anything about it. I'd really appreciate your help. |
| qemu commandline can't see /dev/net/tun Posted: 14 Jul 2022 08:40 AM PDT i am newbie with qemu and libvirt. I hit the issue with virsh and qemu, especially with tun interface setup. Once i run It works without problem, it also creates The machine got created but once i try to run it i get folllowing error: I think, there is something wrong with: I ran |
| Using Office 365 now, can we pilot intune MDM on just 1-2 users or devices? Posted: 14 Jul 2022 10:51 AM PDT We have Microsoft hosting for exchange, office 365, defender for endpoint and are using the Office 365 MDM for device management. We only have Azure AD basic not premium. I've started an intune trial, created a Windows 10 VM as a device, added AD-based user, added the device and user to an intune group with policy and installed the company store app from the Windows store. In that app, settings > sync runs without errors. The device shows up in the intune device list and is compliant, but managed apps never sync. They are stuck at "Waiting for install status" My guess is this is because our MDM is Office 365, but I don't see any way in the admin panel or in any docs I've found to change that for just this test user, or the test device, or the intune group. Is there some way to force intune to be the MDM for just this user, device, group? Additional information: On the device, Settings > Accounts > Access Work or School shows the device as "Connected to (company) MDM" (which will be the office 365 MDM?) and "Connected to (company)'s Azure AD" In intune, DESKTOP-xxxxxx | Enrollment table shows "no results" for the device Is that significant? Joining AD and installing the company portal are both supposed to enroll the user or device if I'm reading the docs right. |
| nginx reverse proxy - proxy_pass leads to 503 service unavailable Posted: 14 Jul 2022 08:37 AM PDT i have to following configuration: Whenever i hit the the proxy, let's say i go to http://localhost:8080/home , i get 503 service unavailable (not from the nginx service, from the app i'm trying to go to https://somehost.abc.xyz/home). But if i just go to https://somehost.abc.xyz/home or do a redirect Any ideas what could possibly cause this and how to solve it? |
| GCP - Shared VPC vs VPC Peering among projects - main differences? Posted: 14 Jul 2022 08:52 AM PDT I'm testing various GCP features and I've faced with the question in the title. After a little bit of experimentation I think the following should hold:
Let say we have N different projects with N different administrators, if all parts agree on having some sort of network connection among instances, is there any other pro/cons in choosing peering over shared?! Edit
Edit 2
Edit 3While not a strictly network architecture, Google now offers also Private service access: a way to proxy external services (including those in other projects/VPCs) via a proxy in your VPC Thank you |
| Posted: 14 Jul 2022 10:05 AM PDT I've set up a simple SFTP server on Ubuntu 18.04. I have 10 users that should only have access to the files in their home directories and they should not be able to get out of their home directory. We have an API that is writing files to their home directories. So far, so good. The users can login, retrieve the files, and are constrained to their own directories. They cannot, however, remove the files. Any 'rm' command returns a permissions error - Couldn't delete file: Permission denied. The user/group for the folder is root:www-data. If I change it to user:www-data SFTP breaks - they can't login. I created a group 'sftp' but again if I add the user to the sftp group, change the home directory to user:sftp they can't login. Here's what the home folder looks like: My sftp config from /etc/ssh/sshdconfig is: My users are set up like this: My sftp group is: |
| Slow DNS resolution inside docker container Posted: 14 Jul 2022 11:04 AM PDT I've stuck with a problem of a very slow DNS resolution inside docker container. Simple GET to a 'google.com' takes about 4s to finish while the same request on host takes 0.052 ms. Also request works perfectly if I send it to an IP address that's why I suggested DNS problem. I've searched for an answer most of them were about setting dns servers in a Host: Container: daemon.json: |
| GCP Equivalent for AWS Landing zone solution Posted: 14 Jul 2022 07:13 AM PDT AWS provides a solution called Landing Zone to jumpstart cloud adoption for an enterprise. This solution is based on AWS best practices. It provides a starting point by auto creating multiple accounts and configures shared services such as logging, monitoring etc. Is there an equivalent solution for GCP ? |
| Azure RDS HTML5 Web Client Unable to Access Gateway Posted: 14 Jul 2022 10:05 AM PDT We have a RDS (Remote Desktop Services) deployment, and recently went through the process of installing the HTML5 web client as per the directions at: Our deployment is hosted on domain A, which has an active directory instance. There is also domain B with its own active directory instance, there is a two way trust between the two. The problem we are having is that the traditional RD Web Access works fine for all users, but when users from domain B log on to the HTML 5 web client and try to open an app they get a message "We couldn't connect to the gateway because of an error". At the same time the browser console shows the following error:
During troubleshooting we've tried:
Any ideas on other areas we can look at? |
| Uninstall Symantec Endpoint Protection 12.1 (with uninstall password) using PowerShell? Posted: 14 Jul 2022 07:07 AM PDT We just acquired 400 or so computers during a buyout and they have this installed. So I tried pushing out as per https://support.symantec.com/en_US/article.TECH102470.html which unsurprisingly doesn't work. I was getting ReturnValue 1602 and not ReturnValue 0. Tried uninstalling it manually on a client using Add/Remove Programs and it needs a password which I've now managed to get from the old company. Any idea how we can use PowerShell to uninstall this with a password? It's SEP 12.1. |
| squid proxy on ubuntu refuses connections Posted: 14 Jul 2022 07:07 AM PDT I have just installed squid on my Ubuntu server. However when I try to connect, I receive connection refused messages from my local computer (In the firewalls I have added permits for my local IP) Below you can find the squid configuration and the cachlog. Any support will be appreciated. /etc/squid/squid.conf /var/log/squid/cache.log |
| Posted: 14 Jul 2022 11:04 AM PDT I have a very restricted ACL for my VPC. We have a public subnet and a private subnet, each subnet has its own individual ACL. What I don't understand is why the following ACL works for sending email over port 465 via Amazon SES. public:
private:
I get both outbound, but the inbound for public doesn't make any sense. Where in the SMTP RFC say the smtp server (SES, a relay) will connect with the client back on port 465? I would expect client pick a high port as shown in the following netstat: urd is 465 from what I understand. So my instance in the private subnet routes the request to the NAT instance, and the NAT (in public subnet) sends the packets to the remote server. So why is 465 needed inbound anyway? |
| Posted: 14 Jul 2022 08:36 AM PDT I'm trying to send email with sendmail. I followed this how-to: http://linuxconfig.org/configuring-gmail-as-sendmail-email-relay I tried to send the email over console: The output of command is: 221 2.0.0 server01 closing connection But the e-mail never arrives. Can you guys help me? Logs: Thanks in advance.. |
| Unable to bind OSX 10.9 to Active Directory 2008 Posted: 14 Jul 2022 09:00 AM PDT I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and have verified consistency of Active Directory service records (using dig -t SRV _service._tcp.fqdn.example.com to check _ldap, _kerberos, _kpasswd or _gc) but I cannot bind to the domain. I am attempting to join a small network with only one DC. I receive the message: "Authentication Sever could not be contacted. (5200)" This is the case whatever method I attempt to use (Join from the Users and Groups pref pane, Bind from the Open Directory utility, using dsconfigad from terminal). I don't think it is a problem with system time as the time on the client and DC are the same. Any other suggestions as to the problem or direction as to what to look out for in the log files? |
| kvm guest can not connect to outside of host, vice versa Posted: 14 Jul 2022 09:00 AM PDT I have a vmware vm running ubuntu 12.04 server(name=vmhost), with network bridged and full access to the internet. This vmhost is using the kvm hypervisor and is running a vm(centOS 6.4),network bridged as well. The vmhost can access internet and can also access its vm, and the vm can access the vmhost. The vm cannot access the internet, nor can I ping/ssh into it from another pc on my subnet. I have a bridge for the vmhost/its vm and have checked the iptables/routes but haven't found anything. Also I have ip_forwarding. Running tcpdump I see that vmhost can see the packages but does nothing with them. I have also tried disabling the ufw but didn't help. Infor for VHMOST route: Kernel IP routing table I will post tcpdump results shortly. It is also worth mentioning that I am running opennebula with vmhost as my vm host, but I don't think this is the problem. |
| Mount network drive as physical drive Posted: 14 Jul 2022 08:43 AM PDT Is there a way to mount a network location so that it appears as a local physical disk? e.g. |
| You are subscribed to email updates from Recent Questions - Server Fault. To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
| Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | |
No comments:
Post a Comment