Latest Server related questions

Score: 0
codecorrect avatar
Deny unencrypted s3 buckets via SCP
it flag

Folks just wondering if there’s ability to attach a SCP to OU accounts denying S3 buckets from being created if default encryption is not opted upfront.

From cloud trail it’s apparent that PutBucketEncryption and CreateBucket are two seperate Api calls and the former Api is responsible for applying the encryption settings post bucket creation.

Also CreateBucket doesn’t take in encryption via h ...

Score: 0
lampstackxyz avatar
Wordpress asking for FTP when deleting plugins
pk flag

Wordpress asks me for FTP credentials when I try to delete or install plugins. I know it has to do with permissions but I have been unable to figure it out. I have a linux system user XYZ and apache2 run as www-data. This works:

sudo chown www-data:www-data -R /path/to/wordpress
sudo chmod 700 -R /path/to/wordpress

But it's unsafe. My initially planned configuration was:

sudo chown XYZ:www-data - ...
Score: 0
GID avatar
JBoss AS v6.1: managing applications
in flag
GID

On our installation we typically restart the entire JBoss AS every time we need to restart one of the WARs that are deployed (in expanded form) under ..../deploy folder.

I thought I'd be able to individually start/stop/update WARs using the admin console and the CLI, and without stopping the entire AS, but just today I discovered that (a) our WARs are seen as "embedded" and cannot be managed via ...

Score: 1
AmateurAardvark avatar
UFW OpenVPN issue on Ubuntu 20.04
br flag

I've got a curious OpenVPN / UFW issue on Ubuntu 20.04.

I have a rule set to allow outgoing traffic over tun0: ufw insert 1 allow out on tun0 from any to any. The UFW defaults are set to deny, both in & out: ufw default deny outgoing & ufw default deny incoming.

I'm only able to route traffic through tun0 with UFW running, if I go through the following strange dance each and every time I want ...

Score: 0
Divyessh avatar
Apache server not responding. It just loads and then gives a timeout
ng flag

I have an apache2 server and have been trying to make it accessible to all but am unable to do so. Here are the outputs:

$ netstat -plant | grep apache
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN    15647/apache2

earlier it was :::80, but I changed it after seeing another post on serverfualt.com

$ ufw status
Status: inactive
$ service apache2 status
● apache2.service - ...
Score: 2
Nebek avatar
How to authenticate local Linux user with Nginx PAM module?
in flag

I would like to be able to have a local Linux user authenticate with their credentials when accessing a site. I am using the ngx_http_auth_pam_module. In the nginx.conf file I have the following configuration for the location directive:

location / {
        proxy_pass http://somewebsite:5000;
        root   html;
        index  index.html index.htm;
        auth_pam "Secure area";
        auth_pam_ ...
Score: 1
Ismet SK avatar
Apache 2 Reverse Proxy, Internal application hardcoded with http
gb flag

I have set up Apache reverse proxy with https enabled, Apache (https) -> Internal Applications (http)

However, some resources such as javascript are still in http form, possibly hard coded using http , so they will be blocked by the browser (strict-origin-when-cross-origin).

How to rewrite or redirect response from internal app to https

http://subdomain.myserver.com/js/somefile.js To https://sub ...

Score: 0
White11 avatar
How Iphone choose IP address when it gets multiple IP address in dns response?
in flag

I am trying to understand how Iphone decides which IP address to use from 2 IP addresses returned in dns response in this specific scenario below.

Scenario is like this:

1- Iphone sends dns query for an Arecord like "bsf.mncxx.mccxx.pub.3gppnetwork.org" and gets 2 IP addresses in the response.

2- Iphone sends GET requests to one of the IP address to authenticate itself (not important which BSF IP selec ...

Score: 0
Postfix Not resolving outlook domain names (length??)
jp flag

Hello Server Geniuses. Im running a full stack email server, dockerized. Having trouble sending email to outlook email addresses. (and only outlook email addresses) I have a theory.

The error I receive is strictly a DNS resolution error

    for name=myradar-com.mail.protection.outlook.com type=A: Host not found,
    try again

On the server, If I try to test resolve the address, using the command ...

Score: 0
AWS S3 static website: unable to access https://mydomain.tld but http://mydomain.tld redirects to https correctly
ar flag

I've set up a static website on AWS S3, using a custom domain hosted at Namecheap, and Cloudfront serving over https. I am able to access my site at http://mydomain.tld, which redirects (using a DNS redirect rule on Namecheap) to https://www.mydomain.tld, or by browsing to the https://www site directly.

However, if I try to force https in the browser to the bare domain (https://mydomain.tld), the site  ...

Score: 1
agvald avatar
Server maintenance landing page - can it be on HTTP?
pk flag

We are running two accounting systems on ruby on rails and sometimes we have to do maintenance tasks which cause downtimes, or just that they are simpler to do with downtimes. i.a. This week we where migrating our whole suite of lxc containers to a set of SSDs, from HDDs. accounting systems are accessed over HTTPS at fakturabank.no and snotr.no

We are running a LXD server and have one container s ...

Score: 1
How to ensure that the changes in domain XML spec in libvirt takes effect?
kr flag

I followed this host port forward with qemu through libvirt in user-mode networking answer to accomplish a certain task but it was only after a reboot that the ports were actually accessible. I tried restarting the domain but it did not work. What should I do to ensure that the changes take effect without restarting the host?

Score: 0
How can i resolve “No such object available on this agent at this OID” when i use snmp?
cn flag

I create my own mib to use in a snmp query, but I'm getting this error when I do "snmpwalk -v 2c -c mycommunity "MY_IP" .1.3.6.1.4.1.8072.2.1.1":

NET-SNMP-EXAMPLES-MIB::netSnmpExampleInteger = No such object available on this agent at this OID.

Can you help me?

Score: 1
suchislife avatar
Ingnoring any and all url parameters to harden security. How?
us flag

Anyone who puts an NGINX server online and looks at its access.log a week latter will find lots of URL exploits being attempted. Every day, any time.

So what if, I was to reject any and all url parameters. What if every query string was masked with an NGINX rewrite which would fail to match anything not defined as a rewrite naturally returning a 404 Not Found?

Or a series of rewrites in order placed  ...

Score: 2
Routes in route6-eth0 don't apply
vn flag
Bas

I made a file /etc/sysconfig/network-scripts/route6-eth0 with the following contents:

default dev eth0 src ****:****::**** metric 50 pref medium

However, it doesn't show up when I execute ip -6 route:

# ip -6 route
::1 dev lo proto kernel metric 256 pref medium
****:****:****:****::/64 dev eth0 proto ra metric 100 pref medium
****:****::**** dev eth0 proto kernel metric 100 pref medium
fe80::/64  ...

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.