Latest Server related questions

Score: 0
addMitt avatar
Is it possible to get a cloud server connected via IPsec tunnel to one gateway, that then passes it to another via LAN?
ly flag

Odd situation but I'm trying to get something that works with certain products. Here are the components in this scenario:

  • Virtual Machine in cloud, connected to a SonicWall gateway ("Cloud Gateway")
  • Local gateway at customer office with full gateway capabilities ("Local Gateway")
  • Odd gateway at customer office ("Odd Gateway") that uses technology similar to ZeroTier to connect any devices on its single ...
Score: 0
suprovsky avatar
Can I use one FQDN for all DCs for server authentication and one FQDN for NTP synchronisation?
hu flag

I'm struggling in regards of a proper practice for server setup for LDAP/AD authentication and NTP. I was thinking if asking two separate questions will be better but I think being a common problem here for two types of services would be a good reason to ask.

So, I have three domain controllers:

  • dc1.test.internal (on 192.168.0.2/24)
  • dc2.test.internal (on 192.168.0.3/24)
  • dc3.test.internal (on 192.168.0.4/ ...
Score: 2
Why are tmp files in /var/tmp/systemd-private-* excluded from automatic deletion?
in flag
DMJ

I'm running a CGI application on an Apache instance, and lately I've been noticing errors like the following, which appear to be causing some issues:

ERR012: Unable to create temporary file "/var/tmp/023711.000001.tmp": File exists

(This is the application in question, in case it's relevant: HTMLDOC)

Upon investigating the issue, I found that /var/tmp/systemd-private-*-httpd.service-*/ is filled with ten ...

Score: 0
Thomas Braun avatar
Simulating port/ip translation using IPTables
cn flag

Case 1: predictable offset port translation

If I want to simulate a NAT that maps the internal IP to a constant external address and maps the port to (port+offset), how would I do this using iptables?

e.g., :

First mapping: internal: "0.0.0.0:2000" external: "external:3000"

Second mapping: internal: "0.0.0.0:2001" external: "external:3001"

Here, the offset is 1000.

Case 2: predictable non-offset based p ...

Score: 1
Rag Zan avatar
SSH tunnel throws an error: bind [ip]:801: Cannot assign requested address channel_setup_fwd_listener_tcpip: cannot listen to port: 801
do flag

If I forward the port from the server to my localhost (I used my web server on apache on my other virtual machine as the server for forwarding), then everything turns out without problems.

ssh -L 801:192.168.0.115:80 [email protected]

But when trying to grant access to other network members, an error occurs

ssh -L 192.168.0.115:801:192.168.0.115:80 [email protected]

bind [192.168.0.115]:80 ...
Score: 0
y47999 avatar
deleted files doesn't free up space on nfs volume
si flag

I would like to hear your suggestion on why space is not released after files deletion. Jira application uses nfs volume as shared jira home. 12 gb indexes snapshot is created per hour (oldest one is deleted and newest one is created) and the storage usage only increases. I have checked process that holds deleted files (lsof +L1), open processes, nothing is found related to the issue. du -sh resul ...

Score: 1
Jason Michael avatar
new VM's won't complete after I moved /var/lib/libvirt/images to a larger disc
ug flag

I have been building VM's on my fedora 37 server for a while, when I suddenly started running out of disc space. So, I looked in the filesystem and saw that the new VM's had their discs built at /var/lib/libvirt/images, so I made /var/lib/libvirt/images a symlink to a new partition which I had created, which has a lot more space. Now, however, when I virt-install a new VM, it gets stuck in the console ...

Score: 0
Jason avatar
Backing up vault configuration changed in UI
by flag

I have a config.hcl file that I used to configure my vault instance. In the UI, I enabled Vault Usage Metrics, which I can see now enabled at sys/internal/counters/config but I don't see anything related to that in the config.hcl file, so I suppose it's not something that is written back to the configuration file?

If that's the case, and since I'm using the raft backend, if I create a snapshot, is that  ...

Score: 0
Arjan Meijer avatar
Not able to start mysql after upgrade from 5,7 to 8 (ubuntu upgrade)
ug flag

After upgrading ubuntu to 22.04 from 18.04 (was planning on upgrading to 20.04 but somehow I ended up with 22.04) I'm not able to start mysql server. The error is as follows:

[ERROR] [MY-000077] [Server] /usr/sbin/mysqld: Error while setting value 'ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION' to 'sql_mode'

Ive tried adding this to /etc/mysql/.my.cnf to set the sql_mode,  ...

Score: 0
Eric W. avatar
Apple ID and Password not Working for MAC OS enrollment to Intune
cn flag

I am trying to enroll MAC OS devices to Intune. I have everything set up, the Macbook shows up in my enrollment program token, and I am able to start the process to install the enrollment profile, but then it asks for credentials from Apple School Manager. I am using the same credentials as used for everything else, and I even tried to use other admin credentials but none works. I put in the credentials ...

Score: 0
Divya avatar
Does OpenSCAP have a feature to add comments on XCCDF scan findings?
gf flag

I am new to OpenSCAP and I was wondering if OpenSCAP has a feature to add comments one could insert to XCCDF scan findings that could be updated and be viewed in reports? Is it also possible to add the comments from the command line interface?

Thanks in advance!

Score: 0
Apache Tomcat Accept HTTP and HTTPS on same port and always redirect to HTTPS
th flag

Hi I have the following connector in my apache tomcat server in the file server.xml:

 <Connector port="8443" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443"
               secure="true"
               SSLEnabled="true"
               scheme="https"
               keystoreFile="/opt/tomcat/resources/keystore.jks"
               keystorePass="secret"
       ...
Score: 0
Tim avatar
What is overriding shared objects' dynamic library search paths?
br flag
Tim

Building PHP from source on macOS (Ventura) I've installed ICU in a non-standard location and built the intl extension as a shared library.

I can run this by setting my non-standard location with an environment variable DYLD_FALLBACK_LIBRARY_PATH=/usr/local/php80/lib (Same technique as per the documented trick using LD_LIBRARY_PATH). However, I don't want to use environment variables. I won't muddy the ...

Score: 0
Dr. Alexander avatar
Nginx log record value in case of empty log_format variable
cn flag

While trying to catch some edge cases i've noticed the difference in recording empty values. Here is my example: Nginx Log format part: RCODE: $status | UPS: [$server_addr:$server_port|$server_name|$proxy_host|$upstream_addr|$upstream_status|$upstream_header_time]

produces the record (pay attention to $server_name - it's underscore '_' and not hyphen '-'):

RCODE: 404 | UPS: [10.100.58.2:443|_|-|-|-|-]

Score: 0
thekendog avatar
Limit CPU Usage per PHP Pool
sz flag

I'm running a typical LEMP stack where I have multiple PHP-FPM pools, one for each site that's on a Rocky Linux 8 VPS. Occasionally, some rogue process on one of the sites will cause a huge CPU spike and slow everything else down. I've tried limiting CPU usage per user with cgroups, but it appears it won't work due to the way that PHP-FPM processes are forked. Is there a way to limit CPU usage per FP ...

Score: 1
Souptik Sarkar avatar
How HTTP 1.1 and HTTP 2.0 works in Spring Boot?
fi flag

What are the differences in flow changes for HTTP 1.1 and HTTP 2.0 for Spring Boot applications ?

Score: 0
Spider avatar
Any way to limit bandwidth per IP in network behind linux router
hu flag

I whant to limit bandwith of clients from network behind my linux based NAT gateway. My clints is connected via wifi or directly via ethernet to router and receiving their IP address from DHCP. I want to limit bandwith near 3Mb per Client IP. Now I has setup tc qdisc limiter for network interface and this summury bandwith limit for all clients. How to limit per IP? Create class and filter for each IP ...

Score: 0
Pranay Gupta avatar
LWIP TCP SERVER Hangs
in flag

I'm using LWIP v2.1.3 with TI F28388D Controller. I'm using LWIP as TCP server only mostly in ping-pong mechanism like :

Client Server
PSH-->
<-- ACK
<-- PSH
ACK-->

A windows client(host PC typically) will be connected to multiple servers like this and will continuously have above transactions.

I'm able to connect and exchange data with multiple servers from single cl ...

Score: 0
King David avatar
rhel + disk util is very high , what is the impact for long term
gb flag

we have backup server with rhel version 7.2

server is VM machine , and OS disk is VMDK disk

disk used space is around - 50% , and from smartctl we not see problem

as we can see from follwing details the disk util is very high sometimes even reached 100% we can see also high pressure from reading side

regarding the util values , we think disk cant be helthy for a long time when util is around 90%-100 ...

Score: 0
justinlime avatar
NGINX proxy pass to docker container's login page
za flag

Using nginx, im trying to set an endpoint for /test to redirect to a docker container i have running on the network on port 5000

I gets the the page correctly, however is unable to load the necessary assets for the page. Looking in the error log, it is looking in the wrong directory for the assets.

my current config:

server{
    server_name domain;
    listen 90;
    access_log /etc/nginx/conf.d/access.l ...
Score: 0
IshRaj avatar
Azure Log analytics Workspace
br flag

I am trying to consolidate all log analytics workspaces in multiple subscriptions. How do I collect all data sources feeding into the workspace including the legacy connectors ? I have tried Get-AzOperationalInsightsWorkspace, but it is not comprehensive.

Score: 0
Kubernetes plugin is not creating any containers in the cluster even the test connection is successful in jenkins, how to fix that?
kr flag

Kubernetes plugin is not creating any containers in the cluster even the test connection is successful in jenkins, how to fix that?

My jenkins log:

Running from: /usr/share/jenkins/jenkins.war
2023-03-23 02:02:43.441+0000 [id=1] INFO    winstone.Logger#logInternal: Beginning extraction from war file
2023-03-23 02:02:45.158+0000 [id=1] WARNING o.e.j.s.handler.ContextHandler#setContextPath: Empty contex ...
Score: 0
seriously avatar
start openvpn on a specific inet
cg flag

I have an OpenVPN server spinned up on a different location and it works fine. I am connecting to it using my linux machine using sudo openvpn /etc/openvpn/client/client.conf and it connects to the VPN correctly. What I want is, when I connect to the VPN it creates a new interface named tun0 with a random inet like 10.8.0.1 is there any way to assign a specific inet on the client machine when connecting  ...

Score: 0
MSWork avatar
DHCP Renew vs rebind timers
mh flag

Windows DHCP, FortiGate relay. No rule that allows for direct renew from PC -> DHCP serwer that gave the IP. 20 minutes expiration timer, 10 for renew, 17.30 for rebind.

What happens:

  • After 10 minutes I see that renew process goes off 3x times in a row. PC asks its dhcp serwer, gets a deny because no rule is active for direct communication.

  • Than it uses broadcast to do the renew, and it succeeds (rel ...

Score: 1
Richard avatar
Configure WildFly to use HTTPS
cn flag

I am using WildFly25, and have it running with default settings.

Server console

WildFly Full 25.0.0.Final (WildFly Core 17.0.1.Final) started in 3938ms - Started 308 of 547 services (338 services are lazy, passive or on-demand)
Http management interface listening on http://127.0.0.1:9990/management
Admin console listening on http://127.0.0.1:9990

I want to update the config, so it runs using SSL/T ...

Score: 0
Line Noise avatar
Restrict connection to RDS database based on IAM Role and RDS tag
de flag

G'day!

I have IAM Authentication turned on for my RDS databases.

I can successfully connect using an authorised role and am denied when using an unauthorised role.

However, I have a role that I would like to be able to connect to some databases but not others and I'd like to avoid having to list the databases explicitly in the IAM Policy.

The policy already restricts several rds:? Actions using a

Score: 0
Abhisek Dash avatar
Why is Windows 10 22H2 update erasing WinRM settings?
ng flag

I used the Media Creation Tool for Windows 10 downloaded from here to create a Windows 10 22H2 image. Then I proceeded to install the image by running setup.exe with the following command line switches:

setup.exe /Quiet /NoReboot /Auto Upgrade

After that I realized that the upgrade has removed Windows Remote Management Settings (and who knows what else) from my PC. For e.g. WinRM was configured to r ...

Score: 0
wcb avatar
kubernetes responding with 502
ga flag
wcb

I have a cluster running 2 deployments and an ingress (caddy). One of my deployments is working fine, its a golang image listening on 80. The other deployment is a php-fpm image listening on 9000, when I make any request to the php-fpm domain, it responds with 502.

php-fpm deployment and service:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: main-api-deployment
  labels:
    app: main-ap ...
Score: 2
Александр Кулагин avatar
nginx: How to write regex to split URL into host and "everything else"?

I want to map

https://www.example.com/Something/SomethingElse/

to

https://www.example.com/index.php?/Something/SomethingElse/

So far I understood that I need the location directive in nginx and use the try_files inside, something like this:

location ~ *???* {
  try_files $uri $uri/ /index.php?$1;
}

Now, the question is: how do I write the regular expression *???* to split URL, so I get the /Something/S ...

Score: 0
BanHammer avatar
How can I route traffic back through the interface it came through for Docker
gr flag

Currently I have a setup with 1 physical NIC with a public IP address, a standard docker environment and a GRE tunnel & bridge. If I run a container on a port, lets say 80, I'll be able to connect directly to the container via the public IP address.

However when attempting to connect via the GRE tunnel the traffic is routed back to the default route.

An attempted connection via the tunnel:

00:52:43.8 ...

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.