Latest Server related questions

Score: 1
Mikael H avatar
Redis Sentinel with TLS - how to get node FQDN rather than IP?
br flag

This may be a Serverfault or a Stack Overflow question, I'm not sure yet:

I've set up a simple three node Redis system with a master and two replica nodes, managing failover with Redis Sentinel. Redis and Sentinel network traffic is secured using Redis built-in TLS support and regular CA issued certificates.

Each Sentinel instance is configured to announce its hostname and to resolve DNS:

sentinel resolv ...
Score: 0
Sandeep avatar
ceph-deploy install command fails with [ceph_deploy][ERROR ] RuntimeError: configparser.NoSectionError: No section: 'main'
id flag

Command ceph-deploy install admin datanode_dn2 fails with output:

[ceph_deploy.install][INFO  ] Distro info: rocky 9.1 blue onyx
[admin][INFO  ] installing Ceph on admin
[admin][INFO  ] Running command: sudo yum clean all
[admin][DEBUG ] 57 files removed
[admin][INFO  ] Running command: sudo yum -y install epel-release
[admin][DEBUG ] CentOS-9-stream - Ceph Quincy                   113 kB/s | 474 kB      ...
Score: 0
BruceLeeRoy avatar
Fail2Ban redirect instead of drop
dz flag

I'm trying to configure Fail2ban to redirect instead of banning, I've found plenty of posts about redirecting to a different port for HTTP traffic to display a different webpage, but I need to redirect to a different IP address entirely. I see the -j REDIRECT function will let me redirect to a different port but not IP Does anyone know how to redirect banned traffic to a specified IP rather than dropp ...

Score: 1
Jake avatar
How to troubleshoot a server having SFTP, SCP transfer speeds of around 500 KB/s with many but not all machines?
cn flag

We have two Ubuntu servers that have very slow upload and download SFTP, SCP, and RSYNC speeds, around 500 KB/s, when connecting from most home machines. These servers have fast corporate Internet access and are behind a corporate firewall.

The same home machines can have much faster transfer speeds to and from other servers, e.g. 10 MB/s. Also, some home machines connect to the two servers in qu ...

Score: 1
Srikanth avatar
What's magical about MTU and packet drops?
mg flag

With default MTU as shown below:

hosta$ ifconfig eth0 | grep mtu
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500

I can ping from a different server using a 1500 payload

hostb$ ping -s 1500 -c 2 hosta
PING hosta (hosta) 1500(1528) bytes of data.
1508 bytes from hosta: icmp_seq=1 ttl=64 time=0.273 ms
1508 bytes from hosta: icmp_seq=2 ttl=64 time=0.314 ms

--- hosta ping statistics ---

Score: 0
zomega avatar
Can a Linux web server which hasn't been restarted for years be secure?
aq flag

The content of /proc/uptime reports:

48973211.37 1627573879.70

48973211 seconds mean the server is up for 567 days without a restart.

Since then many serious security fixes have been applied to the Linux kernel. Because my server was never restarted I must be missing all those patches. I am at a big web European web hoster. But I don't want to blame anyone so I won't tell the name.

It's a small web space ...

Score: 0
afriend avatar
Troubles with Exporting Dovecot Post Boxes
sh flag

My postfix/dovecot mailserver runs well, but I want to migrate to another server and my problem: I'm not able to export post boxes from my dovecot:

My command (I replaced the email address):

dsync -f -u [email protected] backup maildir:/root/migr_in/data/mailaccounts

Then I get this error:

dsync([email protected]): Error: user [email protected]: Initialization failed: Initializing mail storage from mail_lo ...

Score: 1
wwillfred avatar
How to include two phase types to look for in `oc wait` command
ai flag

I'm editing a script that calls the oc wait command with these parameters:

oc wait --for=condition=Ready pod --field-selector=status.phase!=Terminating -l app=foo --timeout=55s

The above command executes successfully, but I need to check for InvalidImageName in addition to Terminating in the --field-selector=status.phase option.

I've tried

oc wait --for=condition=Ready pod --field-selector=status. ...
Score: 0
asim avatar
Unable to Write, Permission denied
tz flag

As an apache user, I was trying edit some files owned by a different user, lets call it docroot

drwxrwxrwx  2 docroot    docroot      327 Feb 15 20:34 .
drwxr-xr-- 53 docroot    docroot     8192 Jan 31 17:49 ..
-rwxrwxrwx  1 docroot    docroot     1453 Jun  6  2022 targetfile

shell:id -Gn
apache docroot

but was unable to modify targetfile echo "I should be allowed" >> targetfile or create ...

Score: -1
janman05 avatar
Is Software RAID1 faster on a larger SSD?
nc flag

I am evaluating 2 CentOS servers, in terms of performance of reading and writing to the database. The database sits on an SSD RAID1 pair, with MySQL 5.7 on each server. Server 2's specs are a bit better overall, except this:

Server 1: Hardware RAID1, two 2 TB SSD drives.

Server 2: Software RAID1, two 1 TB SSD drives.

Server 2 is faster when it comes to READS.

But Server 2 is slower when it comes t ...

Score: -2
Conrad avatar
Teams Guest users cannot bypass the lobby without the organizer, even though "Everyone" is selected in Meeting Options
us flag

In my personal MS 365 Tenant (Business Basic subscription), when I invite external users to a Teams meeting, they can join the meeting, but only after I, the organizer, join. I would like them to be able to join before I am there (or if I am not there at all). In the Meeting Options, I do have "Everyone" set for the option "Who can bypass the lobby?" Is there some other setting I'm missing to allow exte ...

Score: 0
Chris Pappalardo avatar
What is the proper way to configure Tripwire to handle automatic log rotations?
vn flag

I installed tripwire by following this online documentation on a fresh ubuntu 22.x server. I followed the above documentation exactly and did not add any custom mods to either the cfg or the pol files.

I received the following exceptions shortly thereafter which appear to me to be basic log rotations:

Rule Name: System boot changes (/var/log)
Severity Level: 100

Added:
"/var/log/syslog.3.gz"
"/var ...
Score: 0
Furious Gamer avatar
"server" directive is not allowed here in /etc/nginx/nginx.conf:1
gi flag

I have an NGINX docker container with a an nginx.conf file i copy into /etc/nginx/nginx.conf. When i start the container/server, i get the following error:

2023/02/15 16:24:10 [emerg] 1#1: "server" directive is not allowed here in /etc/nginx/nginx.conf:1
nginx: [emerg] "server" directive is not allowed here in /etc/nginx/nginx.conf:1

I looked into it and there are a lot of posts about this error ...

Score: 0
Ig.Foer avatar
How to install mosh on oracle linux
ws flag

I wanted to install mosh on oracle linux, but I was faced with the fact that such a package does not exist.

$ sudo yum install mosh
Last metadata expiration check: 3:12:40 ago on Wed 15 Feb 2023 01:05:56 PM GMT.
No match for argument: mosh
Error: Unable to find a match: mosh

I tried to build mosh from the source code, but that didn't work either.

$ git clone https://github.com/mobile-shell/mosh
$ cd mo ...
Score: 0
Gian Lorenzo Abaño avatar
2 VLANS on 1 Physical OpnSense Ethernet Port (connected to wifi access point) and 1 Captive Portals on each VLAN
gg flag

I want to create a captive portal with different restriction per user account/role (student and teacher).

  • The Teacher can have unrestricted access.
  • The Student have restricted access. (only defined/allowed websites are accessible).

But upon my research/review on OpnSense Captive Portal Documentation, This is not possible because you can only configure firewall/captive portal settings per port/interfac ...

Score: 0
RAN55 avatar
Registry option "do not use proxy server for local addresses"
in flag

I just create a gpo to configure proxy with this registry options:

https://theitbros.com/config-internet-explorer-11-proxy-settings-gpo/

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]:

ProxyEnable (REG_DWORD) = 00000001;

ProxyServer (REG_SZ) = ipproxy:port

ProxyOverride (REG_SZ) = local url etc.

I would also need enable the image option.

enter image description here

How can i do i ...

Score: 0
Syirtblplmj avatar
Install OpenShift on RedHat or Centos? whitout paying
in flag

I need to create a POC using OpenShift, if I use a machine with Red Hat I need to have a subscription? it is posible to do it without paying?

and if is not possible, can I use CentOS to do the same with the latest version of OpenShift.

Thanks.

Score: 0
ZCT avatar
sshd allows login with no authentication all accounts
cn flag
ZCT

This morning I was logging into an Ubuntu 18 machine that luckily we use for testing and is not on the Internet. When my SSH client got to the authentication point I accidentally hit 'ESC' which means that all I did was pass a username to the client and it let me login.

I like you assumed it was because my client has my key but I hadn't typed in the passphrase or anything for my ssh key. To be su ...

Score: 0
Christovam avatar
xfs corruption metadata after reboot
us flag

I had a problem on a RAID1 with 4 disks. We replaced the faulty disk and restarted the server, the rebuild was done, two linux centos 7 machines did not come up accusing error of xfs corruption. Other machines rose normally. I tried to mount the partition:

# mount /dev/mapper/cs_mbox_opt /mnt
returned: XFS metadata corruption detected at xfs_dir3_leaf_check_init.....

I ran the XFS_repair command and r ...

Score: 0
Dorothy avatar
3% of Sendmail Localhost Relays are Deferred
gw flag

Using Debian 10.3 and Sendmail Version 8.15.2, mail being sent with relay=[127.0.0.1] results in stat=Deferred: Name server: [127.0.0.1]: host name lookup failure. This occurs only 3% of all localhost relays.

What would cause this?

Example mail.log results

Feb 14 11:20:29 themail sendmail[15759]: 31EGK5RK015759: Authentication-Warning: themail.themailserver.net: www-data set sender to "Dorothy Gale" & ...
Score: 0
Krzysztof Moskalik avatar
HP DL360 Gen 8 not recognizing SSDs
de flag

I have HP DL360 Gen 8 Server with P420i controller. I've populated it with 4x1TB HDDs and 2x1TB SSDs. HDDs are recognized correctly and they are visible in controller configuration tool (smart array), but SSDs not. Also the LED indicators on drive tray in front of server are solid amber for SSDs, what can be read from documentation as The drive is not configured and predicts the drive will fail. Thos ...

Score: 0
Hatef avatar
Total Network Traffic of a specific PORT or USER
um flag

I want to provide a 'SSH Tunnel' for one of my customers, and I need to know the total network traffic by its PORT or USER.

for example: I will give him/her an access to my server by an exclusive username like TEST and port 7070, and after a week I need to know the total traffic of PORT 7070 | USER Test in MB or GB.

so Live|Real Monitoring is not an option in my case.

P.S. under Ubuntu 22.04 or a ...

Score: 0
PawelRoman avatar
Ubuntu 22.04, Intel Xeon E5-2640 v3, getting "Illegal instruction" and "core dumped" error from apt
ca flag

I have Ubuntu 22.04 Server, running on Intel(R) Xeon(R) CPU E5-2640 v3 @ 2.60GHz

When trying to install packages apt complains about unment dependencies and suggests running apt --fix-broken install:

# apt install vim
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
You might want to run 'apt --fix-broken install' to correct these.
The following packages hav ...
Score: 0
user157726 avatar
No network in google android emulator
fr flag

I am running an android emulator on Linux, using the Android Sdk.

The emulator does not seem to have network connection. I do not see any sign of it either inside or in the host.

What could be the cause, how a healthy routing setup looks like, and how can I fix it?

Routing on the host (no matter the emulator is running or not). I miss a virtual device for the emulator and associated routing.

$ ip  ...
Score: 0
Shiva Yaniki avatar
iptables -v -L / ip6tables -v -L not listing "tetherctrl_counters" chain in android "S" but it working as expected in android "R"
bj flag

"tetherctrl_counters " chain not listing in iptables -v -L o/p in Android 'S'.

Current behaviour:

Chain st_penalty_reject (0 references) pkts bytes target prot opt in out source destination 0 0 CONNMARK all -- any any anywhere anywhere CONNMARK or 0x2000000 0 0 NFLOG all -- any any anywhere anywhere 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable

Chain tetherctrl_FORWARD ...

Score: 0
user9102437 avatar
Creating a swap partition from existing one
ba flag

I have the following disk setup:

Disk /dev/sda: 53.7GB
Sector size (logical/physical): 512B/4096B
Partition Table: gpt
Disk Flags: 

Number  Start   End     Size    File system  Name  Flags
14      1049kB  4194kB  3146kB                     bios_grub
15      4194kB  134MB   130MB   fat16              boot, esp
 1      134MB   53.7GB  53.6GB  ext4

I would like to have a swap partition, but there isn't  ...

Score: 2
Martin avatar
suspicious postfix warnings
kz flag

I am running a private mailserver for quite some time now, which is a postfix / dovecot setup. I noticed some log messages from postfix, which alerted me a little bit, and I hope, someone can explain those messages to me.

Feb 15 08:09:28 myhostname postfix/submission/smtpd[360942]: connect from fixed-187-190-157-212.totalplay.net[187.190.157.212]
Feb 15 08:09:44 myhostname postfix/submission/smtpd[ ...
Score: 1
user21101711 avatar
nginx reverse proxy with docker containers and specific nested locations
sy flag

I would like to set up nginx as a reverse proxy with multiple apps on docker containers permanently residing under specific locations, e.g.:

https://sub.example.com/wiki
https://sub.example.com/app1
https://sub.example.com/app2

In particular, I want to use the mediawiki docker image next to other apps. This is my docker-compose.yml:

version: '3.5'
services:

  mediawiki:
    image: mediawiki
    restart: ...
Score: 2
PouJa avatar
Two ipv6 tunnels from different providers on the same host
in flag

My question is related to this question but with little difference:

I have an Ubuntu vps with a singe IPv4 on the main interface. I would like to have two separate IPv6 tunnels on this machine that are from two different providers with different endpoint address. When I try one of them alone. Every thing is okey. But when I add the second tunnel the first one still works but the second one cannot ...

Score: 1
Danila Eliseev avatar
Strange behavior of GCP Load Balancer
bw flag

I had a strange behavior with google global lb. On the one zone traffic evenly , but on other zone with same load traffic loads pods not evenly. Configs at zones are the same. Can it appears to gcp load balancer config or core of gcp lb? not evenly loaded zone

more evenly loaded zone

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.