Latest Server related questions

Score: 0
sar avatar
How to properly include vlan configuration for preexisting OSPF routing in PT
rs flag
sar

I am using packet tracer to simulate an enterprise setting.

There would be a "main" office (marked as Bgta) and other minor offices in other cities, such as Mdlln. In the main office there should be some servers and in each city some hosts. The thing is I now added three vlans (10,20,30) for department exclusive content, but I have not been able to make it work with my preexisting OSPF routing.

For  ...

Score: 0
Redskingmen avatar
Removing UTMStack Agent from Linux
nu flag

When testing with UTMStack, I was wanting to remove the Linux agent off an Ubuntu server. I'm only seeing in the documentation on installing it, but not removing it. What would be the correct commands to do so?

Thank you

Score: 0
Shanebagel avatar
Getting an error in SQL Server 2019: The certificate chain was issued by an authority that is not trusted
tr flag

I've enabled "Encrypt connection" I've enabled "Trust server certificate"

I've added the TrustServerCertificate=true to my connection string

I've confirmed the service is running - there is another service called "SQL Server Agent" that refuses to start however

I have a self signed cert that I generated with powershell - and I've added it into SQL Server configuration manager.

Here is the error: A connect ...

Score: -1
Nav Boom avatar
How to verify signed file?
sv flag

How to check a validity of a file using openssl and cms?

I've got a file (foo.bin) and a signature (foo.bin.cms) which is include x509 der format certificate.

is there any way to check validity of the file with it cert?

I can find SHA256 of foo.bin, within the foo.bin.cms.

Also can open foo.bin.cms with ASN1. But can not found any way to verify file using openssl command.

openssl cms verify command  ...

Score: 0
eberts avatar
cURL hangs unless using IPv6 with HTTPS
gy flag

I need to make some cURL requests to a server that doesn't have an ipv6 address, but my machine only seems able to connect when 1) using https, and 2) using ipv6. Other requests hang indefinitely after DNS resolution, before any connection is established.

Would appreciate any guidance on how to resolve this.

The machine is running Ubuntu 18.04.4 with curl 7.58.0 and ufw 0.36.

This happens with any doma ...

Score: 3
Vilx- avatar
Postfix doesn't queue outgoing email, but all settings are default. Why?
in flag

I've set up a mailserver with Postfix, Roundcube and Dovecot. All works well - almost.

In my country there's a popular free email service by the name of inbox.lv. And they have an anti-spam rule set up that when a new server tries to send emails to them, they first greylist it for 10 minutes and require the server to re-send the email. Fair enough.

However when using Postfix to send outgoing emails  ...

Score: 0
eastwater avatar
kubernetes: URLs for Mysql operator YAML stable versions
ec flag

Install mysql operator:

Following https://dev.mysql.com/doc/mysql-operator/en/mysql-operator-installation-kubectl.html

kubectl apply -f https://raw.githubusercontent.com/mysql/mysql-operator/trunk/deploy/deploy-crds.yaml
kubectl apply -f https://raw.githubusercontent.com/mysql/mysql-operator/trunk/deploy/deploy-operator.yaml

They are from trunk. What are the URLs for latest stable versions?

tried ...

Score: 1
Empx avatar
UDM PRO VPN and different VLANS
km flag

I'm running a UDM Pro with 3 USW24-POE which are connected via fibre (OS2) which is running fine meanwhile.

On the UDM there are a few VLANS which are all managed by the UDM Pro. The Main Lan is 192.168.10.0/24 which is my "tech" Lan, then there is a "facility" lan 192.168.5.0/24 with Vlan-ID of 2 and a "gastronomy" lan 172.168.16.0/24 with Vlan-ID 60.

I'm trying to get a VPN connection directly over ...

Score: 0
reactive-core avatar
Postfix header_checks with multi-line headers and capture group
io flag

We have a header_checks regexp passed to the "cleanup" process, but it's not processing the header as a single header if it's on multiple lines.

header_check (pass value of header to FILTER):

/^X-OurHeader:\s+(.*?)/ FILTER $1

master.cf:

cleanup_service.        unix  n       -       y       -       0       cleanup
  -o header_checks=regexp:/etc/postfix/header_check

Example multi-line header where it fai ...

Score: 0
shaolinmaster827 avatar
Azure Powershell script to clone NSG rules across subscriptions in the same Tenant
bm flag

I need some help with a powershell script clone NSG rules from a particular NSG in 1 subscription to a NSG in another subscription. I have a script that accomplishes this if both NSG's are in the same subscription but not if they are in different subscriptions. Here is what I have. Any help would be appreciated.

#name of NSG that you want to copy 
$nsgOrigin = ""
#name new NSG  
$nsgDestination = " ...
Score: 1
Teddy avatar
DNS: Exclude subdomain from wildcard record
bd flag

I would like to match all subdomains to return an A record (this works) but I would like to exclude one particular subdomain from resolving (not sending an A record at all).

*.example.com.        IN   A   127.0.0.1
exclude.example.com.  IN   A   [no IP at all]

I would like to configure this directly in bind and also in a plesk environment.

Score: 0
brokkosnarf avatar
Azure outputs outdated public IP-address
cl flag

I have a Terraform file called azure.tf which is supposed to deploy a Virtual machine to Azure and afterwards SSH to said machine to run an Ansible playbook. The problem is that everytime i run terraform apply, the old public IP-address of the previous vm gets used.

I've got a file called outputs.tf which outputs this IP-address

output "public_ip_address" {
  value = data.azurerm_public_ip.my_terrafor ...
Score: 0
Giuseppe avatar
iptables rules - Forward/Masquerade sevices using nat table
th flag

I need to complete an exercise with iptables on a network (docker containers) configured as follows:

  1. A router host with 2 network interfaces (eth0 <- public 10.9.0.0/24; eth1 <- lan 192.168.60.0/24; the router is the x.x.x.254 on both networks) and an SSH server on default port 22;
  2. A jumpbox host in lan with IP 192.168.60.10, with SSH and TELNET on default ports 22 and 23;
  3. An admin host in  ...
Score: 0
Julien avatar
Load balance site with Nginx
cn flag

I have a rails 4 application served by nginx that is getting more traffic than the server can handle so i want to run a second instance of that app on another server and load balance the traffic between the two.

This rails app serves a lot of sites coming from a lot of different domains, each site has its own Nginx server block with SSL certificates that proxy_pass the traffic back to the rails app s ...

Score: 0
Martin Ørding-Thomsen avatar
How to get a secure HTTP monitor in NetScaler to send SNI in its request?
gb flag

We have a content switch in front of a virtual server in NetScaler ADC, and it acts as a load balancer. It is tied to a service group that has an HTTP monitor. We cannot get this monitor to work.

The monitor calls an HTTPS endpoint. The endpoint expects a SNI extension (Server Name Indication) in the Client Hello TLS handshake from the NetScaler. The NetScaler doesn’t add this, according to our ...

Score: 0
lriley avatar
Best way to trigger host to restart a docker container from inside another docker container?
cn flag

I have a docker container that manages all of the SSL certificates for my services with Letsencrypt. When the certificate for a certain service is renewed, a post-hook script copies the certificate and key to the folder where the SSL certificate and key for the other container uses are located. This other container then needs to be restarted to use the new, renewed certificate. My current solution is ex ...

Score: 0
Drumspirit avatar
remove network discovered printers in cups web page
sm flag

I am trying to remove network discovered from cups webpages. I am working on a cloud print service and run a raspbian bulleyes. I will have to deploy my system to customers and I want to remove every printer discovery. Printers will only have a local installation from an engineer. I have tried to configure cups browse protocols and stuff. I have tried to disable and stop avahi daemon and socket. Put ipv ...

Score: 0
user5717448 avatar
ceph "permission denied" when adding storage OSD
tn flag

I just setup three storage nodes for ceph in a qemu/kvm environment to learn about it. OS is Ubuntu Server 22.04 LTS. The ceph and ceph-common packages are from standard repos. I followed the guidelines on the ceph website. I set up one vm and cloned it before installing ceph. The hosts and the dashboards are up and running. Each host has a empty block device /dev/vdb. According to the guide I tried to  ...

Score: 2
Morvael avatar
Microsoft account locks everytime PC goes to sleep, user cannot change password
mx flag

In this case I'm a frustrated user asking as my company (who shall remain nameless) IT department seems unable to diagnose the issue with this, and my own web searching can't find anything either.

My company runs servers hosted as VM's in Azure, part of the structure is our own domain controller which is kept in sync with Azure's user DC.

When ever my corporate domain linked laptop goes into sleep m ...

Score: 1
C Taque avatar
Trouble to understand how networking works on nomad
cn flag

Can someone explain why I can't access my website running in a docker container thru nomad or what I'm doing wrong ? I'm beginner in system and networking.

I would like to make the container http listen on 127.0.0.1:8088 so that nginx can proxy.

Nomad server and client are running on the same machine

Machine is fedora, disabled SELinux, firewall disabled.

What I expect : Request to <server_ip>:8088  ...

Score: 0
Kravitz avatar
App Engine dispatch.yaml to external server
ru flag

I have a VueJS site on app engine, I would like to use wordpress for a blog placing it on the same domain at the same level at the /blog/ directory.

I can probably do this with dispatch.yaml and having wordpress hosted on the same GAE project as an additional service but then i need to purchase Google Cloud SQL which is overpriced for my use case, Id rather use a compute instance with php and sql ...

Score: 0
Umair Khan avatar
Microk8s - Non-HA single node, leaving node removes all pods
cd flag

Iam running the microk8s in ubuntu in no high availability i.e. there is a single node onto the same machine where it is installed. I updated the certificates and then i issue following command:

sudo microk8s leave

as it was advised that after upgrading the certificates nodes have to leave and rejoin.

It give following messages:

Generating new cluster certificates.
Waiting for node to start. 

and then  ...

Score: 0
Varun K M avatar
UNREACHABLE! => {"changed": false, "msg": "Data could not be sent to remote host
pg flag

I have SSH access for a particular server, but when I am trying to run the playbook for that server. I am trying to do the deployment for that server but I'm facing an issue.

fatal: [lapp999.corp.com]]: UNREACHABLE! => {"changed": false, "msg": "Data could not be sent to remote host \"lapp999.corp.com\". Make sure this host can be reached over ssh: *********************************************** ...
Score: 1
skyclouder avatar
What is the corresponding AWS EC2 level for this specification?
us flag

We'd like to use AWS to build code. Below is the specification for the build server, is there any corresponding hardware level for AWS EC2?

Ampere AC-1GB06A1S5 - Mt. Snow SATA DVT L6 2U Altra Server with:

1 x AC-108021002P Ampere AR< Altra processors

  • 80 ARMv8.2-A
  • 64-bit CPU cores
  • 3.0GHz
  • 8DDR4-3200 Memory Channels
  • 128 PCIe Gen4 Lane

And installed:

  • 16 x 16GB RDIMM 3200
  • 1 x 4TB SATA 2.5" SSD
  • Ubu ...
Score: 0
Kwonunn avatar
SSH Dynamic proxy very slow, keeps opening more channels
kh flag

I am attempting to access a networked http resource from outside the network by using SSH with the -D flag. I'm using the command ssh -v -ND 8090 svr, and svr is set up as a host in the hostsfile.

The connection establishes successfully, but using the proxy causes my browser to hang on the TLS handshake. Sometimes the connections time out, sometimes they go through but either way this is unusable.

Score: 0
hrasmussen.dk avatar
Setting www in PowerDNS domain template to always CNAME to self
sd flag

I found a pretty old answer from 2014 explaining that domain names in PowerDNS has to be fully qualified, thus CNAME cannot refer to self (@), and enhancements in this regard may have been implemented later, but creating a PowerDNS domain template, if referring to self is not possible using CNAME @, how do one set the domain template to always default a record (like www.example.com) to self (example.com) ...

Score: 0
tux avatar
OpenLDAP + Moodle, member of groups
in flag
tux

the teachers in my OpenLDAP are in cn=teachers,ou=groups,dc=school,dc=de

the course creator context in my Moodle installation should then be the same if I am not mistaken. If I query ldap

BINDUSER="my-bind-user"
LDAPDN="dc=school,dc=de"
BINDPASSWORD="somegreatpassword"
ldapsearch -o ldif-wrap=no -H ldaps://school.de:10636 -D "cn=$BINDUSER,ou=ldap,$LDAPDN" -w $BINDPASSWORD -b "cn=teachers,ou=groups,$LD ...
Score: 0
Wilko van der Veen avatar
Issue with not being able to pars LDIF file (invalid format (line 5) entry: "cn=schema")
lb flag

Trying to add a new attribute to a schema by using this command:

ldapmodify -f ./add-id-attribute.ldif -h localhost -p 50389 -D "cn=Directory Manager" -w mySecretPassword

And this LDIF file

dn: cn=schema
changetype: modify
add: attributetypes
attributetypes: ( 1.3.6.1.4.1.32474 NAME 'myAttribute'
    USAGE userApplications )
    DESC 'The attribute'

But it gives me the following response: ldapmodi ...

Score: -1
Backi avatar
Spamhaus blacklisted our mdaemon server IP due to wrong HELO
ke flag

since two weeks ago spamhaus kept on putting our IP address on the CSS blacklist - we've had few thing to fix from the guideline so we delisted ourselves few times after checking all the requirements.

Now after 3 times they created a ticket for our case and state that our helo response is a localhost:

Then something else is going on:

(IP, UTC timestamp, HELO value) 188.39.** 2023-05-30 18:40:00 loca ...

Score: 2
Maxs728 avatar
Privilege escalation prevent root directly
in flag

I think this is going to be my first post on StackExchange side of the house. However, I know that this has to be able to be configured cause I have seen it implemented previously but I don't actually know how it's implemented.

What I'm looking to do is on RedHat 7/8 or derivative... How can I make it so that a user has to conduct the following privilege escalations:

<user> -> <user>.adm  ...

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.