Latest Server related questions

Score: 4
Which ICMP types (v4/v6) should not be blocked?
in flag

I have made a lot of research into this and have found that some references contradict each other.

IPV6 For example RFC4890 says the following types should be allowed for optimal functionality:

Type 1, 2, 3, 4, 128, 129 and for mobility assistance also 144, 145, 146 and 147.

However this source doesn't mention mobility assistance was required: (also type 1 and 4 are omitted)

Type 128, 129, 2, 3 and ...

Score: 1
Vokson avatar
How to disable upstream buffering Nginx + Docker + Gunicorn?
ph flag

I'm trying to use Nginx as proxy server between client and Gunicorn. Nginx, Gunicorn (Django) are Docker's containers. Problem is I can't disable buffering of upstream when I send large file from Client to Django App. TTFB time is quite small, thus my progress bar (which use xhr.upload.progress event) becomes 100% very fast (less than second). Then I have to wait 30 sec while file will be upload to serv ...

Score: 1
King David avatar
HDFS + how to disable the "du -sk" verifcation on data node disks
gb flag

We are using HDP cluster with 182 data node machines:

HDP version - 2.6.4 Ambari version 2.6.1

We note the following behavior on the data nodes machines (its happens on all data-node machines and on all disks).

When we perform the command as above example:

ps -eo s,user,cmd | grep ^[RD]
D hdfs     du -sk /grid/sdj/hadoop/hdfs/data/current/BP-1018134753-10.3.6.170-1530088122990
D hdfs     du -sk /grid ...
Score: 1
peter avatar
One user for all databases or different user for different databases?
sa flag

I have multiple (Wordpress) websites that use different mysql databases. I would like to know if I should use different users for different databases, or just use one user (such as root) for all databases, considering only performance not security.

Score: 2
mohamad zbib avatar
debian - packages have unmet dependencies
cn flag

i am having Debian 11, and i am trying to install some php libs like mysql:

command: sudo apt install php-mysql

result:

Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet  ...
Score: 0
Nemilenko avatar
nginx - limit_conn_zone cant make it work
br flag

I want to limit access to only one connection per IP.

The snippet of code I'm using from the official page:

Sets the shared memory zone and the maximum allowed number of connections for a given key value. When this limit is exceeded, the server will return the error in reply to a request. For example, the directives

limit_conn_zone $binary_remote_addr zone=addr:10m;

server {
    location /download/  ...
Score: 0
master lfc6 avatar
How can I limit download/upload speed for every single user on OpenVPN using TC?
us flag

I have an OpenVPN server on CentOS 7 and I want to limit the download/upload speed for every single OpenVPN client to 512 kilo byte per second . From my own researches , I understood that I can accomplish this with TC , but using the scripts here and the ones on the internet , I wasn't able to work it out .

Can anyone please send me a working script on CentOS 7 that limits the download/upload spe ...

Score: 0
Why does Apache log errors for correctly blocked requests? [authz_core:error] AH01630: client denied by server configuration
cn flag

I have added the following configuration to .htaccess, which correctly causes 403 responses to be sent to the blocked IPs.

<RequireAll>
    Require all granted
    Require not ip 0.0.0.0 # abusive IP address
</RequireAll>

However, this causes the following to be recorded in the error log:

[Sun Nov 28 19:11:29.878359 2021] [authz_core:error] [pid 96469] [client 0.0.0.0:33112] AH01630: client ...

Score: 0
Fred O'Rourke avatar
SAMBA 4 CN with multiple spaces, cannot modify, delete but can view
cn flag

Samba with internal LDAP (not openLDAP) configured as AD-DC

I have contacts created using CN={name} Contacts that have multiple spaces in the names cannot be edited, deleted or removed from their groups, for example:

DN: CN=My  Name,OU=Contacts,OU=Base,DC=Test,DC=Local

Using LDAP Admin, Apache Directory Studio or LDB on the server all fail to rename, delete or modify the entry. ldbsearch finds the object ...

Score: 0
Matt F. avatar
Run systemd namespaced unit on failure of any unit
ke flag

I have a namespaced unit to send an email saying that a given service has failed. I know that you can add OnFailure units to an individual unit in order to run the specified units when it fails.

However, my system has hundreds of units, some being automatically generated. It is not feasible nor maintainable to add OnFailure to every single unit.

So how can I run the namespaced unit (with the name of ...

Score: 0
SScotti avatar
Questions about running postgres as Docker Container. 1. TimeZone, 2. global.stat
cn flag

I'm been running postgres as a Docker Container for quite awhile. Initially, the TZ and PGTZ were not set, so I think it was defaulting to UTC. On my dev system I tried the following in docker-compose.yml:

  postgres:
    image: postgres:13
    ports: ["5557:5432"]
    restart: unless-stopped
    volumes:
       - ./Index:/var/lib/postgresql/data
    environment:
       TZ: "America/Cayman"
      ...
Score: 0
Connect LVM volume directly to oVirt Virtual Machine
gb flag

I have used libvirt before (KVM). I had a VM that had a host LVM Logical Volume directly attached to the virtual machine. (e.g. /dev/myvg/myvol) So this volume was presented to the virtual machine as a disk.

Now I've installed oVirt and can't seem to find a similar option. Any pointers on how to accomplish this?

Score: 1
Sheik avatar
How can I MASQUERADE between vlan bridges
us flag

I have created two VLAN bridges in openwrt based system which has single physical interface.

*) eth0->lan->br-lan
*) br-lan->br-lan.2(VLAN INTF)->br-vlan2(BRIDGE INTF)
*) br-lan->br-lan.20(VLAN INTF)->br-vlan20(BRIDGE INTF)

I am running an DHCP server in by ubuntu machine.

I am trying to route between the vlan to open up the intervlan communication. But i couldn't succeed.

what i ...

Score: 0
Freeradius 3.0 accept all IP Address
pt flag

I found the following code on the internet to allow all IP in freeradius client.conf file,

client 0.0.0.0/0 {
  secret = 12345
  shortname = name
}

But This is not working in freeradius 3.0 , it is simply giving an error with no explanation.

I tried the following code, it is still giving the error

client private-network-1 {
        ipaddr          = 0.0.0.0/0
        secret          = testing123-7
 ...
Score: 1
Jeff avatar
What does %{REQUEST_FILENAME}.ext mean? Why the extra .ext ending?
dj flag

The %{REQUEST_FILENAME} contains a string like this:

/web/webroot/index.php

I see a lot of people recommend testing if a file exists and has a .php extension like this:

RewriteCond %{REQUEST_FILENAME}.php -f

Isn't the .php after %{REQUEST_FILENAME} redundant? The variable should already contain the .php, right?

Seems like adding .php after %{REQUEST_FILENAME} would make the TestString check add ...

Score: 0
Prometheus Alertmanager - Generating alerts
au flag

When alerts are based on metric data, like CPU or memory utilization, Prometheus is the obvious tool for pushing alerts into Alertmanager. There are other examples where the required alert is based on Boolean conditions, like "is DNS working". In such instances, is there a "best practice" method for generating these alerts?

Using the above DNS example, I could use a script:-

#!/usr/bin/env bash

fun ...

The Stunning Power of Questions

Much of an executive’s workday is spent asking others for information—requesting status updates from a team leader, for example, or questioning a counterpart in a tense negotiation. Yet unlike professionals such as litigators, journalists, and doctors, who are taught how to ask questions as an essential part of their training, few executives think of questioning as a skill that can be honed—or consider how their own answers to questions could make conversations more productive.

That’s a missed opportunity. Questioning is a uniquely powerful tool for unlocking value in organizations: It spurs learning and the exchange of ideas, it fuels innovation and performance improvement, it builds rapport and trust among team members. And it can mitigate business risk by uncovering unforeseen pitfalls and hazards.

For some people, questioning comes easily. Their natural inquisitiveness, emotional intelligence, and ability to read people put the ideal question on the tip of their tongue. But most of us don’t ask enough questions, nor do we pose our inquiries in an optimal way.

The good news is that by asking questions, we naturally improve our emotional intelligence, which in turn makes us better questioners—a virtuous cycle. In this article, we draw on insights from behavioral science research to explore how the way we frame questions and choose to answer our counterparts can influence the outcome of conversations. We offer guidance for choosing the best type, tone, sequence, and framing of questions and for deciding what and how much information to share to reap the most benefit from our interactions, not just for ourselves but for our organizations.