Greatest Hits

4
votes
1answer
19k views

What exactly does netsh int ip reset reset?

Having got this problem and found this solution I think I should perhaps try netsh int ip reset reset command but I am afraid it can reset some important settings and disable me from reaching the ...
7
votes
2answers
8k views

Intermittently high ping times to router via Wi-Fi

On my local network there are (among others) 5 machines (running Debian Jessie or Arch) wirelessly connected to a Netgear WNDR4000 router. Below is a graph of the ping times to the router from each of ...
6
votes
3answers
26k views

Where is the sshd log file on Red Hat Linux stored?

Can someone please tell me where to find the SSHD log on RedHat and SELinux.... I would like to view the log to see who is logging into my account..
6
votes
2answers
19k views

How to troubleshoot connectivity when curl gets an *empty response*

I want to know how to proceed in troubleshooting why a curl request to a webserver doesn't work. I'm not looking for help that would be dependent upon my environment, I just want to know how to ...
11
7
votes
3answers
12k views

Why does Android Chrome say my site's security certificate is not trusted?

My site is https://blendbee.com. It's using a PositiveSSL certificate that is valid. In Windows 8 Chrome the certificate is fine (green lock in top left corner). But...on my Android, it's not so ...
30
votes
4answers
27k views

How to set environment variable in systemd service?

I have an Arch Linux system with systemd and I've created my own service. The configuration service at /etc/systemd/system/myservice.service looks like this: [Unit] Description=My Daemon [Service] ...
12
votes
6answers
29k views

Delete a iptables chain with its all rules

I have a chain appended with many rules like: > :i_XXXXX_i - [0:0] > -A INPUT -s 282.202.203.83/32 -j i_XXXXX_i > -A INPUT -s 222.202.62.253/32 -j i_XXXXX_i > -A INPUT -s ...
8
votes
4answers
9k views

Failed tls handshake. Does not contain any IP SANs

I'm trying to set up logstash forwarder, but I have issues with making a proper secure channel. Trying to configure this with two ubuntu (server 14.04) machines running in virtualbox. They are 100% ...
10
votes
6answers
27k views

How to I test if mod_rewrite is enabled?

I'm setting up an environment for wordpress on apache2, on a fresh install of ubuntu 12.04. In order to get friendly URLS working, I'm trying to set up mod_rewrite. I followed some instructions I ...
7
votes
3answers
32k views

What's eating my drive space when normal files + hidden + system doesn't equal total drive space used

This is very strange. All directory sizes are normal, and all other folders are within 20GB of what they should be. The discrepancy is that I can’t locate the files that are consuming 150GB of ...
19
votes
1answer
39k views

How to set up strongswan or openswan for pure IPSEC with iPhone client?

I'm having trouble finding concrete, up-to-date information for how to set up strongswan or openswan to be used by the iphone's VPN client. My server is behind a budget linksys NAT router. I found ...
19
8
votes
4answers
27k views

In CentOS 6.x, how can I upgrade to Kernel 3.4?

I have a server running CentOS 6.2 with kernel version 2.6.32, but I need to increase my application Performance. The Kernel Version 3.4 has x32abi which can improve the performance so i want to ...
4
votes
3answers
28k views

How to investigate unexpected Linux server shut down?

In a new Xeon 55XX server with 4xSSD at raid 10 with Debian 6, I have experienced 2 random shut downs within two weeks after the server being built. Looking at bandwidth logs before shut down does not ...
12
votes
2answers
14k views

How can I override CMD when running a docker image?

I want to inspect a docker image created by someone else with both an entrypoint and cmd specified, for example: ENTRYPOINT ["/usr/sbin/apache2ctl"] CMD ["-D", "FOREGROUND"] I currently do: docker ...
8
3
votes
1answer
20k views

what is acceptable datastore latency on VMware ESXi host?

Looking at our performance figures on our existing VMware ESXi 4.1 host at the Datastore/Real-time performance data Write Latency Avg 14 ms Max 41 ms Read Latency Avg 4.5 ms Max 12 ms People ...
8
votes
5answers
5k views

How to patch CVE-2015-0235 (GHOST) on debian 7 (wheezy)?

This vulnerability was found in glibc, see this hacker news post for more info. As described in the debian bug tracker, the vulnerability was already patched in testing and unstable. I'd like to ...
4
votes
1answer
40k views

Two network interfaces and two IP addresses on the same subnet in Linux

I recently ran into a situation where I needed two IP addresses on the same subnet assigned to one Linux host so that we could run two SSL/TLS sites. My first approach was to use IP aliasing, e.g. ...
3
votes
1answer
16k views

Changing the default gateway, multiple NICs

I have Ubuntu 13.10 (kernel 3.11.0-19-generic). On startup, the network configurations are as follows: dor@ubuntu:~$ sudo ifconfig -a em1 Link encap:Ethernet HWaddr 44:37:e6:4c:ca:0a ...
3
votes
3answers
16k views

How To Properly Setup DNS Forwarders On Windows Server

I was wondering how to properly setup DNS forwarders on Windows Server 2008 R2. I have three Domain Controllers. Each of the DC's have have following: AD Role DNS Role DHCP Role Static IP Address ...
3
votes
1answer
17k views

How to disable user's password via puppet securely?

I have my SSH servers setup to use only Public Key authentication with password authentication disabled. When adding users through puppet I would like to disable user passwords. So far I have came ...
32
votes
7answers
60k views

Xen vs KVM in performance

What is faster on same hardware - Xen or KVM? I'm trying to pick-up a virtualization technology to work, which gives the best performance. There are some benchmarks here that I found on the subject: ...
7
votes
3answers
15k views

How to handle relative urls correctly with a reverse proxy

I have a reverse proxy setup as follows in Apache: Server A with address www.example.com/folder is the reverse proxy server. It maps to: Server B with address test.madeupurl.com This kind of ...
11
votes
3answers
29k views

iptables - Target to route packet to specific interface?

My home server has two main interfaces, eth1 (a standard internet connection) and tun0 (an OpenVPN tunnel). I'd like to use iptables to force all packets generated by a local process owned by UID ...
17
votes
5answers
27k views

How to update cURL CA bundle on RedHat?

I am running into issues where the CA bundle that has been bundled with my version of cURL is outdated. curl: (60) SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL ...
10
votes
4answers
16k views

AWS ELB Apache2 503 Service Unavailable: Back-end server is at capacity

We've been running a couple websites off Amazons AWS infrastructure for about two years now and as of about two days ago the webserver started to go down once or twice a day with the only error I can ...
8
votes
1answer
20k views

Server 2012: change desktop background color

On a Windows Server 2012 Remote Desktop Session Host with the Desktop Experience feature enabled and the desktop wallpaper disabled, users wish to configure own color schemes and define an own desktop ...
7
votes
1answer
21k views

Why does WireShark think this frame is a TCP segment of a reassembled PDU

Please find a small pcap file here illustrating my problem. I have a three-way TCP handshake, followed by two FIX logons. (FIX is a protocol used in trading.) The first FIX logon (frame 4) is ...
6
votes
3answers
15k views

vSphere - copy virtual machine to external usb hard drive

We have an ESXi server standing somewhere else. I can connect to the server with the vSphere client. There is an external USB hard drive plugged into the server. How can I copy a stopped VM to the ...
9
votes
5answers
29k views

How can I clear cached domain credentials?

Related: How can I enable domain authentication over wireless in Windows 7/2k8? To test the domain login over wireless connection feature I'm trying to set up in the above question, I need an ...
6
votes
8answers
23k views

ConfigMgr 2012 - How to automatically make updates available to computers without forcing them to be installed?

I'm using System Center Configuration Manager 2012 with the Software Update Point feature; however, in this environment patching has to be strictly manual, because server reboots need to be approved ...
1
vote
2answers
12k views

curl: (35) SSL connect error

Trying to make a curl https request to Twitter API and get this error. I've tried from another server and it works with no problem. Does anyone know the reason for this error? [root@webscoming ...
9
votes
1answer
39k views

What does “net_ratelimit: 44 callbacks suppressed” mean on a linux based router?

I'm trying to tune Snort performance on a Debian based router. I was seeing stuff like: snort packet recv contents failure: No buffer space available So I upped the buffers to 8M and when that ...
4
votes
4answers
21k views

Move files to another directory which are older than a date

I am looking for a solution to move files that are year older from today. My log partition is getting full, but I can not remove them. They are needed for a long long time. Anyway one solution I came ...
9
votes
2answers
10k views

Managing Windows Powershell from Linux terminal

I manage some Windows Server 2012. I'm learning PowerShell to manage this servers through command line. My workstation runs Ubuntu and I connect via ssh to manage Linux servers. There is a way that I ...
3
votes
2answers
32k views

Dell PowerEdge - Add new disk to an existing RAID 5 array

I have a Dell PowerEdge with a RAID 5 array of 3 disks, and I want to add a fourth disk to it to expand the capacity of the volume. I don't want to reinitialize the whole RAID 5, because I want to ...
3
votes
2answers
14k views

What is a minimal useful unattend.xml file for SysPrep on Windows 7

Could you provide a minimal unattend.xml file for use in Windows 7, which will be manually installed, updated and configured on one workstation, then SysPrep will be run like this: ...
19
votes
3answers
27k views

What should the order of DNS servers be for an AD Domain Controller and Why?

This is a Canonical Question about Active Directory DNS Settings. Related: What is Active Directory and how does it work? Assuming an environment with multiple domain controllers ...
3
votes
4answers
19k views

kinit & pam_sss: Cannot find KDC for requested realm while getting initial credentials

I have a very similar problem as described in this thread on CentOS 6.3 authenticating against a 2008R2 AD DC. Here is my krb5.conf, I know for a fact that XXXXXXX.LOCAL is the true domain name: ...
5
votes
3answers
38k views

centos 100% disk full - How to remove log files, history, etc?

mysqld won't start because disk space is full: 101221 14:06:50 [ERROR] /usr/libexec/mysqld: Error writing file '/var/run/mysqld/mysqld.pid' (Errcode: 28) 101221 14:06:50 [ERROR] Can't start server: ...
2
votes
3answers
15k views

'The'account is not authorized to login from this station' error while trying to acccess network share

Clients are getting this error when trying to access network shares on one of our 2008 R2 servers: The account is not authorized to login from this station. The problem started a few weeks ago. ...
16
votes
4answers
33k views

KVM: Which CPU features make VMs run better?

We are using Ubuntu 12.04 with the following parameters: Dell R910 Kernel 3.2.0-25-generic #40-Ubuntu SMP x86_64 x86_64 x86_64 GNU/Linux kvm 1:84+dfsg-0ubuntu16+1.0+noroms+0ubuntu13 qemu-kvm ...
8
votes
3answers
15k views

Nginx fails to stop and nginx.pid is missing

I want to stop Nginx but it fails like this. $ sudo service nginx stop Stopping nginx: [FAILED] And nginx.conf that defines place of nginx.pid have a ...
3
votes
2answers
14k views

DNS on Windows Server 2012 R2

I'm new to Servers and am using Windows Server 2012 R2, after trying to create a AD DC and connect a machine to it, I get the following errors when connecting: "An Active Directory Domain ...
5
votes
4answers
27k views

How to enable all HTTP methods in an Apache HTTP Server

How can I enable the handling of all HTTP methods as defined in RFC 2616 on Apache web server ? These would be: OPTIONS GET HEAD POST PUT DELETE TRACE CONNECT I am using the Apache HTTP Server, ...
4
votes
3answers
23k views

Activating MS Office 2013 Standard via KMS running on the same server

Given: Microsoft Windows Server 2008 R2 Enterprise 64-bit, all the latest security updates applied. KMS service set up and running, all the recommended updates applied (to handle possible activation ...
5
votes
2answers
24k views

How to find all ways in which a Unix user account is locked

I occasionally find myself in a situation where an undermaintained system has an account that's been locked out. The problem is that there are a variety of ways in which an account can be locked out, ...
8
votes
2answers
22k views

Generate an OpenVPN profile for client user to import

Is there any documentation or resource describing how to generate and host a profile for an OpenVPN client to import? Ideally would like my users to not have to separately fetch a .zip file of the ...
14
1
vote
1answer
13k views

keytab auth against samba 4 DC: Client not found in Kerberos database while getting initial credentials

I set up a samba 4 active directory on ubuntu 14.04 following Samba AD DC HOWTO. In principle everything works well but I'm stuck in getting kerberos authentication running using SPNs for web ...
2
votes
1answer
23k views

How to change time source from “Local CMOS Clock” to “DC”

In a domain, I want to set DC as time server. To do that I use this command: w32tm /config /manualpeerlist:europe.pool.ntp.org /syncfromflags:manual /reliable:yes /update and w32tm /resync ...
5
votes
3answers
3k views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...