Greatest Hits

9
votes
2answers
21k views

How do I authenticate with LDAP via the command line?

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues. [root@tst-01 ...
6
votes
1answer
20k views

Why does WireShark think this frame is a TCP segment of a reassembled PDU

Please find a small pcap file here illustrating my problem. I have a three-way TCP handshake, followed by two FIX logons. (FIX is a protocol used in trading.) The first FIX logon (frame 4) is ...
10
votes
3answers
28k views

iptables - Target to route packet to specific interface?

My home server has two main interfaces, eth1 (a standard internet connection) and tun0 (an OpenVPN tunnel). I'd like to use iptables to force all packets generated by a local process owned by UID ...
4
votes
1answer
38k views

Two network interfaces and two IP addresses on the same subnet in Linux

I recently ran into a situation where I needed two IP addresses on the same subnet assigned to one Linux host so that we could run two SSL/TLS sites. My first approach was to use IP aliasing, e.g. ...
7
votes
4answers
8k views

Failed tls handshake. Does not contain any IP SANs

I'm trying to set up logstash forwarder, but I have issues with making a proper secure channel. Trying to configure this with two ubuntu (server 14.04) machines running in virtualbox. They are 100% ...
6
votes
3answers
31k views

What's eating my drive space when normal files + hidden + system doesn't equal total drive space used

This is very strange. All directory sizes are normal, and all other folders are within 20GB of what they should be. The discrepancy is that I can’t locate the files that are consuming 150GB of ...
9
votes
2answers
9k views

Managing Windows Powershell from Linux terminal

I manage some Windows Server 2012. I'm learning PowerShell to manage this servers through command line. My workstation runs Ubuntu and I connect via ssh to manage Linux servers. There is a way that I ...
3
votes
3answers
15k views

How To Properly Setup DNS Forwarders On Windows Server

I was wondering how to properly setup DNS forwarders on Windows Server 2008 R2. I have three Domain Controllers. Each of the DC's have have following: AD Role DNS Role DHCP Role Static IP Address ...
8
votes
1answer
38k views

What does “net_ratelimit: 44 callbacks suppressed” mean on a linux based router?

I'm trying to tune Snort performance on a Debian based router. I was seeing stuff like: snort packet recv contents failure: No buffer space available So I upped the buffers to 8M and when that ...
3
votes
1answer
15k views

Changing the default gateway, multiple NICs

I have Ubuntu 13.10 (kernel 3.11.0-19-generic). On startup, the network configurations are as follows: dor@ubuntu:~$ sudo ifconfig -a em1 Link encap:Ethernet HWaddr 44:37:e6:4c:ca:0a ...
6
votes
3answers
33k views

User in domain admin group cannot access directory the group has permission to access

I've run into a rather interesting issue when playing with one of my domain labs. There's a directory on a 2008 R2 fileserver that's being used for folder redirection for all users in the "Staff" OU. ...
12
votes
2answers
13k views

How can I override CMD when running a docker image?

I want to inspect a docker image created by someone else with both an entrypoint and cmd specified, for example: ENTRYPOINT ["/usr/sbin/apache2ctl"] CMD ["-D", "FOREGROUND"] I currently do: docker ...
8
11
votes
6answers
28k views

Delete a iptables chain with its all rules

I have a chain appended with many rules like: > :i_XXXXX_i - [0:0] > -A INPUT -s 282.202.203.83/32 -j i_XXXXX_i > -A INPUT -s 222.202.62.253/32 -j i_XXXXX_i > -A INPUT -s ...
6
votes
7answers
37k views

What is a good DHCP lease timeout configuration

I have generally seen that DHCP lease times are quite long (a day plus) on most defaults. I have a client that seems to have the following problem. They have a DHCP server in a router that is ...
16
8
votes
1answer
19k views

Server 2012: change desktop background color

On a Windows Server 2012 Remote Desktop Session Host with the Desktop Experience feature enabled and the desktop wallpaper disabled, users wish to configure own color schemes and define an own desktop ...
8
votes
3answers
9k views

Increase PHP-FPM's max upload/post size

I'm running php5-fpm under Nginx on Ubuntu 14.04. I want to increase the max upload size. I have edited my /etc/php5/fpm/php.ini to have the following lines defined as below: upload_max_filesize = ...
17
votes
5answers
25k views

How to update cURL CA bundle on RedHat?

I am running into issues where the CA bundle that has been bundled with my version of cURL is outdated. curl: (60) SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL ...
16
votes
4answers
31k views

KVM: Which CPU features make VMs run better?

We are using Ubuntu 12.04 with the following parameters: Dell R910 Kernel 3.2.0-25-generic #40-Ubuntu SMP x86_64 x86_64 x86_64 GNU/Linux kvm 1:84+dfsg-0ubuntu16+1.0+noroms+0ubuntu13 qemu-kvm ...
7
votes
2answers
7k views

Intermittently high ping times to router via Wi-Fi

On my local network there are (among others) 5 machines (running Debian Jessie or Arch) wirelessly connected to a Netgear WNDR4000 router. Below is a graph of the ping times to the router from each of ...
2
votes
3answers
14k views

'The'account is not authorized to login from this station' error while trying to acccess network share

Clients are getting this error when trying to access network shares on one of our 2008 R2 servers: The account is not authorized to login from this station. The problem started a few weeks ago. ...
28
votes
4answers
24k views

How to set environment variable in systemd service?

I have an Arch Linux system with systemd and I've created my own service. The configuration service at /etc/systemd/system/myservice.service looks like this: [Unit] Description=My Daemon [Service] ...
3
votes
4answers
18k views

kinit & pam_sss: Cannot find KDC for requested realm while getting initial credentials

I have a very similar problem as described in this thread on CentOS 6.3 authenticating against a 2008R2 AD DC. Here is my krb5.conf, I know for a fact that XXXXXXX.LOCAL is the true domain name: ...
3
votes
2answers
13k views

What is a minimal useful unattend.xml file for SysPrep on Windows 7

Could you provide a minimal unattend.xml file for use in Windows 7, which will be manually installed, updated and configured on one workstation, then SysPrep will be run like this: ...
16
votes
6answers
4k views

Nginx rewrite rule to replace querystring question mark with underscore

In order to mirror a whole website as static HTML, I would like to convert URLs like http://example.com/script.php?t=12 to http://example.com/script.php_t=12. Notice ? in URL is being is being ...
5
2
votes
2answers
30k views

Dell PowerEdge - Add new disk to an existing RAID 5 array

I have a Dell PowerEdge with a RAID 5 array of 3 disks, and I want to add a fourth disk to it to expand the capacity of the volume. I don't want to reinitialize the whole RAID 5, because I want to ...
6
votes
8answers
22k views

ConfigMgr 2012 - How to automatically make updates available to computers without forcing them to be installed?

I'm using System Center Configuration Manager 2012 with the Software Update Point feature; however, in this environment patching has to be strictly manual, because server reboots need to be approved ...
6
votes
2answers
18k views

How to troubleshoot connectivity when curl gets an *empty response*

I want to know how to proceed in troubleshooting why a curl request to a webserver doesn't work. I'm not looking for help that would be dependent upon my environment, I just want to know how to ...
9
4
votes
3answers
22k views

Activating MS Office 2013 Standard via KMS running on the same server

Given: Microsoft Windows Server 2008 R2 Enterprise 64-bit, all the latest security updates applied. KMS service set up and running, all the recommended updates applied (to handle possible activation ...
44
votes
3answers
9k views

Isn't Ctrl-Alt-Delete on Linux *really* dangerous?

Is the default Ctrl-Alt-Delete shutdown -r functionality on Linux systems a dangerous feature? Years ago, when I deployed physical systems with attached keyboards and monitors, I'd sometimes modify ...
5
votes
4answers
26k views

How to enable all HTTP methods in an Apache HTTP Server

How can I enable the handling of all HTTP methods as defined in RFC 2616 on Apache web server ? These would be: OPTIONS GET HEAD POST PUT DELETE TRACE CONNECT I am using the Apache HTTP Server, ...
6
votes
3answers
14k views

vSphere - copy virtual machine to external usb hard drive

We have an ESXi server standing somewhere else. I can connect to the server with the vSphere client. There is an external USB hard drive plugged into the server. How can I copy a stopped VM to the ...
9
votes
5answers
27k views

How can I clear cached domain credentials?

Related: How can I enable domain authentication over wireless in Windows 7/2k8? To test the domain login over wireless connection feature I'm trying to set up in the above question, I need an ...
2
votes
2answers
5k views

an active directory domain controller could not be contacted

After creating an active directory domain controller i tried to add client computers to the domain i kept hitting a snag. The following error occurred when DNS was queried for the service location ...
4
votes
3answers
27k views

How to investigate unexpected Linux server shut down?

In a new Xeon 55XX server with 4xSSD at raid 10 with Debian 6, I have experienced 2 random shut downs within two weeks after the server being built. Looking at bandwidth logs before shut down does not ...
2
votes
1answer
7k views

Nginx error: “Primary script unknown” while reading response header from upstream

I have installed Nginx 1.6.2 with PHP-FPM (PHP 5.5.18) under CentOS 6.6 server. I didn't touch nothing else but /etc/nginx/conf.d/default.conf file where I made some changes (see below): server { ...
8
votes
2answers
21k views

Generate an OpenVPN profile for client user to import

Is there any documentation or resource describing how to generate and host a profile for an OpenVPN client to import? Ideally would like my users to not have to separately fetch a .zip file of the ...
14
8
votes
1answer
12k views

dhclient: What does “RTNETLINK answers: File exists” Mean?

I wanted to update the DHCP lease of an Amazon EC2 instance, so I executed the following command: user@host:~$ sudo dhclient Following that, the system's DHCP lease is updated successfully updated. ...
1
vote
2answers
11k views

curl: (35) SSL connect error

Trying to make a curl https request to Twitter API and get this error. I've tried from another server and it works with no problem. Does anyone know the reason for this error? [root@webscoming ...
19
votes
3answers
25k views

What should the order of DNS servers be for an AD Domain Controller and Why?

This is a Canonical Question about Active Directory DNS Settings. Related: What is Active Directory and how does it work? Assuming an environment with multiple domain controllers ...
5
votes
2answers
23k views

How to find all ways in which a Unix user account is locked

I occasionally find myself in a situation where an undermaintained system has an account that's been locked out. The problem is that there are a variety of ways in which an account can be locked out, ...
2
votes
2answers
12k views

kinit: Cannot contact any KDC for realm 'UBUNTU' while getting initial credentials

I am installing Kerberos5-1.12.1 on ubuntu machine by following the link: http://techpubs.spinlocksolutions.com/dklar/kerberos.html#krb-install Whenever i am trying to do : kinit user1 I am ...
4
votes
3answers
19k views

Move files to another directory which are older than a date

I am looking for a solution to move files that are year older from today. My log partition is getting full, but I can not remove them. They are needed for a long long time. Anyway one solution I came ...
5
votes
3answers
36k views

centos 100% disk full - How to remove log files, history, etc?

mysqld won't start because disk space is full: 101221 14:06:50 [ERROR] /usr/libexec/mysqld: Error writing file '/var/run/mysqld/mysqld.pid' (Errcode: 28) 101221 14:06:50 [ERROR] Can't start server: ...
7
votes
3answers
10k views

Why does Android Chrome say my site's security certificate is not trusted?

My site is https://blendbee.com. It's using a PositiveSSL certificate that is valid. In Windows 8 Chrome the certificate is fine (green lock in top left corner). But...on my Android, it's not so ...
6
votes
5answers
30k views

How can I manually run a nagios check from the command line?

When defining and testing new services in nagios I have been restarting nagios, then clicking the service, and rescheduling a check for as soon as possible, then waiting until the check happens. Is ...
4
votes
4answers
20k views

Hyper-V Time Sync for VM Domain Controller

We have 2 physical hyper-V servers running 8 VMs between them, each physical server has a Domain controller on it running in a VM and all servers are 2008R2 The VM PDC is set to NTP and to sync with ...
0
votes
3answers
11k views

Postfix: “Connection timed out” on all outbound email

I've been attempting to setup mailing lists with GNU Mailman but it's been a complete disaster with tons of road blocks. Postfix is able to receive email but not send it back out at all, I've peeked ...
1
vote
1answer
12k views

keytab auth against samba 4 DC: Client not found in Kerberos database while getting initial credentials

I set up a samba 4 active directory on ubuntu 14.04 following Samba AD DC HOWTO. In principle everything works well but I'm stuck in getting kerberos authentication running using SPNs for web ...
5
votes
1answer
27k views

How to execute datapump commands as sysdba from remote machine

I would like to know the syntax to call datapump commands (expdp/impdp) logged as 'sys as sysdba' from a remote machine. I know that when logged on the machine which runs the database, I can use : ...
18
votes
6answers
15k views

2008 R2 Terminal Server: “Insufficient system resources exist to complete the requested service”

I'm working with a Windows 2008 R2 Terminal Server configured in a vSphere environment. It currently has 4 vCPUs and 32GB RAM. No overcommitment. The concurrent user count on this server has risen ...