13
votes
0answers
559 views

Server 2012R2 DNS server returning SERVFAIL for some AAAA queries

(Rewriting most of this question since a lot of my original tests are irrelevant in light of new information) I'm having issues with Server 2012R2 DNS servers. The biggest side effect of these ...
10
votes
0answers
265 views

How to use Chrome's CRL sets (or some master CRL list) as a CRL file?

I am looking for a master CRL list. The closest thing I have found is the Chromium project's CRLSets. I used crlset-tools to get the crlset (crlset fetch > crl-set) and then dumped the serial ...
8
votes
0answers
210 views
+50

Abnormally high Outlook 2010 RAM usage for one Terminal Server user (RDS)

I'm working on a busy Windows 2008R2 Terminal Server where a particular user's Outlook session consumes between 2GB and 4GB of RAM. The process doesn't appear to be a slow memory leak, as the RAM is ...
8
votes
0answers
238 views

How do you use systemd's journalctl patterns

I am trying to use journalctl's pattern matching on SYSLOG_IDENTIFIERS. As an example, I have a ton of message tagged sshd: $ journalctl -t sshd | wc -l 987 but if I try to use pattern matching to ...
8
votes
0answers
2k views

IIS 7.5 - Disable Overlapped Recycle property not being obeyed when web.config is updated

I have a site which holds an exclusive lock on some resources. I used the .NET Application_Start and Application_End events to aquire and release the lock on these resources at the appropriate time. ...
8
votes
0answers
524 views

Highly-available, Web-accessible and scalable deployment of statsd and graphite

I'd like to setup statsd/graphite so that I can log JS apps running on HTML devices (ie. not in a contained LAN environment, and possibly with a large volume of incoming data that I don't directly ...
7
votes
0answers
171 views

Vmware - Consolidation is needed, but I want to revert

Last night I took a snapshot of a VM before adding a new disk and running an offline defrag of Exchange (using the newly added disk as the temporary path). When I woke up today the server was ...
7
votes
0answers
435 views

Determining LTO Cleaning Tape Expiration?

I have some LTO tape drives, and use cleaning tapes as required, but the lifetime of the cleaning tapes is not as predictable as I would have expected. I'm looking for a way to query the system, ...
7
votes
0answers
420 views

HAProxy switch to backup on 500 errors and/or server down

I'm setting up an HAProxy in front of only 2 backend servers, with a particular configuration: any request should go to server A; but, if server A returns a 5xx error code, all request should go to a ...
7
votes
0answers
1k views

Import Powershell AD Module during MDT Task Sequence

I have written this short powershell script to rename a computer as part of an MDT task sequence: Import-Module ActiveDirectory $AdminUsername = 'domain.com\administrator' $AdminPassword = ...
7
votes
0answers
352 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
7
votes
0answers
278 views

Check that a given user has a given privilege

Given a pair of a user and a privilege I need to determine if a user has the privilege on the server. The following is true in my setup: The server is a part of a domain but not a domain controller ...
7
votes
0answers
452 views

how to configure IIS 7 so partial content requets/range requests on mp4 static files work.

I need help on how to setup IIS 7 so it can handle partial requests/range requests for serving mp4 files so Chrome can position seek and loop video. From what I have read IIS is supposed to support ...
6
votes
0answers
303 views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
6
votes
0answers
168 views

Best Foundation for Mesos Deployment

We are currently in the process of designing the architecture of our new Apache Mesos cloud setup. The goal is to unify our systems by moving different stacks onto the same architecture. The main ...
6
votes
0answers
803 views

Amazon ECS (Docker): binding container to specific IP address

I'm playing with Amazon ECS (a repackaging of Docker) and I'm finding there's one Docker capability that ECS does not seem to provide. Namely, I would like to have multiple containers running in an ...
6
votes
0answers
3k views

kworker consuming +90% IO and zero disk write

this is a standard apache web server on AWS Linux AMI + EBS. We are noticing high load average (+8) and iotop -a shows: Total DISK READ: 0.00 B/s | Total DISK WRITE: 2.37 M/s TID PRIO USER ...
6
votes
0answers
2k views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
6
votes
0answers
745 views

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
6
votes
0answers
750 views

Failing to mount root from ramdisk while PXE boot

I have a working TFTP/DHCP PXE boot environment where I've already booted some images successful. Now I built an CentOS 6.5 diskless image and this one is failing booting with the following error: No ...
6
votes
0answers
381 views

Unable to launch MSI installers off NFS share

I have a Linux server where I've configured a read only NFS share. The client I'm currently working on is a Windows Server 2008 R2 machine that has the NFS features installed. I'm able to open and ...
6
votes
0answers
4k views

Linux samba server: cifs_mount failed w/return code = -12

Server: RHEL 5.9 / smbd 3.0.33 - Clients: various, though all were using current mount.cifs (5.2) I already solved this problem, but it was such a nightmare to hunt down these error codes I felt like ...
6
votes
0answers
1k views

Incorrect deployment of WSGI app to AWS using Elastic Beanstalk

cross-link to AWS forums I have developed a simple Python web service using WSGI and would like to deploy it to AWS cloud using Elastic Beanstalk. My problem is I cannot make all the options I ...
6
votes
0answers
344 views

AD custom attribute of type numerical string crashes MMC when updated

I am using windows server 2008. I have a domain with one domain controller (this is a dev environment). I edited the AD schema and created a custom attribute called TestAttribute2 (the LDAP name is ...
6
votes
0answers
271 views

Rails with phusion passenger and wordpress

We had a site developed using on ruby on rails. It had Website Web services for mobile app Admin panel to manage data. We started using wordpress to manage site content. We have finished ...
6
votes
0answers
795 views

Forwarding traffic from TUN device (C++ backend) to the default gateway

The following problem is just a piece of the bigger solution I have a problem with. All other elements seem working so far, so I'll try to describe very small piece which I have problem with. I've ...
6
votes
0answers
1k views

“Error: Unknown error” when trying to start virtual machine from VMware server

Problem We are running VMware Server 2.0.0 build-116503 on a Ubuntu 10.04 LTS server. There is a virtual machine installed, running Lotus Domino on Windows Server 2003. Ever since a sudden power ...
6
votes
0answers
159 views

apparmor: same profile for multiple apps

so I have: #include <tunables/global> /usr/bin/python2.7 { /** mixrw, deny /** lwk, } /usr/lib/jvm/java-6-openjdk/jre/bin/java { /** mixrw, deny /** lwk, } ...
6
votes
0answers
763 views

OSX SL Server CalDav/DirectoryServices Authentication Error

I have a OSX SL Server (Version 10.6.8) that has been in production with about 40 users for approximately a year now. Since day one I have had problems where occasionally a users iCal client throws ...
6
votes
0answers
587 views

IIS 6.0 SSL handshake error

Hi all I installed a trusted certificate in an IIS 6.0 server. I have the port 443 opened in the firewall and I verified the server is listening on that port. However when verifying using openssl I ...
6
votes
0answers
562 views

Export GFI MailArchiver e-mails for import into Exchange 2010 SP1 Personal Archiving

We have an existing installation of GFI MailArchiver 5 with several databases of archives (perhaps 100-150GB). The goal is to export each user's archived e-mail and then import it into Exchange 2010 ...
5
votes
0answers
40 views

keepalived master cannot reclaim virtual IP after recovered

Steps Start both master and slave Keep pinging virtual ip (i.e 192.168.10.100) Shutdown master Slave enters MASTER state Restart master Slave enters BACKUP state and Master enters MASTER state ...
5
votes
0answers
702 views

Why doesn't ansible have an archive module?

Googling for Ansible create tar doesn't yield any good results and while there is an unarchive module, there's no archive module. I'll probably solve it with the command module, but being new in ...
5
votes
0answers
76 views

Q: MDADM mismatch_cnt > 0. Any way to identify which blocks are in disagreement?

Okay. After a routine scrub, my MDADM RAID5 is reporting mismatch_cnt = 16. As I understand, this means that while no device reported a read error, there are 16 blocks for which the data and parity ...
5
votes
0answers
190 views

How to automate zabbix web scenarios for vhosts?

I'm new to Zabbix and enterprise monitoring. I've just finished installing Zabbix 2.4. I'm trying to monitor the state of all our vhosts dislocated on different servers. Until now the only solution ...
5
votes
0answers
796 views

How can the x-frame-options HTTP header of ADFS 3 be manipulated?

By default, ADFS 3 responses contain the "X-Frame-Options: DENY" HTTP header. This prevents ADFS from being run in an iframe, because this presents an opportunity for clickjacking attacks. At the ...
5
votes
0answers
219 views

CentOS7 firewalld no zones

I have installed firewalld on fresh CentOS 7 minnimal installation on a VPS (weirdly enough, from what I've been searching firewalld should already be installed with system). I tried opening some ...
5
votes
0answers
749 views

How to “bounce” or proxy XMPP accounts?

I think I'm looking for an XMPP bouncer. But XMPP federation is a confusing thing for someone who's never dug into it before, so I'm having trouble evaluating solutions or even searching for the right ...
5
votes
0answers
105 views

Setting up IPv6 ACLs on 3com 5500g to block Router Advertisment messages

Is there a way to set up IPv6 ACLs on 3com 5500g switch to block RA traffic on access ports? I couldn't find settings for setting up any IPv6 ACL. Acording to guides, there should be ipv6 specific ...
5
votes
0answers
2k views

teaming with nmcli: bringing connection down and up again fails

On a centos 7 virtual box, I create a team like this: nmcli connection add type team con-name team0 ifname veteam0 nmcli connection modify team0 team.config roundrobin.conf [root@rhce1 ~]# cat ...
5
votes
0answers
2k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
5
votes
0answers
114 views

Configure Juniper M320 as Ethernet/STM transparent converter

There is Juniper M320. We need to move ALL the traffic from one port to another. Everything that comes to one port goes to another and vice versa. No snooping or any other processing is required. One ...
5
votes
0answers
2k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
5
votes
0answers
379 views

Using ZFS head node as database server?

I'm using a dual-head ZFS-backed NAS for high availability cluster shared storage, based on Nexenta's recommended architecture as seen here: The disks in 1 JBOD will store the database files for a ...
5
votes
0answers
21k views

Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
5
votes
0answers
2k views

Jenkins Linux Slave error: SEVERE: I/O error in channel channel

I am getting this error on all Linux servers try to start a Slave. The version isJenkins ver. 1.532.1. I didn't have this problem when I have another installation with Jenkins ver. 1.509.4. I've read ...
5
votes
0answers
946 views

SCCM Reporting - “Report Builder click-once application does not exist on the report server”

I (and my manager) would like to be able to create custom reports in SCCM 2012 SP1 through the Configuration Manager Administrative Console from the comfort of our workstations. Unfortunately, if you ...
5
votes
0answers
444 views

Risks of setting noCompressionForHttp10 and noCompressionForProxies to false

We recently switched to Amazon Cloudfront for static content. It seems that Cloudfront does HTTP 1.0 requests to the origin server (IIS 7.0) using the Via header. By default IIS 7.0 disables file ...
5
votes
0answers
1k views

Analyzing BSOD dump file from Windows 2008 R2 SP1

I have a problem with a virtual Windows Server 2008 R2 SP1 server running withing VMWare. The server is running Citrix and also has Symantec Endpoint protection installed. It randomly crashes and goes ...
5
votes
0answers
2k views

Why does Nginx's proxy_intercept_errors directive require a rewrite to work properly?

Following is a sample Nginx server configuration. Without the "magical talisman" location block, proxied error content results in an Nginx 404 page rather than the customized error page being served. ...

15 30 50 per page