12
votes
0answers
520 views

Check that a given user has a given privilege

Given a pair of a user and a privilege I need to determine if a user has the privilege on the server. The following is true in my setup: The server is a part of a domain but not a domain controller ...
10
votes
0answers
4k views

kworker consuming +90% IO and zero disk write

this is a standard apache web server on AWS Linux AMI + EBS. We are noticing high load average (+8) and iotop -a shows: Total DISK READ: 0.00 B/s | Total DISK WRITE: 2.37 M/s TID PRIO USER ...
10
votes
0answers
3k views

IIS 7.5 - Disable Overlapped Recycle property not being obeyed when web.config is updated

I have a site which holds an exclusive lock on some resources. I used the .NET Application_Start and Application_End events to aquire and release the lock on these resources at the appropriate time. ...
10
votes
0answers
7k views

OpenSSL: how to setup an OCSP server for checking third-party certificates?

I am testing the Certificate Revocation functionality of a CMTS device. This requires me to setup a OCSP responder. Since it will only be used for testing I assume that the minimal implementation ...
9
votes
0answers
503 views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
9
votes
0answers
1k views

Import Powershell AD Module during MDT Task Sequence

I have written this short powershell script to rename a computer as part of an MDT task sequence: Import-Module ActiveDirectory $AdminUsername = 'domain.com\administrator' $AdminPassword = ...
9
votes
0answers
568 views

Highly-available, Web-accessible and scalable deployment of statsd and graphite

I'd like to setup statsd/graphite so that I can log JS apps running on HTML devices (ie. not in a contained LAN environment, and possibly with a large volume of incoming data that I don't directly ...
8
votes
0answers
213 views

Best Foundation for Mesos Deployment

We are currently in the process of designing the architecture of our new Apache Mesos cloud setup. The goal is to unify our systems by moving different stacks onto the same architecture. The main ...
8
votes
0answers
789 views

Determining LTO Cleaning Tape Expiration?

I have some LTO tape drives, and use cleaning tapes as required, but the lifetime of the cleaning tapes is not as predictable as I would have expected. I'm looking for a way to query the system, ...
8
votes
0answers
505 views

How to persist credentials in a remote Powershell session?

I have an Azure File Share and would like to use this from my Azure VMs - after persisting the credentials on the VMs with cmdkey and mounting with net use. This was tested by running these commands ...
8
votes
0answers
398 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
8
votes
0answers
164 views

apparmor: same profile for multiple apps

so I have: #include <tunables/global> /usr/bin/python2.7 { /** mixrw, deny /** lwk, } /usr/lib/jvm/java-6-openjdk/jre/bin/java { /** mixrw, deny /** lwk, } ...
7
votes
0answers
126 views

How come one of my switches is off by two minutes in spite of ntp?

I just noticed by pure chance that one of my Cisco 4500 switches has its clock going wrong: it is more than 2 minutes behind in spite of seemingly functional ntp. In my opinion, even a single second ...
7
votes
0answers
97 views

How can you gracefully restart Apache without disconnecting SSL connections?

We are trying to reload Apache gracefully using a command such as: apache2ctl -k graceful This works as expected for HTTP users and the Apache config is reloaded without affecting users of the ...
7
votes
0answers
108 views

Q: MDADM mismatch_cnt > 0. Any way to identify which blocks are in disagreement?

Okay. After a routine scrub, my MDADM RAID5 is reporting mismatch_cnt = 16. As I understand, this means that while no device reported a read error, there are 16 blocks for which the data and parity ...
7
votes
0answers
258 views

How to automate zabbix web scenarios for vhosts?

I'm new to Zabbix and enterprise monitoring. I've just finished installing Zabbix 2.4. I'm trying to monitor the state of all our vhosts dislocated on different servers. Until now the only solution ...
7
votes
0answers
366 views

AD custom attribute of type numerical string crashes MMC when updated

I am using windows server 2008. I have a domain with one domain controller (this is a dev environment). I edited the AD schema and created a custom attribute called TestAttribute2 (the LDAP name is ...
7
votes
0answers
801 views

OSX SL Server CalDav/DirectoryServices Authentication Error

I have a OSX SL Server (Version 10.6.8) that has been in production with about 40 users for approximately a year now. Since day one I have had problems where occasionally a users iCal client throws ...
7
votes
0answers
603 views

Export GFI MailArchiver e-mails for import into Exchange 2010 SP1 Personal Archiving

We have an existing installation of GFI MailArchiver 5 with several databases of archives (perhaps 100-150GB). The goal is to export each user's archived e-mail and then import it into Exchange 2010 ...
6
votes
0answers
57 views

Windows Event Forwarding (WEF) Large Scale Environment

We currently use Nxlog on all of our DCs and send that data to a central syslog-ng server. Due to dealing with the agent on each computer and the need for additional agents that only support reading ...
6
votes
0answers
96 views

SFTP server: better to use SSH internal sftp subsystem or ProFTPD plugin?

I've been tasked to install a new SFTP server. Per-se, this is a very simple operation: simply using the internal-sftp role of the ubiquitous SSH service (with chrooting) is sufficient to have a ...
6
votes
0answers
60 views

Why does tmux bind externally accessible ports?

I am performing a quick audit of services listening on external interfaces on a Ubuntu 14.04 machine, and tmux is binding TCP *:50994 and *:59147 as reported by netstat -l. I can connect to this port ...
6
votes
0answers
332 views

CentOS7 firewalld no zones

I have installed firewalld on a fresh CentOS 7 minnimal installation on a VPS (weirdly enough, from what I've been searching firewalld should already be installed with system). I tried opening some ...
6
votes
0answers
491 views

nginx - connect() failed upstream under load testing

I've been doing some load testing with wrk of my nginx reverse proxy -> my web app setup and I noticed that when I get to 1000+ concurrent connections, nginx starts returning 502s and the following ...
6
votes
0answers
119 views

Configure Juniper M320 as Ethernet/STM transparent converter

There is Juniper M320. We need to move ALL the traffic from one port to another. Everything that comes to one port goes to another and vice versa. No snooping or any other processing is required. One ...
6
votes
0answers
2k views

The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

Just set up a website (Apache/Centos) with SSL where the free cert came from startssl. I've used startssl before, and never had any problems. I have no problems accessing the site from IE and ...
6
votes
0answers
816 views

Unable to bind OSX 10.9 to Active Directory 2008

I am struggling to bind OSX 10.9 to a 2008 r2 Active Directory. I can join the domain fine when I boot into Windows from the same machine. From OSX I can find the domain controller successfully and ...
6
votes
0answers
840 views

Failing to mount root from ramdisk while PXE boot

I have a working TFTP/DHCP PXE boot environment where I've already booted some images successful. Now I built an CentOS 6.5 diskless image and this one is failing booting with the following error: No ...
6
votes
0answers
2k views

Jenkins Linux Slave error: SEVERE: I/O error in channel channel

I am getting this error on all Linux servers try to start a Slave. The version isJenkins ver. 1.532.1. I didn't have this problem when I have another installation with Jenkins ver. 1.509.4. I've read ...
6
votes
0answers
2k views

Using SAML authentication within nginx

I want to restrict access to some static content, served using nginx, using an existing SAML 2.0 IdP. (In Apache, this would be done with a module such as mod_mellon or mod_auth_saml) What is the ...
6
votes
0answers
4k views

Linux samba server: cifs_mount failed w/return code = -12

Server: RHEL 5.9 / smbd 3.0.33 - Clients: various, though all were using current mount.cifs (5.2) I already solved this problem, but it was such a nightmare to hunt down these error codes I felt like ...
6
votes
0answers
1k views

Incorrect deployment of WSGI app to AWS using Elastic Beanstalk

cross-link to AWS forums I have developed a simple Python web service using WSGI and would like to deploy it to AWS cloud using Elastic Beanstalk. My problem is I cannot make all the options I ...
6
votes
0answers
297 views

Rails with phusion passenger and wordpress

We had a site developed using on ruby on rails. It had Website Web services for mobile app Admin panel to manage data. We started using wordpress to manage site content. We have finished ...
6
votes
0answers
1k views

“Error: Unknown error” when trying to start virtual machine from VMware server

Problem We are running VMware Server 2.0.0 build-116503 on a Ubuntu 10.04 LTS server. There is a virtual machine installed, running Lotus Domino on Windows Server 2003. Ever since a sudden power ...
6
votes
0answers
606 views

IIS 6.0 SSL handshake error

Hi all I installed a trusted certificate in an IIS 6.0 server. I have the port 443 opened in the firewall and I verified the server is listening on that port. However when verifying using openssl I ...
6
votes
0answers
7k views

How to use IIS URL Rewrite with gzip compression

I've been trying to create outbound rules in IIS 7.5 on Windows 2008 R2 on a site that has static HTML pages and compression enabled. If I have any form of compression enabled (static or dynamic) I ...
5
votes
0answers
51 views

How to make a disconnected drive?

kind of a weird question but how do I make a drive go from a OK state to disconnected state using net use? I do not want to delete it. I am testing a script but the annoying thing is that to test the ...
5
votes
0answers
122 views

How to enable 2-factor auth using Google Authenticator for .ovpn file based openVPN access?

I have an openVPN setup where the users do not have shell accounts on the Debian VM running openVPN. The articles I found while Googling all have instructions of setting up Google Authenticator for a ...
5
votes
0answers
3k views

How to disable perf subsystem in Linux kernel?

I'm running some benchmarks. My benchmark runner monitors the dmesg buffer between experiments, looking for anything which could impact performance. Today it threw this up: [2015-08-17 10:20:14 ...
5
votes
0answers
3k views

nginx recv() failed (104: Connection reset by peer) while reading response header from upstream

I have recently upgrade my magento from 1.5 to 1.9 and when ever I add a certain product to basket, I started to receive this error: 502 Bad Gateway There were no log entries in the var/log/ folder: ...
5
votes
0answers
919 views

How to “bounce” or proxy XMPP accounts?

I think I'm looking for an XMPP bouncer. But XMPP federation is a confusing thing for someone who's never dug into it before, so I'm having trouble evaluating solutions or even searching for the right ...
5
votes
0answers
118 views

Windows Servers on ESXi 100% CPU at year rollover

We have a number of Windows Server 2008 R2 SP1 servers running on ESXi servers. At year end rollover 2014 to 2015 the CPUs go to 100% and the machines hang. The solution appears to be a hotfix ...
5
votes
0answers
112 views

Setting up IPv6 ACLs on 3com 5500g to block Router Advertisment messages

Is there a way to set up IPv6 ACLs on 3com 5500g switch to block RA traffic on access ports? I couldn't find settings for setting up any IPv6 ACL. Acording to guides, there should be ipv6 specific ...
5
votes
0answers
2k views

teaming with nmcli: bringing connection down and up again fails

On a centos 7 virtual box, I create a team like this: nmcli connection add type team con-name team0 ifname veteam0 nmcli connection modify team0 team.config roundrobin.conf [root@rhce1 ~]# cat ...
5
votes
0answers
732 views

How can I prevent Outlook 2007 and 2010 from disabling particular add-ins automatically?

Right now, we've got a business critical application that installs an Outlook add-in. It is a bit slow to load, which makes Outlook 2013 kill it after a few runs, but I've mitigated the issue of ...
5
votes
0answers
2k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
5
votes
0answers
131 views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
5
votes
0answers
480 views

IIS 8.5 forces incorrect Content-Length header

We have a application that generates PDF files dynamically and forces a download of a the file. This code was working without issue on a Windows Server 2008. From what I can tell it appears that IIS ...
5
votes
0answers
2k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
5
votes
0answers
432 views

Using ZFS head node as database server?

I'm using a dual-head ZFS-backed NAS for high availability cluster shared storage, based on Nexenta's recommended architecture as seen here: The disks in 1 JBOD will store the database files for a ...

15 30 50 per page