5
votes
0answers
110 views

BackupPC using rsync fails with “protocol version mismatch — is your shell clean?”

I just installed BackupPC in a Debian box to use it as backup server. As you know, this software makes use, among others, of rsync. When using the rsync option, it fails. Server: Debian Jessie. ...
5
votes
0answers
173 views

How to enable 2-factor auth using Google Authenticator for .ovpn file based openVPN access?

I have an openVPN setup where the users do not have shell accounts on the Debian VM running openVPN. The articles I found while Googling all have instructions of setting up Google Authenticator for a ...
5
votes
0answers
296 views

How does yum with Red Hat Network Subscription work inside the rhel Docker images?

Red Hat Enterprise Linux 7 includes official support for running Docker containers, and Red Hat offer a set of official rhel Docker images. An interesting feature of these images is that packages can ...
5
votes
0answers
3k views

nginx recv() failed (104: Connection reset by peer) while reading response header from upstream

I have recently upgrade my magento from 1.5 to 1.9 and when ever I add a certain product to basket, I started to receive this error: 502 Bad Gateway There were no log entries in the var/log/ folder: ...
5
votes
0answers
1k views

How to “bounce” or proxy XMPP accounts?

I think I'm looking for an XMPP bouncer. But XMPP federation is a confusing thing for someone who's never dug into it before, so I'm having trouble evaluating solutions or even searching for the right ...
5
votes
0answers
123 views

Windows Servers on ESXi 100% CPU at year rollover

We have a number of Windows Server 2008 R2 SP1 servers running on ESXi servers. At year end rollover 2014 to 2015 the CPUs go to 100% and the machines hang. The solution appears to be a hotfix (...
5
votes
0answers
117 views

Setting up IPv6 ACLs on 3com 5500g to block Router Advertisment messages

Is there a way to set up IPv6 ACLs on 3com 5500g switch to block RA traffic on access ports? I couldn't find settings for setting up any IPv6 ACL. Acording to guides, there should be ipv6 specific ...
5
votes
0answers
2k views

teaming with nmcli: bringing connection down and up again fails

On a centos 7 virtual box, I create a team like this: nmcli connection add type team con-name team0 ifname veteam0 nmcli connection modify team0 team.config roundrobin.conf [root@rhce1 ~]# cat ...
5
votes
0answers
804 views

How can I prevent Outlook 2007 and 2010 from disabling particular add-ins automatically?

Right now, we've got a business critical application that installs an Outlook add-in. It is a bit slow to load, which makes Outlook 2013 kill it after a few runs, but I've mitigated the issue of ...
5
votes
0answers
2k views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
5
votes
0answers
164 views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
5
votes
0answers
2k views

Fail2Ban Correctly Attempts to Ban IP but IP does not get banned - iptables chain exists but not working

Running on Ubuntu 14.04 Server. So I have fail2ban correctly configured to process /var/log/auth.log for SSH login attempts. Upon 3 failed attempts I see this in the fail2ban log: 2014-11-19 15:...
5
votes
0answers
512 views

IIS 8.5 forces incorrect Content-Length header

We have a application that generates PDF files dynamically and forces a download of a the file. This code was working without issue on a Windows Server 2008. From what I can tell it appears that IIS ...
5
votes
0answers
2k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
5
votes
0answers
262 views

Different 'ping6' reverse lookup behavior using ipv4 vs ipv6 dns servers in /etc/resolv.conf

I'm hoping someone could help shed some light on the different behavior ping6 is demonstrating on a GNU/Linux box. The machine is a Linode host which has been assigned both an IPv4 and IPv6 address. ...
5
votes
0answers
447 views

Using ZFS head node as database server?

I'm using a dual-head ZFS-backed NAS for high availability cluster shared storage, based on Nexenta's recommended architecture as seen here: The disks in 1 JBOD will store the database files for a ...
5
votes
0answers
2k views

OpenVPN certificate OR plugin-auth-pam authentication

Configuring OpenVPN server, I can enable either certificate-based authentication or username/password authentication using openvpn-plugin-auth-pam plugin, but not both at the same time. I enable ...
5
votes
0answers
1k views

Unix nslcd login with sAMAccountName and/or userPrincipalName from Active Directory

I'm trying to setup authentication from Active Directory in FreeBSD 10.0 using nslcd (nss-pam-ldapd-sasl package) and would like to allow both sAMAccountName and userPrincipalName as valid login ...
5
votes
0answers
7k views

Error connecting to MS SQL from one server but not the other

We got a MS SQL server and two web site servers. I'm in the process of moving all the sites from one of the web site servers to the new one. My asp.net sites are not able to connect to the external ...
5
votes
0answers
1k views

CIFS mounts hang on read

I have a problem with a bunch of CIFS mounts that look like this: //192.168.10.2/remote-share /home/windows-shared/remote-share cifs defaults,user=xxx,password=xxx,uid=603,gid=603 0 0 This ...
5
votes
0answers
1k views

SCCM Reporting - “Report Builder click-once application does not exist on the report server”

I (and my manager) would like to be able to create custom reports in SCCM 2012 SP1 through the Configuration Manager Administrative Console from the comfort of our workstations. Unfortunately, if you ...
5
votes
0answers
210 views

grep is inconsistently defaulting to grep -P?

I have a script that does some housekeeping that works perfectly well when invoked from an interactive shell, but did nothing when invoked by cron. To troubleshoot this I started a shell with a 'blank'...
5
votes
0answers
2k views

Can't write to other users “you have write permission turned off”

For some reason I'm not able to write to other users on my system. [root@hostname ~]# write write: you have write permission turned off. [root@hostname ~]# mesg y [root@hostname ~]# mesg is y [root@...
5
votes
0answers
2k views

Apache 2.4 not closing connections

I have an Apache 2.4 webserver that runs on a micro instance of AWS with CentOS. The apache is running PHP with a prefork MPM module. The server is accessed via an Amazon load balancer which has a ...
5
votes
0answers
1k views

Redirect user on SSL authentication failure

I configured a VirtualHost with SSL enabled and SSL client authentication, all of that on apache2 2.2.8 (ubuntu server 8.04). All SSL certificates (CA, Server certificate, Client certificate, CRL) ...
5
votes
0answers
3k views

PERC MegaRAID S.M.A.R.T. Status is not matching smartctl's - looking for clues what's wrong with the HDD

I'm getting strange SMART error from MegaCli on Dell R720xd and PERC H710P with five 4Tb SATA drives in RAID5 /opt/MegaRAID/MegaCli/MegaCli64 -PDList -aALL gives me some "Failure Seq Event Number" ...
5
votes
0answers
529 views

Risks of setting noCompressionForHttp10 and noCompressionForProxies to false

We recently switched to Amazon Cloudfront for static content. It seems that Cloudfront does HTTP 1.0 requests to the origin server (IIS 7.0) using the Via header. By default IIS 7.0 disables file ...
5
votes
0answers
322 views

Puppet Error: undefined method 'captures'

I posted this question on the networkengineering SE site, but it was determined to be off topic.... blah. I'm toying with the idea of using puppet for core network device configuration to increase ...
5
votes
0answers
551 views

Creating a seperate static content site for IIS7 and MVC

With reference to this serverfault blog post: A Few Speed Improvements where it talks about how static content for stackexchange is served from a separate cookieless domain... How would someone go ...
5
votes
0answers
1k views

Process Managment memory-leak in Windows Server x64?

After clean install and boot of OS Windows x64 I launched cmd.exe (any other exe) and closed it. Then I launch rammap.exe (http://technet.microsoft.com/en-us/sysinternals/ff700229.aspx). On the 2nd ...
4
votes
0answers
54 views

Higher TCP latencies in the latest versions of Linux

In my research group, we recently upgraded the OS on our machines from Red Hat 6.2 to Debian 8.3 and observed that the TCP round trip time through the integrated Intel 1G NICs between our machines had ...
4
votes
0answers
23 views

How to set-up google-authenticator and set specific match rules to allow different login rules?

I'm trying to set Google-Authenticator (google 2 factor authentication). The relevant files are: [root@srv01 ~]# cat /etc/pam.d/sshd #%PAM-1.0 auth required pam_google_authenticator.so auth ...
4
votes
0answers
23 views

proc's limit and ulimit -f don't match

I have an issue where a process has a different max file size than the ulimit for a user. The log file for this process is basically not growing past 524288 proc: less /proc/20238/limits Limit ...
4
votes
0answers
52 views

How to bypass GPO loopback processing for some users?

As you probably know, loopback processing is a feature of Active Directory Group Policies which applies user settings in a GPO to any user who logs on to computers in the GPO's scope (whereas the ...
4
votes
0answers
66 views

Q: RHEL, SSSD, Active Directory

Good afternoon folks. I've been perusing various posts already about getting linux systems to authenticate using AD, but haven't seen anything approaching what I'm beating my head against. There's a ...
4
votes
0answers
109 views

VirtualHost Defaulting to Wrong Deployment on Restart

We have a server running seven domains/subdomains. To try to go as minimal as possible here I'll include four of them. example.com www.example.com dwf.example.com chris.example.com The server ...
4
votes
0answers
45 views

How can RAID deal with inconsistent data?

RAID 1 and RAID 5 (and their brothers 10 and 50) achieve data redundancy respectively through mirroring and through parity checking. This allows a RAID array to still access data when a sector on a ...
4
votes
0answers
82 views

debian/ubuntu: Prevent UI prompting in command-line apt-get

So, in order to prevent console-UI (newt, snack, dialog) prompts during the dpkg post-install, you have to do something like: debconf-set-selections <<< 'mysql-server mysql-server/...
4
votes
0answers
51 views

Authentication issues when clients access domain-joined server from non Samba4 subdomain DNS name

We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago. Simplified Current ...
4
votes
0answers
80 views

BITS Compact Server, can this be installed on Windows 10 Pro?

I'm trying to use Microsoft Virtual Machine Converter to connect to an old laptop and create a VM from it, but it needs BITS compact server installed and I can only find how to install this on windows ...
4
votes
0answers
47 views

What process on a SonicWall Security Appliance Checks the DPI-SSL Client Inspection?

I'm interested in determining if there is high CPU usage on a SonicWall Security Appliance, but I don't know which process to check for high CPU usage. There are various options for this in the UI ...
4
votes
0answers
44 views

How to maximize utilization of fluentd server?

I have a fluentd server that is processing an average of 1000 req/s. This server is composed by 32 cpus. In this server are running 32 fluentd docker containers with the same configuration. The entry ...
4
votes
0answers
90 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
4
votes
0answers
27 views

Secure Graphite installation

I think I misunderstand something here. I've installed Graphite with Docker (sitespeedio/graphite) and set a Basic Auth for the Web-Panel. I opened the Firwall for Port 2003 to get in datapoints from ...
4
votes
0answers
65 views

RabbitMQ two node high availability cluster intermittently breaks with Veeam backup jobs

The environment consists of two 2012R2 Virtual Machines running RabbitMQ in high availability (ha-all) on their Queues. I use Veeam to create snapshot backups that are sent offsite as part of the DR ...
4
votes
0answers
31 views

Using New Relic with Docker Cloud

Ok, so here is the setup. We are using docker cloud in "bring your own node" configuration. Our node is running Ubuntu 14.04. We have installed dockercloud-agent and nrsysmond as required by the ...
4
votes
0answers
150 views

Questions about ktpass/kerberos with Active Directory

I got a few questions about Kerberos with Active Directory, specifically about the ktpass tool. The example AD I'm using (everything is on 2012R2 level): Active Directory Domain Name: ad.example....
4
votes
0answers
60 views

Can Btrfs use SSD for metadata and leave bulk data on HDD?

is it possible for Btrfs to use SSD for metadata only & leave bulk data on less costly storage such as HDD? I refered to this page Using_Btrfs_with_Multiple_Devices and can not find a solution. ...
4
votes
0answers
95 views

Schannel Error - Random

I'm currently experiencing an issue on a Windows Server 2012 R2. In the event log is an Error for the Source "Schannel". The error description is: "A fatal alert was generated and sent to the ...
4
votes
0answers
80 views

Improve SSL Performance with Nginx

We have Nginx in the front of our system and we Proxy to Apache at the back. We use SSL/TLS for our connection. Question: Is Nginx the best option to terminate SSL/TLS connections in terms of ...

15 30 50 per page