3
votes
0answers
126 views

Ubiquiti Wireless Guest Network VLAN w/ pfSense + Cisco Switch

I'm trying to setup a guest wireless network in an environment that has been humming along nicely for quite some time. The wireless runs on Ubiquiti UniFi APs. I hope this is clear. If its not, feel ...
3
votes
0answers
38 views

Filter mirrored port traffic using iptables

I receive traffic from a mirrored port and I would like to send it into an NFQUEUE for processing. Because of the mirrored port, the packets destination MAC addresses are not my host MAC address. ...
3
votes
0answers
27 views

How do I get as much debugging info as possible out of the Network Policy Server (ias) service?

We are trying to authenticate a client on remote vpn, through a Meraki Z1 teleworker appliance. The Z1 is sending a proper request, the Network Policy Server (ias) service is apparently ...
3
votes
0answers
45 views

Azure backup folder exclusion

I tried to find a way to do it, but I am not sure if it's possible or not. Using Recovery services on Azure, I installed the Microsoft Azure Backup Agent on an IIS server. We have multiple websites ...
3
votes
0answers
31 views

Setting header based on client certificate

I have Apache running as a reverse proxy for an internal server. Users hitting the proxy are required to use client certificates. On the internal server, there is a web application that can use an ...
3
votes
0answers
167 views

nginx & php-fpm [debug] 11: Resource temporarily unavailable

New Development The core php error logs are below, but the site specific error logs show this. The memory on my php.ini file is : memory_size 1024; so it's not php's memory limit. I've also ...
3
votes
0answers
78 views

How to enable certain SSL cipher while having disabled the group?

I would like to enable the SSL cipher EDH-DSS-DES-CBC3-SHA (also known as TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA) in my nginx SSL environment to support IE8 on Windows XP. The base SSL ciphers for nginx ...
3
votes
0answers
436 views

Windows updates fail (KB2992611) - “The stub received bad data”

I am trying to install the two updates for KB2992611 manually on some Windows 2008 R2 SP1 servers as they haven't been brought down by Windows updates: ...
3
votes
0answers
144 views

Batch script is not getting executed when called by Start-Process Cmdlet

I have a strange issue on a Windows Server 2012 R2 here that just does not make any sense to me at all. I've got a PowerShell script that basically has the following structure: Function ...
3
votes
0answers
189 views

INACCESSIBLE_BOOT_DEVICE on Hyper-V 2012 R2 virtual machines

I have a Hyper-V 2012 R2 cluster, 4 Dell PowerEdge R620 servers connected to a Dell PowerVault MD3600F storage array by means of FC connections; it's all pretty straightforward, all servers run ...
3
votes
0answers
57 views

IIS 7 Redirect from HTTP to HTTPS fail with ampersand in URL

IIS 7 on Windows Server 2008 R2 SP1 I have added the following rule to my web.config to redirect all incoming request to HTTPS <rule name="HTTP to HTTPS redirect" stopProcessing="true"> ...
3
votes
0answers
54 views

Big Trouble with (I think) Outlook X500 addressing

I moved a small client from one hosted Exchange server (Microsoft Office 365) to another (Intermedia.net). Some emails from External senders to the users on the new server host are undeliverable, ...
3
votes
0answers
32 views

How can I explicitly disable TLS when sending to one specific recipient?

I have a SendMail 8.14 server deployed in the middle of an SMTP workflow (Outbound mail looks like Exchange -> SendMail -> Appliance -> Internet) I have TLS configured for the first three hosts. ...
3
votes
0answers
24 views

Data location of IBM i Apache server descriptions in HTTPAdmin interface

I'm working on replicating Apache servers to a HA box, and I can replicate the servers themselves correctly (QUSRSYS/QATMHINSTC and the associated files in /www/), but I cannot find where the ...
3
votes
0answers
91 views

IIS 8.5 forces incorrect Content-Length header

We have a application that generates PDF files dynamically and forces a download of a the file. This code was working without issue on a Windows Server 2008. From what I can tell it appears that IIS ...
3
votes
0answers
104 views

TCP Window Scaling Problem over MPLS

After extensive troubleshooting why the TCP speed over an MPLS circuit is slow in one direction, I figured out that by adjusting the TCP window size the situation improved a lot. Maybe you can tell me ...
3
votes
0answers
191 views

TCP connection stuck in SYN_RECV state despite ACK received

My client and server are both internal machines. tcpdump on both client and server show all three parts of handshake are communicated, however netstat on server shows SYN_RECV, and on client shows ...
3
votes
0answers
48 views

Exchange+Outlook 2013 - Read Mails turn Unread

I have a local EX2013 server and several Outlook 2013 clients. Some of the clients occasionally (once or twice a day) see a random read email turn unread with no apparent reason. I went through the ...
3
votes
0answers
83 views

Odd performance fluctation with php-fpm and nginx

I'm running a load test against a web service. It's a php application running on php-fpm and nginx, with fastcgi. There is a MySQL backend being used for small reads only. Invariably, I'm seeing a ...
3
votes
0answers
59 views

Windows Server 2003 terminal server extreme logon times

For the past week my users have been experiencing extreme logon times. They are generally in the 20 minute range or more. I will lay out my research below to see if anyone may know how to find the ...
3
votes
0answers
38 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
3
votes
0answers
77 views

Does AWS Elastic Beanstalk Swap Environment Url swaps environments for git push?

I have read the docs for zero downtime on aws but cant seem to understand what happens in this scenario? I have a environment running in production called 'red' I duplicate the environment as 'blue' ...
3
votes
0answers
32 views

Recommended Permissions for Virtual Service Accounts on Windows 7+

I'm trying to have an NSIS Installer install a custom service as part of an installation. It would be nice to run the service with one of those typical 'NT Service\xyz' style virtual service accounts ...
3
votes
0answers
101 views

Restart Hyper-V VM on heartbeat lost

I have a Windows Server 2012R2 hyper-v host. It is running a number of VMs, including a few linux VMs. I have one linux VM that has been occationally, but somewhat regularly crashing somewhere in the ...
3
votes
0answers
31 views

Hyper-V: snapshotting a VM results in sluggish response

When snapshotting a running VM, I notice that the affected VM's performance is degrading heavily (leading to bizarre response times in the magnitude of minutes where similar actions might only take ...
3
votes
0answers
113 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
3
votes
0answers
60 views

Server 2008 R2 WMI problems

I get error "1065" from Group Policy when trying to run GPUpdate, and Group Policy is specifying that it cannot process the WMI query. I can successfully run some queries manually, but WMIDiag ...
3
votes
0answers
219 views

Import Powershell AD Module during MDT Task Sequence

I have written this short powershell script to rename a computer as part of an MDT task sequence: Import-Module ActiveDirectory $AdminUsername = 'domain.com\administrator' $AdminPassword = ...
3
votes
0answers
45 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
3
votes
0answers
63 views

Use mandatory profiles on the RD Session Host server

I want to configure my Windows Server 2008 servers like this. A user logs on, they load a profile that has been configured for that server and no changes can be made to the profile. I want to do ...
3
votes
0answers
793 views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
3
votes
0answers
228 views

Configure haproxy to return a 204 for a certain ACL match

I want to return a HTTP 204 error code if anyone tries to access a particular path on my web server. I could set one of my webservers to return a 204 error and point haproxy to it as a backend. ...
3
votes
0answers
485 views

Why is logrotate causing Apache to seg fault each time?

Every time logrotate runs Apache/2.4.7 (Ubuntu) experiences a seg fault and does not restart: [Wed Sep 10 06:35:54.266018 2014] [mpm_event:notice] [pid 20599:tid 140630283466624] AH00493: SIGUSR1 ...
3
votes
0answers
131 views

Cannot enable GSS-TSIG updates from Active Directory in BIND 9.10

I’m with a problem trying to enable GSS-TSIG with BIND 9.10. Before I start describing what I’ve done, I would like to say that I’ve already done this in in another domain without any problems. So I ...
3
votes
0answers
132 views

How does PHP5-FPM send errors to nginx?

I've been experimenting a bit with error logging in php-fpm and nginx since I couldn't find any good explanation on the web. Most guides said I should change catch_workers_output to yes if I want to ...
3
votes
0answers
456 views

cloud-init does not grow the partition nor the filesystem

I am currenty preparing OpenStack-ready images of CentOS 7 and Ubuntu 14.04. For the "automation" I use Packer, which is provided by you with a JSON-template. Packer then starts the installation ...
3
votes
0answers
1k views

xen:balloon: reserve_additional_memory: add_memory() failed: -17

We're running Ubuntu 14.04 on an EC2 virtual machine. I've been seeing a lot of these errors in our kernel log: [ 704.032085] xen:balloon: reserve_additional_memory: add_memory() failed: -17 [ ...
3
votes
0answers
107 views

Exchange 2007 not delivering to primary MX of one domain

I'm trying to send email to a domain that has two MX records. The higher priority record is IPv4 and the 2nd is IPv6. Exchange gives me a delivery is delayed message in my inbox after I've tried to ...
3
votes
0answers
334 views

Android to openswan/xl2tpd/pppd error: result_code_avp: avp is incorrect size. 8 < 10

I am trying to use a simple Android 4.4.4 VPN connection to openswan/xl2tpd/pppd combo. the IPSec SA works, but xl2tpd at one point terminates the pppd and this shows up in logs: xl2tpd[17990]: ...
3
votes
0answers
163 views

ping: sendmsg: Operation not permitted (sometimes)

On a Ubuntu 14.04 running Haproxy, after a service haproxy reload, Haproxy is suddenly reporting all servers behind it as down. After some digging around, I noticed that ping is not working properly, ...
3
votes
0answers
221 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
3
votes
0answers
206 views

Cannot set ACL on ACL-enabled EXT4 partition

I am trying to enable xattrs and acls on a Debian machine. I've (re)mounted the partition in question with user_xattr and acl. (/dev/md3 is the partition in question) root@fs01:/# mount | grep ...
3
votes
0answers
1k views

starting nginx on mac fails with 48: address already in use

I'm trying to start nginx on my Mac OS X using the command sudo nginx It fails with the following error nginx: [emerg] bind() to 0.0.0.0:8080 failed (48: Address already in use) nginx: [emerg] ...
3
votes
0answers
436 views

Docker: Permission denied on folders added with ADD

I'm trying to configure a postgresql installation using docker. FROM ubuntu:13.10 ADD . /db # install postgres # ... RUN chown postgres:postgres /db -R && \ chmod 700 /db -R USER ...
3
votes
0answers
229 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
3
votes
0answers
133 views

Different 'ping6' reverse lookup behavior using ipv4 vs ipv6 dns servers in /etc/resolv.conf

I'm hoping someone could help shed some light on the different behavior ping6 is demonstrating on a GNU/Linux box. The machine is a Linode host which has been assigned both an IPv4 and IPv6 address. ...
3
votes
0answers
117 views

Check that a given user has a given priviledge

Given a pair of a user and a privilege I need to determine if a user have the privilege on the server. The following is true in my setup: The server is a part of a domain but not a domain controller ...
3
votes
0answers
581 views

Pacemaker DRBD resource not getting promoted to master on any node

First off, I'm no linux specialist, I've been following tutorials and been working with the help of google, this worked out fine until now, but currently I'm stuck with a problem. I'm using CentOS 6.5 ...
3
votes
0answers
232 views

Kerberos, .k5login and sudo

Background: I am using a Debian 7 system which I have integrated with an LDAP+Kerberos system using libnss-ldap, libpam-krb5 and nscd. I have modified sudoers to permit an LDAP group the right to sudo ...
3
votes
0answers
120 views

Extract data that Jenkins receives from POST hooks sent by eg. github or bitbucket

I have a Jenkins job Trigger builds remotely (e.g., from scripts), and bitbucket PULL request HOOK triggers that job we can say everything works fine. Jenkins is smart to check any change and build ...

15 30 50 per page