4
votes
0answers
109 views

Cisco ASA failback to preferred IPsec peer

I just configured my Cisco ASA 5505 to failover to a backup internet line when the main outside interface is down. This all works fine. Also, I have a site-to-site IPSEC VPN tunnel from this ...
4
votes
0answers
369 views

VLAN ID over DHCP for Management Interface of Fortinet FortiAP

When configuring the FortiAP device it's desirable to configure the VLAN ID for the tagged management network. Accordingly to the manual it's possible to do so by "telnetting" to the FortiAP device ...
4
votes
0answers
267 views

Samba authentication and LDAP

I have an OpenLDAP server that I use for authentication and authorization for various services. All users are of object type inetOrgPerson and my groups are groupOfNames. Now I want to configure ...
4
votes
0answers
73 views

How to clone the OS disk and keep both disks plugged in?

Here's the situation: A Windows RAID 1 has partially failed. The broken disk was replaced with a new disk. The old two disks do not have Advanced Format (bigger sector size). The new replacement disk ...
4
votes
0answers
316 views

Windows Authentication to a Remote Server within an Intranet Environment

I have several servers (all on the same DC) within an Intranet environment at my company. For simplicity, I'll focus my question on the IIS and SQL Servers. I have an IIS 7.5 web server and a remote ...
4
votes
0answers
266 views

Get-Process not working against remote Windows 7 clients

I have been trying to run Microsoft's GetNetworkStatistics script against remote computers to enable us to track what processes are using bandwidth along with other tools. I am unable to run the ...
4
votes
0answers
233 views

Samba4 internal DNS and isc-dhcp zone update

Could anybody explain, how to solve this problem with internal samba4 DNS and dynamic zone updates from isc-dhcp? In the logs I have: dhcpd: Unable to add reverse map from ...
4
votes
0answers
1k views

Disable SSLv3 on Windows Server 2012

I have disabled the SSLv3 on Windows 2012 sever using the following method: http://blog.brankovucinec.com/2014/11/13/disable-the-sslv3-protocol-on-microsoft-windows-servers/ Around the same thing is ...
4
votes
0answers
1k views

opendkim fail | bad RSA signature | verification failed unprotected key

I have fully manageable VPS running Ubuntu 14.04 which hosts websites for several domains. Recently I have tried to add DKIM signatures to avoid spam filters. I've followed ubuntu-postfix-dkim ...
4
votes
0answers
717 views

mod_wsgi End of script output before headers

I have a problem with my web application. Sometimes when people upload an image (seems to happen with large image only), I have mod_wsgi who crash with this message : End of script output before ...
4
votes
0answers
198 views

Elasticsearch dies when Logstash attempts to write data

I've got a Raspberry Pi 2 (latest Raspbian as of Apr 2015) setup that last week was running both ElasticSearch and Logstash on a test network (not a straightforward setup, but it was stable for over a ...
4
votes
0answers
857 views

Unprivileged lxc container as root

I have successfully been able to run privileged lxc containers (as root). My system: uname -a Linux ruby-dev 3.13.0-32-generic #57-Ubuntu SMP Tue Jul 15 03:51:08 UTC 2014 x86_64 x86_64 x86_64 ...
4
votes
0answers
77 views

Blank sent to default printer on RDP Win2008R2 with mapped printing

I’ve got an issue with a terminal server running Win2008R2 Enterprise SP1. My users have remote print mapping enabled (as it is imperative for their day-to-day duties). When they log in, RDP will ...
4
votes
0answers
1k views

Server 2012 Windows Update not working

We have a windows server 2012 box that is hosted remotely. I've been trying to install a security patch and the windows update component appears to be corrupted. The error code i'm getting is ...
4
votes
0answers
208 views

IPSec bandwidth between two Pfsense hosts has predictable, variable bandwidth

I have a IPSec tunnel between two Pfsense machines. Both machines are connected to a 100mbps symmetrical connection. The latency between the two routers is ~70ms. I'm using AES-GCM-128 and SHA1, both ...
4
votes
0answers
145 views

Update SQL Service Pack Named Instance

I have an existing SQL 2008 R2 on SP3. Have another instance in use that is SQL 2008 R2 SP1 I need to update the named instance with sp1 to sp3 but i'm not getting any options. It tells me my version ...
4
votes
0answers
118 views

Besides looking dumping $PSVersionTable and dumping the variable and env “PS-Drives”, what else can I do to compare PowerShell environments?

Besides looking dumping $PSVersionTable and dumping the variable and env "PS-Drives", what can I do to compare PowerShell environments? Here's the problem: I have very similar machines running ...
4
votes
0answers
144 views

Smart Card S/MIME with Exchange 2013

I have an Exchange 2013 environment that I'm trying to implement S/MIME with smart cards. To the best of my knowledge, and the little help I have received on TechNet, I have configured my Exchange ...
4
votes
0answers
269 views

How do I set up openshift’s bind correctly

I have set up an instance of redhat’s Openshift origin and am sometimes having troubles resolving the individual apps’ domains from the outside. I have two physical machines running, both with their ...
4
votes
0answers
152 views

Installing MSA (Managed Service Accounts) using deployment tools

I have to install several new servers (2012R2) for a project, which will run IIS and MSMQ, I need to script the complete install, so I need to be able to change permissions on IIS Application Pools ...
4
votes
0answers
147 views

Active Directory Administrative Center - resize membership part

User can be a member of 3 groups at most to be visible in ADAC without scrolling. But in reality, users are members of 5, 10 even 20 groups. We have to scroll the "member of" list to check the ...
4
votes
0answers
2k views

Rename Junk folder in dovecot IMAP server

Being English, I find the terms "Trash" and "Junk" confusing because they mean essentially the same thing. I want to rename these folders on my Dovecot IMAP server to "Deleted" and "Spam" respectively ...
4
votes
0answers
140 views

Setting header based on client certificate

I have Apache running as a reverse proxy for an internal server. Users hitting the proxy are required to use client certificates. On the internal server, there is a web application that can use an ...
4
votes
0answers
142 views

Efficiently get file deltas for backups

With many large Xen sparse image files that have to be backed up, I'm looking for a way to do this efficiently both in terms of disk space (saving space with a differential tool like duplicity, bup, ...
4
votes
0answers
1k views

Windows updates fail (KB2992611) - “The stub received bad data”

I am trying to install the two updates for KB2992611 manually on some Windows 2008 R2 SP1 servers as they haven't been brought down by Windows updates: ...
4
votes
0answers
1k views

LSA SID cache keeps old entry for renamed domain user - why?

I have a question about LSA SID cache on a domain member server. Recently I run into the issue when some users after their name was changed in AD has difficulties accessing application I support, and ...
4
votes
0answers
73 views

How can I explicitly disable TLS when sending to one specific recipient?

I have a SendMail 8.14 server deployed in the middle of an SMTP workflow (Outbound mail looks like Exchange -> SendMail -> Appliance -> Internet) I have TLS configured for the first three hosts. ...
4
votes
0answers
1k views

Fail2Ban Correctly Attempts to Ban IP but IP does not get banned - iptables chain exists but not working

Running on Ubuntu 14.04 Server. So I have fail2ban correctly configured to process /var/log/auth.log for SSH login attempts. Upon 3 failed attempts I see this in the fail2ban log: 2014-11-19 ...
4
votes
0answers
42 views

Data location of IBM i Apache server descriptions in HTTPAdmin interface

I'm working on replicating Apache servers to a HA box, and I can replicate the servers themselves correctly (QUSRSYS/QATMHINSTC and the associated files in /www/), but I cannot find where the ...
4
votes
0answers
455 views

IIS 8.5 forces incorrect Content-Length header

We have a application that generates PDF files dynamically and forces a download of a the file. This code was working without issue on a Windows Server 2008. From what I can tell it appears that IIS ...
4
votes
0answers
388 views

TCP Window Scaling Problem over MPLS

After extensive troubleshooting why the TCP speed over an MPLS circuit is slow in one direction, I figured out that by adjusting the TCP window size the situation improved a lot. Maybe you can tell me ...
4
votes
0answers
393 views

TCP congestion collapse

I am experiencing suboptimal performance on an EC2 instance connecting to an RDS instance. This particular instance was built before VPC's existed, so all the traffic is flowing through a single ...
4
votes
0answers
569 views

TCP connection stuck in SYN_RECV state despite ACK received

My client and server are both internal machines. tcpdump on both client and server show all three parts of handshake are communicated, however netstat on server shows SYN_RECV, and on client shows ...
4
votes
0answers
172 views

EtcKeeper: Switching from bzr to git

I've been using etckeeper on my Digital Ocean droplet for sometime and have made numerous changes to the /etc since that time. I now realize that i've been using bzr all this time and would like to ...
4
votes
0answers
150 views

CMake Error on Compiling weechat from sources

I was trying to compile weechat from sources on my CentOS 6.6 machine. I installed all the below dependencies as per the README file. cmake ncurses-devel gcrypt-devel zlib-devel libcurl-devel Now ...
4
votes
0answers
255 views

Exchange+Outlook 2013 - Read Mails turn Unread

I have a local EX2013 server and several Outlook 2013 clients. Some of the clients occasionally (once or twice a day) see a random read email turn unread with no apparent reason. I went through the ...
4
votes
0answers
92 views

Windows Server 2003 terminal server extreme logon times

For the past week my users have been experiencing extreme logon times. They are generally in the 20 minute range or more. I will lay out my research below to see if anyone may know how to find the ...
4
votes
0answers
2k views

Troubleshooting Packet Loss on pfSense + Ubiquiti UniFi (Wireshark maybe?)

I'm dealing with an annoying situation in a small network in my church, which I'm the primary volunteer IT caretaker, of about 20 PCs, give-or-take. We're in Chattanooga, home of Gigabit internet, so ...
4
votes
0answers
173 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
4
votes
0answers
248 views

Does AWS Elastic Beanstalk Swap Environment Url swaps environments for git push?

I have read the docs for zero downtime on aws but cant seem to understand what happens in this scenario? I have a environment running in production called 'red' I duplicate the environment as 'blue' ...
4
votes
0answers
208 views

Recommended Permissions for Virtual Service Accounts on Windows 7+

I'm trying to have an NSIS Installer install a custom service as part of an installation. It would be nice to run the service with one of those typical 'NT Service\xyz' style virtual service accounts ...
4
votes
0answers
41 views

Hyper-V: snapshotting a VM results in sluggish response

When snapshotting a running VM, I notice that the affected VM's performance is degrading heavily (leading to bizarre response times in the magnitude of minutes where similar actions might only take ...
4
votes
0answers
1k views

How do I set locale when building an Ubuntu Docker image with Packer?

I'm using Packer to build a Docker image based on Ubuntu 14.04, i.e., in my Packer template I have: "builders": [{ "type": "docker", "image": "ubuntu", "commit": true }], and I build it ...
4
votes
0answers
307 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
4
votes
0answers
169 views

Server 2008 R2 WMI problems

I get error "1065" from Group Policy when trying to run GPUpdate, and Group Policy is specifying that it cannot process the WMI query. I can successfully run some queries manually, but WMIDiag ...
4
votes
0answers
466 views

Cannot enable GSS-TSIG updates from Active Directory in BIND 9.10

I’m with a problem trying to enable GSS-TSIG with BIND 9.10. Before I start describing what I’ve done, I would like to say that I’ve already done this in in another domain without any problems. So I ...
4
votes
0answers
340 views

Apache + Php-FPM + APC : mode_deflate not compressing HTML output

I have prepared a server to run a Magento instance with: Apache + Php-FPM + APC The problem I have is that Apache is not compressing the HTML output from the Magento PHP scripts. In my .htaccess I ...
4
votes
0answers
189 views

Exchange 2007 not delivering to primary MX of one domain

I'm trying to send email to a domain that has two MX records. The higher priority record is IPv4 and the 2nd is IPv6. Exchange gives me a delivery is delayed message in my inbox after I've tried to ...
4
votes
0answers
236 views

RTP analysis - Discerning ptime (packetization time) for a given VoIP packet capture

I would like some help on the subject of an automated way of discerning the average packetization time (ptime) of a VoIP call's packet capture. The reason I am not depending on the value in the SDP ...
4
votes
0answers
777 views

Android to openswan/xl2tpd/pppd error: result_code_avp: avp is incorrect size. 8 < 10

I am trying to use a simple Android 4.4.4 VPN connection to openswan/xl2tpd/pppd combo. the IPSec SA works, but xl2tpd at one point terminates the pppd and this shows up in logs: xl2tpd[17990]: ...

15 30 50 per page