3
votes
0answers
90 views

Azure backup folder exclusion

I tried to find a way to do it, but I am not sure if it's possible or not. Using Recovery services on Azure, I installed the Microsoft Azure Backup Agent on an IIS server. We have multiple websites ...
3
votes
0answers
69 views

Setting header based on client certificate

I have Apache running as a reverse proxy for an internal server. Users hitting the proxy are required to use client certificates. On the internal server, there is a web application that can use an ...
3
votes
0answers
61 views

Efficiently get file deltas for backups

With many large Xen sparse image files that have to be backed up, I'm looking for a way to do this efficiently both in terms of disk space (saving space with a differential tool like duplicity, bup, ...
3
votes
0answers
434 views

nginx & php-fpm [debug] 11: Resource temporarily unavailable

New Development The core php error logs are below, but the site specific error logs show this. The memory on my php.ini file is : memory_size 1024; so it's not php's memory limit. I've also ...
3
votes
0answers
290 views

How to enable certain SSL cipher while having disabled the group?

I would like to enable the SSL cipher EDH-DSS-DES-CBC3-SHA (also known as TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA) in my nginx SSL environment to support IE8 on Windows XP. The base SSL ciphers for nginx ...
3
votes
0answers
710 views

Windows updates fail (KB2992611) - “The stub received bad data”

I am trying to install the two updates for KB2992611 manually on some Windows 2008 R2 SP1 servers as they haven't been brought down by Windows updates: ...
3
votes
0answers
54 views

Http Request Hangs Client Side

We've run a website for several years with thousands of visitors. Very rarely the following problem happens to a certain group of users: A certain user of that group makes a client side action on his ...
3
votes
0answers
414 views

Haproxy: reject traffic by user agent from file

I am trying to reject connections from specific user agents (by matching a substring of the user-agent header) using an haproxy ACL with -f option to read from a file. However it is not working, it ...
3
votes
0answers
105 views

IIS 7 Redirect from HTTP to HTTPS fail with ampersand in URL

IIS 7 on Windows Server 2008 R2 SP1 I have added the following rule to my web.config to redirect all incoming request to HTTPS <rule name="HTTP to HTTPS redirect" stopProcessing="true"> ...
3
votes
0answers
74 views

Big Trouble with (I think) Outlook X500 addressing

I moved a small client from one hosted Exchange server (Microsoft Office 365) to another (Intermedia.net). Some emails from External senders to the users on the new server host are undeliverable, ...
3
votes
0answers
46 views

How can I explicitly disable TLS when sending to one specific recipient?

I have a SendMail 8.14 server deployed in the middle of an SMTP workflow (Outbound mail looks like Exchange -> SendMail -> Appliance -> Internet) I have TLS configured for the first three hosts. ...
3
votes
0answers
30 views

Data location of IBM i Apache server descriptions in HTTPAdmin interface

I'm working on replicating Apache servers to a HA box, and I can replicate the servers themselves correctly (QUSRSYS/QATMHINSTC and the associated files in /www/), but I cannot find where the ...
3
votes
0answers
170 views

IIS 8.5 forces incorrect Content-Length header

We have a application that generates PDF files dynamically and forces a download of a the file. This code was working without issue on a Windows Server 2008. From what I can tell it appears that IIS ...
3
votes
0answers
166 views

TCP Window Scaling Problem over MPLS

After extensive troubleshooting why the TCP speed over an MPLS circuit is slow in one direction, I figured out that by adjusting the TCP window size the situation improved a lot. Maybe you can tell me ...
3
votes
0answers
173 views

TCP congestion collapse

I am experiencing suboptimal performance on an EC2 instance connecting to an RDS instance. This particular instance was built before VPC's existed, so all the traffic is flowing through a single ...
3
votes
0answers
287 views

TCP connection stuck in SYN_RECV state despite ACK received

My client and server are both internal machines. tcpdump on both client and server show all three parts of handshake are communicated, however netstat on server shows SYN_RECV, and on client shows ...
3
votes
0answers
71 views

Exchange+Outlook 2013 - Read Mails turn Unread

I have a local EX2013 server and several Outlook 2013 clients. Some of the clients occasionally (once or twice a day) see a random read email turn unread with no apparent reason. I went through the ...
3
votes
0answers
72 views

Windows Server 2003 terminal server extreme logon times

For the past week my users have been experiencing extreme logon times. They are generally in the 20 minute range or more. I will lay out my research below to see if anyone may know how to find the ...
3
votes
0answers
70 views

SuperMicro IPMI using Windows-based RADIUS (NPS)

I'm struggling to use a Windows-based RADIUS setup (Network Policy Server) with SuperMicro IPMI interfaces. I've found that I need to add vendor-specific attribute H=4, I=4 (Appendix C in the ...
3
votes
0answers
141 views

Does AWS Elastic Beanstalk Swap Environment Url swaps environments for git push?

I have read the docs for zero downtime on aws but cant seem to understand what happens in this scenario? I have a environment running in production called 'red' I duplicate the environment as 'blue' ...
3
votes
0answers
70 views

Recommended Permissions for Virtual Service Accounts on Windows 7+

I'm trying to have an NSIS Installer install a custom service as part of an installation. It would be nice to run the service with one of those typical 'NT Service\xyz' style virtual service accounts ...
3
votes
0answers
219 views

Restart Hyper-V VM on heartbeat lost

I have a Windows Server 2012R2 hyper-v host. It is running a number of VMs, including a few linux VMs. I have one linux VM that has been occationally, but somewhat regularly crashing somewhere in the ...
3
votes
0answers
33 views

Hyper-V: snapshotting a VM results in sluggish response

When snapshotting a running VM, I notice that the affected VM's performance is degrading heavily (leading to bizarre response times in the magnitude of minutes where similar actions might only take ...
3
votes
0answers
154 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
3
votes
0answers
93 views

Server 2008 R2 WMI problems

I get error "1065" from Group Policy when trying to run GPUpdate, and Group Policy is specifying that it cannot process the WMI query. I can successfully run some queries manually, but WMIDiag ...
3
votes
0answers
419 views

Import Powershell AD Module during MDT Task Sequence

I have written this short powershell script to rename a computer as part of an MDT task sequence: Import-Module ActiveDirectory $AdminUsername = 'domain.com\administrator' $AdminPassword = ...
3
votes
0answers
63 views

How to get OpenSSH to use OCSP for revocation

As the title says, is there any (free) library, patch, etc. that allows OpenSSH to be configured to check x.509 certificate revocation via OCSP (online certificate status protocol)? If so, can you ...
3
votes
0answers
1k views

SSH_ORIGINAL_COMMAND variable not getting set

I am working with two servers, both of which run FreeBSD 8.4-RELEASE-p1 and OpenSSH_6.1p1. Both servers' ssh_config files, located in /etc/ssh, are identical. Both servers are configured to allow ...
3
votes
0answers
165 views

SELinux: cannot confine Firefox process to mozilla_t domain

My goal is to execute Firefox in the mozilla_t domain instead of unconfined_t. The machine runs Fedora 20 with SELinux in enforcing mode. Unfortunately, I can't seem to get this right. No matter ...
3
votes
0answers
1k views

Why is logrotate causing Apache to seg fault each time?

Every time logrotate runs Apache/2.4.7 (Ubuntu) experiences a seg fault and does not restart: [Wed Sep 10 06:35:54.266018 2014] [mpm_event:notice] [pid 20599:tid 140630283466624] AH00493: SIGUSR1 ...
3
votes
0answers
208 views

Cannot enable GSS-TSIG updates from Active Directory in BIND 9.10

I’m with a problem trying to enable GSS-TSIG with BIND 9.10. Before I start describing what I’ve done, I would like to say that I’ve already done this in in another domain without any problems. So I ...
3
votes
0answers
178 views

Apache + Php-FPM + APC : mode_deflate not compressing HTML output

I have prepared a server to run a Magento instance with: Apache + Php-FPM + APC The problem I have is that Apache is not compressing the HTML output from the Magento PHP scripts. In my .htaccess I ...
3
votes
0answers
477 views

Separating java stdout and stderr with systemd and without filling journal

I am running java apps via systemd: [Unit] Description=test service [Service] Type=simple EnvironmentFile=/etc/sysconfig/testserver WorkingDirectory=/opt/testserver ExecStart=/usr/bin/java -jar ...
3
votes
0answers
207 views

How does PHP5-FPM send errors to nginx?

I've been experimenting a bit with error logging in php-fpm and nginx since I couldn't find any good explanation on the web. Most guides said I should change catch_workers_output to yes if I want to ...
3
votes
0answers
118 views

Exchange 2007 not delivering to primary MX of one domain

I'm trying to send email to a domain that has two MX records. The higher priority record is IPv4 and the 2nd is IPv6. Exchange gives me a delivery is delayed message in my inbox after I've tried to ...
3
votes
0answers
775 views

Disabling HSTS for managed browsers

What are my options for disabling HSTS both for new sites and for those sites baked into the browser? The use of HTTPS inspection inherently changes the thumbprint of a site by acting as a man in ...
3
votes
0answers
185 views

Not seeing Django logs on Heroku

I'm not seeing log entries (at a level of INFO) made by Django in my Heroku logs. This is my configuration: LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'filters': { ...
3
votes
0answers
143 views

RTP analysis - Discerning ptime (packetization time) for a given VoIP packet capture

I would like some help on the subject of an automated way of discerning the average packetization time (ptime) of a VoIP call's packet capture. The reason I am not depending on the value in the SDP ...
3
votes
0answers
448 views

Android to openswan/xl2tpd/pppd error: result_code_avp: avp is incorrect size. 8 < 10

I am trying to use a simple Android 4.4.4 VPN connection to openswan/xl2tpd/pppd combo. the IPSec SA works, but xl2tpd at one point terminates the pppd and this shows up in logs: xl2tpd[17990]: ...
3
votes
0answers
1k views

Munin dynamic graph zoom (dynazoom) not working (Nginx, PHP-FPM)

Debian 7.5 Nginx/1.6.0 PHP 5.6.0RC2 (fpm-fcgi) (built: Jul 11 2014 08:17:52) Munin v2.0.21-2 I been searching all over the net for a few days for answers to my problem but it seems like no one knows ...
3
votes
0answers
326 views

My two-way trust with selective auth seems to behave opposite to a one-way trust

I'm not sure why I'm the only one running into this, I think it's a larger problem with Server 2012 and RDS protocols... With 2008 machines, you can use utilize a one way trust to authenticate across ...
3
votes
0answers
301 views

Cannot set ACL on ACL-enabled EXT4 partition

I am trying to enable xattrs and acls on a Debian machine. I've (re)mounted the partition in question with user_xattr and acl. (/dev/md3 is the partition in question) root@fs01:/# mount | grep ...
3
votes
0answers
2k views

starting nginx on mac fails with 48: address already in use

I'm trying to start nginx on my Mac OS X using the command sudo nginx It fails with the following error nginx: [emerg] bind() to 0.0.0.0:8080 failed (48: Address already in use) nginx: [emerg] ...
3
votes
0answers
297 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
3
votes
0answers
166 views

Different 'ping6' reverse lookup behavior using ipv4 vs ipv6 dns servers in /etc/resolv.conf

I'm hoping someone could help shed some light on the different behavior ping6 is demonstrating on a GNU/Linux box. The machine is a Linode host which has been assigned both an IPv4 and IPv6 address. ...
3
votes
0answers
143 views

Check that a given user has a given priviledge

Given a pair of a user and a privilege I need to determine if a user have the privilege on the server. The following is true in my setup: The server is a part of a domain but not a domain controller ...
3
votes
0answers
1k views

Pacemaker DRBD resource not getting promoted to master on any node

First off, I'm no linux specialist, I've been following tutorials and been working with the help of google, this worked out fine until now, but currently I'm stuck with a problem. I'm using CentOS 6.5 ...
3
votes
0answers
347 views

Kerberos, .k5login and sudo

Background: I am using a Debian 7 system which I have integrated with an LDAP+Kerberos system using libnss-ldap, libpam-krb5 and nscd. I have modified sudoers to permit an LDAP group the right to sudo ...
3
votes
0answers
160 views

Extract data that Jenkins receives from POST hooks sent by eg. github or bitbucket

I have a Jenkins job Trigger builds remotely (e.g., from scripts), and bitbucket PULL request HOOK triggers that job we can say everything works fine. Jenkins is smart to check any change and build ...
3
votes
0answers
274 views

Using ZFS head node as database server?

I'm using a dual-head ZFS-backed NAS for high availability cluster shared storage, based on Nexenta's recommended architecture as seen here: The disks in 1 JBOD will store the database files for a ...

15 30 50 per page