Tag Info

Hot answers tagged

84

This is not directly a DNS problem, it's a network routing problem between some parts of the internet and the DNS servers for serverfault.com. Since the nameservers can't be reached the domain stops resolving. As far as I can tell the routing problem is on the (Global Crossing?) router with IP address 204.245.39.50. As shown by @radius, packets to ns52 ...


25

I also posted this question on the puppet users group and this was a response that I got back. If you add ensure latest it will check the source file against the currently installed package and install the new one if it is latest. I'm still not sure how you would roll back to an older version, but this seems to solve my problem for now. package { ...


23

Using -f with ln will overwrite any link that was already there, so as long as you have the correct permissions, it should work... It's always worked for me. What operating system are you using?


18

your dns servers for serverfault.com [ ns21.domaincontrol.com, ns22.domaincontrol.com. ] are unreachable. for last ~20h, at least from couple major isps in sweden [ telia, tele2, bredband2 ]. at the same time 'neighbor' dns servers for stackoverflow.com & superuser.com [ ns51.domaincontrol.com, ns52.domaincontrol.com ] are reachable. sample traceroute ...


18

If you are starting from a bare metal install, you can slipstream updates into your installer disc so it already has updates in it (this depends on how many installs you're doing to make it worth it). WSUS will not reboot your computer for you. It only keeps track of your updates and will act as a repo for updates so that rather than updating 300+ meg of ...


16

Some packages are held by more than one repository. The priorities plugin choose packages from the highest-priority repository, excluding duplicate entries from other repos.


15

My suggestions: as explained by Alnitak, the problem is not DNS but routing (probably BGP). The fact that nothing was changed in the DNS setup is normal, since the problem was not in he DNS. serverfault.com has today a very poor DNS setup, certainly insufficient for an important site like this: only two name servers all the eggs in the same basket (both ...


15

From what I understand, this error is generated from the priorities plugin as noted by Pawel. In 2009, the maintainer of yum mentioned that he hoped people would not use priorities. To disable the priorities plugin, edit /etc/yum/pluginconf.d/priorities.conf and set enabled = 0. After this change, next time you run yum update, you should not get any ...


15

I've done this many times with Flash Player (and other software). What you want to do is: Use ORCA to edit it with any customization that you want and save it as a transforms (or save it as a whole new MSI, whatever works for you). Put that new MSI (and transforms) on your software deployment share. Add this software (and transforms) to your existing ...


13

Assuming your DNS server is on a PC and not a router etc: Linux cache flush: /etc/init.d/nscd restart Or for distros without nscd /etc/init.d/named restart Windows client cache flush for individual machines: ipconfig /flushdns Windows server cache flush for office server (thanks to ericmayo for the correction): Navigate to Administrator ...


10

Do not update the package called redhat-release-5Server- $ rpm -qf /etc/redhat-release redhat-release-5Server-5.3.0.3 Make sure to pin that package. If you do edit /etc/yum.conf and put this in it [main] exclude=redhat-release-5Server-* yum would refrain from updating that package and that would keep /etc/redhat-release at its current version. Not ...


10

Security and agility should be balanced against stability and uptime when determining your patching strategy. Your push-back approach for this should be along the lines of 'Okay, but you need to know that we're now at risk of these servers becoming compromised and having our data stolen, or having the servers be rendered non-functional' and 'Okay, but you ...


10

The number of pending security updates can be found using: /usr/lib/update-notifier/apt-check 2>&1 | cut -d ';' -f 1 and the number of pending regular updates can be found using: /usr/lib/update-notifier/apt-check 2>&1 | cut -d ';' -f 2 http://superuser.com/questions/199869/check-number-of-pending-security-updates-in-ubuntu


10

One method is to update the system via the command line. Grab the lastest package from here. As of today, that is ESXi500-201205001. Transfering the update zip file to a datastore on that is visible to the host. Use commands like the following to apply the update. # check server status vicfg-hostops --server servername --username root --operation info ...


10

You should never touch anything in production unless there's a good reason to do so. Security updates are a very good reason. And as Iain mentions, testing beforehand helps you to ensure that nothing is likely to go wrong when you apply the updates to your production system.


9

I found it quite convenient to installed different version in separate locations and just symlink to the version you want to use, like: lrwxr-xr-x 1 root wheel 7B Jun 7 18:26 /usr/local/foo -> foo-1.0 drwxr-xr-x 2 root wheel 512B Jun 7 18:26 /usr/local/foo-1.0 drwxr-xr-x 2 root wheel 512B Jun 7 18:26 /usr/local/foo-1.1 The benefits ...


9

The root cause of this issue is that Red Hat broke binary compatibility of their OpenSSL packages between 6.4 and 6.5, something that they promised that they would not do. Resolving this problem is straightforward, but depending on the applications you may have deployed, may take some yelling at your application vendors. Be sure to reserve most of your ire ...


8

The server needs to reboot to finish patching files that were in use during the patching process, leaving your machine in an inconsistent state (IE installing updates and then letting it run) leaves your machine at greater risk as you are between two states. The first before you patched as a known good level of Microsoft updates. The second state is your ...


8

I can highly recommend WSUS Offline Update. You can use it to create an USB stick or DVD which you can use afterwards to automatically install all critical updates for every currently supported Windows or Office version. It will automatically restart and continue the update process, so you just need time but can let it work unattended.


8

In order to update ESXi without vSphere, you will have to perform the update from the command line. That means enabling SSH and console access to the host and placing the update files on an accessible datastore. The core command will be: esxcli software vib update -d /vmfs/volumes/[DATASTORE]/[PATCH_FILE].zip The guide here is also helpful... ...


8

Simply: apt-get update will update your local copies of your repositories' package data, such as available versions and dependencies. This is needed to check whether any updates are present. It doesn't actually upgrade packages. apt-get upgrade and apt-get dist-upgrade will upgrade packages. The former runs general system upgrades The latter will ...


7

You are right to think this isn't the best route. This route requires many manual steps, and is very error prone, and doesn't scale well. When working with linux distributions, you should stick to the package management as much as possible. The advantages of using package management: Dependency support Easy installation/removal Software inventory ...


7

If you are running BIND as a resolver for your office - ie. not forwarding to another a resolver. Flush everything in the cache: rndc flush Flush a specific record: rndc flushname example.com If you are forwarding then you are at the mercy of the forwarder's cache.


7

Production servers only get production code. Only install non-production code on non-production servers. RC-code also has support impacts if that matters to you. Don't go there unless you're OK with flattening the server and rebuilding it on a released service-pack before calling in.


7

I don't know of a centralized way to keep everything smooth and monitored. On the other hand I see the other answers suggesting combinations of tools. So here is mine: Zabbix has monitoring/graphics together in one tool. Supports information via SNMP and custom agent. It's very good, but it must be tuned for your servers or you will have problems with the ...


7

You can't change a static entry to dynamic. Just delete the static entry and the switch will add its own dynamic entry when that host sends a frame. Use the "no" syntax to delete an address. E.g.: no mac-address-table static 12ab.47dd.ff89 vlan 3


7

The easiest way is setting a deadline on the needed updates on your WSUS server. The servers then install the updates on their own. Setting a deadline will cause clients to install the update at a specific time http://technet.microsoft.com/en-us/library/cc708585%28v=ws.10%29.aspx


7

In Linux, like I think in all Unixes, when a process has an open file, it can continue to access it even if you delete it. After deletion the file is unreachable by other processes (there is no directory entry for it), but processes that had opened it before deletion can continue to access it using the handle the kernel gave them when they had opened it. The ...


6

schtasks is 'at' on steroids for Windows. From the Windows Vista Task Scheduler page: Scripting and Command Line Options. Improving the user experience is one of the main goals of the Windows Vista Task Scheduler. For IT professionals that prefer to use a command line tool instead of GUI, the schtasks.exe command line utility has been extended to cover all ...


6

Sure. Download, notify for install: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v AUOptions /t REG_DWORD /d 3 Check out Group Policy Search for reference if you need to modify other parts of the policy directly via the registry - it's a lot more pleasant than digging through ADMX files.



Only top voted, non community-wiki answers of a minimum length are eligible