Unanswered Questions

78,240 questions with no upvoted or accepted answers
6 votes
2 answers
2k views

Apache2 stops after system graceful-restart

System's effected: Ubuntu 16.04, Ubuntu 18.04, not 14.04. Frequency: Approx. around 24 - 36 hours. [Wed May 08 03:44:25.964597 2019] [mpm_prefork:notice] [pid 7670] AH00171: Graceful restart ...
6 votes
1 answer
3k views

Determine name of Hyper-V host of Linux guest VM

I would like to be able to determine which Hyper-V host a particular CentOS 7 VM is running on. In a Windows VM this is stored in HKLM:\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters. Is anyone ...
6 votes
1 answer
586 views

Managing Windows Defender in small business domain (is a nightmare)

I've spent a few months rolling out Group Policy for Windows Defender on a small business domain (about 25 workstations), and gathering the results with Event Viewer. (We are not running SCCM) I have ...
6 votes
0 answers
2k views

Caching, forwarding Bind 9.9.4 server works for weeks, suddenly SERVFAIL on all queries (rebooting fixes it)

I have bind 9.9.5 running on two servers (CentOS 6 and 7), for caching and forwarding DNS queries for a mail server. The servers run fine for weeks, then suddenly respond to all queries with SERVFAIL. ...
6 votes
1 answer
3k views

Is there a TCP Maximum Segment Size (MSS) Minimum?

I have there a OpenVPN VPN network connection, where the MSS size 60 gets send out for some reason (don't know why yet). EDIT: Reason: OpenVPN mssfix was mistakenly set to 1 36 92.064383 10.102.0....
6 votes
1 answer
21k views

Apache reverse proxy timeout in 60 seconds

I have Apache Reverse proxy server which proxies request to my internal Apache server. I am using Apache version 2.4 on Linux platform. I encountered timeout page and HTTP ERROR 504 whenever back-end ...
6 votes
0 answers
5k views

Socket access for clamdscan

On fc29 I have clamd installed and [email protected] is running fine. clamdscan runs for root but not for a regular user, even after addition to 'clamscan' group. dnf list installed | grep clam ...
6 votes
0 answers
9k views

Run openvpn inside docker and use as gateway for internet for other networked devices

I am trying to run tunnel all my network traffic on my LAN via an OpenVPN client running inside a docker container. My router and default gateway is running on 10.10.10.1 I have OpenVPN running on ...
6 votes
0 answers
4k views

Remotely Monitoring RDP Certificate

We use OpenSSL on a CentOS 6 server to monitor the certificate on servers for RDP. To do this we use: openssl s_client -connect SERVER01:3389 -prexit This has worked flawlessly until 4 days ago, ...
6 votes
0 answers
329 views

How can one php-fpm 5.6 site cause an outage across all sites?

I have a real head scratcher with one site on a server affecting others in separate php-fpm pools. I thought the idea was that php-fpm pools gave isolation to stop (reduce) this from happening. We ...
6 votes
0 answers
2k views

Ubuntu upgrade to 18.04 setrlimit, getrlimit & ssh_sandbox_child causing sshd to not work

I am performing a do-release-upgrade from a fresh install of Ubuntu 16.04 to 18.04 on a VM. After the upgrade I could no longer access via port 22. Trying again I installed drop bear prior to ...
6 votes
4 answers
12k views

Cannot console into VMs in Hyper-V

When I attempt to view the console of a VM in Hyper-V, I get the following messages: Video remoting was disconnected and Could not connect to the virtual machine. Try to connect again. If the ...
6 votes
1 answer
16k views

RDP session Flickering - Only one user

So, This is a tricky one. I use a system where users connects via VPN to a Terminal Server on an other site. It is working fine for everybody but one user. For this user the screen is flickering/...
6 votes
0 answers
6k views

Is there a way to flush docker's embedded dns cache?

I'm working in an environment where sometimes the DNS server flakes out and tells you it can't resolve a host (eg. lookup of "github.com" fails). It's transient, and usually recovers fairly quickly. ...
6 votes
1 answer
2k views

Apache HTTPd 2.2 is ignoring LocationMatch regex

I am trying to create a Reverse Proxy that match every URL except one in Apache 2.2. It works on Apache 2.4 (Centos 7), but not in Apache 2.2 (Centos 6.6) ... # Do not modify this <LocationMatch "^...
6 votes
1 answer
1k views

nano very slow over ssh

Recently nano has started to be very slow when editing files over ssh. It's particularly slow when editing large files with syntax highlighting. It's most noticeable when yanking lines. There can ...
6 votes
1 answer
5k views

AWS ECS: Unable to place task

I am trying to set up an AWS service with autoscaling. I have created a cluster with an application loadbalancer and created a task using a docker image that should be open on port 8080 for use. I ...
6 votes
0 answers
10k views

Spark Error: Failed to Send RPC to Datanode

We have quite few issues with our Spark Thrift server. It is a new Ambari cluster and no Spark jobs are running now. From the log we can see an error message: Failed to send RPC 9053901149358924945 ...
6 votes
1 answer
3k views

Can't use UPN credentials with New-MoveRequest?

We're on a hybrid setup (Exchange 2013 on-prem), and MRSproxy is enabled and working. We want to archive our user's mailbox when they leave the company. So we want to migrate those mailbox from the ...
6 votes
2 answers
30k views

Unable to restart a systemctl service remotely as a non root user

I have a systemd.socket named gunicorn.socket which I would like to restart after updating some code on a remote server. I've followed the steps detailed in Allowing a non-root user to restart a ...
6 votes
0 answers
6k views

SVN Connector installation is broken in Eclipse Oxygen

I installed subversive 4.0.5 and when connector installation screen pops up I select SVN Kit 1.8.14 from the list. All I get after that is a blink of some window and that's it. After I restart my ...
6 votes
0 answers
36k views

The revocation function was unable to check revocation because the revocation server was offline

I have a chain of certificates: MYROOTCERT -> MYCHILDCERT. The MYCHILDCERT certificate has a CRL distribution point extension: [1]CRL Distribution Point Distribution Point Name: Full ...
6 votes
0 answers
157 views

Write arbitrary attribute into ENV from LDAP upon successful PAM authentication

Is it possible during the authentication phase of pam_ldap to map an arbitrary LDAP attribute of the user's record into the resulting user's environment? The specifics of my situation, in case you ...
6 votes
0 answers
7k views

Server went offline for no reason except SIGINT?

We had a system go offline this morning. The only thing in syslog is: Mar 20 15:27:15 fooserver systemd[1]: Received SIGINT. Mar 20 15:27:15 fooserver systemd[1]: Starting Synchronise Hardware Clock ...
6 votes
0 answers
787 views

Prefer a local mirror without changing /etc/apt/sources.list?

We have local mirrors for Ubuntu (Debian) at http://ubuntu.wikimedia.org/ubuntu/ (https://mirrors.wikimedia.org/debian/). I want to configure clients to prefer downloading/only download packages from ...
6 votes
1 answer
2k views

How do I secure the access token, on Linux, to remote, automated secrets stores like Hashicorp Vault?

There seems to be a bit of a "chicken and egg" problem with the passwords to the password managers like Hashicorp Vault for Linux. While researching this for some Linux servers, someone clever asked, ...
6 votes
1 answer
2k views

Started task in z/OS lacks RACF privileges

I wish to test a JDBC server implementation running under z/OS. The usual approach would be to define a JCL procedure and run this as a started task. The started task requires a user ID under which it ...
6 votes
1 answer
2k views

Dealing with CONFIG FAILURE on fresh drive (3ware / LSI RAID)

This is not about DRIVE failure. It's about drive CONFIG failure. I bought 3 brand new drives for my server, because existing ones have worked for over 4 years and one of them is failing (shows ECC ...
6 votes
0 answers
1k views

How to view cgroups resource control heritage between parents and childs process

Taking for example this hierarchy from systemd-cgls: └─user.slice ├─user-1000.slice │ ├─[email protected] │ │ └─init.scope │ │ ├─3262 /lib/systemd/systemd --user │ │ └─3263 (sd-pam) ...
6 votes
1 answer
10k views

Enter-PSSession on localhost is failing

I am attempting to execute the following Powershell command: Enter-PSSession -ComputerName localhost The server in use is running Windows Server 2008 R2 SP1 64-bit. The server is on a domain. I am ...
6 votes
1 answer
2k views

Inconsistent winbind info on Samba 4 AD domain controller

I've setup a Samba 4 AD domain controller on Debian Jessie (samba 4.2.10). Everything's working fine, except that winbind gives wrong user/group information. I have a sample user "testuser" and a ...
6 votes
1 answer
2k views

S3/Cloudfront CORS working on some files only

I'm really struggling to get Cloudfront and S3 to add Access-Control-Allow-Origin: * to the headers of video files stored on S3 (for inline video on iPhones - seems to be working everywhere else ...
6 votes
2 answers
941 views

Q: RHEL, SSSD, Active Directory

Good afternoon folks. I've been perusing various posts already about getting linux systems to authenticate using AD, but haven't seen anything approaching what I'm beating my head against. There's a ...
6 votes
1 answer
4k views

Windows server 2012 r2 network speed to computer is limited to ~30mbps

We have recently installed Windows Server 2012 R2 in our school. I noticed, that bandwidth to one client is somehow limited to around 30mbps. This server is gateway to internet. When we had UNIX ...
6 votes
1 answer
906 views

OpenNMS check if service is running on remote server using SSH

I have an OpenNMS system configured and up and running. I have a few Linux (debian) servers and I need to monitor if a specific service is running on them. This must be done using only ssh access. No ...
6 votes
0 answers
4k views

How do I allow users to override X-Frame-Options when using Apache + PHP-FPM?

I have an Ubuntu 14.04 server running Apache + PHP-FPM + FastCGI, serving user home pages. For security, I have enabled in Apache's configuration: Header set X-Content-Type-Options: "nosniff" Header ...
6 votes
1 answer
203 views

Can servers with encrypted root filesystems be made reasonably highly available?

I have some servers I'd like to keep on encrypted disks, but I don't want to have to manually type a passphrase at every boot. I also don't want to keep the key on the machine unencrypted. TPM would ...
6 votes
2 answers
3k views

OpenLDAP proxy cache not retrieving entries

I need to set up a local LDAP proxy cache which connects to our central Active Directory server. OpenLDAP Proxy Cache looks just like the thing. But following the manpages as closely as possible, I am ...
6 votes
2 answers
3k views

How does docker stats output relate to top output?

I've got a process running in a Docker container on Linux, with a 2GByte memory limit. (The container is started with docker run --memory=2g.) Here is what top says about it after it's been running ...
6 votes
0 answers
1k views

pfSense Internal Traffic Policy Based Routing

What is the current and correct way to apply policy based routing to pfSense internal traffic (originating from the firewall itself)? Creating a floating rule with the WAN interfaces selected, ...
6 votes
2 answers
4k views

keepalived master cannot reclaim virtual IP after recovered

Steps Start both master and slave Keep pinging virtual ip (i.e 192.168.10.100) Shutdown master Slave enters MASTER state Restart master Slave enters BACKUP state and Master enters MASTER state Ping ...
6 votes
0 answers
10k views

Nginx proxy_pass reverse proxying behind corporate firewall

Has anyone any idea of how to setup nginx behind a corporate firewall, to reverse proxy requests to servers outside the firewall? The reason I want to do this is I am trying to use an application ...
6 votes
1 answer
1k views

udev rule not applied on boot for mounted disk

I'm trying to persist a readahead rule on a mounted drive to use with mongodb. The mount is persisted using /etc/fstab and that works as expected. I have added a udev rule ACTION=="add", KERNEL=="...
6 votes
0 answers
2k views

meaning of 'event_wait : Interrupted system call'

I manage several OpenVPN links. Sometimes while the VPN connection is UP for a few minutes/hours it suddenly gets down with the following (error) message: event_wait : Interrupted system call (code=...
6 votes
0 answers
593 views

Low Entropy on Container

I am thinking my entropy level may be low? $ cat /proc/sys/kernel/random/entropy_avail I am around 132-178 on average. Pool size is default 4096 (this is a container on a virtualizer by the way). ...
6 votes
0 answers
11k views

What does event BEX64 mean?

Recently I had to deal with the situation where an application would crash with problem signature like: Problem Event Name:BEX64 ... Fault Module Name:StackHash_1dc2 Fault Module Version:0.0.0.0 ...
6 votes
0 answers
5k views

Wrong filename encoding/decoding when downloading recursively with wget

I'm downloading files from a remote directory recursively using wget and whoever created the folders and files, used special characters such as è or Ó, when I download a single specificating the full ...
6 votes
2 answers
4k views

Creating a virtual network for KVM guests spanning multiple host machines

I have 5 physical machines running Ubuntu 14.04, all of them are together in a network. These all have static IP addresses. Each of these machines has 1 to 4 virtual machines via KVM/QEMU running ...
6 votes
1 answer
3k views

How to get Mod_pagespeed to output compressed (gzip) css?

Ubuntu 14.04 Apache 2.4.7 php-FPM 5.5.9 Using latest stable Pagespeed Module for Apache (1.9.32.3-4448). I'm in the process of optimizing a WordPress website for speed (bandwidth and rendering). ...
6 votes
1 answer
4k views

Dell Blade DRAC remote: Unable to connect to RAC

I'm attempting to remotely administer a set of Dell blade servers: PE M600 and M605 with iDRAC5. On my Windows 8.1 laptop I installed DRAC Tools v7.3. I can successfully remotely manage the M1000e ...

15 30 50 per page