Newest Questions
329,282 questions
0 votes
0 answers
9 views
IBM Verify Identity Access 11 - SAML authentication on virtual junction
I'm struggling with IBM Verify Identity Access 11 configuration, with something that probably should be super straightforward. I have Federation with MS Entra, which I think, based on the logs, seems ...
0 votes
1 answer
21 views
How logrotate works with apache? DDOS attack filled server disc
I experienced a full disk issue probably connected to a DDOS attack, the apache access log file was huge. I know logrotation is triggered by default by file size. My server is an Ubuntu 20.04 with ...
0 votes
0 answers
21 views
Can't access Samba server on Linux guest from Windows [closed]
I followed this tutorial to create a shared folder in my Linux guest machine in Virtual Box that can be accessed from my host machine (Windows 11). I am able to access the samba share from Linux by ...
0 votes
0 answers
15 views
Apache fails to start in FreeBSD 15 with an error can't find files
I'm having issues getting Apache to start. If I run apache -t I get this output: httpd: Syntax error on line 526 of /usr/local/etc/apache24/httpd.conf: Could not open configuration file /etc/apache/...
-1 votes
1 answer
32 views
Strange directories under /tmp/ - thoughts? [closed]
I suddenly saw under /tmp the following directories which made me a bit suspicious, thought that maybe i have a hacker that push things out via some job running on my Mac total 8 drwxrwxrwx@ 7 myself ...
-1 votes
0 answers
27 views
Trust anchor for certification path not found [closed]
Windows Server 2012 R2 running IIS 8.5 and Plesk. PositiveSSL Certificate for www.vetinorder.gr issued by Sectigo. The request CSR was created in IIS 8.5. Response zip file contains: Root CA ...
0 votes
0 answers
15 views
Automate KVM image creation for testing purposes
I'm trying to clean up the testing workflow for a project I'm working on, a database built on top of io_uring and NVMe. Right now I'm using KVM and its NVMe device emulator to power the dev ...
0 votes
0 answers
29 views
Windows 10 ESU machines not updating using WSUS
I have Windows 10 22H2 PCs that are activated for the commercial Extended Security Update (ESU). When the devices are configured to update using WSUS, they do not update. I can see them in the WSUS ...
0 votes
0 answers
33 views
Kea DHCP: HP Thin Clients do not accept Option 137 (HP-EZUpdate) — Kea encodes FQDN differently than Windows DHCP
I’m migrating DHCP services from Windows DHCP to Kea DHCP, and I need to deliver DHCP Option 137 (HP-EZUpdate) to HP Thin Clients (for example, HP t420). Windows DHCP sends Option 137 as a plain ...
0 votes
1 answer
51 views
running two instances of rsyslogd via systemd
I need to have two instances of rsyslogd running on an ubuntu 2404. One being the systems local syslog server which is locked down to enterprise standards and one for a syslog relay for collecting ...
0 votes
0 answers
26 views
Ensure Hyper-V Host shuts down
We generally rarely need to shut-down / restart our production Windows Server 2022 Hyper-V host. But... sometimes it might happen (power failure, updates, etc). And when it does, we've observed this ...
2 votes
2 answers
118 views
LTO tape drive speed issue
I have one Quantum LTO-5 SAS external drive and one IBM LTO-6 SAS internal drive. With ITDT system test, Quantum reports ~70MB/s whereas IBM reports ~140MB/s for the same IBM LTO-5 cartridge (and not ...
1 vote
1 answer
69 views
Kubernetes controller stuck at 0/1, no new pods can be scheduled
I changed the Immich image version number in my manifest files (synced and deployed via ArgoCD). However, the pod was still showing up as "terminating" and didn't delete until I forced its ...
0 votes
0 answers
71 views
Rule state established,related not working in iptables (ubuntu 24.04)
I have a clean installation of ubuntu 24.04, but I am having problems setting up iptables. For the initial configuration, my goal is simply to allow all outgoing traffic and incoming SSH traffic. This ...
0 votes
0 answers
46 views
HAProxy Routing Phantom Connections To Redis Sentinel Nodes In Down State
Twice in the past couple of years I’ve encountered an unusual issue whereby after a failover in a Redis Sentinel cluster, HAProxy has seemed to continue to route phantom connections to a node that is ...
-3 votes
0 answers
14 views
Access to Register TVNC Results in ERROR 404 [closed]
As the title states - now the details: The link at https://documentation.help/7-Zip/register.htm to register 7-Zip You can find all information about registering at: http://www.7-zip.org/register....
1 vote
1 answer
74 views
Apache24 Alias configuration [closed]
I have Apache24. PHP 8.4.15, and MySQL 9.5.0 on Windows. Running phpinfo(); in index.php located in C:\Apache24\htdocs works when "localhost" is entered in the address bar of a browser. I ...
0 votes
0 answers
15 views
debugging status=226/NAMESPACE exit code error from systemd
Just spent a few hours debugging a systemd service file which failed to start with status=226/NAMESPACE and no other information. Most searches offer unhinged things, like removing PrivateTmp or ...
7 votes
2 answers
559 views
convenient way to get a shell with a systemd unit file restrictions?
assuming a modern linux host, is there any convenient way to spawn an interactive shell in the exact context systemd would use for a unit/service? alternatively, any way to attach a shell to a running ...
1 vote
0 answers
40 views
Monit not detecting sleeping processes even though uptime rule triggers [closed]
I need to automatically end processes running for more than 24 hours on a CentOS 7 server. I’m using Monit to detect long-running processes and execute a custom script. To test it, I reduced the ...
0 votes
1 answer
27 views
Unable to create VM with NVIDIA T4 GPU even after quota approval
I am trying to create a Compute Engine VM with NVIDIA Tesla T4 GPUs. My GPU quota request was approved (GPUS_ALL_REGIONS = 4), but I still cannot create the VM. Every time I try to create the instance,...
0 votes
1 answer
95 views
What reason for application (SOLR) having its own timezone setting, and why would it still be different?
I have installed Apache SOLR for audit use with Apache Ranger. The config file (solr.in.sh) has a timezone setting, which defaults to UTC, but I have it set to Europe/Bratislava the same as the host ...
2 votes
1 answer
177 views
Where can I see the cost per hour or number of requests per hour in Google Cloud Platform?
I'm trying to understand my usage patterns and costs on Google Cloud Platform. Specifically, I would like to see: Cost per hour, not just per day or per month Number of requests per hour I am mostly ...
0 votes
1 answer
87 views
Should I store domain admin passwords and user passwords in separate files? [closed]
In an Ansible based email server automation project, random passwords are created for domain admins and users mailboxes, and stored in a JSON file. In addition to using them in the automation process, ...
0 votes
0 answers
11 views
chrony refclock "not valid age"
I have a system that take GPS time as the only source. An issue of the system is that it would set time to 2024 which is one year early from now when doing a full reset which then trigger the "...
0 votes
0 answers
38 views
Ubuntu Server on ARM fails to boot after cloning EFI partition from HDD to SSD
Description: I’m unable to boot Ubuntu Server after migrating the system from an HDD to an SSD on an ARM-based system. Here’s what I did and the current state: Steps to reproduce: I cloned the EFI ...
0 votes
1 answer
134 views
Determine the IPv4 pMTU to/from a system behind a NAT with directional information
Is there an easy way to determine the IPv4 pMTU (path MTU) between two Linux systems, when one of them is behind a NAT and determine in what direction packets are being dropped and where? I have root ...
0 votes
0 answers
57 views
Microsoft are refusing to deliver our server emails
Note: Server Address block below hidden with 198.51.100.0 . All other address blocks are as provided by the log. The email feedback stats: > LOG: MAIN cwd=/usr/local/cpanel/whostmgr/docroot 4 ...
0 votes
0 answers
42 views
Get 404 error for rewrite URL with query string
I cannot change my URL e.g. /dfdrgr.php?page=dfgfg to /rrrr. I’ve a .txt file contained e.g. /rrrr /dfdrgr.php?page=dfgfg; and a redirected.map file contained: # Redirects map file – auto generated ...
1 vote
1 answer
33 views
Why is ip6tables blocking ssh?
I'm unable to connect to one of my servers using ssh over IPv6. sshd is configured to listen on tcp/922. I found this in my server log: 2025-12-09T13:44:14.917279-05:00 myserver kernel: ip6tables ...
0 votes
0 answers
45 views
Configure NGINX to only use quantum safe ciphers
OpenSSL 3.5 supports "Hybrid ML-KEM" in TLS 1.3 to avoid "Harvest now, decrypt later" attacks, when Quantum Computers are capable of defeating the encryption in the future. For ...
0 votes
0 answers
15 views
In CheckMK, how do I find how a service check has been configured?
In CheckMK, how do I find how a service check has been configured for a specific Linux host "myhost"? After selecting the monitoring page of "myhost" -> Host -> Run Service ...
0 votes
0 answers
58 views
Resetting krbtgt account password in a multi-Domain Forest
We have two Active Directory Domains, the ROOT Domain (Domain A) and the TREE Domain (Domain B). I want to reset the krbtgt account's password in both Domains for security maintenance (not due to a ...
0 votes
1 answer
64 views
Renewing LDAPS certificate for apps & appliances
There are applications and/or appliances that work with LDAPS. Here, the Kerberos Authentication template period is 1 year. Normally, it is automatically renewed with auto-enrollment. Will there be an ...
0 votes
1 answer
29 views
Migrate to Kerberos Authentication template without downtime
I have Kerberos Authentication already. Kerberos Authentication template - validity periods : 1 years Domain Controller Authentication - validity periods : 5 years I want to remove Domain Controller ...
0 votes
0 answers
9 views
Mounting vmdk file [migrated]
I have a VM with these files: Name-FS.vmdk: DOS/MBR boot sector; partition 1 : ID=0xee, start-CHS (0x0,0,2), end-CHS (0x229,25,63), startsector 1, 4294967295 sectors, extended partition table (last) ...
1 vote
1 answer
57 views
Where did my swap go?
We're running OEL8.9. I'm consistently seeing 40% of swap in use (3.1Gb out of 7.6Gb): total used free shared buff/cache available Mem: 62Gi 1.8Gi ...
1 vote
1 answer
109 views
Zabbix Agent on XP not communicating
Preface: I work in an industry that requires new builds to be created in the same fashion as they were originally, which means maintaining those systems. We have a diverse environment including XP, ...
0 votes
0 answers
13 views
AWS S3 bucket policy when using groups for access control
I'm new to AWS and I'm trying to set up group-based access to an S3 bucket. Public access to to the bucket is disabled and I have created two groups with the following policies: Group: bucket.name-...
3 votes
1 answer
105 views
SSH Public Key authentication bypasses Google LDAP account status check (SSSD/PAM)
I am currently configuring SSSD to authenticate Ubuntu 24.04 servers against Google Secure LDAP. I want users to be able to log in using SSH Keys for convenience. However, if I suspend/disable a user ...
0 votes
0 answers
18 views
Prometheus systemd-exporter missing metrics from accounting
On the target VM I have enabled a systemd-exporter via docker and nginx as reverse proxy. So far I am getting my metrics into Grafana. systemd-exporter: image: prometheuscommunity/systemd-...
0 votes
1 answer
46 views
Unable to access Cisco switch web interface under masquerade
I cannot access my Cisco Catalyst 3560 web interface from outside LAN (via ipsec VPN), even though I'm sourcenatted as the LAN IP. I can ping it and telnet to it, but http won't go. Port 80 is opened ...
0 votes
0 answers
70 views
How to enable DECT messaging on an RTX 8660 IP-DECT base (with Samsung OfficeServ 7070)?
I’m working with an RTX 8660 IP-DECT base station connected to a Samsung OfficeServ 7070 PBX, and I need to enable text messaging to DECT handsets. From what I understand, the RTX 8660 requires a ...
0 votes
0 answers
59 views
How do I set up data transfer from one domain to another in ingress k8s?
Good afternoon, it's tedious for me to configure ingress so that the result from the address https://s3.animori.tv/animori/public/robots.txt issued at the address https://animori.tv/robots.txt at the ...
0 votes
0 answers
20 views
Deciding whether to support both Ubuntu 22.04 and 24.04 or just 24.04 with ny Ansible Playbook set [closed]
I am a bit new to Ansible and doing a project for automating email server setup, to make my life easier in work. We provide email server setups for clients. At first I was thinking of supporting both ...
0 votes
1 answer
72 views
Zebra GK420d shared on the network. Printing ZPL files. Works proper on clients. Prints wonky on host itself
I have a WIN11Pro workstation hosting a USB connected Zebra GK420d over the local network. I've followed the instructions from Zebra https://supportcommunity.zebra.com/s/article/Print-a-zpl-file-using-...
1 vote
0 answers
81 views
K3s on VPS: Error 404 when using nginx ingress class for Portainer
I have 2 VPS (with public IPs) connected together using Wireguard VPN and I am running k3s on them, making a cluster. (That works, I think). I want to manage it using Portainer.IO Comunity edition. I ...
1 vote
0 answers
45 views
Slow upload speed when when request buffering is off on a kubernetes nginx ingress
I have a Nginx Ingress in Kubernetes that serves large requests (up to 500MB) from the public internet. When I disable request buffering nginx.ingress.kubernetes.io/proxy-request-buffering: "off&...
0 votes
1 answer
103 views
nginx, how to serve different headers for specific client IPs?
As title, we have an usecase where we need to serve "Content-Security-Policy" header or "Content-Security-Policy-Report-Only" header depending on the client IP, internal teams will ...
0 votes
0 answers
6 views
Docker client reports incorrect API version [migrated]
docker compose up returns the message: Error response from daemon: client version 1.41 is too old. Minimum supported API version is 1.44, please upgrade your client to a newer version However, the ...