Common Server issues – FAQs and answers from those in the know
HSTS: enlisting in HSTS preload
6 February 2026 @ 10:22 am
I've already asked about this on stackoverflow, but was advised to put the question here.
I’m trying to submit my domain for the HSTS preload list, but I’m seeing some strange behavior during the submission process.
The preload form reports that the HTTP → HTTPS redirect does not include an HSTS header. When I test this with curl, I can confirm that the HTTP response indeed does not include the HSTS header.
The HTTPS response does include it correctly, so the only response missing the header is the initial HTTP request. To rule this out, I updated the server configuration to also send the HSTS header on th
The preload form reports that the HTTP → HTTPS redirect does not include an HSTS header. When I test this with curl, I can confirm that the HTTP response indeed does not include the HSTS header.
The HTTPS response does include it correctly, so the only response missing the header is the initial HTTP request. To rule this out, I updated the server configuration to also send the HSTS header on thI got the alert from the GCP [closed]
6 February 2026 @ 7:05 am
Action required. Access restricted on some of your VMs due to detected abuse. Contact your project's administrator to resolve the issue. Otherwise, your Compute Engine resources in this project will be suspended.
I received the alert above from GCP. What do I need to do? As I am doing nothing wrong on the VMs. I am simply running my application's frontend and backend on the VM.
Why is Headwind MDM's Guice Injector failing to read role.orgadmin.id from config.properties on Debian 13?
5 February 2026 @ 9:45 pm
Environment:
OS: Debian 13 (Trixie)
Java: OpenJDK 11.0.24
Database: PostgreSQL 17 (Manual login verified)
Server: Tomcat 9.0.98 (Manual install in /opt/tomcat)
The Issue: Tomcat starts, but the application context is destroyed immediately. The localhost.log reveals over 60 Guice initialization errors. The primary crash is a NullPointerException because the injector is null.
Key Error Snippet:
Plaintext
No implementation for java.lang.Integer annotated with @Named(value="role.orgadmin.id") was bound.
while locating java.lang.Integer annotated with @Named(value="role.orgadmin.id")
for the 16th parameter of com.hmdm.persistence.UnsecureDAO.(UnsecureDAO.java:100)
...
No implementation for java.lang.String annotated with @Named(value="JDBC.driver") was bound.
...
No implementation for java.lang.String annotated with @Named(value="smtp.port") was bound.
Configuration Det
rpc-gssd.service fails to start on one server
5 February 2026 @ 7:14 pm
In one of the servers with some inspection of configs the service rpc-gssd fails to start. System is Ubuntu 24.04.3 that has nfs-kernel server installed with currently no shares.
The configs are:
/etc/nfs.conf
[general]
pipefs-directory=/run/rpc_pipefs
[gssd]
keytab-file=/etc/krb5.keytab
preferred-realm=REALM.COM
[mountd]
manage-gids=y
[svcgssd]
principal=nfs/[email protected]
verbosity=2
/etc/idmapd.conf
[General]
Verbosity = 0
# set your own domain here, if it differs from FQDN minus hostname
Domain = domain.com
[Mapping]
Nobody-User = nobody
Nobody-Group = nogroup
Kerberos is based on Samba AD domain and is generated with user to spn e.g. nfs/domain.com.
In logs I get:
2026-02-05T20:59:24.806708+02:00 server01 systemd[1]: Starting rpc-gssd.service - RPC security service for NFS client and server...
2026-02-05T20:59:24.809736+02:00 server01 rpc.gssd[364248]: ERROR: failed to parse nfs/clnt0/info
2026-02-05T20:59:
Anisble bulk call to an API
5 February 2026 @ 3:51 pm
Currently in my ansible task there is an API call and response. Currently it takes one server from the inventory and passing it to API. That API can take 5 serial calls. It works best when the inventory has less than 5 servers. If I target more than 5 servers then it says "API limit reached. Only 5 calls per 300 seconds."
But the API can handle 50 servers at a single call. Ex : server name: ["svr1", "svr2".."svr50"]
I know there is a seriel key in Ansible in which we can process 5 servers at a time. But I don't want to wait for 5 servers to finish all the task then wait for next batch. Since the API handles 50 servers at a time. Just Fire-and-continue. I want to send as much possible server in bulk for that API call task. Rest task can run serially. Kindly suggest me good way to archive this.
My current YML
Task 1:
Call A
uri: https://xyz
body:
server_names: {{ hostname }}
Task 2:
reg
SSH/SFTP won’t enable (checkbox reverts) — how to reset SSH without shell?
5 February 2026 @ 2:16 pm
I’m running Synology DSM 7.3.2-86009 Update 1 and can no longer enable SSH or SFTP — the checkbox immediately reverts after clicking Apply.
I’m logged in as admin and already performed a Mode-1 reset (network/admin reset), but the behavior didn’t change. SSH previously worked, and I had manually edited sshd_config to enable SFTP, so I suspect the SSH service is now broken and won’t start.
Since I currently have no shell access, what’s the correct way to reset or repair the SSH service/configuration on DSM?
I’m logged in as admin and already performed a Mode-1 reset (network/admin reset), but the behavior didn’t change. SSH previously worked, and I had manually edited sshd_config to enable SFTP, so I suspect the SSH service is now broken and won’t start.
Since I currently have no shell access, what’s the correct way to reset or repair the SSH service/configuration on DSM?Azure Database Migration Service with Azure DocumentDB not working ?? (Command serverStatus not supported...)
5 February 2026 @ 11:19 am
Currently trying to migrate an Atlas Mongo DB (hosted on Azure with PrivateLink) to Azure DocumentDB. I first tried it with CosmosDB for Mongo RU and could use the Azure Database Migration Service. It was dead slow plus I got an error so I wanted to try out the vCore model or much rather the new DocumentDB offering which should be pretty much vanilla MongoDB and be compatible with Atlas MongoDB.
But Azure Database Migration Service does not let me choose my CosmosDB (DocumentDB) as a Target. Its not in the list. I made it publicly available plus for all Azure Services. I specified the username and password.
This is my target Connection String:
mongodb+srv://dsdsdsdsdsds:xxxxxxxxxxxx@cdcdcdcd-documentdb.global.mongocluster.cosmos.azure.com/?tls=true&authMechanism=SCRAM-SHA-256&retrywrites=false&maxIdleTimeMS=120000
I tried the ConnectionString method but get the following error:
{ "resourceId":&qu
Why is Kerberos using RC4 (0x17) when AES is enabled?
5 February 2026 @ 9:42 am
I’m investigating Kerberos Event ID 4769 where the service ticket is encrypted with RC4 (0x17), even though AES is enabled and advertised by all sides.
SQLCLS$ (Cluster computer account)
Here is the event:
A Kerberos service ticket was requested.
Account Information:
Account Name: [email protected]
Account Domain: CONTOSO.DOMAIN
Logon GUID: {8d7a3861-1771-7308-2117-75941ece4a7b}
Service Information:
Service Name: SQLCLS$
Service ID: CONTOSO\SQLCLS$
MSDS-SupportedEncryptionTypes: 0x27 (DES, RC4, AES-Sk)
Available Keys: AES-SHA1, RC4
Domain Controller Information:
MSDS-SupportedEncryptionTypes: 0x1F (DES, RC4, AES128-SHA96, AES256-SHA96)
Available Keys: AES-SHA1, RC4
Network Information:
Advertized Etypes:
AES256-CTS-HMAC-SHA1-96
AES128-CTS-HMAC-SHA1-96
Additional Information:
Ticket Encryption Type: 0x17
Session Encryption Type: 0x12
Failure Code: 0x0
So:
The client advertises AES128/AES256
The DC supports AES
The service account sup
Dell R760: NVMe software RAID vs separate drives for production Active Directory server
5 February 2026 @ 7:01 am
I'm setting up my first server (Dell PowerEdge R760) and I'm stuck on storage configuration. The client who delivered the server didn't include an Intel VROC key for hardware RAID on NVMe drives, and I'm also unsure about the best way to organize the OS and data.
Current setup:
4× SAS SSDs (~7TB each) - configured as RAID 10 via PERC H755
2× NVMe SSDs (~3.5TB each) - no RAID, currently OS is on one NVMe
(not critical, can reinstall)
My questions:
NVMe RAID options without VROC key:
What are my alternatives? Software RAID (how effective and popular it
is)?
Should I mirror the two NVMe drives, or use them separately?
OS placement - which is better?
OS on NVMe or RAID 10
I genuinely don't know which approach is better for a production
server
Why do i keep getting the 500 internal server error when i start up XAMPP? [closed]
4 February 2026 @ 8:30 pm
I keep getting this error message when I start up Xampp and try to log into my localhost wordpress site.
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator at postmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.
More information about this error may be available in the server error log.
Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at localhost Port 80"
I checked the Apache error logs to see what the issue was and I got:
Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
So i tried replacing my htacesss file from this
BEGIN WordPress
The directives (lines) between &q