serverfault.com

VN:F [1.9.22_1171]
Rating: 6.0/10 (1 vote cast)

Common Server issues – FAQs and answers from those in the know

Windows Server 2025 began to restart around once a week

24 May 2026 @ 7:18 pm

Our Windows Server 2025 began in the last 2 weeks to restart while nobody was working and we want to know what the reason could be. The server is activated and licensed. The server is running for around 15 months and never showed this behaviour. It started "suddenly". My question is: Where can we check what the reason can be for the last restart? Update: Applying the filter according to @dawidw comment, I get the below results which were when the server restarted. I don't understand them, I can't interpret them. Does somebody see a reason for the restart? Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 2026-05-24 12:45:30 Event ID: 566 Task Category: (268) Level: Information Keywords: (1024),(512),(4) User: SYSTEM Computer: ***.local Description: The system session has transitioned from 0 to 1. Reason SessionUnlock BootId:

How to automatically connect and setup vpn?

24 May 2026 @ 6:41 pm

Most networkManager frontends have an option to "Automatically connect to vpn x when this connection is up", option, but they never work. kde frontend screenshot KDE just fail the entire connection. The one on gnome sets up the base connection and just silently ignores the vpn option. etc. Is there a way to make these work? why all frontends have this option if it never works?

How to view Apache documentation revisions locked on their SVN?

24 May 2026 @ 2:16 pm

How can the public view Apache documentation revisions, e.g., https://svn.apache.org/viewvc?view=revision&revision=1933715 Is there an alternate URL open to the public read-only? No, I don't want to sign up for an SVN account. I want e.g., a GitHub mirror link I can share that is readable without an account. One would think https://infra.apache.org/svn-basics.html#accessing holds the answer. Alas...

Least privilege setup for windows_exporter and wuaserv

24 May 2026 @ 1:16 pm

I'm using the bundled windows_exporter inside Grafana's Alloy service for monitoring purposes of my Windows VMs. I do not wish to run this as local admin, and am running this service as a gMSA. This works perfectly with membership of the following groups: Event Log Readers Performance Log Readers However the 'update' collector for windows_exporter makes a call to GetTotalHistoryCount against wuauserv that fails for the gMSA but succeeds for all regular users (including users not in the local administrators group). this powershell script tested as a non-admin user runs perfectly, however for the gMSA I recieve the error: FAILED at last step above: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) Exception type: System.UnauthorizedAccessException HResult: 0x80070005 The script I'm using: try { Log "Creating Microsoft.Update.Session COM object..." $se

A 500 internal server error with long urls when using nginx as reverse proxy

23 May 2026 @ 10:33 pm

I am stucked with a 500 (internal server error) problem when i try to open long url (with several GET parameters) that is about 2400 or more symblos. This (such a long url) is beacause of using google recaptcha, that adds g-recaptcha-response get parameter, something like: https://example.com/?g-recaptcha-response=0cAFcWeA7m2MzXqHIDpb4_vXzEMYjncqPDzvmE_307UmiB6JI3qDo9Z1KseAahHASrtA1scnvng8tTmK3qeuS1NPitp5tMOV0HXDogYWDVqUwAP5wykssoBvJNLpigeA7lDTqGrBrnqNCSxVkhqVSN1LqeBdq23-T_QtLHcXIVZYxV3REkjGgj7ZYrcozbjpX7tR4DpURM0fCjfeyQ3_zk5Bmbja90IVW8KwJ-VgUO4NOZd5fIoxiU0o9OeYP3Hy71B8leFev7Rf5bxL0OhS8c_vifPJdfstTHPIek8EKegQOVC3v1ELpn9RJY0RusmcAs4UZ8I60v46IjcBiK3mNqaKNUZgCC44MQpMenlnSXx1BHca8IQqGV9ExIo3yvQoZ99aUQ4xRh3reFT-Xv6ZoTUXAy0nO31DG9lp6I3uVNfMwN5yWdEJTFSGDICl1yKfRitVKXbed0zU2mvTtLNCCN4xGGQjfJXi558TWT88DbgXot0iJXi_but9gMmSZuUKBFGuFWy5jAn-hvUC9ZoT1u_1r1_lYpYVdpCj32piw8QLER5f__I_zlAa_0Cw-mHdOSEBKxeTLRgLe-NHU-SPFiRga0pA2VmVi9O1Au1Q0rihxzlL48Oi_nESV5vQB39u50ZlBbznaoSKmZD7n4BwsC8lT7

Received a notice about AWS retiring Bitnami LAMP and recommending their own lightsail LAMP

23 May 2026 @ 9:20 pm

I am new to this, so I hoping I am asking the right question at the right forum. Forgive me if otherwise. I use AWS lightsail, and recently was notified about AWS recommending those who use Bitnami LAMP to migrate to AWS' own version of that. I have gotten quite familiar with Bitnami, and it took me a while to learn and get to that point, so I was infuriated when I received the notice. They say current existing stacks should continue to run, but warn the blueprint will not receive updates. I am bit confused since maintaining the server was alway something I thought I was doing, not AWS. My immediate questions are: For those who know about this, how difficult (technical work and labor, as in amount of hours needed) is the migration? Does AWS' blueprint really offer similar capablities/functionality as the Bitnami? The applications I am running on the current Bitnami LAMP use Websocket servers, hundreds of php endpoints, and use DB to store data, b

Azure AI Foundry portal (ai.azure.com) blocked when Cognitive Services account has defaultAction=Deny. Which IPs/services do I need to allow?

23 May 2026 @ 6:53 pm

I use that command in Azure Cloud Shell to allow-list IPs for an Azure Foundry resource and deny all other IPs: az resource update \ --ids /subscriptions/[subscriptionID]/resourceGroups/[resourceGroupID]/providers/Microsoft.CognitiveServices/accounts/[resource-name] \ --set "properties.networkAcls.defaultAction=Deny" \ "properties.networkAcls.ipRules=[{\"value\":\"12.35.195.199\"},{\"value\":\"213.8.95.91\"},{\"value\":\"99.1.119.25\"}]" \ "properties.networkAcls.virtualNetworkRules=[]" It works great, but I can't view that Azure Foundry resource via the Azure web portal anymore: enter image description here Private network access required

Properly handle dependencies to build a new SELinux module

23 May 2026 @ 10:45 am

I am playing around with a debian 13 VM on which I installed SELinux as documented here : https://wiki.debian.org/SELinux/Setup So far, everything is working smoothly. However, I am now trying to create a new SELinux module with new types and their own TE rules. Writing the .te and .fc files of this module is going well (as far as I can tell...). However I am hitting a snag when it comes to compiling the module. My method to compile my module is the command : make -f /usr/share/selinux/devel/Makefile my_super_module.pp Whenever I do this, make complains that I am missing requirements. Here is an example : Compiling default phpfpm module phpfpm.te:11:ERROR 'permission signull is not defined for class process' at token ';' on line 1286: allow phpfpm_t init_t:process signull; #line 11 phpfpm.te:11:ERROR 'unknown class fd' at token ';' on line 1

Group policy application failure

23 May 2026 @ 8:18 am

We are experiencing Group Policy application errors on multiple computers throughout the domain. I'm unaware of any recent changes. Happens in different OUs, happens on server as well as client OS. One error applying GPO handling LAPS and creating LAPS user with powershell script, also to define members of Remote Desktop Users and Administrators local groups. Error I see in eventlogs is The computer 'Administrators (built-in)' preference item in the ABCD_GPO_LAPS D3A642EB-0B2A-4988-BD07-8A24AC61540E}' Group Policy Object did not apply because it failed with error code '0x800706fc The trust relationship between the primary domain and the trusted domain failed.' This error was suppressed. I have tried debugging security CSE and creating gpsvc.log with extended debug settings (value 0x30002). It yielded no results or any error I could start troubleshooting. Resetting computer password, removing and adding it to the

Prevent Thinkpad from waking from sleep [migrated]

23 May 2026 @ 5:25 am

I have a Lenovo Thinkpad P16S for six months. From the beginning, it wakes from sleep on its own. I've seen this happen when it's just sitting there and there's just the USB power adapter. The lid is disabled in the BIOS. I have everything but the button disabled for the ACPI wakeup events: $ sudo cat /proc/acpi/wakeup Device S-state Status Sysfs node GPP0 S4 *disabled pci:0000:00:01.1 SWUS S4 *disabled GPP1 S4 *disabled pci:0000:00:01.2 SWUS S4 *disabled GPP3 S4 *disabled pci:0000:00:02.1 GPP4 S4 *disabled GPP5 S4 *disabled pci:0000:00:02.3 GPP6 S4 *disabled pci:0000:00:02.4 GPP7 S4 *disabled GPP9 S4 *disabled XHC1 S3 *disabled pci:0000:c4:00.4 XHC0 S3 *disabled pci:0000:c6:00.0 XHC3 S3 *disabled pci:0000:c6:00.3 XHC4 S3 *disabled pci:0000:c6:00.4 NHI0 S3 *disabled pci:0000:c6:00.5 NHI1 S3 *disabled pci:0000:c6:00.6 LID S4