serverfault.com

VN:F [1.9.22_1171]
Rating: 6.0/10 (1 vote cast)

Common Server issues – FAQs and answers from those in the know

How to install and configure strongSwan on Ubuntu 24.04 for Windows/Linux/Android/IOS/MacOS with login/password authentication

28 May 2026 @ 6:27 pm

I have VPS with Ubuntu 24.04 installed, and domain connected to it. Need to install and configure strongSwan on it for own use. It must be configured to allow me to connect from Windows/Linux/Android/IOS/MacOS. Authentication supposed to be using login/password (without need to import SSL-certificate). I tried using AI to help me with that, but always fail. So now asking for your help.

Intermittent 10–15 second delay before logon in domain environment

27 May 2026 @ 2:49 pm

I am troubleshooting a Windows domain logon delay affecting client workstations. Symptoms About 10–15 second delay before the login screen appears NETLOGON Event ID 5719 during startup GroupPolicy events 1058 / 1129 / 1503 observed When enabling “Always wait for the network at s

Apache2: Virtual hosts (htttp, https) and Directory directive

27 May 2026 @ 12:40 pm

We have a legacy server that needs updating. During this process I noticed some peculiar bevahior. Again this thing is ancient and internal only. It was http-only but some new part required https so I do have a certificate now and ssl setup. There are 2 virtual host: for port 443 and 80. Now the strange thing is one of the legacy websites using a Directory directive and only configured in the port 80 (http) virtual host works just fine on https even though it is not configured in that virtual host. How is this possible?

How to create an item or something similar in Zabbix where i can read the service being run by an specific host?

27 May 2026 @ 11:44 am

In my company they have a Zabbix with more than 500 hosts. They are behind bastions and more. The point for access is only through the Zabbix API. I need a list of the services running and their versions, for each host, service agnostic. There are templates for Windows and Linux separated. I asked the senior sysadmin and they have podman containers and also some virtual machines. How can a configuration be made for an Item of the template to return this? They suggested that I look into Hosts inventory but I don't see how that solves the problem.

ApacheDS change entry of prescriptiveACI disconnects server

27 May 2026 @ 9:14 am

I have setup a clean ApacheDS on Ubuntu. I use the "dc=example,dc=com" to test some ACI. The entry already exists as I have created it via Directory Studio. Therefore changetype: modify. #!RESULT ERROR #!CONNECTION ldap://192.168.2.200:389 #!DATE 2026-05-27T11:04:56.489 #!ERROR PROTOCOL_ERROR: The server will disconnect! dn: cn=enableSearchForAllUsers,dc=example,dc=com changetype: modify objectClass: top objectClass: subentry objectClass: accessControlSubentry cn: enableSearchForAllUsers subtreeSpecification: { base "dc=example,dc=com" } prescriptiveACI: { identificationTag "Searchers", precedence 0, authenticationLevel simple, itemOrUserFirst userFirst: { userClasses { allUsers }, userPermissions: { { protectedItems: { entry, allUserAttributeTypesAndValues }, grantsAndDenials: { grantRead, grantBrowse, grantReturnDN }

How to allow ssh login using sssd when user belongs to both groups?

27 May 2026 @ 6:19 am

We have FreeIPA server holding all the users and groups. And there are a lot of Debian clients to it (by using freeipa-client package). This sets up sssd service. We have multiple teams working on multiple products and a semi-automated way of giving production access on request. Previously there was a single team setup, and we had this in sssd.conf for production servers: simple_allow_groups = allow-production Users had to request being added to group, where they would be removed automatically when request expires. Now we want to add a separation by product, so that users not belonging to a particular product, would not interfere even if they had been issued production access. We tried this: simple_allow_groups = allow-production,product-a However, this allows login if user belongs to one or the other group. How can I make this an "and" condition, allowing l

Software RAID-1 using NVMe drives on multi-socket system: split the drives or share a CPU?

27 May 2026 @ 2:40 am

I'm getting ready to put together a new server with bcache (Linux) to speed up a SAS RAID-5 array. I'll be using cheap NVMe drives as the cache media, with an LSI controller hosting some large spinners as the backing store. Key information 1: This will be on a multi-socket system. Key information 2: The NVMe drives (two of them) will be mirrored into a single RAID-1 array in software using the kernel's MD facilities. Two of the front NVMe-capable drive bays are assigned to {i.e. have PCIe lanes to} CPU0, and two more are assigned to CPU1. My question is: Should I take care to place the NVMe drives such that they are split across the two CPUs, or should I make sure they are assigned to the same CPU? I don't know how the underlying RAID logic in the Linux kernel works, and even less so how low-level I/O works in a modern QPI-based (or UPI-based) system. But it seems to me that one of these approaches should be much preferred over the other (from a system perfor

Apache server behind reverse proxy redirecting incorrectly

26 May 2026 @ 7:54 pm

Let's say I have a reverse proxy server (proxy) and a backend server actually handling the traffic (backend). I use a reverse SSH tunnel to send the traffic to the backend server. So I setup the proxy server like this: ProxyPass "/" "http://localhost:8080/" ProxyPassReverse "/" "http://localhost:8080/" I enabled the correct Apache modules, and all was good. However, I noticed an issue. If I specified a redirect like so: Redirect permanent /index.html /w/index.php Accessing the backend server without the proxy causes the redirect to work correctly (e.g. http://backend redirects to http://backend/w/index.php), but accessing it through the proxy server causes it to redirect to http://localhost/w/index.php instead, which shouldn't be happening. My SSH tunnel runs on the backend server, and

.de domain shows "active" in RDAP but TLD registry return NXDOMAIN

26 May 2026 @ 3:43 pm

I am having an issue with a .de domain genieglobal-workforce.de registered through GoDaddy. My nameservers are hosted on DigitalOcean. The domain appears completely valid and active in the registry's RDAP database, but the actual .de zone file does not contain my domain, resulting in an NXDOMAIN from the TLD root servers. It has been several hours since the last update. I have verified that My DigitalOcean zone file is fully configured with valid $ORIGIN, $TTL, SOA, NS, and A records and there is no DNSSEC issue either. So what is the problem? whois command say the domain is active Domain: genieglobal-workforce.de Status: connect Querying the DENIC RDAP shows the status as active and correctly lists my DO nameservers: { "rdapConformanc

How to upload files that contain special characters/non english using curl in Powershell? [migrated]

26 May 2026 @ 2:41 am

I'm trying to upload a file that contain special characters & non-english letters using curl in Powershell but it's unable to read/open the file. Error gives this: curl: (26) Failed to open/read local data from file/application The command I used is this: [Console]::OutputEncoding = [System.Text.Encoding]::UTF8; $OutputEncoding = [System.Text.Encoding]::UTF8; curl.exe -F "sess_id=xxxxxx" -F "utype=prem" -F "to_folder=28890" -F "file_0=@C:\Users\Administrator\Desktop\OST\Complete\[2026.05.25] 学園アイドルマスター 初星学園 Remix Album「ReCollection」vol.1 [FLAC 48kHz/24bit].zip" "https://d300.userdrive.org/cgi-bin/upload.cgi?upload_type=file&utype=anon" I tested this by renaming the file so the path does exist it just can't read special characters. Is there any fix for this?