serverfault.com

VN:F [1.9.22_1171]
Rating: 6.0/10 (1 vote cast)

Common Server issues – FAQs and answers from those in the know

certbot Could not automatically find a matching server block for subdom.mydom.com. Set the `server_name` directive

3 May 2024 @ 11:55 pm

Certbot is not able to install the certificate for a subdomain nginx config. It says that no matching server_name directive is set, although it is set. 1) My Nginx config: server { listen 80 ; listen [::]:80 ; server_name subdom.mydom.com, www.subdom.mydom.com; location / { proxy_pass http://127.0.0.1:8080; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; # proxy_set_header X-Forwarded-Proto "https"; } # Redirect all HTTP traffic to HTTPS return 301 https://$host$request_uri; access_log /var/log/nginx/subdom.mydom.com_log; error_log /var/log/nginx/subdom.mydom.com_log; } It's a reverse proxy to an apache2 instance. 2) sudo ngnix -t says:

AlphaLan ++ 9.0 alternative terminal solutions [closed]

3 May 2024 @ 7:45 pm

What emulator does alphalan use, because im trying to use a different terminal app (like putty) that stays up to date, etc.. But none of them are working properly with the source im connecting to.

Restrict OPENLDAP record attributes replicated to consumer

3 May 2024 @ 7:10 pm

I have open LDAP 2.5 running on two servers in multi-master mode. I would like to replicate (most of) this database to a remote site in another country. Due to privacy concerns, I would like to restrict what info is replicated, in particular there are a few fields that I want to exclude from replication. It seems that syncrepl is a pull-oriented process... I can have the consumer "not ask" for all the fields, but there must be some way of excluding fields from replication on the provider end. Unfortunately it probably involves ACL's which I don't have a lot of experience setting up. Can anyone offer suggestions or a tutorial that would show how to do what I want? I did some reading and to strip out, let's say the "gecos" field from replication, what I think I need is: On provider: an ACL rule on my user database {0}mdb something like: olcAccess: {0}to * by dn.exact="cn=replicator,dc=my,dc=company,dc=com" read by * bre

phpBB installation: chgrp not permitted

3 May 2024 @ 6:58 pm

What did I do wrong? I did see many of those warnings during the installation of phpBB: [phpBB Debug] "chgrp(): Operation not permitted" in file /var/www/phpbb_0003_0003_0011/vendor/symfony/filesystem/Filesystem.php on line 257. All files in /var/www/phpbb_0003_0003_0011/ are owned by www-data. Line 257 of Filesystem.php is the if clause within the else block: /** * Change the group of an array of files or directories. * * @param string|iterable $files A filename, an array of files, or a \Traversable instance to change group * @param string|int $group A group name or number * @param bool $recursive Whether change the group recursively or not * * @throws IOException When the change fails */ public function chgrp($files, $group, $recursive = false) { foreach ($this->toIterable($files) as $file) {

Getting "Read-only file system" error with Elasticsearch deployment on Kubernetes

3 May 2024 @ 3:14 pm

I'm trying to deploy Elasticsearch 7.12.0 on Kubernetes and have configured it to run as a single-node cluster. But after deployment, I encountered the following error: Exception in thread "main" org.elasticsearch.bootstrap.BootstrapException: java.nio.file.FileSystemException: /usr/share/elasticsearch/config/elasticsearch.keystore.tmp: Read-only file system Likely root cause: java.nio.file.FileSystemException: /usr/share/elasticsearch/config/elasticsearch.keystore.tmp: Read-only file system Here are the relevant parts of my configurations: Deployment YAML: apiVersion: apps/v1 kind: Deployment metadata: labels: app: elasticsearch name: elasticsearch spec: replicas: 1 selector: matchLabels: app: elasticsearch template: metadata: labels: app: elasticsearch spec: containers: - image: docker.elastic.co/

trying to configure password protection on aliased directory in apache

3 May 2024 @ 2:05 pm

I have apache 2.4.57 on a windows server. I created a new folder that only needs to display files that can be downloaded. In the httpd.conf file, I added this: Alias "/pw_files" "f:\www_shared\pw_files" <Directory "f:\www_shared\pw_files"> Require all granted Options Indexes IndexOptions FancyIndexing HTMLTable FoldersFirst SuppressDescription SuppressLastModified NameWidth=* IconWidth=20 IconHeight=20 IndexStyleSheet /css/autoindex.css </Directory> I created a .htpasswd file in the f:\www_shared\pw_files with this: AuthType Basic AuthName "please enter credentials" AuthUserFile f:\www_shared\pw_files AuthGroupFile "c:/apache_php/apache/htpasswd_group2.txt" Require group pw_files I created a new user: htpasswd -c f:\www_shared\pw_files\.htpasswd pw_user I moved the output from .htpasswd into the .htpasswd file

Encountering error": "Internal Server Error", Code 500 - Okta Authentication with AWS OpenSearch VPC + Nginx Reverse Proxy

3 May 2024 @ 1:54 pm

I have a AWS Opensearch in VPC network. I am using Nginx reverse proxy to access Opensearch Dashboard (Kibana). My Curent setup is working fine. I tried to SAML Okta Authentication but getting following error: "statusCode":500,"error":"Internal Server Error","message":"Internal Error" I am using following configuration is Okta: SSO URL: https://PROXY-URL/_plugin/kibana/_opendistro/_security/saml/acs When attempting to access OpenSearch via the proxy URL, users are redirected to the Okta authentication page as expected. After entering the authentication code, the redirect URL points to **https://PROXY-URL/_plugin/kibana/_opendistro/_security/saml/acs ** However, instead of successfully accessing OpenSearch Kibana, I am encountering an Internal Server Error with the following message statusCode":500,"error":"Internal

Hyper-V Guest in TrueNAS

3 May 2024 @ 1:34 pm

I'm working with TrueNAS-SCALE-24.04.0 on an Intel(R) Xeon(R) W-2123 CPU with 126 GiB of memory, attempting to import and run a Hyper-V exported VM for backup purposes. The VM is in VHDX format. My goal isn't necessarily optimal performance; I primarily need to ensure the VM boots up and is accessible. So far, I've attempted to convert the VHDX image to a ZVol on TrueNAS. However, creating a new KVM instance from this has led to multiple cascading issues, including system and networking problems, among other errors that arise from just converting and attaching the VM. Given the numerous issues, I'm considering other strategies, perhaps using my existing Windows 11 VM on TrueNAS as a Hyper-V host, although I'm aware virtualization isn't enabled by default on TrueNAS. Has anyone successfully imported and run a Hyper-V guest on TrueNAS SCALE? What strategies or tools did you use? Any insights or suggestions would be greatly appreciated!

Unable to fetch oslo notifications from neutron

3 May 2024 @ 1:15 pm

We are trying to fetch oslo notifications related to: 1: VM related tasks like create, delete and update from nova. 2: port related tasks like create, delete and update from neutron. This is being tested on a simple packstack allinone setup with openstack version Caracal. We are able to get notifications related to Nova but can't get any updates for port related events from neutron. Config changes: /etc/nova/nova.conf [notifications] notify_on_state_change=vm_state default_level=INFO notification_format=versioned [oslo_messaging_notifications] driver=messagingv2 transport_url=rabbit://guest:[email protected]:5672/ /etc/neutron/neutron.conf [DEFAULT] notify_nova_on_port_status_changes = True notify_nova_on_port_data_changes = true transport_url=rabbit://guest:[email protected]:5672/ control_exchange = openstack [oslo_messaging_notifications] driver = messagingv2 transport_url = rabbit://guest:

Strugling with delegating a subnet 192.168.0.0/27

3 May 2024 @ 12:12 pm

Okay, this is driving me nuts. I'm trying to re-delegate a /27 sub-net of 192.168.0.0/24. I've got the 0.168.192.in-addr.arpa. zone. This zone, besides SOA, have one entry: 1 CNAME 0/27.0.168.192.in-addr.arpa. Then I have a 0/27.0.168.192.in-addr.arpa. zone. This zone, besides SOA, have one entry: 1 PTR tilt-1.example.com. When I query host -a 192.168.0.1 mydns-1 This is what I get: $ host -a 192.168.0.1 mydns-1 Trying "1.0.168.192.in-addr.arpa" Using domain server: Name: mydns-1 Address: 192.168.1.40#53 Aliases: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27387 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;1.0.168.192.in-addr.arpa. IN PTR ;; ANSWER SECTION: 1.0.168.192.in-addr.arpa. 86400 IN C