search for: serverfault

...mount CIFS share (mount -t cids) with vers=1.0 I can perform getcifsacl sucessfully. But when I mount with vers=2.0, or 2.1, or 3.0, ACL reading fails. getxattr error: 95 REVISION:0x0 CONTROL:0x0 Why getcifsacl depends on SMB protocol version? Can I read ACL via newer SMB protocol? A asked on Serverfault but without reply: https://serverfault.com/questions/948052/getcifsacl-does-not-work-with-cifs-mount-versions-2-or-3 Thank you, Milo

...he major open source IPSec VPN apps - >> Openswan, strongSwan, etc. I'm pretty sure CentOS 6 had Openswan >> packages. > > libreswan replaced openswan, and is available in the CentOS 7 repo. I just noticed that strongSwan is in EPEL. I'm also looking at this comment on ServerFault: http://serverfault.com/a/655752/24406 If that is accurate, the documentation, and the clustering / load balancing might tilt the balance in the direction of strongSwan. -- Florin Andrei http://florin.myip.org/

...ount with vers=2.0, or 2.1, or > > 3.0, ACL reading fails. > > > > getxattr error: 95 > > REVISION:0x0 > > CONTROL:0x0 > > > > Why getcifsacl depends on SMB protocol version? Can I read ACL via > > newer SMB protocol? > > > > A asked on Serverfault but without reply: > > https://serverfault.com/questions/948052/getcifsacl-does-not-work-with-cifs-mount-versions-2-or-3 > > Any hint where to ask for this? > > Regards, Milo > I think the problem is that SMBv1 is very different from the later SMB versions, there are just...

I need to set the umask for apache to 002. I've tried every idea I've found on the internet, but nothing make a difference. Most suggest that I put "umask 002" in /etc/sysconfig/httpd, but that doesn't seem to make a difference. Other's suggest adding something to the httpd.service script for systemd. And that doesn't make any difference. Any suggestion from

...so, if I run getent groups it doesn't return any member, while on the CentOS 6 with samba 3.5.10 it works: centos7 # getent group 'domain users' domain users:x:10513: centos6 # getent group 'domain users' domain users:x:10513:jakov.sosic Any ideas? I've also found this serverfault post: http://serverfault.com/questions/625416/samba-4-group-members-not-shown-in-getent-group

...in-up as many instances as required. These instances which will all share the same characteristics and files (they''re basically dupes), and will all sit behind a load-balancer, so they''ve all been given the same hostname/fqdn. I''ve tried following the steps outlined in a serverfault[1] answer but I seem to only get the following error: # puppetd --fqdn webserver --server puppet.my.org --waitforcert 60 -- test err: Could not retrieve catalog from remote server: hostname not match with the server certificate warning: Not using cache on failed catalog err: Could not retrieve cat...

Hi, I'm cross-posting here from serverfault.com in case anyone can help. I just found a similar question on askubuntu.com also without an answer. Switched recently from W2K3 to Samba4.0.9/CentOS6.4 for our fileshare for WinXP clients. Have an ancient (1995!) piece of software that uses 8.3 filename format. After the switch, long filena...

...-pages/man5/systemd.exec.5.html [ https :// man7. org /linux/man-pages/man5/systemd.exec.5.html ] Several posts on StackExchange indicate that the name of the directive 'UMask' is case-sensitive, so it must match the first two letters as UPPERcase, the remainder lowercase. This posting at ServerFault provides the exact steps: https://serverfault.com/questions/924960/how-to-set-umask-for-apache-on-amazon-linux-2-ami [ https :// serverfault. com /questions/924960/how-to-set-umask-for-apache-on-amazon-linux-2-ami ] Depending on how Apache httpd is called (for example, if there is a wrapper scri...

...i have a bit more complex login script. This script add common-shares, user shares, set some settings on firefox profile and so on. Sometimes it is working well, sometimes some shares are missing. is there a simple way to log all the events of the script to a logfile? like this in bash? # http://serverfault.com/questions/103501/how-can-i-fully-log-all-bash-scripts-actions exec 3>&1 4>&2 exec 1>>/root/logfile.log 2>&1

HI all, I have configured a CentOS 6.3 x86_64 as a NFSv4 server and I am suffering errors like this: perl[7889]: segfault at a80 ip 00007fb870227ea2 sp 00007fff2fecda30 error 4 in libperl.so[7fb870193000+162000] The symptoms are the same as described in this thread: http://serverfault.com/questions/235059/vfs-file-max-limit-1231582-reached Can anyone confirm that is a bug when NFSv4 is used? My actual options are: fs.file-max = 1639200 [root at server01 fs]# lsof |wc -l 3962 [root at server01 fs]# cat file-nr 3040 0 1639200

...; user shares, set some settings on firefox profile and so on. >> >> Sometimes it is working well, sometimes some shares are missing. is >> there a simple way to log all the events of the script to a logfile? >> >> like this in bash? >> >> # >> http://serverfault.com/questions/103501/how-can-i-fully-log-all-bash-scripts-actions >> >> >> exec 3>&1 4>&2 >> exec 1>>/root/logfile.log 2>&1 >> > This all depends on what the script is written in and where it runs. > > Rowland It's old school b...

Hi, In many mail setups a required feature (for privacy reasons) is to hide the host and IP of clients (in the "Received" header) that use the authenticated submission over port 587. In Postfix that's possible (https://serverfault.com/q/413533/86332), but not very nice to configure especially if you only want want to strip the Received header for port 587 submissions, but not on port 25. As far as I can see this configuration is not possible at all in the Dovecot submission server because the function which adds the Receive...

...ic) servers (on different data centers) replicated using dsync, what is the best way to automatically direct users to the main server when it is up and to the redundant one when the main server is down? Using DNS? I've seen that DNS-based failover has generally issues (for example: http://serverfault.com/questions/60553/why-is-dns-failover-not-recommended, which is informative although it refers to web servers). What is the suggested approach? HAProxy? Heartbeat/Pacemaker? Any advice will be appreciated. Thanks and regards, Nick

Hi, I want to authenticate against Samba 4 using samba and sssd on FreeBSD using this guide: http://serverfault.com/questions/599200/how-to-integrate-active-directory-with-freebsd-10-0-using-security-sssd The problem is, the machine I want to install authentication on is the domain controller itsself. So the following commands show the errors: net ads join createupn=host/macy.ronnyforberger.de at RONNYFOR...

...from sshd (OpenSSH 6.7) in my auth.log that I hadn't noticed before: sshd[32008]: error: Received disconnect from x.x.x.x: 3: \ com.jcraft.jsch.JSchException: Auth fail [preauth] I was kinda puzzled why sshd would emit some JCraft[0] messages and the best explanation I found was this Serverfault[1] answer, quoting a snippet from packet.c:1965 and adding: > It looks like openssh server passes through the last message from the > client in its "Received disconnect" error message, so it appears that > this is a zombie login attempt from a botnet that is authored in Ja...

...verything. > > > should I try 'yum install ...' again ? you can't install it yet because dovecot-2.3.4-2.x86_64 is not shown, probably due to the priority protection plugin: -> 226 packages excluded due to repository priority protections Try disabling it, see: https://serverfault.com/questions/312472/what-does-that-mean-packages-excluded-due-to-repository-priority-protections <https://serverfault.com/questions/312472/what-does-that-mean-packages-excluded-due-to-repository-priority-protections> Afterwards you should see all dovecot packages and can install version 2.3...

I was taught in kitty school that running a ntp server in a vm was a bad idea. Is that still the case?

...generated from the ''each_pair'' loop changes, resulting in a different file. The Ruby docs state that "hashes enumerate their values in the order that the corresponding keys were inserted.", but is that not true for Puppet hashes? I did stumble across this post: http://serverfault.com/questions/368784/puppet-and-templates-how-to-loop-sequently-and-not-randomly which suggests to do something like <% aliases.sort_by {|key, value| key}.each_pair do |key, val| -%> <% end -%> Will it work? Is that a proper solution? Thanks! Martijn Grendelman -- You rece...

...to authenticate server-local users anymore? There is an undocumented option for smb.conf (auth methods), which seems to make the behavior I would like possible: Specifying the sequence of attempted authentication methods (in my case: local users first, then AD users). Also, this post here: https://serverfault.com/questions/365257/how-do-i-configure-samba-to-use-ads-smbpasswd-authentication <https://serverfault.com/questions/365257/how-do-i-configure-samba-to-use-ads-smbpasswd-authentication> is describing the behavior I would like to use. >> >> The global section of smb.conf: >&gt...

On Mon, 8 Aug 2016 14:33:37 -0400 Steve Ankeny <steve_a at cinergymetro.net> wrote: > Looking at a "System 58 error" with Windows 7 -- > > https://serverfault.com/questions/69049/system-error-58-while-accessing-shares-on-windows-7-from-windows-xp > > I'm wondering if the problem lies in the "server max level = NT1" > issue we've seen before with Windows 10? > > In other words, the problem may lie in the PXE Windows PE 1...