zymhan's questions

OpenVPN is running on pfSense 2.0-release. Until recently, these messages had not occurred. In the OpenVPN server logs, the follwing set of messages repeats every minute

openvpn[34562]: xx.xx.xx.xx:11553 Connection reset, restarting [0]
openvpn[34562]: TCPv4_SERVER link remote: [AF_INET]xx.xx.xx.xx:11553
openvpn[34562]: TCPv4_SERVER link local: [undef]
openvpn[34562]: TCP connection established with [AF_INET]xx.xx.xx.xx:11553
openvpn[34562]: LZO compression initialized
openvpn[34562]: Re-using SSL/TLS context
openvpn[34562]: xx.xx.xx.xx:54881 Connection reset, restarting [0]
openvpn[34562]: TCPv4_SERVER link remote: [AF_INET]xx.xx.xx.xx:54881
openvpn[34562]: TCPv4_SERVER link local: [undef]
openvpn[34562]: TCP connection established with [AF_INET]xx.xx.xx.xx:54881
openvpn[34562]: LZO compression initialized
openvpn[34562]: Re-using SSL/TLS context

I'm planning on migrating 2 HyperV VMs that are currently running on Windows Server 2012R2 to a new server running 2008R2. What's the best way to migrate the VMs? Will replication work between the two OSes? How about the export feature in HyperV? I know that it's not possible to move directly from 2008R2 to 2012R2 without an intermediate conversion, but I can't find any info on doing the reverse.

I've been trying to replicate the OpenLDAP server we currently have, so that we can use it in the event the main server crashes. I was able to get the database transferred, as well as the TLS certs, and ldapsearch works fine and return the correct information.

However, I can't seem to authenticate using the database on the new server. I am unable to su to an LDAP user on the new server when it is using itself for authentication. I currently have an entry in /etc/hosts that redirects traffic to the old server to localhost, e.g. 127.0.0.1 ldap-old. If I comment out this line, the new server can authenticate against the old server perfectly well. However, when the line is uncommented, I get Unknown id: test.user7 whenever I try to su to an LDAP user. I get the same issue if I change ldap.conf to point to the new server's FQDN. For some reason, it seems that the data is all in place on the new server, but it's not being made available for authentication.

Also, getent passwd shows the correct output when the new server is authenticating against the old, but only shows a few LDAP users when authenticating against itself.

The current configuration is:

• Ubuntu 12.04
• OpenLDAP 2.4.28
• hdb backend (still not sure what this means, but it works)
• Self-signed TLS cert generated with GnuTLS

I realize this is a bit convoluted, please let me know if I should clarify or explain what I've done.

I have a main backup server running rsnapshot, with ~2TB of backups stored on it. After the nightly backups, I copy the contents of the rsnapshot directory to an offsite server, using rsync -aH --delete /source /dest. However, this seems to copy the entire contents of the backup directory every night, as the offsite copy takes ~9 hours to complete.

I assume my rsync command doesn't have the right switches, but there may be something else I'm missing. Any ideas?

I'm trying to monitor a log file for the word "error", and if the word appears, fire a trigger for each new occurence of "error." I'm starting simply, with a file (/var/log/test.log) that is world-readable. It contains the following lines:

test
error
also an error
but not this

The item in Zabbix is log[/var/log/test.log,error], type "Zabbix Agent (Active)", with information type "log".

I'm using the following trigger tied to this item: {nero:log[/var/log/test.log,error].str(error)}=1

I've tried leaving the "error" part out of the item, and changing the trigger value to equal 0. No matter what I do, I get a trigger status of UNKNOWN in the Events tab.

I'm not sure what I'm missing here, does someone see the issue? I checked the agent log on the server, and it doesn't mention any issues.

I'd like to setup Zabbix monitoring for the Google Apps Status Dashboard, and I was thinking that monitoring the RSS Feed with Zabbix's WEB monitoring would be the best way to approach it. However, I can't seem to find any information on how to monitor an RSS with Zabbix. Does anyone have any experience in doing this?

I've searched high and low trying to find a method that allows me to store GPG keys for existing users in an OpenLDAP server. The only relevant how-to I've found is this. However, I'm unable to get this method to work with the existing OpenLDAP database. I've successfully imported the schema, but I can't figure out how to actually add information to the fields specified in the schema.

If I can provide any additional information, please let me know.

I can't seem to find an example of how each of the log levels in slapd work. I want slapd to log the users who are logging in, and the server that they are trying to log into, as well as any authentication errors. I've tried using this LDIF to modify the logging level to every level (except for the debugging levels):

dn: cn=config changetype: modify replace: olcLogLevel olcLogLevel:

Can someone point me to a more helpful resource than the OpenLDAP manual? Or give me explanation on what typs of information the logging levels produce?

Thanks for your help.

I have setup a Samba share on Ubuntu 12.04 for our finance team, and they access it via Windows 7 and Mac OS X. They mount the share using their LDAP credentials. All of our LDAP users have "employees" as their primary group, and the finance team belongs to a secondary group named "finance".

When any of the finance team members create a folder within the Samba share, the folder's group defaults to "employees". How can I force all files and folders created on the share to have the group set to "finance"?

I'm setting up a new OpenLDAP server on Ubuntu 12.04 with a copy of our current LDAP database. I've gotten most of the configuration down, I think, but I'm having trouble telling if the LDAP queries are encrypted or not. I suspect there may be a misconfiguration with the certificates, but I'm not sure how to tell.

Any suggestions or comments are greatly appreciated!

I've been running xen for a few weeks now on an Ubuntu 12.04 server. I've got 3 guests: a Windows Server 2003 guest, an Ubuntu guest, and a Windows 7 Guest. My Server 2003 guest seems to work fine; I can ping it from the network, the hostname resolves correctly, and it can see the internet. This guest is attached to xenbr0, and its IP is 10.100.1.21.

My Win7 guest is what is driving me crazy. I use the same configuration script as a base, changing the important parts (hostname and boot disk, mainly). It installed correctly, and is currently running, but I am unable to ping this guest. It's hostname is "alexander", with an IP of 10.100.1.22. It is also using xenbr0. The guest can ping the firewall and various IP addressess, but seems unable to resolve hostnames.

Now heres the weird part: when I use rdesktop (RDP client) from my laptop (not the xen host) to connect to alexander, it works just fine. It apparently resolves the hostname fine, and does the same with the IP address.

So, can someone tell me why I can access this guest using RDP, but not using ping, nslookup, traceroute, etc? It's apparently invisible to all but RDP. Also, is it okay to use two guests on the same bridge, or do i need different ones for each guest?

Thanks in advance for any help.

Regards