JamesRyan's questions

I'm trying to setup backend servers with ssl between the LB and the Server (172.16.12.34 is hosting http and https on the standard ports)

backend test
        balance source
        option httpchk
        default-server fastinter 7000 inter 500 fall 2
        server server1 172.16.12.34:443 check
        server server2 172.16.12.34:443 check ssl
        server server3 172.16.12.34:80 check
        server server4 172.16.12.34:80 check ssl

and I get the following unexpected output in stats

          Status     LastChk
server1   4m2s DOWN  * L7TOUT in 500ms
server2   4m2s DOWN  * L7TOUT in 501ms
server3   4m4s UP    L7OK/200 in 2ms
server4   4m4s UP    L7OK/200 in 2ms

It seems to be doing all the checks in http only and ignoring the ssl keyword.

Is this an Haproxy bug or have I got my config wrong? Or could this be compiler options? It is haproxy 1.6.4. Until I compiled with openssl it complained about the ssl keyword.

Is there a way to convert an OEM windows 8 installation to the version that will work with Action Pack keys without reinstalling from scratch?

(I need to do this in order to upgrade Windows 8 to Windows Pro 8)?

PS This is not a licencing question

I made a clone of zfs filesystem that has a number of snapshots. I also have several replicated copies of the filesystem.

How can I find which filesystem/snapshot a clone is attached to?

(Seems like something that should be in the docs/googlable but I haven't found anything)

I have 2 servers with a share, \\servera\share and \\serverb\share. DFS is setup on \\domain\share to point to both machines. A 3rd party replication solution compares \\servera\share to \\serverb\share.

When I turn off serverb \\domain\share is still available, as expected. However \\serverb\share is also still available but shows the contents from servera. This messes up the replication.

Why is this happening and how can I be sure to connect to one specific server or another?

When you turn serverb off you can no longer ping it but you can still connect to the share (but see servera). At no point does the dns for serverb ever point at servera.

I am trying to install DFS replication on Windows 2003 R2 which asks for the Windows 2003 R2 disk 2 but can not find wdfsrres.dll on there.

Where can I get it?

I have UCARP working but the documentation is confusing and I've found at least 3 different ways suggested in blogs (these are old and don't all seem to work). I currently have ucarp- lines added to /etc/network/interfaces under ubuntu but now I need to set it up on CentOS with multiple VIPs per interface.

In Multiple UCARP VIPs on single Interface with Debian/Ubuntu Evan Anderson says that this should be easy in CentOS. I've installed the UCARP package but there are no init scripts and it ignores my .conf files so I am wondering if this is the right way to go about it.

Can anyone describe the right way to set this up or link to a recent example that works?

I need to create a local user with the same name as a domain user under CentOS with Likewise installed.

When I use Useradd it says user exists, because a domain user with the same name exists.

It is a service account for backup and does not work using a domain account. On machines where the local account was added before likewise was installed it works fine.

Is there a way to temporarily disable this check?

I am trying to setup 2 Glassfish servers in a load balanced configuration using UCARP and HAProxy

Server1 has 2 IPs x.x.x.17 and x.x.x.18

HAProxy is listening on only x.x.x.18 and Glassfish listening on only x.x.x.17 running with the following configuration...

global

maxconn 4096
debug
user haproxy
group haproxy

defaults

mode http
retries 3
option redispatch

listen wms x.x.x.18:8080
source x.x.x.18
option httpchk
balance leastconn
server Server1 x.x.x.17:8080 check inter 2000 fastinter 500 fall 2 weight 50
server Server2 x.x.x.19:8080 check inter 2000 fastinter 500 fall 2 weight 50

Server2 with 1 IP x.x.x.19 is running Glassfish

Even though I can manually wget the page from x.x.x.17:8080 and receive a 200 OK response, HAProxy says Server1 is DOWN and doesn't direct any requests to it. I can't find any reason why.

Here is an excerpt from the Server1 access log with the checks...

"x.x.x.18" "NULL-AUTH-USER" "14/Jan/2010:14:44:23 +0000" "OPTIONS / HTTP/1.0" 200 0
"x.x.x.18" "NULL-AUTH-USER" "14/Jan/2010:14:44:23 +0000" "OPTIONS / HTTP/1.0" 200 0
"x.x.x.18" "NULL-AUTH-USER" "14/Jan/2010:14:44:23 +0000" "OPTIONS / HTTP/1.0" 200 0
"x.x.x.18" "NULL-AUTH-USER" "14/Jan/2010:14:44:29 +0000" "OPTIONS / HTTP/1.0" 200 0
"x.x.x.18" "NULL-AUTH-USER" "14/Jan/2010:14:44:29 +0000" "OPTIONS / HTTP/1.0" 200 0

Here is an excerpt from the Server2 access log with the checks...

"x.x.x.18" "NULL-AUTH-USER" "14/Jan/2010:14:58:25 +0000" "OPTIONS / HTTP/1.0" 200 0
"x.x.x.18" "NULL-AUTH-USER" "14/Jan/2010:14:58:25 +0000" "OPTIONS / HTTP/1.0" 200 0
"x.x.x.18" "NULL-AUTH-USER" "14/Jan/2010:14:58:31 +0000" "OPTIONS / HTTP/1.0" 200 0
"x.x.x.18" "NULL-AUTH-USER" "14/Jan/2010:14:58:31 +0000" "OPTIONS / HTTP/1.0" 200 0

If I remove the httpchk option then Server1 checks as UP, however this is not a permanent solution because we need it to fail over properly if the response really fails.

Any ideas?

(HAProxy is v1.3.22)

Addn: I just tried adding server3 x.x.x.13 running Glassfish but on Windows and that also says down when it is up and accessible from the proxy machine.

Addn2: After installing v1.4 of haproxy to get error codes, the error is Layer7 invalid response info: "HTTP/1.1 ". When we retrieve the page manually both the UP and DOWN server return HTTP/1.1 200 OK as the first line.

So after running wireshark to see what is going on. On the glassfish server which works (and all the other webservers I've checked) the response HTTP/1.1 200 OK all comes in the first packet. On the glassfish servers that don't work the response comes in 3 packets of HTTP/1.1 then 200 then OK.

So any idea why HAProxy is not dealing with multiple packets or how to configure glassfish not to split it? (maxKeepAliveRequests=1 already)