garg's questions

I'm trying to automate the creation and deletion of a folder each time a computer is added or removed from the domain.

When a computer joins a domain, I'd like folder w/ %computername% to be created. When a computer is removed from a domain, I'd like folder %computername% deleted from the domain.

One thing that I'm trying is to create a task in Task Scheduler, that begins the task "On an Event". That way I can check for the event when a computer joins/removes a domain, and then create or delete accordingly. Is there a way for the task to parse the eventlog so I can extract the computer name from it when the task is run?

Or is there a better way of doing this?

Our zimbra server is experiencing unexplained slowdowns every couple of days that are only resolved after rebooting the server. From the end user's perspective, if they are using webmail and they send a message, then it will eventually timeout. From the system terminal, there are slowdowns logging in, switching users, and restarting the zimbra services. It takes up to 2 minutes to change a user using 'su -'

Restarting all the zimbra services, dns services, does not resolve the problem. The problem is only resolved after completely rebooting. After rebooting, logging in, switching users, and restarting servers happen quickly.

We are using dnsmasq for split DNS which is needed for our environment because of NAT. But querying DNS returns results immediately. We are using an external ldap database for authentication but no other servers using it show any problems and there are no load problems on it either. Everything else is a default install and configuration.

There are no obvious errors in the system logs. The server load, disk IO, is the same when there is a problem and when there is no problem.

Originally this was happening once a week usually on mondays, or tuesday. This week, it happened on Monday, and Thursday.

My version is:

zimbra@servername ~ $ zmcontrol -v Release 7.2.1_GA_2790.RHEL6_64_20120815212147 UNKNOWN_64 FOSS edition.

Has anyone encountered or solved such a problem ?

I installed a certificate on the mail server with Subject Alternative Names. Thunderbird does not throw any warnings but when an Outlook 2007 client connects, it throws a warning titled, "Internet Security Warning - The target principal name is incorrect | View Certificate | Do you want to continue using this server?"

I viewed the certificate and went to details, and it has six domains in the Subject Alternative Name field. That list includes the exact DNS name that I have listed for imap and smtp servers.

If I change the imap and smtp to the primary DNS name that the certificate was Issued To, then the error goes away.

Why does Thunderbird understand the Subject Alternative Names but Outlook throws the warning?

Also, I'm using USGCB group policies. I haven't been able to find anything so far... is there a windows server 2012 group policy that might be removing support for Subject Alternative Names in a UCC?

The certificate was purchased from go-daddy.

I have ZCS 7.2 opensource installed at webmail.domain.com and mailman on mailman.domain.com/mailman.

I wanted to setup a proxy so that when someone goes to webmail.domain.com/mailman, the proxy would instead pull up the contents of mailman.domain.com/mailman.

With apache and mod_proxy I could do something like ProxyPass /mailman https://mailman.domain.com/mailman ProxyPassReverse /mailman https://mailman.domain.com/mailman

With the amount of customization in zimbra, is it possible (and advisable) to do the same with zimbra's web server? So basically a reverse proxy that forwards to an arbitrary internal website.

I want to update Adobe Reader remotely on a Mac through the terminal. Flash Player had a .pkg file in the .dmg, so installing that wasn't difficult. There is no .pkg file in Adobe Reader updates.

Does any one have a handy method for performing these updates? I see some .sh files in the .dmg but it is not clear what the order is for running them.

Edit:

There is a script at AdbeRdrUpdate*_all_xxx.app/Contents/Resources/InstallUpdates.sh and it takes 4 commandline arguments like:

./InstallUpdates.sh app-dir app-name current-dir payloadnumber

I'll try something like:

./InstallUpdates.sh /Applications AdobeReader ./ 0

Has anyone had experience doing this? Thanks :)

I have DMZ hosts forwarding to a DMZ syslog which in turn forwards all the syslog messages to an internal syslog server. It's working fine for the most part but the internal syslog host messages appear to all be coming from the DMZ syslog ie it loses the original hostnames.

{Hosts} -> {DMZ syslog: openbsd: syslog v 1.17} -> {Internal Syslog: rsyslog v3}

How can I preserve the hostnames?

Thanks!

Is there a way to chain syslog forwarding? For example, how can a clienthost forward its syslogs to ServerA and ServerA forward everything to CentralSyslogServer?

I'm using rsyslog.

The reason is that Server A is a dual homed machine which gets logs from other hosts which should all be stored in CentralSyslogServer. Currently CentralSyslogServer seems to only be getting ServerA's local logs but nothing that was forwarded to ServerA from the clienthost.

Resolved:

I had to edit /etc/sysconfig/syslog and add -h to the SYSLOGD_OPTIONS

My mistake - serverA is using syslogd

If a regular user has added a printer by going to a share \\share and then right clicked on a printer and then clicked 'connect', how can that be removed by an administrator?

I have tried prnmngr.vbs and rundll32 commands but they do not affect printers added in this way. Is there a way that they can be removed via commandline without the use of a login/logoff script?

This is a Windows XP machine in a server 2003 domain.

I have two questions about the system-auth file

1) If the /etc/pam.d/system-auth password complexity settings are changed on an existing system, does it invalidate any existing passwords?

2) Is it possible to say that lcredit=-1 ucredit=-1 dcredit=-1 ocredit=-1 <-- at least three out of the four character groups should be enforced?

Thanks!

edit:

2) is answered here: http://linux.die.net/man/8/pam_passwdqc and http://www.cyberciti.biz/faq/rhel-fedora-centos-linux-password-quality-control/

I have setup conditional DNS forwarding for certain subdomains but it is behaving in a way that I think is unexpected.

This is what I have setup.

sub1.domain.com -> 1.1.1.1 sub2.domain.com -> 1.1.1.1

Now if anything is going to abc.sub1.domain.com it does forward that dns request to 1.1.1.1. However, if there is a domain 123.abc.sub1.domain.com then it does not forward to 1.1.1.1 instead nslookup says that it did not get a response.

However, if I setup another conditional domain rule that says: abc.sub1.domain.com -> 1.1.1.1

then 123.abc.sub1.domain.com does resolve.

Is this by design? I thought it would act like a wildcard but it doesn't.

I am in an environment where all the machines are behind a switch that I don't have access to. Each ethernet wall port has limited bandwidth depending on how much has been paid for each port. The problem is that some people have 10Mbps connections and some have 100Mbps connections and this causes problems with local intranet file transfers and operating system/software deployments. Operating systems can take hours to be deployed if the machine is on 10mbps.

Do you know if it is possible with most switches to set a rule that would limit bandwidth coming in/going out to an extranet, but keep full bandwidth if the packets are destined to go to a local machine?

For example, the internet might be limited to 10Mbps, but internal servers would get gigabit speeds?

Thanks

Someone brought me an external hard drive that used to have ext3 partitions. He said that he was trying to install fedora core 10 on his machine, and left the external drive with his backups plugged in. During the partition selection screen, he said he somehow accidentally marked the external drive to be formatted as well.

This is what I know so far: The desired partition was ext3, after being formatted the drive shows up as linux lvm.

What I have done so far: I got an identical external drive and cloned the drive usind dd if=/dev/sdb ou=/dev/sbc

Then on the cloned drive, I am using TestDisk to analyse the drive. So far I don't see any apparent progress.

Do I have any more options that I should try?