yakatz's questions

I have a Dell PowerEdge M630 blade with 2x Xeon E5-2630 v4 processors which support quad-channel memory. The blade supports 24 sticks of RAM, 12 for each processor, 4 channels of three slots.

I added RAM to fill it up (24x 16GB sticks), but the system says there is only 336 GB, not 384GB, and the iDRAC inventory shows slots B3, B7, and B11 are not populated. There are no BIOS warnings or iDRAC warnings.

I switched the sticks around to make sure that the issue wasn't with specific dead sticks. My next thought was to try switching the processors to see if it is an issue with the processor or the socket/motherboard, but before I go through the trouble, is there anything else I should check?

,

I have three domain controllers, dc01.ad.exmaple.com (10.83.78.10), dc02.ad.example.com (10.23.20.15) and dc03.ad.example.com (10.24.20.15). They are all in the standard Domain Controllers OU.
dc01 is a physical machine running Windows Server 2019. dc02 and dc03 are Azure Virtual Machines running Windows Server 2022, dc02 in East, dc03 in East 2.
All the machines are on a VPN and replication is working.

I also have three users in the Domain Admins group: user1.admin, user2.admin and user3.admin.

user1.admin can not connect to RDP on dc02 by name, only by IP address. When connecting by hostname, the user gets the message "The logon attempt failed" and nothing is logged anywhere that I could find in Event Viewer. The other users can connect to RDP with no problem using the hostname. If user1.admin tries to connect with the IP address instead of the hostname, everything works fine.

Where else can I look?

I am trying to control the version of puppet agent installed on our RedHat systems.

Our Puppet manifest has

$puppet_version = hiera('profile::puppet_agent::version', '6.12.0')

class {'::puppet_agent':
  collection            => 'puppet6',
  package_version       => $puppet_version,
  service_names         => [], # Don't start puppet service
  msi_move_locked_files => true,
  manage_pki_dir        => false,
}

# This is required on RedHat 7 only
$puppet_release = $::osreleasemaj ? {
  '7'     => '*.el7.*',
  default => undef,
}

yum::versionlock { 'puppet-agent':
  ensure  => present,
  version => $puppet_version,
  release => $puppet_release,
  before  => Class['Puppet_agent'],
}

This works to configure puppet and it actually changes the contents of the YUM versionlock config file, but it doesn't seem to work to force puppet-agent to upgrade. I changed the version from 6.12.0 to 6.16.0. Now every puppet run fails with the error message Could not update: Failed to update to version 6.16.0, got version 6.12.0-1.el7 instead.

On RHEL 7, /etc/yum/pluginconf.d/versionlock.list contains:

# File managed by puppet
0:puppet-agent-6.16.0-*.el7.*

On RHEL 8, /etc/yum/pluginconf.d/versionlock.list contains:

# File managed by puppet
0:puppet-agent-0:6.16.0-*

My understanding is the yum versionlock doesn't care about the version listed in the file - just the package name.

I looked into whether puppet can clear the version lock, run the update, and set the version lock again all in the same agent run, but I can't find any way to make that work.

Any other way to do this?

We are running RHEL7 and RHEL8, and using the official Puppet YUM repositories.

I started noticing very slow page loads on my Jira server. I figured out that this only happens when Jira is accessed through nginx, but if I use SSH port forwarding to the server and access the backend ports directly, page loads are instantaneous.

nginx config (/etc/nginx/sites-enabled/support.example.org.conf):

## Jira
##
## Modified from nginx http version
## Modified from https://confluence.atlassian.com/jirakb/integrating-jira-with-nginx-426115340.html
## Modified from https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
##

server {
  listen 192.168.118.32:443 ssl;
  server_name support.example.org;
  server_tokens off;

  ## Strong SSL Security
  ## https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html & https://cipherli.st/
  ssl on;
  ssl_certificate     /etc/letsencrypt/live/support.example.org/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/support.example.org/privkey.pem;

  ssl_protocols TLSv1.2;
  ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
  ssl_prefer_server_ciphers on;
  ssl_session_cache shared:SSL:10m;
  ssl_session_tickets off;
  ssl_session_timeout 1d;


  access_log  /var/log/nginx/support_access.log;
  error_log   /var/log/nginx/support_error.log;

  location /jira {
    gzip off;

    proxy_read_timeout      300;
    proxy_connect_timeout   300;
    # proxy_redirect          off;
    proxy_request_buffering off;
    proxy_buffering         off;

    proxy_set_header    X-Forwarded-Host    $host;
    proxy_set_header    X-Real-IP           $remote_addr;
    proxy_set_header    X-Forwarded-Ssl     on;
    proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
    proxy_set_header    X-Forwarded-Proto   $scheme;
    proxy_pass http://localhost:8081/jira;

    client_max_body_size 2G;
  }


  include snippets/letsencrypt.conf;
}

Some of the proxy settings are things I tried already and they ranged from minor improvements to no improvements, but the performance is still abysmal.

Jira config: (/opt/atlassian/jira/conf/server.xml)

<?xml version="1.0" encoding="utf-8"?>
<Server port="8005" shutdown="SHUTDOWN">
    <Listener className="org.apache.catalina.startup.VersionLoggerListener"/>
    <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on"/>
    <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener"/>
    <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener"/>
    <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener"/>

    <Service name="Catalina">
        <!--
         ==============================================================================================================
         HTTPS - Proxying Jira via Apache or Nginx over HTTPS

         If you're proxying traffic to Jira over HTTPS, uncomment the below connector and comment out the others.
         Ensure the proxyName and proxyPort are updated with the appropriate information if necessary as per the docs.

         See the following for more information:

            Apache - https://confluence.atlassian.com/x/PTT3MQ
            nginx  - https://confluence.atlassian.com/x/DAFmGQ
         ==============================================================================================================
        -->

        <Connector port="8081" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"
                   maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false"
                   maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true" redirectPort="8443"
                   acceptCount="100" disableUploadTimeout="true" bindOnInit="false" secure="true" scheme="https"
                   proxyName="support.example.org" proxyPort="443"/>

        <Engine name="Catalina" defaultHost="localhost">
            <Host name="localhost" appBase="webapps" unpackWARs="true" autoDeploy="true">

                <Context path="/jira" docBase="${catalina.home}/atlassian-jira" reloadable="false" useHttpOnly="true">
                    <Resource name="UserTransaction" auth="Container" type="javax.transaction.UserTransaction"
                              factory="org.objectweb.jotm.UserTransactionFactory" jotm.timeout="60"/>
                    <Manager pathname=""/>
                    <JarScanner scanManifest="false"/>
                    <Valve className="org.apache.catalina.valves.StuckThreadDetectionValve" threshold="120" />
                </Context>

            </Host>
            <Valve className="org.apache.catalina.valves.AccessLogValve"
                   pattern="%a %{jira.request.id}r %{jira.request.username}r %t &quot;%m %U%q %H&quot; %s %b %D &quot;%{Referer}i&quot; &quot;%{User-Agent}i&quot; &quot;%{jira.request.assession.id}r&quot;"/>
        </Engine>
    </Service>
</Server>

When I test directly, I enable the default connector:

<Connector port="8080" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"
                   maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false"
                   maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true" redirectPort="8443"
                   acceptCount="100" disableUploadTimeout="true" bindOnInit="false"/>

What am I doing wrong or how can I improve the performance?

Copied from NetworkEngineering since they said it is off-topic there.

Network Diagram:

We have two OpenVPN servers that are currently accessible with static routes from the two core routers and I am trying to set them up with OSPF using Quagga (FRR is not available on RedHat 7) so I can remove the static routes. We have a robust BGP and OSPF setup currently, but things seem to break when I start ospfd. Each server hosts several OpenVPN instances (for high-availability). Some of these instances use a bridged network instead of a routed network and turning on OSPF also seems to break these systems. VPN clients on the bridged interface are connected transparently to the core of the network (used for Site-to-Site VPN), while users are put in the subnet assigned to the server they connect to.

I have tried so many different options, but this is my current config:

[root@openvpn00 ~]# vtysh

Hello, this is Quagga (version 0.99.22.4).
Copyright 1996-2005 Kunihiro Ishiguro, et al.

openvpn00.example.edu# show run
Building configuration...

Current configuration:
!
hostname openvpn00.example.edu
log stdout
log syslog
!
password zebra
!
interface br3254
 ipv6 nd suppress-ra
!
interface eth0
 ip address x.x.127.201/27
 ipv6 nd suppress-ra
!
interface tap0
 ipv6 nd suppress-ra
!
interface tun0
 ipv6 nd suppress-ra
!
interface tun1
 ipv6 nd suppress-ra
!
router ospf
 redistribute connected
 passive-interface default
 no passive-interface eth0
 network 10.73.250.0/24 area 0.0.0.7
 network 10.73.252.0/25 area 0.0.0.7
 network x.x.127.192/27 area 0.0.0.7
!
ip forwarding
!
line vty
!
end
openvpn00.example.edu# exit

[root@s2svpnb ~]# vtysh

Hello, this is Quagga (version 0.99.22.4).
Copyright 1996-2005 Kunihiro Ishiguro, et al.

openvpn01.example.edu# show run
Building configuration...

Current configuration:
!
hostname openvpn01.example.edu
log stdout
log syslog
!
password zebra
!
interface br3254
 ipv6 nd suppress-ra
!
interface eth0
 ip address x.x.127.202/27
 ipv6 nd suppress-ra
!
interface tap0
 ipv6 nd suppress-ra
!
interface tun0
 ipv6 nd suppress-ra
!
interface tun1
 ipv6 nd suppress-ra
!
router ospf
 redistribute connected
 passive-interface default
 no passive-interface eth0
 network 10.73.251.0/24 area 0.0.0.7
 network 10.73.252.128/25 area 0.0.0.7
 network x.x.127.192/27 area 0.0.0.7
!
ip forwarding
!
line vty
!
end
openvpn01.example.edu# exit

If I use anything besides network x.x.127.192/27, Quagga doesn't broadcast on that interface.

Switch Configuration:

router00:

router ospf
 area 6
 area 0
 area 7
 default-information-originate
 redistribute bgp route-map BGP-OSPF
 redistribute connected
 redistribute static
 log all
!
interface ve 427
 ip address x.x.127.222 255.255.255.224
 ip ospf area 7
 ip vrrp-extended vrid 29
  backup priority 200
  advertise backup
  ip-address x.x.127.193
  enable
!

router01:

router ospf
 area 6
 area 0
 area 7
 default-information-originate
 redistribute bgp route-map BGP-OSPF
 redistribute connected
 redistribute static
 log all
!
interface ve 427
 ip address x.x.127.221 255.255.255.224
 ip ospf area 7
 ip vrrp-extended vrid 29
  backup priority 100
  advertise backup
  ip-address x.x.127.193
  enable
!

Do I need to use separate VLANs and point-to-point subnets (maybe /31s) for this or is there a way to keep everything on the same VLAN? Any better ways to handle this?

We have Puppet set specific firewall rules on our system administrator's workstations. We discovered recently that some systems were connected to the wrong network ports and were able to get admin access to things based on IP address. All of these systems are using Puppet, so we wanted to have Puppet fail if a system is on the admin network and doesn't have the correct firewall rules enabled.

This worked perfectly yesterday and now doesn't work today and I can't figure out why.

We have a factor that creates facts in the format vlan####_interface: eth0 and vlan###_ipaddress: 10.72.1.100 based on the IP addresses actually on the machine.

profile/manifests/firewall_rulesets/vlan2501.pp

class profile::firewall_rulesets::vlan2501 {

  firewall{"801 add some example firewall rule":
    ensure => present,
    chain  => 'INPUT',
    proto  => 'tcp',
    dport  => '22',
    source => ['10.72.1.0/24'],
    state  => ['NEW'],
    action => 'accept',
  }
}

profile/manifests/base.pp

class profile::base {
  ... other stuff ...

  Firewall {
    before  => Class['::fw::post'],
    require => Class['::fw::pre'],
  }

  include ::fw::pre
  include ::fw::post
}

fw/manifests/pre.pp

class fw::pre {
  Firewall {
    require => undef,
  }

  #ensure input rules are cleaned out, but ignore fail2ban
  firewallchain { 'INPUT:filter:IPv4':
    ensure => present,
    ignore => '-j f2b-sshd',
    purge  => true,
  }

  firewallchain { 'f2b-sshd:filter:IPv4':
    ignore => '-A f2b-sshd',
  }

  # Default firewall rules
  firewall { '000 accept all icmp':
    proto  => 'icmp',
    action => 'accept',
  }
  -> firewall { '001 accept all to lo interface':
    proto   => 'all',
    iniface => 'lo',
    action  => 'accept',
  }
  -> firewall { '002 reject local traffic not on loopback interface':
    proto       => 'all',
    iniface     => '! lo',
    destination => '127.0.0.1/8',
    action      => 'reject',
  }
  -> firewall { '003 accept related established rules':
    proto  => 'all',
    state  => ['RELATED', 'ESTABLISHED'],
    action => 'accept',
  }
}

fw/manifests/post.pp

class fw::post {
  firewall { '999 drop all':
    proto  => 'all',
    action => 'drop',
    before => undef,
  }

  # This is set to be after all other firewall rules by profile::base
  if $facts['vlan2501_ipaddress'] {
    if (! defined( Class['profile::firewall_rulesets::vlan2501'] )) {

      # We want to fail, not include the missing rules, because we want admins to be forced to verify all the other included manifests and make sure the machine is properly set up
      fail( "An interface with an IP address is on VLAN 2501, but does not have the correct firewall rules. ${facts['vlan2501_interface']} => ${facts['vlan2501_ipaddress']}" )
    }
  }
}

role/manifests/staff_workstation.pp

class role::my_example_machine {
  include ::profile::base
  include ::profile::firewall_rulesets::vlan2501
  ... other stuff ...
}

My understanding is that since fw::post is set to require all other Firewall actions, the check for Class['profile::firewall_rulesets::admin_workstation'] should be true even though it is included after profile::base

We have a 12 TB RAID 6 array which is supposed to be set up as a single partition with an XFS file system. On creating the new file system, it says it has 78 GB in use, but there are no files on the drive.

[root@i00a ~]# df -h
Filesystem      Size  Used Avail Use% Mounted on
devtmpfs         32G     0   32G   0% /dev
tmpfs            32G     0   32G   0% /dev/shm
tmpfs            32G   11M   32G   1% /run
tmpfs            32G     0   32G   0% /sys/fs/cgroup
/dev/sdb3       154G  3.9G  150G   3% /
/dev/sdb2      1014M  153M  862M  16% /boot
/dev/sdb1       599M  6.7M  593M   2% /boot/efi
/dev/sdc1       187G  1.6G  185G   1% /var
tmpfs           6.3G     0  6.3G   0% /run/user/0
/dev/sda1        11T   78G   11T   1% /export/libvirt

Did I do something wrong? Is this by design?

It looks like the file system log only takes up about 2 GB, and I can't figure out what else could be using the space.

[root@i00a ~]# xfs_info /export/libvirt/
meta-data=/dev/sda1              isize=512    agcount=11, agsize=268435455 blks
         =                       sectsz=512   attr=2, projid32bit=1
         =                       crc=1        finobt=1, sparse=1, rmapbt=0
         =                       reflink=1
data     =                       bsize=4096   blocks=2929458688, imaxpct=5
         =                       sunit=0      swidth=0 blks
naming   =version 2              bsize=4096   ascii-ci=0, ftype=1
log      =internal log           bsize=4096   blocks=521728, version=2
         =                       sectsz=512   sunit=0 blks, lazy-count=1
realtime =none                   extsz=4096   blocks=0, rtextents=0

Partition information:

[root@irb00a ~]# parted /dev/sda1
GNU Parted 3.2
Using /dev/sda1
Welcome to GNU Parted! Type 'help' to view a list of commands.
(parted) print
Model: Unknown (unknown)
Disk /dev/sda1: 12.0TB
Sector size (logical/physical): 512B/512B
Partition Table: loop
Disk Flags:

Number  Start  End     Size    File system  Flags
 1      0.00B  12.0TB  12.0TB  xfs

This is a Dell FX2 with four FC430 compute nodes and two FD332 storage nodes, running Red Hat Enterprise Linux 8 (Ootpa).

I just went through a large legacy Perl web application (built using cgi-lib.pl and running as CGI with Apache HTTPD) and updated every script to use strict;, fixing a lot of small bugs along the way. Now this is done, I want to prevent people from turning off strict mode. Is there any way for me to enforce that? (We have had this issue before, where use strict; was commented out with a note that it "doesn't work".)

In our environment, employeeNumber is a sensitive field and we don't want it to be readable by all users. By default, IdM/IPA has a default permission System: Read User Addressbook Attributes which includes the employeeNumber attribute, but we removed it (using the IPA web interface). That had the unintended side affect of no longer allowing a user to view their own employeeNumber.

I know I can manually create an ACI ((targetattr = "employeeNumber")(version 3.0;acl "User: Read own employeeNumber";allow (read) userdn = "ldap:///self";)) that will give the user back this access to their own employeeNumber, but I would prefer to do this in the IPA interface. I can't seem to find any included option to give the user read-only access to something - even the Self Service settings, but that gives write access only, but not read access.

I have an "after push" webhook on GitHub that calls a CGI script to update a Jekyll website.

The script:

user@server [~/_repo]# cat cgi-bin/githook.cgi
#!/bin/bash
echo Content-type: text/plain
echo

if [ -z "$HOME" ] ; then
HOME=/home/user
fi

GIT_REPO=$HOME/_repo
PUBLIC_WWW=$HOME/public_html

pushd $GIT_REPO
git pull
echo "$HOME/.rvm/bin/ts_jekyll build --source $GIT_REPO --destination $PUBLIC_WWW"
$HOME/.rvm/bin/ts_jekyll build --source $GIT_REPO --destination $PUBLIC_WWW
popd
echo DONE

GitHub saves the output from the script as:

~/_repo ~/public_html/cgi-bin
Updating OLD_COMMIT_SHA..NEW_COMMIT_SHA
/home/user/.rvm/bin/ts_jekyll build --source /home/user/_repo/ --destination /home/user/public_html
Configuration file: /home/user/_repo/_config.yml
            Source: /home/user/_repo/
       Destination: /home/user/public_html
      Generating... 
                    done.
 Auto-regeneration: disabled. Use --watch to enable.
~/public_html/cgi-bin
DONE

This is the output I am expecting, but the site is not updated.
When I log in with SSH and run user@server [~]# _repo/cgi-bin/githook.cgi, I usually get the exact same output again and the site is properly updated.

If I make a change to the local copy, the web hook still appears to work (even though it shouldn't) and the version on the command line shows the appropriate message about overwriting local changes.

What could be causing this to happen?

Our Exchange 2013 server suddenly started logging errors about bad replication between sites (there should be no replication as there is no other server) as well as several other issues that appear to be related.

We have two sites connected by VPN. This is the Active Directory Sites configuration:
There are multiple subnets at each site and the routing between the subnets and the sites is working fine.

The Exchange server's IP address is 10.10.0.26 and it is running on the same Hyper-V host as a DC with the IP 10.10.0.21 (the one named XXXX-DC01 in the picture) which is set as part of the Default-First-Site.

The Exchange server thinks it is in the YGXXX site:

I enabled NTLOGON.LOG, but the only related information appears to be:

How can I figure out why the server is choosing the wrong site?

We have one user who suddenly has her new mail going to a folder "Deleted Items -> Unwanted". She claims she has not changed anything, the other Exchange administrator says he has not changed anything. I checked the rules in OWA and in Outlook on her computer. I have run out of places to look. I also don't know what other information might be relevant.

Server is Exchange 2007 2013 (we upgraded in the last few weeks), Client is Outlook 2013 on Windows 7 Pro.

Update: The user's description of the issue was "all new mail", but I noticed that it is actually only mail from mailing lists and Gmail accounts that is being moved. Mail from internal addresses and non-Gmail accounts is staying in the inbox.

I also noticed that most of the mail actually appears in the inbox for a few seconds before it gets moved . This leads me to believe that a mobile device might be involved.

I put a DRAC that has not been used in a long time into a PowerEdge 1750 running CentOS 5.8.
Because we run our DRACs on a separate network, we don't change the password from the default (root/calvin), but evidently someone changed this one.
I tried the regular command line reset (racadm racresetcfg), but I get the following error:

ERROR: Unable to perform requested operation.
If the operation attempted was to configure DRAC, possible reason may be that
Local Configuration using RACADM is disabled.

This implies to me that racadm is able to communicate, but there is a setting on the DRAC that is preventing it from working.

I was not able to find any references to this error in any Dell documentation.

Has anyone seen this problem and/or know what I can do about it?
(The DRAC is useless is I can't log in to it.)

I have an increasing number of servers running Debian or Ubuntu with customized versions of Apache, PHP, etc.
I thought I might be able to save time by creating my own APT source and putting already-compiled copies of these packages that all my servers can use. This way, I can also upgrade them all at once.
I have been able to find several sets of instructions for creating deb repositories (1, 2, 3 for example), but I have not yet found the best way to actually compile and package the software.
Any tutorials or suggestions for how to compile and package Apache HTTPD, PHP (and software in general) for a custom DEB repository?

I have a certificate installed in IIS on my server. I want to use the same certificate in Exchange. All the documentation I can find talks about generating a CSR from PowerShel land importing the reply with PowerShell, but I can't do that because I already have a certificate.
Suggestions?

I recently asked about repairing a corrupt event log, because it seemed to be a one-off event. The event log has since exhibited the same behavior 3 times. We have been trying to find patterns, but so far we have found nothing. The server runs several ASP.NET applications and three scheduled tasks written in .NET. The last modified date of the event log once happened to be the same time as one of the scheduled tasks, but the others have not been.

Any suggestions of where to look next or a way we can get any information out of a corrupt evtx file?

The server is running critical e-commerce applications, so we want to keep the number of restarts required to a minimum.

Edit: I ran DUMPEL and got very strange results.

1/9/2012    4:14:05 PM  1   100 1000    Application Error       N/A SERVERNAME  Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7a5f8  Faulting module name: ntdll.dll, version: 6.1.7601.17514, time stamp: 0x4ce7ba58  Exception code: 0xc0000374  Fault offset: 0x000ce653  Faulting process id: 0x1070  Faulting application start time: 0x01cccf1386d30991  Faulting application path: C:\Windows\SysWOW64\inetsrv\w3wp.exe  Faulting module path: C:\Windows\SysWOW64\ntdll.dll  Report Id: dbf4f691-3b06-11e1-9025-005056a602e6  
1/9/2012    4:14:07 PM  4   0   1001    Windows Error Reporting N/A SERVERNAME  Fault bucket , type 0  Event Name: APPCRASH  Response: Not available  Cab Id: 0    Problem signature:  P1: w3wp.exe  P2: 7.5.7601.17514  P3: 4ce7a5f8  P4: StackHash_79d9  P5: 6.1.7601.17514  P6: 4ce7ba58  P7: c0000374  P8: 000ce653  P9:   P10:     Attached files:  C:\Windows\Temp\WER975.tmp.appcompat.txt  C:\Windows\Temp\WERA03.tmp.WERInternalMetadata.xml  C:\Windows\Temp\WERA13.tmp.hdmp  C:\Windows\Temp\WERD21.tmp.mdmp    These files may be available here:  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_cd7d09dfc84119d82a2ac6a789038bd5661acfb_cab_128f0e67    Analysis symbol:   Rechecking for solution: 0  Report Id: dbf4f691-3b06-11e1-9025-005056a602e6  Report Status: 4  
1/9/2012    4:14:07 PM  4   0   1001    Windows Error Reporting N/A SERVERNAME  Fault bucket , type 0  Event Name: APPCRASH  Response: Not available  Cab Id: 0    Problem signature:  P1: w3wp.exe  P2: 7.5.7601.17514  P3: 4ce7a5f8  P4: StackHash_79d9  P5: 6.1.7601.17514  P6: 4ce7ba58  P7: c0000374  P8: 000ce653  P9:   P10:     Attached files:  C:\Windows\Temp\WER975.tmp.appcompat.txt  C:\Windows\Temp\WERA03.tmp.WERInternalMetadata.xml  C:\Windows\Temp\WERA13.tmp.hdmp  C:\Windows\Temp\WERD21.tmp.mdmp    These files may be available here:  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_cd7d09dfc84119d82a2ac6a789038bd5661acfb_cab_128f0e67    Analysis symbol:   Rechecking for solution: 0  Report Id: dbf4f691-3b06-11e1-9025-005056a602e6  Report Status: 0  
1/9/2012    4:14:12 PM  1   100 1000    Application Error       N/A SERVERNAME  Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7a5f8  Faulting module name: ntdll.dll, version: 6.1.7601.17514, time stamp: 0x4ce7ba58  Exception code: 0xc0000374  Fault offset: 0x000ce653  Faulting process id: 0x16ac  Faulting application start time: 0x01cccf139f475c0c  Faulting application path: C:\Windows\SysWOW64\inetsrv\w3wp.exe  Faulting module path: C:\Windows\SysWOW64\ntdll.dll  Report Id: e03bae70-3b06-11e1-9025-005056a602e6  
1/9/2012    4:14:16 PM  4   0   1001    Windows Error Reporting N/A SERVERNAME  Fault bucket , type 0  Event Name: APPCRASH  Response: Not available  Cab Id: 0    Problem signature:  P1: w3wp.exe  P2: 7.5.7601.17514  P3: 4ce7a5f8  P4: StackHash_9c6c  P5: 6.1.7601.17514  P6: 4ce7ba58  P7: c0000374  P8: 000ce653  P9:   P10:     Attached files:  C:\Windows\Temp\WER2579.tmp.appcompat.txt  C:\Windows\Temp\WER25F7.tmp.WERInternalMetadata.xml  C:\Windows\Temp\WER25F8.tmp.hdmp  C:\Windows\Temp\WER28F6.tmp.mdmp    These files may be available here:  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_c49a67649524ad11b64bbf809211bc5ba742a3d6_cab_0b63321b    Analysis symbol:   Rechecking for solution: 0  Report Id: e03bae70-3b06-11e1-9025-005056a602e6  Report Status: 4  
1/9/2012    4:14:16 PM  4   0   1001    Windows Error Reporting N/A SERVERNAME  Fault bucket , type 0  Event Name: APPCRASH  Response: Not available  Cab Id: 0    Problem signature:  P1: w3wp.exe  P2: 7.5.7601.17514  P3: 4ce7a5f8  P4: StackHash_9c6c  P5: 6.1.7601.17514  P6: 4ce7ba58  P7: c0000374  P8: 000ce653  P9:   P10:     Attached files:  C:\Windows\Temp\WER2579.tmp.appcompat.txt  C:\Windows\Temp\WER25F7.tmp.WERInternalMetadata.xml  C:\Windows\Temp\WER25F8.tmp.hdmp  C:\Windows\Temp\WER28F6.tmp.mdmp    These files may be available here:  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_c49a67649524ad11b64bbf809211bc5ba742a3d6_cab_0b63321b    Analysis symbol:   Rechecking for solution: 0  Report Id: e03bae70-3b06-11e1-9025-005056a602e6  Report Status: 0  
1/9/2012    4:14:21 PM  1   100 1000    Application Error       N/A SERVERNAME  Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7a5f8  Faulting module name: ntdll.dll, version: 6.1.7601.17514, time stamp: 0x4ce7ba58  Exception code: 0xc0000374  Fault offset: 0x000ce653  Faulting process id: 0x17f8  Faulting application start time: 0x01cccf13a4ba5126  Faulting application path: C:\Windows\SysWOW64\inetsrv\w3wp.exe  Faulting module path: C:\Windows\SysWOW64\ntdll.dll  Report Id: e57a0a85-3b06-11e1-9025-005056a602e6  
1/9/2012    4:14:21 PM  4   0   1001    Windows Error Reporting N/A SERVERNAME  Fault bucket , type 0  Event Name: APPCRASH  Response: Not available  Cab Id: 0    Problem signature:  P1: w3wp.exe  P2: 7.5.7601.17514  P3: 4ce7a5f8  P4: StackHash_9c6c  P5: 6.1.7601.17514  P6: 4ce7ba58  P7: c0000374  P8: 000ce653  P9:   P10:     Attached files:    These files may be available here:  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_c49a67649524ad11b64bbf809211bc5ba742a3d6_1cfb4872    Analysis symbol:   Rechecking for solution: 0  Report Id: e57a0a85-3b06-11e1-9025-005056a602e6  Report Status: 4  
1/9/2012    4:14:21 PM  4   0   1001    Windows Error Reporting N/A SERVERNAME  Fault bucket , type 0  Event Name: APPCRASH  Response: Not available  Cab Id: 0    Problem signature:  P1: w3wp.exe  P2: 7.5.7601.17514  P3: 4ce7a5f8  P4: StackHash_9c6c  P5: 6.1.7601.17514  P6: 4ce7ba58  P7: c0000374  P8: 000ce653  P9:   P10:     Attached files:    These files may be available here:  C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_c49a67649524ad11b64bbf809211bc5ba742a3d6_1cfb4872    Analysis symbol:   Rechecking for solution: 0  Report Id: e57a0a85-3b06-11e1-9025-005056a602e6  Report Status: 0  

None of the files referenced actually exist (not even in WER ReportArchive). These should not be the only events mentioned. The log file has been cleared twice since January 9, so those events should not even be listed at all.

Update (2016-06-14):
We don't have this server anymore and therefore can no longer test proposed solutions. We never found out what was wrong, but we moved all our services onto new servers since then.

Last week our Application Log appeared to be corrupt. Event Viewer said the log was 20MB, and had 18,446,744,073,709,550,735 (0.000000000008674 bits each) records (which can not possibly be true), and mmc would crash whenever we tried to view the log.

We cleared the Application log, and it appears to be logging data because when we go to the Windows Logs section in mmc, it says the Application Log has 1,985 events (in 3MB), but when we actually click on the log to open it, it says there are zero events.

I have made sure that all filtering is off. Any ideas?

Edit: Problem appears not to be an isolated incident. See Application Event Log keeps getting corrupted.

Is it possible to run more than one hypervisor on a single machine?
We already have a server running Windows Server 2008 with Hyper-V, but our linux based VMs are not very stable.
I would like to try VMware Server (yes, I know it is discontinued), but I cannot remove Hyper-V because of our Windows VMs (my boss says they have to stay since they currently just work the way they are.)

Is it possible to install and run VMware Server even though Hyper-V is running?

I have the following Apache virtual host which redirects all traffic to the secure version of the site:

<VirtualHost *:80>
    DocumentRoot "C:/Web/"
    ServerName site.local
    ErrorLog "C:/Webserv/Apache2.2/logs/site_error.log"
    CustomLog "C:/Webserv/Apache2.2/logs/site_access.log" combinedvh

    Redirect / https://site.local/
</VirtualHost>

I would now like to exclude certain directories from the redirect.

I tried

    <DirectoryMatch "!^C:/Web/myfolder/">
        Redirect / https://site.local/
    </DirectoryMatch>

but then nothing is redirected to secure.

Is there an easy way to do this?
I do not want to end up with separate Redirect directives for every subfolder, especially since I want to redirect the root folder too.

Ubuntu 10.04 Server

I am using at to have a bash script schedule itself to run again a particular interval after it completes: (here is the last line of that script)

echo "$0" | at tomorrow + 5minutes

The job gets scheduled, but does not run. When I run atq, I see the job is scheduled, but it is now well past the time it should have run:

9       Sat Jun  4 11:38:00 2011 = username  

Time now:
$ date

Sat Jun  4 22:55:09 EDT 2011

Nothing shows up in my CRON log about it. Is there some other log it would show up in? Is there some way I can force it to run? Google has not been very helpful, since it does not understand that at is the name of a program...

Edit: The job probably did not run because of a broken Ubuntu update:

Jun  4 11:38:00 server01 atd[32330]: Module is unknown

http://forum.linode.com/viewtopic.php?p=39867
https://bugs.launchpad.net/ubuntu/+source/pam/+bug/790538

Now that is fixed, what is the best way to run the job manually?