I have two Sun servers running Solaris 10. Both have Emulex fiber channel cards. I'd like to connect the two in a "crossover" fashion like you would copper ethernet & IPv4. Point being I have a ZFS array attached to one that I'd like to share to the other via NFS over fiber channel. These are for testing/development, so no budget for a switched fabric.
How would I go about setting this up? I'd appreciate any experiences shared, doesn't have to be Solaris based.
The iLO interface on this server is stuck in recovery mode. I've tried flashing the firmware via FTP per the iLO manual. It seems like the flash succeeds & the iLO interface resets, but it comes back up in recovery mode. System Management Homepage doesn't see the Management Processor & (needless to say) hponcfg doesn't either. Is there anything else I can try to get it working?
Dell R710 w/ Intel 82576 gigabit NIC (latest Intel drivers). I'm setting up a new Windows Server 2008 R2 SP1 & so far I've installed updates & configured the File Services & Web Server (IIS) roles. Windows Advanced Firewall is on (by default), and configuring the roles seemed to activate some rules to allow the web server ports & file sharing.
Problem: I can connect to a test file share fine, but copying large files is abysmally slow. I'm getting ~10MB/s copying to/from a Windows 7 client. The same client can easily get 80-90MB/s to a different file server (so it's not the client). If I disable the firewall, I get full gigabit speeds. If I enable it, it drops down to 10MB/s. I'm using the default firewall settings that are configured when enabling the File Sharing role. Obviously I need to enable others, but which ones?
After further investigation, it seems to be one (or all) of the "Network Discovery" inbound/outbound rules. I noticed Windows enabled these rules on the "Private" profile, but not the "Domain" profile. If I enable them all for the "Domain" profile, the problem goes away. I don't like blindly enabling rules.
I take the above comment back. Enabling "Network Discovery" rules seemed to work briefly, but now it stopped.
Well, this is turning out to be a network problem. Just happened to rear it's ugly head around the same time I brought this server online. I don't think the extra firewall rules I mentioned here are required at all.
I'm using Beyond Trust to integrate with active directory on a CentOS 5.6 server. I'm using the interop-install that comes with Beyond Trust to configure SAMBA, which works fine. However, I have some local accounts that I want to still work & for policy reasons, I can't create them in AD. Is there a way to configure SAMBA to use both authentication methods, or use ADS as primary & fall back on SMBPASSWD?
Let's say I have a ZFS filesystem set up to share to users via CIFS, but ACLs are fine grained into the subfolders of the share to where certain users can't go into. Let's also say I'm leveraging ZFS snapshots to enable Windows users to restore "Previous Versions". Will the ACLs still keep certain users out of locations they're not supposed to browse into in the snapshots?
I ran pvmove to migrate extents from an old LVM disk to a new one but I forgot to create the partition structure on the new disk first:
pvmove /dev/sdb1 /dev/sdc
Everything seems to be fine, but I'm wondering if I should move it off the new disk again, create the partition structure, then back on? It seems like the only caveat to not doing this is that someone else might look at the disk & realize there's no partition structure on it & format it. I'm the only one who manages them at all at this point.
Also, is there a way to do this that doesn't involve more pvmoves?
I have a newly built ESXi server with two SSD's hooked up to the motherboard primary SATA controller. Everything was working until I made the mistake of enabling passthrough on that SATA controller. Now, ESXi will reboot & come up complaining it doesn't have any data stores configured:
Each time I'll go in & uncheck passthrough for that controller & reboot again, but it keeps coming back up enabled. Not sure what to do from here?
I tried temporarily disabling VT-d in BIOS, but that didn't help. Passthrough showed disabled in ESXi, but I still got the persistent storage error.
We have a website that is a subdomain of our primary domain, such as site.example.com. The official URL of the website is http://site.example.com, but some people keep referring to it as www.site.example.com.
I have a redirect rule in place to redirect www.site.example.com to site.example.com, but I ultimately need to explain why www.site.example.com is bad practice (or is a bad idea), but I don't know how. Are there any guidelines or rules that dictate best practices with regard to domain names, specifically the use of subdomains?
I upgraded my HP Proliant DL380 G4 Systems Management Homepage to 6.3.0 recently & it no longer works. OS is Windows Storage Server 2003. I have tried uninstalling it from Add/Remove programs & re-installing, but still no joy. In the system logs, I see:
The HP System Management Homepage Win32 service could not be stopped successfully. The system cannot find the file specified.
It'd be nice to know which file it can't find, so I'm grasping at straws here.
I'm trying to set up Zenoss to work with https://server/zenoss instead of https://server. Here's my rewrite rule:
RewriteEngine On
RewriteRule ^/zenoss($|/.*) http://localhost:8080/VirtualHostBase/https/server:443/VirtualHostRoot/zenoss$1 [L,P]
This way doesn't work. I get:
Site error
An error was encountered while publishing this resource. The requested resource does not exist. Please click here to return to the Zenoss dashboard
The url for "Please click here to return to the Zenoss dashboard" points to https://server/zport/dmd
However, it does work if I do it the standard Zenoss/Plone/Zope way:
RewriteEngine On
RewriteRule ^/(.*) http://localhost:8080/VirtualHostBase/https/server:443/VirtualHostRoot/$1 [L,P]
... it works great.
According to this article, it seems like the first way should work. I'm not really sure what I'm missing.
I have a Windows 2003 Server sharing out a few folders as read-only to "Everyone". The server is a domain member, so I'm not able to connect to the share on computers that aren't on the domain without passing some form of credentials.
I have a linux box that I want to mount the share on at startup, so I want to put the share mountpoint in fstab. I have this setup by specifying a credentials file that is only readable by root, but I would rather either not use a credentials file or specify some guest/anonymous user. Can I do that, & if so, how?
I have an HP ML 310 server running CentOS Linux 5.5. I'm buying a RAID card (LSI 9260-8i) to set up a mirrored OS drive. Right now, the boot drive is set up with GRUB installed on the MBR of /dev/sda & has a 100MB /boot partition for /dev/sda1, then the rest is configured in LVM with a 20GB with a 20GB VG for the root partition & ~80GB VG for home. The new disk sizes will also be slightly larger as well. What is the best way to clone the boot drive to the new CCISS device?
I'm planning on migrating a few of our Linux servers to use AD authentication via SAMBA/Winbind. Operating system will be openSUSE 11.3 x64. Our AD environment does not have UNIX extensions installed.
I've set up a server from scratch and it seems to be working great. openSUSE's installer did a great job of feeling out AD and setting all of the necessary configuration files. I did, however, set a few Winbind options myself. My working config:
[global]
workgroup = DOMAIN
passdb backend = tdbsam
map to guest = Bad User
include = /etc/samba/dhcp.conf
usershare allow guests = No
idmap gid = 10000-20000
idmap uid = 10000-20000
realm = DOMAIN.INST.ORG
security = ADS
template homedir = /home/%D/%U
template shell = /bin/bash
winbind offline logon = yes
winbind refresh tickets = yes
winbind use default domain = yes
wins support = No
Everything works. I can log in via my AD account either from the console or via SSH. I can also connect to my home directory via SAMBA using my AD credentials (I left the [homes] directive out).
I do have a few questions:
I'd like to get some firsthand experience from sysadmins who have supported or are currently supporting similar setups. What should I look out for? What other best practices should I follow?
Also, I have evaluated Likewise and found that it didn't seem to like our environment very much. I would get long delays with logins & could not get it integrated with SAMBA. This setup works a lot better.
Thanks in advance...
I have 3 Mac OS X servers all bound to AD, all configured in the Golden Triangle setup. All 3 are completely separate from each other in terms of services, but all reside on the same internal network and are all bound to the same Active Directory domain. Two are 10.5.x (latest updates) and one is 10.6.3.
Last weekend, all 3 simultaneously stopped allowing Active Directory users access to certain services, specifically AFP & SSH. SMB still works fine on all 3. I asked the AD admin if anything changed, and he said "Yes, we made a change to user accounts to toughen up security", and suggested I use [email protected] instead of just username. This still didn't work.
I have completely removed one of my servers from AD, and re-joined, but this didn't work either. I can do kinit from command line and get a Kerberos ticket. sudo klist -ke shows all services are configured to use the correct Kerberos principles.
I have been scavenging the logs for any useful info. The AFP log just shows that I'm connecting and disconnecting. The DirectoryService.log shows stuff about misconfigured Kerberos hashes, but my research is showing that's not uncommon. /var/log/system.log isn't showing anything useful that I can see.
I'm not sure where to go from here. Any help/ideas appreciated.
I'm trying to set up an init script for a process on redhat linux:
#!/bin/sh
#
# Startup script for Conquest
#
# chkconfig: 345 85 15 - start or stop process definition within the boot process
# description: Conquest DICOM Server
# processname: conquest
# pidfile: /var/run/conquest.pid
# Source function library. This creates the operating environment for the process to be started
. /etc/rc.d/init.d/functions
CONQ_DIR=/usr/local/conquest
case "$1" in
start)
echo -n "Starting Conquest DICOM server: "
cd $CONQ_DIR && daemon --user mruser ./dgate -v - Starts only one process of a given name.
echo
touch /var/lock/subsys/conquest
;;
stop)
echo -n "Shutting down Conquest DICOM server: "
killproc conquest
echo
rm -f /var/lock/subsys/conquest
rm -f /var/run/conquest.pid - Only if process generates this file
;;
status)
status conquest
;;
restart)
$0 stop
$0 start
;;
reload)
echo -n "Reloading process-name: "
killproc conquest -HUP
echo
;;
*)
echo "Usage: $0 {start|stop|restart|reload|status}"
exit 1
esac
exit 0
However, the cd $CONQ_DIR is getting ignored, because the script errors out:
# ./conquest start
Starting Conquest DICOM server: -bash: ./dgate: No such file or directory
[FAILED]
For some reason, I have to run dgate as ./dgate. I cannot specify the full path /usr/local/conquest/dgate
The software came with an init script for a Debian system, so the script uses start-stop-daemon, with the option --chdir to where dgate is, but I haven't found a way to do this with the Redhat daemon function.
Is there a way I can get a Windows XP computer that is a domain client to create certain user profiles without having to get the user to log in?
Maybe this isn't possible, but I thought I'd ask anyway.
I have a samba share that uses ACLs. The default group can see everything inside the share and has read/write permissions. I want to create a subfolder inside the top level of the share, then create a corresponding group to that folder. I'd like members of the subfolder group to be able to browse to \\server\share\subfolder without being able to see what's inside \\server\share except for only subfolder.
So to the default group it would show as:
Share
--Folder1
--Folder2
--Folder3
--Subfolder
and to the subfolder group it would show as:
Share
--Subfolder
Best alternative I've been able to find is grant subfolder group traverse permissions and make them connect directly to the folder they're trying to get to: \\server\share\subfolder.
I'm implementing this on OS X Server so all usual ACLs are there.
I'm using Process Explorer to monitor my windows server while it reconstructs some data. It's primarily a CPU intensive process, but I want to make sure it's not swapping. How can I tell if it is using Process Explorer? My initial guess is in the System Information window, it's Paging File Write Delta. Yes? No? I'm an idiot?
*Screenshot is not of the server... just an example.
alt text http://www.malwareinfo.org/bootcamp/img/ProcessExplorer2.jpg
What's the best way to temporarily disable the Windows 2003 File Sharing service(s)? Sorta like the equivalent to shutting down Samba on a Linux box.
I have a Mac OS X file server that serves via SMB/CIFS and AFP. The server is a domain client via the golden triangle approach, but this results in a very large UID for the users. This is fine for my current setup, but I'd like to get NFS working as well. Obviously I need to do some UID mapping, but I'm not sure how to go about doing this. Any advice?
