Marko's questions

We have two sites setup with VMware Site Recovery Manager (SRM) using VMware Replication to synchronize VMs. I need to validate the procedure for the site switch-over but I can use only one site.

My idea is to simulate the remote site by utilizing extra hardware. I have spare physical ESXi host to use. Network would be separated by the use of VLANs and it seems to me everything should work this way.

One thing that I am worried about is storage. Currently 'spare' ESXi host is configured to use the same storage (HP P2000 SAN) as the main host. I am not sure will this create conflict during the Replication - e.g. will the VMware replication be confused if it is using same path for storing the VMs?

I need to modify existing configuration of the CISCO ASA. While analyzing the configuration I noticed something that looks redundant to me. I would like to see if somebody can confirm my doubts.

access-list LANA_access_in extended permit ip any any log debugging inactive
access-list LANA_access_in extended permit icmp any any log debugging inactive
access-list LANA_access_in extended permit icmp 172.12.10.0 255.255.255.0 10.5.83.0 255.255.255.0
access-list LANA_access_in extended permit ip 172.12.10.0 255.255.255.0 10.5.83.0 255.255.255.0
...
access-group LANA_access_in in interface LAN_A_Lan

Am I right that after the first two lines, second two lines are completely redundant?

And to make things even better there is this part of config

access-list global_access extended permit ip any any log debugging inactive
access-list global_access extended permit icmp any any log debugging inactive
...
access-group global_access global

If I understand correctly, this will allow all ingress traffic on all ports, and previously mentioned two specific lines are "double" redundant.

Are my assumptions correct?

I am considering to buy HP m476dn MFP. Going through the specs it is no clear if the device can lookup for email address from the LDAP server.

What I would like is to be able to send scans via email to recipients by typing just a few letters and that the list of matching emails from our AD/LDAP is offered.

I downloaded user manual and such functionality is not mentioned under configuration. My two other MFP's from Xerox and Konica Minolta can perform this.

Do you know if HP m476 can perform such lookup?

I am trying to setup nginx to be reverse proxy for wildfly 8.0.0.Final.

Part of my configuration file for HTTPS redirect:

location /console {
  include          conf.d/proxy.conf;
  proxy_pass       http://127.0.0.1:9990/console;
  proxy_redirect   http://127.0.0.1:9990/console  https://X.Y.W.Z/console;
}
 ... similar location for...
/management
/logout
/error
... 

location / {
  include          conf.d/proxy.conf;
  proxy_pass       http://127.0.0.1:8080/;
}

proxy.conf:

proxy_set_header        Host            $host;
proxy_set_header        X-Forwarded-Proto $scheme;
add_header              Front-End-Https   on;

Problem is - when I login to /console I get error message:

Access Denied: Insufficient privileges to access this interface.

I don't even have idea what is causing this. Any help is appreciated!

I have Dell Poweredge server with plastic blockers inside their ethernet ports. My problem is that I don't know how to take it out. You can see photo of the plug here:

I tried to pull them out, or to squeeze and then pull, but they don't move. I cannot find anything on the Dell installation manual, so it's probably not provided by Dell.

Did you see this kind of plugs and do you know how to take them out without risking to break something?

I have Dell Poweredge R710 server with PERC H700 Integrated RAID controller. Currently there are 4 SAS 300GB disks in RAID-10 array exposing single volume of 600GB. Server is running VMware ESXi 5.1.

I have 4 new SAS 300GB disks that I would like to add to this server to gain ~ 1.2 TB RAID-10 volume.

I wonder if I can do this expansion without loosing data on existing disks? Ideally I would like to perform this online, but offline upgrade is acceptable as well.

Technical Guide seems to indicate (it's bit unclear) that it's not possible to expand RAID-10 array. Can anyone give me a hints what should be possible, or what is the best approach to take.

Also, if I manage to upgrade volume size, will VMware be able to expand it's datastore?

I would like to configure pam module to use flat files for authentication. Basically I need same thing like pam_unix just with possibility to use different files (other than /etc/passwd and /etc/shadow).

Is there existing pam module that provides this functionality?

I have ordered Poweredge R710 server with 4 diskas planning to configure them as RAID10. However I only got 3 disks delivered (4th will be delivered in 10 days).

I am wondering can I create RAID10 array with one disk missing and start installing my system (aware of possible risks in case the disk dies), and then when the disk arrives I just add it to the system? Will RAID BIOS let me do this?

I want to migrate from my current mail server (old_server) for my domain mydomain.com. old_server setup is Postfix+LDAP+Cyrus.

Now I want to migrate my domain mail to Zimbra server (zimbra), but I am considering option to leave current mail server working in the first phase, and then to only have subset of email addresses to be forwarded to zimbra server. It seems that zimbra refers this in their documentation as 'edge MTA'.

Current config

 mydomain.com 
             MX: old_server
<---------- smtp send
----------> smtp receive

New config

 mydomain.com 
             MX: old_server                      zimbra
<------------------------------------------- smtp send
----------> smtp receive ---- forward ---->  smtp receive 

I need following:

1. old_server to receive mail for my domain as before, but for some of the email addresses I want them to be delivered to zimbra server. I should be able to determine which email addresses will be forwarded.
2. I would like to avoid possible false spam detections for mails from mydomain.com due to this setup.

Questions:

• How should I configure postfix on old_server to support this mail forwarding?
• To avoid false spam detection, can I have outgoing mail from mydomain.com to be sent by zimbra or should I use old_server?
• Is there anything extra I would need to do in order to avoid possibility of my outgoing mails being marked as spam on other servers?

Additional info with some obfuscation (postconf -n):

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug_peer_level = 10
html_directory = /usr/share/doc/postfix-2.4.5-documentation/html
local_recipient_maps = ldap:/etc/postfix/ldapvirtual.cf hash:/etc/postfix/virtual_alias
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
message_size_limit = 16777216
mydestination = $mydomain, mail.$mydomain, 
mydomain = mydomain.com
myhostname = mail.mydomain.com
mynetworks = 127.0.0.0/8 212.XX.XXX.XX/28
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.4.5-documentation/readme
recipient_delimiter = +
sample_directory = /etc/postfix
sender_canonical_maps = ldap:/etc/postfix/ldapalias.cf
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sender_login_maps = ldap:ldapvirtual
smtpd_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtpd_tls_cert_file = /etc/pki/tls/certs/mailserver.pem
smtpd_tls_key_file = /etc/pki/tls/certs/mailserver.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = ldap:/etc/postfix/ldapvirtual.cf hash:/etc/postfix/virtual_alias

I have mail server setup to use postfix and cyrus imapd + ldap for mail lookups.

Now I would like to specify that for particular address (e.g. [email protected]) instead of delivering mail to mailbox it gets passed to script (ruby script to be more precise). I need this functionality since I would like to have mails passed to particular address to end up on our redmine server. How to do this?

Currently I have in main.cf:

...
mydestination = $mydomain, mail.$mydomain
local_recipient_maps = ldap:/etc/postfix/ldapvirtual.cf
local_transport = lmtp:unix:/var/lib/imap/socket/lmtp
...

/etc/postfix/ldapvirtual.cf is LDAP configuration file to search for mail addresses.

What do I need to configure on postfix?