Common Server issues – FAQs and answers from those in the know
ceph manager process hung due to high memory usages
21 December 2024 @ 6:14 am
I have observed that in one of my ceph manager nodes ceph-mgr process died due to high memory usages. The thread mentioned in the log in prometheus. So it is suspected that prometheus put some large memory allocation causing ceph-mgr service eventually went into out of Memory state. We have other manager node that are not observing the same issue. This is not frequent issue. Can I get some expert opinion where I can check why prometheus suddenly allocated large memory on that particular node?
tcmalloc: large alloc 1233903616 bytes == 0x5607ecec4000 @ 0x7fa9345f3760 0x7fa934614a62 0x7fa93dbb65c8 0x7fa93dbe6365 0x5607122bac0b 0x5607122baef0 0x5607121e6e6d 0x7fa93dc63de7 0x7fa93dc64cd8 0x7fa93dc41998 0x7fa93dc64087 0x7fa93dc64cd8 0x7fa93dc41998 0x7fa93dc64087 0x7fa93dc64cd8 0x7fa93dbc1994 0x7fa93dc62e5f 0x7fa93dbcaa2b 0x7fa93dc66b9f 0x7fa93dbc2306 0x7fa93dc41b80 0x7fa93dc64087 0x7fa93dc64cd8 0x7fa93dbc2ea2 0x7fa93dbc3c7e 0x7fa93dbd5f00 0x7fa93dbcaa2b 0x7fa93dc66b9f 0x7f
L2TP server with one ip in and multi interfaces out
20 December 2024 @ 11:50 pm
I have a Debian 12 VPS with two network interfaces, eth0 and eth1, both have public internet access. L2TP service has been configured, and each user is assigned a specific IP. I tried using the following commands
iptables -t nat -A POSTROUTING -s 192.168.42.10 -o eth0 -j MASQUERAD
iptables -t nat -A POSTROUTING -s 192.168.42.11 -o eth1 -j MASQUERADE
but only 192.168.42.10 (user1) can access the public network,while 192.168.42.11 (user2) can connect but only has access to the internal network.I think it's an issue with the routing table, but I don't know how to resolve it.Please help
How to unblock dnsbl on senderscore.org
20 December 2024 @ 9:15 pm
I just sent a message to a small group of friends and it appears to have been rejected by comcast with the following:
<[email protected]>
(reason: 554 resimta-c2p-560312.sys.comcast.net resimta-c2p-560312.sys.comcast.net a.b.c.d found on one or more DNSBLs, see https://postmaster.comcast.net/smtp-error-codes.php#BL000100)
If I check
https://www.dnsbl.info/dnsbl-database-check.php
the ip it's complaining about
a.b.c.d
comes up clean.
The
https://postmaster.comcast.net/smtp-error-codes.php#BL000100
redirects to
https://spa.xfinity.com/postmaster?faq=comcast-mail-errors#BL000100
Which references
Which DNS Records to Create?
20 December 2024 @ 8:08 pm
I want to point my IP to a www.domain.com FQDN.
I want to ensure that users that type domain.com will be redirected to www.domain.com
Which DNS records should I create?
Dovecot dh.pem file "too short"?
20 December 2024 @ 7:36 pm
When a client tried to connect to the server (dovecot versions 2.3.11) they get an error that the dh.pem is too small. I've tried regenerating the file using the following command:
openssl dhparam -out ./dh.pem 4096
There is no change after restarting Dovecot to read the new file. I've even tried a much larger file (9064) and got the same result. When I run doveconf -n -P it shows the correct path to the dh file. And of course the ssl_dh_parameters_length parameter is no longer used.
I have other ssl issue but they involve the cert and key files so I'm trying to get this error out of the way before tackling those. Not sure what to try next, thanks for any helpful suggestions.
How do I send all TCP and UDP traffic over tproxy without making a loop?
20 December 2024 @ 6:26 pm
I'm running my proxy client on the same Linux machine I'm using the connection on. In the configuration I can tell it to tproxy to port 2500. The proxy runs on port 443, using TLS (although this part the proxy takes over managing)
So I need to use iptables or nftables to route all packets to the proxy. But I need to mark them as well, so that I don't create a loop.
My initial attempts didn't succeed, seems like my UDP packets didn't go through (I'm behind a NAT, but I don't know it's that's the issue since I'm proxying anyway). I'd like to know how it works better so I can debug it myself.
(I may also need to turn on ip_forwarding)
I installed really-simple-ssl on my wordpress site and now i get internal error 500
20 December 2024 @ 5:07 pm
I installed really-simple-ssl on my wordpress site and now i get internal error 500. The plugin must have changed some settings. i was able to delete the plugin via terminal but the site is still down. can someone please help
Jupyter Notebook via Cloudflare Zerotrust gives blank navigation page
20 December 2024 @ 4:57 pm
Short description
When I access my Tensorflow Jupyter Notebook via Cloudflare Zerotrust, I can login via Cloudflare and on the Notebook server, but after login on the Notebook server, I see a blank page instead of the normal Notebook tree view with files and directories.
Detailed description
I deployed a Tensorflow Jupyter Notebook Server on Docker (see versions and docker-compose.yaml below). I can access the Notebook server on my local network (http:[local-ip]:8888) from any computer on my local netwerk. I also use Cloudflare Zerotrust to connect to several other Docker services (glances, *arr, portainer, ...) on the same Docker host and they all work fine, except for the Juputer Notebook.
When I navigate to the public url configured in Cloudflare (https://tensorflow.[domain_name]/), I get the (Cloudflare Zerotrust) login, after login, I see the Jupyter Notebook password page, and I can also successfully login
openldap check_password is not loading
20 December 2024 @ 4:53 pm
I am attempting to get password policy working along with the default check module (/usr/lib64/openldap/check_password.so) that ships with openldap package for Amazon Linux 2023. I have been able to get the password policy working correctly without the module but when I delete the policy and then add it back with the check module set, slapd complains that it cannot find the shared_object:
slapd[471944]: check_password_quality: lt_dlopen failed: (check_password) file not found.
I've attempted to place soft links to /usr/lib64/openldap/check_password.so in /usr/lib/openldap, /usr/lib, /usr/bin and /usr/sbin with no success. I cannot find any documentation on the check_password.so implementation that ships with this distribution.
OpenVPN cluster crashes for missing attribute in ClusterDB
20 December 2024 @ 4:45 pm
I have a openvpn installation. I joined a cluster through CLI.
./sacli --mysql mysql://${user}:${password}@${endpoint} ClusterJoin
The command finishes without errors. I checked and my user has the same password as the cluster, so everything went good.
But then when I try to query the ClusterStatus:
root@ip-10-90-2-194:/usr/local/openvpn_as/scripts# ./sacli ClusterNodesStatus
ERROR: AttributeError: 'ClusterDB' object has no attribute 'dbs' (9000)
This is a problem, because I am unable to access to the Admin Panel UI because this error (the web UI crashes).
What's the cause of this problem?