Newest Questions
329,164 questions
Score of -1
-1
votes
0 answers
0
answers
11 views
11
views
I think my company has suffered from a DNS hijack/spoof or something
Connections to my company's website using http rather than https are redirected another site.
Avast seems to block the site and users (me at least) are redirected to https and all is good.
With virus ...
- 1 reputation score 1
Score of 1
1
vote
1 answer
1
answer
27 views
27
views
How does kerberos authenticated RDP use TLS?
I have a lab with Windows Server 2022 domain controller and a Windows 11 domain-joined workstation, both enterprise editions. There is nothing else in this lab, no ADCS, no nothing. I have out-of-the-...
- 77 reputation score 77
Score of 0
0
votes
1 answer
1
answer
9 views
9
views
Windows Server 2022 Updates fail with 0x801901f7
I installed Windows Server 2022 from on old installation DVD with version 21H2 (20348.230) (note the old minor version number).
Attempting to install updates fails with:
There were some problems ...
- 283 reputation score 283
Score of 0
0
votes
1 answer
1
answer
30 views
30
views
Issue with PHP and network namespaces
I develop a PHP application that manipulates network namespaces (it is its essential purpose). Almost everything seems to work except one important thing:
When I create a network namespace - or a ...
- 627 reputation score 627
Score of 3
3
votes
1 answer
1
answer
321 views
321
views
LAN Server is Unreachable via IPv6 MTU = 1500 (Capped to 1492), But IPv4 Works Otherwise
I'm troubleshooting an extremely strange MTU issue in my LAN. I was able to reach my LAN server in IPv4 with MTU = 1500, but IPv6 is capped to MTU = 1492.
ICMP Mystery
I was able to reach my LAN ...
- 642 reputation score 642
Score of 1
1
vote
0 answers
0
answers
48 views
48
views
Proper proxy behavior for 403s when accessing VPN-protected sites
Full disclosure I'm not a systems engineer, and am just a developer trying to find an elegant solution to the following nuisance:
Modern browsers (especially Chrome) aggressively pool and reuse ...
- 11 reputation score 11
Score of 1
1
vote
0 answers
0
answers
61 views
61
views
Azure AD ignores SAML ForceAuthn from a Keycloak identity broker — how to force re-authentication for a different user on a shared device?
Setup:
Keycloak acts as an identity broker with Azure AD (Entra ID) configured as a SAML 2.0 identity provider. End users sign in to our web app through Keycloak, which brokers the login to Azure over ...
- 19 reputation score 19
Score of 0
0
votes
0 answers
0
answers
57 views
57
views
Can the documentation for Windows Server Failover Cluster roles/properties be viewed without access to a Windows Machine?
The Problem
I work on Availability Groups, which stand at the intersection of Microsoft SQL Server and Windows Server Failover Clustering. The Availability Group documentation makes multiple ...
- 47 reputation score 47
Score of 0
0
votes
1 answer
1
answer
47 views
47
views
2048 bit DKIM key not working
I've setup DKIM for my domain (burvil.org), where opendkim-keygen gives:
$ cat /etc/opendkim/keys/burvil.org/default.txt
default._domainkey IN TXT ( "v=DKIM1; h=sha256; k=rsa; "...
- 11 reputation score 11
Score of 1
1
vote
2 answers
2
answers
201 views
201
views
Do I misunderstand systemd network-online.target and its relationship with DHCP and /etc/resolv.conf?
I have a service for which the systemd configuration requires it to start After network-online.target.
The service reads /etc/resolv.conf immediately on startup then makes DNS queries. My ...
- 331 reputation score 331
Score of 3
3
votes
1 answer
1
answer
126 views
126
views
systemd generator and dependency on multi-user.target.wants
I have a systemd-generator script which I wrote some years ago and which is now broken after upgrading the system from Debian Bookworm to Trixie. The generator basically creates some services by ...
- 477 reputation score 477
Score of 0
0
votes
0 answers
0
answers
86 views
86
views
Nginx Stream (TCP bridge) fails with no peer certificate available
Need some guidance.
Have an app that needs to connect to a multi-AZ cloud service, routed privately. The destination addresses are NAT'ed.
App connectivity
All the 3 destination public addresses ...
- 1 reputation score 1
Score of 0
0
votes
0 answers
0
answers
58 views
58
views
Why does my router's NAT table use an expired ARP entry after a soft‑reload, forwarding traffic to a ghost IP? [closed]
I have a Keenetic Extra DSL router. I configured a static DHCP reservation so that my ESP32-W5500 device (MAC: de:ad:be:ef:fe:01) always receives 192.168.1.114. There's a MAC-based port forwarding ...
- 1 reputation score 1
Score of 0
0
votes
2 answers
2
answers
92 views
92
views
cephadm can not fetch the release.gpg when adding a repository
When I try to set up tentacle repository with cephadm I become an error:
root@ceph01:~# cephadm add-repo --release tentacle
Installing repo GPG key from https://download.ceph.com/keys/release.gpg...
...
- 115 reputation score 115
Score of 0
0
votes
0 answers
0
answers
35 views
35
views
Can I trust "X99 Dual Plus" unbranded server motherboard? [closed]
This motherboard seems as if it would be perfect for my project, but I am worried, since it doesn't seem to have a brand name, if I run the risk of embedded viruses and backdoors.
I cannot find a ...
- 101 reputation score 101