Tag Archives: server

Http Error 12057 (Bug Fix Note)

A Bug has been reported in the product that only occurs for a specific platform, Windows Server 2003 Standard Edition.
Check the Trace Log and find that the wrapper class of Wininet call returns Error 12057, with the specific Error contents as follows:

ERROR_WINHTTP_SECURE_CERT_REV_FAILED

12057

Indicates that revocation cannot be checked because the revocation server was offline (equivalent to CRYPT_E_REVOCATION_OFFLINE).
Open the
IE-> Tools-> Internet Options-> Advanced Tab-> Security Options – & gt;” Check for server certificate revocation(Requires Restart) “

This option is currently selected. Remove this option and the Bug symptoms disappear. Only IE with Windows Server 2003 Standard Edition is checked by default, and Error 12057 (Microsoft’s Bug?) does not occur when this option is checked on other platforms. or with other options?) . Decided to code the problem.
The code to solve this problem is quite simple. Add the following code after HttpOpenRequest to set the current Http connection options to cancel this check
DWORD dwFlags = 0;

DWORD dwError = 0;

DWORD dwBuffLen = sizeof(dwFlags);
InternetQueryOption(m_hRequest, INTERNET_OPTION_SECURITY_FLAGS,

(LPVOID)& dwFlags, & dwBuffLen);

dwFlags |= SECURITY_FLAG_IGNORE_REVOCATION;

InternetSetOption(m_hRequest, INTERNET_OPTION_SECURITY_FLAGS, (LPVOID)& dwFlags, sizeof(dwFlags)) ;

TFTP: server says: file not found solution

Under Linux, regardless of which super-Server, inetd, or xinetd is used, the TFTP service is disabled by default, so modify the file to open the service.
According to the installation method of (1), the file /etc/xinetd.d/ TFTP can be modified. It is mainly to set the root directory of the TFTP server and start the service. The modified file is as follows:
service tftp
{socket_type = dgram
Protocol = udp
Wait = yes
User = root
Server =/usr/sbin/in TFTPD
Server_args = -s/home/LQM/tftpboot – c
Disable = no
Per_source = 11
The CPS = 100 2
Flags = IPv4
}
Server_args = -s < server_args= -s < path> -c, where < path> Change to the root directory of your TFTP-server. The parameter -s specifies chroot and -c specifies that files can be created.
3. Create TFTP root directory and start TFTP-Server.
#mkdir /home/lqm/tftpboot
# chmod o + w/home/LQM/tftpboot
#service xinetd restart
Stop xinetd: [sure]
start xinetd: [sure]
At this point, TFTP-Server is started. You can log in to test the following commands:
# TFTP & lt; your-ip-address>
tftp> get < download file>
tftp> put < upload file>
tftp> q
#

installation process problems and causes
phenomenon 1:
tftp> Log
Transfer timed out.
reason:
TFTPD service doesn’t start
Phenomenon.
tftp> put test2
Error code 0: Permission denied

run the command, check the system log
# tail /var/log/messages
found the following text:
Mar 24 19:05:26 localhost set: SELinux is preventing /usr/sbin/in. TFTPD (tftpd_t) \”write\” to tftpboot (tftpdir_t). For complete SELinux messages.run sealert-l 40a5a6bf-8ded-4bfa-ab6e-fa669a25fc6c
know this is caused by SELinux, in FC3 and FC versions after FC3 SELinux is turned on by default, now close it, modify the file /etc/sysconfig/ SELinux, set which
SELINUX=disabled
Then restart the computer
Or execute the system-config-SecurityLevel command to open the Security-Level Configuration dialog box and change “forced” to “allowed” in the SELinux (S) option.
Phenomenon 3:
tftp> Log
Error code 1: File not found
reason:
specified File does not exist; Or the -c option is not specified in the TFTPD boot parameter, allowing the file to be uploaded
Phenomenon 4:
tftp> Get test.log
Error code 2: Only absolute filenames allowed
reason:
server_args set in /etc/xinetd.d/ tftpd-hpa
cat /etc/defaul/tftpd-hpa
#Defaults for tftpd-hpa
#Defaults for tftpd-hpa
RUN_DAEMON=\”no\”
OPTIONS=\”-s /home/tftpd-c-p-u 077-u To set TFTPD \”
, simply change server_args = to your server folder

Event ID 407, 408 – when NAT is used as a DNS server

QUESTION NO: 211

You are the administrator of TestKing’s network, which consists of a single Windows 2000 Domain. The

relevant portion of its configuration is shown in the exhibit.

You configure a Windows 2000 Server computer named NAT1 as the DNS server for the domain. You

install Routing and Remote Access on NAT1. You configure NAT1 to provide network address

translation services for client computers to access the Internet.

Users now report that they cannot log on to the domain or access network resources. On investigation,

you discover that you cannot query NAT1 for name resolution. In the application event log on NAT1, you

find the following event messages:

Event ID: 407

Source: DNS

Description: DNS server could not bind a datagram (UDP) socket to

192.168.0.1. The data is the error.

Event ID: 408

Source: DNS

Description: DNS server could not open socket for address 192.168.0.1.

Verify that this is a valid IP address on this machine.

How should you correct this problem?

A. Disable the DNS proxy functionality on NAT1

B. Enable the DNS proxy functionality on NAT1

C. Reconfigure the DNS server service not to listen on the internal address of NAT1.

D. Reconfigure the DNS server service not to listen on the external address of NAT1.

Answer: C

Explanation: This problem can occur when you have a NAT server that also is used as a DNS server. NAT has

a DNS Proxy setting that enables DHCP clients to direct DNS queries to the NAT server. The client DNS

queries are then forwarded to the NAT server’s configured DNS server. The DNS Proxy and the DNS Server

service cannot coexist on the same host, if the host is using the same interface and IP address with the default

settings.

There are three methods to overcome this problem:

1. Reconfigure the DNS server service not to listen on the internal address. This is the solution in this scenario.

2. Install NAT and DNS on different servers. We cannot change this configuration here since this option is not

listed.

3. Use the DHCP server Service in NAT, NOT the DHCP Allocator and DNS Proxy.

Reference: JSI Tip 3284, Your DNS Event Log reports Event Ids 407 and 408

Incorrect Answers:

A: We could disable both the DNS proxy functionality and the DHCP allocator.

B: The DNS proxy function on the NAT server is partly to blame. Enabling it will not help.

D: We must configure the DNS server not to listen to the internal address, not the external address.

Error code:10053

Symptoms:
Action.c(16): Error : socket0 – Software caused connection abort. Error code : 10053.

 

normal C/S communication process is :
Server Listen–>

Server Listen–> Client Connect–> Server Accept –> Client Send –> Server Recv–> Client Close –> Server Close
if you do not take the initiative to Close the connection and direct to withdraw from the Client end, Server end service thread will cause a 10053 error (this kind of error usually effect is not too big), and if in the process of the communication Server first initiative to Close the connection, the Client end can also cause a 10053 error

the situation of the bad network is usually refers to the latter, the Client thought the Server off (the actual network broken), so I cried. “10053

Recently, when I used LoadRunner to conduct the performance test of Winsock protocol, the WebServer tested was JBoss, and 10053 errors often occurred. The phenomenon was as follows: after I created the connection with lrs_create_socket, when the number of requests for this socket connection reached 100, the connection was not available, and it had to be closed before creating again. LoadRunner causes Connection abort. Error code: 10053. LoadRunner causes Connection abort.
After much exploration, it was finally found that the error was due to the configuration of the HTTP 1.1 KeepAlive parameter in Apach HTTPServer. From my test results of several different Webservers, it can be seen that JBoss and Tomcat made errors when a Socket connection made 100 requests, while other Web servers, such as IIS and WebLogic, did not have this problem.
several related parameters are described below: KeepAlive, KeepAliveTimeout, and MaxKeepAliveRequests.
KeepAlive Directive
Description: Enables HTTP persistent connections
Syntax: KeepAlive On|Off
Default: KeepAlive On
Context: server config, virtual host
Status: The Core
Module: the Core
In HTTP 1.0, a connection can only transfer one HTTP request, while the KeepAlive parameter is used to support the one connection, multiple transfers feature of HTTP 1.1, so that multiple HTTP requests can be passed in one connection. Although only newer browsers support this feature, this option is enabled anyway.
The keep-alive extension to HTTP/1.0 and The Persistent Connection feature of HTTP/1.1 provide long-lived HTTP sessions which allow multiple requests to be sent over The same TCP Connection.In some The Keep Alive Extension to HTTP/1.0 and The Persistent Connection feature of 1.1 provide long-lived HTTP sessions which allow multiple requests to be sent over The same TCP Connection.In some cases this has been shown to result in an almost 50% speedup in latency times for HTML documents with many images. To enable Keep-Alive connections, set KeepAlive On.
For HTTP/1.0 clients, keep-alive Connections will only be used if they are specifically required by a client. In addition, A keep-alive connection with an HTTP/1.0 client can only be used when the length of the content is known in advance. This implies that dynamic content such as CGI output, SSI Pages, And server-generated Directory listings will generally not use keep-alive Connections to HTTP/1.0 clients.for HTTP/1.1 clients, persistent connections are the default unless otherwise specified. If the client requests it, chunked encoding will be used in order to send content of unknown length over persistent connections.
— — — — — — — — — — — — — — — — — — — — — —
KeepAliveTimeout Directive
Description: Amount of time the server will wait for subsequent requests on a persistent connection
Syntax: KeepAliveTimeout
Default: KeepAliveTimeout 15
Context: server config, virtual host
Status: Core
Module: Core
KeepAliveTimeout tests the time between multiple request transfers in a single connection. If the server has completed one request but has not received the next request from the client, the server disconnects after the interval exceeds the value set by this parameter.
The number of seconds Apache will wait for a subsequent request before closing the connection. Once a request has been received, the timeout value specified by the Timeout directive applies.
Setting KeepAliveTimeout to a high value may cause performance problems in heavily loaded servers. The higher the timeout, the more server processes will be kept occupied waiting on connections with idle clients.
— — — — — — — — — — — — — — — — — — — — — —
MaxKeepAliveRequests Directive
Description: Number of requests allowed on a persistent connection
Syntax: MaxKeepAliveRequests Number
Default: MaxKeepAliveRequests 100
Context: Virtual host
Status: Core
Module: Core
MaxKeepAliveRequests is the maximum number of HTTP requests that can be made with a single connection. Setting its value to 0 will support an unlimited number of transfer requests within a single connection. In fact, no client requests too many pages in a single connection, and usually the connection is completed before this limit is reached.
The MaxKeepAliveRequests directive limits the number of requests allowed per connection when KeepAlive is on. If it is set to 0, unlimited requests will be allowed. We recommend that this setting be kept to a high value for maximum server performance.
For example:MaxKeepAliveRequests 500
Finally, although this problem was caused by the parameter configuration of HTTPServer, only LoadRunner would have had this problem, and if Rational Robot had implemented the same functionality, it would not have had this problem, presumably due to the testing tool’s implementation strategy for Socket connections.

Windows FTP Error 425: Unable to build data connection

http://www.trapstone.com/articles/windows_ftp_425_connection_refused

Having problems transferring files with FTP?If you are using the command line FTP client within Windows and getting errors like these…

500 Illegal PORT command 425 Unable to build data connection: Connection refused

Well, don’t worry – you’re in good company.
This is probably one of the most commonly encountered problems by Windows users with the command line FTP client, primarily when connecting to servers that use non-default ports.
This article explains why … and what you can do about it.
Illegal Port Command – Why FTP may be running on a non-standard port
Every day, countless attempts are made to get access to servers via FTP by guessing account names and passwords.
As a result, many companies who provide FTP access to their customers have configured their servers to run FTP on a non-standard port (i.e. anything other than the default port 21).
Normally this should not be a problem, as you can tell your FTP client which port to connect to on the server and to use passive mode. If you don’t know what passive mode is all about, take a look at the article on Active FTP vs. Passive FTP.
Why Windows FTP Can’t Build A Data Connection
If you use the standard FTP client (the command line one) that comes bundled with Microsoft Windows, then you will find that even if you specify a different port number, you cannot enable passive mode.
Note also that you can’t specify the port number on the command line itself as a server.name:port pair (unlike pretty much every other command line FTP client on the planet).
Instead, you can only attempt this from within the client interactively. For example, here’s a session from an attempt to connect to one of our FTP servers which is running on port 7021…

Here we can see our attempt to connect to our server on it’s non-standard port is successful.
However, as soon as we attempt to transfer data, the attempt to open a secondary port for the data flow fails. Microsoft’s own article on the Windows FTP Client Receives Error Message 425 points out that:

“The FTP clients that ship with Windows do not support passive mode. Therefore, they always need to negotiate a data port when issuing a command that returns data.”

As a result, even if you do correctly specify a non-default port number, you still cannot use passive mode.
Sigh… cheers guys.
Note that you may find a lot of articles on the ‘net claiming that Windows FTP client does support passive FTP – often because they’ve seen the PASV entry in the registry or because the client appears to accept the literal pasv command.
It does not work with the Windows command line FTP client!
The server might respond to a PASV command with a message saying it is in passive mode but the Windows command line client has silently ignored it.
How You Can Use Passive FTP Under Windows
Internet Explorer can support passive mode as an FTP client if you enable it in the “Internet Options”, although that’s only useful for retrieving files – you can’t upload via Internet Explorer.
For full bidirectional FTP functionality, the simple answer is to not use the Windows command line FTP client at all.
We recommend that you use something like FileZilla, which provides a clear, friendly and useful interface – and it’s free!. Alternatively, Firefox users can get the FireFTP add-on to integrate bi-directional FTP with their browser.
If security is a concern and if the FTP server supports SSH connections, you may also want to download SFTP, which is part of the PuTTY SSH client distribution. This is also free and FileZilla supports SFTP as an alternative backend.

Drupal Internal Server Error 500

After the completion of the local test site, I uploaded it to the space and found an Internal Server Error 500. In this way, I had to close the Clean URL before. Htaccess could work and the 301 jump could be realized. But when I open clean URL, if you’re using drupal’s default.htaccess, you won’t find the page. Now I’ve simply rewritten.htaccess, because All I need is a 301 jump.
The original source: http://suyou.info/node/32

    < IfModule mod_rewrite.c>

    RewriteEngine on

    RewriteBase /

    RewriteCond %{HTTP_HOST} ^www.(.+)$ [NC]

    RewriteRule ^ http://%1%{REQUEST_URI} [L,R=301]

    RewriteCond %{REQUEST_FILENAME} ! -f

    RewriteCond %{REQUEST_FILENAME} ! -d

    RewriteRule ^(.*)$ index.php?q=$1 [L,QSA]

    < /IfModule>

Explain MySQL replication error 1032 & 1205

Most of the businesses using MySQL involve Replication, and master-slave mechanisms are often used for reading and writing separation,HA, hot backup, or incremental Replication.
However, in many cases, 1032 and 1205 errors are reported
1032 in the first place.
Error_code: 1032; handler error HA_ERR_KEY_NOT_FOUND;
The root cause of the 1032 error was inconsistency in the master-slave database data, resulting in the synchronization operation not being performed on the slave library.
There are two kinds of situations I have encountered so far:
For Replication, I used master –binlog-do-db=db_name or slave — Replicate_do_db =db_name.
If two libraries pubs and test, ignore the test, the results have a SQL in the master test library implementation: insert into pubs. Tname values (XXXXX);
Then, depending on the configuration of the service, a 1032 error is raised if the master executes successfully and the master does not
2 TRIGGER and PROCEDURE version problem. If the master-slave version is inconsistent, for example, five pieces of data are written after the execution of a PROCEDURE on the master-slave version, while only one line of data is written after the execution of a PROCEDURE on the master-slave version, then a 1032 error is bound to occur

Solutions:
1. It doesn’t use –binlog-do-db and — Replicate_do_DB =db_name
Change from top — Replicate_wild_do_table =db_name.%
2 Ensure that the master-slave TRIGGER and PROCEDURE versions are consistent

Say again 1205:
This error is easy to understand. Typically, the primary operation connection is autocommit, and as a result, the runtime fails and an error is reported when synchronizing from the library.
Two ways to do it:
Set my.cnF Innodb_rollback_on_TIMEOUT =1 on the primary, rollback for timeout
2. Ignore 1052. My. CNF — slave-skipping-errors =1205 from above

1205 occurs on the main library, often because of lock timeouts. For example, using a transaction on a table results in one transaction not committing late, another transaction waiting for the previous transaction to commit, lock wait timeout, and the latter transaction hanging. A 1205 error occurred on the main library. The most common is when a table has a self-growing ID, and an INSERT initiated transaction is delayed for several reasons, so that subsequent transactions wait for the previous INSERT operation to commit when performing the insert operation on the table. These all require DBAs and R& D Cooperate to complete. The service performance is low CPU utilization, but load is unusually high. If you look innoDB status, you can catch lock conflicts randomly.

[ERROR] ERROR reading packet from Server: Lost Connection to MySQL Server during Query (server_errno=2013)
In general, three situations will lead to 2013 errors
1 Reverse parsing
2 Max_allowed_packet is inconsistent
3. Network Problems

The solution
1 Skip-name-resolve is forbidden to reverse resolve
Configure master slave max_allowed_packet with the same value
3 Adjust the value of net_write_TIMEOUT

A friend of mine reported a mistake in 2013 when I was writing notes. None of the three schemes mentioned above worked, and Lost Connection to MySQL Server appeared very timely. Finally, I found out that the network agent controlled the connection for more than 30 minutes and automatically hung up…

Microsoft VBScript runtime error ‘800a01ad’

Error “Microsoft VBScript Runtime error ‘800a01ad'” when uploading a file or image, or when generating a file with “FSO” enabled.
The following operation can be solved. (Old questions, old answers, new articles)
 
Active Server Pages returns VBScript runtime error “800A01ad”
 
Using CreateObject to create COM components in Active Server Pages (ASP) may cause the following errors:

This error usually occurs when a dynamic link library (DLL) that a COM object depends on occurs in one of the following situations:
Could not be found in system Not in system path system inaccessible due to security Settings
Solutions:

re-register adodb. Stream component

example: the system disabled adodb. Stream
in ASP Server.CreateObject (” adodb. Stream”) will report an error. Regsvr32 “C:/Program Files/Common Files/System/ado/msado15. DLL”; Re-register and start FSO:

in the start-run: regsvr32 scrrun.dll, after the registration is successful, restart FSO.

start FSO: regsvr32 scrrun.dll
close FSO: regsvr32 /u scrrun.dll
after the first two steps successful, you can not restart IIS, but suggested to restart, the effect will be more.

error code 11 – Administrative Limit Exceeded

The problem is ldap server has limitation for the user about numbers of entries searched.

Open your directory server (name), Configuration Folder, Performance. On right panel check Client Control folder. You may see:

Size limit

Look-through limit

Time limit

Idle timeout

The look-through limit specifies the maximum number of entries that will be examined for a search operation.

The size limit specifies the maximum number of entries the server returns to the client application in response to a search operation.

The time limit specifies the maximum time the server spends processing a search operation.

The idle timeout specifies the time a client connection to the server can be idle before the server drops the connection.

Change these options to “unlimited” can resolve this problem.

Solution to Starting Fault of routing and remote access service (16389 (0x4005))

1. The routing and remote access service cannot be started on a Microsoft Windows 2000 Server computer or a Microsoft Windows Server 2003 Server computer.
the following error message was recorded in the system event log on the Windows 2000 server computer:

Type error:

source: service control manager

category: none

event ID 7024:

note:

routing and remote access service due to a specific service error 87 (0x57).

Type error:

source: remote access

category: none

event ID: 20152

note:

the current configuration authentication provider failed to load and initialize. The parameter is an error.

The following error messages will be logged based on the system event log on the Windows Server 2003 machine:

Type error:

source: service control manager

category: none

event ID 7024:

note:

routing and remote access service due to a specific service error 16389 (0x4005).

 

Launching Routing and Remote Access Service prompts:
Routing and Remote Access cannot be started on a local computer. Refer to the system log for reasons. If this is not a Microsoft service, contact the service vendor. And refer to the specific error code 16389.
 
The details in the event viewer are:
Routing and Remote Access service to be stopped due to a 16389 (0x4005) service error. The error ID is 7024…
 
2, the reason
This problem occurred when the Internet Authentication Service (IAS) database was corrupted. IAS and routing and remote Access services use the IAS database.
 
3. Solutions
To solve this problem, follow these steps:

    extract ias.mdb file and dnary.mdb file from Windows2000Server CD or Windows Server 2003 CD to %WinDir%/System32/Ias folder on disk. To do this, follow these steps:

      click start, click run, type CMD in open, box, and then click ok. At the command prompt, type the following line. Press Enter after each line:

      Drive:
      cd i386
      ren %windir%/system32/ias/ias.mdb %windir%/system32/ias/iasOLD.mdb
      ren %windir%/system32/ias/dnary.mdb %windir%/system32/ias/dnaryOLD.mdb
      expand ias.md_ %windir%/system32/ias/ias.mdb
      expand dnary.md_ %windir%/system32/ias/dnary.mdb
      note that in this step, driver is a dvd-rom drive containing the Windows2000Server or WindowsServer2003CD that represents the drive letter is a cd-rom drive or placeholder.

    register oledb32r.dll file and register oledb32.dll file. To do this, follow these steps:

      at the command prompt, type the following line. Press Enter after each line:

      Drive:
      cd program files/common files/system/ole db
      regsvr32 oledb32r.dll
      note that in this step, drive is a placeholder representing the ProgramFiles folder is the drive letter to store. When you receive a message indicating whether the operation was successful, click OK. At the command prompt, type the following line, and then press ENTER:

      regsvr32 oledb32.dll
      When you receive a message indicating whether the operation was successful, click OK. Type EXIT and then press ENTER to exit the command prompt.

    register vbscript.dll file. To do this, follow these steps:

      at the command prompt, type the following line. Press Enter after each line:

      Drive:
      cd %systemroot%/system32
      regsvr32 vbscript.dll
      note that in this step, driver is a placeholder representing the drive letter is stored in the System 32 folder. When you receive a message indicating whether the operation was successful, click OK. Type EXIT and then press ENTER to exit the command prompt.

    starts routing and remote access services. To do this, follow these steps:

      points to the program, points to the management tool, and starts with Services. Right-click the Routing and Remote Access service, and click Start.

 

MySQL startup problem (ERROR 1045 (28000): Access denied for user’ODBC’@’localhost’ (using password: NO))

2011-03-18 wcdj
 
The solution is as follows:
(1) open mysql service because I installed the selected manual boot at that time.
(2) add the bin directory of mysql installation to the system PATH environment variable, using; (semicolon) partition.
(3) then open CMD and type the command: mysql-u username -p password. Enter mysql-u root-p my root password on my machine, and you will be able to enter mysql.
 
As shown in the figure below:

 
Reset password:
$mysql -u root -p
login password # mysql server mysql> Use mysql # using mysql database
mysql> Update user set password= password (“123456”) where user =’root’ # update user password
mysql> Flush privileges # to refresh the permissions
mysql> Quit # Quit the mysql server