Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

learn more… | top users | synonyms

1
vote
2answers
207 views

Is there a reason I shouldn't use iptables port forwarding?

I have a small application running on port 8888, and as a quick fix to remove the need to append the url with the port, I used the iptables program to forward all requests to port 80 to 8888. sudo ...
1
vote
5answers
744 views

Best Practices for Open Relay Email Server

I have a scenario where I need to setup postfix with no TLS, no SMTP authentication, and open relay allowing from only one remote IP address. Emails from this remote IP may have spoofed "from" address ...
0
votes
1answer
124 views

Is it a good practice use LDAP for auth in a public webapp beside the app DB?

Internet app needs to be really secure. So LDAP for auth got into the game. Instead doing the traditional db with users table, we want to authenticate agains a LDAP server. How good/bad you think it ...
0
votes
2answers
104 views

NginX installation-source best practice

I'd like to install NginX as a reverse proxy on CentOS. I know three different ways to install NginX: Compile itself Install over EPEL Install over official NginX package repository Which way ...
-1
votes
1answer
61 views

Disabling/hiding rather than deleting [closed]

From what I understand, it's generally best practice to design a system with user access to delete "records" to only hide/disable that record and not actually delete it. This typically ends up being ...
7
votes
2answers
2k views

GPO best practices : Security-Group Filtering Versus OU

Good afternoon everyone, I'm quite new to Active Directory stuff. After upgraded Functional level of our AD from 2003 to 2008 R2 (I need it to put fine-grained password policy), I then start to ...
1
vote
1answer
97 views

Avoiding sudo to root with an alias, is it possible? [closed]

I've developed a bad habit of constantly sudoing to root. I was wondering if its possible to create an alias that prevents straight sudo but allows sudo -u. Or possibly echoes a warning when using ...
1
vote
1answer
156 views

Best practices for IPv4/IPv6 hosts in DNS zones?

I've got a VPS with IPv4 and IPv6 addresses, and I'd like to use them both for my website and other services I might use. I've added a "www" register both with "A" and "AAAA", and I've done the same ...
2
votes
1answer
528 views

Is there a good reason to change session.save_path?

On shared hosting, we had occasional problems when the server's /tmp directory was full. Our hosting company suggested we change the session save path to be unique for each site. ...
3
votes
2answers
136 views

One active directory server for one geographical site?

we have an 2008 R2 active directory server on our main site. Recently we opened a small secondary site. My question is pretty simple : our 2 sites are connected with a VPN, is it mandatory for us to ...
4
votes
1answer
305 views

Using Public IP addresses for Private Network

I have a network that uses the 192.192.192.x network address for their private network. It looks like publicly those are IP addresses that are assigned in Taiwan. I don't think they do too much ...
1
vote
1answer
214 views

Best practice for replacing failing drive in a TWO Domain Controller domain

Hi I have a two domain controller domain and i will refer to them as DC1 and DC2, here is some info on them. DC1 is or has all FMSO roles DC2 serves as another Domain Controller for replication DC1 ...
9
votes
1answer
503 views

What are the best practices for service accounts?

We're running several services in our company using a shared domain account. Unfortunately, the credentials for this account are widely distributed and being used frequently for both service and ...
1
vote
2answers
6k views

Enabling Receive Side Scaling & IPsec Task Offload v2 on a Network Adapter

Running the Best Practice Analyzer on a Windows Server 2012 RTM (this virtual server runs on a hyper-v host), I receive two configuration warnings. Enable Receive Side Scaling (RSS) on a network ...
0
votes
1answer
196 views

How to delay and queue commands for execution at a later time? [closed]

My site receives numerous uploads and I can't afford to waste cycles and time processing them on the spot (e.g., trimming, optimizing, resizing, etc.). What technologies exist to delay and queue these ...
2
votes
1answer
2k views

Best way to override 1024 process ulimit

On CentOS distros, there is an /etc/security/limits.d/90-noproc.conf that sets a process limit for all users: # Default limit for number of user's processes to prevent # accidental fork bombs. # See ...
-2
votes
2answers
2k views

Using RAID1 vs. rsync pros and cons [closed]

I am building myself a Linux NAS/home server. I am considering either using sw RAID-1 (mdadm) to replicate data or alternatively just rsync them periodically. What are advantages/disadvantages of both ...
2
votes
1answer
88 views

Best Practice for “fastcgi_pass” Directive Location in NGiNX

Is best to put the fastcgi_pass 127.0.0.1:9000 directive in the fastcgi_params file for NGiNX, or to explicitly state it in the location for \.php$? Or does it not really matter?
3
votes
1answer
1k views

Active Directory Split-Zone vs SubDomain Domain Name

Note - I know there are a ton of questions around AD Naming. I do not believe though that this is a duplicate question. If it is please link me to a relevant one :). We are implementing AD. Our big ...
10
votes
3answers
607 views

Cisco ASA and multiple VLANs

I currently manage 6 Cisco ASA devices (2 pairs of 5510s and 1 pair of 5550s). They all work quite nicely and are stable so this is more of a best-practice advice question rather then "OMG it's ...
2
votes
1answer
524 views

How should I configure my Active Directory servers so that if one goes down, users are not kicked off SQL?

Today, we shut down one of our Active Directory servers during office hours to check the loading on a UPS. Since all the server did was provide Active Directory in a separate building incase the main ...
0
votes
2answers
334 views

Where to store big data (best practices)

I am installing a fresh Ubuntu on our lab server. We have lots of massive genomes which need to be accessed by Apache www-data user. Currently I backed all the data up on external drives. My goal is ...
4
votes
2answers
247 views

Standard Firewall and Network Change Testing Procedure

I am looking for a standard that advises on the best practice for testing of the following situations: Network Changes Firewall Changes Does any standard exist? If so, please note where I can find ...
1
vote
1answer
73 views

Best practices for backup on a massively parallel grid system

I work in the research group of a large company. We do a lot of work on a grid processing system with many nodes (More than 200, I'm not sure exactly how many) and several harddrives. More than 1000TB ...
0
votes
2answers
215 views

Best Practice: Implementing a Full Disk Encryption on laptops

We are thinking about using TruEncrypt full disk encryption to protect the data on our laptops (roughly 15-20 in the healthcare field - XP & Win7). And I was wonder about backups, and not per say ...
4
votes
1answer
97 views

A separate user for each task?

I just got a VPS sver the other day, I'm new to server administration, but not that new to Ubuntu (11.04). I use it in my living room as the HTPC, and I had a previous VPS that I used on and off for a ...
2
votes
2answers
254 views

How accurate is the 'supersede' term regarding older updates in WSUS?

Been recently playing around with different options for management of my servers. One of these is WSUS. Getting a beginning list of updates was simplistic enough (though, the list is a bit...long) ...
4
votes
1answer
2k views

Best Practices for rotating syslog logs on RHEL with different schedules?

OS: Running RHEL 5.6. Situation: I need to rotate /var/log/messagees on a different schedule than the rest of the syslog logs. By default syslog logs are rotated weekly based on the ...
3
votes
1answer
2k views

Is it a bad idea to do an OVF Export of a VM with snapshot data?

I'm currently using a VM running on ESXi 5.0 to dry-run installation procedures for a software product. We're trying a whole different bunch of things, so I'm making extensive use of snapshots to save ...
2
votes
1answer
189 views

How can I share a live BZR repository with multiple users?

I'm not sure how best to ask this question. Over several years I've developed my way into a corner and need to figure some things out. I almost certainly haven't been following best practices up until ...
0
votes
2answers
107 views

Best Practices for publishing to a web server

I have a high traffic PHP based website and have 2 web servers which sit under a load balancer. I only have FTP access to change the files on the 2 servers when I wish to make changes to the site. ...
1
vote
1answer
88 views

How to avoid namespace conflicts in Active Directory

We are having issues with namespace conflicts. An example: AD security group Network Admins is used by AD-aware applications for access control AD user Network Admins was going to be used for the ...
2
votes
3answers
101 views

What is the appropriate location for a custom script?

I wrote a script for my Red Hat server that aggregates some system info and shoots it off in an email. What is the appropriate location to place that script? Right now it is in my /home/jeff ...
2
votes
0answers
402 views

IIS 7.5 Request Filtering - best practice rules?

Im looking for a set of best practice rules for Request Filtering similar to what UrlScan adds by default. Any suggestions or an example list of filters is much appreciated. By default IIS 7.5 only ...
3
votes
2answers
406 views

Internal Network/Server Separation Best Practices

I have a block of 5 static IP's, and am going to be running a exchange and web server on-site. I am wondering if I should separate the web server IP, Mail IP, and internal network IP. What would the ...
0
votes
4answers
734 views

Active Directory Design

Please assist me in how I design my active directory hierarchy based on the following. We have a corporate office where there 8-10 departments and 200+ <250 users are present. We have two ...
5
votes
1answer
483 views

Backing up a server on the DMZ

We have a somewhat-static web app with a large amount of media files that runs on a 2008 R2, non-domain server on the DMZ. I need to backup the media files on the server. The current backup mechanism ...
4
votes
4answers
9k views

How can I investigate sustained high CPU usage by Microsoft.Exchange.Rpc.ClientAccess.Service.exe?

One CAS server in our array has nearly 90% of its 4 CPUs used. The remaining CAS servers are at 30 percent. How should I investigate what is causing this increase? Below is a graph of: Six ...
1
vote
2answers
414 views

EDB repair in SBS exchange 2003

One week before in our HP PROLIANT ML370 G5 server with RAID5 one hard disk turned amber and we removed and it is working under degraded state until now. Yesterday morning our users in the domain ...
3
votes
3answers
228 views

Is there a good layout convention for cron files?

I'm currently confronted with a cron file that contains a dozen different applications' tasks--some have only one, some have lots. I'm trying to figure out a good way to organize and document these ...
0
votes
1answer
111 views

What content is best practice to include in a 503 page to provide best user experience in the case of overloaded backend? [closed]

The classic example is the "Fail Whale" on twitter. But I'm interested in what people's thoughts are on this.
6
votes
2answers
473 views

Tool(s) for labeling cables with unique ID numbers

We are looking to (finally) implement a cable labeling procedure. We already have a labler. Now we need a system to maintain unique IDs not related to anything. I thought of getting a tally counter ...
1
vote
1answer
97 views

250 users with a data dir on a central server - how would you set it up?

I'd like to get best-practice advice on how to setup a scheme where 250 users or more have OS independent access to their own data-dir / user-dir on a central server in the local network. from the ...
42
votes
7answers
13k views

Best Practices in Username Standards: Avoiding Problems

I'm interested in finding out what people's experiences with standard usernames is. I've always been in places that used {firstInitial}{lastname} (sometimes with a length-limit). Now I've users that ...
4
votes
3answers
1k views

Ranges for Multiple DHCP Server: Better to overlap or separate? wireless vs ethernet clients?

I know there are mixed feelings about running multiple DHCP servers on one LAN, but I'm wondering about the best way to set their ranges. In my case, I have a router which performs DHCP and also my ...
1
vote
2answers
154 views

Where to create a subversion repository on a server?

When managing my own servers, I normally keep data such as svn repositories in /srv/svnrepo. In the organization I currently a part of the SAs have been using /home/svnrepo. My decision to ...
13
votes
4answers
5k views

In Puppet, how would I secure a password variable (in this case a MySQL password)?

I am using Puppet to provision MySQL with a parameterised class: class mysql::server( $password ) { package { 'mysql-server': ensure => installed } package { 'mysql': ensure => ...
3
votes
3answers
2k views

Win7 Domain User Profile- Desktop Icon management best practices request

Here's the situation: We have a large (5,000+ user) organization that is currently using folder redirection to manage the windows desktop icons. This folder is redirected to a network share where we ...
10
votes
4answers
2k views

Best practice for automated Linux updates

We are working on a way to perform automatic updates for our RHEL/RHEL-based servers. Initial idea: Using Puppet, we disable the default repositories and point to our own. Then, we use ensure => ...
1
vote
2answers
442 views

ZFS: Best-practices doc state: “On systems with 1,000s of ZFS file systems…”?

The docs state: "On systems with 1,000s of ZFS file systems, provision 1 GB of extra memory for every 10,000 mounted file systems including snapshots." What does that mean - how do these people use ...