The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
203 views

Where should python and rails-based web apps be placed in the Linux filesystem?

/etc? /srv? /home? Apps in these languages shouldn't be under document root (which, in my opinion, goes under /srv/www). But, otherwise, I can't think of a location/scheme that's best practice to ...
8
votes
1answer
806 views

How to manage Nagios dependencies on big clusters?

I'm using quite a big nagios configuration (about 4000 services), without any dependencies. This results in a huge mess of notifications when something goes wrong. I try to look for best practices ...
3
votes
2answers
2k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
4
votes
2answers
127 views

Making Changes to Our File Server

Currently we have one Windows 2008 R2 Server acting as a domain controller and fileserver. We're serving about 6 million jpgs to 4 IIS servers which are then served to web users. The problem is ...
1
vote
2answers
755 views

When is it not worth putting Apache in a chroot jail?

I don't mean to question the well established security precaution of putting apache in a chroot-jail in most scenarios but in my scenario I have doubts. We have a virtual server hosting a single ...
2
votes
1answer
517 views

SAN design: File & Block level access?

The short question: can I share file and block level traffic on the same SAN? Perhaps more importantly, should I? The gory details are below... I'm hopefully putting the finishing touches on a new ...
6
votes
3answers
296 views

Is there already a recommended IPv6 Firewall setup?

I'd like to switch from private-IPv4-subnet-behind-NAT to IPv6, but of course I have no intention of exposing my users' workstations "unprotected" to the net. Some obvious points up-front: Allow ...
2
votes
3answers
88 views

Where to start with Microsoft Exchange 2003

I am quite new to Exchange in general. I have done some server administration, but never with an Exchange box. Can someone point me in a direction that will give me a good overview and a set of best ...
0
votes
3answers
127 views

Best strategy to deploy distributed application on nodes

this is a general question about deploying and maintaining nodes. I am not a sysadmin. I am considering the following 'naive' strategy: Pick a linux flavor and stick to it. Create an image with my ...
3
votes
3answers
259 views

Disk-to-disk backup to same storage array?

We're looking to get a new SAN, and so we're re-examining our storage, network and backup issues. Our plan is to get an EMC VNXe 3100 with SAS drives for production data, then buy an expansion shelf ...
1
vote
1answer
644 views

What are the best practices or pitfalls when managing web app deployment using OS package management (deb, rpm)?

I heard about this at a talk over the weekend and it sounded like a great idea for a few reasons I can think of: ensures dependencies are met and not broken (e.g. web app requires specific version ...
0
votes
2answers
216 views

How often to upgrade PHP & MySQL

I run a couple of IIS + PHP + MySQL Web servers, that run a variety of web apps (Wordpress, Expression Engine, etc.) I know that I should always keep my web apps updated, but I wonder how often I ...
0
votes
2answers
755 views

Best Practice Analyzer for Windows Server 2008

I tried searching around for a bit but nothing came up. I know Microsoft makes BPA for Server 2008 R2 but was wondering if there is also a version for 2008?
0
votes
3answers
156 views

Top Infected Machines - Dealing with Threats?

I printed out a list of the top 25 infected machines (associate machines only) a bit of detail. Associate machines are only for sales associate. The domain login is the same for every machine, ...
6
votes
4answers
397 views

Is it better to map drives and printers to users or computers?

I've posted a few "best practices" questions like this. Question says it all. Current practice is to map the drives and install the printers on the computer for each user/computer combination. I'd ...
2
votes
2answers
1k views

How should I connect a redundant switch arrangement to the rest of the network?

My servers all have two NICs and I have two Ethernet switches (A and B) dedicated to the servers, in a redundant configuration. I have configured the NICs with bonding (Linux) or teaming (ESXi), and ...
0
votes
1answer
1k views

Registry entry missing for msexchangeDSAccess exchange 2010

After running exbpa i received a notification for PDC emulator is not excluded active directory access (ADAccess) topology with the value for minuserdc is missing after researching how to fix, I am ...
5
votes
7answers
3k views

Network Drive Letter Assignment Best Practices

We are working on migrating from Novell to Active Directory. During the transition, We are going to evaluate our drive mappings in light of current standards to see if what we have been doing still ...
4
votes
2answers
278 views

On Windows 2003 Server as File Server what it is better creating groups by directory or by profile?

I have a file server with 20 shared folders one for each department and their emploees have write permission through a AD group with same name of that folder. The thing is some people have to write ...
0
votes
4answers
667 views

Best pratice to implement free and affordable VPN between branch offices

I need to find a good software solution to implement VPN so a new branch office can use without security problems applications in our main office. I need it to be very reliable and almost transparent ...
3
votes
2answers
3k views

What are the best strategies for scaling up my web application to be able to cope with a large volume of users?

I want to get some advice / best practices for how to go about developing a strategy for scaling up my a web application. I waffle on a bit here and show my limited knowledge but want to fill in my ...
1
vote
2answers
418 views

What is preferred in VLAN environment, global spanning tree or per-vlan spanning tree?

Suppose you have a big switch with several VLANs. What is the recommend best practice with regards to spanning tree? I see you can configure global spanning tree, and there is per-VLAN spanning tree. ...
2
votes
2answers
523 views

Best Practice: bind, dhcpd, mysql, httpd, etc running on KVM Host?

With respect to "Best Practice" when it comes to virtualization, is it advisable to run services such as bind and / or dhcpd on a KVM host or should these services be run from a guest machine? How ...
7
votes
2answers
587 views

As an admin, what tools do you use to log what you do to your boxes? [closed]

I am more of a linux applications developer than an admin. Over time, I've built servers and maintained them, sometimes to offer services, mostly just to develop the applications I work on. Way back ...
0
votes
1answer
144 views

S3 backup: bucket vs. volume

I've inherited a project that has been pushing encrypted (GPG) DB backups via a backup script to an S3 bucket. That's all been well and good, but now that bootable EBS instances (where the project ...
0
votes
2answers
378 views

LAMP Best Practices

Does anybody know of a checklist for LAMP best practices? There is a lot of disparate advice on the 'net, but it would be nice to know if somebody has already published a best-practices guide or book ...
2
votes
1answer
420 views

Bandwidth Sharing & Accounting for large networks::Best Practices

I have a large network with more than 1500 PCs and 9000 user accounts in a university. We have classified users in 5 groups and are sharing bandwidth among them using MikrotiK's hotspot with NTTAC ...
0
votes
2answers
506 views

What are best practices writing parallel startup scripts in Unix shell (ksh,bash)?

I have a piece of software with different components running on the same Unix machine (web server, DBMS, middleware, different daemons). Startup of the few components depends on the success of the ...
2
votes
1answer
344 views

Best practices with managing log files on my server

My system is generating log files, e.g. for apache, nginx, tomcat, and other things and they grow pretty fast. I am looking for best practice recommendations because there are so many options to ...
0
votes
1answer
507 views

How should I setup an Ubuntu server on EC2 (MySQL, code location, etc..)?

I've started to fiddle around EC2, and I can't seem to understand the "AWS way" of setting up a server. I'm using Ubuntu server 10.10 64 bit, from an official AMI by Canonical. There is an EBD drive ...
0
votes
4answers
544 views

dead man's switch for remote networking interventions on Linux

As I'm going to change the network configuration of a remote server, I was thinking of some security mechanisms to protect me from accidentally losing control on the server. The level-0 protection ...
0
votes
4answers
2k views

Specify the next hop or the interface for static routes

I'm setting up a bunch of static routes (this is a security requirement so don't ask why I'm not using routing protocols). A static route can either be created by specifying the next hop ...
3
votes
1answer
1k views

Fibre Channel zoning best practices

I'm hoping that this will be useful for more people than just me. Right now I've got a fibre channel switch, a NetApp filer, and some servers running Oracle. All of the servers can see the same LUNs ...
18
votes
6answers
2k views

Bad to be logged in as admin all the time?

At the office where I work, three of the other members of the IT staff are logged into their computers all the time with accounts that are members of the domain administrators group. I have serious ...
1
vote
1answer
113 views

How do you gracefully upgrade mission critical systems to wildly disparate systems?

In the span of the 12+ years of my career, I have yet to overcome this hurdle and I suspect the answer simply isn't easy or even possible, so I ask everyone here for their experience. Say that you're ...
2
votes
2answers
1k views

Best practice ACLs to prepare for auditors?

An auditor will be visiting our office soon, and they will require read-only access to our data. I have already created a domain user account and placed them into a group called "Auditors". We have a ...
5
votes
2answers
160 views

Why should www.domain and mail.domain be used?

I see the default hostname for mail and web servers being set as mail.domain.tld and www.domain.tld respectively. Why is this? Does it help as you move from a single server to multiple servers? I ...
1
vote
2answers
482 views

Which is generally considered faster or best practice: symlinks or Apache aliases?

I'm curious as to what most people's views are on this subject. Personally, I will almost always prefer symlinks unless I have no other option -- I find that it is far more obvious when someone is ...
0
votes
2answers
1k views

What are industry standards and professional best practices in network hosts naming? [duplicate]

Possible Duplicate: Naming convention for computers It seems an important and difficult dilemma for me how to name network hosts (routers, servers (while a server can be a router and host ...
2
votes
4answers
685 views

Best practice for ONLY allowing MySQL access to a server?

Here's the use case: I have a SaaS system that was built (dev environment) on a single box. I've moved everything to a cloud environment running Ubuntu 10.10. One server runs the application, the ...
3
votes
1answer
3k views

Best Practice: iDRAC & NIC Selection

I am setting up a new Dell server with iDRAC 6 Express. My options for the NIC are: 1) Shared 2) Shared with failover to LOM2 3) Shared with failover to all LOMs The server has 4x LOMs. My ...
1
vote
2answers
207 views

datacenter network change control best practices

I have been tasked with compiling a list of possible network equipment changes at a data center. The task includes tagging which changes need change control and which don't. Does anyone know of a ...
8
votes
1answer
866 views

Best practice for Exchange 2010 HA topology considering 6 x Exchange licenses and TMG 2010

What would be best topology considering that: 6 x Exchange 2010 Standard Licenses 2 x Separate locations that are supposed to support redundancy in case of link problems 4 x Forefront TMG 2010 with ...
3
votes
3answers
233 views

New Server hardware verification tests

Is there any kind of best practice when it comes to verifying the hardware of a new server, before putting it into production? For instance, running it through the manufacturer's hardware test, or ...
1
vote
4answers
294 views

Plugging Surge Protectors into UPS [duplicate]

Possible Duplicate: UPS and power strip interactions? I have heard that plugging a server into a surge protector (cheapo power strip) is not good. Is this accurate? For instance: Server ...
1
vote
2answers
670 views

Setup Postfix as a null client?

I'm having a bit of trouble setting up postfix as a null client and have some questions. I'll be aiming to use SMTP as this is what most web applications use as a way to connect to the email server. ...
3
votes
2answers
174 views

IT Considerations for a company name change

Nothing is "for sure" yet but there is a good chance my company will be changing it's name in the future. Our IT requirements are relatively modest - Exchange server, IIS, MSSQL, etc. My question ...
0
votes
5answers
710 views

Reserve Web Server - How to synchronize them almost in real time [closed]

Maybe my question is a little bit stupid, but idea is to have a reserve web server, which will be activated WHEN main web server becomes inactive (DDos, or any other incident). Please name common ...
1
vote
4answers
405 views

Editing root-writable files with only sudo rights

Our sysadmins login to boxes using unprivileged accounts with sudo rights. I often, out of habit, open files in vim instead of sudoedit. I do not want to get into the habit of using sudoedit. My ...
5
votes
4answers
17k views

How do you diagnose packet loss?

I realise this is very subjective and dependent on a number of variables, but I'm wondering what steps most folks go through when they need to diagnose packet loss on a given system?