Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

learn more… | top users | synonyms

0
votes
3answers
181 views

A service accessing an UNC path, Win 2008R2, best practices?

I have an Apache Webserver service running on Machine A. It serves some files from machine B, by having an Alias /foo \machineB\someshare MachineB\someshare is read-accessible to "Everyone". ...
3
votes
2answers
484 views

Importance of ha.cf file in a heartbeat/pacemaker environment?

I'm having a few issues trying to understand ha.cf and how the cluster picks up on updates. For example, when creating a new cluster, I usually: Set some default options in ha.cf on node 1 - node x ...
0
votes
2answers
547 views

Cisco ASA 8.4+ redirect multiple ports - best practice?

I was wondering whether anyone could advice on best practices as to the best way to redirect multiple ports for single host in the internal network. As I understand this you can only nat a single ...
0
votes
2answers
111 views

Best Practices for publishing to a web server

I have a high traffic PHP based website and have 2 web servers which sit under a load balancer. I only have FTP access to change the files on the 2 servers when I wish to make changes to the site. ...
2
votes
1answer
193 views

Seeking alternative to storing binaries in git for devops

I'm not sure how to ask this best practices question since I know many StackExchange users evidently think best practices are a bad thing ... We've got Salt and Vagrant configured to stand up servers ...
0
votes
1answer
105 views

Install DHCP failover on domain controllers vs member servers?

What is the recommendation for installing DHCP failover; domain controllers or member servers? I can't seem to find any recommendations either way. I did find an old question here pertaining to ...
0
votes
1answer
33 views

Process separation on an OpenBSD server

I fear this may be a somewhat open-ended question that gets closed: Apologies in advance, but I'll give it a shot! I'm considering operating an OpenBSD VM with a number of services running on the ...
0
votes
1answer
93 views

Creating enterprise init script (to support all Linux distros)

I'd like to create my own init script to make my program start at boot and be controlled via "service" utility in most popular Linux distributions. Requirements: it should be portable across ...
0
votes
1answer
100 views

Consequences of exposing VM storage on same subnet as VM's and hypervisor

I recently purchased a RAID array to store my VM's and segregate the storage from the host machine. Since my needs are pretty simple I've configured the VM's to bridge with the host network (I think ...
0
votes
1answer
619 views

DNS Server 2008 R2 from 2003 - Stand Alone -

We have just implemented two new windows 2008 r2 stand alone servers running dns and they took the place of our old 2003 stand alone servers. Is there residual clean up that would need to be done on ...
0
votes
1answer
163 views

Is it a good practice use LDAP for auth in a public webapp beside the app DB?

Internet app needs to be really secure. So LDAP for auth got into the game. Instead doing the traditional db with users table, we want to authenticate agains a LDAP server. How good/bad you think it ...
0
votes
1answer
175 views

S3 backup: bucket vs. volume

I've inherited a project that has been pushing encrypted (GPG) DB backups via a backup script to an S3 bucket. That's all been well and good, but now that bootable EBS instances (where the project ...
2
votes
0answers
343 views

Usermod -aG vs gpasswd -a as a best practice

I am aware that usermod -g is not best practice from many posts like this however they normally explain the usermod should not be used as it changes the primary group of a user. These posts dont seem ...
2
votes
0answers
468 views

IIS 7.5 Request Filtering - best practice rules?

Im looking for a set of best practice rules for Request Filtering similar to what UrlScan adds by default. Any suggestions or an example list of filters is much appreciated. By default IIS 7.5 only ...
1
vote
0answers
22 views

Ruby on Rails Debian best practice

I've seen in various places people using Ruby compiled from source through a cloned rbenv git repository, and then installing Rails through RubyGems to get the latest version. But, from what I know, ...
1
vote
0answers
37 views

Installing consumer software on a server

I am in need of a simple low-maintenance off-site backup solution for one or more Windows servers. I have had great success using some consumer-grade backup software that allows me to backup files ...
1
vote
0answers
16 views

Should each task/process/role run as its own user on a Windows server?

I know that on Linux servers, it's widely considered best practice to run each task/role/process/server/program as its own user and usually in its own group. How should separate tasks be handled on a ...
1
vote
0answers
311 views

Enable shadow copy where VHD files are stored?

Should I enable Shadow Copy on the volume that stores our Hyper-V VHDs? This same volume also has all our file shares, which is why I want to turn on shadow copy. If I do enable it, will it eat up ...
0
votes
0answers
16 views

Separate domain admin accounts - are password tokens stored for run-as?

I am considering separating our domain admin accounts as suggested in this previous thread. However, are password tokens stored for "run as" instances? If so, running MMC and other tools with "run ...
0
votes
0answers
10 views

Strange AD replication issue between different subnets DC. (Alternative solution is working)

I'm facing very strange issue of AD replication in with different subnets DC. Site A : 172.16.1.0/16 Site B: 192.168.20.0/24 sites are connected through P2P and IPsec tunnel (two different way). ...
0
votes
0answers
71 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...