396 reputation
110
bio website
location Toronto, Canada
age
visits member for 3 years
seen Dec 13 at 3:42

FreeBSD, enterprise open source stuff, network and system security. I'm by no means an expert software developer, but I've been using PHP since 1995 and can find the bathroom on my own. Bourne shell and awk since the 1980s. My Telebit Worldblazer and serial breakout box are still in good working order. :/


Dec
1
comment haproxy: Is there a way to group acls for greater efficiency?
For reference, this appears to have moved to section 7.2 of the documentation for HAProxy version 1.5.9.
Mar
27
comment How to discover current time-zone (FreeNAS shell)?
find /usr/share/zoneinfo/ -type f -exec cmp -s {} /etc/localtime \; -print | awk -F/ -vOFS=/ '{print $5,$6}'
Sep
6
comment SSH keypair generation: RSA or DSA?
While FIPS 186-2 stated a 1024 bit requirement for DSA keys, the current FIPS 186 is FIPS 186-3, which explicitly allows for longer keys. While it looks as if the ssh-keygen documentation hasn't kept pace with the current FIPS standard, that affects the validity of standard not at all.
May
15
comment How do know if I can SSH in servers?
What are these servers used for? I.e. what is the "master list" that must always get updated regardless of the state of other documents? DNS? /etc/ethers? dhcpd.conf? Or are all hosts simply on the same subnet?
Oct
30
comment If you DONT use noac when mounting, is there a command to refresh the file and directory attributes given a path
We had some interesting problems a few years ago with Java mmapping jar files, then failing to "let go" and re-read the file when the map got marked dirty. Our solution? Kill off Java entirely and restart it. Hope you find a better solution. :)
Sep
22
comment CNAME for top of domain?
I should point out that EVERY domain is a "subdomain". example.com is a subdomain of com, and com is a subdomain of .. Any limitations put in place by your ISP are put in place by your ISP and perhaps the registrar, not by the underlying technology.
Aug
21
comment Prevent sudo, apt-get, etc. from swallowing pasted input to STDIN?
@SystemParadox - then the OP's original problem remains. Doing your system administration by cut-and-paste is a bad idea. If it doesn't work in the first place for the OP, then so much the better. Making it a pain helps to discourage the practice.
Aug
20
comment Unix: how can I change Program's running user and running group?
@hhh - your question used Apache as an example, but asked for a generic case. I provided that, including a reference to the only ubiquitous shell command that can be used to set your userid, but my answer is "too generic", and you think this deserves a downvote, despite the fact that my answer contains no errors or misinformation? Wow. I'll be sure to skip spending any effort on your future questions.
Aug
20
comment Unix: how can I change Program's running user and running group?
@hhh - If you installed Apache from its package (i.e. using apt-get or equivalent), then the package's install script probably created the necessary user and group for Apache's privilege separation. It's almost always a better idea to use a distro's "approved" and "supported" packages and methods rather than rolling your own. If you're writing new server software, consider having its install process create a new user just to own the files manipulated by the server. If privileged access is required for low-numbered ports or log manipulation, follow Apache's example, with a stub and children.
Aug
20
comment Unix: how can I change Program's running user and running group?
@hhh - the "Debian" label wasn't there when I wrote my answer; when you first posted your question, you tagged it "Unix".
Aug
17
comment How do i connect my host browser to my guest web server
Alrighty. Well, as I said, and as DJ Pon3 said in his comment, make sure the two machines (host and guest) are on the same IP network. Can you ping the guest's IP from the host? You mentioned the guest's IP, but not the host's. Are they in the same subnet? What kind of network interface have you configured in VMWare? TAP/bridged? Go through ALL the diagnostics, not just one or two.
Aug
16
comment Video card does not work in server
Ah, CUDA seems reasonable. Still, I'd probably want to dedicate hardware to that sort of thing, rather than loading it on to server that already has other responsibilities. Many eggs, one basket. I don't buy the RemoteFX argument though.
Aug
16
comment Video card does not work in server
It's a server? Then you probably don't want to install a dual-DVI+HDMI card in it. Put that card in your workstation. The server shouldn't even have a GUI installed.
Jun
27
comment Does ZFS replace the need for hardware/software RAID?
@TomTom - also depends on how much RAM is in the system. ZFS is pretty memory hungry. Also be wary of heat if you have 72 disks in a 4U chassis.
Jun
3
comment What are DKIM (DomainKeys Identified Mail) and The SPF (Sender Policy Framework)?
Which of the various Google hits did you read? What was confusing about them?
Jun
2
comment ssh + tinyproxy: poor performance
+1 - SOCKS is a generally a better idea than using an HTTP proxy. Of course, if Paul really wants to log his traffic, SOCKS may not be appropriate...
May
28
comment FreeBSD jails access
hari, VNC inside SSH is really easy, but depends on your client. If you're using a command-line vncviewer command (I recommend ssvncviewer from ports/net/ssvnc) you can use the -via option, which is well documented on the man page.
May
26
comment FreeBSD jails access
You're aware that running a vnc server also means running an X stack, right? Do you really want to run the X-windows system in a jail? If so, I suggest you provide the SSH access on your jail server, then use SSH tunnels to get access to VNC. VNC is not a secure protocol (its passwords are in cleartext), so forcing its traffic through an SSH tunnel will provide better security.
May
18
comment Manage DNS outage
Actually, "just live with outages" is not an acceptable solution, and the recommendation from RFC 2181 is for geographic diversity of DNS servers specifically to address this concern. It's absolutely true that any provider may experience an outage. It's not so likely that all of them will experience an outage at the same time. Or at least, if they do, then we all probably have other problems to deal with. :) So @Craig - use your ZoneEdit credits. But use something else in addition to ZoneEdit.
May
18
comment Support for virtual IPMI in a VM?
It would definitely depend on the virtualization environment you're using. A partitioning system like FreeBSD's "jails" or Solaris Zones/Containers or Linux vserver would not allow something like this to occur because they don't provide hardware virtualization, but a commercial product like VMWare might. Ask your vendor, perhaps?