374 reputation
19
bio website
location
age
visits member for 4 years, 6 months
seen 3 hours ago

1d
answered iptables tables — fixing a typo in lo handling
1d
awarded  Organizer
1d
revised How can I connect to any windows machine of a network manage by Windows Small Bussiness?
Improved spelling, grammar, layout and tagging of the question
1d
comment How can I connect to any windows machine of a network manage by Windows Small Bussiness?
@mdpc, the question seems to be about connecting via the SBS server to the individual workstations, and how to configure this, rather than configuring the server as a Terminal Server (which does, indeed, invoke additional licensing requirements).
1d
answered How can I connect to any windows machine of a network manage by Windows Small Bussiness?
1d
suggested suggested edit on How can I connect to any windows machine of a network manage by Windows Small Bussiness?
2d
awarded  Scholar
2d
accepted NFS client keytab: multiple machines
2d
awarded  Critic
2d
comment Restrict a Linux user to the files he owns
@CristianCiupitu, yes, I've seen it done on two occasions, both in enterprise-scale deployments with a wide range of user expertise. One went as far as changing the permissions on what it considered "insecure" files. The user had to indicate understanding by listing files they explicitly want world-readable in a file in their home directory. In other words, the users had to prove to the system they knew what they were doing, or those insecure permissions were going to get overwritten. I've seen similar for SSH keys with from="*" declarations being removed unless marked up in a special way.
2d
comment Restrict a Linux user to the files he owns
@CristianCiupitu, respectfully, I disagree. While users are unlikely to be proactive about these things and would rather the lazy 0777 approach, reactive, notification-based systems which e.g. ping the user an email when they have world-readable files or some other potentially insecure configuration work wonders. Target the education precisely when and for whom it is required; you don't need to tell the pro who takes these precautions already, but you might need to tell the newbie about specific configuration flaws if their setup is insecure simply through ignorance of good practice.
2d
comment Restrict a Linux user to the files he owns
I would actually consider whether the recommendations of the "web software" to chmod files 0777 is strictly necessary, i.e. address the root cause of the problem, rather than the symptom that, by doing so, anyone can read anyone else's files. Many times the allow all access recommendation is simply a cheap way of avoiding support calls, or lack of technical prowess in being able to set permissions up correctly. In almost no cases have I had to set files 0777 or grant applications full root access when requested. Education of the users and/or vendors helps massively here.
Jul
10
revised Cannot access IP address on server after 3 days of waiting
fix up wording
Jul
10
suggested suggested edit on Cannot access IP address on server after 3 days of waiting
Jul
9
comment How to [politely?] tell software vendor they don't know what they're talking about
+1 for the recognition that human error can go two ways (and making support squirm a little when they have indeed tried to "fob off").
Jul
1
revised Gbit uplink vs Regular switch port
fixed up wording
Jul
1
suggested suggested edit on Gbit uplink vs Regular switch port
Jul
1
comment Kerberos, .k5login and sudo
D'oh! I think you may have hit the nail on the head. must be readable by anyone might be the issue -- I will have to check and get back to you.
Jul
1
awarded  Yearling
Jun
30
comment Should the Hyper-V role be used on a 2008R2 Domain Controller?
@Nic -- this is an old question which showed up in my feed, but thought I'd drop a comment anyway. The time sync issues with Hyper-V occur because the virtualisation layer offers a time sync service to VMs to allow them to sync time with the host server, which may cause skew with the "authoritative" source of time on the network (such as hosted at the forest root PDC emulator). Since this service isn't offered to the "parent partition" of a Hyper-V host, you won't get the weird time skewness.