271 reputation
16
bio website
location
age
visits member for 5 years, 3 months
seen 2 days ago

Oct
27
comment One Domain, two web applications
FYI, my solution is more reliable because there is no SPOF. The DNS balancing relies on the DNS architecture (primary and secondary/ies + cache), and does not require dedicated hosting. This is why I found it an interesting alternative to /blog.
May
11
comment Multiple users, Multiple servers, SSH key management
It's not a proper answer, but more a suggestion, so I won't post an answer for that, but I think you can manage to authenticate ssh against kerberos, which could use ldap directory, to allow, or not user to access a given server. I'm sure about the kerberos stuff, not about the granularity though. Another idea is to use the AuthorizedKeysCommand against a database, which would ease the process of adding a user, if you don't want to get into kerberos or ldap. A simple php / mysql app should be able to help you, then the AuthorizedKeysCommand would juse use mysql cli. Hope this helps.
May
3
comment How to change protected config files via web/php interface?
for instance, feed a database with the wanted password (hashed), and have a script which updates the /etc/dovecot/passwd with that password. Or use dovecot against MySQL for authentication.
Apr
27
comment Unix processes wasn't killed but is not running
Looks like the process is blocked on IO. So if the file gets missing, only timeout or signal can unblock it. But it depends a lot on the code. This is just a supposition.
Apr
27
comment bind9 in a chroot jail - necessary or not?
I didn't know which answer to comment, but it's a quite general one. Chroot may indeed, have security issues. *BSD and *Linux distros have different behaviour. I would recommand you to have a look on grsecurity.net/features.php where they explain what's wrong with chroot before patch.
Apr
21
comment Install application/HTTP services to “/srv”?
using /srv may be a good way to apply partition wide policies, such as se-linux, or noexec, whereas /var might need defaults flags. I've seen a use of /srv which was read only, and the admin justified the use of a dedicated mointpoint rather than /var for that purpose.
Dec
25
comment Mail server: can't connect via POP/IMAP
seems like your postfix config and courier config don't use the same storage format or storage path, which explains why courier can't chdir in the Maildir folder.
Dec
25
comment Suspected server or data vulnerability and reporting a fraud site
I was told that an erroneous whois information could be a sufficient reason for a takedown. Might be the simplest way.
Nov
29
comment ip forwarding using iptables
When prerouting, you need to specify the input interface. How will the kernel redirect to 10.42.43.174? Just by looking up in the routing table which should contain an entry like 10.42.43.0 255.255.255.0 eth1 if your network is a /24 (which is not important here, just to illustrate the routing table)
Nov
12
comment Remove an apache alias subdirectory
did you reload apache? Can you provide config file?
Oct
14
comment Combine multiple network interfaces to connect to a dedicated server
A friend of mine achieved this. For that purpose, he was force to mount N vpn (for N connection, in your case 2) toward the server. Can't get you much more info, sorry.
Oct
12
comment Can I delete error log files in apache. Will it cause an issue?
Thanks @voretaq7 I didn't find out those information on the doc. Editing answer.
Apr
23
comment Migrate a Sybase 12.5 DB to MSSQL 2005
I think talend.com can help. There is a free version available.
Apr
23
comment 64-bit Linux hosted on a Mac
fyi I've not been able to install an arch x64 with vbox, whereas I got no problem with x86 on a 32bits osx on a 64bits macbook.
Nov
12
comment How to block Googlebot quickly?
did you look this ? serverfault.com/questions/128937/…
Nov
7
comment How can I redirect http traffic?
I'm not sure I understand what you mean. The ?q is used as a GET argument for the search form, and it works fine.
Nov
7
comment How can I redirect http traffic?
I was about to apology, but I've just checked on one of my website where I use a reverse proxy for redmine (I run a standalone redmine server on port 3000). The search works perfectly with myreverse.com/search?q=projectname