3,596 reputation
1922
bio website
location
age
visits member for 5 years, 8 months
seen yesterday

Jul
1
awarded  Popular Question
Jun
13
comment Backup Solr home
Why would you need to backup Solr? Aren't you just indexing data that originates elsewhere? That data should be backed up but you should have a process to re-index the source data.
May
20
comment How to handle virtual environments on a secure network
Have you looked at Vagrant (www.vagrantup.com)?
May
20
revised How to handle virtual environments on a secure network
edited title
May
7
accepted Red Hat Software Collections 1 Beta channel has 0 packages?
Apr
19
answered Adding “HttpOnly” and “Secure” cookie flags on Nginx & PHP
Apr
15
comment How to disable SSL-VPN on FortiOS 5.0
They haven't issued a firmware update to fix?
Apr
15
comment Tuning Apache For mid-sized site
Is your system fully patched?
Mar
6
comment Is there any reason to keep the “Server” response header in Apache
Why volunteer version information? I always set "ServerSignature Off" and "ServerTokens Prod". Also agree that keeping your web servers up to date is the only real protection. If you don't remove the version information and submit to a third-party penetration test they are sure to flag this as "Information Leakage".
Mar
6
revised Having trouble starting/restarting httpd (apache)
edited title
Mar
5
comment Improve Disk Performance of a Linux 2.4 Guest on KVM Host
Which distribution of Linux is your 2.4 guest?
Jan
29
comment CentOS 5.8 - The most difficult MySQL installation ever?
You can change the MySQL root password using the --init-file method described here: dev.mysql.com/doc/refman/5.0/en/resetting-permissions.html . Also agree that you are making it complicated by not using the distro repo
Jan
27
revised Does high traffic on HTACCESS affect the server?
deleted 2 characters in body; edited title
Dec
19
accepted Using FreeIPA for centralized sudo - using SSSD for sudoers
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
It is working now. I was messing around a lot with different switches to ipa-client-install (after doing an uninstall) and got my sssd.conf mixed up with another host I was also testing on. I think - but can't say for sure - that when I first reported this it was using the correct ldap_sasl_authid host but perhaps it wasn't. Anyway, I learned a lot in debugging this, thanks for your help.
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
I've added UPDATE 3 with the sssd_sudo.log output at debug_level = 8 (cuts out some noise). The sudo-debug.log produced 1500 lines of output, can you narrow it down to what to look for? Anyway, it looks like SSSD can't find any rules (i.e. my All rule). But why?
Dec
19
revised Using FreeIPA for centralized sudo - using SSSD for sudoers
added 4054 characters in body
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
Yes, nisdomainname is set. Again it all works if I am using "sudoers: files ldap" in /etc/nsswitch.conf
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
I am using CentOS/RHEL 6.5.
Dec
18
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
Thanks for your reply but I've seen that post.