Reputation
3,811
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
1 11 25
Impact
~340k people reached

Jul
7
comment how do I move where percona mysql stores the databases?
I find it ironic that you're using the Percona distribution but don't know about the datadir system variable.
Jul
7
comment Nginx SSL Termination - How to encrypt data to client?
X-Forwarded-For sends the client's IP address rather than the proxy's IP address. You still need to edit your Apache logging though in order to register the client's IP address. i.e. LogFormat "%{X-Forwarded-For}i ...
Jul
7
comment Nginx SSL Termination - How to encrypt data to client?
No, the data from the client/browser to nginx will be encrypted provided nginx has been configured appropriately. nginx then proxies the requests (unencrypted) to the Apache web servers.
Jul
7
comment Nginx SSL Termination - How to encrypt data to client?
"The connection from nginx to Apache to retrieve the data for nginx to send to the browser should be a regular http connection with no SSL" provided you are on a private VLAN.
Jun
13
comment Backup Solr home
Why would you need to backup Solr? Aren't you just indexing data that originates elsewhere? That data should be backed up but you should have a process to re-index the source data.
May
20
comment How to handle virtual environments on a secure network
Have you looked at Vagrant (www.vagrantup.com)?
Apr
15
comment How to disable SSL-VPN on FortiOS 5.0
They haven't issued a firmware update to fix?
Apr
15
comment Tuning Apache For mid-sized site
Is your system fully patched?
Mar
6
comment Is there any reason to keep the “Server” response header in Apache
Why volunteer version information? I always set "ServerSignature Off" and "ServerTokens Prod". Also agree that keeping your web servers up to date is the only real protection. If you don't remove the version information and submit to a third-party penetration test they are sure to flag this as "Information Leakage".
Mar
5
comment Improve Disk Performance of a Linux 2.4 Guest on KVM Host
Which distribution of Linux is your 2.4 guest?
Jan
29
comment CentOS 5.8 - The most difficult MySQL installation ever?
You can change the MySQL root password using the --init-file method described here: dev.mysql.com/doc/refman/5.0/en/resetting-permissions.html . Also agree that you are making it complicated by not using the distro repo
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
It is working now. I was messing around a lot with different switches to ipa-client-install (after doing an uninstall) and got my sssd.conf mixed up with another host I was also testing on. I think - but can't say for sure - that when I first reported this it was using the correct ldap_sasl_authid host but perhaps it wasn't. Anyway, I learned a lot in debugging this, thanks for your help.
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
I've added UPDATE 3 with the sssd_sudo.log output at debug_level = 8 (cuts out some noise). The sudo-debug.log produced 1500 lines of output, can you narrow it down to what to look for? Anyway, it looks like SSSD can't find any rules (i.e. my All rule). But why?
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
Yes, nisdomainname is set. Again it all works if I am using "sudoers: files ldap" in /etc/nsswitch.conf
Dec
19
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
I am using CentOS/RHEL 6.5.
Dec
18
comment Using FreeIPA for centralized sudo - using SSSD for sudoers
Thanks for your reply but I've seen that post.
Dec
10
comment Using FreeIPA for centralized sudo - how to specify ALL commands?
Agreed, I finished off the rule in the Web UI.
Dec
10
comment Using FreeIPA for centralized sudo - how to specify ALL commands?
The rule didn't exist by default and it took a little bit of work to get a rule that matched yours, i.e. "%admins ALL=(ALL) ALL" but I think I'm on the path of enlightenment now. Much appreciated, thanks!
Dec
5
comment MySQL crash when I increase max_heap_table_size value
I (mostly) agree with yoonix. Instead of making these values HUGE you should move your tmpdir to tmpfs (RAM) and make these values as SMALL as possible (i.e. tmp_table-size=1K) so that the temp table goes into RAM as soon as possible.
Nov
14
comment Apache Performance Tuning - Apache HTTP Server
Do you have primarily authenticated users or anonymous users?