545 reputation
29
bio website profiles.google.com/aecolley
location Dublin, Ireland
age 41
visits member for 2 years
seen Oct 9 at 5:20

I'm a trained computer scientist, an experienced software engineer, and a practical system administrator.


Oct
17
awarded  Yearling
Sep
5
comment Routing internet traffic through a site-to-site IPsec tunnel
@techfutures You need to check that outbound packets are getting out (use mtr/traceroute as before), and you also need to check that return packets are coming through the tunnel (check routing tables and firewall filter rules on all systems from the site-B NAT box to the tunnel endpoint).
Aug
31
comment NIS users suddenly can't login to SSH
If you have a yptest command, use it.
Aug
31
comment NIS users suddenly can't login to SSH
Your first port of call should be to run ypcat on the passwd.byname and passwd.byuid maps. If either of them fails, or if they contain incorrect or inconsistent data, then you have a place to start debugging.
Aug
31
awarded  Editor
Aug
31
revised `ls` causes Segmentation Fault on a specific directory
Added suggested command to find out for sure.
Aug
31
suggested suggested edit on `ls` causes Segmentation Fault on a specific directory
Aug
31
answered Understanding ntpd entry in syslog
Aug
31
awarded  Commentator
Aug
31
comment private network with single IP multiple servers
Please say what kind of addresses are available for you to assign to your 10+ linux servers. Private (RFC1918) addresses? Dynamically-assigned addresses? IPv6 addresses?
Aug
29
comment Why does Google recommend removing SSH keys from GCE for security?
The document recommends enabling StrictHostKeyChecking and later recommends disabling it. I suspect it isn't a very carefully edited document. My advice is to trust your own judgment, and use host keys unless there's a good reason not to.
Aug
29
comment Nagios - check_ntp_time - Offset Unknown
Check the servers to make sure they are successfully using the local master NTP server as a preferred peer. Log into one and run ntpq -p ::1, and check that the master NTP server is marked with an asterisk.
Aug
26
answered Split DNS configuration: can't update external zone from internal system using nsupdate
Aug
17
awarded  Mortarboard
Aug
17
answered ssh host key certificates, find validity period remotely?
Aug
17
comment Routing internet traffic through a site-to-site IPsec tunnel
@user219652 And the routing table?
Aug
17
comment How to give developer shell access to use GIT and manage code, nothing else?
@Gaia OK. How did the setfacl command work out for you?
Aug
16
comment Automatically-reconnecting TCP tunnel
@kasperd I agree. However, it's futile to try to keep a TCP connection open in those cases. Therefore, I assumed the questioner is not facing those particular challenges.
Aug
16
answered Automatically-reconnecting TCP tunnel
Aug
16
answered How to give developer shell access to use GIT and manage code, nothing else?