360 reputation
215
bio website
location
age
visits member for 5 years, 4 months
seen 2 days ago

Dec
25
awarded  Tumbleweed
Dec
18
asked How does Xen Server share iSCSI?
Oct
23
awarded  Notable Question
Aug
5
awarded  Popular Question
Jul
2
awarded  Curious
Jun
19
comment Active Directory Folder Effective Permissions of all users
@EvanAnderson The feeling is mutual. There is no hostility intended there, it's simply a fact of how you approached the conversation as if I had said things I did not say, and it comes together to form a situation that is unproductive. When people don't exercise reading comprehension, then the argument goes around in circles, and when you demonstrated such, I chose to bow out.
Jun
19
comment Active Directory Folder Effective Permissions of all users
@EvanAnderson "some have custom tools that randomly select resource+user to review select permissions, which avoids enumerating the entire system" since you glazed completely over that. And I'm done now.
Jun
19
comment Active Directory Folder Effective Permissions of all users
@EvanAnderson "I've never seen or produced a report describing all resources and effective permissions for all users" You clearly didn't read even my first comment clearly, because I gave a very specific example of exactly how you would audit permissions without having to list every single resource and user. We can't continue this conversation effectively if you aren't going to exercise even the most basic of reading comprehension skills.
Jun
19
comment Active Directory Folder Effective Permissions of all users
@mfinni Many audits will include a spot checking of actual permissions to be within the scope of the audit. If they are doing their job right, then they won't interested in acl's, because that makes alot of possibly invalid assumptions about people only being in the groups they should be(which is often not the case) and thus should be looking at actual effective permissions.
Jun
19
comment Active Directory Folder Effective Permissions of all users
@EvanAnderson Good points, but consider the strict auditing policies of outside agencies coming in and demanding a report. Even if you have centralized control and well designed permission hierarchies, to audit the permissions one must connect the dots of user->group->permissions * # resources * # users. Auditors often do not go for the let-me-explain-how-I'm-doing-things-the-right-way-and-you-take-my-word-that-no-o‌​ne-has-permissions-they-shouldn't. I know some have custom tools that randomly select resource+user to review select permissions, which avoids enumerating the entire system.
Jun
3
awarded  Self-Learner
May
28
awarded  Popular Question
Feb
25
awarded  Popular Question
Sep
2
comment nginx serves broken characters (nginx on linux as guest system in vbox)
Note for some reason I had a nginx.config-dist also and had to edit it and set sendfile off.
Sep
1
answered How to delete all but last [n] ZFS snapshots?
Jul
3
awarded  Quorum
Jul
3
comment Troubleshooting PFSense WebGui?
Was able to locate the log files after poking around for awhile and reading through clog manual.
Jul
3
revised Where are pfsense log files?
Fixing odd formatting with lists
Jul
3
asked Where are pfsense log files?
Jul
3
answered Where are pfsense log files?