Reputation
63,335
Next tag badge:
118/100 score
19/20 answers
Badges
12 83 164
Impact
~2.1m people reached

10h
comment What should NOT be managed by puppet?
@thinice That's a good point, but my usual counterpoint to it is to smack people on the back of the head and shout REDUNDANCY really really loud :-) (It's a worse situation with radmind because that just blasts the filesystem. Our policy is to have the load-balancer unload half the servers so we can patch/test those, then we move everyone to the patched machines so we can do the other half. Works well, but you need the redundancy built into your environment.)
Mar
19
comment Installing Debian with a writable flash drive
This is really outside the scope of professional system administration. It MIGHT be appropriate on Unix & Linux, but I won't migrate it there as it currently stands (for no other reason than you can answer it with a Google search for "Debian live USB with persistence" and get many tutorials).
Mar
19
comment Wait Time (TTFB) Difference Between Apache and IIS 8.5
This is not a question, and is therefore de facto Off Topic for this Question and Answer site. If it were a question it would be a duplicate of the capacity planning question, because the answer would be "If you want to know why the Time To First Byte varies between these systems you need to perform load tests and profiling to determine where your system bottlenecks are."
Mar
19
comment How does NIC bonding in Linux work?
This could be answered by a simple Google search for your question title (First result, Second result) - It is all explained in the NIC Bonding documentation, and on MANY websites...
Mar
19
comment Relay denied (454)
Dumping an error and your entire mail system configuration on us and expecting us to basically be your system administrator is a bit out of scope for Server Fault. I suggest you google Postfix "relay access denied" as a starting point, perform some testing on your own, and see if you can work out a solution (or at least narrow the scope of your problem to something that could reasonably be answered in Q&A form as opposed to being a consulting job).
Mar
19
comment Daily sftp stops working, and weekly sshd fails and needs reinstall
That's really not a "solution". You need to find the root cause of the problem (or rebuild your system to eliminate it) - throwing in a hack like this to work around virtually guarantees future problems...
Mar
19
comment DNS and SPF configuration for Microsoft Exchange
Related: Our canonical "What can I do to fight spam?" question. (Which has its own related questions listed in the header that might help you out with SPF setup)
Feb
2
comment FreeBSD Hypervisor?
@CyberOptic Yeah, as of 10.0/10.1 bhyve would be the way to go. It's had some pretty thorough stress testing and integration work done on it in the last 3-4 years. I would even dare to call it production quality at this point - we're planning to migrate some stuff into it this year as a test case.
Jan
16
comment bad ownership or modes for chroot directory component
@mmell um... that's what the manpage says: "root-owned directories that are not writable by any other user or group" means the "write" bit for Group and Other must be zero. (If you find the manpage unclear however you should submit a documentation patch to the OpenBSD/OpenSSH project to improve it. Complaining about it here won't get the docs changed.)
Jan
9
comment exchange 2013\office 365 transport rules to block ssn's
@JustinHall 123 45 6789 just passed a SSN that your pattern didn't catch (and yes, some systems use space instead of dash. Also cut-and-paste from some forms). Not saying the rule is completely without value, but this is one of those problems you can't really solve with regular expressions.
Dec
5
comment Blocking another Win 2008 R2 admin from accesing some important folders
The drawback to EFS is that the web server user would need the decryption key (and as I understand it the EFS key is tied up with the user account, so they could just change the web server account password, log in as the web server user, and read the files anyway - though I could be misunderstanding the design there)
Dec
3
comment CentOS/sendmail = How to prevent emails from getting “defer” when sent from php mail() function?
@RaheelHasan He means "Properly configure your system, including DNS/Reverse DNS, so you don't look like a spammer." -- Check the duplicate question link for more details.
Dec
2
comment Active Directory Permissions: Delete vs Move
@jscott TheCleaner added the powershell stuff & the "Protect against accidental deletion" (which didn't exist the last time I touched an AD thing) -- I just know that LDAP/AD moves are "Copy and Delete" actions :-)
Nov
10
comment my LTO2 drive wants to be cleaned repeatedly
@kasperd Well certainly you shouldn't be running a new cleaning tape through the system every cycle, but the other extreme (continuing to use a cleaning tape that's black with magnetic residue it's scrubbed off the head) is certainly ineffective - scrubbing off one layer of magnetic dust to deposit another isn't "cleaning". If you really want to treat your drives well you'll manually clean the head with a foam swab and acetone or ether, but I don't know anyone who's willing to do that regularly.
Oct
15
comment Scaling a web application horizontally in Tomcat (load balancing / clustering)
Have you read serverfault.com/questions/350454/… ? We can't tell you what will work for your app - you need to test and research on your own first.
Oct
10
comment Chmod: defintion of everyone (777)
checkout is not a unix concept - consult the documentation for your application (and acquire a thorough understanding of what the permission bits do) to determine what permissions are required for the action you want to take.
Sep
12
comment Install .EXE without displaying windows
Without knowing what program you're trying to install the best possible answer we can give you is: Cabbage.
Sep
4
comment What percentage of web users are running on browsers/OSes that support SNI?
@MichaelKjörling "Nobody cares about security" :'(
Aug
27
comment How to reliably and conveniently mirror 2 drives in hotswap hdd racks (likely without RAID1)?
@bogdan You could put a Windows-friendly front-end on the ZFS filesystem (Samba or similar)...
Aug
7
comment rsync IMAP SENT folders between 2 users
Note that this really relies on some intimate knowledge of your IMAP server and how it handles its storage backend (some don't use the filesystem to store individual files, though Dovecot does). It's possible that preserving symlinks may not be what you want in cases like this but that determination is left as a key detail for the implementer (Know Your System - I don't know Dovecot well enough to be sure so this is just a general cautionary note.)