62,585 reputation
1181158
bio website bsd-box.net/~mikeg/blog
location New York, United States
age 33
visits member for 5 years
seen 9 hours ago

Generic sysadmin. Hack coder. Jack of all trades, master of some.


Please Note:

I expect you to read any reference material I link to in my answers. If the answer to your question is contained in said reference material and the reference source is not likely to disappear I will probably not cut and paste it onto SF unless it's really cool/interesting/obscure.
In return I promise not to link anyone to goatse or tubgirl

I expect you to think for yourself and do a little thinking (and mayhaps even some work) to solve your problems. If you aren't capable of this, please exit the profession via the door on your left.
In return I promise to do my best to aim you in the right direction, and to clarify any points you have trouble with


Jan
22
comment Sub domain points to a hosting with ~username
@Halfgaar "that kind of URL naming" is still very common, in fact I would go so far as to say it's standard on most Unix systems that give their users web space. What's not standard is users assuming they can just point a DNS name at their ISP's server and have it "just work".
Jan
22
comment unable to hear test calls on freeswitch
@rocky We're really not able to walk you through every possible scenario - you need to do your own legwork. I suggest you start by searching Google for freeswitch "one-way audio" or freeswitch "no audio", as well as examining your firewall logs for dropped/blocked traffic on the usual VOIP port ranges.
Jan
16
comment bad ownership or modes for chroot directory component
@mmell um... that's what the manpage says: "root-owned directories that are not writable by any other user or group" means the "write" bit for Group and Other must be zero. (If you find the manpage unclear however you should submit a documentation patch to the OpenBSD/OpenSSH project to improve it. Complaining about it here won't get the docs changed.)
Jan
9
comment exchange 2013\office 365 transport rules to block ssn's
@JustinHall 123 45 6789 just passed a SSN that your pattern didn't catch (and yes, some systems use space instead of dash. Also cut-and-paste from some forms). Not saying the rule is completely without value, but this is one of those problems you can't really solve with regular expressions.
Dec
5
comment Blocking another Win 2008 R2 admin from accesing some important folders
The drawback to EFS is that the web server user would need the decryption key (and as I understand it the EFS key is tied up with the user account, so they could just change the web server account password, log in as the web server user, and read the files anyway - though I could be misunderstanding the design there)
Dec
3
comment CentOS/sendmail = How to prevent emails from getting “defer” when sent from php mail() function?
@RaheelHasan He means "Properly configure your system, including DNS/Reverse DNS, so you don't look like a spammer." -- Check the duplicate question link for more details.
Dec
2
comment Active Directory Permissions: Delete vs Move
@jscott TheCleaner added the powershell stuff & the "Protect against accidental deletion" (which didn't exist the last time I touched an AD thing) -- I just know that LDAP/AD moves are "Copy and Delete" actions :-)
Nov
10
comment my LTO2 drive wants to be cleaned repeatedly
@kasperd Well certainly you shouldn't be running a new cleaning tape through the system every cycle, but the other extreme (continuing to use a cleaning tape that's black with magnetic residue it's scrubbed off the head) is certainly ineffective - scrubbing off one layer of magnetic dust to deposit another isn't "cleaning". If you really want to treat your drives well you'll manually clean the head with a foam swab and acetone or ether, but I don't know anyone who's willing to do that regularly.
Oct
15
comment Scaling a web application horizontally in Tomcat (load balancing / clustering)
Have you read serverfault.com/questions/350454/… ? We can't tell you what will work for your app - you need to test and research on your own first.
Oct
10
comment Chmod: defintion of everyone (777)
checkout is not a unix concept - consult the documentation for your application (and acquire a thorough understanding of what the permission bits do) to determine what permissions are required for the action you want to take.
Sep
12
comment Install .EXE without displaying windows
Without knowing what program you're trying to install the best possible answer we can give you is: Cabbage.
Sep
4
comment What percentage of web users are running on browsers/OSes that support SNI?
@MichaelKjörling "Nobody cares about security" :'(
Aug
27
comment How to reliably and conveniently mirror 2 drives in hotswap hdd racks (likely without RAID1)?
@bogdan You could put a Windows-friendly front-end on the ZFS filesystem (Samba or similar)...
Aug
7
comment rsync IMAP SENT folders between 2 users
Note that this really relies on some intimate knowledge of your IMAP server and how it handles its storage backend (some don't use the filesystem to store individual files, though Dovecot does). It's possible that preserving symlinks may not be what you want in cases like this but that determination is left as a key detail for the implementer (Know Your System - I don't know Dovecot well enough to be sure so this is just a general cautionary note.)
Aug
7
comment rsync IMAP SENT folders between 2 users
@eichertc Your question has been answered (quite thoroughly). You are not required to like the answer, nor are you obligated to accept it. Imposing additional constraints on your question to invalidate an answer is poor form. If you would like to discuss this further please take it to Meta - comments are NOT the place to grouse about answers you do not like.
Jul
9
comment Sharing HTTP session data in Passenger/Rack - What's the Best Current Practice?
@MichaelHampton That's generally my feeling. The underlying session stores are transparent to the developers (modulo my insisting that they "Make the session store a configuration option so I can change it without patching the code!") - If the software is properly engineered I can change session stores all day long with no code changes from the development team.
Jul
9
comment Sharing HTTP session data in Passenger/Rack - What's the Best Current Practice?
This could just as easily fit over on Stack Overflow, but at least in my organization "How you store the session data" is a sysadmin problem. (What goes in the bucket we provide is the developer's responsibility.)
Jul
9
comment Convert manual network commands into networking scripts
This is really two separate questions -- you should ask them separately.
Jun
30
comment windows server which files are in cache
I assume you're talking about the filesystem cache?
Jun
30
comment How many power circuits do I have in a rack?
+1 for mentioning cooling. Many times the watts-per-square-foot limitation in a datacenter is for cooling more than power distribution. You can usually bring more power to a rack pretty easily (pulling more cables or tapping a second power bus), but you can't take the heat away any faster...