2,820 reputation
11428
bio website me@nima.id.au
location Sydney, Australia
age
visits member for 5 years, 1 month
seen Jul 4 '12 at 4:18


May
24
comment Monitor an incoming SSH session in real time
I've updated my answer with some details to clarify.
Jun
3
comment What are Port 45702 Visits?
As you've pointed out, it doesn't appear to be a very popular port. If you're bored, you set up a dummy netcat - listen in, and see what data it throws your way. Guessing it's some new malware, but that's just a guess :) Good luck.
Dec
28
comment OpenLDAP & Posix Groups/Account
I did switch over to ApacheDirectoryStudio - very good tool thank you. I eneded up redoing the entire thing from scratch and everything worked - which is good, but also bad as I don't have a nice resolution to close this ticket.
Nov
22
comment OpenLDAP & Posix Groups/Account
Hi TRS-80 - At the moment I'm using phpldapadmin - I should have mentioned that, but didn't want to cloud the problem. Now that I've added the appropriate (I think) schema (nis.schema) - I can't start the LDAP service - /etc/openldap/schema/nis.schema: line 203 objectclass: AttributeType not found: "manager"
Sep
22
comment I have serious problem “-bash: /bin/egrep: cannot execute binary file”
That's great :) - Did you do an md5sum comparison? Any ideas on how they were corrupted?
Sep
22
comment SQL Server Security Crackdown
My first question is - Do you have the blessing from the those who have the power? As you probably know, once people are used to something, to take it away is very difficult, you're now trying to tip the scale back into a sane position from comfort/convenience to security. If developers get upset (which they most certainly will), and complain, will your manager, and his manager all back you up? If not, my first attempt would be to show my manager and his managers exactly how bad-a-situation we're actually in, and make them aware of all the invisible but very real risks that exist.
Sep
22
comment Apache Seg fault (11)
I just read what I wrote - and I agree with Lee - I would not jump into saying it's an Apache bug, what I should have made clear is that the bug is almost certainly owned by one of the 3rd party apache modules loaded, and not Apache itself. :)
Sep
22
comment I have serious problem “-bash: /bin/egrep: cannot execute binary file”
"corrupted program header size" is not good. Did you copy the binaries across from another machine (of a different architecture) by any chance? My guess is not otherwise you'd have mentioned it. If you have another server with the save ARCH/Hardware profile, can you do an md5sum on these corrupted binaries and make sure that they're not identical. I think the safest way, if rpm still works, is to reinstall them if at all possible, you may need to copy over individual files from another server of the same arch/os to be able to to even that though. Interested to see how you go.
Sep
18
comment Network Speed Discrepency?
Also, what protocol are you using to transfer the file with? Is there another protocol you can use instead?
Sep
18
comment Network Speed Discrepency?
(host `E' in the above comment would be speedtest.net)
Sep
18
comment Network Speed Discrepency?
Regarding "anything interesting" - I'm trying to see out of all the permutations of 2 hosts, if any have a considerably improved throughput than others, say node A is one end, B the other, C a machine in A's subnet, D a machine on B's subnet, and E an external host, if you try various pairs from A-E, do you see some that are faster than others, and that may help in troubleshooting this further.
Sep
18
comment Network Speed Discrepency?
Well you can use ping and set the MTU yourself to begin with, on Windows I think you'd do something like "ping -f -l 1472", and if there are no dropped packets, then go higher. 1472 + 28 overhead makes up the 1500 is the traditional size, but it's a hangover from long ago, and you should be able to go higher than that. The -f you'll need to double check - it's the option that says "don't fragment the packets".
Aug
3
comment GPG/PGP Signatures & Encryption - An Academic Security Question
I''m happy with that answer - Thankyou :)
Jul
15
comment GPG/PGP Signatures & Encryption - An Academic Security Question
Sorry I tried to make this clear - but failed to do so - as I said, this is an academic question, and the questions assumes that the entire file is signed, and not its hash.
Jun
22
comment Automating server deployment
You do raise a point, but in the end, it's a compromise - how many packages do I want to "worry" about on the next upgrade. If the kernel/glibc upgrade goes wrong - you would normally expect to find out almost immediately as it's the most fundamental component of the OS, however if Ruby comes out slightly different, you wouldn't really notice, but when you do, you may have 300 servers already upgraded and running on that version, and now Puppet is a victim. But again, I'm not carving anything in stone; this is just my preference on the matter.
Jun
4
comment Logging atd messages via syslog
Hi Gurunandan - Not a problem - but it's hard to read here, and impossible to format - instead - just update your original question. I see some weirdness in your paste, but it's hard to tell if it's because of the formatting or not.
Jun
4
comment Is it feasible to have home folder hosted with NFS?
Hi Cristian - I've tried to explain above - but I can't fully explain the behavior with respect to the man page description of the flag. Have you tried it and seen otherwise?
Jun
3
comment Linux Kernel Virtual Machines
This sounds interesting, I'll give it a shot.
Jun
3
comment DNS Problem
Well then you need to fix `1' first, without an IP address, DNS resolution is the least of your problems.
Jun
3
comment Apache2 500 error trouble shooting
Browsers throw 500 errors? That doesn't sound right at all.