9,609 reputation
751117
bio website stefanco.com
location Berkeley, CA
age
visits member for 4 years, 8 months
seen 14 hours ago

profile for Stefan Lasiewski on Stack Exchange, a network of free, community-driven Q&A sites
Stefan Lasiewski

Daddy, Linux Guy, Bicyclist, Tinkerer, Fixer & Breaker of things.

I work as a Senior Server Team Engineer at the National Energy Research Scientific Computing Center (NERSC) Division at Lawrence Berkeley National Laboratory (LBNL) in Berkeley, CA.

Father of 3 cute children. Yes I'm a sysadmin and a parent.

Heavy user of CentOS, RHEL & FreeBSD for production services at work. I also run Ubuntu at home, for the simplicity. I'm a fan of Apache HTTP Server, Nagios & Cacti.

Original proposer of unix.stackexchange.com (Yes, this proposal predated askubuntu.com, and I wish they would have merged with the Unix proposal.).


Oct
17
comment How do I disable SSLv3 support in Apache Tomcat?
FYI, sslEnabledProtocols didn't work for us on Tomcat 6. sslProtocols = "TLSv1,...." did.
Oct
17
comment Fastest way to move a large file from an ESXi host to another
Is your network 1Gbps, 10Gbps, two bonded links, etc? Have you tried a temporary, dedicated link between the two hosts? Keep in mind that the Disk I/O & Network I/O from the other VMs on this same host will be competing for resources with your data transfer, which will slow down your data transfer.
Oct
17
comment How do I disable SSLv3 support in Apache Tomcat?
rmeisen: The answers will vary depending on your Tomcat and Java versions, and if you are using JSSE verses AJP. The differences are as subtle as sslProtocols=TLSv1 verses sslProtocol="TLS" (Notice that s?). Specifying your Tomcat & Java versions will save you from insanity.
Oct
17
comment In response to the OpenSSL Poodle vulnerability should I disable SSLv3?
With the new edits, this becomes a perfectly legitimate question for this site and doesn't deserve the down-voting. Shane Madden's answer (With +5 votes currently) shows how valuable this question is. Another possible answer would explain that HTTPS may use SSL and/or TLS, and what are the differences between the two.
Oct
17
comment In response to the OpenSSL Poodle vulnerability should I disable SSLv3?
In addition, some older commandline clients & older appliances might only support SSLv3.
Oct
16
comment POODLE: SSLv3 vulnerability (CVE-2014-3566) with Apache24 on FreeBSD-9.2
SSLv2 is also highly insecure, and I believe that the Apache config file included with FreeBSD Ports/pkgs disabled it by default a few years ago.
Oct
14
comment freebsd-update from 8.3-RELEASE to 9.0-RELEASE: How to deal with dozens of diffs?
I updated the link for you. forums.freebsd.org/viewtopic.php?&t=33166
Oct
13
comment Linux: Print all messages to primary console *and* secondary console (monitor/KVM)?
Quanta (and others) any idea where this rule about the 'last listed console device' is documented, other then on the Serial Console HOWTO? I would love to understand this better.
Sep
29
comment Shellshock - “pkg upgrade bash” doesn't update bash to latest 4.3.25
The downvoters were simply voting to move this to unix.stackexchange.org .
Sep
28
comment What is a recommended way to patch the Shellshock Bash bug on an unsupported Ubuntu server?
Keep in mind that 12.10 has plenty of other security vulnerabilities beside Shellshock.
Sep
27
comment Shellshock - “pkg upgrade bash” doesn't update bash to latest 4.3.25
You can use Ports to build packages, which you can then distribute to other hosts. If you have many servers, consider the poudriere build system freebsd.org/doc/handbook/ports-poudriere.html
Sep
27
comment Shellshock - “pkg upgrade bash” doesn't update bash to latest 4.3.25
Shellshock was announced over 72 hours ago and FreeBSD still hasn't released a binary update. The only reasonable solution is to build Bash from ports, uninstall bash (or mv bash bash.old temporarily). Bash has quite the list of build dependencies, so this can be a challenge to anyone who doesn't build ports regularly.
Sep
26
comment Shellshock - “pkg upgrade bash” doesn't update bash to latest 4.3.25
Most FreeBSD users still don't use pkg, therefore it's treated as a secondary service. You can see an example of that second-class service here, as 4.3.25 still isn't available. Even when the package is released, it's still not clear what sort of testing is done on updated packages, so installing a fresh package is a bit risky and runs the risk of regressions. Bash is 'tested' after release due to the fact that it's widely used, so it's important to check the forums & mailinglists before installing any FreeBSD package/port.
Sep
18
comment When cloning a VMware Virtual Machine, how can I prevent MAC address conflicts?
Hm, this seems to work. I had no idea HWADDR was optional. Should I also remove the UUID?
Sep
18
comment When cloning a VMware Virtual Machine, how can I prevent MAC address conflicts?
No not for the network interface.
Sep
18
comment CentOS ifcfg-eth0 config file deleted. Utility to recreate it?
This answer neglects to mention the HWADDR= field which contains the MAC address of the device. This step is one of the bigger pain points of creating ifcfg-ethN by hand.
Sep
15
comment Still getting aacraid: Host adapter abort request errors after following recommended steps
I think my controller would hang when I used the arcconf command line utility to query the status of the array as part of our regular Nagios monitoring scripts. As the firmware notes indicate, using arcconf can cause the controller to hang.
Sep
4
comment remove *.tar.gz file more than 3 years
Also see [[unix.stackexchange.com/questions/4588/…
Aug
11
comment Is it a good idea to use cacert SSL certificates instead of self signed one in production?
Self-signed certs will still trigger a warning, even if they are trusted. But they won't trigger a second warning about trust.
Jul
15
comment Should I avoid putting two SSDs in a RAID1 configuration due to performance degradation?
Chopper can you explain why we shouldn't be concerned about this? Shouldn't we be concerned with anything that causes 'performance of the SSD to degrade quickly.'?