7,176 reputation
11936
bio website alerque.com
location Izmir, Turkey
age 32
visits member for 4 years, 8 months
seen yesterday

I am a scripting language connoisseur, regular expression aficionado, network geek, general lover of Linux and a frequent contributor to open source software. I transitioned to programming from other work because I was too busy automating my own work environment to actually do the other work. I have a hobby interest in cartography. For more see my personal site. Most importantly, my life is defined by the grace of God given to men through Jesus Christ. It is my ambition that everything I do would reflect His glory and point people towards Him.


Dec
15
comment Linux: Where to put the swap file
@gerlos That get's gnarly if you you do things like encrypt your filesystem. Having swap on it's own partition makes things like that easier, not harder. Worst case scenario if the partition isn't available you don't get any swap enabled.
Jun
13
comment Why is there a difference with Unix date between 2 and 3 months
Doh! I think I need to go grep through some of my scripts as I suspect I've overlooked this suggestion on date usage.
Apr
8
comment BIND: How do I allow DNS query from specific external host?
@voretaq7 When you live in a country that blocks all open recursive nameservers and spoofs known popular ones, there is good reason to do this. This answer is for too dismissive.
Mar
28
comment Apache SSHA password support
@OlivierS Mostly because LDAP is a pain in the butt and having to have a some sort of slave LDAP server on a variety of systems including embedded devices is way more work and introduces far more potential for breakage than having a .htaccess file in the DocumentRoot.
Mar
26
comment Apache SSHA password support
@OlivierS I am using mod_authz_ldap for most applications but there are a few where either offering matching LDAP accounts is out of my control or where contacting the ldap server is out of the question. Being able to fetch the existing SSHA password fields, put them in an .htaccess file, add a few more and bundle the result as a stand alone deployment of a site is the use case here.
Feb
18
comment What “access rights” could be blocking access to a gitlab repository?
Doh. <head-desk> You were on the right track all along. The gitlab user was being assigned /bin/false. Either the Arch package doesn't set the shell right when adding that user or I broke it somewhere in the process of implementing ldap authentication on this system. Thanks for all the effort.
Feb
18
comment What “access rights” could be blocking access to a gitlab repository?
Thanks, I will review these suggestions.
Feb
18
comment What “access rights” could be blocking access to a gitlab repository?
@DrGkill I've checked that (and if it wasn't allowed external login by sshd or pam the logs I showed you above would not have shown a successful authentication notice). SSH is connecting just fine. The server side logs show a successful authentication, that a session was opened, some systemd stuff about setting up the user env, then "received disconnect from <remote ip>" and some more stuff about cleaning up the session.
Feb
17
comment What “access rights” could be blocking access to a gitlab repository?
@DrGkill Nothing interesting (to my eyes), see for yourself.
Feb
5
comment How can I configure an LDAP ACL such that users may *only* use allowed services?
Did you ever figure this out? If so could you post the solution? I'm looking at setting up nearly the same configuration.
Feb
4
comment Can internet gateways be plugged straight into a layer 2 switch?
Sounds like dying NICs in the old router or that old switch is faulty. Port negotiation settings could also be at fault, although I suspect something is just dying. Would you have even noticed this rate issue with your previous provider?
May
16
comment
You've said about half a dozen times that people make mistakes so you obviously have a handle on what your issues are/were. Some of your potential voters however are in the dark. How about you explain what your mistakes were, how you learned from them, and what your platform is. I don't care to hear talk about diversity of ideas providing balance, I'd like to hear what your views are. We're not voting for diversity, we're voting for you. Or not. Give us something to go on here besides rhetoric. When should questions be closed? Left open? What would you be campaigning to change around SF?
Sep
18
comment Crond offset five minute schedule
Putting the sleep in the script itself is an ugly hack that makes running the script by hand from the prompt painful. There is a less ugly way to hack that by making the sleep part of the crontab entry, but an even more elegant way is to just offset the jobs using the correct crontab notation, which your answer doesn't touch on.
Aug
26
comment How to find out which Linux distribution I'm logged on to
@ychaouche: See comment above. First test with uname and if all you get is generic, test for lsb_release and use that.
Aug
23
comment Is a reboot required after edit/saving linux iptables?
If you have something that is not "taking effect" it's because you have entered the rules in the wrong order. First match wins. If you have a block rule that matches, the packet will get dropped even if some rule you added later allows it. You need to specifically allow the things you want before you deny everything else. You may need to flush the tables and start over if you have to change the order of something you've already entered. You can also specifically delete rules form the table and added them back in the right order.
Aug
23
comment Is a reboot required after edit/saving linux iptables?
A reboot actually CLEARS all iptables rules. On first boot the tables will always be empty, you ALWAYS have to set all the rules after booting. That's what the iptables-save helper script thing does ... takes all the current rules and dumps them to a file that can then get re-run on the next boot. Rebooting doesn't make anything take effect, it actually forgets EVERYTHING. If you run iptables -L to list what is in the tables, whatever is there is what is being enforced that instant. This is very easy to prove in practice.
Aug
5
comment grep to display folders which contain files which contain a string
You could potentially save a lot of time using the -l argument to grep so it stops reading through files after it finds a match and moves on. That's easy. Some of the more complex answers here are a whole 'nother level more efficient because they stop scanning a directory after the first match is found.
Aug
4
comment Two servers using same name servers?
@ChrisMuench: Did these clowns actually answer your question?
Aug
4
comment How to test /etc/rc.d/rc.local to make sure a command will start successfully at boot?
Has it ever started up properly or is this your first try? Does it require any special shell environment variables that might be present in a login shell but not in the init environment?
Aug
4
comment How to test /etc/rc.d/rc.local to make sure a command will start successfully at boot?
+1 There is a lot of wisdom in this. No matter how many things you think you've done right, there is no substitute for actual testing.