4,254 reputation
1234
bio website
location
age
visits member for 4 years
seen 32 mins ago

A self-loathing despair squid.


May
7
answered In Linux, how can I automatically assign an IPv6 address to an interface based upon its IPv4 address at boot time?
Apr
28
asked freeradius two factor without factor concatenation
Apr
16
comment Can existing clients connect to OpenVPN If I regenerate the server certificate?
assuming you actually made a new ca cert, and not just a new server cert and client certs. In that case, you'll need to revoke the old certs and use a crl file in the server's openvpn config.
Mar
31
comment How to check if a process is non-blocking in linux without using a stack tracer?
wouldn't the top command show the process using 100% of one core of your CPU ?
Feb
28
comment Is there any reason to NOT have a swap file on CentOS (DigitalOcean)
I get the sentiment, but the first bullet point is kinda misleading in how its phrased.
Feb
27
answered Is it required to register a name server with GLUE records?
Feb
27
comment Is this a good server/subdomain set up
MX records need to be populated with an A record, yes. I only mention it so it won't trip you up down the line when you make a CNAME of 'mail.ourorg.com' or such.
Feb
27
answered Is this a good server/subdomain set up
Feb
18
comment How would we automate networking in a puppet environment?
for number 3: puppetlabs.com/blog/puppet-network-device-management
Feb
12
answered “Push only” backups?
Feb
11
answered Properly Configured Rsyslog on CentOS
Jan
29
comment backup and restoration of a freeipa infrastructure
yeah, we take a snapshot of one node for just this reason, because replicas are not backups, the same way RAID is not a backup.
Jan
22
comment Is a hard drive's serial number globally unique?
the dongles that got broken and hacked around left right and center ? Also, what do you do for customers who want to use it on a raid array, or virtual machines ?
Jan
16
revised How to Monitor Network in Medium-Sized Company?
added 2 characters in body
Dec
25
comment Generating an own CA for internal use
using the hosts files locally is better as a short term measure than putting the ip into the certificate. look towards getting dns up asap, as this'll bite you in the butt.
Dec
16
comment Best way to exclude node from puppet manifest
hiera is the right answer here, frankly.
Dec
16
awarded  Enlightened
Dec
16
awarded  Nice Answer
Dec
15
comment How to discourage a hacker with root access from deleting remote backups?
yeah. essentially. I have a hardened machine which basically does only that and any other periodic aws jobs like starting/stopping some instances out of business hours to save money.
Dec
15
answered How to discourage a hacker with root access from deleting remote backups?