4,290 reputation
1234
bio website
location
age
visits member for 4 years, 1 month
seen 4 hours ago

A self-loathing despair squid.


Nov
19
comment Failing forwarding rsyslog
+1: i was actually just about to link to the exact same thing on PT's website.
Nov
13
revised Why redis instance is dropping keys
added 4 characters in body
Nov
13
comment Automatically check for Security Updates on CentOS or Scientific Linux?
yum list updates --security
Nov
12
comment Backing up data stored on Amazon S3
hmm, i guess that's reasonable. I've not tried that in anger though (or glacier for that matter, we use Sydney and it wasn't available when we looked into it)
Nov
12
answered Backing up data stored on Amazon S3
Oct
31
comment Finding the owner of an AWS access key + secret key pair
if the api doesn't support anything other than a for loop, what can anyone say that'll help?
Oct
29
comment Linux: how to send new lines in log files to remote syslog?
I guess. Generally i've found long term that there's no medals in winning self-inflicted battles. When the technical debt gets to the point it impacts the business ironically the people who diligently worked hard to avoid the elephant in the room tend to end up carrying the can, in my experience. So i'd say cover your ass and get someone to agree in writing the downsides of this.
Oct
29
comment Linux: how to send new lines in log files to remote syslog?
yeah its a jar packed jruby tool. The gui is actually kibana which is packaged into it for easy but is actually a seperate project, so it's not needed just for parsing messages. It's basically a swiss army knife of logging. You define inputs and outputs and in the middle you can optionally grok the logs, which gives them context. -- IT's likely overkill for you unless you also want to use elasticsearch on your log data.
Oct
29
comment Linux: how to send new lines in log files to remote syslog?
yeah, the config is going to look a bit like this: pastebin.com/xeC9hxD3
Oct
29
comment Linux: how to send new lines in log files to remote syslog?
+1. if using rsyslog's file input isnt an option, logstash is the next best thing. In many ways it's better in the long run.
Oct
29
comment Linux: how to send new lines in log files to remote syslog?
@MichaelMartinez imho, that sounds like a pretty quick route to crippling levels of technical debt.
Oct
22
accepted freeipa ssl ldap and round robin dns
Oct
18
comment Amazon EC2 security groups
its deny by default, so allowing just tcp port 80 (And someway for you to ssh in) should be ample.
Oct
17
comment freeipa ssl ldap and round robin dns
well after a few hours fiddling i got pretty stuck: fedorahosted.org/freeipa/ticket/3977 -- it seems ipa isnt smart enough to tell dogtag what it needs to signa cert with alt names, and i know way too little about dogtag to know how to do it directly.
Oct
17
comment freeipa ssl ldap and round robin dns
This is pretty encouraging, esp not needing to touch the clients. Now that i think of it, it throws one more dumb question; If i'm going to be needing a load balencer function and i don't want that to be a single point of failure, is it madness to cluster that (haproxy i assume) between two of the ipa servers themselves ?
Oct
16
comment freeipa ssl ldap and round robin dns
good info. think I'm at least thinking down the right path... The option to add a subjectaltname would mean re-enrolling the clients, right? To do the load balancer, wouldn't I need a new cert anyhow? Not sure how the client asking a load balencer dns entry and getting back a cert with a cn of one of the servers wouldn't be an issue?
Oct
16
revised freeipa ssl ldap and round robin dns
added 125 characters in body
Oct
15
comment vagrant and puppet security for ssl certificates
what we do is put all the secrets into hiera-gpg, and have a placeholder version of the hiera data in which all passwords are dummy ones. So essentially you just need a common.gpg which has a default for all passwords and so on.
Oct
15
revised freeipa ssl ldap and round robin dns
added 98 characters in body
Oct
14
revised freeipa ssl ldap and round robin dns
added 76 characters in body