627 reputation
411
bio website gaffertapeforunix.blogspot.co…
location London, United Kingdom
age 36
visits member for 5 years, 1 month
seen 11 hours ago

Apr
19
comment How to determine optimal size for LVM snapshot?
Great answer! I had no idea about dmeventd before. Is anything required to ensure that it is running, or is it just there as part of LVM?
Mar
16
comment Securing NFS against SSH tunneling
Note that, contrary to other answers here, there is no need to switch to NFSv4 or to switch off SSH port forwarding in order to achieve this protection.
Feb
22
comment Setting up ssh on Debian to allow some users log in with ldap
Can you tell us a bit more about how your ssh server checks users against LDAP to decide whether to allow access? How did you originally prevent users from having normal ssh access?
Feb
22
comment Mount Exchange 2003 Database in Exchange 2010 in SBS 2011?
Can you recommend a specific tool?
Feb
22
comment Scripting changes to the vNIC in vSphere for a cloned VM
Is this in PowerShell?
Nov
23
comment Virtualisation for Public Library PCs with vSphere Hypervisor
vSphere Hypervisor (a.k.a. ESXi) doesn't support displaying stuff on the screen -- it's intended for servers which are administered remotely. You might be better off with something like Linux and KVM or Xen or Virtualbox. It should be quite easy to automate starting the virtual machine automatically on boot.
Mar
9
comment Is Tomcat Native worth the trouble?
Can you say something about the "trouble/risk" that you are concerned about? On Ubuntu it's a simple "apt-get install libtcnative-1" to install, and there doesn't seem any configuration necessary (see tomcat.apache.org/native-doc)
Jan
12
comment Icinga/Nagios to ping different machine on local network
Thanks, I've fixed the check_nrpe syntax so that the example as given (hopefully) works now. Good point about defining a more general check_nrpe_chain command, though personally I find it less readable to have generic commands like that.
May
11
comment Mailman cannot relay e-mails to non-local domains
I suggested adding lists.my-domain.com to /etc/postfix/access because of the line beginning smtpd_sender_restrictions = check_sender_access. As the default action on this line is accept, I think it makes no difference.
May
11
comment Mailman cannot relay e-mails to non-local domains
If you want to permit relaying for certain domains, or receiving mail on behalf of certain domains, you need a "permit" rule saying so. The left-to-right thing is important: reject_unauth_destination rejects messages that should not be relayed or received and allows all other messages to be processed by other rules; permit_auth_destination accepts messages that should be relayed or received and allows all other messages to be processed by other rules. At the point that you have it, it is equivalent to accept.
May
11
comment Mailman cannot relay e-mails to non-local domains
If it works, then I guess you did :) The point is that Postfix reads the smtpd_recipient_restrictions line from left to right, and stops when something matches. If reject_unauth_destination matches first, then you get a rejection for mail that you want to let through.
May
11
comment Samba File Server + PAM + Berkeley DB or Samba + PAM
Yes. Basically the hash function used by Windows is different from the ones used by Unix, so PAM can't authenticate users. Samba really works best when you set up LDAP.
May
11
comment Provider cable in switch?
Just to expand Martijn's answer a bit: you need to choose a VLAN, and configure two ports to be untagged for that VLAN (and no other), and PVID set to that VLAN. Then you should find that those ports can send traffic to each other, but not to any other ports.
Apr
19
comment How should I connect a redundant switch arrangement to the rest of the network?
Thanks pepoluan. It sounds like I should just switch off the bonding on X put my trust in STP.