4,433 reputation
11551
bio website
location Poland
age 28
visits member for 4 years, 4 months
seen 2 days ago

Dec
14
comment How can I use the same key for SSH and SSL (https)
you still don't gain any functionality, just the thought that you're using the same number for authentication. Neither you can easily go over authorized_keys and check if they match the certificates nor regularly change the key used (at the same time new X.509 cert is generated)
Dec
14
comment How can I use the same key for SSH and SSL (https)
While this will work, I'll advise against it. You're using the same keys, but in different ways, different formats. When users generate new X.509 certs, they'll be using different keys for SSH and HTTPS anyway. It would make sense if OpenSSH would support full X.509 PKI (the way OpenVPN does, where you can use scripts to link certs to LDAP and check if a user is in appropriate group).
Dec
13
comment What should NOT be managed by puppet?
Every tool has its place, but using puppet for user account management or LDAP for file storage is abuse.
Dec
10
comment Linux policy routing - packets not coming back
Adding scope global to the custom routing table rules will allow you to route packets that have originated in a network the server is a router for. TBH I'm puzzled why scope link is default and not scope global...
Dec
5
comment What is the ZFS ACL limit?
Dunno about ZFS, but in ext and xfs, ACLs are kept in extended attributes. That translates to 4KiB limit for ext2/3/4 and no limit for xfs. But then you have to search them linearly to find out if a user can access a file so the practical limit may be around a thousand or so even if the file system doesn't have a limit.
Dec
5
comment Webserver - Memory-bound or CPU-bound?
Answer to such a question is so application dependant it's not even funny. If you want help, then ask how to find out if you're RAM- or CPU-bound, then ask the provider for a trial and perform tests yourself.
Dec
5
revised Calculate MD5 checksum of a directory
spell.
Nov
28
revised How to “apt-get remove gcj” without it auto-upgrading on Debian Lenny
edited tags
Nov
27
comment How do I disable MEDIUM and WEAK/LOW strength ciphers in Apache + mod_ssl?
Remember to verify the configuration, ssllabs.com has good scanner that also verifies if the configuration isn't susceptible to BEAST, has proper SSL ticket tracking, etc.
Nov
27
comment How to hide the output of a shell application in Linux?
@nomoreink: it's actually 2 commands, one is > file and the second one is 2>&1. The first one redirects the standard out to a file. The second one takes 2nd file descriptor and redirects it to first one. You can do the reverse, redirect standard output to standard error using >&2 and then redirect standard error to a file with 2> file.
Nov
27
comment How to free used memory in Windows Server 2008 R2?
Disk cache is not visible as "used" in "Resource Monitor" it has its own counter, Regular Task Manager shows it as free. What you're describing is Linux behaviour.
Nov
27
answered How to free used memory in Windows Server 2008 R2?
Nov
27
reviewed Approve Can only bring up one of two interfaces
Nov
27
reviewed Reject How to free used memory in Windows Server 2008 R2?
Nov
27
reviewed Edit On AWS do I have to open ports in an EC2 instance's firewall as well as security group?
Nov
27
revised On AWS do I have to open ports in an EC2 instance's firewall as well as security group?
Added a reminder to save iptables rules.
Nov
27
reviewed Approve How can I have SQL Server Management Studio 2008 connect to my instances automatically?
Nov
27
reviewed Reject Working around the stale pidfile problem after hard restart kills my daemon
Nov
27
revised Password Reset Self Service Portal
grammar fixes
Nov
26
comment RAID 10 over RAID 5 when using SSDs
@3molo hot plugging is basically mandatory part of SATA specification since version 2.0 and all versions of SAS.