8,909 reputation
2052
bio website eric.eisenhart.name
location Santa Rosa, CA
age
visits member for 5 years, 1 month
seen 22 mins ago

When I'm not bicycling, I'm a Linux SysAdmin. I'm on the board of my local bicycle advocacy group.

Bikes are my primary transportation. A 2009 Surly Long Haul Trucker, set up as a commuter and a 2012 Trek Ion CX. I also take the bus, but do not own a car.

profile for freiheit on Stack Exchange

@freiheit, Google+, Facebook, LinkedIn


Dec
2
comment Server RAID died. How would you recover data from its drives?
@StuThompson: HP has made a point through the years of keeping the on-disk RAID format the same. Basically with HP if the drives can be hooked up to another of their RAID controllers it will work. With most other vendors this is not true.
Nov
23
comment Is openldap fit for large production deployments?
@user64204: I was mostly thinking production outages. Only other problem that I can think of in the last year is firewalls sometimes silently dropping replication connections so that it takes a while for replication to finally catch up. I'm on vacation until Monday and can't get to the BDB options stuff right now.
Nov
21
comment Is openldap fit for large production deployments?
@user84104: We index every attribute that we know is ever queried on, paying attention to the index types. But that's more of a performance thing and your question is more about reliability...
Nov
13
comment Listing group members using ldapsearch
@daff I believe a + should get all the operational attributes...
Nov
7
comment Oracle 11gR2 error while installing on RHEL6_x64
Did any of the output indicate where it might've left a log file? /tmp/OraInstall[DATETIME] and $ORACLE_HOME/oraInventory/logs are both likely places to check
Nov
7
comment Oracle 11gR2 error while installing on RHEL6_x64
Is the user oracle in the group oinstall?
Oct
29
comment Windows Server 2008 Firewall alternative with IPS options?
Could you be specific about what you want? Why are you looking for a substitute?
Oct
18
comment What's your favorite ticketing system?
@Guss: RT is actually quite extensible, but generally requires some perl programming knowledge. There's a lot you can do with ticket attributes and Scrips, but you can also customize and add more pages with the specific things you need. RTFM and RTIR are both extensions to RT using the same kind of extension mechanisms anybody could use.
Sep
29
comment How can I install packages from the RHEL6's Optional Channel via Kickstart?
@BeamingMel-Bin: Some of my internal docs might be using outdated terminology. You're right, it's "activation" keys I'm talking about, not "installation" keys.
Sep
22
comment Managing iptables with Puppet
Which flavor of Linux? Some have some default iptables stuff that's a good idea to work with.
Sep
16
comment How to change the Service Console subnet on an ESX cluster?
Turns out that editing the IP info in /etc/hosts, /etc/vmware/esx.conf is also necessary before HA can be re-enabled on the cluster. That was probably the original issue causing it to fail the checks, but I only fixed it after changing the network config for all cluster members.
Sep
15
comment How to change the Service Console subnet on an ESX cluster?
The technique that seems to be working best is simply disabling HA on the cluster and leaving it disabled until all the hosts are reconfigured. Otherwise the HA checks still get in the way.
Sep
15
comment How to change the Service Console subnet on an ESX cluster?
So the secret is disabling and re-enabling HA. I'll be trying that shortly.
Sep
13
comment Apache Virtual Hosting on OS X 10.7 “Lion”
@ErikPhilips: A service on a laptop is a development thing, not a system administrator thing.
Sep
12
comment Linux User and Permission Management within an AD Environment
@John: Unique but not really integers. And definitely too big.
Sep
12
comment Linux User and Permission Management within an AD Environment
@John: I don't know AD's schema well enough to answer. Are they integers between 1000 and 2^31? (or at least 200 and 2^32)? Are they unique? Do they ever change for a given group?
Sep
11
comment File transfer sftp secure?
What, exactly does "sftp set up in a website" mean?
Sep
11
comment Enforcing hashed home directory permissions with puppet
Yes, managing permissions (or other things) on files/directories that don't come from puppet is very common (I do stuff like that all the time), but managing permissions on files/directories puppet doesn't specifically know about is a whole different thing.
Sep
11
comment Enforcing hashed home directory permissions with puppet
So, basically you want to enforce permissions with puppet on directories that puppet doesn't manage? Is there any way you could make the data available to puppet? Maybe use [External Nodes] (docs.puppetlabs.com/guides/external_nodes.html) to pass an array of all the usernames or a hash appropriate to pass to the create_resources function? Might have to cave in and write a simple shell script and call it with exec in puppet ...
Sep
11
comment Enforcing hashed home directory permissions with puppet
You can create 26*26 entries by calling defined resource types with an array. Something like: define hashhome2 ($secondletter) { file { "/home/${title}/${secondletter}": ensure => directory,require => File["/home/${title}"]} } define hashhome () { file { "/home/${title}": ensure => directory } hashhome2 { ['a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t'‌​,'u','v','w','x','y','z']: secondletter => $title}} hashhome {['a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t‌​','u','v','w','x','y','z']:}