9,309 reputation
2555
bio website eric.eisenhart.name
location Santa Rosa, CA
age
visits member for 5 years, 6 months
seen Dec 12 at 19:23

When I'm not bicycling, I'm a Linux SysAdmin. I'm on the board of my local bicycle advocacy group.

Bikes are my primary transportation. A 2009 Surly Long Haul Trucker, set up as a commuter and a 2012 Trek Ion CX. I also take the bus, but do not own a car.

profile for freiheit on Stack Exchange

@freiheit, Google+, Facebook, LinkedIn


Sep
12
comment Linux User and Permission Management within an AD Environment
@John: I don't know AD's schema well enough to answer. Are they integers between 1000 and 2^31? (or at least 200 and 2^32)? Are they unique? Do they ever change for a given group?
Sep
11
comment File transfer sftp secure?
What, exactly does "sftp set up in a website" mean?
Sep
11
comment Enforcing hashed home directory permissions with puppet
Yes, managing permissions (or other things) on files/directories that don't come from puppet is very common (I do stuff like that all the time), but managing permissions on files/directories puppet doesn't specifically know about is a whole different thing.
Sep
11
comment Enforcing hashed home directory permissions with puppet
So, basically you want to enforce permissions with puppet on directories that puppet doesn't manage? Is there any way you could make the data available to puppet? Maybe use [External Nodes] (docs.puppetlabs.com/guides/external_nodes.html) to pass an array of all the usernames or a hash appropriate to pass to the create_resources function? Might have to cave in and write a simple shell script and call it with exec in puppet ...
Sep
11
comment Enforcing hashed home directory permissions with puppet
You can create 26*26 entries by calling defined resource types with an array. Something like: define hashhome2 ($secondletter) { file { "/home/${title}/${secondletter}": ensure => directory,require => File["/home/${title}"]} } define hashhome () { file { "/home/${title}": ensure => directory } hashhome2 { ['a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t'‌​,'u','v','w','x','y','z']: secondletter => $title}} hashhome {['a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t‌​','u','v','w','x','y','z']:}
Sep
9
comment How to clean up server's hard disks before giving it away?
Multiple passes is overkill, unless your data is of interest to a major national government or shady multi-billion dollar company. A single pass of zeros is sufficient for any case where your data isn't worth hundreds of thousands of dollars to somebody.
Aug
17
comment Drupal Takes Over Sibling Site?
Drupal on its own has no mechanisms to hijack control outside of its directory. This is most likely an apache configuration issue, in the school.domain.edu virtualhost configuration or a .htaccess file in the directory for school.domain.edu.
Apr
13
comment Puppet Testing if a file exist
@MealstroM: In this particular case, creates would have the same result and be much simpler (and a bit faster). Yes, in general onlyif does provide more flexibility.
Apr
12
comment Puppet Testing if a file exist
@MealstroM: Wouldn't "creates => '/etc/blabla'" be better than an "onlyif"?
Apr
12
comment Working with arrays in puppet
@Caleb: Puppet is a programming language, but it's a very specific very limited programming language for system administration. It's totally on topic here, even if it is also on-topic on StackOverflow.
Apr
1
comment Non technical explanation for Reverse Proxy
Why are you trying to explain this to somebody?
Apr
1
comment Non technical explanation for Reverse Proxy
"non-technical person" is too vague and too hard to explain this to at all. A non-technical person doesn't understand what a server is, doesn't understand what a network is, and probably barely understands that there's more to the computer than the screen/keyboard/mouse in front of them.
Mar
21
comment Out of resources for mysqldump
--lock-all-tables also works, and doesn't have the inconsistency problems of --single-transaction when working on non-InnoDB tables.
Mar
16
comment How do I know what processes are using the network?
Particularly useful for tracking down things likely to be using bandwidth: lsof -i tcp -sTCP:ESTABLISHED
Mar
14
comment Resolve which public key user uses to access server
+1 We do exactly this to satisfy certain security audit requirements
Mar
12
comment Enable passwordless access to MySQL
@user67641: Might depend on version and what's in your password... Mine are all long random strings of alphanumerics (no special characters) and haven't needed quotes.
Feb
28
comment filebucket configuration in Puppet
I think if multiple hosts have identical files go into the filebucket, it'll only get stored once, so the relationship between files in the filebucket and hosts isn't simple.
Feb
19
comment What's new in Puppet since 2007?
@BCS: no, there's other subtle language features, like "require => Package['foo','bar']" as a cleaner way to say "require => [Package['foo'],Package['bar']]"
Feb
19
comment What are the right questions to ask when deciding whether to use Chef or Puppet?
Age is either easy or hard to judge: Chef was started by a company that had been using Puppet but was dissatisfied with certain things. It's a few years newer, but could be viewed as a fork.
Dec
13
comment Apache: URL should point to specific folder
If you've got a VirtualHost, put it in there. Other than that, it'll work in httpd or in a .htaccess file in /var/www