160 reputation
6
bio website
location
age
visits member for 3 years, 4 months
seen Jul 15 at 1:20

Jul
10
comment scp files and delete files on remote directory
"overwrite the files at the destination"? If you scp files that already exist on the remote dir they'll be overwritten automatically
Jul
4
accepted Store PGP keys on Active Directory/Exchange?
Jul
4
comment Store PGP keys on Active Directory/Exchange?
Thanks, I'll accept your answer :)
Jul
4
comment Store PGP keys on Active Directory/Exchange?
In the end, credentials are stored in AD, since the capability is here I think I will go for it. I don't see any alternatives, we won't provide training or do support for users messing with their private keys (they could leak them also). About your link: "Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2", so Windows Server 20008 R2 and above can't follow this, right?
Jul
4
comment Store PGP keys on Active Directory/Exchange?
This is great. Also great news as I can give it a shot soon (will update question accordingly). I will definitely follow up when I can spare some time to go further on my research. Now, what I want is to make this transparent for users, PGP is mostly useful when sending emails outside of the organization network (to meet security certifications with partners for instance). So I was thinking of adding also a private key field that would only be readable by the user himself (and of course our admins). Does that sounds feasible to you? This way he wouldn't be involved in managing keys at all.
Jul
3
comment Store PGP keys on Active Directory/Exchange?
@JensErat That would be great indeed. LDAP key servers for PGP is common but I couldn't find any material about practical usage with AD
Jul
3
comment Store PGP keys on Active Directory/Exchange?
@RyanRies: I was thinking of tuning google's. I am still brainstorming about this, if something good comes out of it I'll submit a patch.
Jul
3
asked Store PGP keys on Active Directory/Exchange?
Jan
14
comment error: “net.ipv4.netfilter.ip_conntrack_max” is an unknown key
forgot sysctl -w, thx
Nov
27
comment Does anyone have a config to process AWS CloudFront/S3 logs with AWStats (or similar sw)?
I struggled a long time until I came upon this on a forum: LogFormat="ogFormat="%date %time2 %x-edge-location %sc-bytes %c-ip %cs-method %cs(Host) %cs-uri-stem %sc-status %cs(Referer) %cs(User-Agent) %cs-uri-query %cs(Cookie) %x-edge-result-type %x-edge-request-id". Now awstats doesn't complain at all. The format given in the answer didn't work for me (dropped records or corrupted depending how I tweaked things). Use this to update awstats: perl /usr/share/awstats/tools/logresolvemerge.pl S3/bucket/* > awstats/input.txt && perl /usr/local/awstats/wwwroot/cgi-bin/awstats.pl -update -config=XXX
Oct
7
comment Turn off the Linux OOM killer by default?
I don't want my backup process to get killed because someone is DoS-ing my web server. Exceptions are fine but the default should be safety and consistency. Optimizations like OOM should be turned on manually IMHO. It is like coding, you code cleanly, and then optimize. Over-commit is a nice feature, but should not be the default.
Oct
1
awarded  Critic
Oct
1
comment Network port open, but no process attached?
Good but I need more, I need to execute it for each connection in netstat. Then I can identify what a single program is doing. It's a box without lsof/fstat or other nice utilities, and as root I cannot install them because of other issues.
Oct
1
comment What does * * * * * (five asterisks) in a cron file mean?
-1 for the man cron also. I just googled the answer since it is faster than digging through the RAW man page. I also was worried it would be a special meaning that I would miss. Think about who will read your answer, we're not reading it to learn about the documentation but to know an answer to a question.
Sep
27
awarded  Commentator
Sep
27
comment create home directories after create users
also, use cp -r for skel, as else it won't copy directories (.ssh).
Sep
26
comment create home directories after create users
You forgot to copy the contents of /etc/skel/ + chown recursive for those new files. usermod wouldn't work since here the directory was registered but not created, usermod won't do anything.
Sep
26
comment create home directories after create users
Did that: usernameh=myusername; mkdir /home/$usernameh ; cp /etc/skel/* /etc/skel/.* /home/$usernameh; chown -R $usernameh:$usernameh /home/$usernameh; chmod -R 755 /home/$usernameh;
Sep
25
awarded  Student
Sep
25
awarded  Scholar