The Comms Room

2:00 PM

So, I just got a call from my pops about that hard drive. "So, I guess you weren't able to do anything with it?"

@Chopper3 I'm waffling. As far as the other answers go? I think it does provide some additional information. However, what he's saying is captured in all the various and sundry comment threads on the other answers.

Chopper3

which is crappy right?

pauska

too funny to be true?

Scott Pack

@Chopper3 I'm failing to properly construct the thread, sorry. Could you clarify which part is crappy for me?

I've been 'toddlered' for the past few days. It's left me a bit slow-witted.

Chopper3

I mean that james pulley post - if an 'answer' is just everyone else's existing answers combined into one post then I consider that lazy and crappy

Scott Pack

@Chopper3 Ah, yeah. I'm only waffling because the information comes from the comments. Putting it in as an answer means more people will see it, but. ...

tombull89

2:07 PM

everyday he's waffling...

AliGibbs

I hate overly complex things to do simple things (unless I am being stupid)

Chopper3

me too but sometime they're a necessity

AliGibbs

however, its only just 2 hours till pub :)

Bart Silverstrim

@Pauska: he said it was fake in the original thread.

But there is such a condition, according to other comments...so it can happen.

Kyle Brandt

@pauska: Took a stab at that one: serverfault.com/questions/314311/…

AliGibbs

2:25 PM

I wish there was a flag for "really bad answer"

Kyle Brandt

@AliGibbs: There is, next to the answer there is an up and down error. Click the down one ;-)

AliGibbs

yea, but I want to give -100

tombull89

@AliGibbs what for?!

Bart Silverstrim

Leave it to kyle to use an answer with lots of words. The only issue I saw was dedicate instead of dedicated in the answer.

Maybe emphasize more that he might want to look at splitting it out as a database + web servers type setup.

Kyle Brandt

You still need to take care of the other stuff even if you split it

Bart Silverstrim

2:35 PM

Yes, I know. I was thinking more of his statement about 15 apps, one database, 4 gig, and concerns over memory.

Better to work on that sooner than later.

Scott Pack

@tombull89 Who doesn't like waffles?

Stack Exchange

The Nubby SysAdmin: Live Blog: Interface 2011

posted on September 22, 2011 by Wesley David

Today I’m at the Phoenix, Arizona leg of Interface 2011. Once again, the event is billed as being in Phoenix, but it’s really somewhere rather far away from “Phoenix” proper. Technically it’s at Ft. Mcdowell at a Radisson Hotel that is adjacent to the Ft. Mcdowell Casino. For more information on the conference, check out [...]

Shads0

Call att for phone support for a line, says its verizon's line. Call verizon, they say they can't help because it's att's problem....

gotta love it...

Kyle Brandt

yay, Dell is coming today to fix my laptop

Chopper3

ace, what's wrong with it?

Kyle Brandt

2:42 PM

LCD is cracked

Scott Pack

@KyleBrandt Playing Bejewelled on a tablet?

tombull89

@KyleBrandt That was quick.

Kyle Brandt

Once they released the hold my account, yes it was

tombull89

chuckle

MarkM

@tombull89 When you're SF Valued Employee # 00000000000000000000000001 you get results!

Scott Pack

2:45 PM

And by "released the hold" you mean they found out you really are the hooker from Vegas?

Chopper3

I paid her off

tombull89

I just look at the most downvoted questions on SF and now I want to claw my own face off...WHAYYYY DID I DOOO THAT?

Scott Pack

Wow, the lowest voted question is only a -12?

tombull89

@ScottPack lowest voted non deleted question.

Scott Pack

Heh. Fair enough.

MarkM

2:48 PM

@ScottPack Is it the WSUS one?

tombull89

I hate to think what I would see if I was a 10k'er. Instead of clawing my own face off it would probably melt off by it's own accord.

MarkM

nm, just looked. that's only -11

Scott Pack

-12

Q: KDE or GNOME, What I Choose?

Really I have ambiguity for choose graphical display for My Linux. I have two questions in order to decide what I take. What is the difference between them? Can we say KDE better than GNOME or vise versa?

@MarkM That one is the second, though.

tombull89

KDE in the front seat, GNOME in the back seat...gotta make my mind up...what [do] I choose?

2

(had to be done)

Scott Pack

So, all you mods and 10kers. What is the score of the most downvoted question?

@tombull89 My boss pulled that music video up on the conference room projector yesterday.

MarkM

2:50 PM

@ScottPack Wait, you're not 10k?

Scott Pack

@MarkM I'm chillin in the mid 5s

Chopper3

@tombull89 the answer is 'not gnome 3'

Scott Pack

@Chopper3 Gnome3 was enough to make me try out KDE again.

KDE was enough to make me switch to XFCE

MarkM

@ScottPack Wow. I thought I was the only super-lazy SFer that doesn't answer much and just hangs in chat. Even I'm inching toward 10k, though.

Chopper3

there are two -11's - 80924 and 313858 (from yesterday!)

Scott Pack

2:54 PM

@MarkM You're a helluvalot more active in asking and answering than I am :)

Chopper3

now it's -12

MarkM

@ScottPack Most of that was from when I was ambition when the site came out of beta

Scott Pack

@Chopper3 The WSUS one (313858) is still open

Chopper3

yep

MarkM

@ScottPack It doesn't really need to be closed, it's valid. It's just so elementary,

Scott Pack

2:55 PM

yup

Chopper3

wonder what the max/min/ave q's-to-a's ratio is? i.e. me, 26 q's, 2184 a's - so 0.119 q's per a

Scott Pack

I wonder if there's a query for it on data.se.

Or hell, max/min/ave/std.dev per user of avg score/post.

AliGibbs

3:19 PM

ok, simple question. I want to disable IPV6 on Centos6

I have edited /etc/sysctl.conf: with net.ipv6.conf.all.disable_ipv6 = 1 but now its not picking up an IPV4 address

Scott Pack

In a per interface you should be able to add 'NETWORKING_IPV6=no' to the ifcfg script

AliGibbs

done that

(and restarted network, and erbooted)

Bart Silverstrim

well, I give up.

Shane Madden

@BartSilverstrim I agree.

AliGibbs

me too

Scott Pack

3:24 PM

@AliGibbs Yeah, so post that as a question on the main site and I would be more than happy to collect a couple of points off it :)

Bart Silverstrim

I was trying to install and configure a monitoring system to figure out why we're getting complaints about network slowness and timeouts. Zabbix and cacti I thought would be really helpful in our network...boss basically put the kibosh on it because he wants other things done instead.

MarkM

Dear Boss,

Suck it.

Sincerely,
Shit you'll want sooner or later.

AliGibbs

@ScottPack course, will do so

MarkM

YA, just broke 9K!

Vote to Delete - HERE I COME!

AliGibbs

asked: serverfault.com/questions/314432/disabling-ipv6-on-centos6

MarkM

3:34 PM

@AliGibbs You should really refrain from adding "Help!" or "Thanks!" etc, from the end of questions. I already took care of this one for you :)

AliGibbs

whoops, i dont ask many questions

Iain

G'day

Scott Pack

How do, @Iain.

MarkM

@AliGibbs No problemo

Bart Silverstrim

Anyone want to spend a few minutes looking at a little ad thing the wife and I made, maybe vote for it? Yeah, totally pimping it, but I made it and figure I should at least ask some people to look.

Chopper3

3:41 PM

sure

Bart Silverstrim

zooppa.com/ads/amazon-freedom-to-choose-video-contest/videos/…

To vote you'd have to log in, but even just viewing would at least justify making it.

My kid loved laughing at it.

I even made an outtakes reel. youtube.com/watch?v=JDL7L4sQRdI

Iain

@ScottPack fine & you ?

Scott Pack

@BartSilverstrim I'll check it out at lunch and get back to you.

Bart Silverstrim

Thanks guys :-)

Chopper3

which voice is yours?

Bart Silverstrim

3:43 PM

Oh, ha ha. :-p

Scott Pack

@Iain Not entirely unpleasant. It took me a while to get my brain back on track so I could remember where I left off yesterday afternoon, but so far my day has been productive.

Bart Silverstrim

Fun fact: the girl puppet has boobs made of split ping-pong balls, but it doesn't really show.

2

First time I have made sock puppets.

Scott Pack

@BartSilverstrim I thought your wife liked big boobs?

Bart Silverstrim

She has big boobs. There's a difference.

3

Scott Pack

Fair nuff

Chopper3

3:44 PM

what type of monitor is that, looks kool

Bart Silverstrim

My next female puppet will have bigger ones. I'm determined to make better boobs on my creations.

2

@Chopper3: Cardboard.

Chopper3

I heard they're good value but the colour saturation isn't great

Shads0

And the star wall is drowned by boobs again, haha

Bart Silverstrim

Slid off to add users to AD, slide back to this workspace and see the comments about boobs starred, many by me. It actually makes me feel a little better after having my server projects shot down.

AliGibbs

shhh @Shads0 this is real work :p

Bart Silverstrim

3:52 PM

I'm almost afraid to see if there will be comments on the video at the end of the day.

AliGibbs

oh man, how do you do returns in comments?

or ur not supposed to?

Bart Silverstrim

maybe shift-return?

Works
for
here.

AliGibbs

nope
doesn't
work
there

Ward

Return in comments
Yeah, shift-return works

so
we
can
waste
space
as
well
as
time

And notice how it gives you the option
to use a fixed font... ASCII art boobs, here we come!

2

Shads0

omg boobs with a whole new level?

This is insanity

Bart Silverstrim

4:03 PM

Great. See what you started, gibbs?

Insanity.

Like we needed that.

Shads0

Could be worse, could be madness.

AliGibbs

woot- i started something :D

Bart Silverstrim

Youtube is screwy. Right in my own vid page, it's been viewed "2" times. Up at the top with the list of other videos made by this user, it shows the same video viewed 4 times.

Wonder how their apps are architected...?

Shads0

not very well, as many times as I've seen a wonky youtube error happen.

Bart Silverstrim

I know there are discussions about when views are updated.

Apparently they can wildly swing based on some goofy algorithm they periodically run or something.

...no. It didn't work.

Shads0

4:05 PM

What
The
Fuck

Bart Silverstrim

Unless those were mammogrammed ascii boobs.

Scott Pack

@BartSilverstrim Well, that gets me over to this room awfully quick

Shads0

The view count is just one of many things that don't make sense to me. I've seen a vid be stuck at 306 views for 2 days then instantly shot up to half a mil in an hour. Not to mention broken channels randomly, download spikes that don't make sense. I suppose most of those are just attributed to the amount of people on youtube at any given time but you'd think after about 5 years and Google taking over they would have fixed that.

Bart Silverstrim

Mammogrammed ascii boobs?

Shads0

creepy

Bart Silverstrim

4:08 PM

I think the extent of Google taking over is just integrating their auth system.

The login system, profiles, etc. are not centralized at all. Youtube is very much a separate entity still, from the end-user perspective.

Seems to be the Google Way.

Shads0

saddening, but that puts my mind at rest I suppose. But I do remember reading something that said with all these changes Google wants to undergo with the introduction of + with the other 'sites' run by then, i.e. youtube, blogspot, picasa, that they want to have more centralized control

Bart Silverstrim

Because YouTube has a LOT of room for improvement outside just being a video aggregator.

I wish they'd integrate things better.

Hi @zypher.

Chopper3

nearly broke my record for killing a new question with this, serverfault.com/q/314457/1435 - just over a minute, I've done 47 seconds before now

Bart Silverstrim

You need to bug the devs to refine the closed time so it'll be more fine-grained.

Chopper3

sub-second?

Bart Silverstrim

4:21 PM

I don't know if you can do that with ASP/MSSQL and have it accurate, can you?

Chopper3

some may argue it's not worth the effort to find out :)

Bart Silverstrim

What do the community managers do at the SE?

I've been wondering ever since I first saw the title.

Like...what's a workday for them? That sort of thing.

Shads0

They think of ways to infiltrate chats with boobs and failed ascii art

Scott Pack

@BartSilverstrim I like your add. How hard was it to switch back and forth between the voices?

Bart Silverstrim

4:37 PM

Not hard. I hired a ringer.

Look at the outtakes video and you can see the other voice choking at one point.

Bart Silverstrim

4:53 PM

I feel dizzy...oh so dizzy...I feel lightheaded and whee-headed and whoa! - said in my head to the tune of "I feel pretty"

SmallClanger

Pet hate for the afternoon: EULA windows that force you to scroll to the bottom before you can click 'Accept'.

2

Bart Silverstrim

Pet hate period: EULA windows.

SmallClanger

I read one if it scrolled up into the screen like the start of a Star Wars film.

Bart Silverstrim

Whaddya' know? When booting Windows servers I hear the Imperial March theme in my head.

SmallClanger

and since it's home time. Have some Brick Vader. youtube.com/watch?v=kDKiQfBs9lo

Bart Silverstrim

5:16 PM

TDD? What's TDD in relation to programming? Or is that too stupid/basic a question to even ask?...hmm...

SmallClanger

No idea. What's the context?

Shads0

top-down-design?

MarkM

trickle-down-dickpunches?

I've got a bunch of those from poorly written software.

Bart Silverstrim

A) Someone view this and comment, please? serverfault.com/questions/314292/…

B) TDD - programmers.stackexchange.com/questions/109990/…

SmallClanger

@BartSilverstrim I think he just wants a point where he can test a virtualhost configuration before setting up any DNS.

Specifically a service that will send a GET request to an IP address, setting the Host: header to be the given text.

MarkM

5:24 PM

@BartSilverstrim done

Shads0

TDD = Test-Driven-Development

Bart Silverstrim

Ah, thanks @Shads0

Shads0

Test-driven development

Test-driven development (TDD) is a software development process that relies on the repetition of a very short development cycle: first the developer writes a failing automated test case that defines a desired improvement or new function, then produces code to pass that test and finally refactors the new code to acceptable standards. Kent Beck, who is credited with having developed or 'rediscovered' the technique, stated in 2003 that TDD encourages simple designs and inspires confidence. Test-driven development is related to the test-first programming concepts of extreme programming, begu...

Chopper3

I'd never heard of programmers.se - what's the difference between that and SO?

Shads0

Coming from a programming background, seems kinda bad if you want to get a job doing long term development. My first java professor taught us that way and it was piss poor compared to what I learned when I got to an algorithm class.

I think the difference is supposed to be kinda generic questions and debate as opposed to helping fix problems/questions

Don't quote me on that though

MarkM

5:28 PM

@Chopper3 They migrate less trash to us?

Chopper3

:)

Bart Silverstrim

I think the difference is that SO is programming questions in implementation, while programmers is more the practice of programming and business (architecture of programs, best practices, etc.)

Chopper3

hmmm...

MarkM

I feel like SE is cutting itself to little bits and making it less of a one-stop type feel and more of a which-fucking-site-do-i-post-on feel

SU overlaps with like 3 or 4

SF overlaps with Webmasters on a lot of stuff

now there's SO and Programmers

This might be good for long-time users like us, but that's got to be daunting for new users. Especially if they ask a question on SU and it gets moved to askubuntu.se or apple.se, when they're perfectly acceptable to SU

Shads0

Let's merge SF and SU! (waits for the ban)

MarkM

5:37 PM

@Shads0 NO! The original trilogy were well defined! Things like cooking, photography, and bicycles are all fine too, but there are a bunch of offshoot "technical" sites that seem to slice the main ones to bits

Bart Silverstrim

Personally I've wondered about developing a way to create a personal profile page that acts as your "home" site, then you can create your sub-exchanges using tags as an autofilter.

Shads0

Now we're talking about original trilogies, I wonder when the Star Wars references will pop up all over the sites.

Bart Silverstrim

If a question has a tag of cooking, you add it to your list of interests in your central profile, and anything tagged "cooking" shows up in your feed.

That eliminates the sub-exchanges.

Aaron

the way I understand it is that SO is for your jquery/perl hacker-types and programmers.se is more for the people debating Ologn sorts

Bart Silverstrim

The devs would be pissed at that idea though probably.

Shads0

5:39 PM

That would make it more stack-exchangey. The mods would have to deal with tag hell all day I would imagine

MarkM

@BartSilverstrim Good idea. Now go to m.SO where they'll shit all over it and tell you that you're a retard.

4

Bart Silverstrim

@MarkM That actually made me laugh when I read it.

Chopper3

silly question US-types, if my son studied in the US I take it he can't work right? as in anything? pizza delivery etc.

Bart Silverstrim

I was reading that TDD question and it seemed...well, I didn't understand quite why someone would write code that would take 1,2 and return 3 by just saying if the input was "1,2" then "return 3", as I read it as number1 + number2 for input, return sum.

Just being dense, I guess.

sysadmin1138

@Chopper3 Depends on the terms of the visa he gets for the studying, as I understand it.

Bart Silverstrim

5:46 PM

I think it depends on the visa.

I don't see why he couldn't be a pizza delivery boy.

Chopper3

ah, I see, thanks

Bart Silverstrim

Or something like that. Depends on taxes I think.

MarkM

@Chopper3 Most universities will sponsor work visas for their foreign students

Bart Silverstrim

If he goes to a particular city where people won't care he could get paid under the table. Worst that happens is he's deported back to you.

Scott Pack

And there's all kinds of ways someone can exchange time for money.

sysadmin1138

5:46 PM

@MarkM Indeed, student-workers are a valuable labor source.

MarkM

Also, he could always just work under the table. That happens an awful lot for odd jobs that college kids get.

Scott Pack

Some of them get reported to the IRS, some of them don't.

Chopper3

since they put up the cost of university places in the UK it's worth him considering other places

Kyle Brandt

Anyone know off hand if tar has the normal 0 exit code for success?

Chopper3

yep, 0

Kyle Brandt

5:47 PM

For some reason I have a vauge memory of something being funny there

Bart Silverstrim

You'd be able to ask the embassy or the state department, probably, for more information on working here as a student.

@Kyle: Tar almost always returns a success even if it did the wrong thing. That's the joke.

Scott Pack

> GNU tar' returns only a few exit statuses. I'm really aiming simplicity in that area, for now. If you are not using the --compare' (--diff', -d') option, zero means that everything went well, besides maybe innocuous warnings. Nonzero means that something went wrong. Right now, as of today, "nonzero" is almost always 2, except for remote operations, where it may be 128.

Bart Silverstrim

It's one of the dumbest of the UNIX utilities. Like Odie of the CLI world.

Scott Pack

Ripped from the info page for gnu tar-1.15.1

SmallClanger

"Right now, as of today, "nonzero" is almost always 2" - That would simplify a lot of maths.

Scott Pack

5:49 PM

Except when it's not 2, then it's 128.

Again, simple maths.

SmallClanger

That's a grand, unified field theory, right there.

voretaq7

I'm being PRODUCTIVE today...

Shads0

@BartSilverstrim The whole point of the exercise is to kind of teach basic programming keywords, language, and concepts through having someone program to just the problem. No thought required other than passing the test in the simplest way possible. So for that example it says, 'assuming correct input, the answer should be 3 when the program returns' It doesn't really matter what the program does, as long as it returns 3 in the simplest way possible. What he is showing is steps to improve.

that program as the requirements become tougher to meet or there become more tests to pass at once

I suppose its good for teaching basic programming concepts within a specific language, but personally, I don't like it as a tool to teach programming as a whole because instead of thinking outside the box and making your program modular for further improvements, you get a sense of minimalistic programming, as in programming only for what you're required for and nothing else.

sysadmin1138

flips spammer into sun

voretaq7

6:05 PM

@sysadmin1138 ay! Stop that!

Spammers are to be drawn & quartered first.

Incognito

Wondering if someone can approve my edits: serverfault.com/questions/259435/…

MarkM

@Incognito I don't get it

Why are you adding all of that to someone else's question?

Incognito

@MarkM Exact same issue, more information.

Error log, code that causes error, etc.

Rather than create a duplicate question.

Should I have just created a duplicate question?

MarkM

I don't know. Edits aren't really supposed to add a lot of content like that. Just because you get the same error doesn't mean that you have the same problem.

Looks like someone approved it though

@sysadmin1138 or @Chopper3 What's the etiquette for something like that?

Aaron

6:26 PM

@ShaneMadden, just don't forget the 'remove' on that command!

Shane Madden

@Aaron Haha, indeed.

Aaron

We actually made an alias for everyone to use, 'rmvl'

Shane Madden

Oh, nice. Yeah I've seen people burned by entering a whole new vlan list instead of modifying the existing list

I'm actually surprised that no switchport access vlan 1 doesn't just error. I can't think of any situation ever where that command will do anything; removing the vlan specification on an access port always sets the port to vlan 1. Unless there's a way to change the default vlan for access ports that I don't know about?

Aaron

Should I feel bad about downvoting an incorrect answer even after he said 'oops, my bad' ?

Scott Pack

@Aaron Nah. If he knows the answer is all wrong then he should either edit it to fix, or delete.

Shane Madden

6:34 PM

@Aaron Nah - if he doesn't delete it or edit to be correct, then it's good to have a downvote on it. For the asker or googlers to be able to see.

Aaron

You can set a different native vlan, but I don't know how to set a different default access vlan

Shane Madden

@Aaron Yeah, that's what I figured. There's a reason that access vlan 1 config never shows up anywhere; it's implied.

Oh, heh - his trunk won't let him exclude the default vlans.

Holocryptic

Alex

80 5

apache http domain localhost wamp wampserver

0_o

LIES!

Aaron

I wonder why 2 is default?

and I like how it says 'e.g. 1-2, 1002-1005'. It's like, are those really the defaults, or is it just an example of what might be default in Universe B?

Shane Madden

Yeah. This 2800 on my desk behaves exactly the same. Stupid Cisco.

Scott Pack

6:42 PM

@Holocryptic Tell me about it. That hair must come from a bottle.

Holocryptic

@ScottPack Even if it does I have a hard time looking away....

Peter Grace

yeah, she's one good looking fake profile pic.

MarkM

I just got off the phone with my Dell storage consultant trying to set up a meeting. He's got a southern accent, and I thought he said "Wednesday morning isn't good. I'll be at Uranus." What he actually said is "I'll be ar Ursinus" which is another school in the area.

In my head I was like WOAH THATS FUCKING SWEET"

Peter Grace

hahahaha

I live up near Ursinus

always thought it was a weird name for a college.

MarkM

Yep

Zypher

6:50 PM

@MarkM they are bugging the hell outta you too?

Peter Grace

They were hiring IT a while back, I put my resume in but didn't even get a callback.

MarkM

I used to drive by it to go see my buddy's parents when they lived in Collegeville. It always struck me as a weird tiny campus

Peter Grace

That's one thing that irks me about the hiring process is the not knowing whether your resume even got there.

MarkM

@Zypher Actually, they're sizing some storage for us. One of the few times it's actually not a bother.

@PeterGrace a buddy of mine just got hired at Haveford

You couldn't pay me enough to go there.

Zypher

@MarkM ahh nice ...

Peter Grace

6:51 PM

Someday, I intend to find a solution to the hiring process.

MarkM

I mean, you could pay me enough, but it would be a lot.

Kyle Brandt

Dell should be showing up at my house any minute now unless they go back to thinking I'm that hooker in Reno

4

Peter Grace

@KyleBrandt ... I'm scared now.

Holocryptic

@KyleBrandt Wait, you're not a hooker in Reno?

@KyleBrandt SE not paying well, so you have to resort to doing tricks?

Zypher

@KyleBrandt stop telling lies

Kyle Brandt

6:52 PM

Not that I can remember

Peter Grace

Hey, ya know, what happens in... Reno... Nevermind.

Kyle Brandt

Apparently the only piece of information you need to transfer ownership of a service tag is the service tag

So Valid Service Tag that has Complete Care == Free Laptop

Peter Grace

hmmm

MarkM

@PeterGrace at Haverford, there's no AD or OD. Every office has a Mac with VMWare Fusion and XP on it. Almost no servers. No real datacenter. But they have a huge endowment (heh endowment). All logins are local and everything is managed by hand. Now they want to invest in infrastructure but they have a ton of unmansged shit out there. I wished him well and told him that if he ever needed anything, my consulting rate would be double for him.

Peter Grace

I wonder if I can transfer the service tag of our blade chassis to me

hmmm.........

Mark: LOL.

Kyle Brandt

6:56 PM

@PeterGrace: Well I think the consumer department is less secure

For instance with the enterprise customers or whatever, if you don't send back the broken parts, they will actually follow up

Peter Grace

I'd imagine so when the equipment is somewhere between $leg and $firstborn

Shads0

They go straight for the $leg? Usually they take the $arm first.

voretaq7

7:37 PM

@Shads0 $arm is the support contract fee.

Irrespective of whether your equipment cost $leg or $firstborn you're still going to have to pay $arm if you want them to answer the phone :)

MarkM

Anyone know which of the billion ways is the easiest to get CentOS to authenticate against AD, and only allow login for a specific group?

Scott Pack

@MarkM The easiest is probably pam_krb with local accounts

MarkM

@ScottPack I'd just need to do useradd on each server for the users that I want to allow and it would accept the AD credentials?

Scott Pack

You can do pam_ldap, but it can be more tricksome. Particularly if you're not indexing the right fields within your structure

@MarkM Pretty much. Don't set a password, and make sure your pam stack is set up right.

You using puppet?

MarkM

Not yet. It's only for 3 boxes right now.

Scott Pack

7:50 PM

How many users?

3

:)

haha

So it should be pretty easy

MarkM

not 1 box per person though

voretaq7

7:50 PM

@ScottPack pam_ldap isn't too tricksome. ..

MarkM

I just want something that leverages AD and is easily managed

I'm getting sick of the local accounts on them

Scott Pack

@voretaq7 I've had issues with it in the past, but that could easily have more to do with the way that directory was structured.

voretaq7

@ScottPack If your directory is ZOMG SUPERMASSIVE BLACK HOLE sized then indexing is important

Scott Pack

@voretaq7 A bit, yeah :)

voretaq7

but for <= a few thousand users - not so much pain and suffering

Scott Pack

7:52 PM

How many hundreds of thousands of user accounts do you consider black hole sized?

MarkM

I've got about 20k users in this AD

voretaq7

@MarkM in that case you need to index the POSIX username, UID and GID data.

at a minimum.

MarkM

Ok, thanks for the advice.

voretaq7

@ScottPack I'd say 10k is important, 100k is blackhole sized

Scott Pack

@voretaq7 That, without question, explains my difficulties. Multiple blackhole sized and non-indexed uid field.

voretaq7

7:57 PM

all the attributes that have a get-{user,group}-by-$attribute mapping really should be indexed - those 3 cover damn near every common lookup case though.

If you're going to use LDAP you may want to consider `nss-pam-ldapd` - less abusive to your LDAP server.

@ScottPack yah - UID & username are huge ones because damn near every lookup is by username (logging in) or UID (any time you see a username in top, ls, ps, etc.)

MarkM

@voretaq7 We have a pretty robust AD setup. 6DCs geographically located with sites, etc. Enough RAM so that the entire AD database can be stored in RAM.

voretaq7

I'm probably going to be deprecating the FreeBSD pam-ldap and nss-ldap ports in January.

Scott Pack

I was actually seeing sudo attempts timeout due to the time spend performing lookups.

MarkM

I'll look into nss-pam-ldapd though if that's the rightest way to do it. It's not like I can't automate all of it after I do it right once.

Scott Pack

Oh, @MarkM. You're in Philly, yes?

MarkM

7:59 PM

yep

voretaq7