I'm primarily used to using Computer Towers as basic servers for the company i've been administrating for a while. And we now wish to move away from that to a rack facility.
I have no idea (not the slightest clue) as to how these things work. There's just a few questions I would like to ask:
...
@MichaelHampton I dunno, but if we don't, I say we make that one it. I mean really, Do rack-mounter servers have OS's is something I never want to hear again. I'm still.... the... I mean... what.... IT BURNS!!!!!!!!!!
I want to downvote this question 10 times, close it is as off topic, make it canonical and give it an upvote all at the same time. I... uh... wow. — HopelessN00b42 secs ago
My database contains 20,000+ verified email-addresses. These are user's emails with permission (users set in options) to receive newsletters, updates, etc... from website. I actually never used their email addresses for any purpose but now I want users to get some updates from website periodicall...
Of course, what it needs now is for someone to spend an hour on a great answer covering every conceivable aspect of the question, then we go make it canonical.
We actually have closer to 10-12K students enrolled (I'm too lazy to check), but our local definition of student is something like "was eligible to enroll in a class at most 13 months ago"
@MichaelHampton Thanks, but I do prefer to keep expectations low. Makes it easier to vault over them. :) But I think I'm about a 1/4 of the way through writing it... then I just need to proof it and add the links to the related canonicals.
Say, is there such a thing as a decent editing environment for <shudder> ... markdown?
Oddly, notepad++ doesn't have a default plugin for markdown. =D
@MichaelHampton Or maybe I should just format it html... is there a list anywhere of what tags and nesting options are valid on Stack Exchange?
@MichaelHampton Right, right, pardon me for not thinking that through. In which case, do you know how to do nested numbered lists here? (Or if it's possible?) Like 4 major sections, numbered 1-4, each section having it own indented numbered list of... well, "shit to consider"/priorities?
@voretaq7 Figgers. Any advice on how to format the post I'm writing for this? Should I maybe suck it up and ask on mSO how/if you can do different sized headers and a nested numbered list?
@jscott Right, just like COBOL. "Oh, it's a programming language for business folks who aren't coders..." Yeah, so coders recognize it for the shit it is, it's too hard for non-techies, and you get a giant fustercluck out of it. Hey, alot like markdown...
I'm primarily used to using Computer Towers as basic servers for the company i've been administrating for a while. And we now wish to move away from that to a rack facility.
I have no idea (not the slightest clue) as to how these things work. There's just a few questions I would like to ask:
...
@voretaq7 I know, right? I must be feeling compelled to answer it completely in order to restore order to my world. My brain's still spinning its wheels over that.
@voretaq7 Oh... I'm gonna cry. I'm implementing a redesign of our VPN and WAN architecture in about 28 hours from now... wish I'd had that link about 2 months ago. sigh
I'm not too proud to say that my Cisco chops are severely lacking. I've been lucky enough to work with some really smart people who know that stuff inside and out. They've made it possible for me to focus on the silly, arcane details of living in a Windows shop.
@HopelessN00b heh - quick read through and make sure you're not committing any real heresies :-)
I'm not the best Cisco admin - I can muddle through with the manual and a good command reference - but the concepts are the same no matter what kind of router/fw/LB/etc. you're using and the Cisco books/courses are EXCELLENT
@voretaq7 Oh we are. And I know we are. And I said we were. But the CCN**A** who made the design didn't know any better, and I'm "just" a "server guy," so with no good, easily parasble docs to show the PHBs, they ignored me. :(
heh, well now you have a doc -- if any of the heresies are REALLY that bad you might be able to delay until the architecture can be fixed (or get a plan in place to fix them after the reorg)
@voretaq7 Yeah, well... the other thing is they've been threatening to convert me to an FTE for a while, and I think they're getting serious about FTE, or we'll find someone who will ... so, the prospect of dozens of hours of OT to fix the abomination we're putting in place is now an unpaid burden, rather than a pile of money waiting to be harvested. :(
@voretaq7 Trying. The CIO is an asshatted cheapskate though, so he'll probably nickel and dime it down, and I'll accept just for the experience of re-architecting and implementing the whole environment, only to leave once all the hard work's done. :(
@voretaq7 It's an awesome place to work, and they pay really well... except in IT, where the head guy's just cheap/penny-wise-pound-foolish beyond belief.
I have a Windows 2008 server that is just running a few apps and doesn't need a lot of attention. However, all I know how to do right now is remote desktop into it and check event logs, free disk space, backup logs, etc.. It's annoying to do this every day since usually nothing is wrong.
I'd lik...
On the topic of Shopping, I sort of wish the killings were cleaner. Seems a lot of -1s gather quickly, along with the VTCs. Not that Rep Rules Everything Around Me, but I think some innocents catch a lot of flak.
@jscott Enh, read the faqing FACK. Or something like that. And they get the rep back (if they even lost any, 1 -10 == 1) when the question's auto-deleted anyhoo.
@voretaq7 Really I'm much simpler than a nazi. They had all sorts of intent and weird ethics and stuff like that... thought process. I've got a line in the sand, your on one side or the other; simple, mechanical... Like the suicide machines in Futurama. They don't feel remorse, apathy, or sympathy; they just do their job.
@ChrisS Well, until you said that, I was thinking about getting a nice bottle of wine, cooking an intimate dinner for two and inviting @voretaq7 over, but I guess not, since it means a ServerFault ban... :p
@voretaq7 Oh, phuck no. Alcohol is one of those things in life you never cheap out on. I may not be an oenophile, or be able to appreciate a $200 a glass wine, but I'm not a moron either. Wine comes in bottles. Fruit juice for small children comes in boxes.
(I actually had to explain that to a date once... ugh, women.)
After little googling I could see some references of configuring Google Authenticator with Windows Active Directory, however, I could not see how I could do it on Linux/CentOS system.
What would be involved in setting up Google Authenticator on Linux (CentOS) with OpenLDAP or 389 Directory Server?
@freiheit Oxygen is the single leading cause of all my trouble tickets. Solution: Deprive anyont that submits a ticket of air. Ticket closed. User's chemical dependency on oxygen resolved.
@WesleyDavid Oxygen ruins wine, ruins beer, and keeps stupid people alive.
@voretaq7 I haven't seen much of it. Just one or two brands in tetrapack, and a vague awareness of a local restaurant or two using the commercial sized bags.
The box (bag in a box) format does make a ton of practical sense, though. You pour a glass of it, and you still have a box of wine that'll keep for months to come. No weird silly tricks like pumping out air or pumping in argon just to get the wine to last a week instead of a day or two...
@HopelessN00b Screw the wine. I've got fifths of Jack and Johnie (for drinking and drinking respectively). And half a fifth of moonshine; though it's best for making bottle rockets, fueling a flaming shot, and de-greasing carburetors.
@voretaq7 Well it comes back up, but you have to pull the power cord out and plug it back in. So... if it's on a smart UPS you can do that remotely. Does that count for something?
@ChrisS No, the taste compliments the steak very well. Like a nice scotch. It's about complimenting the food you serve. The drinking or drinking (and hopefully humping) come after the fine meal.
I mean, the meeting new people and humping them part is definitely nice, but the problem is the 10 awful experiences that make your skin crawl for every hump-worthy one you find.
@ChrisS Yeah, I've thought about it... even looked into it a little. And I remember that there are enough people who want to put a bullet in me without adding a few dozen angry husbands to the line at some later date. :)
@voretaq7 No. It's the weekend, so I was gonna take it slow and post it Monday morning, right before life starts sucking again I head into work. That not work for your schedule?
Think of Rack-Mount servers as your computer towers in a different shape/form. (Same guts inside (of varying power, capability, etc.) but different shape. Modern Rack-mounted machines are thinner, to take-up less space.) Essentially, they are able to be screwed into a rack, along with other rack-...
@voretaq7 Fine, I'll do it tonight. Which may technically include tomorrow morning EST. I still have to cook dinner, because, well... women suck. Never gonna let one [try] to cook for me again.
There are already many companies providing services for this, for example 24HourData (their site has a list of drives they support).
While you figure out your next steps keep these things in mind
(from Top Tips for Liquid Damaged Data Storage Devices)
Do not try to power on a flood damage...
@tylerl The question was closed as OT (or something) which triggered a rejected migration (deletes migrated answers), when I unlocked the question and reopened it I undeleted that answer but never unlocked it
my ex Jamie (dude) made coffee for me once. I came back to his place the next week and went to make coffee and the coffee filter from last week was still in the machine. Growing fuzzy and approaching sentience.
Well, hers was at least hygienic... but holy freaking hell, there was like two pots, a cookie sheet and a fork (and an unopened bottle of something green for spices) as the totality of cooking implements and/or cooking ingredients.
I can microwave a fucking hotpocket too; that's not what **cooking** is. :/
@MikeyB The inside of your elevator shaft looks really dirty. You should call the front desk and have someone sent over to clean it.
For that matter I would never invite a date over to cook for him - I'd invite him to show up at some point after I would be DONE with the cooking. But that's because I'm Italian and you don't want to be around me when I'm cooking because I'll be all yelly and mean if you're in my way.
My kitchen is somewhat stocked, and I got 5% off groceries today, so I got a family pack of chicken, a whole chicken, a turkey breast, some ground turkey... enough meat for 2-3 weeks. I've got a 20% coupon coming, so I've got to plan exactly what will fit in my freezer. =]
@WesleyDavid I've already said everything to PHP that I'm going to say. >=[
@voretaq7 Amen to that. Though, why anyone would want to get in a man's way when he's using one of his many knives always baffles me. I'm holding a bloody knife, is now really the time to be arguing with me or getting in my way?
Actually, more specifically, I need people that use IonCube to be cursed to a fiery death of screaming and gore in a bizarre oil mishap at KFC on a Saturday night in front of an audience of high school cheerleaders.
@voretaq7 It's just deeply misunderstood with a troubled past and some therapy to work through. Once it gets past its daddy issues, it'll play nicely with the other kids.
I'm setting up a new system which contains a postgresql database and I'm trying to lock down which machines are able to open a connection to the database.
I'm trying to use the allow_user_postgresql_connect boolean to achieve this but so far have been unable to get it to block any connections.
...
Since we're sharing... check out this poor dude. He bought a "dedicated server" with a notebook processor, and is wondering why his PHP scripts are executing slower. LOL! I'd have thought that a 10 Euro dedicated server might be a clue, but not to everyone....
I just subscribed to a dedicated server offer, and encounter some bad PHP execution performances. Actually, the time execution may be 2 times bigger than it is on my old mutualized server! I'm definitely not an expert in server management, so I'm wondering what I missed.
Here are some stuff that...
@tylerl ...but WHY THE FUCK WOULD THAT BE SOMETHING YOU SET ON CLIENTS?
Access control should be applied on the server. This shit is like using client-side javascript to validate form data and relying on it to prevent SQL injection. Fake security is worse than no security.
Bad design (especially security) pisses me off... grumbles
I just picked up a few 20Gb Infiniband cards for next to nothing; they're missing the PCI bracket, minor drawback, but who here has 20Gb in their home network? =}
@WesleyDavid I picked them up on eBay; so I'm thinking it'd be a loss unless I could find the brackets (practically impossible). Then they'd go for $150+
I don't because that's not the unix permissions model (and as I've said before, if Linux wants to start doing their own thing I'm totally cool with it -- stop calling youselves a unix-like system and admit to being as bad as Microsoft in terms of doing your own thing and fuck everyone else)
@tylerl A properly configured ANY server is pretty hard to pwn.
I can make a damn secure Windows box if I invest the time and effort
@voretaq7 processes only need to have permission for whatever role they serve. A process may need to run as a given user, but it doesn't typically need all the permisions that user normally has. So you can lock it down so that if it gets pwned, the attacker can only do what the process was explictly given permission to do
@voretaq7 If you try to do it all with unique users, it becomes complicated as well. Say FTP needs to be able to write files owned by a given user, but it doesn't need to be able to open TCP connections -- though the user under whose ownership it saves the files DOES need to open TCP connections.
@voretaq7 right -- so how would you, with current technology, give FTP permission to act as a given user with respect to the filesystem, but not with respect to network resources?
(i type crappy)
'cause users can't save files as other users unless they're root
@tylerl At least on the BSDs it can be done with the MAC & ACL frameworks - it's ugly (probably as ugly as SELinux), but so is that particular use case :-)
I guess my objection is that while SELinux is Secure By Default it's also Bloody Fucking Unusable By Default (and making it usable is really annoying - moreso than I think it should be)
@voretaq7 I think SELinux was an attempt to give Linux all the security attributes that look good on paper, and then Redhat thought that with enough time they could make it usable. Still not there, obviously.
so now they've got this server encased in concrete and these tiny itty bitty 1mm drill bits, and they're trying to make enough itty bitty holes to make the machine usable
when all anyone ever really wants is a window screen
@tylerl fuck nukes - they blew up the damn sun and took out the rest of the solar system too (just to be thorough) :-)
@voretaq7 Ohhh... Yeah, the datacenter has a 90 minute burn rated door at each of the entry and exit points in the building. So yes, I'm good. Whew, you had me going for a minute.
@tylerl ...when did we start respecting @HopelessN00b in the first place?
@tylerl Well, may as well link my shame here, then. I thought about calling it a server, but it has an eVGA graphics card and dual IPS panel monitors. sigh
There are already many companies providing services for this, for example 24HourData (their site has a list of drives they support).
While you figure out your next steps keep these things in mind
(from Top Tips for Liquid Damaged Data Storage Devices)
Do not try to power on a flood damage...
I had the same error and my problem was the file permissions were incorrect.
chmod 755 index.php
worked for me.
I'm setting up a new system which contains a postgresql database and I'm trying to lock down which machines are able to open a connection to the database.
I'm trying to use the allow_user_postgresql_connect boolean to achieve this but so far have been unable to get it to block any connections.
...
