@Choppr3 - thanks for sharing. It's good to see that I'm not the only person who practices the ancient art of "several pints of beer and a curry" therapy.
We use git to track changes in /etc/ on our servers.
Administrators work as root when changing files in /etc/, and thus their commits have author
root <root@machinename>
This is not very satisfying since you cannot see which admin actually did the change.
What can we do to get the real...
@coredump This is a good reason for using a configuration management system. That way the admins can make all their changes with their user accounts, and the CMS would enforce the correct permissions when it pushes the changes down.
Just a quick note, since I hadn’t posted this yet, but the $125 discount for registering for PICC’11 early has been extended until Tuesday, April 11th. That’s discount saves you more than the hotel room costs, so you come out money ahead to register right now. Also, Tom Limoncelli wrote about the conference the other [...]
Of course he trusts them. If you don't trust your admin...then they SHOULDN'T BE AN ADMIN! The question isn't one of trust, it's one of accountability.
The allowing remote root logins is a whole different problem :)
I've seen some places go so far as to disable root logins entirely. Issuing a 'sudo -i' or similar was intended as the only way to get a root shell.
Disabling root logins entirely and using network auth requires an extra control in the event that the system loses connection to your authentication source.
Probably just a local shared account with sudo privs.
With a business process that nobody uses it, and it's limited to your DC (or whatever) and the password is in the safe, in a locked room, behind a rabid ferret :)
Looking to see if anyone knows of or is using an open source/free Talent Management System? Looking for something like Teleo (http://www.taleo.com/). Thanks in advance.
words words words...so what the hell is "taleo"? What does it do?
Why can't businesses just have a simple, "Hey, do you want to X? That's what our product does!" then explain the features. Their page looks like a bunch of blah blah.
@BartSilverstrim There's a guy who is complaining that since the admins all use the root account for any kind of maintenance work, there's no way to know who made changes. Oh, and he thinks sudo is harmful.
We use git to track changes in /etc/ on our servers.
Administrators work as root when changing files in /etc/, and thus their commits have author
root <root@machinename>
This is not very satisfying since you cannot see which admin actually did the change.
What can we do to get the real...
@Iain - Hrm, I hope that's not his logic. "Sudo has been patched, so I'll just give everyone the root password"... Same as "I've heard these locks are possible to pick, so I've decided to leave my door open."
So I was told we have VPN access to one of my sites. This is great, because I was told that it wasn't working previously. I ask for the credentials, and I'm given the public IP of the TS. facepalm
My fucking kingdom for properly firewalled site access
And I forgot to change out my nicotine patch this morning. It's going to be a long day.
@BartSilverstrim My sudo configuration is semi-dangerous (sudoers in LDAP - secured with SSL obviously - and most of the users are super-admis with ALL=ALL permissions). But it's still better than "Give everyone the root password, then scramble to change it when you have to fire someone"
Well, in that case computers are harmful. :) The point is, he finds having everyone log in as root directly is fine, but he won't use sudo because it's 'harmful'. That's where our confusion lies.
also at least he's using keys and not passing the root password around like a $2 whore during fleet week. Otherwise I would have had to open the rage gates on him
@jscott steel-toes. takes a good 6U behemoth to crush 'em.
though one time I dropped a 1U on my sneakers and it hit on a corner, and that was definitely OUCH.
@Holocryptic I think he wants to know, if he creates a file backed iSCSI LUN, formats it in Windows and puts files on it, can the NAS device share the files from that LUN as a shared folder. While the general idea is technically possible, I really doubt that particular unit can do stuff like that. I didn't dig into the docs though.
My employer is looking at installing workstations in multiple rooms that don't have any power available and we're looking for a monitor that will run over PoE. Does anyone know of one?
@SmallClanger Sounds interesting.... He was looking at a thin client with integrated 19" screen, but it draws 65w over a proprietary 60w injector. He wanted to stick with standard PoE equipment, but I don't think that's going to happen given the ~35w limitation.
"why do you consider sudo harmful" - because it allows people to gain root access without thinking. writing your normal user password to gain root privileges is - in my eyes - something that makes it too easy. When getting root via ssh login or sudo, you have to write your special root ssh key passwort or the machine's root password - one that's used rarely.
Also with sudo you can chain in PAM modules. I worked with a guy once who didn't trust himself with sudo so he had a PAM module that asked you math questions like google's mail goggles thing.
I have been hit by my inexperience with power supplies... I bought a Ablecom (SuperMicro) PWS-801-1R redundant power supply. But this is in fact a module, that is not redundant in itself, and must be plugged into ... don't know what ???
So my question is : what is needed to assemble a redundant p...
I wish the Review Edits screen had a comment section for when you Reject edits. I just rejected 3 in a row (first time with so many); they're all by new users who haven't quite grasped the Q&A thing yet. It'd be nice to give a quick explanation as to why the edit was rejected and how they should comment on the Q or A, or post their own A, or whatever..
@ChrisS I've rejected several edits where new users have added their own comments at the bottom of an answer/question. Was that the case with these three?
The third one was that a linked page in an answer has updated information; I could have let that one slide, but it really didn't change the value of the answer knowing that there was more recent information available.
Can someone explain this response to me? "At this point, from the filter, there's not much you can do. But, you can try blocking HTTPS facebook at your DNS level."
@BartSilverstrim yes, but if you type something it doesn't know it does a help thing instead of just sending the damn command that you are using to make a joke
Linux uses partitions as swap space, unless you are using something like swapd. If that's the case, just configure it to create the files on other place, but I suspect that this is not the case and there's something else occupying the space.
To find really what is using your space, use df to see...
I have to admin a mysql server, and was hoping people could give a few of the top reasons a mysql server might stop responding?
Vague question I know, but I'm looking to read up on preventative measures as a learning experience before I get some problems of my own.
What are common reasons a mys...
How common is for companies to let many users share only one public ip address?
I hope the answer is "not very common" since I'm developing software that depends on the ip number being pretty much unique.
Maybe a newbie question but we are students and trying to learn fast.
We have a server set up. It is a VM in VirtualBox. We share the physical machine with a few other groups but nothing is production so performance is fine.
However, we have Active Directory set up with 4 accounts. All are...
The NAT question? Yeah. That's pretty shocking -- actually its a pretty reasonable question, if you don't know then you don't know, right? It's just that something so fundemental is the first question you ask before you do anything, not when you're most of the way through doing the work as I get the impression that guy is
@Holocryptic NO LIE! I bought Spaceballs on iTunes a while back b/c I gave my DVD to someone, and when you search for spaceballs the animated series comes up too
@Holocryptic it wasn't that big of a deal, just some joe schmoe complaining (in colorful language) at @Chopper3's answer to a question about a cisco switch config. @Chopper3 basically told the guy that he should go find a CCNA to do the config becuase the OP wouldn't have a prayer of doing it properly himself.
I'm attempting to set up a new Cisco ASA5505, and the last step is getting the IPSec VPN working.
I've followed the wizard within ADSM (I'm running ASA version 8.3 and ASDM version 6.3), but I have so far been unsuccessful at getting any clients to connect to the VPN. So far, I've tried connecti...
@coredump I'm disappointed that hist list of 5 things wrong with the company didn't include: 1. A zillion different products/SKUs, most of which all do the same thing +/- a single obscure feature. 2. Worst documentation orginization in the industry. 3. Treating customers like money cows waiting to be milked. 4. The only tech website worse than HP's. 5. Confusing and obscure marketing messages; lack of "products" to back "solutions", and inability to properly characterize what products they do sell
We use git to track changes in /etc/ on our servers.
Administrators work as root when changing files in /etc/, and thus their commits have author
root <root@machinename>
This is not very satisfying since you cannot see which admin actually did the change.
What can we do to get the real...
Looking to see if anyone knows of or is using an open source/free Talent Management System? Looking for something like Teleo (http://www.taleo.com/). Thanks in advance.
My employer is looking at installing workstations in multiple rooms that don't have any power available and we're looking for a monitor that will run over PoE. Does anyone know of one?
I have to admin a mysql server, and was hoping people could give a few of the top reasons a mysql server might stop responding?
Vague question I know, but I'm looking to read up on preventative measures as a learning experience before I get some problems of my own.
What are common reasons a mys...
How common is for companies to let many users share only one public ip address?
I hope the answer is "not very common" since I'm developing software that depends on the ip number being pretty much unique.
Maybe a newbie question but we are students and trying to learn fast.
We have a server set up. It is a VM in VirtualBox. We share the physical machine with a few other groups but nothing is production so performance is fine.
However, we have Active Directory set up with 4 accounts. All are...
