@Adrian Okay, finally got back into writing. Wrote I think over 1,000 words, also polished some of the posts. Finished the third one. Organized more thoughts. It's coming together!
@WesleyDavid Sweet. Looking forward to it. Especially for contrasting your advice with the mountain of applications I've waded through the past 3 weeks.
Look on the bright side, @WesleyDavid. Tomorrow, when my votes refresh, I'll find a way to trigger the fraud detector and you'll probably lose a few hundred.
SSL is ip based. You first start by encrypting even before starting to say what url you want.
You can't bind multiple SSL website to the same IP/ort, except for wildcard websites (*.mydomain.com).
In your case you need to use different ip, and so serveralias become useless.
and you would need ...
Even without SNI, it's not like Apache's checking the subject name of the cert that it's presenting and using that as the host header instead of what the client sent.
I'm having a hard time finding information about whether implementing ipv6 or using a stretched vlan is a better option for geographically dispersed sites is better. Does anyone know:
Problems with stretched vlans (mac address broadcasting etc)
costs for devices to solve those problems
pros fo...
In the interest of full disclosure, I'm in a Microsoft "shop" [district]. 99%+ Windows clients. Of the ~50 servers, 40+ are Windows 2003/2008R2. The vast majority of those running onto of ESXi.
Damn you auto correct.
switching...
@WesleyDavid Crap, that should read "85% off list", either way service/support was a proper rogering.
General Linux messages are logged at /var/log/messages
You may have a number of logs named messages* - the one that is simply named messages is the latest one. The other logs have a number after them that signify the date they were closed. For example, some of the logs on one of my servers are ...
I'm thinking of anwering and channeling Borat:
"YES IS RIGHT! - I LIKE! IS NICE!"
@ShaneMadden I knew it was a long shot to have him sift through messages but - hey - I had to throw him something. Maybe he'll learn hisself a thing or twain.
@ShaneMadden That was my edit - the post made even less sense without it. He just jumped right in and had facts and considerations spread out all over the place.
I don't understand when people say "I want to do things with stuff and make it work and have other things happen and then it has to have widgets and sprockets!"
I work as an IT guy in a law firm. I am recently asked to make a system wherein all the outgoing emails coming from our server to our clients will be put on hold first and wait for approval before it gets sent to the client.
Our mail server uses Exim (that's what it says in cPanel). I am plannin...
I'm using the code below to edit the image in a webpart:
$webPartCollection = $web.GetWebPartCollection("default.aspx","Shared")
$imagePart = $webPartCollection | Where-Object { $_.Title -eq "Site Image"}
$imagePart.ImageLink = "web/PublishingImages/myPicture.jpg"
$webPartCollection.SaveChanges...
I have a CentOS 5.5 server hosted in a remote data center. I usually access this server from a Red Hat Enterprise Linux 5 server using the ssh command. Now my organization has implemented a proxy server, this is not allowing me to connect to the VPS server.
I see the following error using th...
ARGH The person who built the database server didn't even install 'lsof'.
I think I need to go in the server room and repeat "They're wonderful people and I musn't hurt them" for about 15 minutes.
Because obviously the key to security is not installing any system tools packages. Securing ports with IPTables or updating the installed packages can't be of any benefit there.
@Adrian I had to debug network issues involving MySQL this week for a client. The server is old Ubuntu and packages aren't available. No tcpdump, no mysql client, and no lsof.
I want to compile the latest version of Red Hat Enterprise Linux 6. I downloaded all SRPM from the Red Hat's ftp server. My question is how I can compile all packets now?
Best wishes
That's why I hate consulting. Client calls up with "Problem A", turns into "Problems A, B, C, D, E, and F".... And everything else at Client is strung together with ducttape.
NO! Client calls back. SSL errors. Oh? Check it in SSL... yup, that's a problem. Wrong site ID... they're hosting other SSL sites on this thing. Go to server vendor's control panel... find VM and see list of associated addresses. SSH back in and check ifconfig. Only one address. Check /etc/network/interfaces... many addresses. ifup eth0:0... SIGIOCTL something or other doesn't work
In random frustration, try ifup eth0:0... seems to run some other scripts that are related to the VM hosting provider and the address is assigned. Good. Log out.
Servers get rebooted after a few days... client calls back. MySQL errors again.
Login, beat my head against the wall after verifying that MySQL daemon is running, firewall rule is in place, etc. Become annoyed again at the lack of tcpdump, lsof, and mysql client and inability to install them without some real jumping of hoops. See that iptables rule is never registering packets. Confirm I can connect to other MySQL servers. Confirm that with appropriate iptables rule, I can connect to right MySQL server.
Check route. Make sense... eventually open MySQL to the whole internet for a few minutes to debug... machine can now talk to server. Urgh. Assume client must somehow be using a different IP... check MySQL binding, check client route again... check each interface... ah, one of the extra interfaces for SSL now has the same subnet mask as the MySQL server. Add new firewall rule, confirm site is working in SSL. Log out. That's where I am now. :)
**From the RPM build question** :
This is only for one package. There are 3000+ packages. I cannot do this every time. – Peter Penzov 3 mins ago
@PeterPenzov Shell script. – Jeff Ferland just now edit
3 hours of my life gone now to 1. Buggy software (I've ranted about this application before, they're still programming in FoxPro, OLE DB, set sail for fail) and 2. People who apparently have a very difficult time communicating what they're looking for (which is where most of that 3 hours went) =[
I would like to test fake load on the server, I'm looking for some burn-in or benchmark command line utility that would generate CPU load on the system.
I would like to be able to burn-in only CPU (no harddisk load, network and co) and that I would be able to set the period in which the load wi...
@Iain I simply love that serverfault.com/q/231161/73435 has almost 150 upvotes. While all the various answers turned it into a quasi-shopping question, the drawing makes it so totally full of Cake and Win.
@Joel Because the previous shit sandwich was a fscking singularity of stupidity and misery. Was effectively broken on anything newer than 2.6.18, but managed to mostly work until it decided to crash the servers every 60 days.
@Joel A hobbyist VPN project that was open-sourced by a guy named Steinmetz back in the late 90s back when he was working on it as a grad student project.
Yeah, our previous boss based our entire WAN VPN infrastructure on a some guy's grad student project.
A classic case of download something, compile it, shove it into place and see if it works, and then try to scale it far beyond what any reasonable person would consider sane.
Are you absolutely sure that IPSec is a requirement for your implementation?
IPSec on IPv4 is difficult enough to set up with good tools. To be intentionally attempting to do so manually without an excellent understanding of the IPSec functionality is simply a recipe for pain.
You will find ma...
@Joel For most small and smaller-medium MS Shops, Hyper-V is all they'll ever want... Larger installations are best just going straight for ESX from what I've seen; though several "Cloud" providers run Xen.
I get really annoyed by people who try to claim that you should put effort into their question because it's a 'challenge'.
@Zypher It's Ubuntu 9.10 so no patches since last June, and our management is very anti-patch/update because it breaks things. I routinely get wrapped on the knuckles when I patch something and it doesn't work.
@Joel Also, here I said that I only got one work offer through SF, well, overnight I received two requests to help out as a result of my activity on SF in the last few days. =)
There's another forum I hang on a little bit, I had to share this gem that just showed up in the "Welcome Thread" (which, BTW, is explicitly marked as only for saying hello and telling a bit about yourself. It is NOT a thread to post support questions in.)
Hello to everyone on this forum..My name is Judy and I am excited to be a part of this site. I am a professional cake decorator of 30 years..I also do little on computers and usually am eager for more to learn. I am a little confused (of course) as to how I would ask this question on the 1st posting or just look for a link to answer.. (If I do not get a reply, I will search it in the forum after a few days of waiting),
Nevertheless, here is the question: I received a new Dell computer running Windows 7 and I forgot the supervisor pwd..I have no way of knowing how to get in and change it...…
"I am a professional cake decorator of 30 years..I also do little on computers"
"I am a professional cake decorator of 30 years..I also do little on computers"
"I am a professional cake decorator of 30 years..I also do little on computers"
This looks kinda cool to manage AWS stuffs. All purdy and Web 2.0. madeiracloud.com
It's like SysAdmining ran through a Fischer-Price factory and then wrapped in acronyms to be opened on Christmas morning by eager developers in their footie pajamas! So in other words, it's devops.
@WesleyDavid I've been horse riding today and my legs feel it. I'll be out on the bike hangovers and/or weather permitting. Hopefully I'll be good for Sunday or Monday. oe preferably both.
@Zypher The really weird thing though is that Gnome logins start failing spectacularly at exactly 32000. Not 32768. Exactly 32000 with 3 zeros in it. There's obviously some engineering level stuff in there that I'm not aware of. Maybe I'll get a chance to dig into that this weekend.
Hey, opinion poll: If you had a small company with a couple locations, and knew you'd be expanding to a few more locations in the future, what would you think about if someone said "OK, lets assign a /16 per location out of 10/8" -- Angry? Meh? Supportive?
@AaronCopley Our Ubuntu 9.10-based LTSP servers have a problem where Gnome sessions start to fail spectacularly when the file count in /tmp hits exactly 32000 combined files and directories.
@freiheit Oooh. I've never even heard of that property. I'll check that one I get done with the next interviewee. Hope that this one turns out, we've only had 1 other good one.
@Adrian Oh, ok. I had a weird problem this week with big UIDs killing Gnome, but they were 10-digits. (Don't ask... Not my doing.) Any way, /var/log/lastlog is a sparse file and indexes on UID. Bigger UID's result in more allocated space. So, even though actual space used was < 1MB and df reported tons of free space, a small /var/log volume was preventing Gnome login.
So I earn my first "Good Answer" badge on stolen content from StackOverflow. I'm not sure if I should be annoyed or proud. serverfault.com/questions/377221/…
@WesleyDavid You got there first; others had equal opportunity; and you referenced your source... I don't see anything wrong with it; but it's your choice.
I remember some documentation mentioning, "UIDs higher than 16-bit may not be usable on all systems," which is manual-weasel for "old crap can break", but didn't tell me what kinds of old crap.
Well it is regarding Google Chrome! I have a webpage, that actually is on another computer to wich I'm connected via TeamViewer VPN. No there is no problem in that, since webpage openes and everything is great, but it openes in every browser except Chrome! In Chrome I get Error: Can get for blablabla.com host assigned IP address and `DNS server response: Name Error: The domain name does not exist. Hope there will be no kicking. I would be glad thou if you point me in the right direction.
Should I ask this question in more detail at SF or some place else?
As you probably know Google Chrome has its own internal DNS cache. Is there a way to clear it without having to wait for the time out or close the browser?
Well, anyway, if you look at your network profile, you see that you have a StackExchange-wide reputation of 2k. That's what shows in chat. For example, I have 10K on ServerFault, but it shows 16K in here because of my total SuperUser, Unix.SE and etc. accounts.
@Eugene Do what? I really was just joking with you but a packet captures not a bad idea. You could see what the browser is really doing or not doing. Also, is the web server getting any hit on that side?
I do have a soft spot for Mr. "I use IIS SMTP services to send email to my 400,000 MMORPG members." who comes in once in a while and wonders why he's getting blacklisted and also why there seems to be a stunning lack of DKIM plugins for IIS SMTP.
That and lovesh. "I want to make Facebooks. How to LAMP a server?"
SSL is ip based. You first start by encrypting even before starting to say what url you want.
You can't bind multiple SSL website to the same IP/ort, except for wildcard websites (*.mydomain.com).
In your case you need to use different ip, and so serveralias become useless.
and you would need ...
I'm having a hard time finding information about whether implementing ipv6 or using a stretched vlan is a better option for geographically dispersed sites is better. Does anyone know:
Problems with stretched vlans (mac address broadcasting etc)
costs for devices to solve those problems
pros fo...
I'm using the code below to edit the image in a webpart:
$webPartCollection = $web.GetWebPartCollection("default.aspx","Shared")
$imagePart = $webPartCollection | Where-Object { $_.Title -eq "Site Image"}
$imagePart.ImageLink = "web/PublishingImages/myPicture.jpg"
$webPartCollection.SaveChanges...
I have a CentOS 5.5 server hosted in a remote data center. I usually access this server from a Red Hat Enterprise Linux 5 server using the ssh command. Now my organization has implemented a proxy server, this is not allowing me to connect to the VPS server.
I see the following error using th...
I want to compile the latest version of Red Hat Enterprise Linux 6. I downloaded all SRPM from the Red Hat's ftp server. My question is how I can compile all packets now?
Best wishes
I would like to test fake load on the server, I'm looking for some burn-in or benchmark command line utility that would generate CPU load on the system.
I would like to be able to burn-in only CPU (no harddisk load, network and co) and that I would be able to set the period in which the load wi...
Are you absolutely sure that IPSec is a requirement for your implementation?
IPSec on IPv4 is difficult enough to set up with good tools. To be intentionally attempting to do so manually without an excellent understanding of the IPSec functionality is simply a recipe for pain.
You will find ma...
As you probably know Google Chrome has its own internal DNS cache. Is there a way to clear it without having to wait for the time out or close the browser?
