How I can set a anonymous sftp user ?
I generate the ssh keys pair, set /usr/lib/sftp-server as shell in /etc/password and share the private key (id_rsa) and with this command the users get access
sftp -oIdentityFile=id_rsa public_sftp@host
is a good idea ?
in fact you can even schedule the reboot to happen at like 10pm (read man shutdown in your terminal if you're unfamiliar) - that way they should all be home with their families.
@WesleyDavid wall "Due to maintenance on the UPS this system will be going up and down like a $2 whore during fleet week for the rest of the day. Plan accordingly."
OK VMWare box - I like you, and you don't like me, but you're going to reboot. and when you come back this shit performance is gonna be 1000% improved, or else.
@Joel Nothing in the last 6 months - performance just sorta went to shit this last week or so and I haven't been able to trace a cause so I'm trying the Windows solution as a last resort :-/
@SpacemanSpiff If you establish an internal CA, and it's integrated with AD, then AD handles most of the magic for you. At that point it's more about RDP settings and less about trust relationships
ya, but surely there is a GPO way of telling them all to request a cert from the CA for this... I can see in the session host configuration that it's using an "auto generated" one
yeah, there is... looks like by default it auto-generates
we have a new senior manager here that came in from working a middle manager job with the state. I'm becoming very tempted to scream at her at the top of my lungs to stop being a moron.
I cannot abide people who assume everyone else exists to cover the minor details they can't be bothered with.
@voretaq7 i tend to believe it's more declarative like puppet. At least the configuration in docs is yaml. It uses Python and jinja2 templating system i'm already familiar with, so I'll try it. Another good reason for me is that it's going to appear in Debian soon.
(if you use the + notation for time you'll get a banner saying when the system will go down, so if you fat-fingered the time you can always cancel the shutdown and do it again :-)
@jollyroger You know I've never called shutdown when my user's timezone is different from the server's timezone - I wonder if it's smart enough to make the adjustment? :)
@David How are you creating your accounts in Google Apps? Are you syncing to ldap, or are you creating them in Apps? There is a facility in Google apps to create groups, or you can create groups in your ldap and sync that.
Oh, and I just learned we may be working on providing some kind of health services at some time in the future. I really don't want to have to deal with HIPAA.
@Zoredache that's unfair to older MTAs - sendmail has always accepted changes to the aliases DB in real-time, but the aliases db is compiled newaliases syntax-checks /etc/aliases and builds the updated db.
oh for heavens sake... Why is this bug still open after 3 years. Surely someone could have figured out something by now... projects.puppetlabs.com/issues/2014
How I can set a anonymous sftp user ?
I generate the ssh keys pair, set /usr/lib/sftp-server as shell in /etc/password and share the private key (id_rsa) and with this command the users get access
sftp -oIdentityFile=id_rsa public_sftp@host
is a good idea ?
