debaan.blogspot.com
DeBaan: October 2014
http://debaan.blogspot.com/2014_10_01_archive.html
Misc Sys Admin related notes, Linux tips, tricks, notes to self, etc. XenServer boot from iSCSI. Credits (Special thanks for pointers from:). Https:/ www.krystalmods.com/index.php? This was originally writtenf or XenServer 6.2. The NIC that is used for iSCSI boot will not be available for use for any other purposes (admin network, regular storage network, VM network, etc.). This is with Intel I350 Gbit NICs, as on a Supermicro X9DRT motherboard, which uses the ibft module. Connect up the Intel NICs.
debaan.blogspot.com
DeBaan: Make OpenLDAP work with SSL/TLS
http://debaan.blogspot.com/2014/12/make-openldap-work-with-ssltls.html
Misc Sys Admin related notes, Linux tips, tricks, notes to self, etc. Make OpenLDAP work with SSL/TLS. These instructions are for CentOS 7:. Many applications require the use of LDAP over TLS. This is also a best-practice. However, the Linux / openldap libraries and clients now perform certificate validation. Many private enterprises will not validate "out of the box". This is how we assist it. Openssl s client -host dc1.mycompany.com -port 636 awk '/BEGIN/{s=x}{s=s$0" n"}/. CAVEAT EMPTOR: the certs will...
debaan.blogspot.com
DeBaan: iSCSI stuff in Busybox on Linux
http://debaan.blogspot.com/2014/10/iscsi-stuff-in-busybox-on-linux.html
Misc Sys Admin related notes, Linux tips, tricks, notes to self, etc. ISCSI stuff in Busybox on Linux. This works with Intel I350 Gbit NICs, as on a Supermicro X9DRT motherboard, which uses the igb (1Gbit) or ixgbe (10Gbit) module as the NIC device driver, and the iscsi ibft module for iscsi boot. You'll have to change the module names if using Broadcom or other chips. As a best practice, use all lower-case named target and initiator names (some firmwares may silently convert case). Ssh-keygen -f /etc/ss...
debaan.blogspot.com
DeBaan: August 2014
http://debaan.blogspot.com/2014_08_01_archive.html
Misc Sys Admin related notes, Linux tips, tricks, notes to self, etc. Authentification is not a word. Whether one is referring to. The validation of credentials (i.e., "Yes, you are who you claim to be"). The validation of whether access should be granted based on that identity (based on role, group membership, policy, ACL, etc.) (i.e., "Yes, that user is allowed to access that resource"). The word "authentiFIcation" never comes into play. nor authentify, authentificated, etc. Links to this post. This sc...
debaan.blogspot.com
DeBaan: Get SSL Certificate Vitals in Linux
http://debaan.blogspot.com/2015/04/get-ssl-certificate-vitals-in-linux.html
Misc Sys Admin related notes, Linux tips, tricks, notes to self, etc. Get SSL Certificate Vitals in Linux. This script will let you programmatically get a certificate start date, number of days remaining, and certificate hash, suitable for example for automated checking for expired or changed certificates, as with Zabbix:. Echo "# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # ". Echo "# This script takes these parameters, in this order: #". TCP port number to connect to. Startdate=`...
debaan.blogspot.com
DeBaan: April 2015
http://debaan.blogspot.com/2015_04_01_archive.html
Misc Sys Admin related notes, Linux tips, tricks, notes to self, etc. LDAP queries for nested groups in AD. This gets all members of a domain:. Ldapsearch -b "dc=mydomain,dc=com" -D "cn=myadminaccount,ou=Users,dc=mydomain,dc=com" -H ldap:/ mydomaincontroller/ -W -x "(objectclass=user)" cn. This gets all members (of any type) of a given group, with no recursion - no handling of nested groups:. This gets all objects of type "user" that belong to a given group, recursing through child/nested groups:. Ldapse...
debaan.blogspot.com
DeBaan: December 2014
http://debaan.blogspot.com/2014_12_01_archive.html
Misc Sys Admin related notes, Linux tips, tricks, notes to self, etc. Make OpenLDAP work with SSL/TLS. These instructions are for CentOS 7:. Many applications require the use of LDAP over TLS. This is also a best-practice. However, the Linux / openldap libraries and clients now perform certificate validation. Many private enterprises will not validate "out of the box". This is how we assist it. Openssl s client -host dc1.mycompany.com -port 636 awk '/BEGIN/{s=x}{s=s$0" n"}/. CAVEAT EMPTOR: the certs will...
debaan.blogspot.com
DeBaan: XenServer boot from iSCSI
http://debaan.blogspot.com/2014/10/xenserver-boot-from-iscsi.html
Misc Sys Admin related notes, Linux tips, tricks, notes to self, etc. XenServer boot from iSCSI. Credits (Special thanks for pointers from:). Https:/ www.krystalmods.com/index.php? This was originally writtenf or XenServer 6.2. The NIC that is used for iSCSI boot will not be available for use for any other purposes (admin network, regular storage network, VM network, etc.). This is with Intel I350 Gbit NICs, as on a Supermicro X9DRT motherboard, which uses the ibft module. Connect up the Intel NICs.
debaan.blogspot.com
DeBaan: Macbook Pro fails
http://debaan.blogspot.com/2014/09/macbook-pro-fails.html
Misc Sys Admin related notes, Linux tips, tricks, notes to self, etc. Turning the thing on after initial setup. I go to install Firefox. Firefox opens the first time. .A dialogue box pops up to "do you want to make Firefox your default browser? Plug and play fail - plugged in a Microsoft Natural keyboard. .OS X failed to detect it correctly. I have to run through steps to get it to detect it correctly. .and even then, the ctrl, windows/super, and alt keys are all mixed up. Keyboard key mapping fail.
