Re: [lopsa-discuss] iSCSI in practice

2009-03-04 Thread Robert Hajime Lanning
On Wed, 2009-03-04 at 01:19 -0600, Brad Knowles wrote: > Frankly, I've heard much worse comments on campus, told by people with > far less consideration of who might happen to be standing around nearby. > > If upper management wants to gun for someone who's been criticizing them > for their stup

Re: [lopsa-discuss] licensing

2009-03-13 Thread Robert Hajime Lanning
On Fri, 2009-03-13 at 16:31 -0500, rac...@mcs.anl.gov wrote: > If I know that that "root" shouldn't be the root password, > what prevents me from setting it to abc123?It's just > as bad, but that wasn't the question on the test, so is it ok? Damn, now I need to change my password... and the co

Re: [lopsa-discuss] Buy More Internet versus Mitigating Internet Use

2009-04-29 Thread Robert Hajime Lanning
I put in Packeteer PacketShapers (now BlueCoat PacketShapers). With a policy/proceedure for adding business required external hosted applications/web sites. Everything else dropped into a general use category, except for streaming media. The big thing is that without shaping, you get bad performa

Re: [lopsa-discuss] SMB Load Balancing

2009-04-30 Thread Robert Hajime Lanning
Atom Powers wrote: [snip] > Hardware Load Balancers that I have heard about: > Netscaler > F5 > KEMP Brocade's ServerIron Cisco ACE ServerIron is supposedly pretty good. No idea about Cisco ACE. ___ Discuss mailing list Discuss@lopsa.org http://lopsa.or

Re: [lopsa-discuss] SMB Load Balancing

2009-04-30 Thread Robert Hajime Lanning
Brad Knowles wrote: > One thing that both of these have in common is that they are primarily > designed to deal with HTTP and HTTPS, and don't do so well on other > protocols. We ended up creating a trivial "web page" that could be > monitored by the load balancing switches, and we would have s

Re: [lopsa-discuss] Handling files on a fileserver left by users who have resigned

2009-10-23 Thread Robert Hajime Lanning
Dave Close wrote: > We should just accept that a universal identifier is not practical, and > perhaps not desireable. Let's just assign everyone an IPv6 address and be done with it... :P ::::::: -- END OF LINE --MCP

Re: [lopsa-discuss] Handling files on a fileserver left by users who have resigned

2009-10-23 Thread Robert Hajime Lanning
Yves Dorfsman wrote: > When you think about it, the id has to be unique within a specific domain, > within a specific company. Well, most companies have a unique staff id which > typically isn't confidential (you can't get access to anything confidential, > with just that id). Why not use that ?

Re: [lopsa-discuss] If you only had 5 minutes to secure a server ...

2010-02-03 Thread Robert Hajime Lanning
Tracy Reed wrote: >> The proper way to do it (Plan A) is to use keys only, but ensure >> your keys are themselves protected by password. > > Ensure how? I think making it clear that creating an unencrypted key > is a firing offense is good enough but others disagree and insist on > technical measu

Re: [lopsa-discuss] If you only had 5 minutes to secure a server ...

2010-02-03 Thread Robert Hajime Lanning
seph wrote: > Tracy Reed writes: > >> I really want to avoid having to purchase proprietary SecureID >> tokens. Anyone have reasonably priced PKI tokens they are using that >> work well with Linux? > > My auditor mentioned that openvpn can meet the 2 factor requirement. It > can be configured to

Re: [lopsa-discuss] School spies on children at home with webcams

2010-02-18 Thread Robert Hajime Lanning
Brian Mathis wrote: > As much as I like Cory Doctorow, you should instead read the Ars > Technica version > (http://arstechnica.com/tech-policy/news/2010/02/school-under-fire-for-spying-on-kid-via-webcam-at-home.ars) > > where they actually tried to do a little bit of journalism. They point >

Re: [lopsa-discuss] IPv6 logistics

2010-04-18 Thread Robert Hajime Lanning
Robert Brockway wrote: > On Tue, 6 Apr 2010, Edward Ned Harvey wrote: > >> If we only cared about the client/server model, IPv4 and NAT would be just >> fine, now and for decades to come. The real value-add of IPv6 is peer to >> peer. But in order for that to be logistically possible, a client n

Re: [lopsa-discuss] SAGE Sysadmin Salary Survey and salaries over $200, 000

2010-05-05 Thread Robert Hajime Lanning
unix_fan wrote: > 5. Travel, part 3 - danger bonus: If work involves travel to a State > Department declared combat zone, there are typically significant > bonuses applied. Hint: the list is small - don't assume that car > bombs, armed conflict, or anti-American demonstrations every Friday > mean t

Re: [lopsa-discuss] Version control system for small group

2010-05-06 Thread Robert Hajime Lanning
WHAAAT is your favorite editor? EMACs no! vi! AAAHH On 05/06/10 12:25, Brian Mathis wrote: > Please don't start a "which VCS is better even though I know it's git" > war. All we need to talk about are which options are out there, which > I believe we have already done, and t

Re: [lopsa-discuss] Performance question re. NFS vs CIFS on Linux

2010-05-07 Thread Robert Hajime Lanning
Doug Hughes wrote: > Jonathan B Bayer wrote: [snip] >> Each virtual system will have a relatively small partition to boot >> from. The data partition (/var) will be accessed via either NFS or >> CIFS. The exported filesystems will be on the CentOS server, and >> exported to each individual virtua

[lopsa-discuss] Re: SAGE Sysadmin Salary Survey and salaries over $200, 000

2010-05-07 Thread Robert Hajime Lanning
Example of the "Master of all trades" that I have been seeing, since the economic down turn... -- Location: San Mateo, CA Area Code: 650 Tax Term: CON_HIRE_CORP CON_HIRE_IND CON_HIRE_W2 Pay Rate: Market Length: 3-4 Months Position ID: 945212 Dice ID: hcg Tr

Re: [lopsa-discuss] Version control system for small group

2010-05-09 Thread Robert Hajime Lanning
Gregory K. Ruiz-Ade wrote: > * The distributed nature of hg encourages frequent checkins to >your local repository without impacting users pulling from >a "central" repo. > > * When you're ready to share your changes with others, you can >either push to a "central" repo or tell te

Re: [lopsa-discuss] IT Policy Discuss

2010-05-21 Thread Robert Hajime Lanning
Edward Ned Harvey wrote: > The reason why I'm unwilling to simply choose a policy as I see fit, and > cram it down their throats, is because I expect compliance without using > punishment as the motivation factor. This necessitates that people feel > some voluntary commitment and understanding of

Re: [lopsa-discuss] cfengine vs. puppet vs. chef

2010-05-22 Thread Robert Hajime Lanning
Yves Dorfsman wrote: > Has anybody done, or can point me to a *rational* comparison between those > guys, or even one including commercial products? Here is the configuration management panel from Open Source Bridge 2009. - Luke Kanies from Reductive Labs for Puppet - Brendan Strejcek of Cfengine

Re: [lopsa-discuss] IT Policy Discuss

2010-05-23 Thread Robert Hajime Lanning
Ryan Pugatch wrote: > So, here's what I propose to you as a solution: > > Rather than writing out a long list of rules, regulations, etc that your > employees will ignore, focus instead on education. > > Example: > > Policy: Your password must be at least 8 characters long and include > let

Re: [lopsa-discuss] IT Policy Discuss

2010-05-24 Thread Robert Hajime Lanning
Brian Mathis wrote: > Providing reasoning and explanation is a good thing, but you also need > to be careful of getting into a discussion or debate. When conveying > the policies, people need to know that these are the policies, here's > why, and that's how it is. You are providing reasoning to g

Re: [lopsa-discuss] Manipulating EXT2 image files

2010-06-03 Thread Robert Hajime Lanning
Doug Hughes wrote: > Adam Moskowitz wrote: >> Does anyone know of other tools that will let me populate an EXT2 image >> file, again, *WITHOUT* mounting the file? > Oh, definitely take a look at knoppix and/or unionfs. It does what I > think you are looking for. It works with an original ISO and

Re: [lopsa-discuss] What do you ask when hiring a network admin?

2010-06-16 Thread Robert Hajime Lanning
Luke S Crawford wrote: > There is an alternative. It's contract to hire. If you are worth > me wasting a few hours talking to you, you are worth me paying you for > a day or two of work. (and, after that, if you seem okay, a week or a > month worth of work. If it turns out you aren't any good,

Re: [lopsa-discuss] what load balancer do you use?

2010-06-25 Thread Robert Hajime Lanning
On 06/25/10 13:52, Chuong Dao wrote: > Not really. I just thought it would be nice to manage one single cert for all > nodes. I guess I am just being lazy. > I'll look into F5, Kemp, and Barracuda. Cisco is overkill right now. Nice to > know people are still using LVS. Have a nice weekend, all.