Hello LOPSA-Techies,
We have a research dept here that's looking for a 24-port
10Gbps-per-port switch at a good price point. They would like a managed
switch (does anyone even make a 10G unmanaged switch??) They do not have
Cisco/Juniper/HP budget ;) Can anyone suggest something that may fit
thei
I've been asked to check into the following for one of our employees who
makes frequent trips to Japan:
-
Most hotel rooms where I stay in Japan provide only a wired Ethernet
connection to the Internet; there is no WiFi connectivity in the room.
Although this is sufficient for connecting my Wi
Thanks to everyone who answered (and so quickly!) - these lists are
indeed a wonderful resource.
The user is going to use Connectify to begin with (he's tested it with
his Win7 laptop and it works for him) and is also going to pick up an
AirPort Express as well.
- Will
___
Looking into packet-shaping appliances for our WAN connection here
(100Mbps Metro-Eth)... At a former employer we used Packeteer, which I
see has now been acquired by BlueCoat... It was a good solution for us
(WAN there was NxT1, N = 3, then 4)
What questions should I be asking, and which vendor(s
...@lopsa.org
Subject: Re: [lopsa-tech] Packet shaping appliance
On Tue, May 3, 2011 at 12:35, Will Dennis wrote:
Looking into packet-shaping appliances for our WAN connection here
(100Mbps Metro-Eth)... At a former employer we used Packeteer, which I
see has now been acquired by BlueCoat... It was
Basically, to have controls in place for managing the link traffic (as
well as monitoring app usage.)
John wrote:
>I'm going to followup here and ask if you're looking for manage your
WAN links, or looking to boost performance (optimize on the >lingo) so
as to stuff more traffic down the pipes? W
http://l7-filter.clearfoundation.com/
Interesting ... thanks for the reference.
Yes, looking for commercially-supported appliance in my case...
From: David E. Smith [mailto:d...@mvn.net]
Sent: Tuesday, May 03, 2011 4:19 PM
To: Will Dennis
Cc: t...@lopsa.org
Subject: Re: [lopsa-tech] Packet
...@math.hmc.edu]
Sent: Monday, May 09, 2011 6:20 PM
To: Edward Ned Harvey
Cc: Will Dennis; Tech@lists.lopsa.org; LOPSA - New Jersey Chapter
Subject: Re: [lopsa-tech] Enable wifi access in (Japanese) hotel with no
wifi service
"ENH" == Edward Ned Harvey
ENH> This seems like it should
Hi all,
We have a group here that has acquired an InfiniBand switch (a Voltaire
[now Mellanox] Grid Director 4036E to be specific) and the requisite HCA
cards (Mellanox ConnectX-2 dual-port QSFP) and cables. The problem is,
they don't know how to configure InfiniBand, and have pushed this down
to
>From my vantage point as a "Windows guy" (I do also use and appreciate
Linux, but not really a hard-core Linux admin), this looks like "Active
Directory for Linux"... Am I correct in this analysis? If not, can
anyone help me understand this? We still are using NIS for Linux auth,
this looks like i
Hi all,
Any pointers on how to enable network printing on a Mac (recent Mac OS X
10.6/10.5) via CUPS? We do this on our Linux workstations by modifying
the CUPS configuration file /etc/cups/cupsd.conf and adding in the
following two lines:
BrowsePoll
BrowsePoll
Same way on a Mac?
Thanks,
Wi
Hi all,
I'm getting a strange error when I go to mount a NFS home directory on a
Mac here... Our NFS server's "mountd" process authenticates the mount
request, but then the kernel's "nfsd" process denies the mount with a
"request from insecure port" error. Here's an example:
Jun 28 13:51:38 home
in who admin's the NFS servers here.
-Original Message-
From: Eric Sorenson [mailto:e...@explosive.net]
Sent: Thursday, June 30, 2011 12:31 PM
To: Will Dennis
Cc: LOPSA Tech
Subject: Re: [lopsa-tech] NFS server error when trying to mount export
on a Mac
Yes, on newish Mac OS X you
We've had positive experiences with Xming -
http://www.straightrunning.com/XmingNotes/
It's OSS software (free beer/speech) so no support per se except for
community, but we've never needed any support. Not sure anyone here runs
multi-headed with it tho...
From: tech-boun...@lists.lopsa.org [ma
I am a Windows administrator (among other roles) and I agree with what Chris
states here.
The way AD works (now anyways, since Windows 2000 Server) is that you establish
a domain rooted on a DNS namespace (such as the oft-used example in MSFT
documentation, "contoso.com".) The first such domain
Also, I'd go with option (3) below if you want to keep your DNS master
on Linux; since AD uses a variety of special DNS RR's, I wouldn't feel
comfortable in having the AD DNS master server being on anything but
Windows. If you opt to use Linux DNS servers to root your AD
implementation on, you need
Hi all,
Where's a good place to get vertical cable rings for 2-post telco racks
(round threaded holes)? This is the kind of thing I'm talking about:
http://www.rackittechnology.com/shopping/solution.php?cID=243
I'd like to get rings capable of retaining 50-100 Cat5 cables.
Thanks,
Will
Hi all,
So a number of years ago we had a couple of fancy videoconferencing (VC)
systems put into our offices in NJ and CA. They were composed of
"best-of-breed" components all integrated together by a national A-V
vendor who shall at this point remain nameless. After having lived with
these syst
SRX platform I assume? How do you like it, and how was the learning
curve? What made you decide for that over Cisco? We have an upcoming
opportunity to refresh the VPN technology here (both client and
site-to-site) and I've heard good things about Juniper. We too are 100%
Cisco (except for main Int
+1
-Original Message-
From: discuss-boun...@lists.lopsa.org
[mailto:discuss-boun...@lists.lopsa.org] On Behalf Of Adam Moskowitz
Sent: Wednesday, November 30, 2011 3:26 PM
To: tech@lists.lopsa.org; disc...@lists.lopsa.org
Subject: Re: [lopsa-discuss] Email list and IRC channel for LISA
Ma
Hi Bryce,
You said, "involves VLAN tagging all possible VLANs to every server
port" -- if you are trunking to the Nexus, I'm assuming you are using
the IEEE 802.1q trunking protocol. In 802.1q, there is the notion of the
"native VLAN", which if not otherwise defined on the Nexus, is set to
VLAN 1
Hi list,
I am in need of some guidance on setting up Linux software RAID-1 on a
Dell server which came with an S300 "software RAID" controller (i.e. a
Windows-only RAID controller.)
Trying to install 64-bit Debian 6.0.3 on it, and want to set up software
RAID-1 using the two 160GB HDD's that th
Hi all,
I'm looking for a good managed (i.e. a unit with stats and
troubleshooting capabilities) fiber-to-copper meda converter. I know
there's plenty of "dumb" media converter choices out there, but was
hoping to get one that has a console conn or the like to help me
troubleshoot any possible iss
nt: Monday, January 16, 2012 10:05 PM
To: Will Dennis; t...@lopsa.org
Subject: RE: [lopsa-tech] Recommendation on managed fiber-to-copper meda
converter?
Can you use a managed switch and use its interfaces or SFP slot?
Frank
-Original Message-
From: tech-boun...@lists.lopsa.org [mailto
You guess correctly...
-Original Message-
From: Frank Bulk - iName.com [mailto:frnk...@iname.com]
Sent: Tuesday, January 17, 2012 2:33 PM
To: Will Dennis; t...@lopsa.org
Subject: RE: [lopsa-tech] Recommendation on managed fiber-to-copper meda
converter?
I'm guessing your router do
Check out the "Human Factors" section on
http://www.sage.org/field/toolbox.html
Not exactly what you are asking for, but some good tips there.
-Original Message-
From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org]
On Behalf Of Zack Williams
Sent: Thursday, February 02
The word "Cheap" does NOT apply to (real) Cisco switches.
All the "real" Cisco switches (2960 series on up) support BPDU guard
etc. The "toy" Cisco switches (ex-Linksys) I'm not so sure about.
I'd look at HP or Dell (ducking!) if you want something cheaper in a
managed switch. I personally don't
To answer your original question... Recent quotes on Cisco, HP, Dell and
(believe it or not) SuperMicro 48-port gigabit switches...
Cisco 2960G-48TC-L $3,738.82
HP E2910-48Gal $2,428.75
SM SSE-G48-TG4 $1,927.00
Dell 5548 $ 969.00
-Original Message
om: Doug Hughes [mailto:d...@will.to]
Sent: Friday, February 24, 2012 5:49 PM
To: Will Dennis
Cc: Chuong Dao; t...@lopsa.org
Subject: Re: [lopsa-tech] Loop detection/prevention.
For our money, the dell (nee force10) are quite good enough and about
1/2 or better the equivalent cisco discounted price. H
Hi all,
One of our researchers here wants to run a test against recent-vintage
HP-UX and/or AIX systems (neither of which we have.) He states:
"I'd like to run the following test program on recent AIX and HP-UX
systems. To do so, I'd need someone to type in the program, compile it,
run it, and s
Hi all,
Hopefully a quick question... How does one find files in a directory
(tree) that are in use by either NFS or SAMBA? We are migrating users'
home directories over to new NFS servers, and I want to make sure they
don't have any open connections to any files on the old server before I
change
name I cared about; I do
see a lot of smbd process open files (which is useful.) However, I don't
see anything relating to nfsd. And I know there's a lot of NFS use on
this server.
Thanks,
Will
-Original Message-
From: mja...@guesswho.com [mailto:mja...@guesswho.c
om: Tom Limoncelli [mailto:t...@whatexit.org]
Sent: Thursday, April 05, 2012 4:21 PM
To: Will Dennis
Cc: tech@lists.lopsa.org
Subject: Re: [lopsa-tech] How to find files in use by NFS or SAMBA
(CIFS)?
You won't be able to find what files are open via NFS using lsof because
NFS is at the kernel
Steven said:
>You can also use smbstatus, it will give more readable output for
samba.
Thanks! That is nicer.
>Unfortunately I don't of a way from the nfs server to see what files
may be open. I think `lsof -N' only works when run on the clients.
Appears to be so, at least on our NFS servers.
Tom said:
> Will you get stale file handles if the IP address changes or has
Sun/linux/whoever finally fixed that?
I'm being told that the stale handle problem remains...
>
>
>
I hear ya, brother. My boss says that d-day is coming, but we have to
make one more effort. Hopefully their teeth
We ran into a problem with trunking (multi-VLAN over one NIC) with
RedHat EL 6 that we haven't seen before. We do have RedHat EL 4 machines
that are running multi-VLAN over one int (with the requisite virtual
int's) that can ping any other network address (whether or not there is
an associated VLAN
d be to implement this type
of checking...
Thanks again,
Will
-Original Message-
From: David Coulson [mailto:da...@davidcoulson.net]
Sent: Thursday, May 03, 2012 11:56 AM
To: Will Dennis
Cc: tech@lists.lopsa.org
Subject: Re: [lopsa-tech] Weird problem with trunking on RedHat EL 6.x
Re
Ah, got ya -- L3 only. Well, I guess that's just the way it works then.
Thanks,
Will
-Original Message-
From: David Coulson [mailto:da...@davidcoulson.net]
Sent: Thursday, May 03, 2012 4:28 PM
To: Will Dennis
Cc: tech@lists.lopsa.org
Subject: Re: [lopsa-tech] Weird problem with tru
You might ping John Boris Sr. (newly-elected LOPSA director) about this,
I know he's an old SCO UNIX hand, and I believe he still has some
running OpenServer systems at his disposal...
His email is jboris -AT- adphila.org
HTH,
Will
-Original Message-
From: tech-boun...@lists.lopsa.org
You left out "make my breakfast each morning" ;)
It looks like you are needing two systems, a help desk app, and a
monitoring app (maybe more than one, depending on the level of detail
you need.) The company ManageEngine makes monitoring software as well as
help desk, and I believe they integrate
Hi all,
I am in need of an easy way (preferably with a web-based UI) to request
/ issue machine certs that will be used for machine ID only (i.e. not
for encryption.) I have not dealt with running an internal CA for many
years; last used the Windows CA infrastructure running on Win2003 Server
many
Hi all,
We are currently using TWiki 4.x in our company as a company-wide
web-based information and collaboration system. It's time for an
upgrade, but in the meantime, we've gotten some feedback from upper
management that they don't like the way certain things work (they don't
like to use [i.e.,r
Some more answers inline below...
From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org]
On Behalf Of Edward Ned Harvey (lopser)
Sent: Sunday, January 20, 2013 11:40 AM
To: LOPSA Technical Discussions (t...@lopsa.org)
Subject: [lopsa-tech] AD Migration
Option 1, create a n
Hi Edward,
I know the Cisco VPN Client that we use (and its successor, Cisco
AnyConnect) can be installed in a mode that launches the VPN client
before the Windows login screen comes up. (The user can decline the VPN
connection if desired.) This "VPN-before-login" functionality would
allow the
+1 on using rsync for this...
Just transferred hundreds of GB from various USB sources to my new
Synology DS413 via rsync, worked like a champ...
rsync -arv /source/of/files/ /dest/path
As Matt says, notice the trailing slash on the source, and the lack of
one on the dest -- the source path's tr
Learn something new every day... Thanks Kent!
-Original Message-
From: Brodie, Kent [mailto:bro...@mcw.edu]
Sent: Wednesday, February 27, 2013 5:20 PM
To: Will Dennis; t...@lopsa.org
Subject: RE: [lopsa-tech] Question on a Ubuntu ssh Copy and Case
Sensitivty
FYI, no need to specify the
I'll throw my two cents here in as well...
We have a Nagios 3.0.6 installation here. My take on Nagios is that
given enough time and hackery, it will do just about anything you think
of. We kind of hit a wall with it as far as monitoring services /
parameters on Windows systems, however -- we cobb
I dropped my 4S so many times (and also it rode around in my pocket caseless
enough) that the back glass edges got very chipped (amazed I didn’t star-crack
the back with some of the drops I’ve had!) and (the deal-killer) the clear
glass over the camera got a big scratch on it (obv not Gorilla Gl
QOTD:
"Editing a file in /etc directly 'by hand' should be an obscure art done
to teach internals or to scare children on halloween."
-Original Message-
From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org]
On Behalf Of Tom Limoncelli
Sent: Monday, April 22, 2013 10:36
ling permission sensitive files
____
Will Dennis writes:
Tom Limoncelli writes:
[snip]
QOTD:
"Editing a file in /etc directly 'by hand' should be an obscure
art done
to teach internals or
riginal Message-
From: Tom Limoncelli [t...@whatexit.org]
Sent: Monday, April 22, 2013 06:28 PM Eastern Standard Time
To: Will Dennis
Cc: unix_fan; t...@lopsa.org
Subject: Re: [lopsa-tech] Version controlling permission sensitive files
On Mon, Apr 22, 2013 at 3:22 PM, Will Dennis wrote:
> All w
It's technology refresh time here for some infrastructure in our main computer
room. We typically have a rackmount console unit (monitor/keyboard/mouse) in
each rack, along with (currently) a non-IP (i.e. local-only) KVM unit. We
mainly have been using Dell 2160AS KVMs, along with some older Avo
Hey, and they got to learn awk and sed sometime... ;-P
Something like Linux Mint would do nicely, I think. (let the distro flamewars
begin!)
W.
-Original Message-
From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org] On
Behalf Of John Stoffel
Sent: Monday, November 1
Will>> Hey, and they got to learn awk and sed sometime... ;-P
John> perl man, perl!
Please, think of the children...
___
Tech mailing list
Tech@lists.lopsa.org
https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Pr
See the lines in the "ethtool eth0" output where it says:
Speed: 100Mb/s
Duplex: Half
That indicates that the NIC is autonegotiating the lowest common denominator
between the switchport and the server's NIC - almost always because autoneg is
failing due to the fact that one sid
Possible solution for a homebrew rig --
http://www.ntop.org/products/pf_ring/ - base wirespeed NIC driver
http://www.ntop.org/products/n2disk/ - software offering that uses the above
that you can install to your own (adequate) hardware
Or their commercial offering --
http://www.ntop.org/produc
Hi all,
We are in need for some IPAM software to track usage of our IP space, and
associate MACs <-> IPs <-> DNS names. What do you use and do you like (or
dislike) it?
So far I've tested the open-source "Netdot" package
(https://osl.uoregon.edu/redmine/projects/netdot) which works reasonably
Another Trello user here... I use it for pseudo-Kanban (it's not perfect Kanban
software, but good enough for my needs...) I find it easy to use, and love the
mobile apps as well (I use it on iPhone, personally.)
- Will
-Original Message-
From: tech-boun...@lists.lopsa.org [mailto:tech-
Hi all,
We have been kicking tires on oVirt (was running 3.3.2 up until yesterday; now
have upgraded to 3.4.0) and there's been a parade of bugs... I like the basic
functionality, but it just won't install without a lot of wrangling, or (in
some cases) stay running. Now I have a new raft of iss
We want to restrict the hypervisor choice to either (straight-ahead)
KVM/libvirt, or VMware, because that is where our knowledge base lies. I hear
Xen is good, but really don't want to introduce yet another hypervisor
technology into the mix. Same with Proxmox VE (not wanting to use OpenVZ.)
Th
Looks like “CIFS” (actually SMB v2/v3) would be your best share-publishing
protocol here… OS X and Linux have good support for this at this point, and why
make Windows Server use a not-as-well supported protocol if you don’t have to?
If you must use NFS, looks like there is support in the produc
Which version of SMB are we talking about here? (CIFS == pre SMB 1.0, i.e. the
NT4.0 proto) MSFT is shipping SMB 3.02 now on Server 2012 R2, which is
extremely high-performance (so much so that they allow SQL Server DB file
access as well as Hyper-V VM file access over SMB 3.x as an alternative
you name it...)
(and by the way, I love, use, and appreciate *nix too; I'll use whatever the
business requires to meet its goals.)
Best,
Will
-Original Message-
From: Charles Polisher [mailto:cpol...@surewest.net]
Sent: Friday, May 23, 2014 2:13 AM
To: Will Dennis
Cc: Tim Kirby; LO
Hi all,
Trying to decide which way is the better path... We currently have 12 servers
running 10GbaseT, with the switch they are tied back to being an older Extreme
Networks Summit X650 (24 x 10GbT ports) which is now EOL. The group in question
wants to build out this server farm, and exceed 24
Hi all,
We have a research dept that has cooked up a homebrew provisioning system over
time, that uses PXE, kickstart, some custom scripts, and Puppet to provision
their bare-metal servers. While it has worked well in the past, its showing
some rust (there's been a reduction of sysadmin love to
Do check out Ansible; it was incredibly easy to get started doing useful stuff
with it, and it's done everything I've needed it to do so far without a lot of
fuss.
I found Matt Jayne's e-book "Taste Test: Puppet - Chef - SaltStack - Ansible"
very helpful in selecting a CM system; more info at:
Your questions were ours as well, and the answers to which are exactly why we
chose Ansible. We find it equally powerful for ad-hoc tasks (think
Fabric/Capistrano) or as a CM system. In the end, you have to do your own
research, but having done so, for us Ansible was a clear winner.
W.
-Or
Hi John,
The first question is, how big of an IP range (per site) do you need to
establish for each “LOM” (IPMI) subnet. Figure that out first (let’s say you
need >= 62 host IPs per site, then I’d go with a /26 mask (i.e.
255.255.255.192) per subnet. Then, if you want to have all the blocks
co
Yup, they are basically the same, but... Cisco SFP(+)'s have an proprietary ID
on the chipset that the switch/router detects, and without which the SFP(+)
will NOT work unless you use a secret command[1]. And as you see by the prices,
I'll bet you can guess why. (Cisco would say it's a QA/suppor
Hi all,
I have an Apache site running that should only be accessed via HTTPS. What we
wish to ensure is that if the site is called by it's DNS shortname (example,
`https://webserver01` rather than `https://webserver01.mycompany.com`, that the
URL request is rewritten to be for "https://webserve
Thanks Robert - was just typing up the followup, which said:
-
I guess I could cover the "http://webserver01"; URL case with changing the
httpd.conf rewrite to:
RewriteRule (.*) https://webserver01.mycompany.com%{REQUEST_URI} [R,L]
...and I guess I'm out of luck with the "https://webserver0
Hi all,
I have inherited admin duties on a Linux cluster here at work, that is getting
long in the tooth and is in need of refactoring. It's about 60 nodes, all
netbooted off a "head node", with Torque/Maui job scheduler (PBS) system and a
Gluster filesystem, but not a traditional "single image
Thanks for sharing this with us, Adam! This is where I need to go next on my
journey to Infra as Code...
Best,
Will
-Original Message-
From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org] On
Behalf Of Adam Moskowitz
Sent: Wednesday, April 08, 2015 2:17 PM
To: LOPSA T
Hi Adam,
Enter the "preseed" file -
https://debian-handbook.info/browse/stable/sect.automated-installation.html -
section 12.3.2
Not a huge fan... I find it very arcane & fiddly as compared to kickstart
(especially the disk layout stuff.) But it works.
- Will
-Original Message-
From:
Hi John,
We use BP Logix’s “Process Director”
(http://www.capterra.com/business-process-management-software/spotlight/100929/BP%20Logix%20Process%20Director/BP%20Logix)
which replaced an old OpenText-based system (E_TOOEXPENSIVE)
We store 10’s of thousands documents in it, and it implements a nu
Hi John,
Quickly with no details – you could use a virtual switch (bridge) that all of
the VMs connect to, and assign addresses from a common IPv[4|6] subnet to the
VMs. If you want the host to be on that same subnet, you’d need a virtual
interface on the host, and attach it to the same bridge.
76 matches
Mail list logo
