similar to: SSH book for review

Hi folks, Is there any hope for an external source of public keys, such as given in bug 1663? I have dozens of servers, and I have to patch sshd on the vast majority of them. OpenSSH is a BSD program, but the BSD boxes are the most difficult to manage because of this. Thanks, ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: SSH Mastery

Hi, I'm attempting to test the AuthorizedKeysCommand feature with the new port of ssh-ldap-wrapper to OpenBSD. I'm running yesterday's OpenBSD-current i386 snapshot, which includes AuthorizedKeysCommand. The port of ssh-ldap-helper (at http://old.nabble.com/-new--ssh-ldap-helper-td34667413.html) contains all the bits I need, and the individual pieces appear to work once configured:

Hi, Thought there would be some interest here. I'm writing a small book on OpenSSH. Am now looking for tech reviewers. http://blather.michaelwlucas.com/archives/902 ==ml -- Michael W. Lucas http://www.MichaelWLucas.com/, http://blather.MichaelWLucas.com/ Latest book: Network Flow Analysis http://www.networkflowanalysis.com/ mwlucas at BlackHelicopters.org, Twitter @mwlauthor

Hi, I'm running Samba 4.0.8, on FreeBSD 9.2, from operating system packages, as a DC. I have a BDC, running the same. I'm using a Windows 7 workstation with "Active Directory Users and Computers" snap-in to manage usernames, passwords, etc. The workstation is part of the domain, and I'm logged on as Administrator in the domain. I can create groups and add members to them

Hi, I've been kicking this idea around, and the problem with it escapes me. I'm looking for someone to tell me why this is a bad idea. The new OpenSSH includes the AuthorizedKeysCommand, which was mostly added to let people use a command to look up user keys in LDAP. LDAP key lookup have some limitations -- specifically, the common openssh-lpk_openldap schema won't let you add

Hi, I installed Wine 20050111 on my FreeBSD 6-current (freshly updated yesterday afternoon) to play SimCity 2000. Whenever I start the program with "wine SIMCITY.EXE", the various start-up pop-ups appear, as well as the dialog asking if you want to start a new city, open an old city, etc. I get the side toolbar. The main window where you play the game is never drawn, however; it

Hi, I'm pondering building my own SSL accelerator out of a multi-CPU FreeBSD system and a crypto accelerator. What's the recommended hardware crypto accelerator card these days? Thanks, ==ml -- Michael Lucas mwlucas@FreeBSD.org, mwlucas@BlackHelicopters.org Today's chance of throwing it all away to start a goat farm: 49.1% http://www.BlackHelicopters.org/~mwlucas/

Hello security folks I (not so) recently asked for volunteers to the security documentation project. I got delightfully large number of volunteers! Thank you! Right now I have some personal (medical) issues to deal with, and I'll be out of town for the next 2 weeks. When I get back, we can move ahead at top speed. The project will have 3 parts. FAQ: This will cover any kind of basic

Is anyone currently working on updating the Kerberos documentation in the Handbook? if so, I'd like to help. If not, I'm hoping to find someone who can get me up to speed on the FreeBSD docbook extensions :-) -T -- "The truly paranoid administrator may wish to place motion detectors in the air ducts." - Practical UNIX & Internet Security, 2nd Edition

Hi list, Something went wrong this morning and we have a node ( #0 ) reboot. Something blocked the NFS access from both nodes, one rebooted and the another we restarted the nfsd and it brought him back. Looking at node #0 - the one that rebooted - logs everything seems normal, but looking at the othere node dmesg's we saw this messages: First the o2net detected that node #0 was dead: (It

Hi all, I'm running OCFS2 on two system with OpenSUSE 10.2 connected on fibre channel with a shared storage (HP MSA1500 + HP PROLIANT MSA20). The cluster has two node (web-ha1 and web-ha2), sometimes (1 or 2 times on a month) the OCFS2 stop to work on both system. On the first node I'm getting no error in log files and after a forced shoutdown of the first node on the second I can see

Hi all, I need to install an anti-rootkid in a lot of servers. I know that there're several options: tripwire, aide, chkrootkit... ?What do you prefer? Obviously, I have to define my needs: - easy setup and configuration - actively developed -- Thanks, Jordi Espasa Clofent

We are running OCFS2 on SLES9 machines using a FC SAN. Without warning both nodes will become unresponsive. Can not access either machine via ssh or terminal (hangs after typing in username). However the machine still responds to pings. This continues until one node is rebooted, at which time the second node resumes normal operations. I am not entirely sure that this is an OCFS2 problem at all

Hello, We have a four-node RHEL4 RAC cluster running OCFS2 version 1.2.8-2 and the 2.6.9-67.0.4hugemem kernel. The cluster has been really stable since we upgraded to 1.2.8-2 early this year, but this morning, one of the nodes fenced and rebooted itself, and I wonder if anyone could glance at the below remote syslogs and offer an opinion as to why. First, here's the output of

Greetings all- For whatever reason of personal insanity, I've decided to start an Asterisk bookclub. Basically, we'll pick three books every month (a users book, a developers book, and another general interest book) and then read and discuss on IRC in the #asterisk-bookclub channel. The users' book will be something related to telephony or the technology related to being an

Most people (even Eniripsa players) see Eniripsa solely as support characters. They are support characters, but to limit an Eniripsa to purely support status, one never realises an Eniripsa's true power. Alot of guides will tell you that Eniripsa are "leech fairies" for most levels, that is not the case if built properly. The important thing to remember when building a solo Eniripsa

I wrote: > Also besides the 16/32 confusion in gptmbr.S there's more weirdness > that looks like a bug: > > /* Check to see if we have EBIOS */ ... > int $0x13 > popw %dx /* restore drive */ > movb $0x08, %ah /* get CHS geometry */ > jc 1f ... [More blather _why_ this is buggy.] Today I see that

Hi all. I'm writing an installation script that uses Cygwin's bash.exe to launch an rsync.exe process, which is passed arguments. This performs an rsync over the Internet. I'd like to capture stdout to one file, and stderr to another, so that I can have a clean log of any errors. However, rsync.exe's use of file descriptors isn't jiving with my understanding of them. If I

I have probably misunderstood something (again :-(): > CEMPLOY<-TEMPLOY[!is.na(TEMPLOY)] > sum(CEMPLOY^2/length(CEMPLOY))-mean(CEMPLOY)^2 [1] 30877.28 > var(TEMPLOY,na.rm=TRUE) [1] 30981.25 Could anybody tell me, what's going on? I suppose that var=sum(x^2/N)-xbar^2 or what did I enter wrong? Thanks Matej -- Matej Cepl, matej at ceplovi.cz, Finger: 89EF 4BC6 288A

I have a relatively new test environment setup that is a little different from your typical scenario. This is my first time using OCFS2, but I believe it should work the way I have it setup. All of this is setup on VMWare virtual hosts. I have two front-end web servers and one backend administrative server. They all share 2 virtual hard drives within VMware (independent, persistent, &