Crontab Sudo Shenanigans

Author Archives: TKH Specialist

Crontab Sudo Shenanigans

OK, here is a situation I haven’t seen in a while and it tripped me.  There I admitted it! We have an application that requires a restart of Apache everyday (that is a different discussion).  Regardless I gave them sudo access so they could script the job to run with their process.  Obviously I thought […]

read more

Setting up MySQL over TLS

MySQL supports session encryption using TLS. Here’s how to configure your server and client to use it. On The Server To start, you will need a server SSL certificate file and a key file, and a file containing the certificate … Continue reading

read more

Picking a Strong Password

Not sure of the origin of this but it is a great explanation of what makes a great password and why.  

read more

Ubuntu 13.04 Released Today!

Ubuntu 13.04 Raring Ringtail launched today, bringing a variety of design enhancements and performance improvements. The new Ubuntu version offers classy new application icons, a social lens, lightning-fast performance, improved window switching methods and polished preview animations in the dash. However you slice it, Ubuntu 13.04 is packed with a wide array of features for […]

read more

My MySQL Cheat Sheet

I know, man.  No, I mean I know I could use ‘man pages’!  Or I could just ‘google it’ but then it isn’t mine.  Since I do not have time for a complete brain-dump this MySql “cheat sheet” will grow over time.  Feel free to add your favorite MySql commands in the comments, if their […]

read more

Putting ‘lsof’ to use

lsof is a powerful tool that has proven very userful over the years in troubleshooting and forensic investigations.  Here are some useful lsof command examples: In this example we are looking at all the files a given process has open (pid=1655 here this is the zabbix agent) lsof -p 1767 Note you can clean up […]

read more

Changing the Volume Group Name

One of the problems with cloning a system is that it has the same volume group names as the server it was cloned from.  Not a huge problem but it can limit your ability to leverage the volume group.  The fix appears easy but there is a gotcha. RedHat provides a nice utility: vgrename If […]

read more

memcached

In support of the Kuali project. Setting up true fail over for the Kuali application servers.  Currently if a node went down, the user would need to re-authenticate.  The following procedure configures the system so it can lose a node and the users on that node will not lose their session. My part on the […]

read more

Extended ACLs

To remove permanently ACL from a file: # setfacl -bn file.txt To remove permanently ACL from an entire directory: # setfacl -b –remove-all directory.name To overwrite permissions, setting them to rw for files and rwx for dirs $ find . ( -type f -exec setfacl -m g:mygroup:rw ‘{}’ ‘;’ ) -o ( -type d -exec […]

read more

Fixing Authentication refused: bad ownership or modes for directory

When this error: Authentication refused: bad ownership or modes for directory Shows up in /var/log/messages When trying to setup public key authenticated automatic logins, the problem is a permissions one. You’ll need to perform the following commands on the user account you are trying to setup: chmod go-w ~/ chmod 700 ~/.ssh chmod 600 ~/.ssh/authorized_keys

read more