From geektoyz at gmail.com Tue Dec 1 07:33:21 2015 From: geektoyz at gmail.com (Godwin Pena) Date: Tue, 01 Dec 2015 12:33:21 +0000 Subject: [GRLUG] Mailing list link on Wiki In-Reply-To: References: <788C008C-2593-430E-B367-A11B6F188DCC@gmail.com> Message-ID: Thanks Ben. On Mon, Nov 30, 2015, 10:39 PM Ben Rousch wrote: > Fixed > On Nov 30, 2015 9:35 PM, "Godwin" wrote: > >> He he. We need the link to the mailing list adjusted/changed on the wiki >> site/page. I don't remember who maintains the wiki. >> >> On Mon, Nov 30, 2015, 9:25 PM Justin Denick >> wrote: >> >>> yessir, he's from City, right thar on meng street. >>> >>> >>> Domain Name:GRLUG.ORG >>> Registrant ID:CR35915986 >>> Registrant Name:Godwin Pena >>> Registrant Organization: >>> Registrant Street: 1 main st. >>> Registrant City:city >>> Registrant State/Province:Florida >>> Registrant Postal Code:00958 >>> Registrant Country:US >>> Registrant Phone:+1.010555121 >>> Registrant Phone Ext: >>> Registrant Fax: +1.123123123 >>> >>> -j >>> >>> l33t samurai >>> >>> On Nov 30, 2015, at 8:25 PM, Godwin wrote: >>> >>> Hi gents (and ladies), >>> >>> Please chime in if you maintain our wiki page. Kyle just pointed out a >>> quick edit needed. >>> >>> thanks, >>> G- >>> >>> _______________________________________________ >>> grlug mailing list >>> grlug at grlug.org >>> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug >>> >>> _______________________________________________ >>> grlug mailing list >>> grlug at grlug.org >>> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug >> >> >> _______________________________________________ >> grlug mailing list >> grlug at grlug.org >> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug >> > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Thu Dec 3 12:30:40 2015 From: lvl at omnitec.net (L. V. Lammert) Date: Thu, 3 Dec 2015 11:30:40 -0600 (CST) Subject: [GRLUG] rsync/rsnapshot Message-ID: Trying to setup replication of an rsnapshot archive, .. the base backup is running fine, *but* when I try to replicate it, it farkles the timestamps: Using: rsync -azH --delete --numeric-ids Results in the replicated copy: # ll total 12 drwxr-xr-x 14 root root 4096 Dec 3 11:26 daily.0/ drwxr-xr-x 14 root root 4096 Dec 3 11:26 daily.1/ drwxr-xr-x 14 root root 4096 Dec 3 11:26 daily.2/ Note that the timestmps are the time of the replication, .. the "-a" seems to not be working correctly?? TIA! Lee From mfarver at mindbent.org Thu Dec 3 12:45:56 2015 From: mfarver at mindbent.org (Mark Farver) Date: Thu, 3 Dec 2015 12:45:56 -0500 Subject: [GRLUG] rsync/rsnapshot In-Reply-To: References: Message-ID: I think that may be expected, depending on how your ll alias is setup. do a `stat` on the files to see all timestamps. I think ctime will always change (if the copy was across filesystem boundaries since a new inode was created) but rsync should try to fixup atime and mtime. On Thu, Dec 3, 2015 at 12:30 PM, L. V. Lammert wrote: > Trying to setup replication of an rsnapshot archive, .. the base backup is > running fine, *but* when I try to replicate it, it farkles the timestamps: > > Using: > > rsync -azH --delete --numeric-ids > > Results in the replicated copy: > > # ll > total 12 > drwxr-xr-x 14 root root 4096 Dec 3 11:26 daily.0/ > drwxr-xr-x 14 root root 4096 Dec 3 11:26 daily.1/ > drwxr-xr-x 14 root root 4096 Dec 3 11:26 daily.2/ > > Note that the timestmps are the time of the replication, .. the "-a" seems > to not be working correctly?? > > TIA! > > Lee > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From awilliam at whitemice.org Mon Dec 7 08:45:10 2015 From: awilliam at whitemice.org (Adam Tauno Williams) Date: Mon, 07 Dec 2015 08:45:10 -0500 Subject: [GRLUG] rsync/rsnapshot In-Reply-To: References: Message-ID: <1449495910.2929.2.camel@whitemice.org> On Thu, 2015-12-03 at 11:30 -0600, L. V. Lammert wrote: > Trying to setup replication of an rsnapshot archive, .. the base > backup is > running fine, *but* when I try to replicate it, it farkles the > timestamps: Permissions?  Only root@ or a context holding some role [I cannot recall] can *modify* the ctime/mtime of a file;  otherwise anyone could play merry hob with your filesystem. This is especially an issue if you are using network mounted file- systems where one side may recognize the god-powers of a context but they do not translate to the other. -- Adam Tauno Williams GPG D95ED383 Systems Administrator, Python Developer, LPI / NCLA From lvl at omnitec.net Tue Dec 8 12:28:39 2015 From: lvl at omnitec.net (L. V. Lammert) Date: Tue, 8 Dec 2015 11:28:39 -0600 (CST) Subject: [GRLUG] LetsEncrypt ONLINE!! Message-ID: Public Beta is available as of 3 December: https://letsencrypt.org/2015/12/03/entering-public-beta.html Has anyone implement yet? Lee From megadave at gmail.com Tue Dec 8 12:46:34 2015 From: megadave at gmail.com (Dave Chiodo) Date: Tue, 8 Dec 2015 12:46:34 -0500 Subject: [GRLUG] LetsEncrypt ONLINE!! In-Reply-To: References: Message-ID: Is there a way to have a cert issued like any other authority by just submitting a CSR and getting the cert back? And not having to install some special "software" ? On Tue, Dec 8, 2015 at 12:28 PM, L. V. Lammert wrote: > > Public Beta is available as of 3 December: > > https://letsencrypt.org/2015/12/03/entering-public-beta.html > > Has anyone implement yet? > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug -------------- next part -------------- An HTML attachment was scrubbed... URL: From kc8zpq at gmail.com Tue Dec 8 13:06:22 2015 From: kc8zpq at gmail.com (Thomas Wodarek) Date: Tue, 8 Dec 2015 13:06:22 -0500 Subject: [GRLUG] LetsEncrypt ONLINE!! In-Reply-To: References: Message-ID: There has been discussion on the LE dev list about web UIs ( https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/CA%2B65OsrZSyX0DpGn5CsrOVbz6TUWv7x9EWdOV9wMoHoDn8oRcg%40mail.gmail.com), the latest of which is https://gethttpsforfree.com. The installed client part is to allow automation, which is pretty much the reason behind the LE project. Is there a way to have a cert issued like any other authority by just submitting a CSR and getting the cert back? And not having to install some special "software" ? On Tue, Dec 8, 2015 at 12:28 PM, L. V. Lammert wrote: > > Public Beta is available as of 3 December: > > https://letsencrypt.org/2015/12/03/entering-public-beta.html > > Has anyone implement yet? > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug _______________________________________________ grlug mailing list grlug at grlug.org http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug -------------- next part -------------- An HTML attachment was scrubbed... URL: From chris at wieringafamily.com Tue Dec 8 15:21:50 2015 From: chris at wieringafamily.com (Chris Wieringa) Date: Tue, 8 Dec 2015 15:21:50 -0500 Subject: [GRLUG] LetsEncrypt ONLINE!! In-Reply-To: References: Message-ID: I ran through the process of cloning the client and retrieving a certificate for my home web server. Overall, it wasn't that much of a hassle. The client performs a 3rd-party verification of your website / domain-name by having temporarily hosting a webserver on either port 80 or 443, or by writing into your webroot a verification file. It wrote into the .well-known/acme-challenge/ directory in my webroot for that process. I get a bit annoyed with the default mantra of "we'll do everything for you" with the client wanting to reconfigure Apache automatically, but it's simple enough to skip that then modify my Apache config for the certificates manually. Likewise, it looks like CSRs can be sent as well if you want to do that manually. Since they issue 90 day certificates, it seems like using the client and a cron entry seems like the easiest way to keep this working long-term. Chris On Tue, Dec 8, 2015 at 1:06 PM, Thomas Wodarek wrote: > There has been discussion on the LE dev list about web UIs ( > https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/CA%2B65OsrZSyX0DpGn5CsrOVbz6TUWv7x9EWdOV9wMoHoDn8oRcg%40mail.gmail.com), > the latest of which is https://gethttpsforfree.com. > > The installed client part is to allow automation, which is pretty much the > reason behind the LE project. > Is there a way to have a cert issued like any other authority by just > submitting a CSR and getting the cert back? And not having to install some > special "software" ? > > On Tue, Dec 8, 2015 at 12:28 PM, L. V. Lammert wrote: > >> >> Public Beta is available as of 3 December: >> >> https://letsencrypt.org/2015/12/03/entering-public-beta.html >> >> Has anyone implement yet? >> >> Lee >> _______________________________________________ >> grlug mailing list >> grlug at grlug.org >> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > > > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug > -------------- next part -------------- An HTML attachment was scrubbed... URL: From aesospadez at gmail.com Tue Dec 8 15:28:26 2015 From: aesospadez at gmail.com (Evan Roelofs) Date: Tue, 08 Dec 2015 20:28:26 +0000 Subject: [GRLUG] LetsEncrypt ONLINE!! In-Reply-To: References: Message-ID: I was in the closed beta and have it on a couple of my sites and services. The scripts are fully open-source, so if you're really concerned about their automated systems you can review them yourself or write your own. Very cool project overall, and a good excuse to run your sites and services through something like Qualys' SSL Server Test to make sure your HTTPS parameters are configured optimally. On Tue, Dec 8, 2015 at 3:22 PM Chris Wieringa wrote: > I ran through the process of cloning the client and retrieving a > certificate for my home web server. Overall, it wasn't that much of a > hassle. > > The client performs a 3rd-party verification of your website / domain-name > by having temporarily hosting a webserver on either port 80 or 443, or by > writing into your webroot a verification file. It wrote into the > .well-known/acme-challenge/ directory in my webroot for that process. > > I get a bit annoyed with the default mantra of "we'll do everything for > you" with the client wanting to reconfigure Apache automatically, but it's > simple enough to skip that then modify my Apache config for the > certificates manually. Likewise, it looks like CSRs can be sent as well if > you want to do that manually. > > Since they issue 90 day certificates, it seems like using the client and a > cron entry seems like the easiest way to keep this working long-term. > > Chris > > On Tue, Dec 8, 2015 at 1:06 PM, Thomas Wodarek wrote: > >> There has been discussion on the LE dev list about web UIs ( >> https://groups.google.com/a/letsencrypt.org/d/msgid/client-dev/CA%2B65OsrZSyX0DpGn5CsrOVbz6TUWv7x9EWdOV9wMoHoDn8oRcg%40mail.gmail.com), >> the latest of which is https://gethttpsforfree.com. >> >> The installed client part is to allow automation, which is pretty much >> the reason behind the LE project. >> Is there a way to have a cert issued like any other authority by just >> submitting a CSR and getting the cert back? And not having to install some >> special "software" ? >> >> On Tue, Dec 8, 2015 at 12:28 PM, L. V. Lammert wrote: >> >>> >>> Public Beta is available as of 3 December: >>> >>> https://letsencrypt.org/2015/12/03/entering-public-beta.html >>> >>> Has anyone implement yet? >>> >>> Lee >>> _______________________________________________ >>> grlug mailing list >>> grlug at grlug.org >>> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug >> >> >> >> _______________________________________________ >> grlug mailing list >> grlug at grlug.org >> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug >> >> _______________________________________________ >> grlug mailing list >> grlug at grlug.org >> http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug >> > > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug -------------- next part -------------- An HTML attachment was scrubbed... URL: From lvl at omnitec.net Wed Dec 9 15:25:36 2015 From: lvl at omnitec.net (L. V. Lammert) Date: Wed, 9 Dec 2015 14:25:36 -0600 (CST) Subject: [GRLUG] Virtualization host networking Message-ID: Building a new server for many guest machines for public services, .. started with OpenSuSE & Xen for compatibility with our environment. For best security, I would like to have an interfaces on the inside LAN (e.g. 10.0.0.n), with the other on the public network. What I can't wrap my head around is how to configure the network: The host machine has br0 (public) and br3 (private); how does one configure routing so the private network can connect for all ports, while the public network provides connection to each guest machine for web traffic (80/443 - nothing else)? Any pointers or examples would be much appreciated. TIA! Le From robert.citek at gmail.com Wed Dec 9 17:32:57 2015 From: robert.citek at gmail.com (Robert Citek) Date: Wed, 9 Dec 2015 14:32:57 -0800 Subject: [GRLUG] Virtualization host networking In-Reply-To: References: Message-ID: Sounds like you are trying to do NAT with port-forwarding. Is that correct? That's fairly straightforward to do with the VirtualBox Manager. And there's some docs for using the command line, too: https://www.virtualbox.org/manual/ch06.html#network_nat_service Xen has docs on NAT, but it's not obvious how to set up the port-forwarding (other than manually configuring iptables): http://wiki.xenproject.org/wiki/Xen_Networking#Network_Address_Translation Good luck and let us know how things work out. Regards, - Robert On Wed, Dec 9, 2015 at 12:25 PM, L. V. Lammert wrote: > Building a new server for many guest machines for public services, .. > started with OpenSuSE & Xen for compatibility with our environment. > > For best security, I would like to have an interfaces on the inside LAN > (e.g. 10.0.0.n), with the other on the public network. > > What I can't wrap my head around is how to configure the network: > > The host machine has br0 (public) and br3 (private); how does one > configure routing so the private network can connect for all ports, > while the public network provides connection to each guest machine for > web traffic (80/443 - nothing else)? > > Any pointers or examples would be much appreciated. > > TIA! > > Le > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From lvl at omnitec.net Sun Dec 13 17:46:47 2015 From: lvl at omnitec.net (L. V. Lammert) Date: Sun, 13 Dec 2015 16:46:47 -0600 (CST) Subject: [GRLUG] Foreign Territory - WAY OT Message-ID: I know this is way out of the league for almost everyone here, .. but please permit me to ask the question anyway: Normally I use MySQL, and it's pure pleasure to use the CLI to create a database, create tables, modify one, dump it, restore it, etc. Well supported, and there are thousands of examples to see how to do anything. Comes hither the Evil Empire, with a competing system. Totally obfustated at every level, .. installing the server SEEMS TO work fine, but installing the 700MB "Management Studio" crashes WITHOUT A TRACEABLE ERROR!! Would be able to point out a way to do basic management like MySQL? Simple, well documented CLI or another tool? Back to your regular programming, .. Lee From jeff at ajprogramming.com Sun Dec 13 18:53:26 2015 From: jeff at ajprogramming.com (Jeff Bosch) Date: Sun, 13 Dec 2015 18:53:26 -0500 Subject: [GRLUG] Foreign Territory - WAY OT In-Reply-To: References: Message-ID: <566E04F6.6030309@ajprogramming.com> When you say management I figure you are referring to mysql server management, not db management that could be done with PHPMyAdmin, correct? I usually edit the config files in my favorite editor. Thanks, Jeff On 12/13/2015 05:46 PM, L. V. Lammert wrote: > I know this is way out of the league for almost everyone here, .. but > please permit me to ask the question anyway: > > Normally I use MySQL, and it's pure pleasure to use the CLI to create a > database, create tables, modify one, dump it, restore it, etc. Well > supported, and there are thousands of examples to see how to do anything. > > Comes hither the Evil Empire, with a competing system. Totally obfustated > at every level, .. installing the server SEEMS TO work fine, but > installing the 700MB "Management Studio" crashes WITHOUT A > TRACEABLE ERROR!! > > Would be able to point out a way to do basic management like MySQL? > Simple, well documented CLI or another tool? > > Back to your regular programming, .. > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From mfarver at mindbent.org Sun Dec 13 18:57:27 2015 From: mfarver at mindbent.org (Mark Farver) Date: Sun, 13 Dec 2015 18:57:27 -0500 Subject: [GRLUG] Foreign Territory - WAY OT In-Reply-To: References: Message-ID: It is my understanding you can do most SQL Server management from the sqlcmd command line. You can also probably use PowerShell to script most things. MS has been trying to improve their command line support. As usual they are doing it their own (hard) way, but they've started to realize that admins need scriptable tools to manage large numbers of servers. On Sun, Dec 13, 2015 at 5:46 PM, L. V. Lammert wrote: > I know this is way out of the league for almost everyone here, .. but > please permit me to ask the question anyway: > > Normally I use MySQL, and it's pure pleasure to use the CLI to create a > database, create tables, modify one, dump it, restore it, etc. Well > supported, and there are thousands of examples to see how to do anything. > > Comes hither the Evil Empire, with a competing system. Totally obfustated > at every level, .. installing the server SEEMS TO work fine, but > installing the 700MB "Management Studio" crashes WITHOUT A > TRACEABLE ERROR!! > > Would be able to point out a way to do basic management like MySQL? > Simple, well documented CLI or another tool? > > Back to your regular programming, .. > > Lee > _______________________________________________ > grlug mailing list > grlug at grlug.org > http://shinobu.grlug.org/cgi-bin/mailman/listinfo/grlug From awilliam at whitemice.org Mon Dec 14 06:17:38 2015 From: awilliam at whitemice.org (Adam Tauno Williams) Date: Mon, 14 Dec 2015 06:17:38 -0500 Subject: [GRLUG] Foreign Territory - WAY OT In-Reply-To: References: Message-ID: <1450091858.2981.11.camel@whitemice.org> On Sun, 2015-12-13 at 16:46 -0600, L. V. Lammert wrote: > Comes hither the Evil Empire, with a competing system. Totally > obfustated at every level, .. installing the server SEEMS TO work > fine, but installing the 700MB "Management Studio" crashes > WITHOUT A TRACEABLE ERROR!! I have never experienced an issue installing Management Studio. And while it is easy to criticize the size... it is very comprehensive, and includes administration from many aspects the typical [tiny] MySQL site never even considers - such as the actual proper use of roles (which I've never seen done on a MySQL install, journals, as well as replication] > Would be able to point out a way to do basic management like MySQL? > Simple, well documented CLI or another tool? I you are going to manage M$ systems from a CLI you should study PowerShell, now rather than later.  That is the sanctioned tool. -- Adam Tauno Williams GPG D95ED383 Systems Administrator, Python Developer, LPI / NCLA