h1

Oracle RAC Connections

25/02/2011

Just browsing the ‘net and found an interesting article related to Oracle RAC and connections/load-balancing. Very interesting from a SysAdmin point of view. Just thought I’d share it (and my future consumption).

http://vnull.pcnet.com.pl/dl/oracle/James%20Morle%20RAC_Connection_Management.pdf

h1

RHEL5 Bonding Directives – location

22/02/2011

Was wondering where I read this before when I moved the bonding options for RHEL5 to /etc/sysconfig/network-scripts/ifcfg-bond0. Now I recall :-)

Also, good to check the ol’ readme files at

/usr/share/doc/kernel-doc-<kernel-version>/Documentation/networking/bonding.txt
h1

Facebook: Warning About Facebook divulging MORE of your information

17/01/2011

I am creating a new section now dedicated to privacy concerns. Starting now with this alert about Facebook adding the default of giving your address and phone numbers to developers. If you list personal information like address, etc on your facebook page, DON’T!

LinkĀ http://news.cnet.com/8301-1009_3-20028705-83.html

h1

grep’ing for some text + next few lines..

11/01/2011

Was interesting in search output for a particular piece of text, and then getting that line plus the next couple of lines. Google to the rescue again. Found this article on Linux Questions. grep has a (-A/-B/-C) parameter that I never used before. Works well if you do not mind multiple lines being separated by — lines. As per the article, you could also use ‘sed’ in the form of

sed -n ‘/text-to-look-for/,+1p’ file.txt >newfile.txt

I tried both but the grep command was easiest to recall in a pinch. The sed one works better and you do not need to pipe the output to another grep to remove the — lines (grep -v “^–$”)

h1

My thoughts on “Digital Locks” on music..

25/11/2010

Honestly, I have no problems with it. If Artists want to lock their content to prevent copying, that is their choice. My only issue with it is when they have ‘hidden’ software installed that gets put on my PC. I think they should be required to advertise if their product has digital locks or other forms of copy protection like Spyware installed on it. Makes it easier for me to simply not buy it. I do not see what the fuss is about it. If I do not like their rules, I can simply not purchase or use their product. Same thing with the flights and ‘pat downs’. My choice if I want to fly. However, I will be all for getting patted down in public. Might even help them by stripping off all my clothes. Make things interesting. :-) Or Scary.. hahah

h1

EFF Releases “HTTPS Everywhere”

24/11/2010

When you are normally just surfing the web, the websites you visit and update (most noticeable Facebook) send your information over clear text across the Internet. EFF has released the latest version of HTTPS Everywhere. What this add-on for Firefox does is switch you to an encrypted version of the site where it is available. It does not proxy the site, it only sends you to the encrypted ‘https’ version. If you have Firefox, I highly recommend you get this add-on.

h1

Restricting SSH Login for specific user to specific network/IP

23/11/2010

I have a client running an Oracle RAC environment. Logging in via ssh or anything else as a service account (i.e. oracle)is strictly frowned upon. According to the DBAs, some functions of RAC require direct login as this service account. So, we put in a ‘paper’ policy saying that the account could only login as ssh from within the environment itself. No user was to use the account to login. This has mostly worked, but occasionally we notice a login from the ‘oracle’ account directly from a PC and hit the excuse ‘I forgot’. That’s when I searched for something within sshd or PAM that would allow this login from within the environment, but not from outside. The article I found summed this up very nicely. Thanks NixCraft!

The line I added to the /etc/security/access.conf was:

-: oracle : 192.168.100.

h1

Fedora 14 is released!

03/11/2010

http://fedoraproject.org/get-fedora

Personally, I like the XFCE desktop ;-)

Some of the highlights?

Freedom
Features
Friends
First!

Check out more at http://fedoraproject.org/en/about-fedora

h1

RedHat Enterprise + Syslog + Different Port

04/10/2010

Quick and simple. Took a little bit to search for the answer.

In order to change the default port for syslog on RHEL 5, all you have to do is update the syslog entry in /etc/services and restart syslog. The reason I had to change it was that I had installed Splunk (an AWESOME tool for event correlation by the way) and wanted that application to listen for UDP:514 traffic. I also still wanted the central server to send it’s syslog information to our SIEM tool.

h1

Securing SSH Access – Continued..

04/09/2010

I started an article earlier on securing SSH access. This article from IBM provides more indepth configuration options. I am mostly posting this for my own use later when I am not at Star Bucks enjoying a grande Pike Place :-)

Follow

Get every new post delivered to your Inbox.