note - 🧑‍💻 Funky Penguin (Page 2)

🧑‍💻 Funky Penguin

Sign in Subscribe

note

A collection of 39 posts

openssl-1.0.1e-30 broke sendmail, mysql on rhel/centos 5/6

After being abruptly awakened on Saturday morning at 4am (nightly cron job for yum updates), we found that an upstream RHEL/CentOS update had changed the minimum acceptable length of DH keys to 768 bits. The initial alarm which alerted us to this was from the Nagios check_smtp plugin

Automatically create VLAN bridge interfaces for KVM on RHEL 5-6

At Prophecy, we make extensive use of KVM Virtualization on CentOS6. A VM host can have multiple bridge interfaces (each on a separate VLAN) on which we can run virtual machines. This lets us (for example) run a dev VM (inside a dev network) on the same physical VM host

Activating Windows Server Evaluation

Internally, our build process for Windows Servers (2012r2 in this case) is to build the VM on the Evaluation media available from Microsoft, and then apply the licence during the grace period. It turns out that you can’t “Activate” an Evaluation copy of Windows Server with a Production licence

Grab any of Packts geekbooks for $10 until July 5th

The folks at Packt Publishing asked me to mention that they’re having 10 years $10 special, to celebrate their 10-year anniversary. Their entire range of books (geared towards niche geek topics) are available for $10 each. This is a good opportunity to brush up on some rusty areas, or

Making postie work with cron jobs, fails with wp-config.php outside of web root

I use the excellent Postie plugin to post to this blog via email. I’ve been battling for days to get it to automatically check the mailbox for new message though, and while I still haven’t got it working using WP-Cron (WordPress’ “pseudo-cron”), I’ve finally managed to get

Restart VRRP on JUNOS to fix master/master issues

I spent about 30 min this evening chasing a non-existing VRRP issue between 2 JUNOS SRX devices after a hardware drop-in replacement. One was configured as master, one as backup. Both were in the master status (normally indicating a lack of L2 connectivity), but each could ping the other on

Copying SSH host private keys between JUNOS devices to when replacing hardware

A certain customer of mine is (rightly or wrongly) pedantic about security warnings. Recently, we did a hardware replacement of a JUNOS device (an SRX240 firewall). While the config was a drop-in replacement, users who tried to SSH to the host post-migration would normally see an SSH “host key has

Importing existing RAID devices into new Linux installation

Recently I had to rebuild a CentOS5 VM host as CentOS6. My VMs were stored on a RAID1 pair (seperate from the OS disks). To avoid any possibility of impacting the VM data during the re-installation, I removed the VM data disks from the host during the reinstall. After successfully

Solving vsftpd's unsupported record version unknown 48.48 error

I use FTPS with vsftpd to update my WordPress plugins. This means that the wordpress files don’t need to be writeable by the webserver user, which adds another layer of protection and separation. I make FTPS available to localhost only, and force SSL encryption end-to-end. This makes debugging a

Postfix config on OSX Mountain Lion (Server) not where you expect

I spent the better part of an hour wondering why my postfix main.cf config changes didn’t apply on a OSX Mountain Lion server. Turns out that because “OSX Server” no longer exists (it’s just Server.app now), the postfix files specific to the Mail component of the

Allowed memory size of xxx bytes exhausted with WordPress on Debian

My Debian Squeeze host started having trouble performing WordPress 3.5 core or plugin updates – in the error logs, I’d see messages like: Allowed memory size of xxx bytes exhausted After scouring the internet, attempting to adjust memory limits on php.ini, apache, etc, I eventually discovered the solution

Fixed Cacti not displaying interfaces for HP 1810G switch

While implementing a new network for a customer, we took an existing HP 1810G 48-port switch under management. As per normal, we setup monitoring (Icinga) and graphing (Cacti), but while the switch responded to Cacti sysname polls (leading us to believe it was happy), it didn’t return any interface

Clearing static nat on Cisco router

I was asked to change a incoming NAT translation on a Cisco router for a customer today - however since this NAT was used to deliver all their internal email, it was never not in use, and I got the standard message below when trying to clear it: %Static entry

Workaround for the Cacti segmentation fault on CentOS5

Seems a little dumb, and I’m not sure how other distributions deal with it, but if you install Cacti from RPM on CentOS, and then browse to your /cacti/ directory via HTTP, you’ll find that it dies with a segmentation fault. You know this is you if every