The general *nix chat thread

[Asteroid]

Seeing as every other topic has one of these and to save clogging up other threads with discussion not worthy of a thread on its own, I am making one.

Originally Posted by elvis

The LSB packages are installed as part of either the default server or desktop profile in RedHat. If you're missing them, then you've tried to do something clever/non-standard during your install.

While I'm 100% behind the idea of Linux becoming easier for end users, I'm also 100% behind end users reading documentation and setting things up via best practice guides. I would offer the same advice if it were Windows, MacOSX or proprietary UNIX - read the manuals, and follow the best practice guides when doing an install, especially on enterprise software.

Ubuntu and similar distros focussed on a complete "out of the box" experience are somewhat different. But you *are* using RHEL, and it *is* designed for a far different purpose and audience. Yes, it's the premier distro - for enterprise servers and workstations, with qualified/certified technicians as the installation and maintenance staff, and end users who simply use the installed environment.

I mean, you wouldn't expect your average office user to be able to install Windows Server, Active Directory and other enterprise environment features in Windows, right? Windows on the desktop, sure. But again, if you want to compare apples to apples (no pun intended), Ubuntu and MacOSX are the comparison points, not RHEL.

To solve your actual problem, run (as root or via sudo):

yum -y install redhat-lsb

Again, this would have been done automatically as part of a default install. But you've chosen non-standard settings during your install process, and vital packages are missing.

LSB stands for "Linux Standard Base". It's a project designed by several Linux vendors which aims to provide a mechanism for third party developers and driver manufacturers to be able to query the system easily and find out paths, libraries and other features they need to install binary-only or proprietary software onto a system. It's installed by default in all major OSes, unless you as the end user change that during the installation phase.

Thanks, I was just venting. Of course I expect, enjoy even, a good fight to make things work. Seems it was a red herring. I used a generic guide from the Broadcom site and built their driver, which has got the wlan partially working. It is able to detect access points, but it won't authenticate a WPA2 point through Network Manager.

[IKT]

‘Leap Second’ Bug Wreaks Havoc Across Web

Reddit, Mozilla, Gawker, and possibly many other web outfits experienced brief technical problems on Saturday evening, when software underpinning their online operations choked on the “leap second” that was added to the world’s atomic clocks.

http://www.wired.com/wiredenterprise...th-java-linux/

the patch was posted back in March.

http://it.slashdot.org/story/12/07/0...causes-crashes

o_O

Anyone else affected?

[Hamal]

Originally Posted by IKT

Anyone else affected?

Our web servers handled the issue just fine. Although my MythTV box went stupid on the weekend (100% CPU) so that might have been the cause.

[Gecko]

Originally Posted by IKT

Anyone else affected?

We had MySQL on one dev box go to 100% (which Nagios picked up on pretty quickly), otherwise nothing to report here.

[3t3rna1]

Originally Posted by IKT

Anyone else affected?

I had an older KVM server kernel panic over the weekend, the last thing in the logs was an NTPD update so I figure the leap second must have been the issue.

Worst timing ever, I was very hungover and craving Nando's when I got the call.

[Herballizard]

I had one of my SUSE xen guests go full tilt...fucking leap second

Patchy mc patch patch

[elvis]

Originally Posted by IKT

Anyone else affected?

Of the few thousand production, enterprise servers I've set up over the last few years, not a single one was affected.

I patch stuff, you see. It's what I'm paid to do.

[IKT]

http://www.omgubuntu.co.uk/2012/07/u...ppear-in-italy

I don't recall any windows or mac based crop circles! The year of linux is upon us!

[tr3nton]

http://askubuntu.com/questions/15972...-remote-logins

Thought this was cool.

One way to do this is with a tool provided by Google called Google Authenticator.

1. Install libpam-google-authenticator
   • or just sudo apt-get install libpam-google-authenticator
2. Edit /etc/pam.d/sshd to include the module:
   • sudoedit /etc/pam.d/sshd and then include this line at the bottom and save:
   • auth required pam_google_authenticator.so
3. Edit your SSH config file to turn on the challenge:
   • sudoedit /etc/ssh/sshd_config and then change the response authentication from:
   • ChallengeResponseAuthentication no to
   • ChallengeResponseAuthentication yes and then save the file.
4. sudo restart ssh to restart SSH
5. Run google-authenticator
   • This will give you your secret key, verification code, and emergency scratch codes. It will also ask you some rate limiting questions.

Mobile Applications:

You'll need one of these to receive the authentication code on another device.

• Android App
• iPhone App

[Swathe]

Only a couple of boxes here and no leap second issues here.

Got a gentoo server install going whilst I also setup exchange 2010 *shudder*

[f3n1x]

Originally Posted by Swathe

Only a couple of boxes here and no leap second issues here.

Got a gentoo server install going whilst I also setup exchange 2010 *shudder*

Tbh Exchange 2010 installation isn't too bad as long as you prepare the machine properly and be patient and let it go, no where near the potential crap you could run into doing an 03/07 install.

[elvis]

So in the last week I've built:

* PXE auto-deployment for CentOS6 servers and Ubuntu 12.04 workstations
* Puppet configuration for the above
* Microsoft Active Directory authentication for all of the above (as well as some peripheral services like Apache for authenticating various web services, wikis, SVN repos, etc).
* CentOS6 NAS units exporting file systems to Windows via SMB, and Linux via NFS, with consistent username mapping between both OSes, and no need to "chmod 777" files constantly as this place previously did.

That was all relatively easy on it's own, but I've had to hammer it all into an existing environment without breaking anything else, converting some very poorly configured Linux servers in the process, and fixing a billion other day to day problems as I went.

I swear this time around I'll document all this stuff. This sort of thing should be common place, but I rarely see proper centralised authentication in environments with Linux servers. Invariably Linux is set up with the root account, and that's shared around. Very naughty.

So this is just a note to force myself to document all this sooner rather than later.

[IKT]

Originally Posted by elvis

This sort of thing should be common place, but I rarely see proper centralised authentication in environments with Linux servers.

Are there any good tools/documentation/things I should know already about central authing across multiple environments?

[elvis]

Originally Posted by IKT

Are there any good tools/documentation/things I should know already about central authing across multiple environments?

Client side "sssd" is my new favourite thing ever.

Server side, FreeIPA is still my favourite thing ever.

[Phobz]

What did you use for the deployment side of things Elvis? fog server?