Sep 042016

Based on Changing a RAID-10 into a RAID-5

It is usually assumed that the best HDD organization on a backup server is a RAID5, since it provides a fairly good price/volume. Unfortunately, increasing of disk count affect to some RAID5 disadvantages, in particular the in reliability and recovery speed. For example if the server has RAID5 of 6 (six) SATA disk drives (even it’s reliable enough, such as WD Re), with one disk replacement, array recovery time is about 10 hours (in my case). At the recovery time reservation is absent, the load on the disks are increased, that increases the probability of failure of the remaining disks, and if all the disks have same series, the probability of another disk will deteriorate during the recovery, increase even more.
In this regard, it was decided to convert the existing disk array from RAID5 to RAID10 with the addition of two drives, that in theory should lead to increasing of server performance and improving reliability.

Continue reading »

Feb 272016

When you try to access HP ILO2 console via some new version of OpenSSH you have error.
For OpenSSH v.6
# ssh ilouser@iloserver
Received disconnect from iloserver: 2: Client Disconnect

Solution: add option -o MACs=hmac-sha1 to ssh:

# ssh -o MACs=hmac-sha1 ilouser@iloserver
ilouser@iloserver's password:

For OpenSSH v.7
# ssh ilouser@iloserver
Unable to negotiate with UNKNOWN: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1

Solution: add option -o KexAlgorithms=diffie-hellman-group1-sha1 -o MACs=hmac-sha1 to ssh:

# ssh -o KexAlgorithms=diffie-hellman-group1-sha1 -o MACs=hmac-sha1 ilouser@iloserver
ilouser@iloserver's password:

Feb 272016

From Pinoy UNIX Administrations

There are times when you want to have a quick access to the remote console of a server like HP’s ILO but you don’t want (not able) to open a web browser just to access it. But there is an ability to access it via SSH (text console only).

  1. Open a ssh connection to the ILO’s IP address.
    # ssh ilo_admin@ip_address

  2. Enter your ILO admin account and password. After that you will see the ILO prompt.

  3. To access the remote console of the server at the ILO prompt type “TEXTCONS”

  4. You will be presented with the Login: console. Enter your root or user account of the server to gain access.
Aug 022012

Для автоматического изменения паролей дополнительных сервисов (Kerberos, Samba и т.д.) была выбрана возможность протоколирования изменений дерева OpenLDAP через сокет.

Необходимо выполнить следующие шаги:

  1. Добавить в OpenLDAP модули (если у вас их еще нет) для протоколирования и использования в качестве базы скриптов:
    ldapmodify -xWD cn=admin,cn=config << __EOF__
    dn: cn=module{0},cn=config
    changetype: modify
    add: olcModuleLoad
    olcModuleLoad: back_sock
    add: olcModuleLoad
    olcModuleLoad: accesslog
  2. Continue reading »

Jul 172012

Установка производится на Debian Squeeze (6.0)

Задачи: интегрировать OpenLDAP и Kerberos, получив в итоге:

  1. единый пароль для всех сервисов (в том числе Samba3)
  2. поддержку мультидоменной архитектуры – возможность иметь несколько Kerberos realm

Continue reading »

Jul 132012

Предпосылки/требования к системе:
1. работа под Linux
2. уменьшение затрат на серверное ПО/клиентские лицензии
3. возможность работы нескольких не связанных организаций на одном сервере – т.е. древовидная структура
4. кластеризация
5. поддержка SSO (single sign on)

Continue reading »

Jul 142011

Опробовано на Debian 6.0, для дистрибутивов, основанных на RedHat заменить apt-get на yum, OpenSUSE – zypper

В vShpere client выбрать в меню для данной виртуальной машины Guest->Install/Upgrade VMWare Tools

В консоли linux выполнить:
Continue reading »