LDAP User Authentication on CentOS 7
prerequisites You need to already have a LDAP instance in your infrastructure that you can reach from your test linux machine. Your ldap has an organization unit for people and one for groups. Ldap...
View ArticleDocker Swarm a native clustering system
Docker Swarm The native Docker Container Orchestration system is Docker Swarm that in simple terms means that you can have multiple docker machines (hosts) to run your multiple docker containers...
View ArticleThe Phoenix Project
The Phoenix Project: A Novel About IT, DevOps, and Helping Your Business Win (2013) An amazing book about IT and devops philosophy, you have to read it. Tag(s): ThePhoenixProject
View Articleswapfile on centos7
Working with VPS (Virtual Private Server), sometimes means that you dont have a lot of memory. That’s why, we use the swap partition, a system partition that our linux kernel use as extended memory....
View ArticleGhost in the Wires
I’ve just finished listening the audiobook version of Ghost in the Wires: My Adventures as the World's Most Wanted Hacker and really liked it a lot. Everything you need to know about social engineering...
View Articleregular expressions in find
After upgrading one of my linux boxes from CentOS 6.8 to 6.9, I wanted to find out the files that I have to review. From experience I already know what file names I should check: .rpmsave & .rpmnew...
View ArticleCyberspies: The Secret History of Surveillance, Hacking, and Digital Espionage
I’ve just finished listening the audio book version of Cyberspies: The Secret History of Surveillance, Hacking, and Digital Espionage by Gordon Corera and liked it. As the name suggests, It is about...
View ArticleProtecting your Authoritative PowerDNS Server with dnsdist
PowerDNS My Authoritative PowerDNS configuration, is relatively simple: Configuration Here is my configuration: # egrep -v '^($|#)' pdns.conf guardian=yes launch=bind bind-config=/etc/pdns/named.conf...
View ArticleHow a slow disk affects your system
The problem The last couple weeks, a backup server I am managing is failing to make backups! The backup procedure (a script via cron daemon) is to rsync data from a primary server to it’s /backup...
View Articletime offset and nagios nrpe check
What is the time? Time offset is the amount of time that is off (or drift) from a specific value. In Linux systems, date is been calculating from the beginning of time. That is 00:00:00 1 January 1970...
View Articlepostfix TLS & ipv6
Postfix smtp Vs smtpd postfix/smtp The SMTP daemon is for sending emails to the Internet (outgoing mail server). postfix/smtpd The SMTP daemon is for receiving emails from the Internet (incoming mail...
View ArticleDNS Certification Authority Authorization
CAA Reading RFC 6844 you will find the definition of “DNS Certification Authority Authorization (CAA) Resource Record”. You can read everything here: RFC 6844 So, what is CAA anyhow? Certificate...
View ArticleFailures will occur, even with ansible and version control systems!
Failures Every SysAdmin, DevOp, SRE, Computer Engineer or even Developer knows that failures WILL occur. So you need to plan with that constant in mind. Failure causes can be present in hardware,...
View ArticleNo Place To Hide
An Amazing Book!!! Must Read !! I’ve listened to the audiobook like in two days. Couldnt leave it down. Then organize a CryptoParty to your local hackerspace Tag(s): books
View ArticleVisiting ProgressBar HackerSpace in Bratislava
When traveling, I make an effort to visit the local hackerspace. I understand that this is not normal behavior for many people, but for us (free / opensource advocates) is always a must. This was my...
View ArticleHow to Clean a Coffee Grinder With Rice
This is my basic home setup for a nice cup of coffee: You can find my posts regarding coffee here: coffee I’ve tried to clean up my graef coffee grinder with a small cup of instant rice. and the...
View ArticleSTARTTLS with CRAM-MD5 on dovecot using LDAP
Prologue I should have written this post like a decade ago, but laziness got the better of me. I use TLS with IMAP and SMTP mail server. That means I encrypt the connection by protocol against the mail...
View ArticleMalicious ReplyTo
Prologue Part of my day job is to protect a large mail infrastructure. That means that on a daily basis we are fighting SPAM and try to protect our customers for any suspicious/malicious mail traffic....
View ArticlePHP Sorting Iterators
Iterator a few months ago I wrote an article on RecursiveFilterIterator, you can find the article here: PHP Recursive Directory File Listing . If you run the example code, you will see that output is...
View ArticleInstall Slack Desktop to Archlinux
Slack How to install slack dekstop to archlinux Download Slack Desktop eg. latest version https://downloads.slack-edge.com/linux_releases/slack-2.6.3-0.1.fc21.x86_64.rpm Extract under root filesystem #...
View Article