DrStalker's questions

I have an exchange mailbox called "Support" with two email addresses: [email protected] (primary) [email protected]

Mail to both addresses goes to the same inbox correctly and message show as To: Support. if I check the details of the To: field it always shows [email protected], even when messages were sent to [email protected]. Viewing the full message headers shows [email protected]

How can I get Outlook to show the actual email address the message was sent to? It's an issue for the people managing the mailbox because knowing what the target address was is important to determine how the message should be handled.

I have an Apache 2.2 server with an SSL certificate hosting several services that should be only access using SSL.

ie: https://myserver.com/topsecret/ should be allowed while http://myserver.com/topsecret/ should be either denied or, ideally, redirected to https. http://myserver.com/public should not have this restriction, and should work using either http or https.
The decision to allow/deny http is made at the top level directory, and affects all content underneath it.

Is there a directive that can be placed in the Apache config to retrict access in this manner?

I have a USB key that was previously set up as a bootable key (clonezilla)

Because of this there is an MBR on the key that will try (and fail) to boot off the key if it is left in a system. Deleting/formatting partitions won't change this.

On Linux I could use dd to overwrite the first few MB of the key and then repartition it, what is the equivalent way to do this on Windows? (destroying all data on the key is fine)

I have a domain, mydomain.com.au. I make two nameservers for this domain, ns1.mydomain.com.au and ns2.mydomain.com.au, and load them full of NS records, A records, MX records and anything else I feel like hosting.

Now, how do I get these to be used? If I go to my registrar and say the nameservers for mydomain.com.au are ns1.mydomain.com.au and ns2.mydomain.com.au how is anyone going to find the IPs to connect to lookup addresses, since the only systems in the world that know the public IPs for my nameservers are... my nameservers.

I'm missing something obvious here, please let me know what it is :-)

VMware vSphere 4 SAN storage with multiple data-stores No vCenter

I shut-down a virtual machine and using the data-store browser did a copy/paste to copy the VM to a new datastore with additional space. The file copy performance was very poor, and due to time constraints I decided to cancel the copy task. However the copy task showing in the vsphere client can not be cancelled; the cancel option is disabled.

Currently I am not able to start the machine in it's original location as the disk files are locked for the copy. How can I abort the copy? I tried deleting the target directory but this did not abort the copy task.

What is the best way to configure disks in a VMWare server that will be hosting multiple machines?

A single RAID 5 array hosting multiple VMs would provide good throughput but means all VMs are accessing the same disks (so one VM accessing the disk will delay another accessing the disk)

Skippig RAID and having a single VM per disk means the disk access will be slower in general (single disk speeds) but there will never be delays caused by another VM accessing the drives at the same time.

We're in the process of consolidating all our developer systems into a single windows domain and auditing all our internally used software.

For Microsoft software is there any tool/tools to allow central management of Microsoft licenisng? We have Retail, OEM, MAPS and MSDN keys and currently track these with an excel sheet which is very error prone.

Ultimately I want to be able to say with complete confidence "all of our Micorosoft software is fully licensed" and make sure all our licenses are in use before buying more.

I'm using MySQL and I need to create an account that can connect from either the localhost or from another server, i.e. 10.1.1.1. So I am doing:

CREATE USER 'bob'@'localhost' IDENTIFIED BY 'password123';
CREATE USER 'bob'@'10.1.1.1' IDENTIFIED BY 'password123';
GRANT SELECT, INSERT, UPDATE, DELETE on MyDatabse.* to 'bob'@'localhost', 'bob'@'10.1.1.1';

This works fine, but is there any more elegant way to create a user account that is linked to multiple IPs or does it need to be done this way?

My main worry is that in the future, permissions will be updated for one 'bob' account but not the other.

Does writing zeros to an entire ssd (dd if=/dev/zero of/dev/sdX) give the same performance restoring effect that you get from a "secure erase", or does secure erase do something else as well?

==EDIT== To clarify slightly; I don't care about securely destroying the data, I just want to take this drive (which has had a lot of filling/deleting done on it) and restore the SSD performance loss that occurs over time.

After a disk full issue one of the MySQL DBs on the server is coming up with the following error when I try to back it up:

[root@mybox ~]# mysqldump -p --result-file=/tmp/dbbackup.sql --database myDBname
Enter password:
mysqldump: Got error: 145: Table './myDBname/myTable1' is marked as crashed and should be repaired when using LOCK TABLES

A bit of investigation shows two tables have this issue.

What needs to be done to fix up the damaged tables?

Is it possible for a web server to select an SSL certificate to use based on the host-header of the incoming connection, or is that information that is only available after the SSL connection is established?

That is, can my webserver listed on port 443 and use the foo.com certificate if https://foo.com is requested, and the bar.com certificate if https://bar.com is requested or am I trying to do something impossible because the server has to establish an SSL connection before it knows what the client wants?

find has good support for finding files the more modified less than X days ago, but how can I use find to locate all files modified before a certain date?

I can't find anything in the find man page to do this, only to compare against another files time or to check for differences between created time and now. Is making a file with the desired time and comparing against that the only way to do this?

Is the anyway to run nslookup (Centos 5 or Windows) such that it will look up record types other than A, without having to go to interactive mode and using set type=? For example, I'd like a command like the following:

nslookup --type=SRV _ldap._tcp.mydomain.com

Is there any way to configure a user on a Linux box (Centos 5.2 in this case) so that they can use scp to retrieve files, but can't actually login to the server using SSH?

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled.

Trying with openssl I have found the following two commands to do the conversion:

openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer
openssl pkcs12 -export -in certificate.cer -inkey privateKey.key -out certificate.pfx -certfile CACert.cer

but I'm not sure what key to use for teh esecond command, or what certificate CACert.cer refers to.

How can I convert this key to .pfx format?

On a linux system is there any way to use nohup when the process that is being nohuped required input, such as an rsync command that needs a password to be entered but will then run happily on its own?

What permissions are needed to perform an LDAP bind to an active directory server? I have a central domain (call it MAIN) that has two-way trusts to domains in other forests (call then REMOTE and FARAWAY)

Using MAIN\myaccount as the username and my password I can bind to REMOTE fine, but not to FARAWAY; I get an invalid credentials response

80090308: LdapErr: DSID-0C09030B, comment: AcceptSecurityContext error, data 525, v893

In all other ways the trusts seem to work fine.

What permissions do I need to check to figure out why the bind is failing? My understanding is that anyone in AUTHENTICATED USERS should be able to bind to LDAP, but that only seems to hold true for some domaians and not others.

Is there any plugin or setting for firefox that can simplify the invalid SSL certificate process to a single click, or even not put up any errors and just display a warning indicator?

Working on a dev network using self-signed cerificates for initial design means contantly having to go through the 5 step process to grant an exemption for a site, which is a real pain when swapping things around.

How can I tell if grub is installed on a disk, and if it is what settings it has (noteably, what it has for the root parameter)

I need to check a lot of disks in software RAID1 arrays to make sure both disks have grub installed, with the grub on each disk having the appropriate root value.

I have a hard-drive from a dead server, and I would like to convert it to a virtual machine. (original system OS is windows 2003)

I know VMWare converter can convert a physical machine to a VMWare image, but is there any way to convert a hard drive to a VMWare hard-drive image to use as a virtual machine? I can't find such an ability listed in the description of VMWare convertor.