ujjain's questions -server

ujjain

Asked: 2017-01-29 15:28:31 +0800 CST

Is there a dynamic inventory for VMware in Ansible?

7

The documentation for Dynamic Inventory makes mention of so many dynamic inventories, but none for VMware.

I really liked the feature of tagging servers in Amazon EC2 and was hoping to re-create a similar system in our VMware environment.

Fetch all servers in vSphere with tags "environment=testing" and "application=helloworld" and run this Ansible playbook on them.

ujjain

Asked: 2013-09-23 03:49:16 +0800 CST

What are the disadvantages of disabling tinker panic 0 in NTP?

10

We sometimes have the problem that new servers have the wrong time in the bios, so there time can be off by a month.

When you suspend a VM in VMware and then unsuspend it, the time will be off too. Because NTP does not sync after a maximum offset, I am considering using tinker panic 0 in the /etc/ntp.conf.

What is the reason that there is a default maximum offset of 1000 seconds that causes NTP to stop syncing time? We are using Puppet to set up NTP, I am considering to make it set tinker panic 0 in the ntp.conf, so NTP will sync anyway. What are the disadvantages of doing this?

ujjain

Asked: 2013-09-20 12:20:40 +0800 CST

How to make NTP work despite a high offset?

8

Recently I have kickstarted some servers that had their time off by a month in the bios. The time in the bios said it was a random time/date in May, while it was June.

This caused NTP not to work, because NTP doesn't sync with such a high offset. How can I make sure that NTP syncs despite the offset, in this case a month, being too high?

ujjain

Asked: 2013-09-03 07:11:31 +0800 CST

What is the safest way to allow a developer to edit 3 Puppet modules?

4

We have a developer that has to make 3 Puppet modules for an environment. I want him to be able to write his 3 modules.

We currently write our own modules and he is the first person from another department that has to write modules. We use root-access to write/edit our modules, but we do not want to give him root access.

What is the best way to grant him rights to make/edit his 3 modules? We use the Puppet 3.2.4 and Red Hat Linux 6.4.

ujjain

Asked: 2013-08-20 05:48:24 +0800 CST

sssd vs nslcd for RHEL-5/6

5

We have 50 RH-5 machines and 70 RH-6 machines. I am looking to decide what we should use for LDAP:

nscd/nslcd for all RH-5/RH-6 servers
nscd/nslcd for RH-5 servers, sssd for RH-6 servers
sssd for all RH-5/RH-6 servers

SSSD is available on both version (RHEL5 - sssd 1.5 & RHEL6 - sssd 1.9+)

The last option means that RHEL5 machines would run sssd 1.5.

I would prefer an environment with the same software and configuration as much as possible, unless people say that sssd is really better for RH-6 and nscd/nslcd is really better for RH-5.

What is the best option?

ujjain

Asked: 2013-08-20 05:36:13 +0800 CST

What is nsswitch compat mode?

9

Red Hat recommended me compat mode in /etc/nsswitch.conf as one of the options to enumerate LDAP users, but later said that it's not a much-used method.

nsswitch.conf
passwd: files compat
passwd_compat: ldap

in passwd file, add +@netgroup.

What is this compat mode?

ujjain

Asked: 2013-07-30 04:12:42 +0800 CST

How come all LDAP users are shown with getent passwd?

6

We are using an LDAP server with both Solaris and RHEL servers and planning to migrate more servers over to RHEL. However we have an issue with LDAP on all Red Hat servers.

When I type "getent passwd", all users on the entire LDAP Server are shown, instead of only the users that have access to this server. Normally about 10 to 50 people have access to a server, so Solaris prints out this list of users, while Red Hat flat out prints out a list of all users that exist in the LDAP (about 650).

I prefer the behavior as on Solaris, where only the users that have permission to access the server are listed with "getent passwd".

How can I configured RHEL to list only the users that have access to the server?

ujjain

Asked: 2013-07-10 05:54:54 +0800 CST

How do I make sure VMware Tools is installed and running?

4

[root@tst-01 ~]# rpm -qa |grep vmware
vmware-tools-libraries-nox-8.6.0-2.x86_64
vmware-tools-foundation-8.6.0-4.x86_64
vmware-tools-libraries-x-8.6.0-2.x86_64
[root@tst-01 ~]# ps aux |grep vmware
root      6615  0.0  0.0 103300   840 pts/2    S+   15:48   0:00 grep vmware
[root@tst-01 ~]# locate vmware
/etc/vmware-tools
/etc/selinux/targeted/modules/active/modules/vmware.pp
/etc/vmware-tools/locations
/lib/modules/2.6.32-220.4.2.el6.x86_64/kernel/drivers/misc/vmware_balloon.ko
/lib/modules/2.6.32-220.el6.x86_64/kernel/drivers/misc/vmware_balloon.ko
/usr/lib/vmware-tools
/usr/lib/python2.6/site-packages/sos/plugins/vmware.py
/usr/lib/python2.6/site-packages/sos/plugins/vmware.pyc
/usr/lib/python2.6/site-packages/sos/plugins/vmware.pyo
/usr/lib/vmware-tools/bin
/usr/lib/vmware-tools/dsp
/usr/lib/vmware-tools/lib
/usr/lib/vmware-tools/libconf
/usr/lib/vmware-tools/sbin
/usr/lib/vmware-tools/xorg
/usr/lib/vmware-tools/bin/configure-gtk.sh
/usr/lib/vmware-tools/lib/libXau.so.6
/usr/lib/vmware-tools/lib/libXcomposite.so.1
/usr/lib/vmware-tools/lib/libXcursor.so.1
/usr/lib/vmware-tools/lib/libXdamage.so.1
/usr/lib/vmware-tools/lib/libXdmcp.so.6
/usr/lib/vmware-tools/lib/libXfixes.so.3
/usr/lib/vmware-tools/lib/libXft.so.2
/usr/lib/vmware-tools/lib/libXinerama.so.1
/usr/lib/vmware-tools/lib/libXrandr.so.2
/usr/lib/vmware-tools/lib/libXrender.so.1
/usr/lib/vmware-tools/lib/libXss.so.1
/usr/lib/vmware-tools/lib/libart_lgpl_2.so.2
/usr/lib/vmware-tools/lib/libatk-1.0.so.0
/usr/lib/vmware-tools/lib/libatkmm-1.6.so.1
/usr/lib/vmware-tools/lib/libbonobo-2.so.0
/usr/lib/vmware-tools/lib/libbonobo-activation.so.4
/usr/lib/vmware-tools/lib/libcairo.so.2
/usr/lib/vmware-tools/lib/libcairomm-1.0.so.1
/usr/lib/vmware-tools/lib/libcrypto.so.0.9.8
/usr/lib/vmware-tools/lib/libdnet.so.1
/usr/lib/vmware-tools/lib/libexpat.so.0
/usr/lib/vmware-tools/lib/libfontconfig.so.1
/usr/lib/vmware-tools/lib/libfreetype.so.6
/usr/lib/vmware-tools/lib/libfuse.so.2
/usr/lib/vmware-tools/lib/libgailutil.so.18
/usr/lib/vmware-tools/lib/libgcc_s.so.1
/usr/lib/vmware-tools/lib/libgdk-x11-2.0.so.0
/usr/lib/vmware-tools/lib/libgdk_pixbuf-2.0.so.0
/usr/lib/vmware-tools/lib/libgdk_pixbuf_xlib-2.0.so.0
/usr/lib/vmware-tools/lib/libgdkmm-2.4.so.1
/usr/lib/vmware-tools/lib/libgio-2.0.so.0
/usr/lib/vmware-tools/lib/libgiomm-2.4.so.1
/usr/lib/vmware-tools/lib/libgksu2.so.0
/usr/lib/vmware-tools/lib/libglade-2.0.so.0
/usr/lib/vmware-tools/lib/libglib-2.0.so.0
/usr/lib/vmware-tools/lib/libglibmm-2.4.so.1
/usr/lib/vmware-tools/lib/libglibmm_generate_extra_defs-2.4.so.1
/usr/lib/vmware-tools/lib/libgmodule-2.0.so.0
/usr/lib/vmware-tools/lib/libgnomecanvas-2.so.0
/usr/lib/vmware-tools/lib/libgnomecanvasmm-2.6.so.1
/usr/lib/vmware-tools/lib/libgobject-2.0.so.0
/usr/lib/vmware-tools/lib/libgthread-2.0.so.0
/usr/lib/vmware-tools/lib/libgtk-x11-2.0.so.0
/usr/lib/vmware-tools/lib/libgtkmm-2.4.so.1
/usr/lib/vmware-tools/lib/libgtop-2.0.so.7
/usr/lib/vmware-tools/lib/libpango-1.0.so.0
/usr/lib/vmware-tools/lib/libpangocairo-1.0.so.0
/usr/lib/vmware-tools/lib/libpangoft2-1.0.so.0
/usr/lib/vmware-tools/lib/libpangomm-1.4.so.1
/usr/lib/vmware-tools/lib/libpangox-1.0.so.0
/usr/lib/vmware-tools/lib/libpangoxft-1.0.so.0
/usr/lib/vmware-tools/lib/libpcsclite.so.1.0.0
/usr/lib/vmware-tools/lib/libpixman-1.so.0
/usr/lib/vmware-tools/lib/libpng12.so.0
/usr/lib/vmware-tools/lib/libproc-3.2.7.so
/usr/lib/vmware-tools/lib/librsvg-2.so.2
/usr/lib/vmware-tools/lib/libsexy.so.2
/usr/lib/vmware-tools/lib/libsexymm.so.2
/usr/lib/vmware-tools/lib/libsigc-2.0.so.0
/usr/lib/vmware-tools/lib/libspi.so.0
/usr/lib/vmware-tools/lib/libssl.so.0.9.8
/usr/lib/vmware-tools/lib/libstartup-notification-1.so.0
/usr/lib/vmware-tools/lib/libstdc++.so.6
/usr/lib/vmware-tools/lib/liburiparser.so.1
/usr/lib/vmware-tools/lib/libview.so.2
/usr/lib/vmware-tools/lib/libxml2.so.2
/usr/lib/vmware-tools/lib/libz.so.1
/usr/lib/vmware-tools/lib/libXau.so.6/libXau.so.6
/usr/lib/vmware-tools/lib/libXcomposite.so.1/libXcomposite.so.1
/usr/lib/vmware-tools/lib/libXcursor.so.1/libXcursor.so.1
/usr/lib/vmware-tools/lib/libXdamage.so.1/libXdamage.so.1
/usr/lib/vmware-tools/lib/libXdmcp.so.6/libXdmcp.so.6
/usr/lib/vmware-tools/lib/libXfixes.so.3/libXfixes.so.3
/usr/lib/vmware-tools/lib/libXft.so.2/libXft.so.2
/usr/lib/vmware-tools/lib/libXinerama.so.1/libXinerama.so.1
/usr/lib/vmware-tools/lib/libXrandr.so.2/libXrandr.so.2
/usr/lib/vmware-tools/lib/libXrender.so.1/libXrender.so.1
/usr/lib/vmware-tools/lib/libXss.so.1/libXss.so.1
/usr/lib/vmware-tools/lib/libart_lgpl_2.so.2/libart_lgpl_2.so.2
/usr/lib/vmware-tools/lib/libatk-1.0.so.0/libatk-1.0.so.0
/usr/lib/vmware-tools/lib/libatkmm-1.6.so.1/libatkmm-1.6.so.1
/usr/lib/vmware-tools/lib/libbonobo-2.so.0/libbonobo-2.so.0
/usr/lib/vmware-tools/lib/libbonobo-activation.so.4/libbonobo-activation.so.4
/usr/lib/vmware-tools/lib/libcairo.so.2/libcairo.so.2
/usr/lib/vmware-tools/lib/libcairomm-1.0.so.1/libcairomm-1.0.so.1
/usr/lib/vmware-tools/lib/libcrypto.so.0.9.8/libcrypto.so.0.9.8
/usr/lib/vmware-tools/lib/libdnet.so.1/LICENSE
/usr/lib/vmware-tools/lib/libdnet.so.1/libdnet.so.1
/usr/lib/vmware-tools/lib/libexpat.so.0/libexpat.so.0
/usr/lib/vmware-tools/lib/libfontconfig.so.1/libfontconfig.so.1
/usr/lib/vmware-tools/lib/libfreetype.so.6/libfreetype.so.6
/usr/lib/vmware-tools/lib/libfuse.so.2/libfuse.so.2
/usr/lib/vmware-tools/lib/libgailutil.so.18/libgailutil.so.18
/usr/lib/vmware-tools/lib/libgcc_s.so.1/libgcc_s.so.1
/usr/lib/vmware-tools/lib/libgdk-x11-2.0.so.0/libgdk-x11-2.0.so.0
/usr/lib/vmware-tools/lib/libgdk_pixbuf-2.0.so.0/libgdk_pixbuf-2.0.so.0
/usr/lib/vmware-tools/lib/libgdk_pixbuf_xlib-2.0.so.0/libgdk_pixbuf_xlib-2.0.so.0
/usr/lib/vmware-tools/lib/libgdkmm-2.4.so.1/libgdkmm-2.4.so.1
/usr/lib/vmware-tools/lib/libgio-2.0.so.0/libgio-2.0.so.0
/usr/lib/vmware-tools/lib/libgiomm-2.4.so.1/libgiomm-2.4.so.1
/usr/lib/vmware-tools/lib/libgksu2.so.0/libgksu2.so.0
/usr/lib/vmware-tools/lib/libglade-2.0.so.0/libglade-2.0.so.0
/usr/lib/vmware-tools/lib/libglib-2.0.so.0/libglib-2.0.so.0
/usr/lib/vmware-tools/lib/libglibmm-2.4.so.1/libglibmm-2.4.so.1
/usr/lib/vmware-tools/lib/libglibmm_generate_extra_defs-2.4.so.1/libglibmm_generate_extra_defs-2.4.so.1
/usr/lib/vmware-tools/lib/libgmodule-2.0.so.0/libgmodule-2.0.so.0
/usr/lib/vmware-tools/lib/libgnomecanvas-2.so.0/libgnomecanvas-2.so.0
/usr/lib/vmware-tools/lib/libgnomecanvasmm-2.6.so.1/libgnomecanvasmm-2.6.so.1
/usr/lib/vmware-tools/lib/libgobject-2.0.so.0/libgobject-2.0.so.0
/usr/lib/vmware-tools/lib/libgthread-2.0.so.0/libgthread-2.0.so.0
/usr/lib/vmware-tools/lib/libgtk-x11-2.0.so.0/libgtk-x11-2.0.so.0
/usr/lib/vmware-tools/lib/libgtkmm-2.4.so.1/libgtkmm-2.4.so.1
/usr/lib/vmware-tools/lib/libgtop-2.0.so.7/libgtop-2.0.so.7
/usr/lib/vmware-tools/lib/libpango-1.0.so.0/libpango-1.0.so.0
/usr/lib/vmware-tools/lib/libpangocairo-1.0.so.0/libpangocairo-1.0.so.0
/usr/lib/vmware-tools/lib/libpangoft2-1.0.so.0/libpangoft2-1.0.so.0
/usr/lib/vmware-tools/lib/libpangomm-1.4.so.1/libpangomm-1.4.so.1
/usr/lib/vmware-tools/lib/libpangox-1.0.so.0/libpangox-1.0.so.0
/usr/lib/vmware-tools/lib/libpangoxft-1.0.so.0/libpangoxft-1.0.so.0
/usr/lib/vmware-tools/lib/libpcsclite.so.1.0.0/libpcsclite.so.1.0.0
/usr/lib/vmware-tools/lib/libpixman-1.so.0/libpixman-1.so.0
/usr/lib/vmware-tools/lib/libpng12.so.0/libpng12.so.0
/usr/lib/vmware-tools/lib/libproc-3.2.7.so/libproc-3.2.7.so
/usr/lib/vmware-tools/lib/librsvg-2.so.2/librsvg-2.so.2
/usr/lib/vmware-tools/lib/libsexy.so.2/libsexy.so.2
/usr/lib/vmware-tools/lib/libsexymm.so.2/libsexymm.so.2
/usr/lib/vmware-tools/lib/libsigc-2.0.so.0/libsigc-2.0.so.0
/usr/lib/vmware-tools/lib/libspi.so.0/libspi.so.0
/usr/lib/vmware-tools/lib/libssl.so.0.9.8/libssl.so.0.9.8
/usr/lib/vmware-tools/lib/libstartup-notification-1.so.0/libstartup-notification-1.so.0
/usr/lib/vmware-tools/lib/libstdc++.so.6/libstdc++.so.6
/usr/lib/vmware-tools/lib/liburiparser.so.1/liburiparser.so.1
/usr/lib/vmware-tools/lib/libview.so.2/libview.so.2
/usr/lib/vmware-tools/lib/libxml2.so.2/libxml2.so.2
/usr/lib/vmware-tools/lib/libz.so.1/libz.so.1
/usr/lib/vmware-tools/libconf/etc
/usr/lib/vmware-tools/libconf/gtk-2.0
/usr/lib/vmware-tools/libconf/pango
/usr/lib/vmware-tools/libconf/etc/fonts
/usr/lib/vmware-tools/libconf/etc/gtk-2.0
/usr/lib/vmware-tools/libconf/etc/pango
/usr/lib/vmware-tools/libconf/etc/fonts/fonts.conf
/usr/lib/vmware-tools/libconf/etc/fonts/fonts.dtd
/usr/lib/vmware-tools/libconf/etc/gtk-2.0/gdk-pixbuf.loaders
/usr/lib/vmware-tools/libconf/etc/gtk-2.0/gtk.immodules
/usr/lib/vmware-tools/libconf/etc/gtk-2.0/im-multipress.conf
/usr/lib/vmware-tools/libconf/etc/pango/pango.modules
/usr/lib/vmware-tools/libconf/etc/pango/pango.modules.toolchain
/usr/lib/vmware-tools/libconf/etc/pango/pangorc
/usr/lib/vmware-tools/libconf/etc/pango/pangorc.toolchain
/usr/lib/vmware-tools/libconf/etc/pango/pangox.aliases
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0
/usr/lib/vmware-tools/libconf/gtk-2.0/modules
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/engines
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/engines/libclearlooks.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/engines/libpixmap.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-am-et.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-cedilla.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-cyrillic-translit.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-inuktitut.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-ipa.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-multipress.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-thai.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-ti-er.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-ti-et.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-viqr.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/immodules/im-xim.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-ani.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-bmp.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-gif.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-icns.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-ico.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-jpeg.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-pcx.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-pnm.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-qtif.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-ras.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-tga.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-tiff.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-wbmp.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-xbm.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
/usr/lib/vmware-tools/libconf/gtk-2.0/2.10.0/loaders/svg_loader.so
/usr/lib/vmware-tools/libconf/gtk-2.0/modules/libatk-bridge.so
/usr/lib/vmware-tools/libconf/gtk-2.0/modules/libferret.so
/usr/lib/vmware-tools/libconf/gtk-2.0/modules/libgail.so
/usr/lib/vmware-tools/libconf/pango/1.6.0
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-arabic-fc.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-arabic-lang.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-basic-fc.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-basic-x.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-hangul-fc.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-hebrew-fc.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-indic-fc.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-indic-lang.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-khmer-fc.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-syriac-fc.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-thai-fc.so
/usr/lib/vmware-tools/libconf/pango/1.6.0/modules/pango-tibetan-fc.so
/usr/lib/vmware-tools/sbin/vmware-checkvm
/usr/lib/vmware-tools/xorg/xorg-generic.conf
/usr/share/selinux/devel/include/apps/vmware.if
/usr/share/selinux/targeted/vmware.pp.bz2
/var/lib/yum/repos/x86_64/6Server/vmware_tools_rhel6
/var/lib/yum/yumdb/v/1c5aa178dc2d0d4506e0293898e5f7107290d56e-vmware-tools-libraries-x-8.6.0-2-x86_64
/var/lib/yum/yumdb/v/1f7f8aeddb8ad8f1a361f33c9e4d8b919d7f2b2b-vmware-tools-foundation-8.6.0-4-x86_64
/var/lib/yum/yumdb/v/9c6c48687a70f79c20c8e689fa1b1f0ad172190e-vmware-tools-libraries-nox-8.6.0-2-x86_64
/var/lib/yum/yumdb/v/1c5aa178dc2d0d4506e0293898e5f7107290d56e-vmware-tools-libraries-x-8.6.0-2-x86_64/checksum_data
/var/lib/yum/yumdb/v/1c5aa178dc2d0d4506e0293898e5f7107290d56e-vmware-tools-libraries-x-8.6.0-2-x86_64/checksum_type
/var/lib/yum/yumdb/v/1c5aa178dc2d0d4506e0293898e5f7107290d56e-vmware-tools-libraries-x-8.6.0-2-x86_64/from_repo
/var/lib/yum/yumdb/v/1c5aa178dc2d0d4506e0293898e5f7107290d56e-vmware-tools-libraries-x-8.6.0-2-x86_64/from_repo_timestamp
/var/lib/yum/yumdb/v/1c5aa178dc2d0d4506e0293898e5f7107290d56e-vmware-tools-libraries-x-8.6.0-2-x86_64/installed_by
/var/lib/yum/yumdb/v/1c5aa178dc2d0d4506e0293898e5f7107290d56e-vmware-tools-libraries-x-8.6.0-2-x86_64/reason
/var/lib/yum/yumdb/v/1c5aa178dc2d0d4506e0293898e5f7107290d56e-vmware-tools-libraries-x-8.6.0-2-x86_64/releasever
/var/lib/yum/yumdb/v/1f7f8aeddb8ad8f1a361f33c9e4d8b919d7f2b2b-vmware-tools-foundation-8.6.0-4-x86_64/checksum_data
/var/lib/yum/yumdb/v/1f7f8aeddb8ad8f1a361f33c9e4d8b919d7f2b2b-vmware-tools-foundation-8.6.0-4-x86_64/checksum_type
/var/lib/yum/yumdb/v/1f7f8aeddb8ad8f1a361f33c9e4d8b919d7f2b2b-vmware-tools-foundation-8.6.0-4-x86_64/from_repo
/var/lib/yum/yumdb/v/1f7f8aeddb8ad8f1a361f33c9e4d8b919d7f2b2b-vmware-tools-foundation-8.6.0-4-x86_64/from_repo_timestamp
/var/lib/yum/yumdb/v/1f7f8aeddb8ad8f1a361f33c9e4d8b919d7f2b2b-vmware-tools-foundation-8.6.0-4-x86_64/installed_by
/var/lib/yum/yumdb/v/1f7f8aeddb8ad8f1a361f33c9e4d8b919d7f2b2b-vmware-tools-foundation-8.6.0-4-x86_64/reason
/var/lib/yum/yumdb/v/1f7f8aeddb8ad8f1a361f33c9e4d8b919d7f2b2b-vmware-tools-foundation-8.6.0-4-x86_64/releasever
/var/lib/yum/yumdb/v/9c6c48687a70f79c20c8e689fa1b1f0ad172190e-vmware-tools-libraries-nox-8.6.0-2-x86_64/checksum_data
/var/lib/yum/yumdb/v/9c6c48687a70f79c20c8e689fa1b1f0ad172190e-vmware-tools-libraries-nox-8.6.0-2-x86_64/checksum_type
/var/lib/yum/yumdb/v/9c6c48687a70f79c20c8e689fa1b1f0ad172190e-vmware-tools-libraries-nox-8.6.0-2-x86_64/from_repo
/var/lib/yum/yumdb/v/9c6c48687a70f79c20c8e689fa1b1f0ad172190e-vmware-tools-libraries-nox-8.6.0-2-x86_64/from_repo_timestamp
/var/lib/yum/yumdb/v/9c6c48687a70f79c20c8e689fa1b1f0ad172190e-vmware-tools-libraries-nox-8.6.0-2-x86_64/installed_by
/var/lib/yum/yumdb/v/9c6c48687a70f79c20c8e689fa1b1f0ad172190e-vmware-tools-libraries-nox-8.6.0-2-x86_64/reason
/var/lib/yum/yumdb/v/9c6c48687a70f79c20c8e689fa1b1f0ad172190e-vmware-tools-libraries-nox-8.6.0-2-x86_64/releasever
[root@tst-01 ~]#

It seems there are no VMWare Tools processes, but there are VMWare Tools packages installed.

I would rather deploy VMWare Tools to all servers distributing packages. Can somebody confirm if VMWare Tools is correctly installed or not on this server?

ujjain

Asked: 2013-07-10 05:15:06 +0800 CST

Home directories created with wrong Selinux context

4

[root@tst-01 home]# ls -Z
drwxr-xr-x. ujjain   users          system_u:object_r:home_root_t:s0 ujjain
drwxr-xr-x. johndoe   users          system_u:object_r:home_root_t:s0 johndoe

The selinux context should be object_r:user_home_dir_t.

[root@tst-01 ~]# sesearch -T -t home_root_t
Found 10 semantic te rules:
   type_transition oddjob_mkhomedir_t home_root_t : dir user_home_dir_t;
   type_transition automount_t home_root_t : dir automount_tmp_t;
   type_transition lsassd_t home_root_t : dir user_home_dir_t;
   type_transition useradd_t home_root_t : dir user_home_dir_t;
   type_transition firstboot_t home_root_t : dir user_home_dir_t;
   type_transition smbd_t home_root_t : dir user_home_dir_t;
   type_transition quota_t home_root_t : file quota_db_t;
   type_transition sysadm_t home_root_t : dir user_home_dir_t;
   type_transition cups_pdf_t home_root_t : dir user_home_dir_t;
   type_transition postfix_virtual_t home_root_t : dir user_home_dir_t;

[root@tst-01 ~]#

New home-directories are created with the wrong Selinux context. I can fix the selinux context with chcon, but this creates problems on multiple servers.

What can be the reason the context was set wrong in the first place?

ujjain

Asked: 2013-07-10 00:17:06 +0800 CST

Could Puppet-reports be removed once these have been processed by Puppet-dashboard or PuppetDB?

11

Puppet-reports are using a lot of diskspace in:

/var/lib/puppet/reports
/var/lib/mysql

The assumption is that it stores all reports in the MySQL database, because both paths are about the same size. The resource_statuses table consist of rows that each represent a line in a reports file.

Can one safely remove the reports in /var/lib/puppet/reports after Puppet-dashboard or PuppetDB has processed them?
What is the best practice for handling reports?
Is there a way to make Puppet-dashboard automatically delete the yaml report files after processing them?

ujjain

Asked: 2013-07-02 00:49:30 +0800 CST

What is the difference between the Linux and Linux LVM partition type?

11

Fdisk shows multiple partition types. What is the difference between choosing 83) Linux and 8e) Linux LVM?

Choosing 83) Linux also works fine for using LVM, even creating a physical volume on /dev/sdb without a partition table works.

Does picking a partition type in fdisk really matter? What is the difference in picking Linux or Linux LVM as partition type?

[root@tst-01 ~]# fdisk /dev/sdb

WARNING: DOS-compatible mode is deprecated. It's strongly recommended to
         switch off the mode (command 'c') and change display units to
         sectors (command 'u').

Command (m for help): l

 0  Empty           24  NEC DOS         81  Minix / old Lin bf  Solaris
 1  FAT12           39  Plan 9          82  Linux swap / So c1  DRDOS/sec (FAT-
 2  XENIX root      3c  PartitionMagic  83  Linux           c4  DRDOS/sec (FAT-
 3  XENIX usr       40  Venix 80286     84  OS/2 hidden C:  c6  DRDOS/sec (FAT-
 4  FAT16 <32M      41  PPC PReP Boot   85  Linux extended  c7  Syrinx
 5  Extended        42  SFS             86  NTFS volume set da  Non-FS data
 6  FAT16           4d  QNX4.x          87  NTFS volume set db  CP/M / CTOS / .
 7  HPFS/NTFS       4e  QNX4.x 2nd part 88  Linux plaintext de  Dell Utility
 8  AIX             4f  QNX4.x 3rd part 8e  Linux LVM       df  BootIt
 9  AIX bootable    50  OnTrack DM      93  Amoeba          e1  DOS access
 a  OS/2 Boot Manag 51  OnTrack DM6 Aux 94  Amoeba BBT      e3  DOS R/O
 b  W95 FAT32       52  CP/M            9f  BSD/OS          e4  SpeedStor
 c  W95 FAT32 (LBA) 53  OnTrack DM6 Aux a0  IBM Thinkpad hi eb  BeOS fs
 e  W95 FAT16 (LBA) 54  OnTrackDM6      a5  FreeBSD         ee  GPT
 f  W95 Ext'd (LBA) 55  EZ-Drive        a6  OpenBSD         ef  EFI (FAT-12/16/
10  OPUS            56  Golden Bow      a7  NeXTSTEP        f0  Linux/PA-RISC b
11  Hidden FAT12    5c  Priam Edisk     a8  Darwin UFS      f1  SpeedStor
12  Compaq diagnost 61  SpeedStor       a9  NetBSD          f4  SpeedStor
14  Hidden FAT16 <3 63  GNU HURD or Sys ab  Darwin boot     f2  DOS secondary
16  Hidden FAT16    64  Novell Netware  af  HFS / HFS+      fb  VMware VMFS
17  Hidden HPFS/NTF 65  Novell Netware  b7  BSDI fs         fc  VMware VMKCORE
18  AST SmartSleep  70  DiskSecure Mult b8  BSDI swap       fd  Linux raid auto
1b  Hidden W95 FAT3 75  PC/IX           bb  Boot Wizard hid fe  LANstep
1c  Hidden W95 FAT3 80  Old Minix       be  Solaris boot    ff  BBT
1e  Hidden W95 FAT1

Command (m for help):

ujjain

Asked: 2013-06-12 00:15:04 +0800 CST

How do I authenticate with LDAP via the command line?

50

The LDAP server is hosted on Solaris. The client is CentOS. OpenLDAP/NSLCD/SSH authentication via LDAP work fine, but I am not able to use the ldapsearch commands to debug LDAP issues.

[root@tst-01 ~]# ldapsearch
SASL/EXTERNAL authentication started
ldap_sasl_interactive_bind_s: Unknown authentication method (-6)
        additional info: SASL(-4): no mechanism available:
[root@tst-01 ~]# cat /etc/openldap/ldap.conf
TLS_CACERTDIR /etc/openldap/cacerts
URI ldap://ldap1.tst.domain.tld ldap://ldap2.tst.domain.tld
BASE dc=tst,dc=domain,dc=tld
[root@tst-01 ~]# ls -al /etc/openldap/cacerts
total 12
drwxr-xr-x. 2 root root 4096 Jun  6 10:31 .
drwxr-xr-x. 3 root root 4096 Jun 10 10:12 ..
-rw-r--r--. 1 root root  895 Jun  6 10:01 cacert.pem
lrwxrwxrwx. 1 root root   10 Jun  6 10:31 cf848aa4.0 -> cacert.pem
[root@tst-01 ~]#

I have tried authentication with a certificate via ldapsearch giving /etc/openldap/cacerts/cacert.pem as a parameter, but it didn't accept this certificate for authentication.

ujjain

Asked: 2013-05-30 01:33:37 +0800 CST

What is the difference between init 6 and reboot on Red Hat / RHEL / CentOS?

9

In Linux, the init 6 command gracefully reboots the system running all the K* shutdown scripts first, before rebooting. The reboot command does a very quick reboot. It doesn’t execute any kill scripts, but just unmounts filesystems and restarts the system. The reboot command is more forceful.

Source: http://www.vreference.com/2009/09/23/reboot-is-not-the-same-as-init-6/

This seems to be true for Unix systems as Solaris, but I have always seen the following 3 commands as synonyms, as they all seem to shut down the services before unmounting the filesystems and restart the server:

shutdown -r now
reboot
init 6

Can somebody tell the differences between these commands?

ujjain

Asked: 2013-05-29 03:21:55 +0800 CST

What is the best way in Puppet to add a piece of text to the /etc/hosts file?

8

I would also like to keep the ability to manually edit hosts-file, at least the first 10 lines.

#Public IP's - eth0
192.168.1.103   front-01
192.168.1.106   front-02

#Private IP's - eth1
192.169.40.201  priv0-0
192.169.40.202  priv0-1
192.169.40.207  priv1-0
192.169.40.208  priv1-1

#Virtual IP's - eth0:1
192.169.50.202  vip-01
192.169.50.205  vip-02

Having these hosts entries at the bottom of the /etc/hosts, would be perfect. What is the best way to do this? Is there a better way than writing 8 hosts-lines manifest?

# create a simple hostname and ip host entry
host { 'front-01':
    ip => '192.168.1.103',
}

There might be server groups that need different IP's /hostnames in their /etc/hosts. I would use a template, but that means people can no longer make manual changes in their /etc/hosts as they would get overwritten by the template.

ujjain

Asked: 2013-05-20 08:08:44 +0800 CST

Puppet variables not always working

5

I want to apply the "DRY" (don't repeat yourself) principle in the nodes.pp by grouping machines, e.g. RH5 and RH6 machines instead of adding multiple lines of includes for all RH5 and RH6 servers.

Puppet on the tst-01 works fine when using:

node "tst-01" inherits basenode {

But it breaks when I try to organize servers into groups with this configuration:

node "tst-01" inherits redhat6server {

The error with "inherits redhat6server" is:

err: Could not retrieve catalog; skipping run
[root@tst-01 ~]# puppet agent --test
err: Could not retrieve catalog from remote server: Error 400 on SERVER: Failed to parse template ldap/access.conf: Could not find value for 'netgroup' at 124:/etc/puppet/modules/ldap/templates/access.conf at /etc/puppet/modules/ldap/manifests/init.pp:82 on node tst-01.tst.it.test.com
warning: Not using cache on failed catalog
err: Could not retrieve catalog; skipping run

This is the access.conf file, that works fine if inherits is set to "inherits basenode".

[root@puppet]# grep -v "#" /etc/puppet/modules/ldap/templates/access.conf 
+ : root : LOCAL
+ : @<%= netgroup %> : ALL
- : ALL : ALL
[root@puppet]#

This is the configuration in /etc/puppet/manifests/nodes.pp.

# Basenode configuration
node "basenode" {
        include resolv_conf
        include sshd
        include ntpd
        include motd
}

# Groups
node "redhat6server" inherits basenode {
        include ldap_auth
}

# Testservers
node "tst-01" inherits redhat6server {
        $netgroup = tst-01
}

ujjain

Asked: 2013-04-24 09:52:27 +0800 CST

How do I recover free space on deleted files without restarting the referencing processes?

15

When big files are deleted on a server, the files might still be referenced by processes, so the file system doesn't have more free space.

I tried to use lsof, but it seems it didn't list the deleted files. fuser -c did better work, but the list of processes is just too long to check it out for each process, especially since each process is an Oracle process.

bash-3.2# fuser -c /var
/var:      105o   29999o   20444c    3528c   27258o    7715o    3864o    3862o    2494o   18205o   17450co   17445co   14912co   14824co   14818co   14816o   14814o    8532c    8530c    7633com    7118o    6958o    6790c    6784co    6734o    6693o    6689o    6684o    6675o    6635o    6594c    6548o    6547o    6546o    6545o    6544o    6543o    6542o    6541o    6540o    6537o    6535o    6456o    6128co    6113o     335o     245co     229o     161o       8o
bash-3.2# du -hs /proc
 139T   /proc

It happens sometimes that a file gets deleted by an application or a user, e.g. a logfile and that this file is still being referenced by a process that cannot be restarted.

Are there goods methods to reclaim disk space on deleted files without restarting the process that has a reference to this deleted file?

ujjain

Asked: 2011-07-23 09:34:57 +0800 CST

Is it hard to set up Microsoft Forefront Endpoint protection?

4

I have seen that Microsoft Forefront Endpoint protection has pretty decent pricing, although it seems to require a separate System Configuration Manager installed that's quite pricey.

I am currently running 8 Windows 2008 servers and would love to use Endpoint protection, but I wonder if it's going to be a lot of work to accomplish this due to the requirement of System Configuration Manager.

I am not sure SCCM would help me in any other way, except for anti-virus. A four digit price tag would be a bit pricey considering that the actual Forefront licenses are reasonably priced.

ujjain

Asked: 2011-06-13 05:20:45 +0800 CST

Why does rsync have to be installed on both sides to work?

15

This might be a silly question, but I wanted to keep some of my servers clean and prefer not to install any additional software.

But I always thought rsync would copy data over SSH and would not need rsync on the remote end?

/usr/bin/rsync -a --delete --numeric-ids --relative --delete-excluded     --rsh=/usr/bin/ssh root@server01:/etc /.snapshot/hourly.0/server01
rsync: command not found

ujjain

Asked: 2011-06-13 05:15:23 +0800 CST

What exactly will --delete-excluded do for rsync?

42

I use rsync with great pleasure for backing up my servers, although I do have a question about the --delete-excluded parameter.

/usr/bin/rsync -a --delete --numeric-ids --relative --delete-excluded     --rsh=/usr/bin/ssh root@server01:/etc /.snapshot/hourly.0/server01

From man rsync:

 --delete-excluded       also delete excluded files from dest dirs

To me, a non English native, this means that rsync will delete excluded directories from the actual destination directory on the remote server, so if I have /home/backup and /home/settings in my exclude-folders, those folders would actually be removed from the remote server,.

From several other resources it seems that it will delete the files from the local backup folder in order to save space. For example you can create small back-ups on the server itself and exclude this data, so you won't waste storage space.

It is vital for me though that rsync will do it's job only one-way as people say it's meant to work, I do not want to take any risks in having software that deletes files/directories on the remote server.

ujjain

Asked: 2011-05-21 14:46:21 +0800 CST

How come restarting networking does not work on Debian?

5

How come restarting networking does not restart eth0 successfully on my server? None of my CentOS virtual machines have this problem.

root@living:~# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:50:56:91:00:01
          inet addr:192.168.1.110  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::250:56ff:fe91:1/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:9354 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4835 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1052796 (1.0 MiB)  TX bytes:1129902 (1.0 MiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:287 errors:0 dropped:0 overruns:0 frame:0
          TX packets:287 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:23280 (22.7 KiB)  TX bytes:23280 (22.7 KiB)
root@living:~# service networking restart
Running /etc/init.d/networking restart is deprecated because it may not enable again some interfaces ... (warning).
Reconfiguring network interfaces...
[PuTTY disconnects]
root@living:~# ifconfig
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:287 errors:0 dropped:0 overruns:0 frame:0
          TX packets:287 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:23280 (22.7 KiB)  TX bytes:23280 (22.7 KiB)

Is there a dynamic inventory for VMware in Ansible?

What are the disadvantages of disabling tinker panic 0 in NTP?

How to make NTP work despite a high offset?

What is the safest way to allow a developer to edit 3 Puppet modules?

sssd vs nslcd for RHEL-5/6

What is nsswitch compat mode?

How come all LDAP users are shown with getent passwd?

How do I make sure VMware Tools is installed and running?

Home directories created with wrong Selinux context

Could Puppet-reports be removed once these have been processed by Puppet-dashboard or PuppetDB?

What is the difference between the Linux and Linux LVM partition type?

How do I authenticate with LDAP via the command line?

What is the difference between init 6 and reboot on Red Hat / RHEL / CentOS?

What is the best way in Puppet to add a piece of text to the /etc/hosts file?

Puppet variables not always working

How do I recover free space on deleted files without restarting the referencing processes?

Is it hard to set up Microsoft Forefront Endpoint protection?

Why does rsync have to be installed on both sides to work?

What exactly will --delete-excluded do for rsync?

How come restarting networking does not work on Debian?

Can you pass user/pass for HTTP Basic Authentication in URL parameters?

Ping a Specific Port

Check if port is open or closed on a Linux server?

How to automate SSH login with password?

How do I tell Git for Windows where to find my private RSA key?

What's the default superuser username/password for postgres after a new install?

What port does SFTP use?

Command line to list users in a Windows Active Directory group?

What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats?

How to determine if a bash variable is empty?