Some other pluses for this are easy setup for HBAC, Sudo and sudo command priveleges (host based and user based), SELinux user maps, and easier password policy management.

@dafyre said:

@johnhooks said:

@scottalanmiller said:

@johnhooks said:

@dafyre said:

Why are there two NFS servers to start with? (Just curious)

They're only 20-24 drives each. About 50TB per server. All of the engineer's home folders are on them so one isn't enough.

At some point down the road we are going to implement a clustered storage but we just don't have the time right now because of time constraints for this project.

Gluster could be done in an hour. I have how tos posted for both NFS Home Automounting and Gluster 🙂

Ha yes anywhere else it would take no time at all. We have so much red tape to jump through it's ridiculous.

Start setting up and testing a Gluster Cluster (see what I did there?)... and maybe by the time you get it set up and tested, you'll be done playing jump rope with the red tape.

The other issue is the NFS servers we have right now are applicances (was done before I got here I've only been here less than a month). We can install certain things, but too much and we might lose "support."

We have to have these inspectors come in and approve stuff if any changes are made to this network. It's ridiculous.

Well, I didn't find anything convincing in the way of holding off.
It's away!

@scottalanmiller said:

@JaredBusch said:

@scottalanmiller said:

@JaredBusch said:

@coliver said:

@scottalanmiller said:

Nougat?

That's it. Curse my insatiable desire for McDonald's not chicken.

Nutella probably doesn't count as a dessert by itself to most people. My 6yo would disagree.

Clearly you don't understand Nutella, it is a food group, not a dessert.

Heh, I should think of it that way. We buy it in large two jar packs from CostCo often enough.

My sixteen year old niece buys jars and hides them in her room and just sites around eating it with a spoon. Here we eat it in croissants most of the time.

My daughters get Nutella sandwiches for lunch every day in their lunch box. Along with Edamame, Egg, hotdog, and fruit.

@scottalanmiller said:

@johnhooks said:

Well looks like I might actually have to go over there. I tried to switch users and it looks like it's stuck or something. TeamViewer is hung on a cannot display error. Suck.

Never seen that with SC, just saying 😉

Well I normally use NoMachine and connect to the ZT network I set up for them. But somehow she screwed that up as well. So this was a last ditch effort to get something working.

Looked at it a while ago, interesting technology but no clue where it would make sense to use.

SSLv2 shouldn't be running in the first place anymore. Ref: SSL Labs Documentation

Thanks everyone!

@wirestyle22 said:

Question: Isn't the advantage of ZFS modern advances like striping, device pooling, block level CRC, etc?

Simple answer: no. Many of those things are equally negatives. Why would you want striping or device pooling in your filesystem?

@stacksofplates

Btw Centos got updated to:

CentOS 7.4 (1708)
CentOS Linux release 7.4.1708 (Core)

https://wiki.centos.org/Manuals/ReleaseNotes/CentOS7?action=show&redirect=Manuals%2FReleaseNotes%2FCentOS7.1708

Noteable mentions

At least 1024 MB RAM is required to install and use CentOS-7 (1708). When using the Live ISOs for install, 1024 MB RAM produces very slow results and even some install failures. At least 1344 MB RAM is recommend for LiveGNOME or LiveKDE installs.

The initramfs files are now significantly bigger than in CentOS-7 (1503). You may want to consider lowering installonly_limit in /etc/yum.conf to reduce the number of installed kernels if your /boot partition is smaller than 400MB. New installations should consider using 1GB, which is now the upstream recommended, as the size of the /boot partition.

Sadly Centos 7.4 does not work with this guide 😞 Damn

@dafyre said:

@scottalanmiller What separates the two? er... What makes Webmin not enterprise friendly vs Cockpit? (it has been a LONG time since I've used webmin and I haven't used Cockpit yet).

Webmin is a "third party unsupported add on crutch." It's whole purpose is to make UNIX graphical without using the officially supported toolsets. While that in and off itself isn't "bad", it's bad conceptually. It's purpose is to be a crutch for people who won't learn how to run the system and ends up being just like FreeNAS or whatever - just limitations and risk layered on top of the OS.

Cockpit is different. It is part of the OS itself, not an add on. It's fully managed and supported by the team that makes the OS (Red Hat, in this case.) In this way it is like the Microsoft GUI interface - still not ideal as a management tool, but stable and supported.

That Webmin is a huge, dangerous catch all for management and Cockpit is a limited graphical view of capacity planning with a few very simplistic management tools also makes them very different. Cockpit is not meant to replace being a good admin, it's meant to give some graphical views where they make sense. Webmin is meant to let people run an OS that they don't understand.

@StrongBad said:

LVM is awesome, it is a great tool.

I use it all the time. Snapshots are awesome. I've just never needed to use multiple disks and didn't think of the above scenarios when you would have multiple PVs.

@scottalanmiller said:

@Dashrender said:

Sure, when I want to buy/download something I have to make sure I pick the correct account - but we've been doing that on mobile devices for years.

Only you people in the WIndows phone world. I've never done that. Not sure when it would even come up.

LOL - I knew you would pick on that - but no, seriously - on my Android phone I would switch between different amazon accounts back in the day because they didn't allow shared content between account on Amazon services.

FYI - Google and Amazon services don't work well if at all on Phones phone (though Amazon does have an Amazon store app for buying stuff on Windows phone, but not for apps).

Since the images disappeared, I added them as code.

Also, Identity Management (FreeIPA) makes it really easy to store public keys in LDAP so any system joined to IdM can verify the key.

@scottalanmiller said:

You could, but it would require making lots and lots of shares potentially. As opposed to one or two shares with granular permissions.

Ah ok, makes sense.

@JaredBusch said:

@Dashrender said:

There are always fringe cases. but most of my users are not such cases.

My users either. Sadly two of those boxes are on premise still. One is Exchange 2007 and the other is Exchange 2010 and OWA sucks there.

I circle the O365 question back to the people involved every few months.

On premise at customer sites? Yeah mine too, and I'll be upgrading to Exchange 2016 very soon to give the better OWA experience before we move to O365.

Seems to be that way.

Doesn't take all that much. And you never know if the society is real but the email is not. Although the entire premise is very scammy. It's got Amway written all over it.

@scottalanmiller said:

@dafyre said:

For somebody who feels they are definitely qualified, the initial phone interview, or potentially second phone interview would cover this, I think.

Except that they already stated what the "range" is for "qualified." Salary IS negotiable, but it also tells you that you are going into a bad situation.

I'd definitely agree with that.