Dibbler's Net

Sunday, December 28, 2008

End of Year Updates

End of year thoughts, links, and general ramblings.

It’s that time of year again. The time when the major care and feeding of servers, notebooks, and desktops gets done. Cleaning up the hard drives, checking on software updates and finding time to install new items.

First I saw over on my favorite Solaris blog that LDOM 1.1 is now out with nice new features I have been waiting on.

Then Hsphere (or Psoft or Parallels) Finally released hsphere with support for FreeBSD 7. That then spawned the process to update one of my FreeBSD boxes to FreeBSD 7 Release. I tried a new way of upgrading. That failed horribly. Won’t try that way again. Ended up doing a build world and portupgrade by hand to get the upgrade completed. Did learn about a cool FreeBSD feature called libmap. This was a great bit of help and something to remember in the future. I also used the /rescue/cp and ls which are nice non-linked files which are good if you accidentally break your elf library.

I am thrilled to see the ZFS support in FreeBSD but the push that you use 64 bit and a good chunk of memory makes me a bit concerned about how ready it is for everyday use. I am thrilled with ZFS on Solaris 10 and am glad to see it moving to other platforms. Now the big question as to if it will move to Windows.

I also updated a home machine to the new Opensolaris 2008/11 update. It’s working great and the gui for zfs snapshots is cool. I was kind of forced to do this as I broke the previous config. With Opensolaris and coming soon to Solaris is the removal of Root as an actual account. It is changing to a Role instead. This means that if you break you one and only admin account and accidentally remove the root role then you kind of ruin your own day. Word of advice, we were all used to having the root account as a backup, now it’s time to create a secondary account for your backup.

Rumor is that Syngress has finally fixed the web site for the online book information (which I now see under Companion Website when you login). Most of this was due to the timing of our book release happening at the same time as http://www.elsevier.com was moving everything from syngress to them. This caused some issues which is why we created the www.nagios3book.com  website just so we could get the data out there promised in the book. Along with that is the VMWare image as well.

Along with all this is the whole end of year time of reflection. What have we learned this year, done this year, and what get’s bumped to the list for next year. I am still a true believer that we are rapidly closing in on the 15 year mainframe cycle. As we see more systems and applications move to the cloud, or virtual systems, and away from the dekstops we are moving back along the circle of computer management. As we come back closer to where I started it is interesting to see how the lessons we learned from the days of mainframes are still applicable today and how so many people have forgotten what we learned back then. I have no doubts that as we move past this renewed mainframe era back to the desktop era it will look nothing like what the first desktop era did, but it will be fun to experience.

In an effort to cover all the subjects at once there is the issue of Security. The past year has been nothing but security nightmares. I personally believe that we are about 1-2 generations away from true personal security making a comeback. It seems that while today’s youth are more technically inclined they are also too willing to sacrifice their entire personal life without due regard. I am curios to see how the first true Myspace generation does when they become the majority of the workforce. We hear small stories every few weeks about employers that check possible applicants online. How will people react when that becomes the norm for everyone. How will we react when half the political candidates are fighting archives of their myspace and you tube videos from 10 and 20 years in the past. We haven’t had a generation yet that truly demanded the right to delete their content off the Internet and it’s now a question of will that even be possible or are we already too late.

It brings to light the numerous books, movies, and futuristic stories about everything online. Will this truly divide people between those who are online and those who avoid it out of fear or desire to maintain privacy. Shows like Ghost in the Shell, the Foundation Series of books, and pretty much half the stories you read in Analog deal with this in some form or fashion. What side of the fence will you land on. I recently read Oath of Fealty and I think it poses a very interesting view of some of the initial issues that a combined society will see.

So with that we end 2008. We welcome 2009 with an understanding that there will be more of the same, and at the same time some new and interesting times. The fun and gadgets should start early with CES but at the same time it will show us how bad the new recession is on the gadget hunters and on Vegas itself.



Posted by derrick in • BloggingNagiosSecurityUnix
(2) Comments | Permalink

Wednesday, October 08, 2008

New Book Review Posted on Slashdot Frontpage

A co-worker sent me a message letting me know that our Book was recently reviewed and that was posted on slashdot. Today being a long work day I hadn’t gotten to slashdot today but I did find time to read through the review. I felt it was fair and identified similar faults that Max and some of us felt were there and could be fixed if only there were more time (the story of any book project).

Please read the review and let me know what you think. If you have the book and have comments let me know. Also if you have the book and have had issues with Syngress’s web site for the digital content you can also find that at Nagios3Book.com.


Posted by derrick in • BloggingNagiosPersonal
(4) Comments | Permalink

Monday, August 04, 2008

Read Only CGI Patch for Nagios 3.0.3 Updated

For many many version now I have maintained a patch for Nagios called the Read Only Patch. I have found in most cases that when I have a Nagios install I have some type of external user involved. Nagios is a great tool for showing what’s working and not just what’s wrong. But in order to allow external users to see what’s working they need an account. And with that account there are all sorts of commands they can run or comments they can see. This patch removes that ability for selected users. It also removes comments as in most Nagios installs I leave the comments as a way for techs to relay information regarding a system and that information is not always meant for external view. If you have any questions please feel free to comment or ask them on the Nagios-Devel Mailing list.


Download the tar file.

# READONLY Patch for Nagios 3.0.3 Derrick Bennett Aug 4, 2008

This patch will provide for a new option in cgi.cfg



Any Nagios userid listed in the above cgi variable will be limited to Read only CGI Access.
This will block any service or host commands normally shown on the extinfo pages.
This will also block any service or host based comments from being shown to read only users.

As shown below instead of seeing the commands or comments they get a notice that commands are not available and comments just don’t show up at all.


Posted by derrick in • BloggingNagios
(1) Comments | Permalink
Page 1 of 2 pages  1 2 >