From: John Hasler on
Hadron writes:
> It has a LOCAL monitor (frequently via a monitor/knd switch) in a
> secure room and NO ssh or vnc access quite frequently. I find it
> amazing so many idiots in this group dont seem to understand REAL
> security.

Who the hell said anything about "security"? I just asked why the
server had a monitor. In most cases a monitor on a server is a waste of
money, space, and electricity, but there are valid reasons for one. In
the "locked server room with armed guard" scenario (not the one that
was under discussion AFAIK), however, the monitor and keyboard probably
should be locked in a closet in the server room when not in use. The
monitor should certainly not be left hooked to one of the servers
running a screensaver.

> Its the old case of a little knowledge being a dangerous thing once
> more.

As you regularly demonstrate.
--
John Hasler
jhasler(a)newsguy.com
Dancing Horse Hill
Elmwood, WI USA
From: John Hasler on
Huge writes:
> So, putting a physical console on a box makes it secure?

Taking it off makes it (marginally) more secure.

> What about all the connections that box needs to act as a server...

His don't have any. They're "secure".

> How are you going to manage physical consoles in a data centre with
> 5000 servers in it...

If it is a top secret national security facility, by wheeling one
physical console around from machine to machine. In other words, at
great inconvenience and expense.

More likely even NSA uses SSH.
--
John Hasler
jhasler(a)newsguy.com
Dancing Horse Hill
Elmwood, WI USA
From: mjt on
On Fri, 09 Jul 2010 22:54:39 -0500
Ignoramus30064 <ignoramus30064(a)NOSPAM.30064.invalid> wrote:

> At least retrospectively, paying very substantial contract fees would
> not yield benefits commensurate with the expense.

Depends on the organization. I assume you're with a
small outfit, who can "get by" without the advantage
of falling back on a service contract.

I can see this is a scaling perspectives view. You're
talking about "dozens" of servers. I deal with clients
such as DoD contractors, large corps, and such. To put
it into perspective, *one* department within a local
county government runs a zSeries with 800+ instances
of Linux (SLES). So, my bad for not scaling down.

> As of now, admining many dozens of these boxes is not even my full
> time job and I spend, perhaps, 2-3 hours a week at most administering
> them.

So, maybe the sysadmin at your organization should
be handling the sysadmin work?

--
Arbitrary systems, pl.n.:
Systems about which nothing general can be said,
save "nothing general can be said."
<<< Remove YOURSHOES to email me >>>

From: Ignoramus30064 on
On 2010-07-10, John Hasler <jhasler(a)newsguy.com> wrote:
> HoneyMonster writes:
>> Red Hat, with a support contract, you berk.
>
> Professional paid support is available for every major distribution.
> Canonical would sell him a support contract for Ubuntu. So would many
> others.
>
>> I hear this a lot. "How can it be serious if you are not paying to
>> anyone".
>
> The problem is that the PHBs can't understand that because it is open
> source non-"vendor" support is not inferior: the "vendor" is not in the
> privileged position of having sole access to the source. They seem to
> actually want sole-source support.

OK, you got me, what is "PHB"?

>> The box with the screensaver has been up 274 days and shows extremely
>> cute pictures.
>
> Why does a server have a monitor at all?

I have a shelf with a few machines that sits in a roomful of people. I
wanted one of them to show alternating cute pictures to lighten up the
appearance.

i
From: Ignoramus30064 on
On 2010-07-10, mjt <myswtestYOURSHOES(a)gmail.com> wrote:
> On Fri, 09 Jul 2010 22:54:39 -0500
> Ignoramus30064 <ignoramus30064(a)NOSPAM.30064.invalid> wrote:
>
>> At least retrospectively, paying very substantial contract fees would
>> not yield benefits commensurate with the expense.
>
> Depends on the organization. I assume you're with a
> small outfit, who can "get by" without the advantage
> of falling back on a service contract.

I tend to think about not in terms of size, but in terms of being able
to solve our own problems.

> I can see this is a scaling perspectives view. You're
> talking about "dozens" of servers. I deal with clients
> such as DoD contractors, large corps, and such. To put
> it into perspective, *one* department within a local
> county government runs a zSeries with 800+ instances
> of Linux (SLES). So, my bad for not scaling down.

I thought a lot about this. My general goal is to enable us to use
less servers rather than more, everything else being equal. That was
one of the big advantages of Linux migration, we could get more from
every box and could scale down the number of servers that we had.

That said, if we were to need more machines, I think that what I have
(scripts and such) would scale easily to perhaps 500 machines, and I
would not need to work much harder. Beyond that, I would need to make
changes.

I still do not see why I would need a support contract if I had more
machines.

>> As of now, admining many dozens of these boxes is not even my full
>> time job and I spend, perhaps, 2-3 hours a week at most administering
>> them.
>
> So, maybe the sysadmin at your organization should be handling the
> sysadmin work?
>

I am the sysadmin for the linux boxes. It is just not my full time
job.

i