Open Source

Authentication tried for dan with correct key but not from a permitted host

2 Comments / FreeBSD, Open Source, ssh / By /

I kept seeing these messages: Jun 12 04:09:18 nyi sshd[94523]: Authentication tried for dan with correct key but not from a permitted host (host=dbclone.example.org, ip=10.6.0.9). Jun 12 04:09:18 nyi sshd[94523]: Authentication tried for dan with correct key but not from a permitted host (host=dbclone.example.org, ip=10.6.0.9). I’ve been seeing them for a long time. How long? Three years. I didn’t think it was that long. But back in July 2010 I mentioned it. After […]

Authentication tried for dan with correct key but not from a permitted host Read More »

sshd: error: key_read: uudecode failed

1 Comment / Open Source, ssh / By /

I started seeing this error: Jun 10 19:12:38 nyi sshd[92208]: error: key_read: uudecode AAAAB3NzaC1yc2EAAAABJQAAAIBdX/USEtxnO91Vpujney8gwkq2sRrcU9R6nKAoGv1eNMWrMD9a93kZMjR4fFMAH87g+zyHBftxCsyE0wJX2A0UFgIQsiuOOINkTJMyk\n failed I couldn’t figure it out. Then I searched ~/.ssh/authorized_keys for that string. I found it in there. But the line was incomplete. It looked like I’d deleted the last part of the line. It should end with something like this: … onsnJNGeljjf9i8U3aorbSZj3jiEuTYMoTi9XK2dvGh5bbEQggw47jQg= dan@bigtimes.example.org Solution: I deleted that line. Then I copy/pasted the public key back into the file

sshd: error: key_read: uudecode failed Read More »

Converting from cvs to svn

Leave a Comment / Open Source, subversion / By /

I started playing with cvs2svn, a tool for migrating a CVS repository to Subversion. cvs2svn does more than just Subversion. It also handles git and Bazaar. Why am I moving from cvs? I couldn’t get my existing cvsupd server to run on a new server. Attempts to start cvsupd gave: $ sudo /usr/local/etc/rc.d/cvsupd onestart Starting cvsupd. 2013.06.10 15:35:22 UTC [35995]: CVSup server started 2013.06.10 15:35:22 UTC [35995]: Software version: SNAP_16_1h 2013.06.10 15:35:22 UTC

Converting from cvs to svn Read More »

Using compression with PostgreSQL’s pg_dump

4 Comments / databases, Open Source, PostgreSQL / By / /

I attended a few of the talks at PGCon 2013 last month. One talk, for which I took several notes and made a few choice tweets. The main one I’m following up on is using the -Fc option on pg_dump. It was during Magnus Haganders’ talk on PostgreSQL Backup Strategies that I posted that tweet. In the two weeks since that talk, I managed to do some testing. Let’s have a look at

Using compression with PostgreSQL’s pg_dump Read More »

Bacula – AfterJob: Host key verification failed

Leave a Comment / Backups, Bacula, Open Source / By /

I’ve been moving services from one server to another. Manually. My Bacula server is now running in a FreeBSD jail. I just got ready to copy backups from disk to tape. But one aspect was failing: updating my statistics. After each tape job, I collect statistics on that tape, with respect to tape errors. That is done via SSH. The job error was: 05-Jun 13:52 bacula-dir JobId 132208: shell command: run AfterJob “/home/dan/bin/dlt-stats-kraken”

Bacula – AfterJob: Host key verification failed Read More »

nagios – check_ping CRITICAL – You need more args!!! Could not open pipe:

2 Comments / Jails, Nagios / By /

I’ve been moving some services around lately. A server is dying and I need to move stuff off it. Today I managed to move Bacula and Nagios onto a new server. After a short bit of struggle, I had just one service check that was failing: check_ping. Here’s the example: $ /usr/local/libexec/nagios/check_ping -H bast.example.org -w 3000.0,80% -c 5000.0,100% -p 1 CRITICAL – You need more args!!! Could not open pipe: Google searches did

nagios – check_ping CRITICAL – You need more args!!! Could not open pipe: Read More »

ezjail – renaming, moving, and renumbering

1 Comment / Jails, Open Source / By /

ezjail is my tool of choice for managing jails. I’ve been using it since 2008. Today, I want to do something which ezjail won’t do for me, but will allow me to do. I created a bunch of jails for a Bacula tutorial at BSDCan. Now that I have that server safely home again, I need to add more services to this jail server. My main development machine is acting up. It is

ezjail – renaming, moving, and renumbering Read More »

Restricting IP addresses to specific databases

1 Comment / Open Source, PostgreSQL / By / /

Sometimes, you don’t want just anyone talking to your database. In fact, sometimes, you don’t want anyone accessing your database except very specific applications. In this case, I am setting up about 20 databases, each one dedicated to a specific use, and to be accessed only from one IP address each. In this post, I’ll talk about how I first set this up with pg_hba.conf, and then how I altered it to be

Restricting IP addresses to specific databases Read More »

The Bacula Tutorial jail server

Leave a Comment / Backups, Bacula, BSDCan, Conventions, DHCP, Disks, File Systems, FreeBSD, Jails, NAT, Operating Systems, pf, PostgreSQL, ssh, ZFS / By /

One of the challenges of providing hands-on demonstrations is giving everyone their own sandbox to play in. I don’t want people to spend time on installing software. I want people to learn about the software in question, specifically Bacula. With this in mind, I’ve been building up a solution based on FreeBSD 9.1, ZFS, and jails. My solution is pretty nifty, but I don’t think it’s anything special. The key is simplicity. The

The Bacula Tutorial jail server Read More »

Creating a ZFS-only box – the first look

3 Comments / File Systems, FreeBSD, ZFS / By /

I’m about to start setting up a ZFS-only box using FreeBSD 8.2. There will be no UFS volumes in this system. Every previous server I have set up has always booted from a gmirror’d UFS system first, then mounted a ZFS array. This time, everything will be on ZFS. I’ve described this server previously when I first chose the parts back in January. Now, the push is on to get this system installed

Creating a ZFS-only box – the first look Read More »

Scroll to Top