OSX was caching my ssh passphrases – easy fix

I have used ssh-agent for a long time. I enter my passphrase once, then let ssh-agent handle my ssh sessions. Last night, I noticed I ssh’d to a box and did not enter my passphrase. I got logged in. I had just rebooted my laptop so I was very concerned about this. It look at while, but eventually, I discovered the cause. OSX was caching the passphrase. More interestingly, it was not using […]

OSX was caching my ssh passphrases – easy fix Read More »

slocum

This post has been replaced by a newer one. For reference, the previous post on this server is still available. . This server recently moved to a rack-mount chassis. On an interim basis, it contains an LSI SAS 9101-16i. For future reference, this is the slocum server, which I use for various jails and services. The filesystems, well, some of them: And dmesg:

slocum Read More »

Flashing an LSI SAS 9201-16i

WARNING: This did not work. It succeeded, without error, but the card did not work. There will be a new blog post soon. Yesterday, a new LSI SAS 9201-16i arrived. I bought it on eBay from a supplier in China and paid for expedited shipping. I offered US$250 for their $338 listing and it was accepted. Shipping was another $30. It arrived 6 days later. Why do I need one? The system in

Flashing an LSI SAS 9201-16i Read More »

Greg Truskey, TruCo

I’m writing this to document the facts. I’ll leave adjectives and opinions to you. Greg Truskey, TruCo was hired to perform renovations which started in August 2015. The estimate was 11 weeks. He was on site from about 9am to 3:30pm. Arriving earlier or late was uncommon. On days he would not arrive, we would not be notified. It would be fine weather, and he would not be present. You will recall the

Greg Truskey, TruCo Read More »

pkg upgrade: Certificate verification failed for /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Class 2 IV Server CA

I noticed this on one FreeBSD server today: $ pkg -vv | grep url url: “pkg+http://services.unixathome.org/packages/103amd64-default-master-list/”, I decided: let’s use https, not http, there. After making the change (in my case, it was in /usr/local/etc/pkg/repos/local.conf, I tried upgraded packages, and it barfed: $ sudo pkg upgrade Updating local repository catalogue… Certificate verification failed for /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Class 2 IV Server CA 34401225432:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s3_clnt.c:1191: Certificate verification failed for /C=IL/O=StartCom Ltd./OU=StartCom

pkg upgrade: Certificate verification failed for /C=IL/O=StartCom Ltd./OU=StartCom Certification Authority/CN=StartCom Class 2 IV Server CA Read More »

Changing the default host for Cisco AnyConnect OSX client

My first day back from EuroBSDCon 2016, I wanted to fix an issue which arose before the conference. My Cisco AnyConnect client configuration contained old hosts which I no longer used, but didn’t contain the host I was primarily using now. I could add the host, but upon restart, that new host was no longer there. Plus, when started, AnyConnect would attempt to connect to the old host, which is not even remotely

Changing the default host for Cisco AnyConnect OSX client Read More »

Moving from shelves to racks

The time has come for me to move from shelving to racks. My first thought was to list the various racks over the years. Look below for old photos and links to the posts I lifted them from. Why a rack? In the past, I have always built my own servers, computers, from parts. I always chose tower cases for space and quiet. A large fan and heatsink can be easily mounted in

Moving from shelves to racks Read More »

leapsecond file (‘/var/db/ntpd.leap-seconds.list’): expired less than N days ago

After upgrading all my servers to FreeBSD 10.3 last weekend, I started to see these messages in the logs: Aug 3 21:15:19 slocum ntpd[29456]: leapsecond file (‘/var/db/ntpd.leap-seconds.list’): expired less than 64 days ago I found this post which suggested running service ntpd fetch but that did not fix it. While debugging the issue, I added ntp_leapfile_fetch_verbose=”YES” to /etc/rc.conf, which provides more output to the fetch command: $ sudo service ntpd fetch ntp_src_leapfile version

leapsecond file (‘/var/db/ntpd.leap-seconds.list’): expired less than N days ago Read More »

PGCon 2016 charity auction

Every year PGCon holds a charity auction as part of the closing session. All proceeds go to The Ottawa Mission, a local group. The auction includes items you would keep as art, and some you would consume before you left town. Others, such as empty paper bags or cardboard boxes are left in the recycling bin. It is all in good fun. 1 Chocolate from Japan $20.00 2 Elephant with cloud $220.00 3

PGCon 2016 charity auction Read More »

Scroll to Top