Best unofficial Apache Server developers community
Username
Forgot password?
Sign in with Twitter account
Sign in with Facebook account
List archives

realize users based on tags

modulepath in puppet.conf ignored?
(10 lines)
Re: Small bug: puppet.spec still refers to 2.6.0
(65 lines)
Sep 17, 2010
CraftyTech
CraftyTech
Hello All,

     Can someone share their syntax on how they'd realize users based
on tags?

Thanks,

Henry





Reply
Tags: syntax
Messages in this thread
realize users based on tags
reply Re: realize users based on tags
(19 lines) Sep 17, 2010 12:27
reply Re: realize users based on tags
(45 lines) Sep 17, 2010 15:39
reply Re: Re: realize users based on tags
(59 lines) Sep 17, 2010 17:13
reply Re: realize users based on tags
(58 lines) Sep 19, 2010 16:33
Similar Threads
users@httpd] Redirecting based on the Country
Hello,

We have 2 sites domain.com & domain.co.uk which has separate data. We
want
the UK customers to land only in domain.co.uk and reset of the people
should
land in domain.com. Is there any possibility for doing this Apache



MercuryMinds Technologies Pvt Ltd
www.mercuryminds.com "An E-Commerce mentor"
sakthi.e### @mercuryminds.com
www.mercuryminds.com


Realize different user/groups on different systems
Hi Puppetusers,

i want to mangage HP-UX, Solaris and SLES with puppet and eventhough  
the content of configurationfiles is often the same, the owner und  
groups are different. On SLES I've got root:root most of the times. On  
Solaris it's often 'root:sys' (sometimes its root:others). On HP-UX  
root:sys and bin:bin (together with mode r--r--r--) is common. Because  
I'm no expert here and I dont know the reason for the different groups  
I want to stick to the schema of a fresh installation. I'm not aware  
of the implications when generalize to root:root for example. So my  
question is: How would you deal with this?

One thought was to define the default File-ressource depending on  
$operatingsystem. So I choosed root:root for SLES and root:sys for  
Solaris and HP-UX. But when I have a file that uses bin:bin on HP-UX  
how do I realize that? Because the following

file { '/foo',
	group => $operatingsystem ? {
		'HP-UX' => 'bin',
	},
}

is not allowed because I will get and error under SLES (No matching  
value for selector param 'SLES'). Adding "default => undef" works but  
it doesnt mean 'take the default for other OSes here' but 'the gid  
doesnt bother me at all'.

Another thought was to define a few global varibales like $group_root  
und $group_bin and setting group_bin to "bin" on HP-UX, "sys" on  
Solaris and "root" on SLES. That will keep my ressourcedefinitions  
short but may be a bit confusing. And eventually it will break my leg  
sometime when I realize there is a configfile I want to manage with  
bin:bin under Solaris.

Maybe the best approach is to have a definition that will figure out  
the right owner and group by looking at the opertingsystem and the  
path of the file (like 'all files under /etc/ should have root:sys  
under solaris und bin:bin under HP-UX). Unfortunatly for me the  
which-owner-which-group-schema seems to be nearly completly random and  
I didnt find reliable rules on the net.

-Stefan



content based routing based on header value
I am setting up a route in XML and want to send messages to a
destination based on a field in the header.  I have the following:

<log message="Analyzed [${body}] with destination -->
${header.dest}"/>
                <choice>
            		<when>
				<header>'${header.dest}' = 'stuff'</header>
				<to uri="jms:somewhere" />
			</when>
		</choice>

As I test this the log gives me the correct information for
${header.dest} and that being "stuff", but I do not know how to test
the value in order to send the message to the proper location.  What
is the proper syntax here?  I looked through the Camel in Action book
and the camel website and cannot find anything.

Thanks,
Mark


IP based node sections instead of hostname based?
Hi experts,

Is there a way to specify in the nodes.pp sections with the ip address of
the client?
Currently I only saw instructions to use wildcarded hostnames.

Thanks a lot

-Yushu

+-------------------------------------------------+
| Yushu Yao
| Ph:1-510-486-4690
|
| Lawrence Berkeley National Lab
| Mailstop 50B-6222
| 1 Cyclotron Road
| Berkeley CA 94720-8147 - USA
+-------------------------------------------------+





svn commit: r987242 - in /httpd/httpd/trunk/docs/manual/vhosts: ip-based.xml name-based.xml
Author: poirier
Date: Thu Aug 19 17:38:18 2010
New Revision: 987242

URL: http://svn.apache.org/viewvc?rev=987242&view=rev
Log:
Minor corrections and cleanup in the descriptions of IP-based and
name-based virtual hosts.

Modified:
    httpd/httpd/trunk/docs/manual/vhosts/ip-based.xml
    httpd/httpd/trunk/docs/manual/vhosts/name-based.xml

Modified: httpd/httpd/trunk/docs/manual/vhosts/ip-based.xml
URL:
http://svn.apache.org/viewvc/httpd/ht...242&view=diff

Simulated users?
Hello Everyone,
I am a new JMeter user and am having difficulty setting up my tests to
accurately simulate users.  I ran a test with 50 simulated users and it
completely hammers the server (which didnt seem right to me).  So then I
tried with one simulated user and it appears to hammering the cache at an
unrealistic rate.  Almost as if the single simulated user is looping
through
the test at an incredible rate that a normal user couldnt do.  Its worth
noting that the test is being run behind a few XServes as the actual test
would be 1000 simulated users (once I figure this out).

You must log into the site using username/password combination.  After
logging in, your session is stored in a cookie.  I used the cookie manager
for that piece and recorded my test using JMeters proxy feature.  I didnt
do
anything fancy when recording the test, just clicking on different pages
and
waiting for them to load.  With that said, here is how I have the test
setup:

-Thread (with the # of simulated users set inside it)
--Cookie Manager
--Recorded test plan
-Listener 1
-Listener 2
-Listener 3

Is there a key controller or component I am missing?  Or is this really
what
1 user will do to the website?  Once I figure out how to properly test
with
one user I will try to scale this number up to the 1000 that is needed.

Thanks for any help you can give!



Making users top
May someone already did this and can share some experience.

I will write in ruby but language really doesn't matter.

I want to create users top in my app, but with one condition - it
should be indexed. So any user can find on what place in the top they
are and who their immediate adversaries.

I came up with this lame idea:

---

last_top_update = get_last_top_update

UserCollection.find({"updated_at" => {"$gt" => last_top_update}}, ,
{:fields =>  ['rating']}).each_with_index do |u,idx|
  UserTop.update({"_id" => u['_id']}, {"rating" => u['rating'],
"idx"
=> idx}, :upsert => true)
end

set_last_top_update_to_now

----

So basically i want to run script every now and then and populate top
collection. The BIG problem with this approach is it's traffic and
memory consumption - it will gather all elements from mongo to ruby
and then to mongo again!

After i populated collection i wanted to do something like this:

# making two queries because mongo have $or only in unstable
def find_users_adversaries(user_idx)
  bigger = UserCollection.find({}, {"idx" => {"$gte" => user_id}) #
searching for users with bigger rating
  smaller =  UserCollection.find({}, {"idx" => {"$lte" => user_id})
#
searching for users with smaller rating

 return bigger, smaller
end

All in all it should work but complexity and resource consumption is
making me think that this is not best approach.

Any suggestions?





users in Portugal
Hi,

Just pinging to have an idea of how many CouchDB users, or just people who
sympathize with CouchDB, exist in Portugal.

cheers




"Reasonable men adapt themselves to the world.
Unreasonable men adapt the world to themselves.
That's why all progress depends on unreasonable men."


replication users
 Are there any special considerations when replicating the _users
database as opposed to normal databases?  Is this a good way to share
users between servers that should share users and trust one another?


Cassandra Users
We started a Cassandra Users page on the Cassandra wiki -
http://wiki.apache.org/cassandra/CassandraUsers - as the list of users is
growing far beyond the ones people normally think about.

Please take a look and update where necessary including
company/organization name, description of use case(s), and potentially a
link to a blog post or press release.

We realize people may not want to share their use case - that's a-okay. 
We're just looking for those that would - plus it's free advertising for
getting your name out there :).

Anyway, it's going to be linked off of the FAQ page as well as the
cassandra home page. (http://wiki.apache.org/cassandra/FAQ#using_cassandra)

what are buildr users using to deploy?
I'm curious what other buildr users are using to deploy their java apps?

I've written custom buildr tasks using net-ssh and net-sftp to upload
files
and perform remote admin tasks including deployment of wars and standalone
java apps.

While the custom tasks I wrote work well, I'm debating a move to something
like Capistrano/Murder with hooks in Buildr.




Re: [users@httpd] 301 redirect
On 19.05.10 00:02, Piotr Kloc wrote:
 Can I set the redirect 301 not in .htaccess but in apache conf ?
 I have tried to set this
 
 RewriteEngine on
 RewriteRule ^webmail/(.*)$ http://somedomain.com/webmail//(.*)$ " rel="nofollow" target="_blank">http://somedomain.com/webmail//(.*)$  [R=301,L]

Redirect permanent /webmail/ http://somedomain.com/webmail/

you even don't need mod_rewrite for this.
(many people use mod_rewrite where simple redirect is enough).

 and it doesnt work 

as was mentioned (just for sure) - URL always starts with '/'.




Volume of mongodb-users
Hi all,

we are well above 200 emails to the mongodb-users mailing list now every
day. It is getting painful to follow. Should we do something about it?

Some time ago we already had this conversation. Somebody suggested to
split mongodb-users into categories, one mailing list per category.





users@httpd] Apache MPM
Hi,

how can i decide to use prefork or worker MPM. Can anyone describe in
detail
and how can i make a server which can handle 2000 users per second. How
can
I optimize the server response. i am using Apache 2.2.15.

Regards
Nasir


Authorizing Anonymous Users
Hi List,

As stated in "Security Features Overview", there are three kind of
users : database readers, database admins, server admins. Also if
there are one or more server admins configured and the
require_valid_user is set to false: the request will be validated as
"anonymous". Does the anonymous user authorize to readers ? I mean it
can edit docs?

Best Regards,
-- afshin


puppet-users] apt and gem package with the same name
I'm building a puppet manifest for an Ubuntu machine that needs to
have both of these on it:

  package { "memcached":
    provider => gem,
    ensure => "0.18.0"
  }

  package { "memcached":
    provider => apt,
    ensure => installed
  }

This fails with the following error:

err: Could not retrieve catalog: Puppet::Parser::AST::Resource failed
with error ArgumentError: Duplicate definition: Package[memcached] is
already defined in file /etc/puppet/manifests/site.pp at line 313;
cannot redefine at /etc/puppet/manifests/site.pp:221 on node mynode

How do I get around this?

thanks!
Hernan





Permissions for different users in hive
Hi, I was searching for materials about permissions and different users 
in Hive, but I can't hardly find nothing. I have few questions about 
this issue:

1. Permissions and owners of tables are set only on HDFS or in Hive also?

2. How can I use Hive in client mode as a user different than user 
hadoop? Client connects to Thrift server on server side, which usually 
runs as user hadoop and all operations are done as user hadoop.

3. How can I run Hive on server machine as user different than hadoop? 
When I create other user, that even has group hadoop, I get exception:

Exception in thread "main" java.io.IOException: Permission denied
         at java.io.UnixFileSystem.createFileExclusively(Native Method)
         at java.io.File.checkAndCreate(File.java:1704)
	at java.io.File.createTempFile(File.java:1792)
	at org.apache.hadoop.util.RunJar.main(RunJar.java:146)

even when I change permissions to all Hive log and history directories.

Cheers!,




Cfengine Help: File ownership for AD users
Forum: Cfengine Help
Subject: File ownership for AD users
Author: Remi
Link to topic: https://cfengine.com/forum/read.php?3,18029,18029#msg-18029

Hey guys:
I'm using AD auth on our linux servers through winbind.


I'm using cfengine 3 to distribute authorized key files for certain users,
however it appears that cfengine is having problems finding AD users.

Promise:
bundle agent sshkeys {
files:
        "/home/DOMAIN/USER/.ssh/authorized_keys"
                create => "true",
                perms => system("0400", "DOMAIN+USER", "sysmgt"),
                copy_from =>
umycopy("/var/cfengine/masterfiles/test/misc/USER_authorized_keys");
}

body perms system(p,u,g) {
        mode => "${p}";
        owners => { "${u}" };
        groups => { "${g}" };
}

cf-agent in debug shows me:
Validation: Scalar item in owners => { DOMAIN+USER } in rvalue is out
of bounds (value should match pattern +)

Any way around this?


Re: [users@httpd] Stealthing a vhost
J Greenlees wrote:

 >personally, I would consider a permanent redirect to 127.0.0.1 for
all 
but your one excepted case on access of the default virtual host.
 >their bots will screw their own server that way. ;)

Sorry to bring you the bad news, Jaqui, but bots don't respect 
redirection. I suspect they discard any response not bearing 200. I 
tried the 127.0.0.1 trick months ago to no effect, and have also tried 
redirection into private IP address space (eg 10.x.x.x). So I guess I'll 
just continue to suffer in (relative) silence. [If redirection did work 
on bots, I was going to find the most evil virus-ridden hellhole to send 
them to!]

Igor Cicimov wrote:

 >Ok for the first problem, apache responding to the OPTIONS 
request...What about Limit and LimitExcept commands? Limiting the 
 >OPTIONS to the local network or blocking them totally maybe?

I'm not too concerned about OPTIONS - it isn't used in any intrusion 
attempts, and IS used on my local network.  I mentioned it just to point 
out that it's a server thing, not a vhost one.

Regards and thanks,
Peter