Magzter Gold (Sitewide Promotion)

Magzter Gold (Sitewide Promotion)

Digital Delivery

ADMIN Network & Security March 1st, 2023 Digital Back Issue Cover

ADMIN Network & Security March/April 2023 (Digital)

(Write a Review)

Single Digital Issue

March/April 2023

$16.99

Powered By Zinio

Zinio

Satisfaction Guaranteed

Instant Start

Subscribe Instead

1 Year Subscription

6 digital issues

$59.95

($9.99/issue)

Go to Subscription

View Subscription Options

Also available on ZINIO Unlimited logo

Get unlimited access to ADMIN Network & Security (Digital) + Back Issues & 5000+ other magazines

1-month free trial

Renews at $8.99/month after trial.
Cancel anytime.

Get unlimited access to ADMIN Network & Security (Digital) + Back Issues & 5000+ other magazines. Renews at just $8.99/month after trial. Cancel anytime.

Start Trial Learn more

22 Articles

The Great Rehire

It’s funny how tech companies always do what other tech companies do. If one company puts a Ping-Pong table in the breakroom, they all do. If Company A starts having catered lunches, they all do. If Company B puts TVs in conference rooms, they all do. You’d think tech CXOs would be more creative, but they’re not. From Ping-Pong tables to salad bars to big layoffs to offshoring – they want to do what everyone else is doing. One company brought remote workers back into their offices, and then every tech company brought their workers back into their offices. When one company decides to rehire the people they laid off during The Great Layoff, they’ll all do it, and so will begin The Great Rehire. I look forward to The…

The Great Rehire

News for Admins Tech News

StarlingX 8.0 Edge Platform Announced Version 8.0 of the StarlingX (https://www.starlingx.io/software/) open source cloud platform has been released. The platform is designed for edge computing and IoT and is optimized for high-performance applications. StarlingX is an OpenInfra (https://openinfra.dev/) project that provides “a container-based infrastructure for edge implementations in scalable solutions that is ready for production now,” according to the website. It features “a Horizon GUI and a CLI to manage the inventory of CPUs, GPUs, memory, huge pages, crypto/compression hardware, and so forth.” “Beyond integrating well-known open source components, such as OpenStack modules, Kubernetes, Ceph, OVS-DPDK, and so forth, the community is working on new services to fill in the gaps in the open source ecosystem to enhance deployment, maintainability, and operation of the software components,” the announcement says. Synopsys…

News for Admins Tech News

Software-defined networking for the future On the Edge

Networks can be virtualized, just like servers, storage, or entire data centers. The technology is based on developments at Stanford University, and today, the Open Networking Foundation is continuing the work with new projects. Proprietary implementations are also available from major vendors. The principle is always the same: The physical hardware and software are separated, and functions previously cast in hardware are implemented in the software. The rewards of software-defined networking (SDN) are greater flexibility and a loosening of vendor tie-in. Providers and enterprises need to design and leverage technologies (e.g., remote, mobile, cloud and Internet of Things (IoT), edge computing, virtual reality, containers, microservices, and service meshes) for flexibility. The idea is to provide connections or change quality of service (QoS) in minutes, rather than months. Users want additional…

Software-defined networking for the future On the Edge

Acorn facilitates the deployment of apps in Kubernetes Smart Assistant

Distributors such as Red Hat and SUSE have been working to turn their large enterprise distributions into container runtime environments to outsource much of the hassle of package maintenance to the vendors of programs. In this and many other places, the motto “Kubernetes first” applies. Infrastructure as Code and continuous integration/continuous deployment (CI/CD) pipelines with all kinds of automatisms, including implicit error correction, are attractive factors simply missing in conventional deployment models. For some admins, however, getting used to the world of containers and fleet managers quickly becomes a nightmare. Kubernetes and the container lobby promise that they will make everything far simpler and easier to manage. However, if you are setting up Kubernetes (K8s) for the first time and need a configuration that is not provided in the default…

Acorn facilitates the deployment of apps in Kubernetes Smart Assistant

Build your own cloud with antMan Workers

Building a private cloud is time consuming and complex. Some use OpenStack, but many OpenStack projects fail because companies underestimate its complexity. antMan does not rely on OpenStack – or any of the other major open source applications for private clouds – but brews its own potion. The tool claims that you just need to install antMan on one or more systems. The rest of the setup is then easy, and the process is largely automated. Ants Everywhere Before I get started, a brief clarification of the terms used in the context of ant-Man will be useful. For the most part, they are contrived and have something to do with ants. The likelihood of knowing the technical terms used here is pretty low if you have never used antMan before.…

Build your own cloud with antMan Workers

Pentest your web server with Nikto No Entry

The list of successful attacks through web servers is long: first, because attackers can access operating system resources through vulnerabilities that should never be accessible to the outside world; second, because faulty settings or errors are made by admins when setting up their web servers (e.g., configuring aliases and allowing directory listings) or securing certain areas and functions; and third, especially in dynamic web applications, because scripting language interpreters or application servers are allowed to run in the background, which itself causes security problems or lets insecure scripts or programs execute. If you are responsible for the security of your corporate infrastructure, you probably have an overview of the web servers that are accessible from the Internet. Ideally, you will operate these servers in dedicated areas of your demilitarized zone…

Pentest your web server with Nikto No Entry

Secure microservices with centralized zero trust Inspired

How often have you been caught out by an application that has suddenly and catastrophically failed, only to discover deep in the logs of some unexciting but critical component a message – such as Unable to connect to https://database.service.local – expired TLS certificate – and smacked your head in frustration at how such a preventable failure mode brought down your carefully crafted microservices-based architecture? With an expired TLS certificate, your database could no longer prove its identity or play a part in a zero trust network (Figure 1). Certificate expiry is just one example of how the human factors involved in identity management can be high maintenance, prone to error, and the source of vulnerabilities. Yet, cast-iron workload identities are, by definition, the foundation of zero trust application architecture. No two…

Secure microservices with centralized zero trust Inspired

Building a HPC cluster with Warewulf 4 Time and Resource Management

A Warewulf-configured cluster head node with bootable, stateless compute nodes [1] is a first step in building a cluster. Although you can run jobs at this point, some additions need to be made to make it more functional. In this article, I’ll show you how to configure time so that the head node and the compute node are in sync. This step is more important than some people realize. For example, I have seen Message Passing Interface (MPI) applications that have failed because the clocks on two of the nodes were far out of sync. Next, you will want to install a resource manager (job scheduler) that allows you to queue up jobs, so you don’t have to sit at the terminal waiting for jobs to finish. In this example,…

Building a HPC cluster with Warewulf 4 Time and Resource Management

Graphical management solutions for Docker Starter Tools

In professional IT infrastructures, Docker-based container solutions are becoming increasingly popular compared with traditional virtualization setups. The advantages that Docker containers offer are obvious: By sharing the host system’s kernel (instead of each instance requiring a complete operating system), containers are compact and easier to configure compared with typical virtual machines. Moreover, container solutions offer significantly better scaling than virtual machines. They are easy to set up thanks to the encapsulated images; multiple Docker applications can run simultaneously on a single operating system instance. Encapsulating the individual containers also makes it possible to allocate host system resources to them individually. However, as container systems become more complex, they also become more difficult to manage. Graphical interfaces for Docker containers promise to simplify the handling of these systems, offering the benefits…

Graphical management solutions for Docker Starter Tools

Containers made simple Fully Automated

Container virtualization is not a new invention; in fact, it wasn’t that even 10 years ago when Docker made it socially acceptable on Linux. Much to the chagrin of many administrators, there is still have a long way to go to achieve everything positive claimed by the container vendors. Many system administrators dealing with containers for the first time give up in frustration: It seems you have to learn a new language to find your way around the dictionary of container terms, and each platform has individual concepts that need to be understood. No matter how you spin it, not much is left of the once loudly trumpeted promise of easy container handling on Linux. That complexity doesn’t have to be the case, claims Portainer, which provides administrators a tool…

Containers made simple Fully Automated

Discover vulnerabilities with Google Tsunami Before the Wave

Identifying and fixing security vulnerabilities before an attacker exploits them is one of the most difficult tasks an administrator faces. Virtually any infrastructure component can become a target for crooks. Web applications, with their cornucopia of cross-site scripting (XSS) and other injection attacks, are a problem, as are systems with unpatched software, insecure user accounts, misconfigured firewalls, poorly protected network devices, and so on. At the same time, IT setups are becoming increasingly complex, comprising increasing numbers of components. What’s more, sometimes you do not know exactly what components you are dealing with locally. The best way to prevent attacks is to identify and eliminate security risks before an attack happens. Of course, you cannot hope to do this manually if you have thousands or more virtual instances running the…

Discover vulnerabilities with Google Tsunami Before the Wave

Security analysis with Security Onion Collector

Many different tools on the market help enterprise security teams monitor security-related log and network data, with a view to detecting and analyzing acute threats and attacks on their infrastructures. Back in 2008, the open source Security Onion [1] project was launched with the aim of bundling open and free software to analyze threats, establish security monitoring in the sense of an intrusion detection system (IDS), and support central log management on the corporate network. The idea behind Security Onion was to provide a Linux-based operating system that would include a full set of useful tools and give users a suitable environment for their daily work. Security Onion was initially based on Ubuntu. In version 2, though, the installation of the individual tools was shifted to containers so that…

Security analysis with Security Onion Collector

Trivy security scanner A Look Inside

Working with containers has become a standard task for administrators, but in addition to plain vanilla container operation, it is also important to take care of security – a task that is sometimes neglected when faced with relatively new container technology. Aqua Security offers the open source Trivy [1] tool, which scans filesystems, Git repositories, and Kubernetes clusters and resources, as well as ensuring container image security. Additionally, the software can find operating system packages and software dependencies (the software bill of materials, SBOM), known security vulnerabilities (CVEs), infrastructure-as-code (IaC) misconfigurations, and sensitive information and passwords. Installation Trivy can be installed on all popular Linux distributions and macOS. Alternatively, you can run Trivy as a container. Detailed installation instructions can be found online [1]. Type the commands in Listing 1…

Trivy security scanner A Look Inside

The 10 best tricks for taming Ansible Right the First Time

In the open source community, people say that Red Hat has a lucky hand when it comes to acquiring other organizations. Many of the acquisitions have since gone on to enjoy an extremely successful existence, including Ceph and Qumranet, the company that launched KVM. Another example of Red Hat’s prowess in their shopping sprees is undoubtedly Ansible, which to this day is considered a lean and easy-to-use but still highly efficient automation tool. If you don’t like Puppet, Salt, or even Chef, with their complicated syntaxes, you can enjoy true automation with Ansible – and in a format that almost rivals the simplicity of shell scripts. Some people might need a while to get used to the YAML format, but once the few essential basics are in place, Ansible offers…

The 10 best tricks for taming Ansible Right the First Time

Monitoring changes in Active Directory with built-in tools Tracking Down Attackers

For some initial, crucial findings in Windows during incident and event management, you do not need to look further than the existing Event Viewer logs. After the introduction of Windows Server 2008 and Vista, Microsoft established a more granular approach. The events are sorted into categories along with subcategories for improved monitoring and recording. Typing at the command line lists a quick overview of the possibilities and shows the current configuration (Figure 1). You will usually control the Advanced Audit Policy Configuration settings with a group policy; you can also set it up at the command line. If you want the configuration to be used, it needs to be enabled. On newly installed systems, the correct value is set by default and does not need to be defined explicitly. However,…

Monitoring changes in Active Directory with built-in tools Tracking Down Attackers

What’s New in NetworkManager The Right Settings

The vast majority of Linux distributions use NetworkManager [1] as the standard tool for configuring the network stack. Even though the systemd‑networkd daemon [2] has been a popular alternative for some time, many administrators still appreciate the flexibility that Network-Manager offers. The tool is especially convenient when you use a laptop and switch between different wireless local-area networks (WLANs). Besides a graphical tool that includes an applet for the desktop, you also can configure the service from the shell. This feature also lets you automate the entire network environment setup in the server environment. Listing 1: WLAN Profile ifcfg Files NetworkManager has always been configured with interface configuration (ifcfg) files. The files contain simple instructions for configuring a network device or more complex profiles for specific network connections. For…

What’s New in NetworkManager The Right Settings

Best practices when working with Docker images Shipshape

Containers have become the most convenient method of deploying complex applications. This convenience is shared both by developers, who can comfortably work in the same environment as the final deployment, and by the staff responsible for installing, updating, monitoring, and troubleshooting the application, whether they are traditional sys admins or DevOps. Although several container solutions are present on the market, with varying levels of features, maturity, and flexibility, Docker is by far the most popular. In this article, I offer a couple of useful tips to make your work with Docker images and containers more efficient. Be Careful with the “latest” Tag Despite its name, latest doesn’t mean the image tagged as such is actually its most recent version – it’s just the default value assigned to images that don’t have…

Best practices when working with Docker images Shipshape

Pre-authentication for Kerberos services Tailor-Made

When a user is validated by the Kerberos authentication protocol through a key distribution center (KDC), the user is given a ticket granting ticket (TGT) at the end of the process that then enables transparent login to more Kerberos services. Before this can happen, however, the user must initially prove their identity to the KDC. This process is also known as pre-authentication and provides protection against attackers who send an arbitrary request to the server and then go on to use a dictionary or brute-force attack to try to guess the user password. This attack would be possible without pre-authentication because, in such a case, the KDC would simply send data to the client encoded with a key derived from the user password. Attackers would then have plenty of time…

Pre-authentication for Kerberos services Tailor-Made

Passkeys eliminate the need for password-based authentication Password Overboard!

Passwords typically suffer from one or more of the following problems: They are not complex enough, they are difficult to remember, or they are saved in a far too insecure way. Although admins are supposed to use a separate, strong password for each IT system, many don’t, and they write down their credentials somewhere they can be easily found; the classic worst case is a sticky note on the monitor. Passwords pose a challenge, not only for the user, but also for admins. For example, you can never be sure whether the password used was entered by the legitimate user or by someone else (e.g., a cybercriminal or bot). Microsoft, Google, and Apple are now tackling the problem. Google and Apple unveiled the passkey method at their developer conferences to…

Passkeys eliminate the need for password-based authentication Password Overboard!

The weak spot of SBCs Card Game

An omnipresent characteristic of current single-board computers (SBCs) is the use of SD cards to provide mass storage functionality, either for system boot or data storage purposes. Unfortunately, SD cards are not particularly reliable devices, and their intended purpose is storing pictures as they are captured by a digital camera – perhaps the most sequential storage access task that could possibly be imagined. Booting an operating system (OS) exhibits a much more randomized access pattern, as I have previously discussed in the case of marginally better USB storage “sticks” [1], presenting the device with challenges to the processing of allocations and deletions at sustained rates. That article examined the performance difference between USB storage with high-end brand names and more generic devices and compared the resulting write performance. Today, I am…

The weak spot of SBCs Card Game

Order online: bit.ly/ADMIN-Newsstand ADMIN is your source for technical solutions to real-world problems. Every issue is packed with practical articles on the topics you need, such as: security, cloud computing, DevOps, HPC, storage, and more! Explore our full catalog of back issues for specific topics or to complete your collection. #73 – January/February 2023 Databases Cloud databases can be useful in virtually any conceivable deployment scenario, come in SQL and NoSQL flavors, and harmonize well with virtualized and containerized environments. On the DVD: Manjaro 22.0 Gnome #72 – November/December 2022 OpenStack Find out whether the much evolved OpenStack is right for your private cloud. On the DVD: Fedora 36 Server Edition #71 – September/October 2022 Kubernetes We show you how to get started with Kubernetes, and users share their insights into the…

Admin: Network and Security is looking for good, practical articles on system administration topics. We love to hear from IT professionals who have discovered innovative tools or techniques for solving real-world problems. Tell us about your favorite: • interoperability solutions • practical tools for cloud environments • security problems and how you solved them • ingenious custom scripts • unheralded open source utilities • Windows networking techniques that aren’t explained (or aren’t explained well) in the standard documentation. We need concrete, fully developed solutions: installation steps, configuration files, examples – we are looking for a complete discussion, not just a “hot tip” that leaves the details to the reader. If you have an idea for an article, send a 1-2 paragraph proposal describing your topic to: edit@admin‑magazine.com.…

In This Issue

Description

Details

Reviews

Recent Digital Issues Browse all

Recent ADMIN Network & Security Digital Issues Browse all back issues

ADMIN Network & Security (Digital) Subscription January 1st, 2024 Issue

ADMIN Network & Security (Digital) January/February 2024: $16.99

ADMIN Network & Security (Digital) Subscription November 1st, 2023 Issue

ADMIN Network & Security (Digital) November/December 2023: $16.99

ADMIN Network & Security (Digital) Subscription September 1st, 2023 Issue

ADMIN Network & Security (Digital) September/October 2023: $16.99

ADMIN Network & Security (Digital) Subscription July 1st, 2023 Issue

ADMIN Network & Security (Digital) July/August 2023: $16.99

ADMIN Network & Security (Digital) Subscription January 1st, 2025 Issue

ADMIN Network & Security (Digital) January/February 2025: $16.99

ADMIN Network & Security (Digital) Subscription November 1st, 2024 Issue

ADMIN Network & Security (Digital) November/December 2024: $16.99

ADMIN Network & Security (Digital) Subscription September 1st, 2024 Issue

ADMIN Network & Security (Digital) September/October 2024: $16.99

ADMIN Network & Security (Digital) Subscription July 1st, 2024 Issue

ADMIN Network & Security (Digital) July/August 2024: $16.99

ADMIN Network & Security (Digital) Subscription May 1st, 2024 Issue

ADMIN Network & Security (Digital) May/June 2024: $16.99

ADMIN Network & Security (Digital) Subscription March 1st, 2024 Issue

ADMIN Network & Security (Digital) March/April 2024: $16.99

ADMIN Network & Security (Digital) Subscription January 1st, 2024 Issue

ADMIN Network & Security (Digital) January/February 2024: $16.99

ADMIN Network & Security (Digital) Subscription November 1st, 2023 Issue

ADMIN Network & Security (Digital) November/December 2023: $16.99

ADMIN Network & Security (Digital) Subscription September 1st, 2023 Issue

ADMIN Network & Security (Digital) September/October 2023: $16.99

ADMIN Network & Security (Digital) Subscription July 1st, 2023 Issue

ADMIN Network & Security (Digital) July/August 2023: $16.99

ADMIN Network & Security (Digital) Subscription January 1st, 2025 Issue

ADMIN Network & Security (Digital) January/February 2025: $16.99

ADMIN Network & Security (Digital) Subscription November 1st, 2024 Issue

ADMIN Network & Security (Digital) November/December 2024: $16.99

ADMIN Network & Security (Digital) Subscription September 1st, 2024 Issue

ADMIN Network & Security (Digital) September/October 2024: $16.99

ADMIN Network & Security (Digital) Subscription July 1st, 2024 Issue

ADMIN Network & Security (Digital) July/August 2024: $16.99

Customers Also Viewed

ADMIN Network & Security Magazine (Digital) Subscription January 1st, 2025 Issue

ADMIN Network & Security Magazine (Digital)

6 Issues: $59.95 ~~$101.94~~

Dataquest Magazine (Digital) Subscription

Dataquest Magazine (Digital)

12 Issues: $13.99 ~~$23.88~~

The Ultimate Christmas Cross Stitch Collection United Kingdom Magazine (Digital) Subscription November 24th, 2014 Issue

The Ultimate Christmas Cross Stitch Collection United Kingdom Magazine (Digital)

(2)

The Ultimate Christmas Cross Stitch Collection: $8.32

Reviews

0

0

0

0

0

No reviews yet

Ask a Question

Click stars to rate

Please select a rating for the review.

Please enter title for the review.

Please enter content for the review.

Please enter order number.

Please enter your first name and last name.

Only letters allowed for first name and last name.

Please enter your email.

Cancel Submit

Processing...

Thank you for your feedback! Your review has been submitted and will be published soon.

OK

Be the first to ask a question about this product

Please enter content for the question.

Please enter at least 10 characters.

Your question can not be more than 150 characters.

Please enter your first name and last name.

Only letters allowed for first name and last name.

Please enter your email.

Submit Processing...

Thank you for your question! Your question has been submitted and will be published soon.

Answer this question

Please enter content for the answer.

Please enter at least 10 characters.

Please enter your first name and last name.

Only letters allowed for first name and last name.

Please enter your email.

Submit Cancel Processing...

Thank you for your answer! Your answer has been submitted and will be published soon.

OK

×