What is the impact of the Heartbeat SSL bug on a Bright cluster? The Heartbleed bug (CVE-2014-0160) allows anyone to read memory belonging to the server process handling the connection, if they can...
How do I disable USB? Short answer: Two options: 1. BIOS configuration (with or without password protection) 2. Kernel configuration (with or without password protection)...
Why do I get error messages after patching BASH for the Shellshock vulnerability? Symptom: The patching of BASH due to the shellshock vulnerability has introduced some changes with respect to the function definition syntax...
How to keep my port scanning tool from crashing my head node? If you find that using a port scanning tool like Nessus or nmap causes your head node to crash or...
What do I do about the Meltdown and Spectre vulnerabilities? Action to take if running a Bright Cluster If staying with vulnerable hardware, then software and firmware mitigation should be...
How can I prevent users from seeing processes that do not belong to them? This article is being updated. Please be aware the content herein, not limited to version numbers and slight syntax changes, may...
How do I install FreeIPA onto a Bright Cluster? This article is being updated. Please be aware the content herein, not limited to version numbers and slight syntax changes, may...
Can I use Google Authenticator to connect to my cluster? This article is being updated. Please be aware the content herein, not limited to version numbers and slight syntax changes, may...
How do I change the cipher list CMDaemon negotiates with clients? Can I change the cipher list that CMDaemon will negotiate with clients? This article is being updated. Please be aware the...
How is a spoofing attack avoided in AD with Bright? [Everyone I speak about joining a node to AD indicates there is a unique key that the node receives at...
How do I configure Bright to manage a Self Encrypted Drive (SED)? This article is being updated. Please be aware the content herein, not limited to version numbers and slight syntax changes, may...
How do I add password protection to GRUB? First you will need to generate a strong password as follows: [root@kerndev ~]# /sbin/grub-md5-cryptPassword:Retype password:$1$BaV5k1$02kE6BCxzGRyByx.RWHEd1[root@kerndev ~]# For the headnode: Edit /etc/grub.conf...
How can I change the password policy of LDAP? This article is being updated. Please be aware the content herein, not limited to version numbers and slight syntax changes, may...
Log4j CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105 in Bright Cluster Manager The recent announcement and release of 0-day exploits for these issues makes this an important and highly visible topic. Based...