I wanted to update this post for anyone searching this in the future. After I actually went through all the devices that would have a hard coded static IP address, I was only presented with a list 15 devices throughout my entire infrastructure (5 branch offices). The list does not include server VM DNS entries though. Updating the DNS settings on the hard coded devices is definitely a better route than what I was trying to originally accomplish by keeping the original DC IP address. Attempting a work around with Active Directory would potentially cause much more chaos. Updating 15 devices and server IP DNS entries is going to take me less than an hour. So take the advice in this post as long as you know your network.

@Emad-R said in Whats up with CloudFlare CDN:

@scottalanmiller

This site reports 2 as well:
https://bgr.com/2019/07/02/internet-outage-2019-cloudflare-network-issues/

They post two yes but not all due to Cloudflare,

June 24, 2019 - Route Leak Impacting Cloudflare (Other ISPs involved)
https://www.cloudflarestatus.com/incidents/46z55mdhg0t5

July 2nd, 2019 -HTTP 502 errors
https://www.cloudflarestatus.com/incidents/tx4pgxs6zxdr

@anthonyh said in Testing Zimbra Upgrade - 8.6.0 to 8.8.6:

I restored our production Zimbra server (CentOS 7) from backup to use as a testing environment for upgrading from Zimbra 8.6.0 to current (8.8.6 as of this writing).

Restore was fine. Gave the host an IP on a separate network. Followed a Zimbra wiki article on changing the server's hostname which worked no problem (from what I can tell). Fired up the services and Zimbra 8.6.0 came up hunky dory.

I do a yum update and install all pending updates (not many since I try to keep prod as current as possible), reboot the test server to verify Zimbra is still happy. Everything is good.

I download the 8.8.6 installer and current hotfix and stage them. I then snapshot the VM.

I run the 8.8.6 installer and it completes without complaint.

Where the problems begin. I cannot get to the Zimbra user interface. Management (7071) works fine. This points to a proxy issue.

I check and the proxy service is not running. I fire it up manually using zmproxyctl start and wait a minute. I eventually get the following error:

Starting proxy...nginx: [emerg] invalid URL prefix in /opt/zimbra/conf/nginx/includes/nginx.conf.zmlookup:3

I edit the file in question and, sure enough, the production IP is listed.

zm_lookup_handlers [PROD-IP]:7072/service/extension/nginx-lookup;

So I change it to the IP of the test VM (also tried 127.0.0.1 for the heck of it). However, this did not resolve the problem. Attempting to start the proxy service results in the same error.

So I test by telnetting to [TEST-IP]:7072 and it works. I try browsing to the path as shown in the config via a web browser and I get (from Chrome):

[TEST-IP] didn’t send any data. ERR_EMPTY_RESPONSE

Though I don't know if that indicates if there is an issue or not with whatever service is listening on 7072.

Any ideas?

@anthonyh said in Testing Zimbra Upgrade - 8.6.0 to 8.8.6:

In case anyone needs it, here is the solution. Looks like the instructions I followed to change the hostname did not include the proxy service. So to cover all bases, use the following commands after following the article here: https://wiki.zimbra.com/wiki/ZmSetServerName

zmprov ms `zmhostname` zimbraReverseProxyUpstreamLoginServers new.hostname.com zmprov ms `zmhostname` zimbraReverseProxyUpstreamEwsServers new.hostname.com zmprov mcf zimbraReverseProxyUpstreamLoginServers new.hostname.com zmprov mcf zimbraReverseProxyUpstreamEwsServers new.hostname.com /opt/zimbra/libexec/zmproxyconfgen zmproxyctl restart

To quote this further..

Edit file /opt/zimbra/conf/nginx/includes/nginx.conf.zmlookup

Modify URL to match the below (change hostname with yours):

zm_lookup_handlers https://mail.hostname.com:7072/service/extension/nginx-lookup;

Disable module chunkin because since 1.3.9 & above, Nginx core already has built-in support for the chunked request bodies, hence its no longer needed.

Verify Nginx version to see if it has been upgraded to 1.7.1

[zimbra@mail ~]$ nginx -v nginx version: nginx/1.7.1

Edit file /opt/zimbra/conf/nginx/includes/nginx.conf.web

Comment the following:

# chunkin on;

Edit file /opt/zimbra/conf/nginx/includes/nginx.conf.web.https.default

Comment these 4 lines & save the file:

# chunkin handler # location @chunkin_handler { # chunkin_resume; # }

Finally restart the proxy service:

zmproxyctl restart

Hope this helps 🙂

Kind regards,
Viraj

Thx for your help, you all.

I will check the possibilities!

@black3dynamite said in Create UEFI bootable USB from Fedora:

Try using WoeUSB via command line. Here's what I did with my USB drive.

sudo umount /dev/sdb1 sudo woeusb --tgt-fs NTFS --device Win10_1903_V1_English_x64.iso /dev/sdb

After running the command.

WoeUSB v3.2.12 ============================== Mounting source filesystem... Wiping all existing partition table and filesystem signatures in /dev/sdb... /dev/sdb: 2 bytes were erased at offset 0x000001fe (dos): 55 aa /dev/sdb: calling ioctl to re-read partition table: Success Ensure that /dev/sdb is really wiped... Creating new partition table on /dev/sdb... Creating target partition... Making system realize that partition table has changed... Wait 3 seconds for block device nodes to populate... Cluster size has been automatically set to 4096 bytes. Creating NTFS volume structures. mkntfs completed successfully. Have a nice day. --2019-06-05 19:28:36-- https://github.com/pbatard/rufus/raw/master/res/uefi/uefi-ntfs.img Resolving github.com (github.com)... 192.30.253.113 Connecting to github.com (github.com)|192.30.253.113|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://raw.githubusercontent.com/pbatard/rufus/master/res/uefi/uefi-ntfs.img [following] --2019-06-05 19:28:37-- https://raw.githubusercontent.com/pbatard/rufus/master/res/uefi/uefi-ntfs.img Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.0.133, 151.101.64.133, 151.101.128.133, ... Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|151.101.0.133|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 524288 (512K) [application/octet-stream] Saving to: ‘/tmp/WoeUSB.JXhyoC.tempdir/uefi-ntfs.img’ uefi-ntfs.img 100%[===================>] 512.00K 2.70MB/s in 0.2s 2019-06-05 19:28:37 (2.70 MB/s) - ‘/tmp/WoeUSB.JXhyoC.tempdir/uefi-ntfs.img’ saved [524288/524288] 1024+0 records in 1024+0 records out 524288 bytes (524 kB, 512 KiB) copied, 0.293463 s, 1.8 MB/s Mounting target filesystem... Applying workaround to prevent 64-bit systems with big primary memory from being unresponsive during copying files. Copying files from source media... 1% Installing GRUB bootloader for legacy PC booting support... Installing for i386-pc platform. Installation finished. No error reported. Installing custom GRUB config for legacy PC booting... Resetting workaround to prevent 64-bit systems with big primary memory from being unresponsive during copying files. Unmounting and removing "/media/woeusb_source_1559784507_8150"... Unmounting and removing "/media/woeusb_target_1559784507_8150"... You may now safely detach the target device Done :) The target device should be bootable now

Just did this today from CLI. Worked perfectly.

@wrx7m said in Finding who Changed a Property of a Active Directory User in Powershell:

@wirestyle22 said in Finding who Changed a Property of a Active Directory User in Powershell:

@wrx7m said in Finding who Changed a Property of a Active Directory User in Powershell:

@wirestyle22 said in Finding who Changed a Property of a Active Directory User in Powershell:

@wrx7m It's just an auto-generated e-mail telling me that Azure can't sync the user because the UserPrincipleName is in the wrong format

Right, but they were typing that sentence to someone. Was it in a logged conversation?

I'm not allowed to search people's e-mails. It might be though

Just saying that someone who was allowed could do that.

No one is unfortunately. We have to have a reason to go look. Would need to be approved by my boss. I have access to do it, but I am now allowed.

MySQL or MariaDB entries take like a millisecond, literally. It's so blinding fast. It's the same kind of transaction that has to happen when a filesystem writes where a file is. It's tiny and effectively instantaneous. It would be pretty while if the database writing that a file was being stored could be measured in any way through performance, as it would happen at the same time that the file is being transferred.

Compare it to driving a load of corn from New York to California. And while doing so, needed to make a not in a log book that says "Shipped Corn to California". The one action, the actual moving of the corn, takes like 40 hours. The logging in the book happens in like 15 seconds. And you can make the log entry anytime during the 40 hour process and have it happen simultaneously for zero performance impact on the shipment process.

@IRJ

I come mentally prepared with my powerful Crane! 🙂
alt text

2019_07_03_13_49_48_Window.png

I've not done this, but as cPanel is just a web app itself, it seems likely that any HA web platform will naturally handle this as well.

@black3dynamite said in Make a Bootable Windows 10 USB Installer from Fedora Linux:

@scottalanmiller said in Make a Bootable Windows 10 USB Installer from Fedora Linux:

@black3dynamite I've not seen that happen. This is every time?

It happened twice so far with the same USB.

Try another USB, maybe there is something wrong with that one?

No access to the GUI from where I am right now. But here is what I have configured to handle something similar.

In this case,
eth0 = WAN - 107.182.76.27
eth1 = LAN1 (10.8.25.0/24) - My network with webservers and stuff 10.8.25.100 = Nginx proxy
eth2 = LAN2 (10.99.0.0/24) - Friend's network with his own router behind this (yes, he's double NAT'd).

Friend uses his own DNS and thus when he tries to get to one of my webservers, he attempts to hit the public IP. The router understands this but cannot hairpin because he is on a different LAN than the port-forward rules.

set port-forward auto-firewall enable set port-forward hairpin-nat enable set port-forward lan-interface eth1 ...rules here... set port-forward wan-interface eth0

So I had to make hairpin rules for him. Your setup would be similar.

Rule 1 (port 443) and rule 2 (port 80) are looking for traffic coming in on eth2 that are destined for the WAN IP and sending the traffic to the Nginx Proxy instead.

set service nat rule 1 description 'Dwarf LAN HTTPS Hairpin' set service nat rule 1 destination address 107.182.76.27 set service nat rule 1 destination port 443 set service nat rule 1 inbound-interface eth2 set service nat rule 1 inside-address address 10.8.25.100 set service nat rule 1 inside-address port 443 set service nat rule 1 log disable set service nat rule 1 protocol tcp set service nat rule 1 type destination set service nat rule 2 description 'Dwarf LAN HTTP Hairpin' set service nat rule 2 destination address 107.182.76.27 set service nat rule 2 destination port 80 set service nat rule 2 inbound-interface eth2 set service nat rule 2 inside-address address 10.8.25.100 set service nat rule 2 inside-address port 80 set service nat rule 2 log disable set service nat rule 2 protocol tcp set service nat rule 2 type destination

I don't recall why I made masquerade rules (5001 & 5002) I am not sure these are needed. I was significantly not sober when this was implemented.

set service nat rule 5001 description 'Dwarf LAN HTTPS Hairpin' set service nat rule 5001 destination address 10.8.25.100 set service nat rule 5001 destination port 443 set service nat rule 5001 log disable set service nat rule 5001 outbound-interface eth2 set service nat rule 5001 protocol tcp set service nat rule 5001 source address 10.99.0.0/24 set service nat rule 5001 type masquerade set service nat rule 5002 description 'Dwarf LAN HTTP Hairpin' set service nat rule 5002 destination address 10.8.25.100 set service nat rule 5002 destination port 80 set service nat rule 5002 log disable set service nat rule 5002 outbound-interface eth2 set service nat rule 5002 protocol tcp set service nat rule 5002 source address 10.99.0.0/24 set service nat rule 5002 type masquerade set service nat rule 5999 description 'masquerade for WAN' set service nat rule 5999 outbound-interface eth0 set service nat rule 5999 type masquerade

No firewall rules at this time. I still need to implement that to keep his stuff off my network except for the proxy. Maybe I'll go drink with him tonight and do that.

@G-I-Jones said in Spiceworks Custom CSS HelpDesk Theme:

Anyone here using Spiceworks played with the CSSpice plugin?

Has anyone figured out a way to change icons?

It might be a little tedious for all of the icons, but if you want to change a main logo or something you can just base64 encode an image and use that as your CSS.

I took a picture of the Rancher logo and did that to show you:

base64.png

Just do:

some-item { background: url(" data:image/png;base64,<base64 encoded string>"); }

Don't use image/png if it's not a png, use the correct format.

@jt1001001 Thanks. If you are running from PDQ deploy, you won't see anything. But, if you are doing it from PS/ISE or similar, that would be a great help.

I've added this to a larger script that I use, but if you only wanted to automate the naming process the above would work for you.

Else just remove the header #!/bin/sh and add the reset to any setup scripts that you have to automate this portion of the setup.

Thanks everyone for y'alls input as I value the knowledge. This all makes perfect sense. I was just chatting with my colleague's about these details and they are making sense of it too.

@DustinB3403 said in Need video recording software for Fedora:

I assume you're going to be looking to do production quality work with this then?

Meh, down the road, sure. Right now, I feel it is more important to get content created in order to even get an idea on how well it will work for our goal.

Production quality can be hired if it is found to be worth that cost.

@Curtis said in Cron Job - Troobleshooting:

So I just figure out that at least part of the script is running, however the rclone doesn't seem to be syncing the data to the cloud. Maybe I'll break the script into 2 parts to troubleshoot. Funny thing is when I run it manually, it works great.

Are you testing as root when running manually?

@scottalanmiller said in Microsoft Office - Licensing Questions For 3 Scenarios:

@flaxking said in Microsoft Office - Licensing Questions For 3 Scenarios:

I think you must be missing what's going on here. This removes the requirement to integrate more directly with MS Office, instead relying on a separate library that is provided standalone from Office and thus allows saving to Excel. We've had zero issues with using this library, which is actually pretty uncommon for us.

The issue is flexibility. Using third party libraries, you can integrate with Excel or with anything else. Using the Office libraries, every user, in ever system, is bound by the limitations of the most problematic. It makes deployments more costly, and more complex.

That's true, it's the kind of self perpetuating lock-in that has served Microsoft so well. People use Excel, and they ask for saving to Excel spreadsheet, so we create the integration specially to allow Excel and not include ODF, then we help keep the industry locked into using Excel because that's all we support unless you want to just save to CSV.

As for the cost and complexity of deployments... that could be true, except that the installation of our main software is already so complex and costly that dealing with potentially installing this library is the easiest part. I think we probably only have one other developer who would be able to figure out how to install it. I've never heard of any client's IT that have been able to figure out how to install it (just calls from those who have tried), client services has to do literally every install.

@PhlipElder said in deleted/corrupt partition:

@pattonb GetDataBack by Run Time Software. Used it recently to recover data from an Apple MacBook Air SSD

Yeah I've used GetDataBack several times with different levels of recovery.