IT Discussion

• 

  Palo Alto vm Image
  • sreekumarpg  

  15
  1
  Votes
  15
  Posts
  30648
  Views

  

  @wirestyle22 said in Palo Alto vm Image: Imagine when all of these bots are capable of advanced subterfuge. What is the average user going to do? Well - as long as you have things like hashes to compare against, you at least have some form of protection - faking good hashes is beyond hard.
• 

  KVM on Fedora 30, Error creating virtual network
  kvm fedora 30 • • Doyler3000  

  20
  0
  Votes
  20
  Posts
  242
  Views

  

  In the interests of "closure", the plethora of libvirt updates which came down the line yesterday from fedora seem to have fixed the problem. I can now create virtual networks again. Yay!
• D

  Trying to install Mediawiki on Debian based server. Getting Error.
  • devstar  

  9
  0
  Votes
  9
  Posts
  94
  Views

  

  Pinging @devstar
• 

  User's PC is unstable
  dash win10 nightmare pc • • Dashrender  

  84
  2
  Votes
  84
  Posts
  391
  Views

  

  @jt1001001 said in User's PC is unstable: @Dashrender was scroll lock somehow activated/pressed? Always possible.. but she definitely didn't accidentally click it while I was watching it not work... then suddenly just start working again
• 

  Using dnf-automatic to keep Fedora up to date
  fedora fedora 26 updates systemd dnf systemd timers dnf-automatic • • JaredBusch  

  36
  12
  Votes
  36
  Posts
  1701
  Views

  

  @JaredBusch said in Using dnf-automatic to keep Fedora up to date: @FATeknollogee said in Using dnf-automatic to keep Fedora up to date: There really need to be a setting for this in the Workstation GUI. By default Fedora Workstation + Cinnamon uses dnfdragora which is a totally separate process. Yes, I realize that. This setting exists in Cockpit, no reason why it can't be in WS!
• 

  Fedora 29 and 30 - EDAC skx: Can't Get tolm/tohm Error on Vultr
  linux fedora vultr fedora 29 error linux server fedora 30 • • wrx7m  

  40
  2
  Votes
  40
  Posts
  205
  Views

  

  Vultr support was interested after my previous response. "We understand your concerns and appreciate you bringing issues to our attention, however, we are not seeing this issue with our Fedora 30 build when running updates. It is possible that something is different when upgrading the distribution manually and this is not something we would be able to troubleshoot as we are not seeing the issue. Does the OS itself throw an error when attempting the update? If there is an error being throw by the OS we can try to assist in figuring out what it means and try to point you in the right direction, but as a self-managed service our in depth troubleshooting steps for software issues is extremely limited. Thank you for your understanding." I provided them with specifics on how to produce the error.
• 

  Vultr (or Other VPS Provider) - Stock OS Instance vs. Custom ISO
  linux server vultr cloud vps • • wrx7m  

  20
  2
  Votes
  20
  Posts
  171
  Views

  

  To add to this- I have an error that started appearing after updating their Fedora 29 and 30 instances. Further testing found that the error appears in different regions using their server type template installers or even a custom iso option that I used with net install. All I have to do is deploy, run dnf update and reboot. The error is present in every boot after the update. https://mangolassi.it/topic/19903/fedora-29-and-30-edac-skx-can-t-get-tolm-tohm-error-on-vultr
• 

  Routing problem - can this be done?
  • Pete.S  

  24
  0
  Votes
  24
  Posts
  192
  Views

  

  Anyway, I will go with bridging for now. I don't think bridging will cause any problems in this case. Traffic is intermittent and low speed so even if there are more broadcast traffic sent over the VPN links, compared to a routing solution, I don't think it will have any impact. But I'll probably set up some kind of test to make sure before deploying.
• 

  Comparing MeshCentral 2 to ScreenConnect
  screenconnect remote access meshcentral meshcentral 2 connectwise connectwise control • • scottalanmiller  

  809
  5
  Votes
  809
  Posts
  10425
  Views

  

  @scottalanmiller said in Comparing MeshCentral 2 to ScreenConnect: 0.3.7-h .... we just updated to here. And now 0.3.7-k. Being this far off of the time zone than the team makes updating MC easier, at least.
• 

  zimbra 8.6 memcached is not running
  • nagendra  

  14
  0
  Votes
  14
  Posts
  102
  Views

  

  @dbeato yes i guess... almost all emails backup are corrupted few email ids had configured locally ..they are safe...
• 

  SOLVED SSH Hardening
  security ssh fail2ban hardening sshconfig • • JaredBusch  

  15
  5
  Votes
  15
  Posts
  288
  Views

  

  @JaredBusch said in SSH Hardening: [sshd] # To use more aggressive sshd modes set filter parameter "mode" in jail.local: # normal (default), ddos, extra or aggressive (combines all). # See "tests/files/logs/sshd" or "filter.d/sshd.conf" for usage example and details. #mode = normal Note, the commented out #mode = normal. If you change that to ddos, it will also cause fail2ban to log failed attempts to the disabled root account, and valid users with invalid, or no, key.
• J

  Wireless headset for Skype for Business...
  • Jimmy9008  

  9
  0
  Votes
  9
  Posts
  156
  Views

  

  @Jimmy9008 said in Wireless headset for Skype for Business...: When away from the desk, the headset will ring if somebody calls in, but you are not able to answer the call from the headset. So, you have to run back to the desk and answer the call in Skype for Business soft phone, which then connects the call and works over the wireless headset. This isn't a Skype for Business issue - this is just a lack of pickup button on the headset issue, or is there a button that works with other software, just not S4B? As mentioned - real professional gear like Sennheiser and Plantronics work well in this space.
• 

  Barcode scanner
  • gjacobse  

  14
  0
  Votes
  14
  Posts
  140
  Views

  

  @dafyre said in Barcode scanner: @gjacobse said in Barcode scanner: @PhlipElder said in Barcode scanner: WASP Bluetooth unit. https://www.waspbarcode.com/barcode-scanners/wws550i-freedom-barcode-scanner Works like a charm. We've had it for close to ten years now. It's set up to space after each scan and CAPS so that all serials are identical across the board. I suggest setting up a single sheet print-out of 0-1 and A-Z (if needed) along with the bar codes for setup. Then, when it comes time to pair you're not frustrated by the default ENTER (we remove this) during pairing. We enable SPACE post pairing. For complex builds nothing beats it. Wasp units are nice.. but since I'm paying for this out of MY pocket,.. that is about 3x more then I want to spend. Just curious as to why you're paying for this out of your pocket? Any time I can improve my personal tool box I’m happy to. As long as it isn’t some mega expensive item. A small scanner that is multi function, inexpensive and such - all the better
• 

  Laptop for stock trading
  • black3dynamite  

  11
  0
  Votes
  11
  Posts
  135
  Views

  

  @IRJ said in Laptop for stock trading: I would guess there are better alternatives out there that can be run on Linux servers All enterprise Forex software runs on Linux (and generally UNIX, and nothing else.) On the Forex floors they sometimes use Windows desktops, but all the analytics comes from UNIX systems (including Linux.) Windows is only used as a GUI for the trades to be places, and generally isn't used even for that.
• 

  Odd Zimbra zmconfigd behavior
  zimbra zimbra 8.8.11 • • EddieJennings  

  16
  1
  Votes
  16
  Posts
  281
  Views

  

  @Bend3r said in Odd Zimbra zmconfigd behavior: @dbeato said in Odd Zimbra zmconfigd behavior: What is it causing on your Zimbra? mine are unaffected. For me, everything is working smooth, the only thing I worry about is restart notice messages that are written to zimbra.log every minute. Jul 2 00:47:20 mail zmconfigd[24959]: Fetching All configs Jul 2 00:47:20 mail zmconfigd[24959]: All configs fetched in 0.07 seconds Jul 2 00:47:26 mail zmconfigd[24959]: Watchdog: service antivirus status is OK. Jul 2 00:47:26 mail zmconfigd[24959]: All rewrite threads completed in 0.00 sec Jul 2 00:47:26 mail zmconfigd[24959]: All restarts completed in 0.00 sec Jul 2 00:48:26 mail zmconfigd[24959]: Fetching All configs Jul 2 00:48:26 mail zmconfigd[24959]: All configs fetched in 0.10 seconds Jul 2 00:48:33 mail zmconfigd[24959]: Watchdog: service antivirus status is OK. Jul 2 00:48:33 mail zmconfigd[24959]: All rewrite threads completed in 0.00 sec Jul 2 00:48:33 mail zmconfigd[24959]: All restarts completed in 0.00 sec Perhaps, such a behavior is OK (zmconfigd fetches configs,checks them for not being changed and assumes no restarts needed for services)? I think so. Nothing in there suggests a restart happened.
• 

  How to authenticate via AD to non-domain server
  active directory ldap bookstack • • zachary715  

  26
  0
  Votes
  26
  Posts
  144
  Views

  

  @black3dynamite He shouldn't need to. I'm running it on 16.04 and what he is trying to do works for me.
• 

  MSP: How do you connect to customer equipment?
  • Pete.S  

  7
  0
  Votes
  7
  Posts
  87
  Views

  

  @Pete-S said in MSP: How do you connect to customer equipment?: @scottalanmiller said in MSP: How do you connect to customer equipment?: @JaredBusch said in MSP: How do you connect to customer equipment?: For Linux systems, ssh via a jumpbox Us too, as the one exception to the above "direct" piece. It's a highly secured jump box in a data center. And the customer systems are tied solely to it, not open in general. So equipment that is not a PC (for instance switches, network appliances, printers) are managed through the computers on-site or through the jump box? Or perhaps not managed at all? Either through tooling (e.g. not directly), or via an on site machine (local jump station.) In lots of cases for us, Ubiquiti gear can be managed through its own centralized consoles.
• 

  PCI Compliance with Unifi USG 3 Port
  ubiquiti unifi pci compliance • • CCWTech  

  9
  0
  Votes
  9
  Posts
  96
  Views

  

  The scanning software can't tell you where it is getting the issue?
• 

  What font do you use to write code?
  programming fonts coding • • Obsolesce  

  18
  0
  Votes
  18
  Posts
  248
  Views

  

  @Obsolesce said in What font do you use to write code?: @matteo-nunziati said in What font do you use to write code?: @Obsolesce said in What font do you use to write code?: @Pete-S said in What font do you use to write code?: @scottalanmiller said in What font do you use to write code?: @matteo-nunziati said in What font do you use to write code?: Always default but I move asap to dark themes. Same Don't know about you guys, but most people use dark themes because they strain their eyes with the light themes. But the problem is not the theme, because you shouldn't get eye strain with a light theme. The real problem is that the monitor is set way too bright. Like a lot. Monitor brightness should be about equal to the ambient light level. Bright monitors make for punchy images but horrible ergonomics. https://www.eizoglobal.com/library/Guide_to_preventing_eye_fatigue.pdf Light themes are great with "Night light" mode turned on in Windows 10. It reduces the blue light a lot and is less bright. I use dark themes + night light + min brightness all day long. Not at night time? Every hour of the day or my eyes bleed... Well maybe it is not the min brightness but a close value for sure
• 

  Skyetel tenant functionality
  skyetel billing multisite tenant • • JaredBusch  

  4
  1
  Votes
  4
  Posts
  83
  Views

  

  @Skyetel said in Skyetel tenant functionality: @JaredBusch said in Skyetel tenant functionality: This client has multiple offices and needs/wants to be able to track out billing separately for each office. Tenants has two intended use cases: People who are reselling Skyetel's services, and want to be able to track, brand and re-bill our services under their own name Companies who want to be able to break out different parts of their usage into groups that are meaningful for reporting and reimbursement. This is what I got from my reading and the post in the prior thread. Neither of these scenario's fit this client's needs. I do not resell. So that entire part of your design is something I exclude. Now, that does not mean I cannot still make use of some of those features if it works. But knowing that it was not the designed target means I do not try and shove it where it does not fit, though I still try it on. Here is the scenario in a little more detail. Client has 4 offices. All costs are tracked separately for each location. Basically they are mostly treated as wholly separate companies. Recurring costs paid by credit card, like voice service, are all paid with a single card. So with VoIP.ms, I setup 4 separate accounts with email aliases for each branch. [email protected]_a.com [email protected]_b.com [email protected]_c.com [email protected]_d.com Obviously, I can do this with Skyetel also, but honestly, it is a pain in the ass to have to have 4 separate accounts. With Twilio, I was able to create a project for each location. Each project has its own billing setup, same card at each, but when it is recharged, I know which project it was for, as they all track separately, and I can send a note to the client's accounts payable person that Jeff City just added $20. Then accounting will make a note in their system that the $20 on July 5th, 219 was is charged against company X in their ERP. So those are different scenarios for how I have dealt with a situation like this. Your tenant infrastructure does not feel like the right fit for this need. Close, but it is size 12 boot, while the client wears a size 10 Wide.
• 

  How do I replace one Domain Controller server with another and keep IP address?
  • magicmarker  

  15
  0
  Votes
  15
  Posts
  429
  Views

  

  I wanted to update this post for anyone searching this in the future. After I actually went through all the devices that would have a hard coded static IP address, I was only presented with a list 15 devices throughout my entire infrastructure (5 branch offices). The list does not include server VM DNS entries though. Updating the DNS settings on the hard coded devices is definitely a better route than what I was trying to originally accomplish by keeping the original DC IP address. Attempting a work around with Active Directory would potentially cause much more chaos. Updating 15 devices and server IP DNS entries is going to take me less than an hour. So take the advice in this post as long as you know your network.
• 

  Whats up with CloudFlare CDN
  cloudflare outage cf cdn • • Emad R  

  13
  0
  Votes
  13
  Posts
  213
  Views

  

  @Emad-R said in Whats up with CloudFlare CDN: @scottalanmiller This site reports 2 as well: https://bgr.com/2019/07/02/internet-outage-2019-cloudflare-network-issues/ They post two yes but not all due to Cloudflare, June 24, 2019 - Route Leak Impacting Cloudflare (Other ISPs involved) https://www.cloudflarestatus.com/incidents/46z55mdhg0t5 July 2nd, 2019 -HTTP 502 errors https://www.cloudflarestatus.com/incidents/tx4pgxs6zxdr
• 

  Testing Zimbra Upgrade - 8.6.0 to 8.8.6
  email smtp zimbra zimbra 8 • • anthonyh  

  3
  2
  Votes
  3
  Posts
  2775
  Views

  S

  @anthonyh said in Testing Zimbra Upgrade - 8.6.0 to 8.8.6: I restored our production Zimbra server (CentOS 7) from backup to use as a testing environment for upgrading from Zimbra 8.6.0 to current (8.8.6 as of this writing). Restore was fine. Gave the host an IP on a separate network. Followed a Zimbra wiki article on changing the server's hostname which worked no problem (from what I can tell). Fired up the services and Zimbra 8.6.0 came up hunky dory. I do a yum update and install all pending updates (not many since I try to keep prod as current as possible), reboot the test server to verify Zimbra is still happy. Everything is good. I download the 8.8.6 installer and current hotfix and stage them. I then snapshot the VM. I run the 8.8.6 installer and it completes without complaint. Where the problems begin. I cannot get to the Zimbra user interface. Management (7071) works fine. This points to a proxy issue. I check and the proxy service is not running. I fire it up manually using zmproxyctl start and wait a minute. I eventually get the following error: Starting proxy...nginx: [emerg] invalid URL prefix in /opt/zimbra/conf/nginx/includes/nginx.conf.zmlookup:3 I edit the file in question and, sure enough, the production IP is listed. zm_lookup_handlers [PROD-IP]:7072/service/extension/nginx-lookup; So I change it to the IP of the test VM (also tried 127.0.0.1 for the heck of it). However, this did not resolve the problem. Attempting to start the proxy service results in the same error. So I test by telnetting to [TEST-IP]:7072 and it works. I try browsing to the path as shown in the config via a web browser and I get (from Chrome): [TEST-IP] didn’t send any data. ERR_EMPTY_RESPONSE Though I don't know if that indicates if there is an issue or not with whatever service is listening on 7072. Any ideas? @anthonyh said in Testing Zimbra Upgrade - 8.6.0 to 8.8.6: In case anyone needs it, here is the solution. Looks like the instructions I followed to change the hostname did not include the proxy service. So to cover all bases, use the following commands after following the article here: https://wiki.zimbra.com/wiki/ZmSetServerName zmprov ms `zmhostname` zimbraReverseProxyUpstreamLoginServers new.hostname.com zmprov ms `zmhostname` zimbraReverseProxyUpstreamEwsServers new.hostname.com zmprov mcf zimbraReverseProxyUpstreamLoginServers new.hostname.com zmprov mcf zimbraReverseProxyUpstreamEwsServers new.hostname.com /opt/zimbra/libexec/zmproxyconfgen zmproxyctl restart To quote this further.. Edit file /opt/zimbra/conf/nginx/includes/nginx.conf.zmlookup Modify URL to match the below (change hostname with yours): zm_lookup_handlers https://mail.hostname.com:7072/service/extension/nginx-lookup; Disable module chunkin because since 1.3.9 & above, Nginx core already has built-in support for the chunked request bodies, hence its no longer needed. Verify Nginx version to see if it has been upgraded to 1.7.1 [[email protected] ~]$ nginx -v nginx version: nginx/1.7.1 Edit file /opt/zimbra/conf/nginx/includes/nginx.conf.web Comment the following: # chunkin on; Edit file /opt/zimbra/conf/nginx/includes/nginx.conf.web.https.default Comment these 4 lines & save the file: # chunkin handler # location @chunkin_handler { # chunkin_resume; # } Finally restart the proxy service: zmproxyctl restart Hope this helps Kind regards, Viraj
• E

  Printing from a web app
  cloud web api print cloud printing google cloud print • • elegast  

  21
  0
  Votes
  21
  Posts
  99
  Views

  E

  Thx for your help, you all. I will check the possibilities!
• 

  SOLVED Create UEFI bootable USB from Fedora
  windows 10 fedora iso bootable usb • • JaredBusch  

  38
  2
  Votes
  38
  Posts
  2446
  Views

  

  @black3dynamite said in Create UEFI bootable USB from Fedora: Try using WoeUSB via command line. Here's what I did with my USB drive. sudo umount /dev/sdb1 sudo woeusb --tgt-fs NTFS --device Win10_1903_V1_English_x64.iso /dev/sdb After running the command. WoeUSB v3.2.12 ============================== Mounting source filesystem... Wiping all existing partition table and filesystem signatures in /dev/sdb... /dev/sdb: 2 bytes were erased at offset 0x000001fe (dos): 55 aa /dev/sdb: calling ioctl to re-read partition table: Success Ensure that /dev/sdb is really wiped... Creating new partition table on /dev/sdb... Creating target partition... Making system realize that partition table has changed... Wait 3 seconds for block device nodes to populate... Cluster size has been automatically set to 4096 bytes. Creating NTFS volume structures. mkntfs completed successfully. Have a nice day. --2019-06-05 19:28:36-- https://github.com/pbatard/rufus/raw/master/res/uefi/uefi-ntfs.img Resolving github.com (github.com)... 192.30.253.113 Connecting to github.com (github.com)|192.30.253.113|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://raw.githubusercontent.com/pbatard/rufus/master/res/uefi/uefi-ntfs.img [following] --2019-06-05 19:28:37-- https://raw.githubusercontent.com/pbatard/rufus/master/res/uefi/uefi-ntfs.img Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 151.101.0.133, 151.101.64.133, 151.101.128.133, ... Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|151.101.0.133|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 524288 (512K) [application/octet-stream] Saving to: ‘/tmp/WoeUSB.JXhyoC.tempdir/uefi-ntfs.img’ uefi-ntfs.img 100%[===================>] 512.00K 2.70MB/s in 0.2s 2019-06-05 19:28:37 (2.70 MB/s) - ‘/tmp/WoeUSB.JXhyoC.tempdir/uefi-ntfs.img’ saved [524288/524288] 1024+0 records in 1024+0 records out 524288 bytes (524 kB, 512 KiB) copied, 0.293463 s, 1.8 MB/s Mounting target filesystem... Applying workaround to prevent 64-bit systems with big primary memory from being unresponsive during copying files. Copying files from source media... 1% Installing GRUB bootloader for legacy PC booting support... Installing for i386-pc platform. Installation finished. No error reported. Installing custom GRUB config for legacy PC booting... Resetting workaround to prevent 64-bit systems with big primary memory from being unresponsive during copying files. Unmounting and removing "/media/woeusb_source_1559784507_8150"... Unmounting and removing "/media/woeusb_target_1559784507_8150"... You may now safely detach the target device Done :) The target device should be bootable now Just did this today from CLI. Worked perfectly.
• 

  Finding who Changed a Property of a Active Directory User in Powershell
  powershell • • wirestyle22  

  20
  0
  Votes
  20
  Posts
  87
  Views

  

  @wrx7m said in Finding who Changed a Property of a Active Directory User in Powershell: @wirestyle22 said in Finding who Changed a Property of a Active Directory User in Powershell: @wrx7m said in Finding who Changed a Property of a Active Directory User in Powershell: @wirestyle22 said in Finding who Changed a Property of a Active Directory User in Powershell: @wrx7m It's just an auto-generated e-mail telling me that Azure can't sync the user because the UserPrincipleName is in the wrong format Right, but they were typing that sentence to someone. Was it in a logged conversation? I'm not allowed to search people's e-mails. It might be though Just saying that someone who was allowed could do that. No one is unfortunately. We have to have a reason to go look. Would need to be approved by my boss. I have access to do it, but I am now allowed.
• 

  Nextcloud sync small files
  sync issues nextcloud 16 • • brandon220  

  2
  0
  Votes
  2
  Posts
  35
  Views

  

  MySQL or MariaDB entries take like a millisecond, literally. It's so blinding fast. It's the same kind of transaction that has to happen when a filesystem writes where a file is. It's tiny and effectively instantaneous. It would be pretty while if the database writing that a file was being stored could be measured in any way through performance, as it would happen at the same time that the file is being transferred. Compare it to driving a load of corn from New York to California. And while doing so, needed to make a not in a log book that says "Shipped Corn to California". The one action, the actual moving of the corn, takes like 40 hours. The logging in the book happens in like 15 seconds. And you can make the log entry anytime during the 40 hour process and have it happen simultaneously for zero performance impact on the shipment process.
• 

  SOLVED Scripting - How do you store your credentials and call them later?
  script shell credentials hashing • • DustinB3403  

  79
  2
  Votes
  79
  Posts
  212
  Views

  P

  @IRJ I come mentally prepared with my powerful Crane!
• 

  UNSOLVED X11VNC crashing
  vnc raspberry pi 3b+ ubuntu-mate x11vnc • • hobbit666  

  6
  0
  Votes
  6
  Posts
  54
  Views

  
• 

  Cpanel high availability
  • mroth911  

  3
  0
  Votes
  3
  Posts
  96
  Views

  

  I've not done this, but as cPanel is just a web app itself, it seems likely that any HA web platform will naturally handle this as well.