@akiliss said in Auto provisioning server for yealink T21P:

Hi @JaredBusch, Thank you very much for your reply, I tested a same configuration on Friday and it worked fine with TFTP.
Now Im trying to configure this with HTTP or HTTPS.

Thanks again

You can use tftp if you want. It works just fine. My issue with it is the lack of security.

@FATeknollogee said in Hypervisors: revisit your choices!:

One downside to KVM (in virt-manager) is lack of snapshots for UEFI VMs.

yes it is.

It relies on systemd.

f04c7c65-1a88-439a-ba7e-b0b997badff1-image.png

@Pete-S said in ASA 5516-X Intermittent Downtime:

On the contrary, it tells us a lot about the business needs. Since the business decided to call him in the middle of the night, someone decided the firewall was important enough for them to do that, instead of waiting until the morning.
Maybe nobody brought up the HA option when the firewall was put in place or the need wasn't there at the time.

That someone was willing to call to report an issue truly tells us nothing. I get called off hours about truly worthless things all the time. Just because one person thinks that they should call and knows how to call doesn't mean that someone has assessed value. But that someone didn't buy HA tells us that at least at some point, someone decided HA wasn't worth it. That might have changed, and maybe they were wrong even at the time, but that decision of HA or no HA was made and a design built around that.

The business isn't who necessarily called him, that denotes a key decision maker representing the company. All we really know is that someone working at a site decided to notify him. Fall all we know that was an intern who just happened to find his phone number. Or it was the CEO, we just don't know. That someone decided to call because they noticed something has to be taken with a grain of salt as we don't know who they were, or what they expected. Maybe they thought support was 24x7 and that it was their job to report things by phone whenever they happen. That's not uncommon and wouldn't give us any insight into the business' evaluation of the need.

@travisdh1 said in Camera to Web Services Connectors:

I think Western Digital made a portable HDD with a battery and card readers that would automatically copy anything put in the media card slot to the HDD. Don't know if they're still a thing.

They did, but that lacks the upload function. Getting stuff to an HD isn't an issue normally.

@popester Mostly, you are playing with 8 year old hardware. While it could be "fun" to be able to say you did it, what's the point?

@wrx7m said in Tool for Finding Rogue DHCP:

Ran into this about 12 years ago. A guy on the dev team decided to setup his own DHCP server. Screwed up all sorts of stuff. Can't remember for sure what we did, but I think after we realized that it wasn't actually an issue with our known DHCP servers, we decided to talk to the dev team and found out that is what he had done.

It amazes me how many people just don't think about it - they have a problem, they think they know how to solve it, and just slap something onto the network.

@Dashrender said in Does ChromeOS make sense for a desktop?:

@scottalanmiller said in Does ChromeOS make sense for a desktop?:

@Obsolesce said in Does ChromeOS make sense for a desktop?:

I don't use the desktop for shortcuts even on Windows. I don't see why it's needed. It's just a clutter space, it's so much easier to have the shortcuts on the task bar, or start menu... Windows Key + Search works great on Windows and Linux GUI

I honestly like using it as a scratch space for temp files. That said... ChromeOS doesn't have temp files in that way, so even my purpose for it goes away.

yeah, that's true. Since editing a doc is in a webspace - you don't have the choice to really save the file/data to the desktop as a scratch pad... so you just have to save it into the cloud - it forces better behavior.

Right, exactly.

@stacksofplates said in Any awesome paid linux desktop software out there?:

Depends what you want. ANSYS works well, is stupid expensive, and runs on Linux. But not sure how much CFD, acoustic, thermal, and mechanical engineering you're doing.

Most of the major CAD and/or CFD applications are available on Linux. Back in the 90s I got to deal with running them on IRIX and OpenVMS. Got into the window when everyone started switching to Windows as well (Pentium III era).

@black3dynamite said in Unix Command line - Printer Details:

@DustinB3403 said in Unix Command line - Printer Details:

Here is the completed command.

lpoptions -p <NAME> | grep -o "printer-make-and-model='Your Printer make and Model"

That outputs the exact detail I needed!

lpoptions -p SHCSL_209_ColorPrinter | sed -r "s/^.*(printer-make-and-model.*)'.*$/\1/g; s/'//g; s/printer-make-and-model=//g"

This will remove all the unnecessary text, printer-make-and-model=, and the single quotes.

Yeah I'm also able to just use lpoptions -p SHCSL_209_ColorPrinter | grep "'SHCSL_209_ColorPrinter'" and get what I need in a single line response.

@IRJ said in Very Slow Sudo:

@Dashrender said in Very Slow Sudo:

@black3dynamite said in Very Slow Sudo:

@Dashrender said in Very Slow Sudo:

how long has systemname been a thing?

Seems to only appear in Debian/Ubuntu systems.

https://www.debian.org/doc/manuals/debian-reference/ch05.en.html#_the_hostname_resolution

6c6f5d62-6bfe-41ba-8b32-3b528463af7c-image.png

Let me get some clarification - is systemname meant as a variable - i.e. you put in the real system name OR are you literally supposed to put '127.0.0.1 systemname' ?

Actual host name

awww.. ok, then my question wasn't really needed...
Thanks! Misunderstanding on my part.

@IRJ said in Kibana Wazuh Agent isn't showing anything in integrity:

@DustinB3403 said in Kibana Wazuh Agent isn't showing anything in integrity:

Well I'm making progress, I at least have nginx responding when I hit the page with An error occurred during a connection to 192.168.1.100:5601. SSL received a record that exceeded the maximum permissible length.

Error code: SSL_ERROR_RX_RECORD_TOO_LONG

server { listen 80; listen [::]:80; listen 5601; listen [::]:5601; return 301 https://$host$request_uri; } server { listen 443 ssl; listen [::]:443; ssl_certificate /etc/pki/tls/certs/kibana-access.pem; ssl_certificate_key /etc/pki/tls/private/kibana-access.key; access_log /var/log/nginx/nginx.access.log; error_log /var/log/nginx/nginx.error.log; location / { auth_basic "Restricted"; auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd; proxy_pass http://localhost:5601/; } }

Why are you listening on 5601?

proxy_pass http://localhost:5601/; will redirect 5601 to 443

That is no longer in the file, I was testing with it. The below is current.

server { listen 80; listen [::]:80; return 301 https://$host$request_uri; } server { listen 443 ssl; listen [::]:443; ssl on; ssl_certificate /etc/pki/tls/certs/kibana-access.pem; ssl_certificate_key /etc/pki/tls/private/kibana-access.key; access_log /var/log/nginx/nginx.access.log; error_log /var/log/nginx/nginx.error.log; location / { auth_basic "Restricted"; auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd; proxy_pass http://localhost:5601/;

@JasGot said in Need to better understand IP Helper for accessing Windows DHCP Server from VLAN.:

@Dashrender said in Need to better understand IP Helper for accessing Windows DHCP Server from VLAN.:

did you say you have Unifi APs? If so, what firmware?
https://community.ui.com/releases/UAP-USW-Firmware-4-0-69-10871/245e428c-d111-4b9d-a550-ec0cc86ef646?page=12

I saw that too, thanks. I have all Unifi Ap-AC-Pro with 4.0.66.10822 firmware. I have the same experience with all firmware versions. I went back about ten revisions.

I've been having some network performance issues at home since upgrading to 4.0.69.xxx - though I didn't put 2 and 2 together until I was researching fixing my Cloud Key and ran into that thread.

@Dashrender said in Stuck supporting out-of-date Windows Servers, what options do I have?:

@travisdh1 said in Stuck supporting out-of-date Windows Servers, what options do I have?:

@FATeknollogee said in Stuck supporting out-of-date Windows Servers, what options do I have?:

Not to threadjack...
Now that I've experienced Fedora WS & Server updates, why do/does Windows updates suck so bad?

Microsoft has never been good at upgrades. You'd think they would have it figured out by now, but nope.

Upgrades or updates?

Of course windows isn't perfect, but Windows 10 upgrades in my experience has been pretty damned awesome. updates for Windows 10 have been only slightly less so.

Now server updates - that's another matter.

Well we know you enjoy praising Windows 10 so this lip service shouldn't surprise anyone.

@Romo said in Unifi USG VPN from Behind NAT Firewall:

Also add the changes to a config.gateway.json file in the controller to changes directly made on the USG don't get deleted on next provision.

One reason I hate these units.

@Dashrender said in Lastpass missing from Chrome this morning:

@Obsolesce said in Lastpass missing from Chrome this morning:

@Dashrender said in Lastpass missing from Chrome this morning:

@Obsolesce said in Lastpass missing from Chrome this morning:

@Dashrender said in Lastpass missing from Chrome this morning:

I've had nearly a dozen users contact me this morning telling me that Lastpass was missing from Chrome this morning.

The latest version of Chrome is 78.0.3904.97 and was released Nov 6, 2019, so I'm pretty sure it wasn't an update that took it out.

Anyone else see this? Never any issues.

Is why I use "Edgeium"

I like Chredge better 😛

I wouldn't expect things to ultimately be different between Edge (chromium based) and G-Chrome because the base is the same. MS can't afford to deviate that much from the base, otherwise they end up with issues.

Haha, Chredge wins!

Well, it's different enough that all mine keep working consistently. We don't know what they are changing, or at least I don't. We could assume as such, but look at how different all the Linux distros are even though they share the same base (kernel).

yeah - who knows. Plus MS is always going to be lagging behind Chrome in releases, so what issue might hit Chrome, might not hit Chredge for a week or two.

Chrome != Chromium either

Chrome is based on Chromium.
Credge is based on Chromium.

Kubernetes is 3 things:

a container orchestrator (vsphere for containers) a container config manamement (ansible for container infrastructure) a version control system with rollback capabilities (by default stores the last 10 configs for a deployment)

@dbeato said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

@VoIP_n00b said in How to install the Ubiquiti UniFi Controller on Debian 9.1:

So I got the Unifi Controller working with the same nginx config as the UNMS. Thanks again @JaredBusch

Now how do I get my AP connected to the controller?

Take a look at this
https://help.ubnt.com/hc/en-us/articles/204909754-UniFi-Layer-3-methods-for-UAP-adoption-and-management#Section_5

DHCP option 43 - JB and I were just talking about what option was needed for a non UBNT firewall network to provide that to the APs..
thanks.

Yeah, I guess I could see if for scheduling less critical stuff. It does seem like their plan is to flesh out Automation with more polished tools, but Runbooks seems pretty lacking in features.

I did look I to Automation DSC, but I kind of doubt that's ever going to be a good idea for Linux. Ubuntu 16.04 is supported but not 18.04. And it sounded like on Linux, you can't have the Azure Monitor agent and the PS DSC agent installed on the same system.

@JasGot said in Rough morning with Windows Updates on Servers.:

No common denominator yet, other than they are all windows servers 2008R2 and 2012.

We came in today to more than 10 servers stuck in update loops at 10 different customers. The loops went on for hours until they finally reached Update 5 of 5 and then reverted themselves.

Two of them required interrupting the startup and choosing safe mode, to nudge it along.

I need a nap!

Yeah, this has been lately the issue noted here:
https://www.askwoody.com/2019/windows-server-2012-not-r2-goes-into-reboot-loop-after-installing-net-patch-kb-4533096/

I needed to do this for a couple of customers.