u8gsg.jpg

I've exported his PDF's and converted them to ODT files for editing, they are currently available from Github here I've sent @Ylian an email requesting he pull these files over so the community can assist with updating this documentation.

If interested in the former Solaris ecosystem, check out https://omniosce.org/

@quintana said in First look at the Wazo Platform:

@scottalanmiller With the API?

API would be interesting. I think for most users, without an API would be the more useful guide. Both, is ideal 😉

Since the images disappeared, I added them as code.

Also, Identity Management (FreeIPA) makes it really easy to store public keys in LDAP so any system joined to IdM can verify the key.

@Romo said in Does Windows 2016 Server have SSH?:

@Pete-S start and type winver

Awesome!

Unfortunately it's a version 1607 build 14393.3243.
So I can't install with powershell according to the article above.

@IRJ said in All in one backup appliances:

@scottalanmiller said in All in one backup appliances:

@notverypunny said in All in one backup appliances:

OK, maybe I mis-spoke. Nothing community / unsupported.

Oh, that's entirely different. No connection to open source there. Open source has more support, not less.

Community versions of commercial products definitely help find bugs. Support is generally well searchable and many people are knowledgeable about it since it is more widely used than paid versions. Being able to have a community product where you then add support and features to it, is ideal.

Absolutely.

@JaredBusch said in Need to txt appt reminders from PC. What app/services have you used?:

@Dashrender said in Need to txt appt reminders from PC. What app/services have you used?:

@scottalanmiller said in Need to txt appt reminders from PC. What app/services have you used?:

Postcards basically looks just like Textable, but is free.

OK huh - free? that seems unexpected... but, I'm guessing SMS between carriers is generally free nowadays... soooo....

You still pay for your SMS usage

In that case - Assuming all of your customers are on carriers that have an email to SMS gateway - you can do this completely free through email.

Now to discover that, you'll have to do some work - find what carriers are in use by your customers, then check for a gateway... that could be time consuming.. but hey - could really pay off with a free solution.

@wrx7m said in Printer Leasing/Maintenance - Installing Software on the Network for Monitoring Print Devices:

@dbeato said in Printer Leasing/Maintenance - Installing Software on the Network for Monitoring Print Devices:

It is common, however just make sure when they configure only the Static IP of the printers to be picking them up. Also make sure the SNMP community is not public (also none of your devices should have that).

I should ask them about this. I am guessing that all the printers are going to have to be networked now.

Yes, otherwise it will not work.

@syko24 said in Is SMB 1.0 more vulnerable at the client level or server level:

On Windows 10 you can enable SMB1.0 Server or Client. Does enabling just the client side make the Windows 10 system vulnerable? What I am trying to figure out is if I have a special machine running XP and need to pull data from a share on it, can I enable SMB 1.0 client on a Windows 10 machine, connect a crossover cable and have the 10 machine pull data from the XP share safely? The 10 machine would then move the copied data onto the primary server running Windows Server 2016.

If this is a horrible idea are there any suggestions to make this a secure setup other than replacing the XP machine.

Thanks

Both. We've seen Emotet gobble up an entire network where nothing has been done to patch for EternalBlue which is the exploit in SMBv1.

We remove it _everywhere we manage a network on all endpoints. Period. Full Stop.

@WLS-ITGuy said in Does 64 bit or 32 bit really matter?:

@scottalanmiller said in Does 64 bit or 32 bit really matter?:

@WLS-ITGuy said in Does 64 bit or 32 bit really matter?:

@scottalanmiller said in Does 64 bit or 32 bit really matter?:

Presumably the OS is 64 bit so shouldnt matter.

OK. Linux servers to start. The 32 bit app requires some 32 bit library stuff that I cannot find for Debian 9/10 so I was thinking I could install on a 32bit and go from there.

Do you need to be on Debian? Linux 32bit is a dead animal pretty much across the board. I'm assuming that this is dead software without support? What's the plan in the future as these libraries get more and more rare?

It actually isn't dead. I'm not sure why they haven't made the switch the 64 bit. They just updated the software back in June.

No, it's dead. "Updates" are easily manipulated. Trust me, there's no plausible way that it relies on 32bit libraries and isn't actually dead. There are very, very standard tricks to make software look maintained after it has died for expressly this purpose.

In this example you wouldn't have to write an interface, but that's part of the power of Go. Interfaces are defined implicitly.

@alesribic said in MeshCentral2 Let's Encrypt cert not created:

i notice that meshcentral-events.db starts from scratch everytime service runs. But i can not find a way to browse this events database.

This suggests that maybe you don't have write access to the database with the user that you are kicking off MC with.

What DB are you using? The default or MongoDB?

I'd be willing to bet that this university had the students setup their network without any oversight or understanding of how it was setup.

"For today's class we'll be setting up AD 2003 and getting the entire school to use it - You get an A!" and they just let it run and run and run.

I'm just taking a guess at the AD version, wasn't listed

@scottalanmiller said in PCI Compliance with Centurylink Modem:

Have you tried testing the port to see what happens?

Got busy, assigned it to Val for the team.

@JaredBusch said in Remote Access & HIPPA:

@Dashrender said in Remote Access & HIPPA:

@rjt said in Remote Access & HIPPA:

I would second what @JaredBusch said about the HIPAA site and automatic control of the desktop. I would hope if you need control after hours, you could simply reboot the machine and then no consent is necessary.

You either have consent on or off, you don't flip flop without having what seems like a clear workaround to what is supposed to be a security benefit.

I have not, yet, looked back at the MC consent setup once it was implemented. Assuming it was done correctly, consent is permission based, so you could have an account that does not require consent. But you would need auditing on any use of the account.

I was pretty much assuming the use of two accounts - or (more crazily) log in with admin - change the permission, etc... but again, that would be crazy.

But the ability to do that more or less defeats the purpose... because you can choose to be a bad guy and just change that setting as you want and see what you want.... yeah logs are supposed to show what you're doing - but still.

But you have clients who have you in that spot, do you have a during hours and after hours account you use to support them?

@RojoLoco said in Experience with off-brand SAS cables?:

I think our external SAS cables came from monoprice or Cables 2 Go, both generic brands. No issues, and they are actually pretty well made.

Monoprice makes no sense up here due to exchange and duties.

We use C2G for network cables and some drive connectivity cables. We've used SuperMicro for their adaptive style cables for SATA and SAS as they are relatively inexpensive compared to any others out there and available in the distribution channel.

@wirestyle22 said in Breakdown of what is installed and running in RHEL:

@DustinB3403 Appreciated

You're welcome.

@notverypunny, had some wishful thinking after seeing references to netDMA and Andy Grover, the developer of the iSCSi targetcli freebranch and now stratis who posted all the benchmarks and papers on ioat, and speeding up iSCSi type IO using RDMA / RoCE between Hypervisors is my goal. But then could not find Andy Grovers actual ioat patches or benchmarks to look for myself - 404s.