@jaredbusch Ok thanks doing that now.
They do this quickly, i got the ticket open and closed in less than 30 minutes.
But what about the config?

@jaredbusch said in what language used in Mangolassi:

@scottalanmiller said in what language used in Mangolassi:

@it-admin said in what language used in Mangolassi:

@scottalanmiller but PHP still has the lion share in the web market, isn't it??

PHP is making a big come back now. It never went away, but since the PHP 7 series released it has greatly improved in performance and features and is way more viable today than it was at the time of this thread. Its ecosystem has blossomed again and there are more and more powerful frameworks than before.

It is still only one of many great options, but way better than it used to be.

WTF with the necro posting yesterday and today...

This ain't some phpBB forum with vidya games, son, everything is always worth talking about

That is supposed to sort of sound like Hank Hill

@jmoore said in Web Application VS Windows Application:

@scottalanmiller Certainly could be.

He has over 1,200 posts, one of our top posters over the years.

@dustinb3403 said in New pi-hole install has no defualt white list items:

You can add the lists rather quickly as well.

Obviously. But I think I will wait and see.

@phlipelder said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@scottalanmiller said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@phlipelder said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@scottalanmiller said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@phlipelder said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@jaredbusch said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@scottalanmiller my problem with Certs on Windows, in general, is that you almost always have to copy it around to multiple servers to make everything work well, and that jsut defeats the purpose of LE.

Based on what is on the site, Microsoft has an intrinsic trust with LE's root store. I should be able to set up a RD Session Host with a LE certificate for publishing and there should be no untrusted publisher for RemoteApps or Session Host desktops once the certificate's thumbprint is published via Group Policy?

One would hope that they would. LE is like the standard in SSL Certs. It's from the EFF, way more trustworthy than other cert authorities, IMHO.

Snag: Valid for 90 days. In larger RDS farm settings this would be a bear to manage. That means the need for an automated process.

It is expected to be automated. SSL Cert updates should not be intrusive. All of the tools for LE SSL Certs are designed around the idea that you will automate them and never need to worry about them again. It's about being less of a snag, not more of one.

Got it thanks. Looks like a bit of a learning curve then. 🙂

It's not bad. I find learning the LE pieces easier than learning to do it the old fashioned way 🙂 And with LE it is "learn once and ignore", rather than "learn once, forget, do again in a year or two all over again."

@black3dynamite said in Automation with Ansible, Salt etc - at what point?:

@obsolesce said in Automation with Ansible, Salt etc - at what point?:

@black3dynamite said in Automation with Ansible, Salt etc - at what point?:

@scottalanmiller said in Automation with Ansible, Salt etc - at what point?:

@black3dynamite said in Automation with Ansible, Salt etc - at what point?:

@obsolesce said in Automation with Ansible, Salt etc - at what point?:

@black3dynamite said in Automation with Ansible, Salt etc - at what point?:

@scottalanmiller said in Automation with Ansible, Salt etc - at what point?:

@pete-s said in Automation with Ansible, Salt etc - at what point?:

Ansible seems to be the least complicated to get started with so I guess that'll be as good as anything.

Syntactically yes.

Salt has the simpler architecture, because it is clients reaching the server, not the server reaching the clients.

That’s the main thing I like about salt. But damn, if the minion service is hosed for whatever reason can be a real pain.

SaltStack can do agentless as well, like Ansible.

Ansible uses winrm to manage Windows. Can Salt do the same? Because Salt agentless uses SSH, so I would need to setup ssh server on Windows.
https://docs.saltstack.com/en/getstarted/ssh/index.html

Why would you want to do that, though? The agent is the key reason to be on Salt in the first place.

I'm all good with using the agent. But until I figured out the problem I'm having the agent on my Windows machines, Ansible will be used.

I've got the agent deployed across 700 win7, Win10, win server, and Hyper-V servers at work. All working, installed via chocolatey.

What is the issue you are having?

Edit: 50-100 of those 700 are Linux.

Its probably something stupid on my part but It's only happening on some of my Windows 10 1803 machines. They are installed via chocolatey too.
The service gets stuck in a paused state. It is working great on the other Windows 10, 7, servers, Hyper-V and Linux.

I think that means it has no contact with the salt master.

The place that I see them most is in DCs that allow questionable public access rather than having dedicated, screened DC workers only getting access.

@scottalanmiller said in SSO with Azure & On-Prem AD:

Have not tried that. Would be awesome to see working.

I'd love to have had more time to play with it than being given the go-ahead at 3 pm on Friday to have it done by Tuesday morning at 8 am. After cleaning up the Server 2016 that was an attempt @ ADFS by the on-site that assumed A records are auto-created because Azure is integrated and AD, AD Connect, IIS, and SQL would be "OK" on the same server.

@360col said in Best architecture / recommendation for multi sites (separate business) Cloud VOIP PBX:

@scottalanmiller said in Best architecture / recommendation for multi sites (separate business) Cloud VOIP PBX:

At such a small scale, you could even use SQLite instead of PostgreSQL

At what size would you stop using SQLite?

Maybe a few thousand, or with multi-tenancy. PostgreSQL lets you go to a full live/live model, but that would be for things like 911 call centers.

If you want to exit the SQLite command line shell, the command is dot exit... .exit

@jaredbusch said in Ubiquiti ER3 to ER4 Upgrade?:

@scottalanmiller said in Ubiquiti ER3 to ER4 Upgrade?:

@mroth911 said in ubiquiti Er3 to 4 Upgrade?:

Can I just back up my er3 and upload it to the 4

I believe so.

I have never tried, but it should handle it because it only bring the /config folder in, and nothing in the hardware of the 3 vs 4 is all that different.

To clarify, I have migrated from ERL to ER4 a couple times. But I manually migrate. I don’t try to restore the old config.

Not sure what you went through and where you are but we have had barely that experience and the ProSupport team is based in the US. Now you can ask for a manager which is something I have needed to do when issues were not resolved or had delays but for the most part it has been great.

@mrwright4hire said in Mail stuck in Office 365, Enterprise Exchange queue!:

@dbeato said in Mail stuck in Office 365, Enterprise Exchange queue!:

@mrwright4hire said in Mail stuck in Office 365, Enterprise Exchange queue!:

A few users are having issues sending out emails. Not everytime, but intermittent. Has anyone experienced this type of issue before? I can use all the help I can get. I would like to know how to release the emails and avoid emails getting stuck again.

In advanced, thank you for your efforts.

Have any of your users been not able to send at all? I am not seeing that right now.

Great question dbeato! Here's the thing, I myself tried to email the same address while monitoring it from Barracuda. Nothing showed up as going out. It's strange cause we received email from the address.

So it is on the received end of Barracuda?

@floridaman said in Where to Be for Those in the Know at SpiceWorld 2018:

Also, I recall the top deck were told to move to prevent the boat from capsizing!

Top was okay. Bottom deck was re-balanced as we were boarding.

@kelly It's interesting that they allow this for one person and not a group. Seems obvious that someone would need it. /captainhindsight

@pete-s said in Make MS SQL Server 2014 Log Every Query:

@romo said in Make MS SQL Server 2014 Log Every Query:

@pete-s said in Make MS SQL Server 2014 Log Every Query:

Extended Events

@Pete-S happen to know where the default location of the event files are saved?

I created a new session and I believe it is properly showing the queries ran, but if I try to change the place where the file is logged to is doesn't start, but if I leave the default set I can't find the file!!

I'm not sure the default is actually a file at all, it may be memory buffers.
However it sound like you have a user rights issue. Make sure SQL server is allowed to write to the file where you put it.

Also remember The SQL instance is usually not running with a user context. Generally a system service.

@coliver said in Pritunl Zero:

@aaronstuder said in Pritunl Zero:

My understanding is that a user visits a webpage, logs in, and they are able to reach internal web services.

At least that's what I am getting by looking at this:

https://docs.pritunl.com/docs/pritunl-zero-service

You can use it for SSH as well, too.

So it's a secure proxy with a landing page? Interesting. If you could tie 2FA into this I think that could an interesting tool.

I don't believe that's what this is. From their guide it sounds like this works similarly to Vault. Instead of pushing out individual keys to servers you use this CAs pub key on each server. Users thrn request a cert from the CA that they use to log in.

Ah my bad. I thought he was saying that's how it works for SSH.

So for some reason I couldn't get it to work with the to or from email addresses: however I set the rule to filter for Aloha_Support_forum and Bingo- They are no longer cluttering up my inbox!

Set it to skip the inbox and auto apply my filter, did the same for all matching conversations. Just had three come in and didnt get a single on in my inbox.
I call that a win.

nano /var/www/bookstack/.env contains a commented line for APP_URL=http://bookstack.dev. Uncommenting it and changing it to APP_URL=https://wiki.domain.com fixed the issue for me.