• RAID5 Still The Go-To Setup For SSD?

    28
    1 Votes
    28 Posts
    8k Views
    dafyreD

    @mattspeller said in RAID5 Still The Go-To Setup For SSD?:

    @jaredbusch said in RAID5 Still The Go-To Setup For SSD?:

    @hobbit666 said in RAID5 Still The Go-To Setup For SSD?:

    @nashbrydges Nice looking rack 🙂

    old school actually with round holes. do not see that much.

    I'd gladly trade the round holes for my square hole racks with the nutcerts that have me impaling my hand with a screwdriver a few times a year.

    Hear hear!

  • Ultra Cheap VPS Providers

    25
    1 Votes
    25 Posts
    3k Views
    scottalanmillerS

    @dafyre said in Ultra Cheap VPS Providers:

    @aaronstuder said in Ultra Cheap VPS Providers:

    Was going to give Contabo a try, but then this happened...

    0_1520258963359_cb2e3435-1063-4308-b8dc-43beb1b8a541-image.png

    No thanks....

    Not sure I see the issue here. The only Payment provider I'm not familiar with is Moneybookers. The others are legit AFAIK.

    Paypall is fine. WU is.... expensive.

  • Storage and Data Locality

    30
    0 Votes
    30 Posts
    6k Views
    scottalanmillerS

    @aaronstuder said in Storage and Data Locality:

    @stacksofplates Wow, rsnapshot looks good.

    It's a very good.

  • SPF issues

    13
    1 Votes
    13 Posts
    1k Views
    dbeatoD

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    @dbeato said in SPF issues:

    @bbigford said in SPF issues:

    This one is stumping me. I resolved another engineer's issue, but I don't see why there was an issue to begin with. Here are some high points:

    On-premises Exchange server. Another provider needed to be added to SPF, as they are a service that sends on behalf of the client's domain. v=spf1 mx a include:exchange.ourdomain.com include:mail.sendingproviderdomain.com ~all Above SPF record was present when issue was happening. I looked up their spf record, which was v=spf1 ip4..... many IPs. PTR for exchange.ourdomain.com resolves, using MXToolbox. Forward lookup is fine as well. Removed mx a include:exchange.ourdomain.com and added ip4:<OurPublicIP> v=spf1 ip4:<OurPublicIP> include:mail.sendingproviderdomain.com ~all

    What I don't get is why the first SPF doesn't check out. There is a PTR record in GoDaddy, and a host record pointing at the correct IP. SPF should read "any MX records, and IPs, for exchange.ourdomain.com are allowed to send; including a provider, and for spoofing there will be a soft fail".

    Where am I wrong?

    SPF does not neck the mx records of the includes, it checks only the A and MX records of the domain with the SPF record. You should add the SPF record of the exchange.ourdomain.com Email Servers (Namely Office 365, G-Suite or any other email vendor).

    On-prem Exchnage. I also saw a vendor that has theirs written as mx:<email.domain.com>... I've saw some written with a:<hostname> but not mx: ... Didn't know that was a thing.

    So how would you write an spf record for our instance to have validation? It works now with the public IP, but I can't figure out why the FQDN doesn't work.

    Is your exchange.ourdomain.com hsoted elsewhere than Internally?

    Hosted? I'm not sure I understand the question. It's internal Exchange, record is in GoDaddy.

    Yeah, l was wondering if it was Office 365 or same type outside the office. But in short having include:exchange.domain.com it is looking for all the SPF records on that subdomain which causes the failure on lookup.

    Why does that cause a failure? Can you explain a little further?

    Okay, so this is the SPF you had and was failing

    v=spf1 mx a include:exchange.ourdomain.com include:mail.sendingproviderdomain.com ~all

    Now this record was stating that the following records were allowed to send on behalf of your domain:
    1-The MX records of your domain
    2- The A records of your domain
    3- The SPF record of exchange.ourdomain.com
    4- The SPF record of mail.sendingproviderdomain.com.

    Since you did not have an SPF record for exchange.ourdomain.com it was failing to register that as an allowed Sender.
    If you wanted to include the exchange.ourdomain.com on your SPF it should be as below:

    v=spf1 mx a ptr:exchange.ourdomain.com include:mail.sendingproviderdomain.com ~all

    A PTR is what search for domain names on the SPF.

    See more here:
    http://www.openspf.org/SPF_Record_Syntax#include
    http://www.openspf.org/SPF_Record_Syntax#ptr

    Thanks for the clarification. At a very basic level, would it be correct to say include:exchange.ourdomain.com is creating essentially a circular lookup, since the SPF record there includes a sub domain that it is already trying to look up? Because of that reason, ptr:exchange.mydomain.com is looking at the IP... I could put ip4:<ourPublicIP>, but if I put ptr:exchange.mydomain.com I can change the public IP lookup in less places... this being one less place.

    Is my thinking correct?

    Yes, your thinking is correct.

    Cool, thanks.

    You got it anytime.

  • 1 Votes
    40 Posts
    5k Views
    stacksofplatesS

    Here's using duperemove. It's annoyingly verbose so I can't get the output and the command in the same screenshot.

    0_1520205045861_cp noref.png

    I ran

    /tmp/duperemove/duperemove -hdr --hashfile=tmp/stuff.hash /mnt

    And got

    0_1520205120120_afterdedup.png

  • TPM vs PTT

    2
    2 Votes
    2 Posts
    6k Views
    scottalanmillerS

    PTT is a way of provider TPM, they are not two separate things. PTT is a non-dedicated hardware approach to TPM 2.0. PTT is designed for low power devices, often used in industrial computing.

    Traditionally TPM requires a TPM module, a dedicated hardware processor and firmware for security. With TPM 2.0 dedicated hardware is no longer required. PTT is Intel's implementation of TPM 2.0 for low power systems.

  • 5 Votes
    2 Posts
    1k Views
    scottalanmillerS

    Transcript:

    Today what I want to talk to you about is a standard pattern for developing bespoke or in-house custom software for
    the small business market. in SMBs it's relatively common that someone wants to make a small application, and
    traditionally we used things like MS Access and some stuff like that to do this. And that's been less than ideal, and I think
    most people understand that they don't want to do that, but a lot of people don't know where to go other than "not
    Access" and that leaves some problems as you can kind of skew off in all kinds of directions as you try to figure out what
    you should do rather than focusing on what you shouldn't. One of the problems here is that there are so many
    ways you can make this work, but there's only so many that really make sense in the majority of circumstances and that's
    why we kind of have a standard standard pattern.

    It's not a best practice, it's nothing like that, but there is a pattern of how to approach this as kind of a baseline of "unless you have a reason not to do things this way consider that this is probably the way to do it", and what that is is want so a couple things: one - your application is going to be web-based unless you have a really strong technical reason why it can't be and you'd better be sure about that. It's going to be web-based - that's what a modern application looks like and it's
    what a modern application has looked like for a long time. Do not assume that you're going to start with something
    else and only go web-based if you have to; it's you assume you go web-based you're going to have a web interface and
    there are situations where that doesn't apply, but don't start somewhere else start with the baseline move away from
    it where it's applicable to do this.

    The language of choice if you are not already a competent programmer in some specific language is PHP; not because PHP is the most amazing language ever, not because PHP provides us all kinds of technology we don't have other places,
    but because it is simple, it is universal, it is very functional, it is custom designed for this exact use case, and it is super easy to find people with experience in PHP to help you whether it's online or you've got to hire someone or your company needs to maintain this in the future. For all of those purposes PHP is the ideal language, not only that but if you need to hire PHP they tend to be lower in cost than a lot of other languages.

    You are neither constrained because it is a language that is very hard to learn or very obscure like f-sharp or Ocaml or
    something like that, nor are you charged a premium because you're dealing with a language that is archaic and the only
    people who would be using it or people who are trapped with it say COBOL or Fortran or Visual Basic. So PHP really
    fits into a perfect spot here where it meets all the checkboxes that you would reasonably have for a normal business
    application.

    If you need something other than PHP chances are you will know and it won't actually be that you need something else it's that something else will have a specific benefit that makes sense. For example Ruby on Rails - you may already know Ruby or you may be interfacing with other Ruby components - so Ruby on Rails might make great sense or you may be a Python developer already and Python with Django just fits your needs. All that's fine, but if you don't have something driving you to some other language assume PHP.

    One of the really big reasons for this as opposed to say C# or VB.NET that a lot of people feel might be easier to use one PHP is easier to it's more universal in three it doesn't provide any lock in whether real or perceived to an expensive
    proprietary platform. PHP allows you to deploy whether to a platform as a service provider or to your own systems
    whether there are free ones or paid ones or whatever. It provides you the flexibility in the future to do what's needed - even if you have things today that lock you in that doesn't mean you should invest into that technical debt.

    If you're making a new investment in new code it should be towards something that gives you the freedom to do what you
    need in the future this is just basic protections basic best practices around developing don't create lock-in without very clear reason to justify it and sometimes even with very clear reason really really work hard to justify that locking is a terrible thing. So we also assume with the rarest of exceptions that your application is going to need a database to hold the data on the back end. Not always true, but certainly most times if you don't need one just don't use one. If you do need one look to MongoDB or MySQL as a lot of people have used that in the past, MariaDB is kind of where
    the development is going in the future. A lot of the the best platforms or the most common platforms have moved to
    MariaDB from MySQL for those who are not aware MariaDB is a drop-in replacement for MySQL. Don't don't consider those two different products. Just if you're if you're getting one go check out MariaDB to get that it that's really ideal if
    you need a relational database that's on the the slightly leaner side. It is fast and easy and lots of people know it, but
    it's it's not the most robust it's pretty robust it's a good platform but if you need a really powerful robust database or you're really versed in this one PostgreSQL is the other really awesome choice.

    Both of these are all three of these really are completely free you have unlimited open source options. You can deploy to Windows, you can deploy to Linux, you can float deploy to BSD, you can deploy them Solaris, you can put it on Mac, you have no lock-in. You can put it wherever makes sense including unlimited free platforms and hosting without limitations. So you are free and clear to do what you need to do. That said it's also important to consider that relational databases may not make sense to you for you for your project. A lot of things don't people jump it to that a lot of times when they're making internal software and PHP specifically is super easy to work with MySQL or MariaDB. Most documentation kind of
    assumes that that's what you're going to do there are loads of NoSQL options out there such as Redis or MongoDB or
    Cassandra, all kinds of things, and they may make great choices for you, depending on the type of data that you're going to
    be storing.

    If you're making a really simple application you're probably going to lean towards traditional relational databases not because they make sense, but because they're easy and assumed but if you're doing a lot of things, especially if you're doing distributed software where you may need to handle like failover or unbelievable performance or geographically disparate locations, a lot of NoSQL options may be very very appropriate for you. And remember it is actually high complexity that tends to push you towards relational databases and simplicity that pushes you away - that's not a given thing, but like for example Redis is a key value pair database so it tends to be very good for extremely basic use case
    whereas something like MongoDB is a document database and it's very very good for document style data great for
    light posts on a website or tracking assets things like that it tends to be very very strong.

    Whereas relational data but relational databases tend to be very good for financial data where you need really really strong relations between lots of different actors and objects. So there's a lot to choose from there, but make sure when you're looking at your database and your platforms that you're looking at things that are not going to lock you in unnecessarily for the future, because that will cost you potentially an extreme amount of money because what is minor technical debt today can be crippling technical debt just a year or two down the road. And when your successors come they may be very unhappy to find that you are in a situation where you've created an amount of debt that will cost them more than recreating the project to get away from.

    So that's just a baseline to start with and I think really gives a strong almost every time we have a conversation which is
    pretty often about how people are going to approach a problem like this the answer really comes out to being PHP and
    bring a DB it's free, it's easy, there's so many resources for it, there's always someone to help you, it's a good place to
    start only vary from that if you find your reasons you have to.

  • GDPR - does anyone know where to start!?

    4
    1 Votes
    4 Posts
    1k Views
    matteo nunziatiM

    In my last job a horde of consultancy companies proposed gap analysis to us. That's a good starting point. Then you just need to be prdpared to spend a lot in useless stuff.

  • Download OneNote Files from Sharepoint

    33
    0 Votes
    33 Posts
    8k Views
    scottalanmillerS

    @jaredbusch said in Download OneNote Files from Sharepoint:

    Pop a Windows 10 VM
    Then you have two choices. The built in one note app and also install office current version and use the one note app there.
    I suspect that will be the only workable method.

    Danielle was trying it with the full client. I'm the only one attempting it with only the web one.

  • Anyone Ever Outsource Help Desk Level 1?

    21
    2 Votes
    21 Posts
    2k Views
    scottalanmillerS

    @tim_g said in Anyone Ever Outsource Help Desk Level 1?:

    We tried it with a supposedly big and good MSP.

    It didn't go well. Response times were horrible, issues didn't get get taken care of properly, their software was a big PITA on all endpoints and servers.... just to name a few.

    Did they pay for dedicated helpdesk or try to go cheap with a "pool" where you are just mixed in with all other calls?

  • How do I price PaloAlto a subscription

    3
    1 Votes
    3 Posts
    984 Views
    NashBrydgesN

    Sorry can't help but...damn! A price list that's 130 pages?

  • 0 Votes
    17 Posts
    2k Views
    scottalanmillerS

    __61a4ac30b486d0d0a7eb26f971546655_width-600.jpeg

  • NextCloud Update Issues

    4
    1 Votes
    4 Posts
    2k Views
    scottalanmillerS

    @black3dynamite said in NextCloud Update Issues:

    Another SELinux issue?

    Would not be likely as SELinux issues would not be intermittent.

  • How to Generate a UUID on Solaris

    3
    2 Votes
    3 Posts
    2k Views
    scottalanmillerS

    I was pretty surprised to find that uuidgen was not available, not even available for install!

  • PCLinuxOS 2017 Installation Error

    Solved
    4
    2 Votes
    4 Posts
    819 Views
    scottalanmillerS

    Got it working. It is something with GRUB2 portion of the installer code, it has a bug in it. The LILO portion of the code does as well. Use the old GRUB portion and it installs just fine. Quirky, but it works.

  • Syncing Google and Ical

    12
    1 Votes
    12 Posts
    2k Views
    dafyreD

    What you may need to do is log in to the Calendar's web interface on Google... then go to Settings.

    Then click on the Calendar you need to sync... and then scroll to the bottom and get the "Secret Adddress in iCal format"

    Then Link that one in iCal on the Mac... I think you add it by URL... But that should give you 2 way Syncing, not a one time import.

  • 2 Votes
    24 Posts
    7k Views
    ObsolesceO

    @bnrstnr said in Installing Fedora 27 LAMP Stack plus WordPress and SSL:

    @tim_g said in Installing Fedora 27 LAMP Stack plus WordPress and SSL:

    Create a new secure SSH key:
    ssh-keygen -t rsa -b 4096 -C "root-webserv1-key"

    Hit enter for default location and name.
    Hit enter again to skip passphrase creation.
    Now you should SSH to server to continue.

    Does this step disable normal logins or change anything at all? After my first restart my root password isn't working.

    This only generates a new certificate and does not do anything else. If your root password is not working, maybe you are typing it in incorrectly, or it's something else entirely, as what @NashBrydges is referring to. If you are using Putty, perhaps it's caching the old public key.

  • What is Blind Swap SAMIT Video

    9
    4 Votes
    9 Posts
    2k Views
    StrongBadS

    Instantaneous Storage Evacuation Event

  • 4 Votes
    3 Posts
    2k Views
    QuixoticJustinQ

    @dafyre said in Installing SaltStack Salt-Minion to Solus Linux:

    @quixoticjustin said in Installing SaltStack Salt-Minion to Solus Linux:

    Solus Linux lacks a native package for SaltStack and so to use it as a Salt Minion you have to grab the packages from GitHub and create it yourself. Special thanks to @scottalanmiller who looked into this and Exoner4ted in the Solus community who did the research and figured out how to make this work.

    Remember to change "saltmastip" to the actual IP of your salt master or handle that however makes sense for you.

    cd /tmp; wget https://github.com/saltstack/salt/archive/2018.3.zip unzip 2018.3.zip; cd /tmp/salt-2018.3/ python /root/salt-2018.3setup.py install echo "saltmasterip salt" >> /etc/hosts cp /root/salt-2018.3/pkg/salt-minion.service /usr/lib/systemd/system/ systemctl daemon-reload && systemctl enable salt-minion eopkg install python-pyzmq pycrypto python-msgpack python-tornado python-jinja pyyaml systemctl restart salt-minion

    Unfortunately this package is not self updating.

    Once you get the initial client installed, you should be able to to push out new salt-minion packages via Salt itself, right?

    Yes, but not using a repo. So you'd need to build your own installer / updater inside of a Salt state. Totally possible, but not as simple as telling it to update.