@jrc said in Snipe-IT Upgrade from 4.6.7 to 4.7.5 not working.:

Cannot create cache directory /home/jcoombes/.composer/cache/repo/https---repo.packagist.org/, or directory is not writable. Proceeding without cache
Cannot create cache directory /home/jcoombes/.composer/cache/files/, or directory is not writable. Proceeding without cache

This is normal. You are running something as the apache user and it has no access to your home directory.

@scottalanmiller said in AD Emulation on *Nix:

@jrc said in AD Emulation on *Nix:

However the company that makes the software could care less about Windows client licensing, and as a franchisee they have zero options on using this software.

Of course they don't care, the responsibility for that falls 100% onto the end client to ensure that they have properly licensed their environment. The vendor has zero responsibility here.

Reminds me of a PBX appliance vendor that shipped their "server" with Windows XP Pro as the OS. 😉

@jrc said in How to install and enable Gnome shell extensions:

It turns out that while I was running Ubuntu 17.10, it had been upgraded from 17.04 and that upgrade had left the Unity UI installed and active. So the reason why I was not seeing the GNOME shell extension options in the tweaker tool was due to the fact that it was actually Unity and GNOME I was in. One hell of a noob mistake.

Once I switched to GNOME, it was all working and I am much happier with GNOME over Unity.

I was going to say, you need to select which one you want to use 🙂

@jrc Glad you were able to find a solution!

I don't know if this will be of much help, but here is an article that details how to get true "root" access to CUCM. Under the hood it's basically a RHEL/CentOS install.

http://www.uccollaborationgeek.com/root-access-cucm/

Skimming the article it is a bit involved, but maybe will lead you to the access you need to fix the SSH issue? shrugs

If I had to guess, I bet the same process will work for Unity as well.

@olivier said in Xenserver and Storage:

And it's second time I heard about the "intelligent split brain" management on StarWind but didn't see any paper nor a start of explanation about how it works (nor even a simple link). Can you elaborate please? If it's the witness node, it's the classical thing, but I'm curious about the split brain protection without using a witness node.

My understanding is they can do multiple links, multiple heartbeats,

Or a discrete and Stateful witness service on a 3rd system that will completely solve the problem.

VMware vSAN prevents this on 2 node and stretched clsutering by keeping witness components with sequence numbers on the witness system. In a vote is called the one has a updated sequence number matching the winner that side wins. In the event a stretched cluster partitions and both have matching sequence numbers the "Primary" side wins.

I'd argue isolation behavior goes beyond the storage heartbeat to how isolation is handled at the VM and Hypervisor level. STNITH is kind of a barbaric way ot handle this in 2017.

Other fencing systems that exist in VMware are for HA. Pings between hosts (Default on management network, moved to vSAN network if in use) Isolation address's (can have multiple) and heartbeats through datastore heartbeats (a file that is updated) for non-vSAN datatsore's. Based on this you can configure different VM and host isolation responses (maintain power, power off, shut down etc).

@jrc said in Help with some Cisco Questions:

But could it handle the traffic from over 3000 devices from 5 different sites?

Most likely. You'll have to see what your current switches are capable of.

According to this non MS article, they aren't supported.

https://docs.menandmice.com/display/MM720/DNS+Resource+Records

@jrc said in Quickest way to wipe 200+ Macbooks:

So i put the DBAN CD into a usb optical drive, and it does boot on these macbooks, and I can unplug it when it starts and move over to the next one. So it's working kind of like a thumb drive. So I guess that'll have to do.

Takes about 3 minutes of tech time to setup for each of them. Not too sure I could do any better with a different approach.

Burn a whole spindle of DBAN + the world's sketchiest power bar tree of death

Radius
https://blog.ubnt.com/2016/11/04/managing-radius-authentication-unifi/
http://www.petenetlive.com/KB/Article/0000685
http://thesolving.com/server-room/configure-radius-server-windows-authenticate-cisco-vpn-users/

For LDAPS see below:
http://www.petenetlive.com/KB/Article/0000962
https://www.petri.com/enable-secure-ldap-windows-server-2008-2012-dc

This is the laptop I am looking at getting, but I'm going very portable, so a small screen.

https://www.amazon.com/12-5-Inch-Ultraportable-i5-7200U-KabyLake-Fingerprint/dp/B01LHUA1NM

@jrc said in Let's play name that computer:

@Tim_G

The machines you see in the picture are mostly 286 and 386 machines, so 1987 - 1991 or so. That said, 5.25' drives were still used in computers well into the early 90s.

Yes, I'm guessing VERY late 80s or early 90s from the looks of it. Not that that means much, but the style and materials feel like that era.

@jrc said in Xenserver PV network card getting 169 IP:

@BRRABill

O, those are my favorite, but I never that the last bit, mine always go:

"Have you tried rebooting it"
"Yes, I think so..."
"When was that"
"Last week sometime.."
"Yeah, go ahead and restart and call me back if the problem persists"

The call back rate is about 1 in 10.

It's funny that it's not just computers. Anything that plugs in.

Shoot, I replug in a toaster if it isn't working.

mmmmm RAM defraging

@jrc said in Smoothwall on XenServer 7.1:

@Reid-Cooper

I can tell you that the templates for Debian 6 and 7 are PV in Xen 7.1

The old templates should not update. But current ones.

@jrc said in Dell Poweredge 2950 CPU Heatsink Retention bracket:

@Tim_G

That looks perfect to me. Tell me when you undid them, where they screwed into the chassis, or was there a nut on the underside of the board? Trying to ascertain if I have to pull the motherboard to install these or not. I'll have to work it out either way, but I figured if you noticed this when you removed them then maybe I could save some investigative time.

I just unscrewed them and they came right out. Nothing special.

@jrc said in Suggestions on a VPN Solution:

@scottalanmiller said in Suggestions on a VPN Solution:

@Dashrender said in Suggestions on a VPN Solution:

@coliver said in Suggestions on a VPN Solution:

But I think the big one is that you don't want your firewall to handle switching. You should have an independent dedicated switch for that task.

What's the concern here? The ER-X specifically has a switch chip in it, where the ERL and ER8 don't. Granted I probably wouldn't use the ER-X in a 15+ user environment (though even then that's completely arbitrary and I should only care about bandwidth throughput, not number of users).

It's just not good practice to mash everything into an "all in one" device. You'd never want an AP in your router, and an AP is just a wireless switch. Keep your devices lean and purposeful.

Agreed!

I plan to go with the ERL at both sites, the main site already has a separate switch from the Netgear router, so it'll be a drop in replacement there. At the remote site, I will use the ERL with an 8 port gigabit switch and add in a ubiquiti AP for wireless. Keeps it simple and modular.

Sounds like the right choice.

@jrc said in Virtualizing Smoothwall (edge firewall and content filtering):

Yeah, this will be a dedicated piece of hardware with the hypervisor on it and just a single VM, the Smoothwall install. Nothing else, and it will not be tied into my existing pool, it will be, for the most part stand alone.

As to the point of no access if things go down, I don't see that as a major issue, because if things go down like that, then I will need to be on site, in which case I would have physical access to the server and will then be able to fix it from there if needed.

This device is how my network is connected to the internet, so if it goes down I have zero remote access, with or without it being virtualized.

If you have an iLo or like option on the server, you could make that available either directly to the internet, or through an ER-X that you VPN into. This would require it's own IP just for that.

8 years old - yeah, Personally I fully expect failures at any time, just expect them, but am not unhappy when they don't happen either.

I put in 40 new VOIP phones 10 years ago, starting around 7 years, when we lost power long enough to take the switches down, we started having phone failures - they wouldn't power back on.

I actually was talking to @scottalanmiller about a related thing - stickion - when you turn off a computer with drives in it that when the drives stop spinning, they don't work anymore because the heads stick to the platters.

I'm not sure how often this really happens anymore, but it is a real thing. Scott said that the recommendation is to not allow drives to spin down in these situation when possible.

These 8 year running devices are just the same as my phones and those HDDs.

Threw one away about a decade ago 😞