Posts made by pmoncho

@obsolesce
XFS -

I use your document minus Hyper-V, DHCP and automatic updates (I don't install those packages). I differ by creating a separate 5 Gib XFS partition /myshare during setup along with the different info in smb.conf file.

Using Samba-4.8.3-1.fc28.src.rpm and Samba-winbind-4.8.3-1.fc28.src.rpm

@obsolesce said in Samba file share and MS A/D NTFS permissions:

@pmoncho said in Samba file share and MS A/D NTFS permissions:

@obsolesce said in Samba file share and MS A/D NTFS permissions:

@pmoncho said in Samba file share and MS A/D NTFS permissions:

@obsolesce said in Samba file share and MS A/D NTFS permissions:

@pmoncho said in Samba file share and MS A/D NTFS permissions:

@obsolesce said in Samba file share and MS A/D NTFS permissions:

A few things have changed recently upon doing a new install as of Friday 7/6.

On 7/6 I started to install Fedora 28 in our production environment only to hit a snag. I could not access the Samba share via name on any machine. Under normal user, \linuxfax\fax would not resolve but \IP Address showed the Fax folder. No access to share. Admin account was the same with the exception of getting "No RPC server found"

Following items no longer worked for me;

chown [email protected]:"domain [email protected]" /share/fax

In smb.conf file - valid users = @"[email protected]"

I had to now use:

chown [email protected]:"Domain.com\domain admins" /share/fax

In smb.conf file - valid users = @"Domain.com\faxuser"

Sounds like something is off because you would use that format for trusted domains, not your domain. For example:

valid users = @"Domain Users", @"OTHERDOMAIN\Domain Users"

Where the first one is your domain, and the second is a different but trusted domain.

That was the weird part when I kept messing with the "valid users" section.

"valid users = @"Domain Users"" - wouldn't work so I kept to your documentation.

I will change it back and see what happens.

Side Note - how do you highlight your lines red with red box?

I actually misread what you wrote.

So @"Domain Users" works, but @"Domain [email protected]" does not work?

I could not get @"Domain Users" to work (original smb.conf file) so I stuck to @"Domain [email protected]" .

The issue as of the 7/6/18 Fedora/Samba/Winbind update is @"Domain [email protected]" no longer works and I now use valid users = @"Domain.com\Domain Users"

Hmm, not sure what the problem is because I have one running 4.16.9-300.fc28.x86_64 (Fedora 28) that's fully up to date, and it's smb.conf is using the format:

valid users = @"domain [email protected]"
admin users = @"domain [email protected]"

Where "domain admins" is a user or group.

Though, it hasn't been rebooted lately.

Hmmm... I'm on 4.17.3-200.fc28.X86_64

Would that be a kernel issue or possible Samba or Winbind? That is the part I cannot figure out. Where the change was the issue.

I am about to update my old Fedora 4.16 to newest and see if all still works.

@obsolesce said in Samba file share and MS A/D NTFS permissions:

@pmoncho said in Samba file share and MS A/D NTFS permissions:

Side Note - how do you highlight your lines red with red box?

You use the key next to your #1 key, a ` at each end when using it in a sentence.

Or use three in a row a line before and after for a chunk of code.

I figured it out when quoting your last reply. On all my other replies I did not notice the ` in there. Thanks.

@obsolesce said in Samba file share and MS A/D NTFS permissions:

@pmoncho said in Samba file share and MS A/D NTFS permissions:

@obsolesce said in Samba file share and MS A/D NTFS permissions:

@pmoncho said in Samba file share and MS A/D NTFS permissions:

@obsolesce said in Samba file share and MS A/D NTFS permissions:

A few things have changed recently upon doing a new install as of Friday 7/6.

On 7/6 I started to install Fedora 28 in our production environment only to hit a snag. I could not access the Samba share via name on any machine. Under normal user, \linuxfax\fax would not resolve but \IP Address showed the Fax folder. No access to share. Admin account was the same with the exception of getting "No RPC server found"

Following items no longer worked for me;

chown [email protected]:"domain [email protected]" /share/fax

In smb.conf file - valid users = @"[email protected]"

I had to now use:

chown [email protected]:"Domain.com\domain admins" /share/fax

In smb.conf file - valid users = @"Domain.com\faxuser"

Sounds like something is off because you would use that format for trusted domains, not your domain. For example:

valid users = @"Domain Users", @"OTHERDOMAIN\Domain Users"

Where the first one is your domain, and the second is a different but trusted domain.

That was the weird part when I kept messing with the "valid users" section.

"valid users = @"Domain Users"" - wouldn't work so I kept to your documentation.

I will change it back and see what happens.

Side Note - how do you highlight your lines red with red box?

I actually misread what you wrote.

So @"Domain Users" works, but @"Domain [email protected]" does not work?

I could not get @"Domain Users" to work (original smb.conf file) so I stuck to @"Domain [email protected]" .

The issue as of the 7/6/18 Fedora/Samba/Winbind update is @"Domain [email protected]" no longer works and I now use valid users = @"Domain.com\Domain Users"

@obsolesce said in Samba file share and MS A/D NTFS permissions:

@pmoncho said in Samba file share and MS A/D NTFS permissions:

Small update:

I was able to get the NTFS perms to work as I wanted.
I kept the vfs objects line in global but add the nt acl support line

[global]
vfs objects = acl_xattr

[fax]

nt acl support = yes
valid users = @"[email protected]"

After setting up Samba, need to add rpc rights to allow Windows Admin to change NTFS perms on share.

net rpc rights list privileges SeDiskOperatorPrivilege -U "Domain\Admin Account"

I was then able to change group permissions and all worked out well.

That may have been why I had issues with NTFS ACLs. I didn't know about the nt acl support line. That may have made it work.

Maybe I'll try it on a test share.

Give it a shot. It works really nice. Don't for get the "net rpc" line. That is what allows you to actually change the perms in windows.

My GPO works out nice also for automatic user folder creation.

@obsolesce said in Samba file share and MS A/D NTFS permissions:

@pmoncho said in Samba file share and MS A/D NTFS permissions:

@obsolesce said in Samba file share and MS A/D NTFS permissions:

A few things have changed recently upon doing a new install as of Friday 7/6.

On 7/6 I started to install Fedora 28 in our production environment only to hit a snag. I could not access the Samba share via name on any machine. Under normal user, \linuxfax\fax would not resolve but \IP Address showed the Fax folder. No access to share. Admin account was the same with the exception of getting "No RPC server found"

Following items no longer worked for me;

chown [email protected]:"domain [email protected]" /share/fax

In smb.conf file - valid users = @"[email protected]"

I had to now use:

chown [email protected]:"Domain.com\domain admins" /share/fax

In smb.conf file - valid users = @"Domain.com\faxuser"

Sounds like something is off because you would use that format for trusted domains, not your domain. For example:

valid users = @"Domain Users", @"OTHERDOMAIN\Domain Users"

Where the first one is your domain, and the second is a different but trusted domain.

That was the weird part when I kept messing with the "valid users" section.

"valid users = @"Domain Users"" - wouldn't work so I kept to your documentation.

I will change it back and see what happens.

Side Note - how do you highlight your lines red with red box?

@obsolesce said in Samba file share and MS A/D NTFS permissions:

A few things have changed recently upon doing a new install as of Friday 7/6.

On 7/6 I started to install Fedora 28 in our production environment only to hit a snag. I could not access the Samba share via name on any machine. Under normal user, \linuxfax\fax would not resolve but \IP Address showed the Fax folder. No access to share. Admin account was the same with the exception of getting "No RPC server found"

Following items no longer worked for me;

chown [email protected]:"domain [email protected]" /share/fax

In smb.conf file - valid users = @"[email protected]"

I had to now use:

chown [email protected]:"Domain.com\domain admins" /share/fax

In smb.conf file - valid users = @"Domain.com\faxuser"

Small update:

I was able to get the NTFS perms to work as I wanted.
I kept the vfs objects line in global but add the nt acl support line

[global]
vfs objects = acl_xattr

[fax]

nt acl support = yes
valid users = @"[email protected]"

After setting up Samba, need to add rpc rights to allow Windows Admin to change NTFS perms on share.

net rpc rights list privileges SeDiskOperatorPrivilege -U "Domain\Admin Account"

I was then able to change group permissions and all worked out well.

@jaredbusch

@jaredbusch said in Is Spectrum down again today:

Last time this happened my client's phones were down too. But that port completed last Thursday.

Just wanted to log in and verify things before canceling the services.

I can get to the site just fine but my login won't work. Worked Friday.

I am unable to configure SELinux properly to allow faxgetty process.

I receive the following message in the audit.log

type=AVC msg=audit(1530011821.626:271): avc:  denied  { write } for  pid=1367 co
mm="faxgetty" name="status" dev="dm-0" ino=13376935 scontext=system_u:system_r:g
etty_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_spool_t:s0 tclass=dir permi
ssive=0
type=AVC msg=audit(1530011821.626:272): avc:  denied  { read } for  pid=1367 com
m="faxgetty" name="FIFO.ttyaa01" dev="dm-0" ino=13339822 scontext=system_u:syste
m_r:getty_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:var_spool_t:s0 tclass=
fifo_file permissive=0

I tried audit2allow with the following result but upon reboot, I have the same error

module faxgetty 1.0;

require {
        type var_spool_t;
        type getty_t;
        class capability setuid;
        class dir write;
        class fifo_file read;
}

#============= getty_t ==============

allow getty_t self:capability setuid;
allow getty_t var_spool_t:dir write;
allow getty_t var_spool_t:fifo_file read;

I either need to disable SELinux or do a "semanage permissive -a getty_t" for faxgetty to run at all.

It seems the going consensus is one big RAID10 (OBR10) with platter based drives and RAID5 with SSD's.

In certain cases and depending on the size of your data, pricing for SSD's with RAID5 is close if not cheaper than OBR10 with SAS drives.

Side Note - Are you virtualizing these servers? Virtualization opens up many doors even for single physical server offices.

@kooler said in I think I am missing something about Hyper-V....?:

@pmoncho said in I think I am missing something about Hyper-V....?:

@kooler said in I think I am missing something about Hyper-V....?:

In general we shift our focus from "Hyper-V and VMware" to "VMware and KVM". Reason: Hyper-V doesn't grow anymore and KVM has very high chances to supersede it. VMware... There's just more money there

Could you expand on your statement about Hyper-V not growing? Thanks

% between VMware, ESXi and KVM for acquired number of customers doesn't look good for Microsoft.

That is interesting. Do you think (or anyone here) that it is because of Microsoft focusing and moving more clients on Azure?

@dustinb3403 said in What Are You Doing Right Now:

@dbeato said in What Are You Doing Right Now:

@dustinb3403 said in What Are You Doing Right Now:

@dbeato said in What Are You Doing Right Now:

Just working on multiple maintenance of servers from Ubuntu 14.04 to Ubuntu 18.04....

Huh... 14.04?

yes, there were some servers with 14.04 which we upgraded to 16.04 and then now to 18.04

How are you getting them to 18.04 I thought the repos were taken down. .

I just went from 16.04 to 18.04 today with do-release-upgrade -d Worked out pretty well too.

@dashrender said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

Most calculations of this type are against other currencies over time. but no matter what it is pegged against, another currency, a commodity, an index, both objects float over time. There is no stable value system to compare against over time, not even labour.

In this world, no system for time based valuation is perfect but it can be stable. Although stability can fluctuate as much as value.

You did hit on a key element, that both should float over time but as you can see, other than early on, it has continued to float DOWN. There is no float UP for over 70 years.

At the end of the day, the US Dollar's value has just as much chance of going to near 0 as BitCoin, cryptocurrency, or additional currencies. Just ask Zimbabwe.

All this is, is inflation, though. It's true, inflation exists, but it's not very telling of anything.

I'm unclear if you are trying to say that the US currencies is bound inevitably for actually hitting zero like Zimbabwe did, or if you feel they are stable, and just always inflate?

I was only saying that the value of a US Dollar, or almost any currency, has the ability to go to near 0 just like BitCoin/Crytocurrency.

Edit - Do I think our future is in a little trouble? Not really as I am not a Doomsday kinda person but if the IMF and BIS have their way with SDR's, it could become BIG Issues for the little guys in the world.

Sure, I agree that all currency CAN. Maybe all do eventually given enough time? Does the Ithaca Hour have that same risk as it is pegged to labour.

If you haven't read them yet, check out "Currency Wars" and "The Death of Money" by James Rickards. While he can be a doomsdayer like Peter Schiff, some of his "predictions" in those books have take place.

If crytocurrencies can become stable and stay within its own local economy it will have a better chance at succeeding in the long run. The issue is everyone wants to convert it to some form of government run currency. We both know that if the government is in the mix, they will either disallow the crytos or need to have total control.

Well they can't just print money (i.e. steal your wealth) if they don't have total control.

True, but a government can take control if they want to. They did it with gold in 1933 with Executive Order 6102. They had limited control over gold but then made it so they had total control. On the bright side, a person was able to keep their jewelry.

Though that said - I never really understood how printing money devalued the money others had. I mean if we are talking substantial amounts, sure, but even a few million into a trillion dollar economy would likely be only a blip. Perhaps even a few billion would be but a blip.

You are right that we do need the government to print some money to keep the economy going or else they would need to raise interest rates (the price of money) to HUGE levels to keep demand down. It is the $700 Billion by Bush, $400 Billion by Obama and then $40 Billion a month for years on end that is/was the problem (QE). Its the TRILLION's placed in the market that is where devaluing comes from.

This creates other issues with our "Global Economy." If we put out Millions of Billions of dollars, the rest of the world that trades with us doesn't like that so they have to devalue their currency so they can keep their prices lower than ours (aka China). Now it is an ultimate race to the bottom. That is partially why @scottalanmiller chart above for the last 10 years shows the US dollar staying sideways or going up. The EU, Russia and China (especially) devalued their currency worse than ours.

If we have 10,000 virtual tooth picks for 1000 US citizens, they are worth $X. If the government decides to create 1,000,000 tooth picks for 10,000 people, then lower interest rates to .25%, the virtual tooth picks will be gobbled up by foreign trading partners but they are also worth 10% to us before printing. China is looking good because they keep trade going and prices for their products at the same price (This gouges their own little people). The US keeps buying products not realizing that the purchasing power of the dollar we had yesterday is significantly less today (Obviously this takes place over much more time)

The same goes with gold - sure as more and more is mined, there is more to go around, meeting more of the demand, but the value never really seems to actually go down, instead the demand just seems to keep going up.

People want gold because its nice and shiny, along with being finite. Once it is all mined (who knows when that will be), gold prices will move up at a quicker pace. Also, the price goes up because US Dollar keeps getting devalued, making gold/commodities more expensive.

Know more about devaluing currencies, one begins to wonder WTH Switzerland was thinking in 2012 by pegging its Franc to the Euro just to "be nice." It just put them into the common whole with every other country. They scraped the peg in 2015 (A very wise move IMHO).

@kooler said in I think I am missing something about Hyper-V....?:

In general we shift our focus from "Hyper-V and VMware" to "VMware and KVM". Reason: Hyper-V doesn't grow anymore and KVM has very high chances to supersede it. VMware... There's just more money there

Could you expand on your statement about Hyper-V not growing? Thanks

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

Most calculations of this type are against other currencies over time. but no matter what it is pegged against, another currency, a commodity, an index, both objects float over time. There is no stable value system to compare against over time, not even labour.

In this world, no system for time based valuation is perfect but it can be stable. Although stability can fluctuate as much as value.

You did hit on a key element, that both should float over time but as you can see, other than early on, it has continued to float DOWN. There is no float UP for over 70 years.

At the end of the day, the US Dollar's value has just as much chance of going to near 0 as BitCoin, cryptocurrency, or additional currencies. Just ask Zimbabwe.

All this is, is inflation, though. It's true, inflation exists, but it's not very telling of anything.

I'm unclear if you are trying to say that the US currencies is bound inevitably for actually hitting zero like Zimbabwe did, or if you feel they are stable, and just always inflate?

I was only saying that the value of a US Dollar, or almost any currency, has the ability to go to near 0 just like BitCoin/Crytocurrency.

Edit - Do I think our future is in a little trouble? Not really as I am not a Doomsday kinda person but if the IMF and BIS have their way with SDR's, it could become BIG Issues for the little guys in the world.

Sure, I agree that all currency CAN. Maybe all do eventually given enough time? Does the Ithaca Hour have that same risk as it is pegged to labour.

If you haven't read them yet, check out "Currency Wars" and "The Death of Money" by James Rickards. While he can be a doomsdayer like Peter Schiff, some of his "predictions" in those books have take place.

If crytocurrencies can become stable and stay within its own local economy it will have a better chance at succeeding in the long run. The issue is everyone wants to convert it to some form of government run currency. We both know that if the government is in the mix, they will either disallow the crytos or need to have total control.

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

Most calculations of this type are against other currencies over time. but no matter what it is pegged against, another currency, a commodity, an index, both objects float over time. There is no stable value system to compare against over time, not even labour.

In this world, no system for time based valuation is perfect but it can be stable. Although stability can fluctuate as much as value.

You did hit on a key element, that both should float over time but as you can see, other than early on, it has continued to float DOWN. There is no float UP for over 70 years.

At the end of the day, the US Dollar's value has just as much chance of going to near 0 as BitCoin, cryptocurrency, or additional currencies. Just ask Zimbabwe.

All this is, is inflation, though. It's true, inflation exists, but it's not very telling of anything.

I'm unclear if you are trying to say that the US currencies is bound inevitably for actually hitting zero like Zimbabwe did, or if you feel they are stable, and just always inflate?

I was only saying that the value of a US Dollar, or almost any currency, has the ability to go to near 0 just like BitCoin/Crytocurrency.

Edit - Do I think our future is in a little trouble? Not really as I am not a Doomsday kinda person but if the IMF and BIS have their way with SDR's, it could become BIG Issues for the little guys in the world.

Sure, I agree that all currency CAN. Maybe all do eventually given enough time? Does the Ithaca Hour have that same risk as it is pegged to labour.

Maybe they will. You and I will probably never know but they are dependent on the government in charge of the currency and its value.

As for the Ithaca Hour, I don't have much knowledge other than little news stories and Wikipedia. Based on my initial assessment of them, I would say the risk is actually less when bought/sold within the local economy. With it being local and staying local, everyone knows the exact value.

I can see where it would become unstable, go through a bubble and bust phase, if used outside the local economy.

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

Most calculations of this type are against other currencies over time. but no matter what it is pegged against, another currency, a commodity, an index, both objects float over time. There is no stable value system to compare against over time, not even labour.

In this world, no system for time based valuation is perfect but it can be stable. Although stability can fluctuate as much as value.

You did hit on a key element, that both should float over time but as you can see, other than early on, it has continued to float DOWN. There is no float UP for over 70 years.

At the end of the day, the US Dollar's value has just as much chance of going to near 0 as BitCoin, cryptocurrency, or additional currencies. Just ask Zimbabwe.

All this is, is inflation, though. It's true, inflation exists, but it's not very telling of anything.

I'm unclear if you are trying to say that the US currencies is bound inevitably for actually hitting zero like Zimbabwe did, or if you feel they are stable, and just always inflate?

I was only saying that the value of a US Dollar, or almost any currency, has the ability to go to near 0 just like BitCoin/Crytocurrency.

Edit - Do I think our future is in a little trouble? Not really as I am not a Doomsday kinda person but if the IMF and BIS have their way with SDR's, it could become BIG Issues for the little guys in the world.

@scottalanmiller said in Bitcoin Takes Another 10% Hit on SEC Warning:

@pmoncho said in Bitcoin Takes Another 10% Hit on SEC Warning:

Most calculations of this type are against other currencies over time. but no matter what it is pegged against, another currency, a commodity, an index, both objects float over time. There is no stable value system to compare against over time, not even labour.

In this world, no system for time based valuation is perfect but it can be stable. Although stability can fluctuate as much as value.

You did hit on a key element, that both should float over time but as you can see, other than early on, it has continued to float DOWN. There is no float UP for over 70 years.

At the end of the day, the US Dollar's value has just as much chance of going to near 0 as BitCoin, cryptocurrency, or additional currencies. Just ask Zimbabwe.