Best posts made by Romo

@thwr said in What Are You Doing Right Now:

Wow, easy guys. It's still me. I've not been around here for a couple of months (for a very good reason), but you all know me well enough.

a) I've applied for the budget in the first hand. It's NOT a yearly budget. It's a special one-time project budget.

b) I could have asked for way more and go for Cisco or whatever. But I choosed UBNT? Why? Because they are awesome and very affordable, as we all know. Using other well known vendors would have driven the costs... What? 5 times up? 10 times? Even more?

c) no secret: I'm still no - and will never be - a native English speaker. Keep that in mind, it's not always easy to explain things especially in topics such as business finances. I guess you got something wrong here.

So, please, think a second before using a words like "corruption" or bad ethic habits.

Nothing really against you @thwr it was really a complaint on my part of the system and how financial departments handle public money than a comment against you.

:smiling_face_with_open_mouth_smiling_eyes:

I was provided with PDU remote access so I can reboot the server that way.

Happy Birthday @scottalanmiller !!

@msff-amman-Itofficer said in SaltStack Use Cases:

Will be monitoring this thread like:
Also does it really work in Windows environments like it does on Linux, it seems like SaltStack and its brothers (Chef, Ansible, I forgot one) are tailored for Linux, and I dont want the master/server to be on Windows, that will be redundant I mean passing commands to Windows agents, and is their template library with commands where we can see what we can do under Windows.

They do work for windows, the don't have all the modules for Windows yet but they have a pretty good selection.

Ansible Windows Modules

win_acl - Set file/directory permissions for a system user or group.
win_acl_inheritance - Change ACL inheritance
win_chocolatey - Installs packages using chocolatey
win_command - Executes a command on a remote Windows node
win_copy - Copies files to remote locations on windows hosts.
win_disk_image - Manage ISO/VHD/VHDX mounts on Windows hosts
win_dns_client - Configures DNS lookup on Windows hosts
win_domain - Ensures the existence of a Windows domain.
win_domain_controller - Manage domain controller/member server state for a Windows host
win_domain_membership - Manage domain/workgroup membership for a Windows host
win_dotnet_ngen - Runs ngen to recompile DLLs after .NET updates
win_environment - Modifies environment variables on windows hosts.
win_feature - Installs and uninstalls Windows Features on Windows Server
win_file - Creates, touches or removes files or directories.
win_file_version - Get DLL or EXE file build version
win_find - return a list of files based on specific criteria
win_firewall_rule - Windows firewall automation
win_get_url - Fetches a file from a given URL
win_group - Add and remove local groups
win_iis_virtualdirectory - Configures a virtual directory in IIS.
win_iis_webapplication - Configures IIS web applications.
win_iis_webapppool - Configures an IIS Web Application Pool.
win_iis_webbinding - Configures a IIS Web site.
win_iis_website - Configures a IIS Web site.
win_lineinfile - Ensure a particular line is in a file, or replace an existing line using a back-referenced regular expression.
win_msg - Sends a message to logged in users on Windows hosts.
win_msi - Installs and uninstalls Windows MSI files
win_nssm - NSSM - the Non-Sucking Service Manager
win_owner - Set owner
win_package - Installs/Uninstalls an installable package, either from local file system or url
win_path - Manage Windows path environment variables
win_ping - A windows version of the classic ping module.
win_psexec - Runs commands (remotely) as another (privileged) user
win_reboot - Reboot a windows machine
win_reg_stat - returns information about a Windows registry key or property of a key
win_regedit - Add, change, or remove registry keys and values
win_region - Set the region and format settings
win_regmerge - Merges the contents of a registry file into the windows registry
win_robocopy - Synchronizes the contents of two directories using Robocopy.
win_say - Text to speech module for Windows to speak messages and optionally play sounds
win_scheduled_task - Manage scheduled tasks
win_service - Manages Windows services
win_share - Manage Windows shares
win_shell - Execute shell commands on target hosts.
win_shortcut - Manage shortcuts on Windows
win_stat - returns information about a Windows file
win_tempfile - Creates temporary files and directories.
win_template - Templates a file out to a remote server.
win_timezone - Sets Windows machine timezone
win_unzip - Unzips compressed files and archives on the Windows node
win_updates - Download and install Windows updates
win_uri - Interacts with webservices.
win_user - Manages local Windows user accounts
win_webpicmd - Installs packages using Web Platform Installer command-line

Saltack Windows Modules

salt.states.win_certutil module
salt.states.win_dacl
salt.states.win_dism module
salt.states.win_dns_client
salt.states.win_firewall
salt.states.win_iis module
salt.states.win_lgpo module
salt.states.win_license module
salt.states.win_network
salt.states.win_path
salt.states.win_pki module
salt.states.win_powercfg
salt.states.win_servermanager
salt.states.win_smtp_server module
salt.states.win_snmp module
salt.states.win_system
salt.states.win_update

Speaking about ansible and saltstack the master/control node only runs on Linux.

They do have a reason to exist, they are called User Private Groups and they are better explained here:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/3/html/Reference_Guide/s1-users-groups-private-groups.html

Another explanation:
https://security.ias.edu/how-and-why-user-private-groups-unix

Documenting the process to have easy access in the future.

Enabling MPIO

• Enable-WindowsOptionalFeature –Online –FeatureName MultiPathIO
  

Verifying if MPIO is enabled

• Get-WindowsOptionalFeature -Online -FeatureName MultipathIO
  

Enabling Failover Clustering

• Install-WindowsFeature -Name Failover-Clustering –IncludeManagementTools

Verifying the Installation of Failover Clustering

• Get-WindowsFeature failover*
  

@emad-r One of the main points of using configuration management tools is that when using them properly you create idempotent operations (getting the same result no matter the number of times the operation is executed).

Instead of using cmd.run to execute the install, you could as others have mentioned the chocolatey module, or if you don't want to install chocolatey on your computers you could use the win_pkg which requries a repo created on the salt-master. Both of those modules are idempotent, so once you reach the desired state no matter how many times you run them they will not make any more changes.

https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.win_pkg.html
https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.chocolatey.html

The software available in the official windows git repo.
https://github.com/saltstack/salt-winrepo-ng

Creating a windows software repository:
On your salt master run

salt-run winrepo.update_git_repos

Sync the repo on your Windows minions

salt -G 'os:windows' pkg.refresh_db

Now you can use the pkg module in your states, or adhoc commands.

//Example adhoc command (remote execution)
salt -G 'os:Windows' pkg.install salt-minion

That last command will always install the latest version of the salt-minion you could add the version parameter to specify the one you require.

@kelly said in KVM Setup:

All scorn and derision aside, if I wanted to manage a KVM host from Windows what are my options?

Any GUI options?

How about testing either of the following two options if you dont want to have a linux vm or manage everything with virsh. Can't test them properly myself since currenty working out of my office and dont have any KVM server available:

If you have Win 10

1. WSL (Windows Subsystem for LInux) + VcXsrv+ virt-manger
   

If you have Win 7 you can use Cygwin
2. Cygwin + virtmanager

@minion-queen said in Syncing Google and Ical:

@kelly said in Syncing Google and Ical:

@minion-queen said in Syncing Google and Ical:

@kelly said in Syncing Google and Ical:

When you say that it isn't working, what does that mean? Are you getting an error? I just ran into this the other day, and the calendar was syncing using the common instructions, but it wasn't automatically displaying, nor was it listed as an option in gmail. I had to go into the calendar settings and turn on ical calendar. I'll see if I can't get better steps here in a minute.

No error or anything just nothing happening at all.

Thank you!

Just to be clear, you're trying to get her calendar out of gmail calendar and into another iCal based calendar, or the other way around?

Both directions actually. Out of Gmail into Ical is working fine. But if she schedules something in Ical it is not blocking off time in Gmail.

Maybe make the ICAL calendar public and then import the webcal link into google calendar?

Python's 3 print() is a function . Your variables are the parameters for the print function.

print(parameter1,parameter2)

Python's 2 print is a special statement not a function so when when you put your variable names inside the print statement python prints out your variables as a tuple because of the , .

>>>print (name)
romo

>>> print(name,)
('romo',)

I am working in the process and documentation of the decommission of an Exchange 2010 server in a hybrid Office 365 deployment and would like some opinions and experiences from you guys.

Specific Microsoft documentation about the subject:

1. Decommissioning your Exchange 2010 servers in a Hybrid Deployment

2. How and when to decommission your on-premises Exchange servers in a hybrid deployment

According to the documentation, fully decommissioning the last Exchange server is not officially supported, especially not when DirSync is in use which it is in this case:

If the last Exchange server is removed, you cannot make changes to the mailbox object in Exchange Online because the source of authority is defined as on-premises. The source of authority refers to the location where Active Directory directory service objects, such as users and groups, are mastered (an original source that defines copies of an object) in a hybrid deployment. If you needed to edit most mailbox settings, you would have to be sure the Active Directory schema was extended on-premises and use unsupported tools such as Active Directory Service Interfaces Editor (ADSI Edit) for common administrative tasks. For example, adding a proxy address or putting a mailbox on litigation hold when there isn’t an Exchange Management Console (EMC) or Exchange Management Shell (Shell) on-premises becomes difficult and these simple (and other more complex) tasks cannot be done in a supported way.

Customers with a hybrid configuration often find after a period of time that all of their mailboxes have been moved to Exchange Online. At this point, they may decide to remove the Exchange servers from on-premises. However, they discover that they can no longer manage their cloud mailboxes.

When directory synchronization is enabled for a tenant and a user is synchronized from on-premises, most of the attributes cannot be managed from Exchange Online and must be managed from on-premises. This is not due to the hybrid configuration, but it occurs because of directory synchronization. In addition, even if you have directory synchronization in place without running the Hybrid Configuration Wizard, you still cannot manage most of the recipient tasks from the cloud.

Even though it is not officially supported they do provide a way to manually remove the hybrid deployment (link 1) and apparently the mailbox objects could be edited with ANSIEdit or other 3rd party tools.

Has anybody had any experience dealing with hybrid setups that would like to comment on their findings and experiences.

Has anybody set QoS on the switches? Trying to prioritize VOIP on reported saturated switches. I can see from here https://dl.ubnt.com/guides/edgemax/EdgeSwitch_AdminGuide.pdf#ConfQoS.indd%3AAnchor 1%3A285 the edgeswitches do offersome options but not clear on what works better as I have not done QoS on switches before.

Depending on the type of storage pool you want, you could partition your block device device or create LVM volumes to be used as storage pool. This is more of a how to add storage to a Linux host.

Here's more info https://docs.fedoraproject.org/en-US/Fedora/18/html/Virtualization_Administration_Guide/chap-Virtualization_Administration_Guide-Storage_Pools-Storage_Pools.html#sect-part-based-storage-pool-cli

For starters use the dev tools of your browser:

Here is the performance profile from mangolassi on my computer

Network performance of the assets, as you can see many things are already cached on my disk.

@scottalanmiller The most login prompts are using it in Chrome.

Chrome has a bug regarding the websockets protocol and NTLM authentication. This effects the following tools: Events, PowerShell, Remote Desktop.
https://bugs.chromium.org/p/chromium/issues/detail?id=423609

Email trace in https://protection.office.com/#/messagetrace

Edgerouters can now handle custom dynamic dns providers without the need of the script - here is the guide with Cloudflare as the example: https://help.ubnt.com/hc/en-us/articles/204976324

So the CDR reports stopped working after Feb 4, those are the last entries that are properly shown. That same day a client asked us to install Asternic CDR Reports to give the trial install a test. The install went without any apparent errors and it was left for the client to register for the trial.

Something must have gone wrong do to the asteriskcdrdb:cdr, since now that I am checking the logs do to the client reporting no entries show up either on asternic or the regular cdr reports I get this:

[2019-03-05 10:23:38] WARNING[5079]: res_odbc.c:459 ast_odbc_print_errors: SQL Execute returned an error: 42S02: [MySQL][ODBC 5.2(w) Driver][mysqld-5.5.56-MariaDB]Table 'asteriskcdrdb.acdrunichan' doesn't exist
[2019-03-05 10:23:38] WARNING[5079]: res_odbc.c:403 ast_odbc_prepare_and_execute: SQL Execute error -1!
[2019-03-05 10:23:38] WARNING[5079]: cdr_adaptive_odbc.c:749 odbc_log: cdr_adaptive_odbc: Insert failed on 'asteriskcdrdb:cdr'. 

Client reports Asternic Reports never worked for them, so I have gone a head and removed it, but still get the same errors.

Any ideas how to the the cdr logging to the db working again?

Apparently during the install of Asternic CDR reports a trigger was set that was pointing to a table that never got properly created. After I dropped the triggered from the asteriskcdrdb logging could start again.

Here is the trigger:

MariaDB [asteriskcdrdb]> show triggers;
+--------------+--------+-------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------+---------+----------+----------------+----------------------+----------------------+--------------------+
| Trigger      | Event  | Table | Statement                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            | Timing | Created | sql_mode | Definer        | character_set_client | collation_connection | Database Collation |
+--------------+--------+-------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------+---------+----------+----------------+----------------------+----------------------+--------------------+
| simp_channel | INSERT | cdr   | BEGIN

SET @orichn   = ''; SET @dstchn = '';

SELECT SUBSTRING(NEW.channel,1,LENGTH(NEW.channel)-LOCATE("-",REVERSE(NEW.channel))) INTO @orichn;
SELECT SUBSTRING(NEW.dstchannel,1,LENGTH(NEW.dstchannel)-LOCATE("-",REVERSE(NEW.dstchannel))) INTO @dstchn;

IF @dstchan LIKE 'Local/FM%' THEN

SELECT CONCAT('SIP/',SPLIT_STR(REPLACE(REPLACE(dstchannel,'#','-'),'@','-'),'-',2)) INTO @dstchn;
INSERT INTO acdrunichan VALUES (NEW.uniqueid,@orichn,@dstchn);

ELSE

INSERT INTO acdrunichan VALUES (NEW.uniqueid,@orichn,@dstchn);

END IF;
END | AFTER  | NULL    |          | root@localhost | utf8                 | utf8_general_ci      | utf8mb4_unicode_ci |
+--------------+--------+-------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+--------+---------+----------+----------------+----------------------+----------------------+--------------------+
1 row in set (0.01 sec)

Deleted it with:

DROP Trigger if exists asteriskcdrdb.simp_channel;

Here is where to make the change of an item: