Ya I'd just pay the $400 for 5nines and be done with it.

@scottalanmiller said in DHCP Scope and DNS Reverse Lookup:

@gjacobse said in DHCP Scope and DNS Reverse Lookup:

@scottalanmiller said in DHCP Scope and DNS Reverse Lookup:

@gjacobse said in DHCP Scope and DNS Reverse Lookup:

However the NextCloud instance is on a 168.3.x zone. Going back to DHCP, the single scope is 168.1.1 - 168.3.254.

• force NextCloud to a 168.2.x address.

What do you mean force it to 168.2.x? That is a 168.3.x address here. See your subnet notes above.

NextCloud currently has a 192.168.3.x address. Force as in push it to a 192.168.2.x address

Whoa, that's nothing like what you had before. 168.x is external public IPs. 192.168.x is internal, private IPs.

Why are there two subnets as options?

This is why I was confused. Looks like he left off the 192 to shorten it? I thought it was public also.

Ah it's in the reverse ip. I just missed it.

@scottalanmiller said in Windows Server for your home lab:

The more often you are forced to rebuild, the more you will be encouraged to automate.

Can you sysprep before adding the trial license? That way you could just clone and add the license automatically.

@dbeato said in Quickbooks replacement:

@scottalanmiller If anyone is wondering what I am referring with Hosted QB, see link below
https://www.rightnetworks.com/solutions/quickbooks-hosting/
http://enterprisesuite.intuit.com/products/enterprise-solutions/technical/?scroll=top

Oh I was talking about this

https://quickbooks.intuit.com/online/

It's their SaaS "cloud" one.

@scottalanmiller said in Quickbooks replacement:

@dashrender said in Quickbooks replacement:

@scottalanmiller said in Quickbooks replacement:

@travisdh1 said in Quickbooks replacement:

How Intuit is still in business blows my mind, they should've lost all their customers years ago.

And any accountant or bookkeeper that recommends them should be fired. How could you trust an accountant that thinks using a tool like that is okay for a real business?

Other than the lack of real two sided accounting, what is it about this product you don't like?

https://mangolassi.it/topic/14350/why-quickbooks-is-not-a-business-tool

Other than the support none of those apply to the hosted SaaS version.

It also has tmux and vim capabilities

@dashrender said in 2FA - when required by your vendors, do you stipend your staff?:

@stacksofplates said in 2FA - when required by your vendors, do you stipend your staff?:

@dashrender said in 2FA - when required by your vendors, do you stipend your staff?:

The best option would be a PC based token.

I just found https://winauth.com/

Now the question is, does it break something you have, something you own, something you are?

I say no - you know your password, and you have your laptop. Why would a laptop be any different than you having your phone?

Wait why can't they use physical tokens if they can use this? A Yubikey generates an OTP like Google Auth or RSA but you don't have to type it in.

Very true - I know I said Tokens aren't currently an option - so that of course probably kills this.

We are dealing with several different hospitals. Each with their own requirements. One hospital offered us Keyfobs, then turned around and said, "you need 80+ - uh no", and made an IP bypass based solution for us. But we have another now causing us issues, I need to see if they can work with an app.

I don't think we can help until we know what the requirements are. Is this TOTP or HOTP? Is it text or email based?

They have to tell you what the requirements are before you can look at different solutions.

@coliver said in If a business were all linux would they use Office 365:

@wirestyle22 said in If a business were all linux would they use Office 365:

@coliver said in If a business were all linux would they use Office 365:

@wirestyle22 said in If a business were all linux would they use Office 365:

@coliver said in If a business were all linux would they use Office 365:

@dashrender said in If a business were all linux would they use Office 365:

@coliver said in If a business were all linux would they use Office 365:

@wirestyle22 said in If a business were all linux would they use Office 365:

@coliver said in If a business were all linux would they use Office 365:

What prevents them from using O365? It's generally one of the least expensive enterprise email solutions available.

I think he means with full features

What features would be missing? Email, calendaring, contacts, OneDrive, Sharepoint, Skype for Business, are all available on Linux in one form or another.

Well specifically you left off all of the MS Office apps that can be installed locally. But I'm pretty sure it was Scott who said that WINE was originally created because someone wanted to run MS Office on Linux OSes

What benefit does Microsoft Office provide to a Linux shop that LibreOffice doesn't provide?

Libreoffice often requires conversion of the more complex office documents. If you can't seamlessly open them and have everything displayed correctly it's not very useful IMO. It's a little different if you're just starting your company and it starts as linux right in the beginning though.

The topic was about a Linux shop. If we're talking about a mixed shop you have a point, although it's not as big of an issue lately as it has been in the past.

They are likely to receive some type of office documentation via e-mail here so I'm considering that too

Any received or sent document shouldn't be in a doc format. They should be sending, and expecting, documents in pdf.

Bah I responded before I read the whole thread.

@scottalanmiller said in Wiki Idea Shot Down:

@jmoore said in Wiki Idea Shot Down:

@scottalanmiller Well that is interesting. So any idea what these vulnerability scans were he said he ran that kept giving up php as the culprit?

Given everything else described, it is pretty safe to assume he's either just making it up or is not properly maintaining his system and the results are actually telling you that you have a security problem in your IT management.

I'm guessing something like Nessus. We have a couple appliances with web interfaces that we can't update and they show up on scans. It's nothing you can change and means nothing about PHP. Anything is a vulnerability if you don't maintain it.

@bj said in virtualize all the things... ?:

@jaredbusch said in virtualize all the things... ?:

Then Manage it from your Fedora desktop

I think I'd rather not install an entire desktop to manage VMs. That seems like taking a step in the wrong direction to me.

You don't have to. You can manage from cli only. And if you just want virt-manager just have a VM on the host that you can X11 forward from.

@fuznutz04 said in Installing Terraform 0.9.11 on Ubuntu 17.04:

How does this compare to Salt?

Salt is a CM/Automation tool, this is an infrstructure provisioning tool. You can use things like Salt and Ansible for infrastructure but this is faster and purpose built for that.

Cloudflare. But if you are already on AWS it might be worth it just to use that.

@emad-r said in KVM Poor Man Replication HA:

So I did ask around before posting this and I did receive warnings, but I have been testing this and it is very simple and dumb yet works (tested only with Linux VM Distro). sharing it here so you guys can bash me about my method, as well as enlighten me.

So you have your 2 KVM hosts okay + 1 Fedora machine with Virt Manager

You create all the VMs on the KVM and call it primary, let us call it KVM 1
the second KVM 2 will be just the slave incase KVM 1 drops.

So what we do is schedule a script to :

1. (optional )Stop Software VM activity like DB or WebServer sometime when it is not being utilized at midnight for example, systemctl stop httpd ..etc

2. Freeze the FileSystem (guest agent needs to be installed.)
   virsh domfsfreeze VMNAME

3. Rsync the VM image to another KVM host (KVM 2) periodically each night.
   rsync --progress --inplace -h
   or
   rsync --progress --inplace -h -W (safer)

4. Prepare previously in KVM 2 the VM xml (RAM/CPU)and make it same as the one in KVM1, also copy the MAC address. but keep VM2 shutdown.

5. You can script Fedora Machine to keep pinging KVM 1 or VM 1 and if it fails to receive thus it is down, so if that happens KVM 2 will virsh start VM2 , which will have the same everything even the same internal IP.

What do you think ? Too cheezy ? Does it show how much I am afraid to play with GLusterFS?

btw the tags are acting weird, whenever I type one it removes itself.

So the issue with rsyncing for anything other than a snapshot is the data will be different.

For example:

you rsync VM1 at 5AM to KVM2. At 3PM KVM1 goes down. VM1 will start up on KVM2, but any data written between 5AM and 3PM is lost. I wouldn't recommend rsync for anything other than copying disks as a backup or snapshot.

Gluster will do the real time replication you need for this.

@scottalanmiller said in Xen Orchestra: special discount...:

@dbeato said in Xen Orchestra: special discount...:

@scottalanmiller said in Xen Orchestra: special discount...:

@dbeato said in Xen Orchestra: special discount...:

@scottalanmiller yeah still that's only 3 servers or 2 servers with SMB.

Three servers isn't too shabby.

Yeah, in a SMB I have about 5 physical Hypervisors

You might want to consider consolidation

Says the guy with nine.

I've got 12 KVM.

@scottalanmiller said in How is RHEL Free?:

@donaldlandru mentioned that the RHEL branded edition can be downloaded now and that support is purchased separately. I've not heard, but would not have looked because CentOS covers that already.

You can get a developer edition with updates for free, But you need to be part of their dev network which is also free to join. You just can't run it in production.

@scottalanmiller said in How is RHEL Free?:

@matteo-nunziati said in How is RHEL Free?:

@scottalanmiller said in How is RHEL Free?:

@matteo-nunziati said in How is RHEL Free?:

@jaredbusch said in How is RHEL Free?:

@scottalanmiller said in How is RHEL Free?:

@fateknollogee said in How is RHEL Free?:

@scottalanmiller said in How is RHEL Free?:

@fateknollogee said in How is RHEL Free?:

@scottalanmiller said in Let's Convince Someone to release a FOSS PBX:

@dashrender said in Let's Convince Someone to release a FOSS PBX:

But, they cloak that fact behind their support contracts, making the install media challenging to get directly from them.

Making a free product and providing a download service for a free product are totally different things. There is no cloaking or anything of the sort. RHEL is free, always has been. That THEY don't provide you a download link to it is neither here nor there. That THEY don't advertise this and make a big deal of it is neither here nor there. That they only have a marketing and sales team to sell support doesn't constitute a cloak.

Feel free to "fork" this..
If "RHEL is free, always has been"...why not this option instead of CentOS

CentOS is RHEL free. The names are essentially just names of when it is free or not free. They aren't two separate products. Technically some logos and markers are different, but the actual OS is literally identical. They are the same product, from the same vendor. There are only two names for historical reasons.

Because RHEL is really a reference to being licensed for support and not to the OS specifically, it creates on odd situation. If you get a free copy of RHEL, we call it CentOS. So is RHEL free? Well, is a $.99 Hamburger free? No, we'd call it a free hamburger. But is RHEL available for free, yes. Because the name refers to it being paid for, it's a linguistic problem.

But bottom line, RHEL is free, period. It's made of components that must be available for free. RH doesn't have an option to keep it from being free. Even before RH made a point of providing it for free, CentOS and Scientific were examples that it was free regardless of RH not providing it in that manner.

Is every single feature available on RHEL also available on CentOS?

Yes, CentOS IS RHEL. They are the same product.

No they are not.

They are different products. They talk to different repos even.

They might be feature compatible. But they are not the same product.

this is correct IMHO: centos release and security fixes always lag a bit because they recompile everything from source and upload to their own repos.
CENTOS is API and API compatible with redhat and tries to keep its own repos aligned with the contents of redhat, but some divergences are in place with redistributed SW.

The RELEASE might lag but it's the same product. That the CentOS brand labeling is later doesn't make it different.

IMHO I think it is a matter of terms: a product is something packaged by someone. Say that they are the same product means that redhat releases the distro even in free-as-in-beer without support and names it centos. This is not correct.

Say that they are 100% compatible IS correct, but it is not the same stuff.
Just think at an hypotetical error in the toolchain of centos: this is not propagated in RH and vice-versa.

For daily usage they can provide 100% same experience but it is a third party redistribution. even if RH has hosted centos nowdays.

That was kind of my point about the NAME meaning not free, but the THING is free. Can you download RHEL for free? Yes. Can you use it for free? Yes. Can you also get it as CentOS for free, yes.

RHEL IS available for free, CentOS is proof that someone did exactly that. Now CentOS IS from RH, and is free.

We are getting into silly semantics to make RHEL not free. No matter how you word it, there is a way to get RHEL for free.

It's not semantics though. You can't download RHEL for free and use it in production. You can get the source code for free but that's not RHEL, because not everything is in that source code. Both have different packages at install. CentOS has packages available that RHEL doesn't and RHEL has packages available that CentOS doesn't.

There also used to be differences with things like cron. I know of one specific example in RHEL/CentOS 5 where each treated certain extensions under /etc/cron.d differently. This kind of thing may be fixed since the merger in 2014 but it's still a separate group compiling with possibly different flags so this can still happen.

You can't say that it's the same because you can install the same packages on either. You can install RPMs on Ubuntu, that doesn't make it the same as RHEL.

@penguinwrangler said in Why Free Open Source Software Is Cheaper Than You Think:

I have no problems finding apps for my Linux Desktop. What are the apps that everyone can't find for Linux?

Ya idk. I've never had issues either. But then again I'm not a pretend graphic designer who "needs" every Adobe product ever created.

@john-nicholson said in Why Free Open Source Software Is Cheaper Than You Think:

Sunk Cost software - Photoshop for many is a sunk cost (They own it, have an Adobe subscription for Illustrator or other things you use, their company has paid for it). This also extends into arguments for why you should leave other commercial products when you already have an ELA etc for given software.

I'm in the same boat when I have to use a Windows machine. If I'm on Windows, I'm the least productive person. Git on Windows sucks. I don't have a lot of the daily tools I need to perform or have to make workarounds. So again I'm not disagreeing.

@john-nicholson said in Why Free Open Source Software Is Cheaper Than You Think:

@stacksofplates said in Why Free Open Source Software Is Cheaper Than You Think:

@john-nicholson said in Why Free Open Source Software Is Cheaper Than You Think:

@stacksofplates There are other costs to GIMP (I've used it, honestly prefer Paint.NET).

1. Training. There are a bazillion classes, youtube videos, books, and even college courses that include photoshop. GIMP has significantly less available in this realm and while it has some free content it's less than 1% of what is out there for PS.

2. Sunk Cost software - Photoshop for many is a sunk cost (They own it, have an Adobe subscription for Illustrator or other things you use, their company has paid for it). This also extends into arguments for why you should leave other commercial products when you already have an ELA etc for given software.

3. Sunk Cost Training - If my staff knows how to use PS or other software, and has 5000 hours of experience with it, it's going to take a while for them to switch to GIMP. Even at 200 hours of lost productivity or slow work to get back up to speed on GIMP, if my labor is at $150 an hour (what I got quoted for a conversion job recently) It's going to cost me 30K to switch to GIMP.

Im not arguing with any of that. What I'm saying is 99.9% of the times I've seen someone say they can't use Linux because they can't use Photoshop they didn't need it. They aren't graphics professionals and rely on stolen/hacked versions of PS to do their work.

If you really need it you really need it, no argument there. But some hipster who "needs" it so he can make a new age poster for his craft beer room doesn't really "need" it.

When I was a storage admin it was pretty much impossible to do your job with Linux. Way too many windows specific dependencies. Even when I carried a MAC I ran Fusion to keep a windows VM for stuff.

Now that I'm at VMware 99% of our stuff is web based internally and we have a SSO portal (Workspace one) that I can sign into once a day and get into anything (even my 401K and external stuff).

Still, I do feel the need for a Full version of outlook (The web version has some issues and workflows are weird for some stuff), OneDrive and other tools to work with my team.

My podcasting and video production stuff (Camtasia, Audio Hijack) lacks anything of reasonable quality on Linux. Also, I collaborate with team members and we use proprietary project file formats for the editing and exporting to MP4 would lose the layering stuff.

I have to use Lync/S4B plugins to get on conference calls with some companies (The web version of this suck horribly).

I used to do a TON of EUC stuff (VDI Architect) and the reality is that on any OS or end user computer project all it takes is a SINGLE application not working for a project to fail.

And those are scenarios where you need something else. We have scenarios where it's easier for users to use ANSYS on a RHEL workstation because they can input directly into ANSYS GUI with commands rather than click through the GUI tree on the left to get a material and modify it like in the Windows version. They also do pretty heavy scripting of ANSYS and internal codes to manipulate answers that you can't do with Windows.

I think the storage stuff is starting to die off. We pretty much manage our Isilon exclusively from Linux (web/shell) and I know corporate could manage their NetApp (blah) with anything that has a web browser.

So again, not disagreeing with you, use what you need to.

I don't have permission to change things on their Nessus system. So I think it's more important that they don't have permissions on mine. If we had to do something, I would craft a sudoers file for them vs just give them root/sudo for everything.