@black3dynamite said in Copy SSH public key to ssem behind a jump box:

# From your host to your JUMPBOX # Not needed if your public key is already in placed cat ~/.ssh/id_ed25519.pub | ssh jump.domain.com 'umask 0077; mkdir -p .ssh; cat >> .ssh/authorized_keys'

ssh-copy-id should do this

@flaxking said in Change Local Admin Pwd?:

@siringo said in Change Local Admin Pwd?:

Hey thanks for all the help everyone, it is greatly appreciated.

I've decided to go with LAPS as this is part of an overall 'let's tighten up security' project I've got going and my thoughts were, you can't go wrong if you go with the Vendor's recommendation.

I'm distributing the LAPS client software via Startup GPO which is working well ATM. Half way through the setup, but have stopped coz the weekend started.

I'll take a look at Salt as I need to broaden my horizons.

Thanks again folks.

Fyi, to deploy to clients you just need to copy the dll and register it with regsvr32. But good thing you're not trying to deploy it with GP's software installation features.

I get around these problems by using Startup & Shutdown scripts. I create a simple bat file that copies the required files to the local %systemroot%, then I install whatever it is that needs installing. This seems to work well for me.

Can you post the result of these two reg queries:

REG QUERY HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ /v ConsentPromptBehaviorAdmin REG QUERY HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\ /v ConsentPromptBehaviorUser

NVMe drive for storage instead of SSD. It will be about 6 times faster from around 500MB/sec to 3GB/sec.

AMD black could be any number of CPUs. They're all slow compared to newer AMD CPUs though.

6 HD screens...maybe he would consider upgrading to larger 4K monitors instead. Each 4K monitor has the same resolution as 4 HD monitors. So 2x40 inch monitors has more screen estate than 6 HD monitors. And two or even three 4K monitors could be run from the same graphics card.

So that is would I would look into. Newest AMD CPU, 1 really good graphics card, NVMe for storage and new larger monitors.

Within PowerShell can't use something like Push-Location \\Server\Share\path or Set-Location \\Server\Share\path and then run the cipher command?

@Dashrender said in Disconnected: Why Companies Encourage Bad IT Decisions:

@scottalanmiller said in Disconnected: Why Companies Encourage Bad IT Decisions:

@Dashrender said in Disconnected: Why Companies Encourage Bad IT Decisions:

@scottalanmiller said in Disconnected: Why Companies Encourage Bad IT Decisions:

@Dashrender said in Disconnected: Why Companies Encourage Bad IT Decisions:

The one place the presentation doesn't really hit on is reliability of the circuit. Of course to wit Scott will say - US carriers of old school telecom are horrible, and most ISPs are equally as reliable, if not more so than carriers. And unlike carriers, you can likely more easily setup redundancies with the ISP, when was the last time typical businesses setup redundancy on their phone service?

Not really a place where the CEO should care. In a healthy organization, Jared's presentation would be from the telecom person or team to the CIO. The CIO would just inform the CEO of what they are doing, if he even needed to know. A CEO should not be stuck in the weeds of demanding to understand why modern infrastructure is more reliable than legacy infrastructure.

Right, but in that case the case is made to the CIO, not the CEO, because what you stated.
So the CIO would need to know these things, I would think.

Correct, the information is good, but is for "inside IT", not for "the business".

So question - where do you see that CIO person fitting? You've already said they were IT, but are they more an executive - or more IT? or do you not see a difference in this case?

To me, there is no difference. Anyone making IT decisions has to be a business person to do that job. The CIO has to be completely in sync with everything in the business and be thinking completely within the holistic business context. But they must also be a generalist with a deep understanding of nearly every aspect of IT.

This is why a CIO role is rare and expensive... you need someone who would be reasonably expensive in their business role OR their IT role, then the overhead of putting those two roles together in a single human.

And this is why so many CIOs are terrible, they often only have tech skills or business and are unable to bridge the gap which is their role.

The Atlanta2 server has been overtaken by snakeheads...

@DustinB3403 Hello, yes you right, i haven't setup a certificate for wazo-plaform.org. My mistake, it was on my todo list, but i didn't have time to setup it. But now, it's done.

@scottalanmiller That's one hell of a run on sentence! Do you actually speak without pausing or breathing? 🙂

Recorded this in like May and it just posted today, but boy is it right for this discussion.

https://mangolassi.it/topic/20554/disconnected-why-companies-encourage-bad-it-decisions

@Dashrender said in Planning for New ESXi Hosts - Which CPU Metrics Should I Use?:

@Pete-S said in Planning for New ESXi Hosts - Which CPU Metrics Should I Use?:

@wrx7m said in Planning for New ESXi Hosts - Which CPU Metrics Should I Use?:

@Pete-S said in Planning for New ESXi Hosts - Which CPU Metrics Should I Use?:

@wrx7m said in Planning for New ESXi Hosts - Which CPU Metrics Should I Use?:

@Pete-S They list both the 61xx and 62xx as options for the R740XD.

Good!

What CPUs do you have in the R720 today? 1 or 2 CPUs?

Do you want the new ones to be faster or just capable of running more VMs?

I have 2 x E5-2609 CPUs in each server. I would like faster, but more VMs would be the priority.

The E5-2609 CPUs are at the low end of what was available at the time so no problem there.

Actually, are you looking to keep the old servers around for testing and such?
In that case you could just drop in refurbished CPUs that are faster and/or has more cores for very little money. If the server can take E5-2600 V2 you can get up to 12 core CPUs.

yeah, but Windows licensing is an issue, assuming multiple CPUs... for a test server, not likely worth going over the 16 cores. Not to mention the test server might require licensing (if needed beyond the 90 day test period for something).

Two 8-cores would be an option. For instance two E5-2690. They are 2.9 GHz base frequency and have 8 cores. About $100 each when buying refurbished.

About 50% faster per core (2609 have no turbo) and about 3 times faster multicore performance. Has more cache and faster memory transfer speed. Was a very high end CPU at the time. Was listed at $2000 while the E5-2609 was $300.

The fastest 8-core E5-2600 V2 CPU is the E5-2667 V2. 8 cores and base frequency of 3.3 GHz. It will likely also be an option for the R720XD. V2 uses 22nm technology so uses less power with the same clock speed and can fit more cores or run higher frequencies.

@Emad-R said in KVM on Fedora 30, Error creating virtual network:

@black3dynamite said in KVM on Fedora 30, Error creating virtual network:

@Emad-R said in KVM on Fedora 30, Error creating virtual network:

@stacksofplates said in KVM on Fedora 30, Error creating virtual network:

Can you create it with virsh? Wondering if it's just a virt-manager issue since they are deprecating it.

Over my dead body. I love virt-manager they kick that out and I will be kicking them out. not everyone wants web gui using resources and being inefficient with VNC protocol and opening another port.

The web gui hardly use enough resources for you to even notice.

I do agree, cause I have split personality but that said I still want virt-manager to be around. It is very mature and snappy.

Deprecated is probably the same as how ifconfig is deprecated it will be around forever.

@Emad-R said in SAP will be major grow for Linux:

@scottalanmiller

Hi,

Is suse Linux free to download and use without commerical support ?

Yes, both Leap (LTS) and Tumbleweed (rolling updates) versions. Suse has had a free option since the 1990s. I brought Suse to IBM in 2000 as our main platform in manufacturing.

@scottalanmiller said in URL Redirect at the Windows Workstation?:

@JasGot said in URL Redirect at the Windows Workstation?:

Gotta Love RoIT!

RoIT Rules!

Not until you actually do the actual re-branding

u8gsg.jpg

I've exported his PDF's and converted them to ODT files for editing, they are currently available from Github here I've sent @Ylian an email requesting he pull these files over so the community can assist with updating this documentation.

If interested in the former Solaris ecosystem, check out https://omniosce.org/

@quintana said in First look at the Wazo Platform:

@scottalanmiller With the API?

API would be interesting. I think for most users, without an API would be the more useful guide. Both, is ideal 😉

Since the images disappeared, I added them as code.

Also, Identity Management (FreeIPA) makes it really easy to store public keys in LDAP so any system joined to IdM can verify the key.