@scottalanmiller said:

@RamblingBiped said:

I've read/heard https://letsencrypt.org/ is the place to go nowadays. I've not personally used them and would be keen to know what opinions others have.

This is definitely who you want to be using.

I disagree with this. I would say it will be who you want to be using. The project just came out into beta and is working good, but it is still in fairly early beta stages IMO. I have been following it and keeping up with it. My personal domains are all using it.

I highly recommend, and use myself, StartSSL right now for free 1 year certs.

This entire thread and the linked source material are just stupid.

The medium is not the issue. The issue is the stupid people.

Move along. Nothing to see here.

@aaronstuder said in Faxing:

We have a FreePBX server here. What's the best way to handle faxing?

To burn it with fire.

Or, you know, it is reality.

Generally, people are born, live awhile, and then die.

Just because so much of the masses know these names does not change the number of people that die.

Windows reset completed, enabled .Net 35 first, worked perfectly.

Up yours Microsoft.

@MattSpeller said in What Are You Doing Right Now:

@JaredBusch Is that a bad drive in the HP there? Top HP, top left drive bay

Yup. Not my server, but I know who failed to tell anyone about it.

So now to decide how to handle it. Because I want to take the work form that company, but not look like a jerk while still throwing them under the bus.

Install CentOS 7

yum -y update
yum -y install epel-release

Install things you will need (my ISO is based on 1511 which did not have firewalld install by default).

yum -y install wget nano mariadb mariadb-server firewalld setroubleshoot setools

Turn SELinux off for the install. This is specifically not permanent.

setenforce 0

Change SELinux to allow Zabbix to connect to the network

setsebool -P httpd_can_connect_zabbix on
setsebool -P zabbix_can_network on

Start and enable the firewall. Allow HTTP/S and Zabbix ports.

systemctl enable firewalld
systemctl start firewalld
firewall-cmd --zone=public --add-port=http/tcp --permanent
firewall-cmd --zone=public --add-port=https/tcp --permanent
firewall-cmd --zone=public --add-port=10050/tcp --permanent
firewall-cmd --zone=public --add-port=10051/tcp --permanent
firewall-cmd --reload

Start the database and then run the initial configuration

systemctl enable mariadb
systemctl start mariadb
mysql_secure_installation

This will start a wizard to enable typical security measure for the database. The capitalized letter is the default, and is the choice you want to make, so you can simply hit enter through all of these except for setting the new password, obviously.

Enter current password for root (enter for none):
Set root password? [Y/n]
New password: databaserootpassword
Re-enter new password: databaserootpassword
Remove anonymous users? [Y/n]
Disallow root login remotely? [Y/n]
Remove test database and access to it? [Y/n]
Reload privilege tables now? [Y/n]

Sign in to the database and create the ownCloud instance and user.
You will be prompted to enter your database root password.

mysql -uroot -p

Now you will run 4 SQL commands, please note the ; at the end of each. It is a required part of the SQL syntax . These are simplified defaults, I would generally recommend you set them to something a little less obvious just to help with security.

create database zabbixdb;
create user 'zabbixuser'@'localhost' identified by 'zabbixuserpassword'; 
grant all on zabbixdb.* to 'zabbixuser'@'localhost';
flush privileges;
quit

Install the Zabbix repository

# Zabbix 3.0
#rpm -ivh http://repo.zabbix.com/zabbix/3.0/rhel/7/x86_64/zabbix-release-3.0-1.el7.noarch.rpm
# Zabbix 3.2
rpm -ivh http://repo.zabbix.com/zabbix/3.2/rhel/7/x86_64/zabbix-release-3.2-1.el7.noarch.rpm

Install Zabbix Server

yum install zabbix-server-mysql zabbix-web-mysql

From here you can now pick up with the main Zabbix instructions from this point.

I'll retype those later or something.

After your system is up and running, reboot. You should hopefully have a problem with SELinux blocking a couple of things.

[root@zabbix ~]# sealert -a /var/log/audit/audit.log | grep zabbix
SELinux is preventing /usr/sbin/zabbix_server_mysql from using the setrlimit access on a process.
<snip lots of text>
SELinux is preventing /usr/sbin/zabbix_agentd from using the setrlimit access on a process.

Now that these errors are in the audit log, we can set up SELinux to allow it.

If anyone knows SELinux well enough to create the policies needed without waiting for a fail, just let me know. I will be happy to update these instructions.

ausearch -c 'zabbix_server' --raw | audit2allow -M my-zabbixserver
semodule -i my-zabbixserver.pp
ausearch -c 'zabbix_agentd' --raw | audit2allow -M my-zabbixagentd
semodule -i my-zabbixagentd.pp

@scottalanmiller said in What Are You Doing Right Now:

@Grey said in What Are You Doing Right Now:

@scottalanmiller said in What Are You Doing Right Now:

Alexa: Order me an Uber to the nearest bar.

My nearest bar has a shooting every two weeks.

So safe by American standards.

Boring by Chicago Standards.

@BBigford said in Consult or work for a company?:

Do you prefer to work for a company and receive a pay stub, or consult?

I know there are some ex-consultants out there...

Even if you consult you should form a company and receive a paycheck.

Not doing so leaves you extremely open to lawsuits.

What is nightcrawler doing in my computer?

Hard Reset is a forced power off reboot. Remove battery or button combo depending on the phone model.

factory reset is a factory reset.

Like every year, my kids are in Japan. I think I have only had Father's Day once in recent years where I was with them.

I did a FaceTime chat with them last night (Father's Day for them). They sent me letters and candy that I opened while on the call with them.

As with my guide for installing ownCloud on CentOS 7, here is a guide for installing NextCloud 10 on CentOS 7.

This is not a migration guide. I will be writing one though when I migrate my production systems.

#Update centos
yum -y update

#install firewall (assuming r1511 minimal) and helper packages
yum install -y wget nano firewalld

#install EPEL
yum install -y epel-release

#start the firewall and enable it on reboot
systemctl start firewalld
systemctl enable firewalld

#Install all required and optional packages
yum -y install httpd mariadb mariadb-server php php-gd php-pdo php-pear php-mbstring php-xml php-pear-Net-Curl php-mcrypt php-intl php-ldap php-smbclient php-imap php-mysql php-pear-MDB2 php-pear-MDB2-Driver-mysqli bzip2

#Create directory
mkdir -p /var/www/html/nextcloud

#Get NextCloud
wget https://download.nextcloud.com/server/releases/nextcloud-10.0.1.tar.bz2

#Extract NextCloud
tar xvf nextcloud-10.0.1.tar.bz2 -C /var/www/html

#Create directories not created by extract
mkdir -p /var/www/html/nextcloud/data
mkdir -p /var/www/html/nextcloud/etc
mkdir -p /var/www/html/nextcloud/assets

#get the nextcloud apache config file
wget -O /etc/httpd/conf.d/nextcloud.conf https://raw.githubusercontent.com/nextcloud/server-packages/master/centos/nextcloud.conf

#default everything to root:apache
chown -R root:apache /var/www/html/nextcloud/.

#set default directory and file permissions
find /var/www/html/nextcloud -type d -exec chmod 0750 {} \;
find /var/www/html/nextcloud -type f -exec chmod 0640 {} \;

#change ownership of folders and files
chmod 0755 /var/www/html/nextcloud
chmod 0755 /var/www/html/nextcloud/occ
chown apache:apache /var/www/html/nextcloud/occ
chmod 0644 /var/www/html/nextcloud/.htaccess
chown apache:apache /var/www/html/nextcloud/.htaccess
find /var/www/html/nextcloud/apps -exec chmod 0750 {} \;
chown -R apache:apache /var/www/html/nextcloud/apps
find /var/www/html/nextcloud/assets -exec chmod 0750 {} \;
chown -R apache:apache /var/www/html/nextcloud/assets
find /var/www/html/nextcloud/updater -exec chmod 0750 {} \;
chown -R apache:apache /var/www/html/nextcloud/updater
find /var/www/html/nextcloud/data -exec chmod 0755 {} \;
chown -R apache:apache /var/www/html/nextcloud/data
find /var/www/html/nextcloud/config -exec chmod 0755 {} \;
chown -R apache:apache /var/www/html/nextcloud/config

#open the firewall for http/https
firewall-cmd --zone=public --add-port=http/tcp --permanent
firewall-cmd --zone=public --add-port=https/tcp --permanent
firewall-cmd --reload

#start the mariadb and set to start on boot
systemctl start mariadb
systemctl enable mariadb

#setup mariadb
mysql_secure_installation

#Create db and db user
mysql -uroot -p
create database nextcloud;
create user 'ncuser'@'localhost' identified by 'ncuserpassword';
grant all on nextcloud.* to 'ncuser'@'localhost';
flush privileges;
exit

#Disable SELinux for now
setenforce 0

#Restart Apache and enable for reboot.
systemctl restart httpd
systemctl enable httpd

Now point your browser to the IP or DNS name of your NextCloud instance and fill things out appropriately. I'll do screenshots later.

@dashrender said in AirDropping is the latest horrifying subway trend:

@ndc said in AirDropping is the latest horrifying subway trend:

Given the way this process works I'm thinking all the people jumping on the "Why ever would you hit the accept button, these people are so stupid." bandwagon are likely on the wrong track. Since you see the picture regardless of choice due to the preview I can only imagine that victims are hitting accept to preserve some evidence of what is happening.

They probably should be more careful about their settings but it doesn't make the perpetrators any less garbage.

LOL - well your persistence paid off. It was a note, and notes don't have previews... So yeah.. stupid user, but yes - sender is still piece of shit.

The sender being a piece of shit or not is not relevant.

The stupid fucking user is at fault for accepting something from a stranger.

FFS. Even my 7yo knows "Dont' talk to strangers"

And I found my own post about this still unresolved.

http://community.ubnt.com/t5/EdgeMAX/ER-PoE-constant-high-CPU-since-1-8-0/m-p/1526098

Sadly I forgot about the issue because other things kicked up priority.

/me needs a minion to keep a task list updated.

@nerdydad said in What Are You Doing Right Now:

Wife's hard drive stopped booting to Windows 10 a couple of weeks ago. I attempted to use testdisk/photorec and, while they were doing the job, the physical setup kept failing. So, I connected her hard drive to my Fedora 26 laptop and it read the contents of the drive without help. I'm recovering the contents off of the drive and am trying to persuade her to go to Fedora 26 w/ Cinnamon with me.

The MBR on her Windows drive corrupted and we don't have any recovery discs because of the number of moves we've made between 4 years ago and now, they could have been lost anywhere. It might be a good time to say goodbye to Windows for us.

All she does is pay bills on the web with it and store photos on it when her phone gets full. She should be able to adjust to Fedora w/ Cinnamon just fine.

You don't need recovery disks for Windows. Just make a Windows 10 USB from the ISO on the MS site and boot to it.

Or as you prefer, switch her to Fedora.

I have a 2GB text file with about 2.3 million records It is updated weekly.
The data is in a 200 character wide fixed width format.

In order to do what needs done, it is being brought into SQL with a BULK INSERT.
That step takes just under a minute on my machine. Not aware of any better method for this step.

The next thing it does is execute a stored proc that inserts each line into a new table with everything substringed out into pieces. that only taker another 40 seconds or so.

Then do a ton of recursive querying to link things together under certain criteria. Only 2 minutes per day there.

Related: looking at code your wrote 6 years ago is sometimes scary.

@rojoloco said in What Are You Doing Right Now:

@nerdydad said in What Are You Doing Right Now:

@eddiejennings said in What Are You Doing Right Now:

I love it. Almost half way through the month and our VoIP cost (already including the monthly rate for DIDs, Vultr, voip.ms fax) is about $96. Methinks we won't be hitting $755 by the end of the month.

I just wish my church would take note of this. They are wanting to increase their budget in order to pay for their current setup for the next year. I asked if they have looked at newer technologies and they were like "What new technologies?" and "But nobody has volunteered to help with something like this." I have offered to help a number of occasions and I keep getting blocked. Not offering my services anymore.

<long rant about churches, their "budgets", their lack of paying taxes, their lack of willingness to pay installers / expecting skilled labor at "volunteer" prices, and lots of other general "never, ever work for a church" advice redacted>

Where's that middle finger emoji again?

Could I get a few hundred upvotes on this?

Been enjoying the official party with the crew.

@eddiejennings said in What Are You Doing Right Now:

Reading this:
https://help.ubnt.com/hc/en-us/articles/115011058387-EdgeRouter-IPsec-Policy-Based-Site-to-Site-VPN-to-Cisco-ASA

Solution: Remove the Cisco end and replace.