ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login
    1. Topics
    2. jrc
    3. Topics
    • Profile
    • Following 0
    • Followers 1
    • Topics 28
    • Posts 243
    • Groups 0

    Topics

    • jrcJ

      Looking for an AD GUI Tool for Account/Computer Management

      Watching Ignoring Scheduled Pinned Locked Moved IT Discussion
      15
      1 Votes
      15 Posts
      5k Views
      K

      Netwrix has a lot of AD tools, some free, some paid. I haven't used them myself, but I've heard good things about them.

    • jrcJ

      Apache 2 and Ldap Auth

      Watching Ignoring Scheduled Pinned Locked Moved IT Discussion
      14
      0 Votes
      14 Posts
      2k Views
      jrcJ

      @thwr said in Apache 2 and Ldap Auth:

      Awesome, glad you found a solution. Please be aware that auth basic is plaintext, just base64-encoded. Better use at least SSL to protect at the transport layer.

      https://en.wikipedia.org/wiki/Basic_access_authentication#Client_side

      Yes, I know. First thing I did when I setup this server was to add a cert, setup the SSL and create a rewrite rule to force all access over SSL (HTTPS). This auth stuff is also only in the default-ssl.config file.

    • jrcJ

      Pre-Baked LAMP server with AD Authentication in Apache

      Watching Ignoring Scheduled Pinned Locked Moved IT Discussion
      11
      1 Votes
      11 Posts
      1k Views
      scottalanmillerS

      @IRJ said in Pre-Baked LAMP server with AD Authentication in Apache:

      @JaredBusch said in Pre-Baked LAMP server with AD Authentication in Apache:

      @IRJ said in Pre-Baked LAMP server with AD Authentication in Apache:

      This might help...

      www.randomtechtips.com/validate-domain-authentication-test-ad-password-using-powershell/

      He wants a LAMP stack based website to authenticate to AD.

      It seems like that powershell script will accomplish the same task even though it is a different route.

      But won't run on the desired platform.

    • jrcJ

      OpenVPN and DNS

      Watching Ignoring Scheduled Pinned Locked Moved IT Discussion dns vpn openvpn
      5
      2 Votes
      5 Posts
      1k Views
      scottalanmillerS

      @jrc said in OpenVPN and DNS:

      Do you know if you can configure OpenVPN to work as a DNS relay (local relayed to remote)?

      What would be the local component, in that case?

    • jrcJ

      Rack Rails for Cisco BE6000M servers

      Watching Ignoring Scheduled Pinned Locked Moved IT Discussion
      19
      1 Votes
      19 Posts
      3k Views
      coliverC

      @jrc said in Rack Rails for Cisco BE6000M servers:

      Ok, let's see if this works....

      The images are here

      I'm tempted to say a generic fixed rail set would work. It looks awfully similar to a SuperMicro server. No warranties or anything on this statement of course.

    • jrcJ

      Xenserver Space Woes

      Watching Ignoring Scheduled Pinned Locked Moved IT Discussion
      65
      2 Votes
      65 Posts
      16k Views
      scottalanmillerS

      Awesome, glad that that fixed things.

    • jrcJ

      Bind Config issue or Help me from going crazy over here

      Watching Ignoring Scheduled Pinned Locked Moved IT Discussion
      3
      1 Votes
      3 Posts
      797 Views
      dafyreD

      @jrc said in Bind Config issue or Help me from going crazy over here:

      Hi everyone,

      I am trying to add a new zone to my DNS server (Debian 6 running Bind). But it's just not working.

      Basically in order for me to force safe search on my network I need to create a zone for www.google.com, then create a cname for www.google.com and point it to forcesafesearch.google.com. Simple enough, except it's not working and I have no idea why.

      Here are my config files:

      named.conf:

      =================================================

      include "/etc/bind/named.conf.options";
      include "/etc/bind/named.conf.local";
      include "/etc/bind/named.conf.default-zones";

      =================================================

      named.conf.local

      =================================================

      zone "www.google.com" {
      type master;
      file "/etc/bind/www.google.com.hosts";
      };

      =================================================

      www.google.com.hosts

      =================================================

      $ttl 12h

      www.google.com. IN SOA ns.www.google.com. ns.www.google.com. (
      2016052601
      1d
      15m
      2w
      1h )

      www.google.com. IN NS ns.www.google.com

      ns.www.google.com. IN A 10.1.1.2

      @ IN CNAME forcesafesearch.google.com.

      =================================================

      Yet here are the results of an NSLookup

      BASH
      Picard:~ <user>$ nslookup www.google.com 10.1.1.2

      Server: 10.1.1.2
      Address: 10.1.1.2#53

      ** server can't find www.google.com: NXDOMAIN

      =================================================

      Tearing my hair out over this. So any help would be greatly appreciated.

      The line:

      ns.www.google.com. IN A 10.1.1.2

      should that be ns.www.google.com or just www.google.com?

    • jrcJ

      Backup solutions for Xenserver

      Watching Ignoring Scheduled Pinned Locked Moved IT Discussion
      60
      4 Votes
      60 Posts
      16k Views
      jrcJ

      @momurda said in Backup solutions for Xenserver:

      @jrc
      I use the Unitrends virtual appliance, and I am still loving my Unitrends setup. I'm not sure what you mean that XS is an afterthought for Unitrends. They are 1 out of about 3 vendors that support XS. Every problem(2) I have had with it in the last 8 months has been my fault. I am only backing up about 10TB and 40 or so vms though, perhaps your environment is a lot larger.
      0_1479151442310_upload-b207f1a4-d4a0-44bd-9d25-15ad10fdac05 This is with 1 gbit interface between xs and ueb
      It does do dedupe very well. I usually get about 40-60MB/s backup speed on full backups. Agent backups seem to be a bit slower.
      With XS and unitrends you have to have your network interfaces setup correctly in XS and the Unitrends appliance, or all sorts of stuff doesn't work well, or at all. You also need to make sure you aren't trying to backup too many vms at once on the same SR, which can lead to tapdisk unpause errors, tapdisk timeouts and other bad things. This seems to be a limitation of XS 6.5, not sure if 7 is better.
      My UEB has an interface on Network 0(mgmt. iface) of the XS host. And one other that is on another subnet so I can easily connect to the web server.

      My environment is much smaller than yours, I have 12 or so VMs with about 6Tb of data. I do stagger the backups so that I do not go over the max connected VHDs to the appliance.

      When you say that the network interface has to setup right, what do you mean? My appliance just uses the network gang I have (4x1Gb NICs) that is also used by all the other machines and as the management interface.

      The main problem I've had was that it would error out during a backup, but that error would cause my SR to then fill up with snapshots, which then caused more errors in Unitrends since it would never detach the VHD or do any cleanup. When they looked through the logs they would then blame it on the Xenserver error and more or less stop supporting it at that point. The main error was SR_Backend_Failure_46, which I was able to trace back to the fact that the backups were failing.

      Here's my setup:
      2 Xenservers with an HP SAN for storage (connected via 8Gb/s fiber, in multipath mode). My backup target is a Dell server running Ubuntu with a single NFS share created. The appliance is using NFS as the protocol for backup.

      The latest issue is that the appliance just sort of stops backing things up, as well as sending out emails about any failures or anything. And when I go to look at it I can see there are 4 or 5 machines queued and one or two just sitting there at some percentage and just not moving forward at all. I have not really bothered to call them on this, since I suspect they're going to just go have me re-install and re-impliment it again (for the 6 or 7th time in a year), I have just not had the time with our new school opening up.

      At this point, even if they were to fix it, I am not sure that I would trust it. I mean PHD Virtual worked perfectly and reliably, but Unitrends 9 has only worked for me a total of about a month out of the last 12, and I don't have the time to spend hours and hours on the phone asking them to fix something that is clearly broken on their end.

      To their credit, they have really gone out of their way to try and help me on this. So their support is top notch, I just wish their product was better.

    • 1 / 1