@JaredBusch said in Ubiquiti switches: UniFi vs EdgeMax:

@coliver said in Ubiquiti switches: UniFi vs EdgeMax:

@thwr said in Ubiquiti switches: UniFi vs EdgeMax:

Mh, is the EdgeSwitch able to run a VPN tunnel on its own? I need to connect a "remote" office to my server room. The office is in the 3rd floor, my server room in the basement and I need to run through a "public" patch room (primary cabling junction for the building).

Like:
3rd floor "remote" office -> fiber -> public patch room -> fiber -> my Serverroom (basement) -> Office

I doubt it has the ability to configure a VPN that seems like an edge device is needed for that.

It does not. That would be the router's job.

Yeah, could have been. Probably the same software behind the scenes etc.

@thwr said in DCs out of sync:

@Dashrender said in DCs out of sync:

@thwr said in DCs out of sync:

No substantial changes have been made during the last couple of weeks. Just a few new users and password changes plus maybe 2 or 3 new machine accounts. Some clients and servers now refuse to authenticate users during login due to the well known "trust could not be established between..." error.

Where you still getting those errors after you powered down the broken DC? I'm guessing not since you moved forward with the install of another DC.

Nope. Only "missing that other DC" errors now, which is fine. I've got some crappy internet connection (free WiFi in the train, next to no 3G/4G signal) here and can't check the current state. but it was fine half an our ago.

OK, reading your OP, it seemed that you were getting those errors after turning off the broken DC, but since you're not - seems like you found a good solution.

@thwr said in Fedora Server for production use?:

@stacksofplates said in Fedora Server for production use?:

@thwr said in Fedora Server for production use?:

Interesting: Fedora 25 starts to panic with RAM < 512MB at the beginning of the kernel init phase, even in text mode. Just had a look at the manual which clearly says that Fedora requires 1GB of RAM.

Looks like I'm out of luck and have to stick to Ubuntu / Debian.

Another thing to note is with RHEL/CentOS 7.3 they recommend a 1GB boot partition instead of 512MB.

Just an aside.

Should work as long as you keep an eye on it. Ubuntu for example likes to keep old kernel and initrd images there until you clean them up (e.g. apt autoclean etc)

Ya I usually keep 3 and remove the others but I think the images are getting big enough they needed to adjust the size. If you do anew install it defaults to 1GB.

I found this free online Visio like editor

https://www.draw.io/

I don't know if it will do what you want, but worth looking at.

I've used it for a few things recently.

This could be adapted as pipe warmers!

Yeah I remember that stuff. I was not in the IA16 and IA32 worlds in any significant way until I bought a Pentium 75 and then a P2 350. I was in the M68K world much more.

I think that efforts like what HPE and Dell have been doing to get very high density, very low cost ARM "blades" into the datacenter is where it is going to be. And that there will either be loads of hypervisor management used to push out workloads or something similar that does this for bare metal much like Ubuntu's MaaS (Metal as a Service) to get the ARM blades to act as much like VM hosts as possible.

Windows Defender... works well enough and is included with the operating system.

@travisdh1 said in Few Windows clients randomly can't resolve DFS:

@thwr said in Few Windows clients randomly can't resolve DFS:

Both clients were able to see the DFS root again this morning - without even touching them.

How annoying.

Si senior...

@Dashrender said in Windows URL ACL:

What OS?

Anything > Vista I guess

Currently testing on Win7 and Win10

@jt1001001 said in SharePoint reverse proxy replacement for MS ForeFront UAG:

@JaredBusch no just Godaddy certs so far. You probably found the same blog posts I did:
http://blog.ganser.com/automate-lets-encrypt-certificate-renew-and-deployment-to-kemp-loadbalancer/

I did not find that one, and it is exactly the right thing.

I can update my cron to call a script instead of certbot renew and then have it use the Kemp API to push the cert after a renew.

So now on to setting up multiple certs per virtual service. read a post that I couldn't. if I can't this gets harder too.

Because LE on IIS still is not pretty.

Bridging issue solved, kind of a Late-Friday-Problem: Promiscuous mode was turned on, but on the wrong interface - the DMZ facing one.

It worked instantly the second I switched it off on the DMZ and instead turned it on on the target network interface.

How to turn on MAC spoofing / Promiscuous mode on Hyper-V using PowerShell

Get-VM -Name XXXXX | Get-VMNetworkAdapter | Where-Object { $_.MacAddress -eq "XXXXXXXX" } | Set-VMNetworkAdapter -MacAddressSpoofing On

@jt1001001 said in ForeFront UAG trunks stopped working:

We are loking at replacing our ForeFron UAG for Skype for Business reverse Proxy with Kemp Load balancers; they provide a Sharepoint config guide:
https://support.kemptechnologies.com/hc/en-us/articles/203123539-SharePoint

They offer a free Load Balancer VM if you dont' need too much bandwidth:
http://freeloadbalancer.com/features/

I unfortunately am not part of the project team designing and implementing the Kemp solution so I can't tell you much about its capabilities YET

Thx for mentioning it. Unfortunately, we have some confidential (and up) data on our SharePoint. A third party reverse proxy might (in theory) copy the data using the users session. I'm not saying that Kemp is doing this, but on the other hand ... gov'd firmware on Cisco devices.

@travisdh1 said in SCADA-like process visualization and control:

@thwr said in SCADA-like process visualization and control:

@travisdh1 said in SCADA-like process visualization and control:

@thwr The control code shouldn't be that difficult. Getting some sort of GUI for people to interact with is where it becomes difficult, right? Have you considered just using HTML5? Assign control codes to pictures of the track, trains, and sensors? I don't remember which programming languages you've used before, so I'm just going generic here.

Actually, that's quite a good idea. Maybe node.js?

I'm betting a Pi would happily run that, which is going to be a consideration here.

Indeed. Not because I don't got any spare PCs (...), but I would like to see a ARM Linux in place. Much lower power consumption, no windows licenses...

Anyway. The most problematic part is to get some snap mechanism for the tracks / rails. There are like 20-30 different parts, like junctions, crossings, there are multiple layers, one track might be beyond another and so on. And I'm not exactly a web "developer" 😉

@scottalanmiller said in NSA tools leaked, Cisco patches exploits found inside the leaked tools:

Read: CIsco confirms that the US was NSA's targetted enemy 😞

Surprise, surprise...

@scottalanmiller said in FossHub hacked, installers infected with malware:

@tiagom said in FossHub hacked, installers infected with malware:

Whats FOSSHub? 😆

That's what I'm wondering. Some unknown download site I guess.

Nah, heard that before. I think it came up a few years ago when some other FOSS project hosting site closed its doors. Not sure. Never reached much publicity, I guess.

A slightly different recipe ..

Watermelon

Feta

Arugula (Rocket)

Balsamic Vinegar Reduction (Heat Regular Balsamic in a saucepan until it's syrupy)

Cherry Tomatoes (Optional)

Mint Leave (Optional)

Dice the watermelons into cubes, and lay atop a bed of aragula... add cut tomatoes into halves, and chop the mint real fine, and sprinkle .... drizzle the balsamic reduction on ... add a smidge of pepper...

I'm afraid there will be no picture today. They grabbed the sticks right from the grill.