Topics created by WLS-ITGuy

As above what they are are saying is that using Hybrid AD is fine with a domain name that is not the same as long as you add the UPN in Active Directory Domain Trusts and then you adjust all the users in the domain to match that domain either manually or scripted.
https://docs.microsoft.com/en-us/office365/enterprise/prepare-a-non-routable-domain-for-directory-synchronization

My only concern with this is that you might not need to sync AD but if you are already setup then it is kinda hard to revert.

@Dashrender said in Where you going/What are you bringing?:

@WrCombs said in Where you going/What are you bringing?:

@Dashrender said in Where you going/What are you bringing?:

@WrCombs said in Where you going/What are you bringing?:

@Dashrender said in Where you going/What are you bringing?:

To the GYM!

then home to make the bird

My Gym was closed.. Frustrated me .

Are they closed today?

nope, going after work

Sucks you were open...

we worked half a day ( plus we work with restarurants who usually are doing black Friday deals ..)

@bnrstnr said in Who do you use for your domain registrar?:

@scottalanmiller said in Who do you use for your domain registrar?:

@Dashrender said in Who do you use for your domain registrar?:

@scottalanmiller said in Who do you use for your domain registrar?:

@Dashrender said in Who do you use for your domain registrar?:

Why buy at one, then move the registrar to another?

OH! Because CF doesn't let you buy, but that's where we want the account to be.

What account? CF will be the registrar, but only from transfers?
that sucks.

Yes, it's weird. You can only transfer to them, not buy directly.

You can renew there though?

yes, once you transfer you are all set. Just the initial purchase doesn't work.

@WLS-ITGuy said in O365 & Spam filter:

I thought I read it somewhere. Thanks.

What about backups? I thought I read somewhere that O365 doesn't do backups. So if an end user deletes an email or accidentally deletes/moves a folder there is no way to retrieve that.

Although the backups are for Microsoft themselves see this
https://docs.microsoft.com/en-us/office365/servicedescriptions/exchange-online-service-description/high-availability-and-business-continuity

https://docs.microsoft.com/en-us/exchange/back-up-email

Same as what @JaredBusch said on a user level or even an admin.

@JaredBusch said in FreePBX 15 released:

Sangoma Vega 100 (I think) PRI gateway. PRI from phone company on one side and sip trunk on the other, hook it up to whatever PBX you want to.

https://www.voipsupply.com/sangoma-vega-100g

Well, it looks that it is actually FreePBX as part of the problem again with some stupid cron jobs.

And there is an issues with Moodle but I think that is more of an authentication issue and not actually a spam issue.

@WLS-ITGuy

Look good to me .

If you need to send emails from the box itself you need to open additional, but usually you rely on third party services for that like SMTP2GO or SendGrid and for that you dont need to open any additional ports.

I used to firewall port SSH but then i was like I would like to work on machines from anywhere, so I just enable strong SSH auth based security.

However both approaches will work, the thing is imagine if you want to connect on that machine on emergency, you have to go to the 74 IP or vpn to it.

@WLS-ITGuy said in Reverse Proxy install question:

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@scottalanmiller said in Reverse Proxy install question:

@WLS-ITGuy said in Reverse Proxy install question:

@wrx7m said in Reverse Proxy install question:

@WLS-ITGuy What version of vsphere are you running?

6.7u2

They say it is supported...

https://blogs.vmware.com/guestosguide/2019/05/red-hat-enterprise-linux-8.html

REHL 8 is - But using the drop down and selecting Fedora it says it isn't.

Either way, I'll just use REHL 8 and be done.

The drop down list told you RHEL isn't, either. Yet we know it is. ESXi is just broken.

That one doesn't actually tell me it isn't supported:

alt text

But the other RHEL one does. So clearly it's broken if it gives conflicting information. In one case, RHEL isn't supported, then RHEL 8 is. But RHEL 8 is still RHEL.

I understand. I guess they don't update the dropdown in the software 😄

Then best to not use it and not to consider anything from it. Just skip it and protect yourself.

@WLS-ITGuy said in Does 64 bit or 32 bit really matter?:

@scottalanmiller said in Does 64 bit or 32 bit really matter?:

@WLS-ITGuy said in Does 64 bit or 32 bit really matter?:

@scottalanmiller said in Does 64 bit or 32 bit really matter?:

Presumably the OS is 64 bit so shouldnt matter.

OK. Linux servers to start. The 32 bit app requires some 32 bit library stuff that I cannot find for Debian 9/10 so I was thinking I could install on a 32bit and go from there.

Do you need to be on Debian? Linux 32bit is a dead animal pretty much across the board. I'm assuming that this is dead software without support? What's the plan in the future as these libraries get more and more rare?

It actually isn't dead. I'm not sure why they haven't made the switch the 64 bit. They just updated the software back in June.

No, it's dead. "Updates" are easily manipulated. Trust me, there's no plausible way that it relies on 32bit libraries and isn't actually dead. There are very, very standard tricks to make software look maintained after it has died for expressly this purpose.

@brandon220 Nice site, thanks for the recommendation.

@WLS-ITGuy said in GPO question:

@WLS-ITGuy

alt text

Thanks everyone for the assistance! I forgot that I had disabled the damn thing in the beginning of all this even though I told @dbeato that in a PM.

I wonder what was setting it to 30 days then? Perhaps someone in the past set it to 30, then the GPO was disabled, and the setting just stuck until it was changed again and enabled.

@scottalanmiller said in SFTP fails after 7GB:

@WLS-ITGuy said in SFTP fails after 7GB:

@scottalanmiller I figured it out.. I formatted the drives wrong and made separate partitions for /Var, /home, etc

Ah yeah, almost always best to avoid that. So I assume that whatever filesystem you were using was full?

You are correct sir!

By default Debian comes with iptables. It will allowing everything but a normal Debian install have no services running.

Run iptables -L to see the firewall rules.

On Debian 10 the default is nftables.

@DustinB3403 said in Account getting locked out:

@WLS-ITGuy said in Account getting locked out:

@DustinB3403 said in Account getting locked out:

Any services or scheduled tasks that might be setup under this account?

Possibly, however the password hasn't changed in the last 30 days that it would cause this.

Then something was turned on recently that is using a password older than 30 days.

Nope. Turns out I had a couple servers that I was giving RDP remote access to another vendor for them to migrate to a new server and I forgot to turn off RDP.

@WLS-ITGuy said in GPO issue:

@Dashrender said in GPO issue:

I would change this up by applying your GPOs to the OU above these WLS OUs, then set filters to only apply to the users you want.

So in the case of the Library, you've already created a security group, so you'll grant permissions to that group.

Then you'll need to create a WLS-Faculty security group and do the same with it's GPO.

So the GPOs would be at 'domain level' not in the OU level...Like this?

alt text

Then I apply the security groups from there? That makes sense.

yeah - you could do it at the domain level - I personally wouldn't. I'd make a new OU, and put your WLS-faculity and WLS-Library in that new OU.. then apply your GPOs to that new one you created. But that's just me.

@JaredBusch said in Raspberry Pi 4:

I look forward to getting one fo these and seeing if it can now run Netflix/Crunchyroll better. The Pi3 could not do it well.

Please post after your test.

@scottalanmiller said in Raspberry Pi down?:

Did it finally download?

Yes, I think it might have been because I had my dropbox syncing in full speed as well.

@FATeknollogee said in Block Spam callers:

@Skyetel Haha, ROFL. Lenny is a star!! This Jerry Jones isn't very bright!

And I'm sure his name is really Jerry Jones. lol

MS licensing on Sharepoint is as easy as licensing gets. It can't be more straightforward.

https://products.office.com/en-us/sharepoint/sharepoint-licensing-overview

"For On-Premises, intranet sites are licensed using a Server/CAL (Client Access License) model. SharePoint Server 2019 is required for each running instance of the software, and CALs are required for each person or device accessing a SharePoint Server."

It's that simple. CALs are requires for each person or device accessing SP. That's it. Nothing more or less. It's not just easy, but exactly what you'd logically expect the licensing to do if they were being rational.

@scottalanmiller said in FreePBX Asterisk crash:

@WLS-ITGuy said in FreePBX Asterisk crash:

Since Tuesday evening our phones intermittently have been showing 'No Service'. I did some searching and couldn't find anything. Decided I might roll out Asterisk 15 and found this:

You want 16, not 15, if you are updating. 15 is one version old and not LTS. 16 is both current and LTS, so definitely the way to go.

Asterisk 16 removes some long depreciated commands that break third party tools like FOP2.
https://mangolassi.it/topic/19244/issues-with-fop2-and-dnd-on-asterisk-16