Thanks for this ! Sorry for major necro-posting, but the recommendations in that article are pretty horrible (even as of the date of that article) - effectively: "With Windows, NTLM is easiest so just use that." That should be a non-starter.

I found the following that nicely covers using Kerberos with AD & DNS for managed hosts, which should be far preferable of course:
https://argonsys.com/microsoft-cloud/articles/configuring-ansible-manage-windows-servers-step-step/

This version 4 feels snappy, like you are running on a "real" computer.
But storage speed is more like an old harddrive compared to a modern server with SSD drives. To bad they didn't put a SATA or something on it.

Serving up some pages on apache or nginx is no problem. Ansible installs fine. Packages in Raspbian seems to be just about the entire Debian repository for whatever odd thing you want.

It's for sure the best Raspberry Pi so far. Can be used for a lot more things than the old version 3.

@JaredBusch said in VPS injected ssh keys:

Under no circumstances do I actually want anyone's key tied to the root user. It negates all accountability.

It's for pre-production setup. Not for deploying straight to production.

Yeah I'm wrong. sudo being involved means it can't be privilege escalation because you're getting the proper amount of access.

@wrx7m said in Server 2016 - Force Default Update Server to WSUS Server Via GPO:

@dbeato said in Server 2016 - Force Default Update Server to WSUS Server Via GPO:

This would have happened on Server 2012 R2 as well, dual scan has been around and causes a lot of problems as you noted.

It is strange that I didn't have these issues in 2012 R2. I essentially copied the same GPO for 2012 R2 and made some minor changes to it to convert it for 2016. My 2012 R2 show the correct default service.

Weird, I have various Server 2016and now 2019 with WSUS and while dual scan was an issue for me on Server 2012/ 2012 R2 not anymore.

@JaredBusch said in Extensions not registering:

Fully updated FreePBX and zero issues. I use pretty much only use pjsip.
b6a3844c-2573-4763-bd7f-efce2b7603ae-image.png

This is VitalPBX, its super weird still. I didn't really touch anything on the extensions.

This is a good starter video:

Youtube Video

@wirestyle22 said in Palo Alto vm Image:

Imagine when all of these bots are capable of advanced subterfuge. What is the average user going to do?

Well - as long as you have things like hashes to compare against, you at least have some form of protection - faking good hashes is beyond hard.

Pinging @devstar

@jt1001001 said in User's PC is unstable:

@Dashrender was scroll lock somehow activated/pressed?

Always possible.. but she definitely didn't accidentally click it while I was watching it not work... then suddenly just start working again

@JaredBusch said in Using dnf-automatic to keep Fedora up to date:

@FATeknollogee said in Using dnf-automatic to keep Fedora up to date:

There really need to be a setting for this in the Workstation GUI.

By default Fedora Workstation + Cinnamon uses dnfdragora which is a totally separate process.

Yes, I realize that.
This setting exists in Cockpit, no reason why it can't be in WS!

To add to this- I have an error that started appearing after updating their Fedora 29 and 30 instances. Further testing found that the error appears in different regions using their server type template installers or even a custom iso option that I used with net install. All I have to do is deploy, run dnf update and reboot. The error is present in every boot after the update.
https://mangolassi.it/topic/19903/fedora-29-and-30-edac-skx-can-t-get-tolm-tohm-error-on-vultr

Anyway, I will go with bridging for now.

I don't think bridging will cause any problems in this case. Traffic is intermittent and low speed so even if there are more broadcast traffic sent over the VPN links, compared to a routing solution, I don't think it will have any impact.

But I'll probably set up some kind of test to make sure before deploying.

@dbeato yes i guess... almost all emails backup are corrupted
few email ids had configured locally ..they are safe...

@Jimmy9008 said in Wireless headset for Skype for Business...:

When away from the desk, the headset will ring if somebody calls in, but you are not able to answer the call from the headset. So, you have to run back to the desk and answer the call in Skype for Business soft phone, which then connects the call and works over the wireless headset.

This isn't a Skype for Business issue - this is just a lack of pickup button on the headset issue, or is there a button that works with other software, just not S4B?

As mentioned - real professional gear like Sennheiser and Plantronics work well in this space.

@dafyre said in Barcode scanner:

@gjacobse said in Barcode scanner:

@PhlipElder said in Barcode scanner:

WASP Bluetooth unit.

https://www.waspbarcode.com/barcode-scanners/wws550i-freedom-barcode-scanner

Works like a charm. We've had it for close to ten years now.

It's set up to space after each scan and CAPS so that all serials are identical across the board.

I suggest setting up a single sheet print-out of 0-1 and A-Z (if needed) along with the bar codes for setup. Then, when it comes time to pair you're not frustrated by the default ENTER (we remove this) during pairing. We enable SPACE post pairing.

For complex builds nothing beats it.

Wasp units are nice.. but since I'm paying for this out of MY pocket,.. that is about 3x more then I want to spend.

Just curious as to why you're paying for this out of your pocket?

Any time I can improve my personal tool box I’m happy to. As long as it isn’t some mega expensive item.

A small scanner that is multi function, inexpensive and such - all the better

@IRJ said in Laptop for stock trading:

I would guess there are better alternatives out there that can be run on Linux servers

All enterprise Forex software runs on Linux (and generally UNIX, and nothing else.) On the Forex floors they sometimes use Windows desktops, but all the analytics comes from UNIX systems (including Linux.) Windows is only used as a GUI for the trades to be places, and generally isn't used even for that.

@Bend3r said in Odd Zimbra zmconfigd behavior:

@dbeato said in Odd Zimbra zmconfigd behavior:

What is it causing on your Zimbra? mine are unaffected.

For me, everything is working smooth, the only thing I worry about is restart notice messages that are written to zimbra.log every minute.

Jul 2 00:47:20 mail zmconfigd[24959]: Fetching All configs Jul 2 00:47:20 mail zmconfigd[24959]: All configs fetched in 0.07 seconds Jul 2 00:47:26 mail zmconfigd[24959]: Watchdog: service antivirus status is OK. Jul 2 00:47:26 mail zmconfigd[24959]: All rewrite threads completed in 0.00 sec Jul 2 00:47:26 mail zmconfigd[24959]: All restarts completed in 0.00 sec Jul 2 00:48:26 mail zmconfigd[24959]: Fetching All configs Jul 2 00:48:26 mail zmconfigd[24959]: All configs fetched in 0.10 seconds Jul 2 00:48:33 mail zmconfigd[24959]: Watchdog: service antivirus status is OK. Jul 2 00:48:33 mail zmconfigd[24959]: All rewrite threads completed in 0.00 sec Jul 2 00:48:33 mail zmconfigd[24959]: All restarts completed in 0.00 sec

Perhaps, such a behavior is OK (zmconfigd fetches configs,checks them for not being changed and assumes no restarts needed for services)?

I think so. Nothing in there suggests a restart happened.

@black3dynamite He shouldn't need to. I'm running it on 16.04 and what he is trying to do works for me.