I got a 2-year SSL cert from NameCheap for $15 (it's Comodo). Installed and working great. No need for a $200/year cert lol.

@kelly last year it was Sunday or Monday evening. I forget which. I played that one.

I wasn't available this year.

@travisdh1 I thought that was the issue as well and temporarily disabled selinux and it did not fix my issue.

@momurda Great! Thanks for posting!

@scottalanmiller said in GDPR Requiring Centralized Password Management:

@pete-s said in GDPR Requiring Centralized Password Management:

This is the GDPR. You can check yourself what it says. It's only 88 pages.
https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN

Every countries in the European Union are required to make it national law.

Yeah, I've read most of it. But anything 88 pages is long enough to make creating FUD pretty easy to do.

Yeah, FUD is how the big boys make their money. If it's not fear, uncertainty and doubt then it's complexity. Make something that could have been simple, as complex and convoluted as possible so that you absolutely need lots of consultants and experts helping you. Which of course the supplier can offer. And finish of the cocktail of deception with a big chunk of vendor lock-in on top.

@jaredbusch Ok thanks doing that now.
They do this quickly, i got the ticket open and closed in less than 30 minutes.
But what about the config?

@jaredbusch said in what language used in Mangolassi:

@scottalanmiller said in what language used in Mangolassi:

@it-admin said in what language used in Mangolassi:

@scottalanmiller but PHP still has the lion share in the web market, isn't it??

PHP is making a big come back now. It never went away, but since the PHP 7 series released it has greatly improved in performance and features and is way more viable today than it was at the time of this thread. Its ecosystem has blossomed again and there are more and more powerful frameworks than before.

It is still only one of many great options, but way better than it used to be.

WTF with the necro posting yesterday and today...

This ain't some phpBB forum with vidya games, son, everything is always worth talking about

That is supposed to sort of sound like Hank Hill

@jmoore said in Web Application VS Windows Application:

@scottalanmiller Certainly could be.

He has over 1,200 posts, one of our top posters over the years.

@dustinb3403 said in New pi-hole install has no defualt white list items:

You can add the lists rather quickly as well.

Obviously. But I think I will wait and see.

@phlipelder said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@scottalanmiller said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@phlipelder said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@scottalanmiller said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@phlipelder said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@jaredbusch said in Get Wildcard SSL Certs for IIS on Windows with LetsEncrypt:

@scottalanmiller my problem with Certs on Windows, in general, is that you almost always have to copy it around to multiple servers to make everything work well, and that jsut defeats the purpose of LE.

Based on what is on the site, Microsoft has an intrinsic trust with LE's root store. I should be able to set up a RD Session Host with a LE certificate for publishing and there should be no untrusted publisher for RemoteApps or Session Host desktops once the certificate's thumbprint is published via Group Policy?

One would hope that they would. LE is like the standard in SSL Certs. It's from the EFF, way more trustworthy than other cert authorities, IMHO.

Snag: Valid for 90 days. In larger RDS farm settings this would be a bear to manage. That means the need for an automated process.

It is expected to be automated. SSL Cert updates should not be intrusive. All of the tools for LE SSL Certs are designed around the idea that you will automate them and never need to worry about them again. It's about being less of a snag, not more of one.

Got it thanks. Looks like a bit of a learning curve then. 🙂

It's not bad. I find learning the LE pieces easier than learning to do it the old fashioned way 🙂 And with LE it is "learn once and ignore", rather than "learn once, forget, do again in a year or two all over again."

@black3dynamite said in Automation with Ansible, Salt etc - at what point?:

@obsolesce said in Automation with Ansible, Salt etc - at what point?:

@black3dynamite said in Automation with Ansible, Salt etc - at what point?:

@scottalanmiller said in Automation with Ansible, Salt etc - at what point?:

@black3dynamite said in Automation with Ansible, Salt etc - at what point?:

@obsolesce said in Automation with Ansible, Salt etc - at what point?:

@black3dynamite said in Automation with Ansible, Salt etc - at what point?:

@scottalanmiller said in Automation with Ansible, Salt etc - at what point?:

@pete-s said in Automation with Ansible, Salt etc - at what point?:

Ansible seems to be the least complicated to get started with so I guess that'll be as good as anything.

Syntactically yes.

Salt has the simpler architecture, because it is clients reaching the server, not the server reaching the clients.

That’s the main thing I like about salt. But damn, if the minion service is hosed for whatever reason can be a real pain.

SaltStack can do agentless as well, like Ansible.

Ansible uses winrm to manage Windows. Can Salt do the same? Because Salt agentless uses SSH, so I would need to setup ssh server on Windows.
https://docs.saltstack.com/en/getstarted/ssh/index.html

Why would you want to do that, though? The agent is the key reason to be on Salt in the first place.

I'm all good with using the agent. But until I figured out the problem I'm having the agent on my Windows machines, Ansible will be used.

I've got the agent deployed across 700 win7, Win10, win server, and Hyper-V servers at work. All working, installed via chocolatey.

What is the issue you are having?

Edit: 50-100 of those 700 are Linux.

Its probably something stupid on my part but It's only happening on some of my Windows 10 1803 machines. They are installed via chocolatey too.
The service gets stuck in a paused state. It is working great on the other Windows 10, 7, servers, Hyper-V and Linux.

I think that means it has no contact with the salt master.

The place that I see them most is in DCs that allow questionable public access rather than having dedicated, screened DC workers only getting access.

@scottalanmiller said in SSO with Azure & On-Prem AD:

Have not tried that. Would be awesome to see working.

I'd love to have had more time to play with it than being given the go-ahead at 3 pm on Friday to have it done by Tuesday morning at 8 am. After cleaning up the Server 2016 that was an attempt @ ADFS by the on-site that assumed A records are auto-created because Azure is integrated and AD, AD Connect, IIS, and SQL would be "OK" on the same server.

@360col said in Best architecture / recommendation for multi sites (separate business) Cloud VOIP PBX:

@scottalanmiller said in Best architecture / recommendation for multi sites (separate business) Cloud VOIP PBX:

At such a small scale, you could even use SQLite instead of PostgreSQL

At what size would you stop using SQLite?

Maybe a few thousand, or with multi-tenancy. PostgreSQL lets you go to a full live/live model, but that would be for things like 911 call centers.

If you want to exit the SQLite command line shell, the command is dot exit... .exit

@jaredbusch said in Ubiquiti ER3 to ER4 Upgrade?:

@scottalanmiller said in Ubiquiti ER3 to ER4 Upgrade?:

@mroth911 said in ubiquiti Er3 to 4 Upgrade?:

Can I just back up my er3 and upload it to the 4

I believe so.

I have never tried, but it should handle it because it only bring the /config folder in, and nothing in the hardware of the 3 vs 4 is all that different.

To clarify, I have migrated from ERL to ER4 a couple times. But I manually migrate. I don’t try to restore the old config.

Not sure what you went through and where you are but we have had barely that experience and the ProSupport team is based in the US. Now you can ask for a manager which is something I have needed to do when issues were not resolved or had delays but for the most part it has been great.

@mrwright4hire said in Mail stuck in Office 365, Enterprise Exchange queue!:

@dbeato said in Mail stuck in Office 365, Enterprise Exchange queue!:

@mrwright4hire said in Mail stuck in Office 365, Enterprise Exchange queue!:

A few users are having issues sending out emails. Not everytime, but intermittent. Has anyone experienced this type of issue before? I can use all the help I can get. I would like to know how to release the emails and avoid emails getting stuck again.

In advanced, thank you for your efforts.

Have any of your users been not able to send at all? I am not seeing that right now.

Great question dbeato! Here's the thing, I myself tried to email the same address while monitoring it from Barracuda. Nothing showed up as going out. It's strange cause we received email from the address.

So it is on the received end of Barracuda?

@floridaman said in Where to Be for Those in the Know at SpiceWorld 2018:

Also, I recall the top deck were told to move to prevent the boat from capsizing!

Top was okay. Bottom deck was re-balanced as we were boarding.

@kelly It's interesting that they allow this for one person and not a group. Seems obvious that someone would need it. /captainhindsight