@jaredbusch said in sudo problems:

@pete-s said in sudo problems:

@jaredbusch said in sudo problems:

@scottalanmiller said in sudo problems:

@jaredbusch said in sudo problems:

@scottalanmiller said in sudo problems:

@pete-s said in sudo problems:

We want to move to using ssh certificates on our servers and remove all passwords.

That's what we do.

Since when? What do you use to manage and generate certificates?

Generate with ssh-keygen. Manage with a wiki. We are only so big, so it works fine.

That is not certificates. That is keys. Completely different.

I don't know what @scottalanmiller uses but ssh-keygen is used to generate ssh certificates as well.

From the man page:
ssh-keygen supports signing of keys to produce certificates that may be used for user or host authentication. Certificates consist of a public key, some identity information, zero or more principal (user or host) names and a set of options that are signed by a Certification Authority (CA) key. Clients or servers may then trust only the CA key and verify its signature on a certificate rather than trusting many user/host keys. Note that OpenSSH certificates are a different, and much simpler, format to the X.509 certificates used in ssl(8).

But if you are automating certificate generation, you need to wrap this in something.

No, ssh-keygen does not do this (ssh certificate generation).

As you highlight, it can be used as part of the certificate process. But it cannot, and never will, be the certificate authority. Thus it is not the tool for this this.

You're actually mistaken because I've done it many times now. A Certification Authority, when it comes to openssh certificates, is really just a key pair that you carefully guard.

You create certificates by using the CA keys to sign other public keys from users and hosts. The result is a certificate named *-cert.pub

And you do all of this with the ssh-keygen utility.

Similar to how you can create CA and everything else for the more complex x509 certificates with just openssl.

@dashrender said in Remotely Update environment Variables in Windows 7?:

@wrcombs said in Remotely Update environment Variables in Windows 7?:

@dashrender said in Remotely Update environment Variables in Windows 7?:

https://searchvirtualdesktop.techtarget.com/tip/Tips-for-running-PowerShell-against-remote-Windows-7-desktops

Thanks !

Looks like going on site is still required because I have no idea if IIS is already installed - my guess is it isn't.

oh well, good information to have if I ever need it in the future.

Yeah, if you're going on site - skip all this and just put on VNC.

my thoughts exactly, But I figured if there was a way to do this without having to go on site, it would make it so much easier.
guess I can mark this as solved.

@scottalanmiller said in Network Admins: What are your daily BEST PRACTICE:

@travisdh1 said in Network Admins: What are your daily BEST PRACTICE:

@scottalanmiller said in Network Admins: What are your daily BEST PRACTICE:

@travisdh1 said in Network Admins: What are your daily BEST PRACTICE:

@irj said in Network Admins: What are your daily BEST PRACTICE:

@travisdh1 said in Network Admins: What are your daily BEST PRACTICE:

@scottalanmiller said in Network Admins: What are your daily BEST PRACTICE:

@mrwright4hire said in Network Admins: What are your daily BEST PRACTICE:

@dbeato said in Network Admins: What are your daily BEST PRACTICE:

@mrwright4hire said in Network Admins: What are your daily BEST PRACTICE:

What are some

You should always have good old WireSHark, nmap included and a great network scanner.

@dbeato what do you use for a network scanner? I use Advanced IP Scanner.

I use nmap, so much faster and easier.

Generally a full subnet scan using nmap is much slower than Advanced IP Scanner.

I'm annoyed that I even know this right now, such is the state of the documentation we have.

You aren't using Nmap properly... It's so configurable and definitely faster than any GUI scanner.

While true, I'd have to install nmap first and the boss has advanced-ip-scanner already there, sad as it is.

I bet I can install it faster than you can use Advanced IP Scanner, lol.

choco install nmap -y

It's SO fast.

Oh, I'm adding choco everywhere I can, but they haven't even deployed that!

What? That's the easiest way to deploy AIPS! What the heck are people DOING over there?

Being your typical American MSP and going after billing hours instead of good business.

@gjacobse second on Viking we use and resell them

@dashrender said in Windows images - ACHI or RAID/RST?:

@scottalanmiller said in Windows images - ACHI or RAID/RST?:

@dashrender said in Windows images - ACHI or RAID/RST?:

@dustinb3403 said in Windows images - ACHI or RAID/RST?:

@dashrender

@dashrender said in Windows images - ACHI or RAID/RST?:

then MS needs to include the RST driver in their images.

From you bringing it into the conversation. This isn't on Microsoft to include, this is on the hardware vendor to include.

Not really - MS includes most of the in use drivers these days - they started including Dell and HP RAID drivers for example.

That's really neither here nor there.

LOL- but if Intel/Dell and whatever other OEM's (I've read Asus is doing the same thing as Dell - RST by default) then they (Intel, etc) will need to get MS to include the RST driver.

It's up to the product vendor to run through the HLK certification process among a few other steps prior to Microsoft approving the driver for distirubtion from within the OS.

This is not a Microsoft thing. This is an OEM/ODM thing with Dell being the offending OEM at this time.

@jim9500 said in File Corruption on Copy Issue:

it was something mid flight. Intel drivers seems to make the most sense.

It WAS mid-flight. That's known. What is a guess is that the driver is at fault. But I'd say that it is pretty likely.

Installing MS SQL Server on Ubuntu 20.04...

Just do this, copy past and voila. So much easier than walking someone through opening a menu...

wget -qO- https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add - sudo add-apt-repository "$(wget -qO- https://packages.microsoft.com/config/ubuntu/20.04/mssql-server-2019.list)" sudo apt-get update sudo apt-get install -y mssql-server curl sudo /opt/mssql/bin/mssql-conf setup systemctl status mssql-server --no-pager

Done. With that SQL Server is installed, configured, and enabled! You can start using immediately. Try to do that on Windows!

We don’t enforce a default either, but our primary app vender only Likes Chrome.

@dashrender said in Webroot status:

I have one client (well, x-client now) that just moved away from it because the new owners used something else, but up to the beginning of June, they were on it with no issues.

Unless "paying for something that has a negative impact on them" is an issue. To a business, that is always an issue. It's a "loss event" just like any other, similar to a small outage or dataloss. It's a business mistake that causes measurable lost revenue and puts other revenue at risk. So while a hobby could classify it as "not having any issue", no actual business can.

@gjacobse Set up the Hyper-V host from scratch about 60-75 minutes up to date.

Set up the required base OS virtual machines about 45-60 minutes (count does not matter).

Greenfield Active Directory, OUs, GPOs, DNS, DHCP, Folders, and Shares about 45-60 minutes.

Import and configuration of base GPOs about 60 minutes.

Exchange on-premises about 30 minutes post Exchange install.

Script to set up users, their groups, and their mailbox about 60 minutes.

Time to run the script: 60 seconds.

Done.

User count does not matter. All in PowerShell.

And yes, all of our clients are on-premises Exchange.

EDIT: We charge a flat fee for the above.

@eleceng Pic the server setup with the cover open, the motherboard, the motherboard's make and model, and the power supply make and model.

We've been building servers for eons. We may have a compatible PSU sitting in our bin or at least be able to indicate what to get from auction site(s).

As far as activation goes, does Safe Mode work?

EDIT: Boot the VM to Server 2003 .ISO --> Recover --> CMD --> slgmr /rearm [ENTER].

@jaredbusch You are totally right, I just tested again and it only allowed me to mount the ISO. So @ElecEng ignore that one.

@notverypunny said in SMB Timeout?????:

Going to the easily overlooked possibility, is there enough free-space on the SMB share for the bigger jobs?

Yes. The file on the USB was about 277MB. 100's of GB available on share.

@dbeato More on the Exchange 2013/2016 and 2019 troubleshooting. Exchange 2013 is what I have narrowed down to the issue with OWA and ECP with error 500 and the fix as above works. However the Exchange 2016 CU21 and Exchange 2019 CU10 have an issue with Security Clients with AMSI as below https://borncity.com/win/2021/07/13/exchange-2016-2019-outlook-probleme-durch-amsi-integration/
https://www.frankysweb.de/exchange-2016-2019-amsi-integration-sorgt-fuer-probleme-mit-outlook/
Disabling AMSI on the server with the WEb.config file hasn't fixed it yet, in our case we had to disable AMSI on the server and clients for now.

@sickless316 said in DELL PowerEdge T410 - Memory Configuration Issues:

@pete-s how does any of this make my sense at all??? Did anyone even read any of this thread before posting???

You say he CANT use 16gb sticks which he has CLEARLY done already and have worked but instead of giving good answers you guys pressure people to move on because the people commenting on here either can’t read or don’t know enough already...

This is aggravating because every post about the T410 gets cut off with nonsense like this crp...

He used 16gb sticks so remove your comment, or don’t make one and move on if you didn’t have the answer to the question you just made the question more confusing

If you read more carefully next time, you might not become aggravated. What is supported and what works are two different things.

Reason to move on from old hardware is because for companies IT is a business, not a hobby. Spending time on something costs money, so the potential benefit has to outweigh the cost.

@pete-s said in I'm not a php dev, so what do you all think of this patch:

@pete-s said in I'm not a php dev, so what do you all think of this patch:

@jaredbusch said in I'm not a php dev, so what do you all think of this patch:

@pete-s said in I'm not a php dev, so what do you all think of this patch:

@jaredbusch said in I'm not a php dev, so what do you all think of this patch:

@pete-s said in I'm not a php dev, so what do you all think of this patch:

@jaredbusch said in I'm not a php dev, so what do you all think of this patch:

I just submitted this as a pull request to FreePBX's User Manager module.

I think it looks clean, but curious to what someone with more day to day PHP skills thinks about it.

Context matters when it comes to coding style. Do you have a link to the original source code?

The actual git is public as long as you are logged in to Attlasian.
https://git.freepbx.org/projects/FREEPBX/repos/userman/browse
They have a copy on Github but that is no longer kept in sync (apparently it is).
https://github.com/FreePBX/userman

Your code looks fine. It looks just like the original.

https://git.freepbx.org/projects/FREEPBX/repos/userman/browse/views/welcome.php

It is a pull request, it should.

I was discussing WHAT i did in my change, hence the diff in post 1.
Mostly using the ternary structure like I did.

Yeah, that was what I was commenting. It's fine.

In general if...then...else is clearer than ? to read but it also clearer to not put many php tags back to back. But that is how the original is done. So what you've done is inline with how it is written.

The only very minor thing I could find, would be to not use ' and " in the same statement, unless there is a reason for it.

So instead of:

<?php echo _(sizeof($directories)==1 ? " selected":'')?>

it would probably be better to do:

<?php echo _(sizeof($directories)==1 ? ' selected' : '') ?>

(easier to read when you're consistent with white space as well)

It will work either way so...

meant to use ' that was a miss on me.