IT Discussion

• 

  Deploying NodeBB 1.13 on CentOS 8 with MongoDB 4.2
  linux centos nodebb mongodb howto centos 8 nodebb 1.13 mongodb 4.2 • • scottalanmiller  

  3
  1
  Votes
  3
  Posts
  17
  Views

  

  @black3dynamite there you go
• 

  Looking for some insight/input for setting up a "hot site"/fail-over environment
  • dave247  

  19
  0
  Votes
  19
  Posts
  51
  Views

  

  @dave247 said in Looking for some insight/input for setting up a "hot site"/fail-over environment: Could replicate virtual machines at the VMware level but we will need a new vSphere license, setup may be more complex (also fine) Replication always has to be at this level. You can't safely replicate below it. Storage doesn't have the ability to replicate on its own. If your VMware licensing doesn't allow for replication, that answers all of the questions about the storage lower down the stack. Even if the SC has the ability to replicate, it depends on this feature of VMware to execute it correctly. If you do it without VMware doing the heavy lifting you get inconsistent data. Often looks good in tests, often corrupt in a real life failover.
• 

  POE phones over CAT3 cable
  • Dashrender  

  8
  0
  Votes
  8
  Posts
  47
  Views

  

  @JaredBusch said in POE phones over CAT3 cable: @Dashrender said in POE phones over CAT3 cable: Has anyone got a Yealink phone to work with POE over CAT 3, 6 conductor cable? I have confirmed that 802.3af supports 2 pair POE/data. https://en.wikipedia.org/wiki/Power_over_Ethernet (assuming wiki is correct) And the Yealink phones support 802.3af class 2 POE, so I should be go to go. The part I'm assuming at this this point is the use of 568B pinout in the jacks. (more specifically, using pins 1, 2, 3, 6) Thoughts? You are not technically using T568 at all. You are making use of the T568B standard for reference and using pins 1,2,3,6. 568 A or B does not matter. it simply has to be the same on both sides. I personally like B just because it is what I first used when I learned CAT5 wiring. Ditto
• J

  I like Edge chromium so far......
  • JasGot  

  2
  2
  Votes
  2
  Posts
  56
  Views

  

  @JasGot said in I like Edge chromium so far......: I like the brightness level and contrast of colors. I can see the fine lines on web pages and skinny fonts so much better than in Chrome. seriously - that can be worth the price of admission right there!
• 

  Deploying NodeBB 1.11.1 on CentOS 7 with MongoDB 4
  linux centos centos 7 nodebb mongodb howto mongodb 4.0 nodebb 1.11 • • scottalanmiller  

  20
  2
  Votes
  20
  Posts
  385
  Views

  

  @bnrstnr said in Deploying NodeBB 1.11.1 on CentOS 7 with MongoDB 4: What specific reasons for the CentOS recommendation here? Revisiting a little... Basically the three main Linux releases supported by MongoDB are CentOS, Ubuntu, and Debian. CentOS and Ubuntu here are mostly six of one. But CentOS 8 Stream I like a little more than the Ubuntu LTS options. We use Ubuntu a little more often than CentOS today, but in this case I feel that CentOS is slightly better for us. But really, all three options are perfectly fine. We just have to pick one.
• 

  Finding Windows 10 Product Key
  microsoft windows10 microsoft product key • • WrCombs  

  65
  1
  Votes
  65
  Posts
  99
  Views

  

  @Dashrender said in Finding Windows 10 Product Key: @JaredBusch said in Finding Windows 10 Product Key: @Dashrender said in Finding Windows 10 Product Key: @JaredBusch said in Finding Windows 10 Product Key: @Dashrender said in Finding Windows 10 Product Key: should prompt for this anyhow. should not fixed Makes a small difference in the meaning. You're absolutely right - I was just typing too fast... FTFY
• 

  ISP & VoIP woes
  voip isp • • fuznutz04  

  13
  0
  Votes
  13
  Posts
  97
  Views

  

  @pirho99 said in ISP & VoIP woes: If someone in the neighborhood is using MoCA, you could put this adapter on the business' incoming cable line, before the first split or amplifier. It would block their interference. link This won't make any difference though - because the signal has to leave the building, i.e. go where the line noise is, to get out to the rest of the world... so the problem would still be there.
• 

  Non-IT Change Management and Project Management Platforms
  crm change management workflow • • DustinB3403  

  6
  0
  Votes
  6
  Posts
  58
  Views

  

  We use Asana.
• S

  Nginx setup
  • smartkid808  

  15
  0
  Votes
  15
  Posts
  85
  Views

  

  @smartkid808 said in Nginx setup: @thwr said in Nginx setup: I prefer nginx over everything else when it comes to reverse proxies. There are special purpose proxies like Traefik, but nginx is the ultimate general purpose swiss army knife. Nice. That's what I gathered from what I read. Now to work on getting it setup. Tried once a while ago and gave up. Now to try again ^_^ https://www.mangolassi.it/topic/16651/install-nginx-as-a-reverse-proxy-on-fedora-27
• 

  Looking for a high performance game server
  • thwr  

  29
  0
  Votes
  29
  Posts
  138
  Views

  

  @Pete-S said in Looking for a high performance game server: @thwr said in Looking for a high performance game server: Like I said before, we are already using a Core i9-9900k, the upper end of available desktop CPUs, hosted by Hetzner Yes, but it's not a real server with server grade components. It will increase the probability of having problems. Problem with the desktops CPUs are that Intel doesn't make server chipset for them and there are no motherboard manufacturers that makes server motherboards for desktop CPUs. Now, you can put a desktop motherboard inside a server chassis so it will look like a real server but it will still have desktop components inside and lack things like ECC memory etc. That is probably what Hetzner has done. They also most likely use desktop NVMe M.2 drives instead of the enterprise grade NVMe components. Difference here is durability, reliability, performance under heavy load and efficient cooling. I agree for the most part. Our opinions on ECC may differ, failure rates aren't as high as they have been 10 years ago. I would use ECC anytime when it comes to critical systems. It's always good to have, but not as important for my usecase. It's well known that Hetzner uses cheap hardware, never said anything else. The machine uses a cheap consumer grade https://www.gigabyte.com/de/Motherboard/B360-HD3P-rev-10#kf board, 2x Samsung PM/SM981 and 64 GByte of Non-ECC RAM. That's what you get for the money. We're willing to pay more, but we have to actually find something There is one exception on the CPUs though and that is the i3, celeron, pentium CPUs. They can be used on server chipset like C246 and support the use of ECC memory. Primarily intended for entry-level servers though. They share pinout with Xeon E-2100 and E-2200 series. C246 (and other chipsets) do support Core i(5/7)-CPUs. Just do a quick google search and you will find several boards from different manufacturers that have Core i on the list of supported CPUs. In fact, a Core i is just a Xeon with a different configuration so they don't support ECC for example. I don't know about newer chipsets. But ... i don't have to use Core i. A similar Xeon will do just fine. Also, if you want maximum performance you shouldn't be looking at E3-1200 series anymore. They're two generations old. I know, was just an example. Xeon E3-1200 v6 -> Xeon E-2100 -> Xeon E-2200. agree
• 

  Unifi Multi Site Updates
  unifi unifi controller ubiquity • • hobbit666  

  21
  1
  Votes
  21
  Posts
  154
  Views

  

  @JaredBusch said in Unifi Multi Site Updates: @Dashrender said in Unifi Multi Site Updates: @JaredBusch said in Unifi Multi Site Updates: @hobbit666 said in Unifi Multi Site Updates: But also the unifi controller isn't just going to be used by companies that have multiple "clients" like a MSP. I'm sure alot of companies that have several sites use common SSID at all sites. It is actually designed for the WISP market, not the MSP market. Or the enterprise. Umm wut? I'd amend your statement to be it's actually designed for WISP market, not the MSP or enterprise market. Features like the OP's asking for would make it more enterprise ready.
• M

  MeshCentral 2 - unknown device michael-7-x64
  meshcentral 2 • • Mario Jakovina  

  6
  0
  Votes
  6
  Posts
  81
  Views

  

  @manxam said in MeshCentral 2 - unknown device michael-7-x64: This is an AV sandbox performing a scan and run on this application. Happens regularly when deploying various remote management tools to devices with AV. You'll get some Microsoft VMs, Bitdefender automated machines, Kaspersky, etc... It looks as though this SPECIFIC device name is from Bitdefender's sandbox : https://www.reddit.com/r/msp/comments/c8z1kl/bitdefenders_sandbox_just_ran_my_screenconnectcw/ Nice find!
• 

  Apparently the 2.0 line of EdgeOS now supports ZeroTier
  zerotier edgeos edgeos 2.0.0 • • JaredBusch  

  51
  5
  Votes
  51
  Posts
  1194
  Views

  J

  @dinge I did that exactly. Can we compare configs? Here's mine: interfaces { ethernet eth0 { address 10.1.1.10/24 description "Local Upstream" duplex auto speed auto } ethernet eth1 { description Local duplex auto speed auto } ethernet eth2 { description Local duplex auto speed auto } ethernet eth3 { description Local duplex auto speed auto } ethernet eth4 { description Local duplex auto poe { output off } speed auto } loopback lo { } switch switch0 { address 192.168.50.1/24 description Local mtu 1500 switch-port { interface eth1 { } interface eth2 { } interface eth3 { } vlan-aware disable } } zerotier ztklh3kllj { description ZeroTier } } protocols { static { route 0.0.0.0/0 { next-hop 10.1.1.1 { description "Default Gateway" } } } } service { dhcp-server { disabled false hostfile-update disable shared-network-name LAN2 { authoritative enable subnet 192.168.50.0/24 { default-router 192.168.50.1 dns-server 192.168.50.1 lease 86400 start 192.168.50.38 { stop 192.168.50.243 } } } static-arp disable use-dnsmasq disable } dns { forwarding { cache-size 150 listen-on switch0 name-server 10.1.1.1 } } gui { http-port 80 https-port 443 older-ciphers enable } nat { rule 5000 { description ZT-NAT destination { group { address-group ADDRv4_eth0 } } log disable outbound-interface ztklh3kllj protocol all source { group { } } type masquerade } } ssh { port 22 protocol-version v2 } unms { disable } }
• 

  UNSOLVED Any good getting started with Hugo resources
  hugo • • JaredBusch  

  7
  1
  Votes
  7
  Posts
  69
  Views

  

  @JaredBusch said in Any good getting started with Hugo resources: @scottalanmiller said in Any good getting started with Hugo resources: @JaredBusch said in Any good getting started with Hugo resources: But exactly WTF am I supposed to do next to get the various pages made? Right. 100% missing info. And mostly this is because Hugo isn't what does this, the themes are. Hugo is like a theme-automation toolkit and the real trick is learning the themes, not learning Hugo. Right, and maybe I just picked a crappy theme at random. That's definitely a risk. A good theme makes Hugo so easy, and a bad one makes it useless.
• 

  Catalogic vProtect for KVM
  backup kvm vprotect • • scottalanmiller  

  2
  2
  Votes
  2
  Posts
  48
  Views

  

  It sounds a lot like Xen Orchestra
• 

  SOLVED Can bitwarden have multiple accounts
  password managers multiple users bitwarden • • JaredBusch  

  12
  0
  Votes
  12
  Posts
  92
  Views

  

  @coliver said in Can bitwarden have multiple accounts: One of the other ways I resolved this in the past was have the browser plugin for the one I use the most and the desktop app logged into the one I use the least. You just miss out on autofill if you use the desktop app. I do this now. My work stuff is in KeePass on my office desktop, and my personal stuff / work web resources that don't tie back to the office network are in Bitwarden.
• 

  Critical Evaluation of End User Information
  • WrCombs  

  5
  1
  Votes
  5
  Posts
  39
  Views

  

  In a case like this, it can be hard if you are new to helpdesk or feel like you want to trust your coworkers to be professional and to feed you all relevant information that they could have. But they rarely do, even other IT people. The nature of end users (the coworker becomes an end user in this scenario) is to hold back the info, or to attempt to "interpret" it through their vision of what's happening. But here is the problem: the person stating the problem (that they cannot solve) is the one person we are sure can't tell us everything that we need to know because, if they could, they'd be able to solve the problem (in most cases.) So the person who most wants to "filter" what is said, is the person least likely to be able to determine what a good filter is. Even a well meaning person in that position isn't useful.
• 

  MeshCental 2 Config File Issues
  lets encrypt meshcentral meshcentral 2 dashrender • • Dashrender  

  30
  0
  Votes
  30
  Posts
  126
  Views

  

  @Ylian Any thoughts on why my system is demanding having the "cert": line added? I did do a startup based on the install instructions node ./node_modules/meshcentral --cert example.servername.com Does that put the hostname somewhere other than the config.json?
• 

  How does name resolution work in AD?
  windows dns ad • • Pete.S  

  15
  0
  Votes
  15
  Posts
  96
  Views

  

  @Pete-S said in How does name resolution work in AD?: @Dashrender said in How does name resolution work in AD?: @scottalanmiller said in How does name resolution work in AD?: @Pete-S said in How does name resolution work in AD?: I was wondering how it works because we see a problem where a couple of Win 10 clients can resolve all the internal Windows servers names, but not the statically assigned names of linux servers. I thought if the name resolution works over different mechanisms and uses different ports it could be an firewall or L3 switch somewhere that has been misconfigured. This is common in situations where Linux is not given an opportunity to auto-update the DNS entries, no one makes them manually, and they are not joined to AD. Exactly - have you or anyone else added these servers to AD's DNS? They have been added manually. The name of the service is also not the name as the server. So if a webserver is abc001.company.com the name in the DNS that will send you to that server might be logistics.company.com. if you're being sent to logistics, that's the entry that must be in DNS.. you can have as many entries as are needed for a single server. each name is it's own entry.
• 

  Office 365 permissions for a document center
  office 365 sharepoint o365 • • WLS-ITGuy  

  1
  1
  Votes
  1
  Posts
  27
  Views

  No one has replied

• 

  MeshCentral 0.4.7-z Tag List Expansion Bug
  meshcentral meshcentral 2 • • scottalanmiller  

  1
  1
  Votes
  1
  Posts
  35
  Views

  No one has replied

• 

  Password check services.
  • popester  

  10
  0
  Votes
  10
  Posts
  72
  Views

  

  For example, https://haveibeenpwned.com/Passwords? This one is legit. But if they did keep a list of passwords entered, it's not the end of the world, especially with 2FA/MFA, and the fact it would have to align on the correct website with the correct username/email.
• C

  DVX 8000 IP PBX CONFIGURATION
  voip pbx telephony dlink dlink dvx dlink dvx 8000 • • Cosmas  

  6
  0
  Votes
  6
  Posts
  62
  Views

  

  @Dashrender said in DVX 8000 IP PBX CONFIGURATION: Awesome to see more telephoney stuff show up. Bad telephony, but meh. all good.
• C

  UPS keeps dying
  • c00l.ice  

  10
  0
  Votes
  10
  Posts
  94
  Views

  C

  thanks
• W

  Fedora 31 Server Edition filesystem permissions changed to 777
  • Woti  

  56
  2
  Votes
  56
  Posts
  573
  Views

  W

  I got them yesterday. Community Documents v0.1.3 and OnlyOffice v4.1.2
• 

  How to mount remote filesystem over ssh (both Windows & Linux)
  linux windows ssh sshfs • • Pete.S  

  7
  3
  Votes
  7
  Posts
  76
  Views

  

  @dafyre said in How to mount remote filesystem over ssh (both Windows & Linux): @black3dynamite said in How to mount remote filesystem over ssh (both Windows & Linux): @dafyre Installing sshfs and winfsp via choco is older than the ones from GitHub. If you installed them via choco do this to mount at the host root directory or other directories. https://github.com/billziss-gh/sshfs-win/issues/102 Host root directory \\sshfs\remoteuser@host\..\.. Specific directory like /var/www \\sshfs\remoteuser@host\..\..\var\www Thanks for the pointer. I did install using choco. I'm able to make it work now. Edit: Just to see if I can, I may go back and do straight installs. As I said above with the latest version I mount the root directory with \\sshfs.r\user@host However, if you want to mount another directory like /var/www you have to do: \\sshfs.r\user@host\var\www\ The trailing \ is very important! It just doesn't work without it if your path is more than one directory deep. You also need to use backslash and not the forward slash.
• 

  Apache installation - file owner & permissions?
  apache php permissions • • Pete.S  

  3
  0
  Votes
  3
  Posts
  45
  Views

  

  @Pete-S said in Apache installation - file owner & permissions?: I was wondering what permission and owner should files like html, php etc have? Normally you just do... chown www-data:www-data -R /var/www/html
• 

  WP-CLI and database users
  security wordpress wp-cli wp • • JaredBusch  

  8
  0
  Votes
  8
  Posts
  79
  Views

  V

  @JaredBusch check out WordOps https://wordops.net/
• 

  Setting up FreePBX to send a X-Tenant SIP header for Skyetel Tenant tracking
  freepbx skyetel billing tenant • • JaredBusch  

  14
  2
  Votes
  14
  Posts
  275
  Views

  

  @cdbrush said in Setting up FreePBX to send a X-Tenant SIP header for Skyetel Tenant tracking: This is great. Thanks. What is this significance to the numbers within the "{OUTBOUND_ROUTE_NAME:0:4}" preceding the route name? That’s a substring. Look at the route name, starting at character zero and going for 4 characters.
• 

  550 5.0.350 Remote server returned an error
  email exchange smtp office365 • • WLS-ITGuy  

  10
  2
  Votes
  10
  Posts
  104
  Views

  

  @dbeato said in 550 5.0.350 Remote server returned an error: @WLS-ITGuy said in 550 5.0.350 Remote server returned an error: @dbeato said in 550 5.0.350 Remote server returned an error: @WLS-ITGuy said in 550 5.0.350 Remote server returned an error: 571 Delivery not authorized, message refused That messages means a lot of things but yeah Whitelist on their Spam Filter end, Adding your IP to your SPF record, check if there is anything on the body of the message triggering the block on their end (i.e. URL or site link). It is Office 365 with Exchange - I have created all the records that Microsoft wanted me to. So, just to be clear, this is 100% not on my end, correct? It shouldn't be on your end, the message is coming from the recipient's end server. Right, which means that they received it.