@JaredBusch said in Server 2012R2 DHCP reservations problem with my VOIP equipment?:

I never use reservations for phones.

Specifically with Yealink phones, I set the DHCP hostname value in the config file.

So when I am on the network, I can easily just ping ext103.domain.local and shit..

Or If I look at the DHCP server lease list, I see the hostnames listed as ext101, ext103, etc.

c1f3dca6-fa20-4b66-9d59-87af092bf42f-image.png

Love this idea

@JasGot said in Yealink will not register with VitalPBX, Wrong password:

@JaredBusch said in Yealink will not register with VitalPBX, Wrong password:

@Romo said in Yealink will not register with VitalPBX, Wrong password:

@JaredBusch The device is tied to the numeric extension, it lets you set the device's username to whatever you want.

The better question is why are you even thinking this is a good idea?

What benefit are you thinking you are gaining by using a non-standard approach?

All this does is complicate things by putting a random value in a place that is normally something that matches the extension. This is a 1 to 1 tie between this informaiton and the extension. There is no benefit to this.

Only after you've pigeon-holed yourself into that 1 to 1 relationship.

No, it is a 1 to 1 relationship regardless of if you use the extension or a name or a fuck01.

That auth name is 100% tied 1 to 1 to the extension.

Tagging @MontesVitalPBX

@Dashrender said in Shadow Tracker Live:

Though - if you don't tell them that they lost you as a possible customer - they will likely never fix their shit.

Probably best, to help make people aware of how bad they are.

@JaredBusch said in I guess Skyetel doesn't want business:

@Dashrender said in I guess Skyetel doesn't want business:

And cell phones have allowed pure 10 digit dialing for at least 10, though likely more like 15 years (when the plan simply included what used to be called long distance)

Since my very first one in 1996

My first was 1992, because of the reasons I mentioned above with the land lines and everything being long distance. Long distance on the cell in 1992 was so much cheaper than the land line cost per minute, that it paid for the cost of the cell phone!

Thanks for this ! Sorry for major necro-posting, but the recommendations in that article are pretty horrible (even as of the date of that article) - effectively: "With Windows, NTLM is easiest so just use that." That should be a non-starter.

I found the following that nicely covers using Kerberos with AD & DNS for managed hosts, which should be far preferable of course:
https://argonsys.com/microsoft-cloud/articles/configuring-ansible-manage-windows-servers-step-step/

This version 4 feels snappy, like you are running on a "real" computer.
But storage speed is more like an old harddrive compared to a modern server with SSD drives. To bad they didn't put a SATA or something on it.

Serving up some pages on apache or nginx is no problem. Ansible installs fine. Packages in Raspbian seems to be just about the entire Debian repository for whatever odd thing you want.

It's for sure the best Raspberry Pi so far. Can be used for a lot more things than the old version 3.

@JaredBusch said in VPS injected ssh keys:

Under no circumstances do I actually want anyone's key tied to the root user. It negates all accountability.

It's for pre-production setup. Not for deploying straight to production.

Yeah I'm wrong. sudo being involved means it can't be privilege escalation because you're getting the proper amount of access.

@wrx7m said in Server 2016 - Force Default Update Server to WSUS Server Via GPO:

@dbeato said in Server 2016 - Force Default Update Server to WSUS Server Via GPO:

This would have happened on Server 2012 R2 as well, dual scan has been around and causes a lot of problems as you noted.

It is strange that I didn't have these issues in 2012 R2. I essentially copied the same GPO for 2012 R2 and made some minor changes to it to convert it for 2016. My 2012 R2 show the correct default service.

Weird, I have various Server 2016and now 2019 with WSUS and while dual scan was an issue for me on Server 2012/ 2012 R2 not anymore.

@JaredBusch said in Extensions not registering:

Fully updated FreePBX and zero issues. I use pretty much only use pjsip.
b6a3844c-2573-4763-bd7f-efce2b7603ae-image.png

This is VitalPBX, its super weird still. I didn't really touch anything on the extensions.

This is a good starter video:

Youtube Video

@wirestyle22 said in Palo Alto vm Image:

Imagine when all of these bots are capable of advanced subterfuge. What is the average user going to do?

Well - as long as you have things like hashes to compare against, you at least have some form of protection - faking good hashes is beyond hard.

Pinging @devstar

@jt1001001 said in User's PC is unstable:

@Dashrender was scroll lock somehow activated/pressed?

Always possible.. but she definitely didn't accidentally click it while I was watching it not work... then suddenly just start working again

@JaredBusch said in Using dnf-automatic to keep Fedora up to date:

@FATeknollogee said in Using dnf-automatic to keep Fedora up to date:

There really need to be a setting for this in the Workstation GUI.

By default Fedora Workstation + Cinnamon uses dnfdragora which is a totally separate process.

Yes, I realize that.
This setting exists in Cockpit, no reason why it can't be in WS!

To add to this- I have an error that started appearing after updating their Fedora 29 and 30 instances. Further testing found that the error appears in different regions using their server type template installers or even a custom iso option that I used with net install. All I have to do is deploy, run dnf update and reboot. The error is present in every boot after the update.
https://mangolassi.it/topic/19903/fedora-29-and-30-edac-skx-can-t-get-tolm-tohm-error-on-vultr

Anyway, I will go with bridging for now.

I don't think bridging will cause any problems in this case. Traffic is intermittent and low speed so even if there are more broadcast traffic sent over the VPN links, compared to a routing solution, I don't think it will have any impact.

But I'll probably set up some kind of test to make sure before deploying.

@dbeato yes i guess... almost all emails backup are corrupted
few email ids had configured locally ..they are safe...