Topics created by DustinB3403

@RojoLoco and that's what I appreciates about you RL.

@DustinB3403 said in Office 365 Suite - User Licensing T&C:

And what I specifically was hoping someone had a link for was to MS's license or T&C saying that "no you can't share an account for multiple people".

Obviously this doesn't exists since the way the software is procured is per user.

Right, they won't repeat it because they have it in writing already. But you can always show that it is 1) assigned to a named user 2) at the time of procurement you have to agree to a single human.

That's better than any T&C link.

@Obsolesce said in Finding specific file type that has no extension:

Is there anything inside the file that can tell you? For example, if you write a script that cats each file or whayever and looks for specific string, then moves it if it matches.

I don't know what those files are, so ya. Just thinking out loud without any info.

No, because they are just ancient like ~20 + years old, no extension or really anything to hit on. Apple still supports Postscript Type 1 fonts, but nothing else does.

I managed to get it to work with what I needed with the above.

Additionally I created two reports 1) listing all of he postscript type 1 fonts and 2) listing truetype and opentype fonts.

So now we can build a list of things that needs to get upgraded.

To find the non-extension'd postscript type 1 fonts I used

find . -type f -d -empty >> old-crap.txt

To find the modern fonts I used

find . -name '*.ttf' -d >> modern-font.txt and just replaced .ttf with .otf, .otc, .ttc, .tte and .dfont and appended the same modern-font.txt file for each of those.

@IRJ said in Documenting Firewall Exceptions and Rules:

@DustinB3403 said in Documenting Firewall Exceptions and Rules:

I had to add some rules to a CentOS 8 server because some things stopped working that were previously working. (Not sure why this worked before, but it did)

Adding a few rich rules resolved the issue immediately.

None of this makes any sense. It's deny all and permit by exception. Why would you do anything else?

That's the default, and that's what was working just fine for a long time. Suddenly it began "not working" and needed the exceptions made.

@stacksofplates said in Scripted visudo updates:

@DustinB3403 said in Scripted visudo updates:

Well I managed to get the file created, I had to use visudo to create a custom file with my edits.

I'm testing it now to see if everything works.

Really? It doesn't let you just sudo a file in the dump directory? I wonder how they are enforcing that?

Yeah, not sure why it was having a hissy fit over it, but I've got a good working custom sudoer.d/god file now that can be used for what I have, and I can simply cp that into the appropriate folder and reset the perms on it (if required) to get everything working.

Thanks for the help guys!

Didn't we have one of these threads last year?

tags - please?

We use Asana.

@Dashrender said in SuiteCRM - Followup impressions:

Did anyone use it at all during the 'trial' period? or did end users just at it and walk away?

I love the fact that the company at least was willing to try something - then move to something else.. instead of just being stuck.. it might be costly to do so.. but at least they are working toward a solution they will hopefully like and works well for them.

Yes. It was used by a trial group. But then afterwards, it was never a) forced or b) even pushed on the main users.

@black3dynamite said in Unix Command line - Printer Details:

@DustinB3403 said in Unix Command line - Printer Details:

Here is the completed command.

lpoptions -p <NAME> | grep -o "printer-make-and-model='Your Printer make and Model"

That outputs the exact detail I needed!

lpoptions -p SHCSL_209_ColorPrinter | sed -r "s/^.*(printer-make-and-model.*)'.*$/\1/g; s/'//g; s/printer-make-and-model=//g"

This will remove all the unnecessary text, printer-make-and-model=, and the single quotes.

Yeah I'm also able to just use lpoptions -p SHCSL_209_ColorPrinter | grep "'SHCSL_209_ColorPrinter'" and get what I need in a single line response.

@IRJ said in Kibana Wazuh Agent isn't showing anything in integrity:

@DustinB3403 said in Kibana Wazuh Agent isn't showing anything in integrity:

Well I'm making progress, I at least have nginx responding when I hit the page with An error occurred during a connection to 192.168.1.100:5601. SSL received a record that exceeded the maximum permissible length.

Error code: SSL_ERROR_RX_RECORD_TOO_LONG

server { listen 80; listen [::]:80; listen 5601; listen [::]:5601; return 301 https://$host$request_uri; } server { listen 443 ssl; listen [::]:443; ssl_certificate /etc/pki/tls/certs/kibana-access.pem; ssl_certificate_key /etc/pki/tls/private/kibana-access.key; access_log /var/log/nginx/nginx.access.log; error_log /var/log/nginx/nginx.error.log; location / { auth_basic "Restricted"; auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd; proxy_pass http://localhost:5601/; } }

Why are you listening on 5601?

proxy_pass http://localhost:5601/; will redirect 5601 to 443

That is no longer in the file, I was testing with it. The below is current.

server { listen 80; listen [::]:80; return 301 https://$host$request_uri; } server { listen 443 ssl; listen [::]:443; ssl on; ssl_certificate /etc/pki/tls/certs/kibana-access.pem; ssl_certificate_key /etc/pki/tls/private/kibana-access.key; access_log /var/log/nginx/nginx.access.log; error_log /var/log/nginx/nginx.error.log; location / { auth_basic "Restricted"; auth_basic_user_file /etc/nginx/conf.d/kibana.htpasswd; proxy_pass http://localhost:5601/;

This is how you change the password.

While I would generally agree with that, it feels as if I'm just missing 1 step to this process.

@DustinB3403 said in Wazuh - operational and can add agents - now what:

@IRJ said in Wazuh - operational and can add agents - now what:

So you already filtered it. Just click discover on top right

Doh that is so easy that I didn't even think that was it.

@DustinB3403

3a8e8726-f742-493d-a2cd-5f54c82ce4fb-image.png

@Obsolesce said in LibreOffice - Runs so slowly:

@scottalanmiller said in LibreOffice - Runs so slowly:

In giant shops (thousands of users and up), the problem with MS Office is that you don't pay for it just for the users who would benefit from it, but you pay for it for everyone.

That is so totally false. I have not seen that anywhere, including where I currently work which is many thousands users.

So your claim is what... that they 1) don't actually pay for the software or 2) they use it only for a few people who would actually benefit from it or 3) the kind of work that they do is both appropriate to an office suite and so insanely heavy that they actually get to the point where MS Office is noticeably more efficient, yet still an appropriate tool to use?

If any of those, how does that work?

If 1... okay piracy.
If 2... how do they interoperate with others, or is it all office suites for only individual use?
If 3.... what the heck kinds of tasks are they doing that are so different than any other company?

@WLS-ITGuy give this a try, you may need to go back more than a year though.

@Dashrender said in How do you find duplicates from Windows SMB shares using Linux:

@JaredBusch said in How do you find duplicates from Windows SMB shares using Linux:

@Dashrender said in How do you find duplicates from Windows SMB shares using Linux:

@IRJ said in How do you find duplicates from Windows SMB shares using Linux:

@Dashrender said in How do you find duplicates from Windows SMB shares using Linux:

I wonder if this would run faster directly on the server in powershell instead? I'm assuming with doing this over SMB you have to download all files, run the hash - if ran locally, you get to skip the download time, I assume.

I gathered that the SMB shares are hosted on Linux, but I could be wrong.

If they are hosted on Windows like you are assuming, then I would agree that PowerShell would probably be most performant for this.

The title says - Windows SMB Shares.

My guess is that Dustin is a lone wolf running a 'nix OS as his machine - and the rest of the company is using Windows. Nothing wrong with that, just my guess.

His company is significantly Mac.

aww, that's right - he has been asking a lot of MAC questions lately.

Unix questions to be more precise, but yeah we are a heavy Mac shop.

@DustinB3403 said in Unifi port blocking on specific networks:

@Dashrender said in Unifi port blocking on specific networks:

he's talking about ports - not URLS.. not sure that Pi-hole fixes this, unless he said the wrong word earlier.

I specifically mean to block ports on a specified wireless network, had I meant URL's I'd be using my pihole.

Assuming
wifi - 192.168.1.x
LAN - 192.168.2.x

You configure the router to not allow said ports on network 192.168.1.x

It will makes sense of all the alerts and centralize everything

@DustinB3403 said in NXLog and Windows for Graylog:

@flaxking said in NXLog and Windows for Graylog:

When I was playing with graylog, I was using Beats

Care to elaborate?

Flexible and made to work with different solutions

https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-overview.html

https://logz.io/blog/filebeat-tutorial/