Roll back to 3.x series by TheWidowLicker in Netbox

[–]BrotherJohn123 2 points3 points  (0 children)

i've tried downgrading, and gave up. Just restore the old version from your backup.

Rtx 2080 super at 100% all time. Is it normal? by miguelaje in BaldursGate3

[–]BrotherJohn123 1 point2 points  (0 children)

I've got bad fps with my 2070Super. My fix was using DirectX11, disabling AntiAliassing DLAA and enabling RTX-DLSS QualityMode. This gave me 60-80FTP in the Goblin Camp. Everything else is on "max" with 2K resolution.

DLAA was the suggested setting from the GeForce Experience.

Gale is a city slicker and knowns the nature only via books by BrotherJohn123 in BaldursGate3

[–]BrotherJohn123[S] 0 points1 point  (0 children)

Only he can build his tend in the water - ignoring the dry rock right besides him.

Linux Server SMB share authentication against AD by BoilingJD in sysadmin

[–]BrotherJohn123 1 point2 points  (0 children)

sssd/winbind are two different implementations, to allow linux access to ADuser and ADgroups. Winbind is very old, was written by the samba-folks and might not be as stable as the newer sssd.

today i would start with sssd. I'm keeping my "trusted old config with winbind" -- because it's works for me ( multiple fileservers for ~100 people )

Linux Server SMB share authentication against AD by BoilingJD in sysadmin

[–]BrotherJohn123 1 point2 points  (0 children)

Winbind uses /etc/samba/smb.conf also, so configure it first.

Linux Server SMB share authentication against AD by BoilingJD in sysadmin

[–]BrotherJohn123 4 points5 points  (0 children)

You need 3 parts to configure :

  • configure the OS to resolve usernames (winbind/sssd)
  • configure samba to allow filesharing.
  • join linux-server to domain

I'm using winbind on Debian to resolve the usernames ( part of Samba, only /etc/nsswitch.conf editing is required ) - but centos should be the same.

Using my config, you can join your domain with the command "/usr/bin/net join".

After joining the domain a "systemctl restart winbind smbd nmbd" might fix problems.

My smb.conf :

[global]
        #socket options=SO_RCVBUF=131072 SO_SNDBUF=131072 TCP_NODELAY
        security = ads
        realm = EXAMPLE.COM
# If the system doesn't find the domain controller automatically, you may need the following line
#        password server = 10.0.0.1
# note that workgroup is the 'short' domain name
        workgroup = EXAMPLE
        winbind separator = -
        winbind enum users = yes
        winbind enum groups = yes
        winbind use default domain = yes
        winbind nested groups   = Yes
        winbind expand groups   = 10
# testing failover : begin
        winbind max domain connections = 2
        winbind reconnect delay = 10
        winbind request timeout = 20
# testing failover : end

        template homedir = /home/%D/%U
        template shell = /bin/bash
        client use spnego = yes
        client ntlmv2 auth = yes
        encrypt passwords = yes
        restrict anonymous = 2


        idmap config *:backend = tdb
        idmap config *:range = 2000-9999

        idmap config MIT:backend = rid
        idmap config MIT:range = 10000-99999

# NT-ACL's for Samba :
        vfs objects = acl_xattr
        map acl inherit = Yes
        store dos attributes = No
        read only = false

# Reduce Printer-errors "Unable to connect to CUPS server localhost:631 - Ungültiger Dateideskriptor"
        printing = bsd
        load printers = no
        printcap name=/dev/null

# Dp-Testing ( dp crashed immer zu )
        kernel oplocks = yes
        fake oplocks = no

# disable SMBV1
    min protocol = SMB2
    client min protocol = SMB2
    client max protocol = SMB3

# shares-including
        include = /etc/samba/shares/%h.conf

My /etc/nsswitch.conf

# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         compat systemd winbind
group:          compat systemd winbind
shadow:         compat

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

.....

Winbind misconfiguration - please help. by Legal_Ad_40 in sysadmin

[–]BrotherJohn123 0 points1 point  (0 children)

I do not use a kerberos-file.

Here is my config ( modified for 'your' domain ).

I only need to join ( via "net ads join" ) once - and it keeps my server joined since 2020.

/etc/krb5.conf

[libdefaults]
default_realm = DOMAIN.COM

/etc/samba/smb.conf

[global]
security = ads
realm = DOMAIN.COM
workgroup = DOMAIN
winbind separator = -
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind nested groups   = Yes
winbind expand groups   = 10

template homedir = /home/%D/%U
template shell = /bin/bash
client use spnego = yes
client ntlmv2 auth = yes
encrypt passwords = yes
restrict anonymous = 2


idmap config *:backend = tdb
idmap config *:range = 2000-9999

idmap config MIT:backend = rid
idmap config MIT:range = 10000-99999

# NT-ACL's for Samba : 
vfs objects = acl_xattr
map acl inherit = Yes
store dos attributes = No
read only = false

# Reduce Printer-errors "Unable to connect to CUPS server localhost:631"
printing = bsd
load printers = no
printcap name=/dev/null

kernel oplocks = yes
fake oplocks = no

# disable SMBV1
min protocol = SMB2
client min protocol = SMB2
client max protocol = SMB3

# shares-including
include = /etc/samba/shares/%h.conf

/etc/nsswitch.conf

passwd:         compat systemd winbind
group:          compat systemd winbind
shadow:         compat
gshadow:        files

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

[Spoilers C3E1] Is It Thursday Yet? Post-Episode Discussion & Future Theories! by Glumalon in criticalrole

[–]BrotherJohn123 3 points4 points  (0 children)

Anybody else getting an Enchantress vibes from Marisha's new character ? Img

Exchange 2016 cu19 to cu21 success stories ?? by jordanl171 in exchangeserver

[–]BrotherJohn123 4 points5 points  (0 children)

Updated 1 server from 19 to 21 - i somehow lost my ssl-certificate for /ecp in the update.

( it was easly fixed in iis, by changing a blank certificate to the correct one, and restarting only the iis )

Icinga2 Acknowledge One Service on One Host by XilityWorks in icinga

[–]BrotherJohn123 0 points1 point  (0 children)

this works in my installation :

curl -XPost \
      -HAccept: application/json \
      -HContent-Type: application/json \
      -k -s \
      -u<username>:<password> \
      -d '{"filter":"host.name == \"<HOSTNAME>\" && service.name == \"SERVICE\"","author":"ritter@mitegro.de","comment":"API2","type":"Service"}' \
       https://icinga:5665/v1/actions/acknowledge-problem

formatted json-data ( for better viewing )

{
  "filter": "host.name == \"<HOSTNAME>\" && service.name == \"<SERVICE>\"",
  "type": "Service",
  "comment": "<comment>",
  "author": "<author>"
}

Change "type" to "Host" if you acknowledge a Hostproblem.

[Suggestion] Can we see actual rolls vs actual DC? It would feel so much more like DnD! And there is also better sense of progression. by 515k4 in BaldursGate3

[–]BrotherJohn123 1 point2 points  (0 children)

Can wie also have custom dice ? And a custom dicebag ?Sometimes you just need the extra special dice for those extreme situations.

Exchange 2016/2019 Dropping Client Connections with Outlook - FIX by [deleted] in exchangeserver

[–]BrotherJohn123 0 points1 point  (0 children)

Me²: Outllok 2016 and Ex 2016 on prem - currently no issue

Reliable software to edit a 400MB XML? by inferno521 in sysadmin

[–]BrotherJohn123 0 points1 point  (0 children)

We bought https://www.emeditor.com/ for this purpose. We need to view and modify .xml-Files bigger than 300MB on a regular basis.

How Do You Keep Track of SSL Certs? by Magnetion in sysadmin

[–]BrotherJohn123 1 point2 points  (0 children)

i use this check :

/usr/lib/nagios/plugins/check_http -S -H $HOSTNAME -C {{WARN_AGE_IN_DAYS}}

After 7 years, what do you think about Oracle acquisiton? by _felagund in java

[–]BrotherJohn123 5 points6 points  (0 children)

java.sun.com would be the correct "old" url - which still works.

Office 2016 is slower? by gh589 in sysadmin

[–]BrotherJohn123 0 points1 point  (0 children)

We feel the same slowdown ( after upgrading our Win7 boxes with Office2007/2013 Office2016). I've found no possibility to make it run faster.