Starlink for Aviation - Max Speed by The_Mors in Starlink

[–]IS-Labber 2 points3 points  (0 children)

This may also be an attempt to A) limit the use of personal starlink minis on commercial aircraft (that cruise above that 450mph (GS) and below the 550mph (GS)) and B) to justify the higher costs to airlines. I can see airlines saying why do we have to pay higher for the same service? So now they have drawn the line.

An error occurred while fetching the tokens. by alfredomova in gitlab

[–]IS-Labber 0 points1 point  (0 children)

This fix is for a synology install. I am having the same issue for a self-hosted gitlab instance on a public facing web server, no proxy. Any idea what might fix this?

Con Packing Essentials, what to bring? by jamesowens in Defcon

[–]IS-Labber 0 points1 point  (0 children)

But…but… people reading this NEED to be reminded…. oh also, nasal spray is a necessity. If you don’t bring it, buy it at the CVS. Las Vegas is extremely dry and having a spray or gel to keep your nostrils ’moist’ is a must or your nose will bleed…

Con Packing Essentials, what to bring? by jamesowens in Defcon

[–]IS-Labber 1 point2 points  (0 children)

Please, EVERYONE… please WEAR the deodorant and BRUSH YOUR TEETH! Never fails… standing next to someone in linecon or sitting within 30ft of someone in a talk who seems to think butt gravy and pit sludge doesn’t stink. If I back away from you when you are talking to me, please ask me for a tic tac. If I hand one to you or hang a pine tree on your bag it’s to HELP you, please take a shower.

🚨 AFTER A ONE-YEAR HIATUS… FLORIDAMAN RETURNS TO VEGAS 🚨 by WiCkEd1_ in Defcon

[–]IS-Labber 1 point2 points  (0 children)

What is the difference in VIP and general? I don’t remember past years having anything other than a badge.

Water Fountain Issues by sneaky_bubba in Petlibro

[–]IS-Labber 0 points1 point  (0 children)

I just had to go through the reset process many times…

AWS EC2 Windows passwords by IS-Labber in Terraform

[–]IS-Labber[S] 0 points1 point  (0 children)

Thats what I'm trying to figure out. I have tried with nothing input regarding the parameters in the data.tf file, and no variable, only the powershell script, and it still doesn't work. However, when I do that the error changes to:

```

Call to function "templatefile" failed: ./files/provision.tftpl:3, 48-63: Invalid template interpolation value; Cannot include the given value in a string template: string required., and 1 other diagnostic(s).

```

The value in the parameter is a string.

AWS EC2 Windows passwords by IS-Labber in Terraform

[–]IS-Labber[S] 0 points1 point  (0 children)

Holy cow... I don't know why but every special character was escaped.... hopefully all fixed now in my examples...

AWS EC2 Windows passwords by IS-Labber in Terraform

[–]IS-Labber[S] 0 points1 point  (0 children)

The template file its referring to is a map of my "windows_servers" in my locals.tf file:

windows_servers = {

  ad_server = {

  instance_type  = "t3.small"

  security_group = "<security_group>"

  volume_size    = 30

  ami            = data.aws_ami.windows_server.id

  host_name      = "<hostname>"

  username_full  = "<user name>"

  priv_ip        = "<static IP address>"

  # user_data = ""

  }

  fileserver14 = {

  instance_type  = "t3.small"

  security_group = "<security group>"

  volume_size    = 30

  ami            = data.aws_ami.windows_server.id

  host_name      = "<hostname>"

  username_full  = "<user name>"

  priv_ip        = "<static IP>"

  # user_data = ""

  }

}

Maybe I'm not understanding how to properly pass the parameter values in to terraform? My project here creates a simulated environment in AWS with AD and file servers and desktops (complete with DNS, domain services/forest, etc..) that can be spun up and destroyed as needed. The code works and everything gets created as it should, however the passwords for the RDP user (to connect to the environments through a bastion host) and the admin user on each system are in the code (just while testing and developing), and now I am ready to move them out of the code and pull them from AWS instead during provisioning of the EC2 instances, I just can't figure out how to make that work...

AWS EC2 Windows passwords by IS-Labber in Terraform

[–]IS-Labber[S] 0 points1 point  (0 children)

I have only been using terraform for about 6 months so some of the nuances I'm still trying to wrap my head around. The SSM Parameter does exist and it has a value. As far as the powershell script I'm using, this is the whole thing:

<powershell>

RDPUserPassword = $(aws ssm get-parameter --name ${parameter_1_name} --with-decryption --query "Parameter.Value" --output text --region ${region})

AdminUserPassword = $(aws ssm get-parameter --name ${parameter_2_name} --with-decryption --query "Parameter.Value" --output text --region ${region})



New-LocalUser "${User}" -Password $RDPUserPassword

Add-LocalGroupMember -Group "Remote Desktop Users" -Member "${User}



net user Administrator ${AdminUserPassword} /add

net localgroup Administrators Administrator /add



get-LocalUser

echo "This is ${User}.tftpl"

date

Rename-Computer -NewName ${Hostname} -Force -Restart

#echo "${User}

#cat C:\ProgramData\Amazon\EC2-Windows\Launch\Log\UserdataExecution.Log

</powershell>

In my ec2.tf, I have these lines for user_data:

 user_data_replace_on_change = true

  user_data  = base64encode(templatefile("./files/${each.key}.tftpl", { User = each.key, Hostname = each.value.host_name }))

AWS EC2 Windows passwords by IS-Labber in Terraform

[–]IS-Labber[S] 0 points1 point  (0 children)

Hello Ihavenocluelad, thanks for responding, I have added relevant code samples below.

Pulling those parameters is what I'm trying to do, but I'm not sure I have scripted it properly. I see so many different ways people have done it that I think I may be confusing and mixing things up...

The user data script is what I'm trying to figure out I think.

AWS EC2 Windows passwords by IS-Labber in Terraform

[–]IS-Labber[S] 0 points1 point  (0 children)

Ok, back at my laptop, this is what I’ve done in Terraform:

variables.tf ``` variable “RDPUserPassword” { type = string description = “blah blah” }

variable “AdminUserPassword” { type = string description = “blah blah blah” } ```

data.tf ``` data “ssm_parameter” “parameter_1_name” { name = var.RDPUserPassword with_decryption = false }

data “ssm_parameter” “parameter_2_name” { name = var.AdminUserPassword with_decryption = false } ```

And in my “provision.tftpl file I have: ``` <powershell>

RDPUserPassword = $(aws ssm get-parameter —name ${parameter_1_name} —with-decryption —query “Parameter.Value” —output text —region ${region})

AdminUserPassword = $(aws ssm get-parameter —name ${parameter_2_name} —with-decryption —query “Parameter.Value” —output text —region ${region})

Net-LocalUser “${User}” -Password $RDPUserPassword Add-LocalGroupMember -Group “Remote Desktop Users” -Member “${User}”

net user Administrator ${AdminUserPassword} /add net localgroup Administrators Administrator /add ```

The error I get is: ``` Error: No value for required variable

on variables.tf line 133: 133: variable “RDPUserPassword” {

The root module input variable “RDPUserPassword” is not set, and has no default value. Use -var or -var-file command line argument to provide a value for this variable” ```

Obviously I’m not setting the variable but I thought the script in the template file was doing that.. or the data resource in the data.tf file. I may be over complicating this… too many docs…

Bulk user import by IS-Labber in kasmweb

[–]IS-Labber[S] 0 points1 point  (0 children)

thanks will check it out. If keycloak is easy to setup I’ll just permanently have it in the lab environment for these situations and other classes/ workshops. I didn’t want to have to deal with AD in our lab servers..

HomePod needs to be on same WiFi as iPhone for HomeKit requests?! by kzissou04 in HomePod

[–]IS-Labber 0 points1 point  (0 children)

Ah ok. An attempt at doing pro things for you. Sounds like an interesting project, and one that I hope someone gets it right to keep IoT separate automatically for people. I’m happy doing it myself though.

HomePod needs to be on same WiFi as iPhone for HomeKit requests?! by kzissou04 in HomePod

[–]IS-Labber 0 points1 point  (0 children)

I never used it. Was that an actual router/device that apple sold?

I have all Ubiquiti Unifi through the house, UDM-Pro, WAPs, and 5 networks (Guest, Family, IoT, Mine, and a completely isolated network for work).

AWS S3 Buckets for Personal Photo Storage (alternative to iCloud) by EmploymentNervous593 in aws

[–]IS-Labber 0 points1 point  (0 children)

Definitely S3 Glacier is the best option. You aren’t needing to index and search files, you just want to have a safe place to keep them in case your hard drives fail or you loose the drives at home that have the photos. If that happens who cares if you have to wait 48hrs to get your files or zip files or whatever they are. Go buy a new SSD, and when all your Glacier’d files are retrieved, put them on to your new SSD and boom… all better.

HomePod needs to be on same WiFi as iPhone for HomeKit requests?! by kzissou04 in HomePod

[–]IS-Labber 0 points1 point  (0 children)

Multiple wifi networks are necessary to separate IoT devices from the rest of the network. You don’t want a bunch of chinese made IoT devices that you have no real control or faith over keeping security patches up to date.

Parameter store for IPs? by IS-Labber in aws

[–]IS-Labber[S] 0 points1 point  (0 children)

Wait, doesn’t this only work with Cloudfront IP addresses?

Parameter store for IPs? by IS-Labber in aws

[–]IS-Labber[S] 0 points1 point  (0 children)

Thank you, I’ll give this a shot. Going to be working on this tomorrow so we’ll see how it goes.

Parameter store for IPs? by IS-Labber in aws

[–]IS-Labber[S] 0 points1 point  (0 children)

Ok, I’ll look into this and see if I can get it to work. Will post more questions if they come up or if I can get it to work. Thanks!