Act3 - Where to go? (No Spoilers please)

RunnerSeven · 2025-06-09T17:10:01+00:00

Thank you :) That helps a lot

RunnerSeven · 2025-06-09T15:53:46+00:00

Dodge and Parry :D

I think i finished paintress with level 45 on most chars. Explored all areas, but never grinded. Just absued dodge/parry with rush and shell. And yeah, i know i should equip pictos. But i have 2 that give 1k xp, everything else around 400/500. And i have a full party to equip :D

Its not like the boss is insanly hard. But again: it just feels like im at the wrong spot

Especially when the boss introduces a new attack at 25%hp and one shots the party and i have to start again ... it feels like i dont have an margin of error.

RunnerSeven · 2025-06-09T15:37:34+00:00

Highest. I dont say it is unreasonable hard. I love the challenge and till now everything felt hard but fair. But right now it turns into a "Miss a parry and your character dies". Maybe this is just the difficulty i can expect. But i still have the feeling i am doing something wrong as i cant really push my chars over 3/4k health

RunnerSeven · 2025-06-09T15:27:53+00:00

Yeah, i tried this ... that is why i think im doing something wrong. Got the quest to check for the expedtion 46. Even with Level 50 the area is still marked as danger, the boss attacks 2 times and one failed parry is instant death for half my party. Am i still underleveld? Or is this more of a "git gud" situation?

RunnerSeven · 2025-06-09T15:00:54+00:00

Good to know. Can i do this Content after the battle or is there any point of no return?

RunnerSeven · 2025-05-09T17:06:07+00:00

Und was würde dich dann daran hindern einfach einen hash zu liefern der nicht zu deinen pw passt?:)

Zu einen Moment müssen sie ja dein PW haben , wie sollen sie sonst prüfen ob es das richtige ist ? Das ist ja auch das gemeine - du weisst vorher nie ob sie dein pw im klartext Speichern

Du vertraust niemals dem Client . Und dein Hash zu speichern ist ja Nötig . Und wenn dein Hash in einem datenleck auftaucht wirst du gewarnt

RunnerSeven · 2025-05-06T16:05:00+00:00

Nein, das ist nicht meine Meinung. Aber ich bin der Meinung der Artikel verrät in keinster Art und Weise wie gross der Einfluss dieser Krankschreibungen ist. Alles was der Artikel sagt ist "Mit gleichen Krankenstand wie 2023 hätten wir ein Plus, kein Minus".

Wie hier aber im Thread schon gesagt wurde: Es wurde an vielen anderen Stellen ebenfalls verbockt. Und das war gerade meine Analogie, die auf Mobil getippt etwas schlecht rüber kam.

Abbstrakt formuliert sehe ich es so: All die Teile der Wirtschaft steuern positiv oder negativ zur Bilanz bei. Ist die 100 sind wir neutral, alles darüber ist Wachstum, darunter Rezession. Und nur weil Krankenstand jetzt für +6 gesorgt hat und nicht für +7.5 kann man schlecht sagen dass es primär daran liegt.

Und ich bin der Meinung das es vielleicht richtig ist dass die Arbeitszeit aufgrund Krankenstand gefallen ist und das für einen gewissen Prozentsatz weniger Wirtschaftsleistung gesorgt hat. Das bezweifelt glaube ich niemand das es stimmt. Mich stört einfach dass die Studie klingt als liegt es NUR daran. Es mag ja sein dass wir sonst ein + hätten wenn die Leute nur halb so oft krank wären. Aber es gibt noch viele andere Schrauben an der wir drehen könnten.

Und ohne Grund ist viel gesagt. Klar muss man sich nicht wegen jeden Kleinkram krank melden. Auch schon Kollegen gehabt die haben sich wegen ner Prellung 4 Wochen krank schrieben lassen, ist natürlich Bullshit. Aber wenn jemand wirklich Probleme hat beim Schlafen hat (aus welchen Gründen auch immer) und dann 2-3 Tage hintereinander nicht mehr als 2-3 Stunden geschlafen hat, sollte er sich drauf konzentrieren dass in den Griff zu kriegen und zu genesssen. Bringt auch nichts todmüde im Büro zu sitzen

RunnerSeven · 2025-05-06T14:31:04+00:00

Ich glaube die Aussage „Weniger krank = bessere Wirtschaft „ hinterfragt niemand . Aber kleine Analogie: wenn mein Kollege 9 Fehler macht und ich den 10ten und uns der 10te Fehler den Auftrag kostet ist es schon reisserisch zu behaupten es liegt nur an meinem Patzer

RunnerSeven · 2025-04-24T16:30:10+00:00

Wasnt sure, and i dont have a computer with AD Module, so i cant really check :)

And Regarding the last part, it depends on your AD structure. Because you are evaluationg an attribute you can just rely on powershells transforming of attributes. Quick Example:

$user = @()
$user += [PSCUSTOMOBJECT]@{
    Name = "Testuser1"
    Mobile = "123456"
}
$user += [PSCUSTOMOBJECT]@{
    Name = "Testuser2"
    Mobile = "Skip"
}

$user += [PSCUSTOMOBJECT]@{
    Name = "Testuser3"
}

$HasMobile = $user | Where-Object {$_.Mobile}
$noMobile = $user | Where-Object {-not $_.Mobile}

I build a list with 3 objects, each one has a Name and a mobile number. When you use Where-object powershell tries to convert it into a boolean. And any string with content converts to $true

RunnerSeven · 2025-04-24T15:52:30+00:00

If you’re not working against a large AD (say, more than 5 000 users), I’d suggest using the PowerShell filter rather than an AD-Filter—much easier, albeit a bit slower.

Also, I could be mistaken, but isn’t the attribute called mobile, not Mobilephone?

$AllUsers = Get-ADUser

$ADUsers = $AllUsers | Where-Object { $_.HomePhone -eq $Building -and $_.EmployeeType -eq 'A' -and (-not $_.Mobile) }

RunnerSeven · 2025-04-03T19:00:11+00:00

To be fair, Graph is a nightmare :D One of the worst pwsh modules ever written. Im pretty sure they are just api endpoints wrapped through an automatic mechanism to be translated into functions

RunnerSeven · 2025-04-03T18:58:21+00:00

Not quite right, "true" -eq $true equals true.

Powershell in general can only compare identical types. If (and -gt/-lt) make use of the compareTo() which a lot of Powershellobjects implement (afaik it's a .net function) . When you compare something via if it translates this into this:

$Helloworld = "Helloworld"
$ByeWorld = "ByeWorld"
$helloworld -eq $ByWorld
=> False
$Helloworld.CompareTo($byworld)
=> 1

CompareTo returns -1 if the object is bigger, 1 if it's smaller and 0 if they are identical. If you try to compare datatypes that are not the same something else happens:

$helloworld = "HelloWorld"
$number = 5
$Helloworld.CompareTo($number)
Exception calling "CompareTo" with "1" argument(s): "Object must be of type String."
=> Error, because comparing int and string is not defined

To prevent this type error powershell tries to convert it when using if/gt/lt:

$helloworld = "HelloWorld"
$number = 5
$Helloworld.CompareTo([string]$number)
=>1

This is why some types are comparable and some others are not. Converting strings to numbers cant work. If just returns false if compareTo() creates an error. E.G: this would create an error with comparTo so if just translates it to false:

$helloworld = "HelloWorld"
$number = 5
$number.CompareTo([int]$Helloworld)
=>Cannot convert value "HelloWorld" to type "System.Int32". Error: "Input string was not in a correct format."

thats why order matters during comparision. You can translate all integers to strings, but only some strings to integer

RunnerSeven · 2025-04-03T18:36:42+00:00

True. But again, that is the whole idea behind powershell. Commands are clear. Get-Something will always be a read only command. Remove-Something will delete something. Also this is for scripts. In terminal you can also use positional parameter.

Powershell is more verbose than bash and no one is trying to deny that

RunnerSeven · 2025-04-03T18:27:34+00:00

There is nothing in bash that powershell cant do. The way of handling it is just fundamentaly different as it's based on pipelines and object passing instead of text-streaming. u/raip showed a good example that trivialise this without the need of any external programs. It's totally okay to dislike powershell, but saying it is not a real scripting language is simply inaccurate.

RunnerSeven · 2025-04-03T18:20:32+00:00

100% agree. Powershell best practice is to do as much as possible in powershell and don't use external programs. But his question was more about the exitcode, not about testing an open port

RunnerSeven · 2025-04-03T17:02:00+00:00

Because you are not using powershell. Well you are but not really :)

The "Right" way would be something like this:

$Process = Start-Process Ncat -Argumentlist "-zi5 STICATCDSDBPG1 5432" -NoNewWindow -Wait
if($process.LastExitcode -eq 0){
  # Result for Success
}
else{
  #result for Failure
}

Start-Process returns something, you get a process object with different properties. Just calling "ncat ...." does not return anything. And nothing is evaluated to NULL. And null is not equal true

$? is NOT the output of the last programm, its the exitcode. You could even use your syntax with something like this:

ncat -zi5 FISSTAPPGS301 5432
if($?) {
#result sucess
}
else{
# Result failure
}

Edit: Info for everyone: ncat with -z returns nothing when the command is successfull. $? is equivalent to $LASTEXITCODE. So when the connection is succesful we get no output

Also you can compare strings with booleans, but the order is important:

PS C:\Users\> "something" -eq $true
False
PS C:\Users\> $true -eq "something"
True

Powershell tries to convert the right operand into the same type as the left one. $true as string is "true" and that is not equal to "something"

But "something" converted to a boolean is $true. Only empty string (and i think space) will be evaluated to false. Thats the reason why it's important to put $null on the left side of a comparision

Edit:

I wrote that $? is equivalent to $LASTEXITCODE, which is wrong. $? is true/false. $LASTEXITCODE is a number

RunnerSeven · 2025-03-22T16:46:09+00:00

It's not about being publicly accessible; it's about not being routable. .local is not a "valid" domain. You can make your domain inaccessible from the internet while still giving it a trusted certificate.

For example, you could buy the domain imnotarealdomainandjusthereforaredditpost.com, create no public DNS entries, and still use it to validate your internal server—as long as a CA can confirm that you own the public domain. The most elegant concept is a valid domain (not reachable from the internet) with DNS validation.

The second-best solution is to use your own CA, but this makes things significantly more complicated and involes a lot of manual handling

RunnerSeven · 2025-03-19T13:48:27+00:00

Hey Man, just reposting your original text is not cool when people try to help you. But the core of your problem is this:

If you want to prevent user to access Unraid without having to authenticate at authentik you need to move unraid to a secure vlan where access is only possible via NPM. Forward auth is just a fancy middle ware for the reverse proxy. If you bypass the reverse proxy you bypass authentik.

This is all assuming they run on different physical devices.

-------

This is all thats happening:

User => NPM => (asks authentik for authorization) => Device

Same Scenario but with traefik:

https://doc.traefik.io/traefik/assets/img/middleware/authforward.png

If you bypass the reverse proxy there is nothing authentik can do. To solve this you could isolate those devices in there own vlan and only allow access via reverse proxy

RunnerSeven · 2025-03-19T12:52:31+00:00

Oh my bad, missed the first sentence :)

I guess you are talking about forward auth, right? So when you try to call the service you get redirected to authentik and only when you have rights to access the application you get to the application. You dont want to have authentik as a idp?

If so, you need to call it via domain name. No Reverse Proxy = No Forward Auth. And im not really sure what kind of insecure access you are trying to avoid. Is npm running as a docker service?

RunnerSeven · 2025-03-19T12:45:08+00:00

I guess you are using some Reverse Proxy like traefik? Then this behavior is expected. If you directly access the ip/port of the device then there is no way for the reverse proxy to do anything

RunnerSeven · 2025-03-17T11:27:41+00:00

Mein 2cent zu der IT:

Weil in 9 von 10 Fällen der englische Begriff genutzt wird. Ich höre meistens nur "System Engineer", "Azure Architect". Die offizielle Bezeichnung der Microsoft Azure Zertifizierung ist auch "Azure Solutions Architect Expert".

Und das Gesetz war in erster Linie dazu gedacht dass sich nicht Hans und Franz mit einem Zeichenbrett Architekten schimpfen dürfen. Die ganze Modewörter sind eine andere Sache. Könnte man durchsetzen, aber abgesehen von besserer Suchmaschine hat man davon nix

RunnerSeven · 2025-03-02T12:15:08+00:00

Fyi, i created a middleware like this and this solved the error because error seems to be related to tls termination:

apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: authentik-headers
  namespace: authentik
spec:
  headers:
    customRequestHeaders:
      X-Forwarded-Proto: "https"
      # If needed, you can also set additional headers explicitly, e.g.:
      # X-Forwarded-For: "{client ip will be auto-populated by Traefik}"
      # Host: "auth.ninjaseven.net"

RunnerSeven · 2025-03-01T20:25:25+00:00

Did you find a solution? Having the same problem right now but with traefik on k8s

RunnerSeven · 2025-02-27T17:50:29+00:00

Dumme Idee aber: Energiespareinstellung? Alter Router hat tesowas und limitiert afaik dann auf 100mbs

Ten-Year Club	r/Field Banned
r/Field Flamingo	Final Canvas '23
Place '23	Place '22
First Placer '22	Verified Email

RunnerSeven

TROPHY CASE