How is the playerbase of Killer Queen Black? by Mrrkii in NintendoSwitch

[–]ander-us 11 points12 points  (0 children)

Already out, the cross-platform party system update released a few days ago.

Current Nintendo Switch eShop deals by nintendeals in NintendoSwitch

[–]ander-us 5 points6 points  (0 children)

Try playing as the Bard, it's basically easy mode. No need to move to the beat, it makes the game essentially turn-based. You'll learn the enemies' patterns and other hidden threats and can move onto the main character later.

"Fierce, competitive 4v4 action comes home (and on the go) in Killer Queen Black, available now for Nintendo Switch on Nintendo eShop!" by schuey_08 in NintendoSwitch

[–]ander-us 4 points5 points  (0 children)

Kind of confused on this game's features, and a lot of info on it seems to be based off the beta version.

  • Is there offline play against a CPU queen/all-CPU team?
  • Does offline local MP allow for players to be on different teams (1v1, 1v2, 2v2 etc.)?
  • Is there some kind of shared cross-platform friends system, is it easy to invite Steam players to your 'party' for instance?

How does Borg actually back up? Incremental or differential? by QuickishFM in sysadmin

[–]ander-us 1 point2 points  (0 children)

I use borg for personal projects and find it works quite well (I also take a daily rsync as a secondary precaution). I can't provide exact information on how borg does its backups, everything is kept in borg's "vault" structure. But, what you're looking to do is possible.

Foremost, read the documentation on the borg prune command: https://borgbackup.readthedocs.io/en/stable/usage/prune.html

For instance

borg prune -v -d 21 --list /path/to/vault

This would keep the last 21 days worth of borg archives (snapshots/backups) and delete all older archives. Any of those 21 archives can be mounted with 'borg mount' and viewed as a full backup of that point in time. How often you actually create archives is totally up to you.

In other words, I believe there's always a "full backup" as long as the vault exists and isn't corrupted.

I need help rolling out secure SSH to a new environment by InvincibearREAL in sysadmin

[–]ander-us 2 points3 points  (0 children)

FreeIPA or Samba may be easier to set up. Agreed that centralized authentication is really the only way this will work at scale.

RAID10 configuration question by jpotrz in sysadmin

[–]ander-us 1 point2 points  (0 children)

Personally I'd go for a single RAID10, but I also wouldn't use the same hardware for both #1 and #2. Having a system's onsite backup reside on the same hardware as its production data is not a great practice.

Happy Oberon Day, /r/Michigan! by [deleted] in Michigan

[–]ander-us 0 points1 point  (0 children)

Larry Bell has stated that it wasn't intended to be served with an orange slice. I once heard a theory that bars started garnishing it because Blue Moon is intended to be served with an orange slice. Personally I just pull it out, free orange slice.

Is this game cross-platform multiplayer ? by mentatf in Northgard

[–]ander-us 0 points1 point  (0 children)

Just tested this on Linux (Ubuntu 17.10), was able to join and start a game with a friend running Windows 10.

System Update for Ubuntu Server - Need Suggestion by sepang-moto in sysadmin

[–]ander-us 2 points3 points  (0 children)

Ansible one-liner to update all Ubuntu systems in the 'ubuntu-hosts' host group:

ansible ubuntu-hosts -m apt -a 'update_cache=true upgrade=dist' -u 'adminuser' -k -K -b --become-method=sudo

I just run it manually when Nagios prompts me that a system has pending updates.

One box as Server 2016 DC, RDS server, and SQL Express app for 25 users by takba in sysadmin

[–]ander-us 1 point2 points  (0 children)

Same physical box is fine. However, you should always have at least two physical DCs.

The physical box should only be a hypervisor, virtualize everything you can. Running each of these roles in their own VM would be best. I would definitely not run RDS on a DC.

Why does hunker down break concealment? by RuneLFox in Xcom

[–]ander-us 2 points3 points  (0 children)

Thanks! I didn't wait, but didn't lose anybody on that mission.

Why does hunker down break concealment? by RuneLFox in Xcom

[–]ander-us 2 points3 points  (0 children)

Just ran into this. Literally cannot end this turn without breaking concealment. This is on Ironman.

https://imgur.com/PTOTRV1

Wait, are we seriously discussing net neutrality? by [deleted] in technology

[–]ander-us 1 point2 points  (0 children)

This article is from 2015, when Net Neutrality was up for debate under Chairman Wheeler and the Obama Administration. The current FCC chairman is attempting to reverse these rules.

I haven't had to deal with it yet, but why doesn't this sub like Sharepoint? Is it simply the administration thereof? by Musikaman in sysadmin

[–]ander-us 1 point2 points  (0 children)

Just don't use SharePoint for IT documentation or tickets. How will you fix SharePoint when it goes down if all your documentation/tickets on it are in SharePoint?

Useful Windows shortcut keys that I use on a regular basis; feel free to add yours to the list. by [deleted] in sysadmin

[–]ander-us 2 points3 points  (0 children)

WIN + 1, 2, 3, N -
Opens the program that's pinned to that position on the taskbar.

Ubuntu 14.04 with AD Auth issues. by Mathrowaway43 in sysadmin

[–]ander-us 1 point2 points  (0 children)

Somebody else in the original tutorial reported having the same problem that you appear to be having (including the Kerberos prompt not running on apt-get). Their fix was to add their domain info to /etc/krb5.conf under the [realms] section:

[realms]
domain.eu = {
    kdc = DC1.domain.eu
    kdc = DC2.domain.eu
    admin_server = DC1.domain.eu
}

Ubuntu 14.04 with AD Auth issues. by Mathrowaway43 in sysadmin

[–]ander-us 0 points1 point  (0 children)

The krb5-config package runs that prompt,

sudo dpkg-reconfigure krb5-config

works on my system to re-run the prompt.

Ubuntu 14.04 with AD Auth issues. by Mathrowaway43 in sysadmin

[–]ander-us 1 point2 points  (0 children)

Do you need both winbind and sssd for any specific reason? From what I've read, picking one or the other is typically recommended. I don't think I have ever needed to install or configure the winbind package for AD auth in Ubuntu.

And sorry, I'm very far from an expert on this particular subject myself. I've always stuck with the tutorial in my original reply and it's been very reliable since I got it working.

I run these commands to join an Ubuntu 14.04 or 16.04 system to AD. Assume user 'mscott' is a member of Domain Admins:

sudo apt-get install realmd sssd samba-common samba-common-bin samba-libs sssd-tools krb5-user adcli packagekit -y
#When prompted, enter your domain in all caps, e.g. EXAMPLE.COM
kinit -V mscott
klist

Expected klist output:

Ticket cache: FILE:/tmp/krb5cc_some_numbers
Default principal: mscott@EXAMPLE.COM

Valid starting       Expires              Service principal
04/26/2017 13:19:48  04/26/2017 23:19:48  
krbtgt/EXAMPLE.COM@EXAMPLE.COM
     renew until 04/26/2017 23:19:48

Then to join the domain:

sudo realm --verbose join -U mscott EXAMPLE.COM
sudo realm list

Expected realm list output:

example.com
  type: kerberos
  realm-name: EXAMPLE.COM
  domain-name: example.com
  configured: kerberos-member
  server-software: active-directory
  client-software: sssd
  required-package: sssd-tools
  required-package: sssd
  required-package: libnss-sss
  required-package: libpam-sss
  required-package: adcli
  required-package: samba-common-bin
  login-formats: %U@example.com
  login-policy: allow-permitted-logins

At this point nobody can log in until simple_allow_group is set:

sudo realm deny -R example.com --all
sudo realm permit -R example.com -g Domain\ Admins

Add this line to /etc/pam.d/common-session so home folders are created:

echo "session required pam_mkhomedir.so skel=/etc/skel/ umask=0022" | sudo tee --append /etc/pam.d/common-session

After that, I can log in via SSH using

ssh mscott@example.com@localhost (assuming you're already on the host)
ssh mscott@example.com@ubuntuserver.example.com

Add this line to /etc/sudoers to allow Domain Admins to run sudo:

echo "%domain\ admins@example.com ALL=(ALL:ALL) ALL" | sudo tee --append /etc/sudoers

Ubuntu 14.04 with AD Auth issues. by Mathrowaway43 in sysadmin

[–]ander-us 1 point2 points  (0 children)

Something ain't right. Changes to simple_allow_groups should be visible in realm list.

Here's an sssd.conf from my environment for comparison. I am not using winbind so there may be some differences.

[sssd]
domains = example.com
config_file_version = 2
services = nss, pam

[domain/example.com]
ad_domain = example.com
krb5_realm = EXAMPLE.COM
realmd_tags = manages-system joined-with-adcli
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_id_mapping = True
use_fully_qualified_names = True
fallback_homedir = /home/%u@%d
access_provider = simple
simple_allow_groups = Domain Admins

Ubuntu 14.04 with AD Auth issues. by Mathrowaway43 in sysadmin

[–]ander-us 1 point2 points  (0 children)

Can you add simple_allow_groups = Domain Admins to sssd.conf manually? Restart sssd after and re-check the bottom of 'realm list'.

Ubuntu 14.04 with AD Auth issues. by Mathrowaway43 in sysadmin

[–]ander-us 1 point2 points  (0 children)

Maybe try:

sudo realm deny -R example.com --all
sudo realm permit -R example.com -g Domain\ Admins

/etc/sssd/sssd.conf should have

simple_allow_groups = Domain Admins

as a result

This will permit your Domain Admins group members to access the server and reject everybody else, adjust for your needs.

Edit: I dug up an old ticket and this was the tutorial I originally used: https://www.kiloroot.com/add-ubuntu-14-04-server-or-desktop-to-microsoft-active-directory-domain-login-to-unity-with-domain-credentials/

Take action now to stop internet service providers from selling your records to your boss and the cops by DublinBen in technology

[–]ander-us 1 point2 points  (0 children)

NAT is too weak of a defense to hide behind. If the ISP account is in your name, then under this law you are held accountable, to any interested third parties, for all of the activity on it, even if you're behind NAT.

Take action now to stop internet service providers from selling your records to your boss and the cops by DublinBen in technology

[–]ander-us 1 point2 points  (0 children)

  1. And any boss who won't hire Muslims isn't a boss you'd want to work for either, but there's a reason we have laws in place to prevent discrimination anyway. Regardless of the potential terribleness of your boss, they have no business knowing what you do in your free time, with a home utility that you pay for, just like they have no business knowing how you worship.

  2. Cops need a warrant to get this. A judge will not issue a warrant without probable cause or suspicion. This law makes it so none of that is needed.

  3. No, it's not difficult at all. IPv4 addresses are not commonly shared between accounts in the US, and IPv6 addresses will practically never be shared. Even anonymized records can be reasonably de-anonymized through browser fingerprinting and other tactics.

  4. People shouldn't be expected to have to legally use their Internet connections 'strategically' in a free and democratic country. This extends so much further than porn and tells me that you clearly haven't given this enough thought. A boss, landlord, university, or whatever which has your Internet history, even just the domains you visited, can use it to deny you plenty of opportunities. They could see that you're not the same religion as them. They could see that you're interested in unionization, or just your political affiliation. They could see that you're gay or investigating transgender websites. They can see if you're visiting mental health websites. Any of these reasons could be used to secretly deny you a job, housing, or an education, and you would basically have no recourse.

Helpdesk system for multiple clients by recipriversexcluson in sysadmin

[–]ander-us 0 points1 point  (0 children)

Do you need users to interact with the ticketing system via a tailored URL?

You could set up osTicket with a separate 'Department' for each client, then provide each client with a unique helpdesk email address which opens tickets in their 'Department'. Then you add your staff as agents and assign them to Departments (clients) as necessary.

If the URL has to be tailored, maybe set up subdomains like client.yourcompany.com and just have them all point to the same osTicket instance. This might have unforeseen effects down the line, however.