I’m writing this post to document my experience with SSH security keys, specifically when trying to make SSH keys resident on compatible FIDO2 tokens. What finally pushed me to write it was frustration. Almost every article, guide, or walkthrough I came across assumed you were using a YubiKey 5C. I understand why. They are excellent devices. ... Read More
Q's Place, Q's Space
When your hotspot is too clever for its own good
This one bit me while roaming in France and it is worth writing down because it masquerades as a network problem when it is actually the device trying to outsmart everyone involved. The device in question was a ZTE MU5001 5G hotspot on ID Mobile. In France the MU5001 happily attached to the Three partner network. Signal strength was fine. LTE ... Read More
APISCP – postfix issues
So a few days ago, the Q’s Place web server ran out of space; this was related to Kopia backup caching as it couldn’t reach the remote storage server but that’s for another day! Unfortunately because of this, when I cleared the Kopia cache up and freed the required space up my mail server failed. lipwig.qsplace.co.uk ... Read More
Joining an additional Zentyal server to your PDC
About a year ago I added a secondary domain controller to my AD setup, unfortunatly this died and I had to build a redeploy another. When joining this system to the PDC I saw the following issue in the zentyal.log “Unable to open tdb ‘/var/lib/samba/private/sam.ldb’: Permission denied”) Could not find machine account in ... Read More
Adding a USB GPS device to KStars
I’ve recently been trying out KStars on a RaspberryPi 3 (I intend on using something a little more powerful later on) to help reduce the reliance on running LOOOOOONG USB cables and instead swap to ethernet. One of the issues I also wanted to solve is removing the requirement of entering my long and lat co-ordinates everytime I move the ... Read More
Getting an OKI printer to scan to a domain shared folder
notes: Not working [2018/11/05 13:21:07.850805, 3] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user [PrintServer]\[]@[OFFICE-PRINTER] with the new password interface [2018/11/05 13:21:07.850836, 3] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: ... Read More
Fixing a zentyal install by reinstalling
Notes Backup config Reinstall Rinstall modules Restore config Issue with keytab and samba/DNS starting via web interface 2018/11/19 00:51:06 ERROR> GlobalImpl.pm:652 EBox::GlobalImpl::saveAllModules – Failed to save changes in module dns: root command kinit -k -t /var/lib/samba/private/dns.keytab dns-patrician failed. 2018/11/19 ... Read More
Thanks BareOS
Oh dear…. Sep 10, 2020 21:58:46.815 [0x7fe6d5396f80] ERROR - SQLITE3:(nil), 11, database corruption at line 65066 of [bf8c1b2b7a]Sep 10, 2020 21:58:46.815 [0x7fe6d5396f80] ERROR - SQLITE3:(nil), 11, statement aborts at 10: [select max(max(metadata_items.changed_at),max(metadata_items.resources_changed_at)) from metadata_items] database ... Read More
Why Proxmox and Docker are Perfect for Modern Sysadmins
I am an old school sysadmin. I still believe that operating systems should be installed with the minimum possible options, that services should only have the packages they actually need, and that separation matters. Historically, each service got its own machine. That approach was clean, predictable, and easy to debug. When something broke, ... Read More
Compiling Minio for Arm
I’ve been experimenting with Minio, which is a rather nifty S3 storage server; specifically I wanted to user a few minio servers in HA/cluster and erasure across them all. To do this requires 4-16 servers all running minio, as this is a test I decided to use Scaleway who provide hardware cloud computing for a very reasonable price. ... Read More