IT

Short tutorial how to enable 2FA/OTP (ex. Google Authenticator) when logging in via SSH or in my case mainly ThinLinc Terminal Sessions. If you haven’t set up NTP or some other time sync now is the “time”, since OTP is dependent on correct clocks. 1. Install google-authenticator sudo apt install libpam-google-authenticator 2. Configure sshd Edit file /etc/ssh/sshd_config ... # Change to yes to enable challenge-response passwords (beware issues with # some PAM modules and threads) KbdInteractiveAuthentication yes ... 3. Configure PAM Edit the file /etc/pam.d/common-auth and add these two lines at the bottom. ...

This short “guide” starts after a fairly default Ubuntu 20.04 LTS (server/headless) is setup. There are a lot of good guides but all the one’s I looked at missed one step that took me hours to figure out. Start by adding repo and key for future updates to work with apt. echo deb https://downloads.plex.tv/repo/deb public main | sudo tee /etc/apt/sources.list.d/plexmediaserver.list curl https://downloads.plex.tv/plex-keys/PlexSign.key | sudo apt-key add - Download the latest .deb, check https://plex.tv to get correct url. ...

Everyone needs a monitor system, right? Disclaimer or Scope/Intention This is how I did it. Short guide, more or less for myself so I won’t forget. If Linux/Ubuntu/Apache/SSL-certs is new territory for you this isn’t the guide you were looking for, sorry. Some steps and detailed explanations are omitted. Also never run cmds you don’t trust and know what they do. What I used Machine: VM in Vmware vSphere, 2vCPU, 4GB RAM, 32GB disk. OS: Ubuntu Server 20.04 LTS Free OpenSource (https://ubuntu.com/download/server) WebApp: Zabbix 6.0 Free OpenSource (https://zabbix.com) SSL cert: I used Let’s Encrypt for my cert and key. ...

The problem is that VMWare by default doesn’t provide information needed by udev to generate /dev/disk/by-id entries. Apart from ESX, VMWare Workstation is also affected. The resolution is to put disk.EnableUUID = "TRUE" to the virtual machine definition, i.e. into the *.vmx file or via Edit Settings -> Options tab -> General -> Configuration Parameters in ESX UI. After rebooting VM with this parameter set, the disk are visible in /dev/disk/by-id and multipathd doesn’t complain anymore. I had to power off the VM, and then go to Edit Settings -> VM Options -> Advanced -> EDIT CONFIGURATION.

Set TimeZone: sudo timedatectl set-timezone Europe/Stockholm Set NTP. Edit timesyncd.conf: sudo nano /etc/systemd/timesyncd.conf Add NTP-server(s): NTP=ntp.se Close and Save, Ctrl+X, Y, Enter. Restart service, check status: sudo systemctl restart systemd-timesyncd sudo systemctl status systemd-timesyncd

Send logs to a central syslog-server. SSH to the machine or directly at terminal. Install rsyslog sudo apt install rsyslog sudo systemctl start rsyslog Edit conf sudo nano /etc/rsyslog.conf Add this text (*.* @@ip/fqdn:portnr) *.* @@192.168.1.10:1514 Restart service sudo systemctl restart rsyslog

Everyone needs a ticket system, right? Disclaimer or Scope/Intention This is how I did it. Short guide, more or less for myself so I won’t forget. If Linux/Ubuntu/Apache/SSL-certs is new territory for you this isn’t the guide you were looking for, sorry. Some steps and detailed explanations are omitted. Also never run cmds you don’t trust and know what they do. What I used Machine: VM in Vmware vSphere, 1vCPU, 2GB RAM, 40GB disk. OS: Ubuntu Server 20.04 LTS Free OpenSource (https://ubuntu.com/download/server) WebApp: osTicket 1.15.4 Free OpenSource (https://osticket.com/download/) SSL cert: I used Let’s Encrypt for my cert and key. ...

Installed 12 ”drops” in the apartment. Took some time since this isn’t what I usually do. But pleasantly surprised that all passes test except one keystone where I switched to of the cables. There will be more runs that needs punching. But that’s for another day.

Enabled https on tillnet.se and it was alot harder then I thought. Didn’t think that it should be but since I use Cloudflare and proxy it added a level I didn’t think about. Finally I started to realize what was going on and turned to Google for help. Found this guide that was exactly what I needed: https://devanswers.co/configure-cloudflare-origin-ca-apache/ So now all traffic to and from the website is secured. And I gained a little bit more knowledge.

Experimenting and updating my Server 2019 “skills”. We been running O365 and Azure for some time now, but haven’t used OnPrem Domain Controllers in my homelab. To get some hands on training with the new server version I set up two DCs and three other servers. Servers for print, NVR and backups. Synced the forest with Azure and enabled SSO. Everything worked pretty smoothly with some problems requiring a little bit of reading through Microsoft’s Docs. ...