I am planning buy a domain name lets called it foobar.net
Home devices will similarly be added to network called foobar.net
I plan to run a certificate authority to issue certificates to these devices.
Can I get a certificate issued by a Trusted Root Certificate so that all the certificate I issued from my CA have a chain of trust up to a Trusted Root CA
I had an iSCSI Datastore mounted and now am unable to remount it. There are 2 shares one of which is new and I want to copy the data from the old to the new. I have created a new datastore with the new shared however the original old one does not mount. Its only available to have a new datastore created against it. How can I force it to mount ?
Here is a look in to what I see:
[root@esxi-02:~] esxcfg-scsidevs --uids
Primary UID Other UID
mpx.vmhba32:C0:T0:L0 vml.01000000003443353331303031353130353236313138353434556c74726120
mpx.vmhba33:C0:T0:L0 vml.0005000000766d68626133333a303a30
mpx.vmhba33:C0:T0:L1 vml.0000010000766d68626133333a303a31
naa.55cd2e415081a400 vml.020000000055cd2e415081a400494e54454c20
naa.600140530f8f7a4dd969d4702d9397d2 vml.0200010000600140530f8f7a4dd969d4702d9397d2695343534920
naa.6001405ca26797ad544cd449cd8bead9 vml.02000100006001405ca26797ad544cd449cd8bead9695343534920
[root@esxi-02:~] esxcli storage core device world list -d naa.600140530f8f7a4dd969d4702d9397d2
[root@esxi-02:~] esxcli storage core device world list -d naa.6001405ca26797ad544cd449cd8bead9
Device World ID Open Count World Name
------------------------------------ -------- ---------- -------------------------
naa.6001405ca26797ad544cd449cd8bead9 2097193 1 idle0
naa.6001405ca26797ad544cd449cd8bead9 2097451 1 OCFlush
naa.6001405ca26797ad544cd449cd8bead9 2098353 1 res3HelperQueueVMFS6
naa.6001405ca26797ad544cd449cd8bead9 2098522 1 Vol3JournalExtendMgrWorld
naa.6001405ca26797ad544cd449cd8bead9 2099124 1 hostd
naa.6001405ca26797ad544cd449cd8bead9 2099806 1 hostd-worker
[root@esxi-02:~] esxcli iscsi adapter discovery rediscover -A vmhba64
Rediscovery started
[root@esxi-02:~]
I am currently building a lab environment which if all goes well will soom consist of a single Dell PowerEdge machine with a 10 GBE card connected to a 10 GBE Switch to which is connected a NAS with sufficient storage.
The PowerEdge has no local storage to speak of - only 2 SSD's which I am intended to put in the NAS as SSD Cache.
The PowerEdge will boot to ESXi 6.7U3 from USB thumb drive.
Wondering whether I need to:
a) Have at least a bit of (redundant) local storage for the VMX files of the VM's
b) Have local storage to hold the ESSXi logs. Rather reads and no writes so as to conserve as long as possible the thumb drive
c) If I do at some point get a second ESXi host where do the vmx files need to be to get vMotion configured easily
Any advice or best practices appreciated ... this is not my field exactly.
I have an ubuntu VM running on Hyper-V which connects to a VPN service. When the VM is connected to the VPN I am unable to ping / connect to the host machine. Samba mounts won't get mapped, ping packets time out. What can I check in order to fix this?
I have machines in a VLAN and I need to have them access all but not get out to the internet.
I have tried this (and lots of others options) but nothing is working.
I simply need to block internet access and allow all other access.
From how I understand this rule to work all access except WAN network should be Allowed.
I have a Subordinate CA running on Windows 2016 Server - its been issuing certs until recently where I am now only ever getting the error when trying to submit a CSR:
The request contains no certificate template information.
0x80094901 (-2146875391 CERTSRV_E_NO_CERT_TYPE)
Denied by Policy Module 0x90094801,
The request does not contain a certificate template extension of the CertificateTemplate request attribute
Any help appreciated.
EDIT:
When trying suggested: https://www.ntweekly.com/2016/08/12/ca-error-when-requesting-certificate-from-mmc-using-a-scr-file/
Error:
C:\Users\Administrator>certreq -submit -attrib "CertificateTemplate: Web Server" C:\Users\Administrator\Desktop\pfsense.txt
Active Directory Enrollment Policy
{8D5864DC-B4A0-44B3-8065-ECF209FA0A18}
ldap:
RequestId: 38
RequestId: "38"
Certificate not issued (Denied) Denied by Policy Module 0x80094800, The request was for a certificate template that is not supported by the Active Directory Certificate Services policy: Web Server.
The requested certificate template is not supported by this CA. 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE)
Certificate Request Processor: The requested certificate template is not supported by this CA. 0x80094800 (-2146875392 CERTSRV_E_UNSUPPORTED_CERT_TYPE)
Denied by Policy Module 0x80094800, The request was for a certificate template that is not supported by the Active Directory Certificate Services policy: Web Server.
Web Server is a listed Certificate Template under my CA Certificate Templates
I have a Windows Server 2012 R2 running SharePoint 2013 which I am trying to migrate from Hyper-V to KVM (qemu). I have converted the vhdx file to qcow2 format and copied it across to the KVM server (RHEL 7.3)
The Hyper-V VM was configured as Generation 2 and I have create a new VM in KVM with a UEFI firmware (OVMF).
When I boot up the machine goes in to Automatic Repair mode but will not boot. I can open the Cmd Prompt and to do so I need to authenticate with the local Administrator password.
I have run the following:
However the VM is unable to boot always enters Repair mode.
Any suggestions on what I might need to check or any 3rd party utilities I might be able to use or buy to help me easily get past this ?
If I login to command prompt I can run Diskpart / sel disk 0 / list vol to see :
Volume 0 D CDROM 0 B No Media
Volume 1 C NTFS Partition 126GB Healthy
Volume 2 E Recovery Partition 300MB Healthy Hidden
Volume 3 Partition 99MB Healthy Hidden
VM on KVM was configured as:
*Emulator:/usr/libexec/qemu-kvm *Firmware:UEFI x86_64: */usr/share/edk2.git/ovmf-x64/OVMF_CODE-pure-efi.fd *CPUs 8 *Memory 8192MB *IDE DISK- Disk Bus IDE *Storage format qcow2
What I have done so far:
6. When starting the new machine I see this:
Made a mistake and cleared all directories and files in root. I have a root session open still and have created:
# ls -la
total 36
dr-xr-x---. 2 root root 4096 Nov 24 11:09 .
dr-xr-xr-x. 22 root root 4096 Nov 16 14:23 ..
-rw------- 1 root root 12035 Nov 24 11:53 .bash_history
-rw-r--r-- 1 root root 18 Nov 24 11:08 .bash_logout
-rw-r--r-- 1 root root 184 Nov 24 11:06 .bash_profile
-rw-r--r-- 1 root root 481 Nov 24 11:07 .bashrc
-rw-r--r-- 1 root root 101 Nov 24 11:09 .cshrc
But when I try to login to "su -" from another user on a second putty session I get a segmentation fault. What could be causing this?
Recently stopped using FreeNas where I had set up a zfspool with 3 extents which were shared over iscsi.
I am now using these disks in a RHEL 7.2 server and want to reshare the existing zfspool using iscsi (as I had been doing with FreeNas)
I have installed and setup zfs which picked up the existing pool:
[root@sycamore ~]# zpool status
pool: STORAGE
state: ONLINE
status: Some supported features are not enabled on the pool. The pool can
still be used, but some features are unavailable.
action: Enable all features using 'zpool upgrade'. Once this is done,
the pool may no longer be accessible by software that does not support
the features. See zpool-features(5) for details.
scan: none requested
config:
NAME STATE READ WRITE CKSUM
STORAGE ONLINE 0 0 0
mirror-0 ONLINE 0 0 0
ata-ST2000DL003-9VT166_5YD2PYT4 ONLINE 0 0 0
ata-WDC_WD20EFRX-68AX9N0_WD-WMC300200707 ONLINE 0 0 0
mirror-1 ONLINE 0 0 0
ata-ST2000DL003-9VT166_6YD1FVPV ONLINE 0 0 0
ata-ST32000542AS_6XW1YDN4 ONLINE 0 0 0
errors: No known data errors
[root@sycamore ~]# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/rhel_sycamore-root00 215G 4.0G 211G 2% /
devtmpfs 24G 0 24G 0% /dev
tmpfs 24G 1.3M 24G 1% /dev/shm
tmpfs 24G 9.5M 24G 1% /run
tmpfs 24G 0 24G 0% /sys/fs/cgroup
/dev/sde1 247M 208M 39M 85% /boot
/dev/mapper/rhel_sycamore00-home 699G 193M 699G 1% /home
tmpfs 4.8G 16K 4.8G 1% /run/user/1000
STORAGE 3.6T 1.6T 2.0T 44% /STORAGE
STORAGE/.samba4 2.0T 128K 2.0T 1% /STORAGE/.samba4
I have also set up an iscsi target and portal but am not sure how to associate the existing extents to the target:
[root@sycamore STORAGE]# ls -l
total 1636815334
-rw-r--r--. 1 root root 1650878054400 Oct 18 17:56 extent
-rw-r--r--. 1 root root 1100585369600 Oct 18 19:31 extent2
-rw-r--r--. 1 root root 1100585369600 Oct 18 17:56 extent3
[root@sycamore STORAGE]# pwd
/STORAGE
[root@sycamore ~]# targetcli
targetcli shell version 2.1.fb41
Copyright 2011-2013 by Datera, Inc and others.
For help on commands, type 'help'.
/> ls
o- / ...........................................................,.......[...]
o- backstores ....................................................... [...]
| o- block ........................................... [Storage Objects: 0]
| o- fileio .......................................... [Storage Objects: 0]
| o- pscsi ........................................... [Storage Objects: 0]
| o- ramdisk ......................................... [Storage Objects: 0]
o- iscsi ..................................................... [Targets: 1]
| o- iqn.2003-01.org.linux-iscsi.sycamore.x8664:sn.253bc772ce44 . [TPGs: 1]
| o- tpg1 ........................................ [no-gen-acls, no-auth]
| o- acls ................................................... [ACLs: 0]
| o- luns ................................................... [LUNs: 0]
| o- portals ............................................. [Portals: 1]
| o- 192.168.2.10:3260 ......................................... [OK]
o- loopback .................................................. [Targets: 0]
/>
How can I complete what I need to do ?