Matt's questions

I'm having a little bit of a hard to trying to decipher what the best approach is when creating configurations based off Powershell DSC.

It appears that partial configurations are meant to allow multiple people/teams create configurations for their own policies/configurations. This makes sense, but I have seen people taking this approach to create and essentially create modules to structure their code so it's not so monolithic. This is a valid approach?

As far as as composite resources and roles, it seems like maybe you would use these two implementation methods together. You could build a composite resource to say build a web server and then assign a role to a node to apply the web server resource. Would this be the correct approach?

Is there some kind of scaffolding that is common to build out something like this?

I've looked at https://github.com/Microsoft/DscScaffolding and https://github.com/gaelcolas/DscInfraSample, but as far as I can tell, the DSCScaffolding repo doesn't use roles and the DscInfraSample seems like it uses roles, but I couldn't really get it to build, so wasn't able to really to see what it's actually doing.

My main question is, what is the best way to approach Powershell DSC and how do you best organize your configurations for the real world so that it is maintainable?

I have a glusterfs volume. I can write files to it just fine, but when I am trying to create a pipe, it gives me permission denied.

[2017-09-30 15:57:57.148455] E [MSGID: 114031] [client-rpc-fops.c:237:client3_3_mknod_cbk] 0-data-client-2: remote operation failed. Path: /gitlab/data/test/test.socket [Permission denied]
[2017-09-30 15:57:57.148712] W [fuse-bridge.c:471:fuse_entry_cbk] 0-glusterfs-fuse: 354460: MKNOD() /gitlab/data/test/test.socket => -1 (Permission denied)

/etc/fstab:

gluster01:/data /srv/gfs_data glusterfs rw,allow_other,default_permissions,_netdev 0 0

EDIT:

So after disabling and looking at the selinux logs for both bricks, it is blocking it. What context should this be added under?

SELinux logs

type=AVC msg=audit(1506943186.948:4039): avc:  denied  { create } for  pid=11312 comm="glusteriotwr1" name="test" scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:svirt_sandbox_file_t:s0 tclass=fifo_file
type=SYSCALL msg=audit(1506943186.948:4039): arch=c000003e syscall=133 success=no exit=-13 a0=7ff275a6c520 a1=11a4 a2=0 a3=2 items=0 ppid=1 pid=11312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="glusteriotwr1" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null)

Solved:

chcon -Rt glusterd_brick_t /bricks/brick1

Is there a way to view what settings are set for a connector at runtime?

For instance, I want to see what maxConnections is set to.

Pretty much verify all these settings: https://tomcat.apache.org/tomcat-7.0-doc/config/http.html

Thanks!

HAProxy Config:

frontend https-proxy
      bind *:443 ssl crt /path/to/certs
      default_backend web

backend web
      balance roundrobin
      option httpchk
      option forwardfor
      option httpclose

      server web-srv1 192.168.1.1:80 check inter 5000
      server web-srv2 192.168.1.2:80 check inter 5000

Apache Conf:

<VirtualHost *:443>
    ServerName example.com
    DocumentRoot /var/www/example.com
</VirtualHost>

<VirtualHost *:443>
    ServerName test.example.com
    DocumentRoot /var/www/example.com
</VirtualHost>

Shared IP - 192.168.1.3

example.com goes to 192.168.1.3

test.example.com goes to 192.168.1.1

Going to test.example.com and bypassing the proxy, the virtual host works just fine.

Going through the proxy at example.com, for some reason it goes to the default instance in the conf files. (The SSL.conf file is included in the apache conf as well)

Not sure why this is occurring, maybe it's an apache configuration.

When running a task on MDT 2012, it fails to auto login and finish it's processes. I verified that the registry is not updated to autologin. I also verified that the info was correct the unattend.xml. Any reason as to what would cause this. Why wouldn't it modify the registry to auto login?

Thanks

During the capture process from the MDT sequence, it will inject drivers into the sysprepped image, why would you need that?

I know you can prevent it from doing that simply by unchecking it, but why would you need to inject the drivers into the sysprepped image? I'm curious if I even need to do it or if I should do it. What scenario would you need an image with the injected drivers?

Thanks!

I'm trying to install an image to a machine. I keep getting storage driver errors where it can't find the hard drives. That's fine, so I went and got the drivers and added them. I regenerated the boot image completely. Do I need to do another sysprep or should I be able to get by with just injecting the drivers into the boot image (i.e., regenerating the boot image)?

I also checked the inf file to make sure the proper device ID shows up in there compared to the RAID device ID and it's in there. Still doesn't seem to recognize it though.

I have some users in a group that look at the audits. They are in a group I created. This group should have permissions to view the security audits. They can see them, but the descriptions are missing. If I log in as admin, it looks ok. So it's some type of permission issue. I already checked the HKLM\System\CurrentControlSet\Services\Eventlog\Security permissions and it has Full Control from Administrators and Full Control for SYSTEM. The Local Security setting is set, so they can manage and view the security audits as well.

These are standalone machines and there are other machines like these that do work fine. The only difference would be MSSQL is installed on the ones that DO NOT work.

Any ideas? Am I missing something?

I'm trying to use WDS multicasting to deploy an image. For some reason I can't get it to connect. Anyone know any guides on how to do this because I followed and few and none are working.

I setup a multicast session from the WDS server.

Then i boot into Windows PE from the machine I want to pull the download from. I have the utility wdsmcast on that cd and i run it. Put in all the information and it seems right, but i get Transfer Failed. I tried changing a few things, but it never seems to want to download. Not sure if I'm using it correctly or what.

Thanks

Is it possible to vpn into one machine and then vpn to another. Basically i want to be able to do something like

[Me]-----[Node1]-----[Node2]

where normally it would be:

[Me]-----[Node2]

So, i want Node2 to think i am Node1. Is this possible? Is there a way to do this? Reason being is i want to get from my computer to Node2, where Node2 has ip address filtering. Is there a way to do this at all, even if it's not vpn from [Me] to [Node1]. Hope that makes sense.