ACME Clients and SSL

So I've started seeing that SSL Lifespan is shortening - going down to eventually supposed to be every 47 days.

We're a small shop, but we have a lot of different services. I've been doing my best when I have free time to catalog everything that has an SSL Cert, but I know I'm missing stuff.

I've seen a bit about ACME Clients and such; and from what I've heard it's great. They handle rotating the certs and all.

But something for me just isn't clicking. For instance, we have a lot of large scale copiers, ala your Ricoh or Lexmark or Brother. We have those locked down with SSL Certs, but we have to manually push those up to it.

Now as these are internal services that aren't externally facing, I don't see no reason why we can't self-issue those certs; but currently our CTO likes to utilize a paid for Wildcard for all our internal stuff.

I keep quite busy so haven't had too much time to really dig in on researching, but I know the time bomb is ticking.

So for those who are managing SSL Certs and all, and potentially utilizing ACME Clients and such, what should I expect and whats the general gist of what my workflow should be?

reddit.com
u/Arnoc_ — 1 day ago

Sharepoint and Co-Pilot - WTH?!

So I don't manage our Office365 instance that much. One of our stakeholders needs access to a particular share, however. We have an internal account for them setup and they use that to access it.

They report an issue with accessing it.

So I'm going into SharePoint to try to view the site that's shared with them, and trying to verify what email address is associated with the account that it is shared to, to verify it is the correct account.

I find the user's name, click it.... and get redirected to Copilot. Where it shows me absolutely NOTHING relevant to what I want to find out about the user profile. The literal last tab it gives me, Organization, shows the user and redirects me... back to copilot.

Frustrating when already have several complaints from stakeholders about it not working and never being contacted when.... they have never contacted me nor given me contact information, yet repeatedly claim they've reached out (I've pulled logs to show that they haven't to my management...) / They're there with my management complaining to them about it but they also don't take care of it there and then either...

So just a small rant. Microsoft doing what Microsoft does...

===

To make this a little more constructive, however, does anyone know how in SharePoint to see who a page / site has been shared with, and what email is associated with that person?

reddit.com
u/Arnoc_ — 8 days ago

Glasses Recommendation

These are my current pair of glasses. Not quite sure they fit my face or not. Any suggestions for what kind to look for?

u/Arnoc_ — 16 days ago

Thinning Hair - Keep or shave?

So I'm torn on what to do with my hair. It's thinning, and I typically don't wear hats. As I'm spending more time outdoors, I don't want to risk sun burns on my scalp.

At the same time, I think I look best with a head of hair. And give my height, most people can't see the top of my head. Then given the light, as you can see the difference of between pictures 3 and 4, it can look a lot fuller or thinner.

I'm not really keen on trying any medicine to restore hair; I've lived through enough health issues and a lot of the common symptoms I've read on them have been lifelong symptoms I've dealt with and finally over so I'm not keen to revisit those.

I appreciate any advice! Thanks

u/Arnoc_ — 21 days ago

College Football Tech Support - What to Wear?

So this year I've got a side gig to work as tech support at a few local college football games. Games are going to run late August to Mid October (Short season, and after mid October it's all away games).

There's a chance for me to have to be on field side and running back and forth between places, so chance to be on camera. I want to look better put together than I usually do casually (Just whatever t-shirt and pair of jeans), but don't need to be full suit and tie either, especially as I'll be running around.

I was never big into sports growing up (I wasn't allowed to play any due to health issues, so never became invested in them), so not too sure on what the sort of "norm" wear is; I know I see clips from NFL and all and it's mostly coaches in hoodies and such for their team or just t's / polos with team logo and all.

I'm a huskier individual; currently losing some weight but still on the larger side. And as I'm getting older now my hairs starting to thin on top; it's not thin enough to just go bald, but thin enough that sunburn is a possibility, and still enough that trying to rub sunscreen on it isn't a possibility either. So I was thinking of getting some sort of hat to wear as well; I'd like something with some neck protection as well, and plan to have plenty of sunscreen (Especially as most games start at noon which means we're working from roughly 10:00am - 4:00pm outdoors). I'll settle for a baseball cap.

And just to tie it into the team, their colors are Green, Gray, White, and Yellow.

Thanks in advance for any advice!

reddit.com
u/Arnoc_ — 22 days ago
▲ 299 r/sysadmin

My Day Finally Arrived - My first Time Bringing the Systems Down

I've been working at my job, starting as a Help Desk Tech, all the way up to System Admin now for about 16 years.

Today I finally made my first ever mistake that brought production hard down.

Was working on an unrelated but related system with a Vendor for an upgrade to that system. Part of it required me to access *THE* primary server for our workplace. Unfortunately for me, the names of the main server and this server for this vendor are VERY Similar.

We needed to do a VMWare snapshot rollback after we broke something. I switched to the VMWare window, read the name of the selected server, verified it twice, then reverted to the latest snapshot. Went back to my window which had the server I was working on open, go to try to sign in... domain relationship failure.

I look up at the name of the server in the upper left hand corner..... cue the swearing. Rolled back this primary server to over a year previous. I immediately tell the vendor we need to end the call, as know what the fix is now anyways for the issue we were having. Tell my boss immediately that things are down, contact the other people at work who need to know about being down, discuss our messaging options, and while doing that, started getting things restored from backup.

The timing wasn't great, but wasn't bad either. We did lose data, but it was minimal.

We are back up now, and while I'm still personally upset, I'm relieved that the damage done was minimal (Only a 3.5 hour outage of hard down to fully operational).

But yeah, my first time bringing our systems fully down. Here's to another 15+ years before the next one.

reddit.com
u/Arnoc_ — 24 days ago
▲ 13 r/MTB

Mountain Biking Shoes - Anyone Tried Lems?

So I'm big into being barefoot; I'm sans shoes whenever possible. Part of that is simply becacuse I enjoy it, and part of that is that my feet are long and wide.

My current shoes I wear to MTB are my Five Tens. They're great, except I'm in a size 15 and they're still too narrow for me. Fine for about an hour or two on the bike, but if I have to do any walking or such in them or go for longer, they just start chewing up my feet.

My main pair of shoes (Lems Primal Eco) are starting to wear so thin that they're developing a small hole in them. Looking at their site, I was surprised to see they have a new Mountain Biking shoe. Been reading through some of their reviews and all, but always take those with a grain of salt.

Anyone riding with a pair? Pros and Cons?

reddit.com
u/Arnoc_ — 25 days ago

Renovating the Backyard

I've got this area of my backyard. It's been unused in recent years due to just combination of heat in the summer and just busy with other things around the house.

I love to walk around barefoot. Hate trying to mow around everything and all. The years continues on to the left. I want to build an on ground deck for maybe either mobile pool table or maybe an outdoor bar. Not quite sure yet.

This area I'm not sure what to do with. Due to the fire pit I don't necessarily want deck.

As well, from the back to the camera spot, it drops about 3in.

I was thinking of turning everything over and covering it with pea gravel. But I also have dogs so they'd be running around it. So I'm not sure what the right move is. As well if I should keep the natural grading or try to level it a bit more.

A bit out of my depth in terms of just not knowing what I don't know.

Suggestions on what to do?

u/Arnoc_ — 1 month ago

Happy Realization

So thanks to another post, I just had a realization.

During Faction Wars, Mordecai was a Canadian.

The running joke with Canadians is that they're the reason War Crimes are a thing.

What did our beloved Princess Donut do? Commit atrocities on the level of war crimes.

I love that new linkage in my brain.

reddit.com
u/Arnoc_ — 2 months ago

ZPM's and Dialing Pegasus - What about the Power Booster Device?

So, I've been "sleepwatching" SG-1, again. Past two episodes I was awake for were Season 3's "Learning Curve" and "Point of View".

In Point of View, they use the Quantum Mirror to assist another reality with contacting the Asgard in their home galaxy. Which requires 8 chevrons.

One of the main issues with Atlantis was that they were unable to dial the expedition due to lack of ZPM's to have the power to dial another galaxy

Major Carter was able to get the Power Booster Device operational again to be able to dial the Asgard in the alternate reality.

While I'm assuming they utilized the original that Jack had built, I'm sure that in the intervening time they studied it greatly.

Why couldn't the SGC build a few more, since it was powered by Naquiadah, to dial Pegasus and do check ins? As well as was made with all Human Tech plus a staff weapon.

As well, and maybe separately, are the humans almost at Ancient Ancient Tech levels? I mean afterall, we've seen ancients with Human Tech able to create one time use Stargates, power boosters to dial other galaxies, build space ships, etc.

reddit.com
u/Arnoc_ — 2 months ago

SSL Certificate Help Required - net::ERR_CERT_AUTHORITY_INVALID

Our Exchange Server Certificate was expiring on Saturday.

To make sure there's no hiccups and issues, renewed it today.

Our SSL Cert is issued by GoDaddy (Not my choice).

Previous Certs were issued by the G2 Root Cert. This one is now the DV R1 cert.

Got the R1 Root installed on the server, the intermediates, and completed the new cert request I had created.

On the server, everything works great.

On my machine, I get a net::ERR_CERT_AUTHORITY_INVALID on both Edge and Chrome.

Looking at the cert path on the Exchange server, I see:

- GoDaddy Class 2 Certification Authority
-- Go Daddy Root Certificate Authority - G2
--- GoDaddy TLS Root CA - R1
---- GoDaddy TLS Intermediate CA DV - R1v1
----- My Named Cert

On my browser, all I get are:

- GoDaddy TLS Root CA - R1
-- GoDaddy TLS Intermediate CA DV - R1v1
--- My Named Cert

I'm in unfamiliar territory here. Any assistance would be appreciated!

UPDATE:
Just to test things, I installed the TLS Root CA - R1 on my machine in the trusted authority store, and that cleared up all my issues.

I was under the impression though for Root CA's like that, I shouldn't have to do that to get things to work?

UPDATE 2:

Not sure if any change I did changed anything, but now when I visit my site, it just works. I had pushed out an earlier call for Windows Updates. No damn clue what "fixed" it unfortunately.

reddit.com
u/Arnoc_ — 2 months ago

Machello and Options

I let SG1 play as background noise to fall asleep to. Blocks out the rest of my household, and it's comforting in a way that it doesn't have to engage my mind and actively watch, like it would if I was playing something new.

Anyways. s2 e17. Holiday. Machello. His knowledge would be of great benefit to Earth and their fight against the system lords. By this time they were already allies of the Tok'ra through Jacob and all. Machello certainly wanted to live. Why not contact the Tok'ra and see if any symbionts could potentially save him?

Aside from the plot required that not to happen.

reddit.com
u/Arnoc_ — 2 months ago

Cleaning Smoker / Grill After Winter

So normally I store my smoker and grill in the garage over the winter. This year, due to circumstances outside my control, I had to leave them out (Covered, both with actual covers and under my roof overhang as much as possible).

What's the best way to get them into tip top shape for the approaching summer? Just a high heat burn?

reddit.com
u/Arnoc_ — 3 months ago

Carter and Jolinar

We know that Carter is pretty damn smart. Like really damn smart.

And we've seen from Jacob that blending with one of the Tok'ra gives a lot of knowledge. And we know that Carter occasionally gets flashes of Jolinars memories.

Is it possible that some of Carters scientific accomplishments and leaps of logic weren't entirely her own? That some of Jolinars memories subtly surfaced when she was attempting to figure things out, connecting the dots to things that she likely would have figured out but just a lot faster?

Not trying to detract from her intelligence at all, and we know they didn't truly blend together. But still, if she could get flashes of other memories and feelings, why not a little scientific knowledge as well?

And IF that did occur, how smarmy do you think Rodney would be and claiming he's the smartest human in the galaxy due to that?

reddit.com
u/Arnoc_ — 3 months ago
▲ 18 r/Zwift

Workout Space - Almost Completr

Got an old but still good condition projector plus screen on the cheap at a yard sale.

Found some chain and nails in garage to suspend it (Thank you previous owner).

Mounted and working. Now just need to clear some space where the Zwift frame ultimately belongs, and need to grab a fan, and I'll be zwifting in style. And able to see! Better than the like 12" laptop screen have now.

u/Arnoc_ — 3 months ago

Lanteans and Ancient Repository of Knowledge

In SGA, we encountered some Lanteans that were still alive. If any of them had managed to live, what do you think would have happened if one or more of them had accessed any one of the Ancient Repositories of Knowledge that were left around in the Milky Way?

reddit.com
u/Arnoc_ — 3 months ago

So I've posted a bit before. I'm an IT guy, and by merit of my realm of knowledge, I'm our streaming guy at work (College).

We have our graduation ceremony coming up, and we livestream it.

One of my big pet peeves is the fact that because we use an assortment of cameras, we end up with the color changing around a lot. I've slowly been able to increase our PTZ cameras from one to two; two PTZOptics Moves. Still have a Canon XA11 in the mix, and sometimes we utilize some USB Webcams depending upon the camera angles we need coverage for (We've only in the last three years gone from a 1 camera static shot setup to utilizing multiple cameras).

One of our recent things I've been able to get stressed is that lighting is an issue; we have a lot of black robes on a black stage in front of a black background, and then have to light that. It's an outside company that does that, and when they setup I help them, and for me the lights are bearable and tolerable, and we get it looking great from a live audience perspective as well as on the cameras.

Then the folks who actually have to be on stage come in, complain that the lights are WAY too bright, and they end up dimming them greatly. That's usually the last thing then they dip, before I can make any video adjustments.

This year I've been able to put my foot down and we're going to have some dedicated time to playing with the lighting situation.

----

Now, to get to my question. When you guys have a mixed camera environment, how do you guys color balance things to try to get things as close as possible.

I have OBS as my main streaming platform, and I've got some color monitoring plug-ins loaded into it, including vectorscope, ROI, waveform, and histogram.

With filters I know I can apply LUTs to the cameras.

So, what should my workflow be to try to get things looking as same as possible across the cameras?

I'm also trying to get work to buy a Calibrite Colorchecker to help with getting colors adapted by giving a consistent color reference. Especially since I can't keep the VIPs all day during our run through.

But suggestions would be phenomenal! Thanks in advance.

reddit.com
u/Arnoc_ — 4 months ago

I work for a small college. We normally lease our networking equipment so that we don't have a HUGE budget year the really taxes our finances. We're currently using Meraki for everything; about 35-40 switches and a firewall, and about 30 APs.

We had our meeting with Cisco about renewals and replacements and the total cost of a 1:1 replacement came back at like a good $700,000+. Which.... yeah. No one's happy about.

So we're exploring some alternatives. Ubiquiti is one of the main ones; we don't have any really complex networking setups, just basically connect everything together, prioritize our IP Phones, and that's about all. And my boss is of the opinion even if a Ubiquiti switch goes down and support isn't great, it's cheap enough to just buy another or have one or two on hand to just slot in and be done with it. His idea is really to keep the Meraki Firewall for it's features and then just Ubiquiti switches as the backbone. Which isn't too bad of an idea in my opinion.

But we're still in the exploration stage; we have about another year for all this. I do see Mist thrown out as a suggestion in some of my research.

Another thing to consider is, that we ARE expanding and having a new building put into place, so we have some growth we haven't accounted for either from our original Meraki quote too. That building will likely need 1-2 switches, plus firewall, and a LOT of APs.

We also are expanding our streaming events; so being able to get that traffic prioritized as well (We are starting to utilize NDI devices a lot more, and may be moving to some Dante stuff in the future for sound).

Networking is more of a generality for me than a specialty, so I'm a little out of my element.

But, one of the biggest reasons why we want with Meraki in the first place was the cloud management. Being able to diagnose issues from home; getting alerts when switches go down, fiber issues, etc. It's saved our butts a few times when stuffs happened on weekends and we were able to resolve it before the work week started. That's a functionality we would like to continue to have.

Thanks in advance for any recommendations!

reddit.com
u/Arnoc_ — 4 months ago