These instructions can be used to get the LibreNMS Docker container working with SSO (OpenID) using Authentik. It is assumed that you already have a working Authentik setup. You will need to have SSL for the LibreNMS interface and it is assumed below that LibreNMS is running on the hostname […]
Read moreThese steps can be used to crack IPMI passwords using hashcat and/or John the Ripper (John). For this guide, Metasploit will be used to connect to the IPMI interface and dump the hashes. There are a large number of IPMI interfaces that are exposed on the Internet for which the […]
Read moreI was looking for a backup solution for some personal servers; I had a few requirements in mind: Not agent based Lightweight Stores backups in a Dropbox application folder (so each server can have its own folder not accessible to the others) Encrypted storage of backups Only backup the data […]
Read moreThese are the steps for deployment of the Juniper vRR (virtual route reflector) on Proxmox VE. For those not unaware, the virtual route reflector gives you the full policy capability of JunOS for routes without the actual forwarding engine. The route reflectors can then be configured using existing configuration tools […]
Read moreAn often overlooked feature of the OpenSSH client is the ControlMaster feature. This feature allows multiple sessions to share a single TCP connection. This results in fast session startup and single sign on. There are many web pages which explain the feature in more detail which is not the point […]
Read moreDNSControl is a fantastic tool to manage DNS records, especially if there are multiple DNS zones being managed: DNS records in plain text files allowing them to be stored in a VCS of your choice Records are vendor agnostic; switch from one DNS provider to another without having to import/export […]
Read moreThe dnsdist web server and API at the time of writing does not have the ability to use TLS to secure traffic. Recently this was brought up on the dnsdist mailing list in the thread here. The solution mentioned on the mailing list by Stephane Bortzmeyer was using stunnel; personally […]
Read moresystemd can provide a service named resolved to handle DNS resolution. This service can handle DNS over TLS, DNSSEC validation, DNS caching, Multicast DNS resolution and more. Depending on the Linux distribution, resolved may be used by default. On these systems there should be a symlink from /etc/resolv.conf to a […]
Read moreNOTE: I originally published this page in 2018; instructions may now be out of date. While looking at the Juniper vMX documents recently, I noticed that support has now been added for Ubuntu 16.04 with kernel 4.4.0-62-generic (see Table 2). Since I personally prefer using Debian over RHEL systems, I […]
Read moreNOTE: I originally published this page in 2018; instructions may now be out of date. Juniper has provided an updated copy of the i40e module to resolve the “PF reset” issues that occur on vMX routers when using SR-IOV. The new driver release is version 2.4.101. IMPORTANT: At the time […]
Read more