What are you working on? Feb 2021

[pike (Michael Kicks)]

Keep them quite well vented. Lithium batteries can become a too much hot ladies.

[danb35 (Dan)]

@pike

Lithium batteries can become a too much hot ladies.

LiFePO4 is reported to be much safer than most other lithium chemistries. Power density suffers, naturally, but they’re quite safe–and have a much better cycle life than lead-acid.

[danb35 (Dan)]

@nio707

Nice, Pls keep us updating

I posted a few weeks back that the CA seems to work just fine for TLS certs, and that continues to be the case. I’ve shelved Gluu for the time being in favor of LemonLDAP::NG, which I’ve discussed more here:

Single sign-on (SSO)/Identity and access management (IAM) for Nethserver

So as is often the case, one thing leads to another, which leads to another, and now I’m starting to look at SSO/IAM software. There appear to be a number of F/OSS solutions in this field, and it’s looking like it’s something that could improve system security quite a bit. Right now, Neth uses LDAP (either a local OpenLDAP server, a remote one, or AD) for authentication. Applications take the username and password, validate them against the LDAP server, and grant access. It’s fairly simple, …

I’m a little unclear on how to use the CA to issue both TLS and SSH certs, but once I get that piece figured out, I think I’ll have what I need to put them together.

[alefattorini (Alessio Fattorini)]

Oh man sounds great!

@danb35

Yes, that’s a big part of why I’m doing this–I want a big UPS for my server rack. I have 6.5 kWh of LeFePO4 batteries on their way that I’m going to connect to the inverter.

ahahaha sounds great!

[Axel (Axel Urbanski)]

I am working on a new desk

between this walls without a frame

[jookk]

we have something similar with bracket on the radiator

[Axel (Axel Urbanski)]

Hope next weekend it will be ready in the first parts …

[Axel (Axel Urbanski)]

Or you use the “free” energie to build Bitcoins… that stores some money

[danb35 (Dan)]

So to wrap up the solar project a bit, the inverter:

The batteries:

And the monitoring dashboard:

[Andy_Wismer (André Wismer)]

@danb35

Looks really good, the whole setup!

[Axel (Axel Urbanski)]

now it is ready bewtter usabel, some nice things will follow when my tools are fixed

[pike (Michael Kicks)]

Which direction is the window facing ?

[Axel (Axel Urbanski)]

yes but is only in the morning sun, and it is the north of german
Window looking east side

[nio707 (Tejas)]

Hi, How did you setup these inputs in Grafana ? Which Sensor device is sending the metrics ?

[danb35 (Dan)]

@nio707

How did you setup these inputs in Grafana ?

I’m using a somewhat-customized version of Grafana called Kotori:
https://getkotori.org/docs/

Pretty much it’s “throw JSON at it”. That’s done by this software, which talks with both the inverter and the BMS:

jblance/mpp-solar

[nio707 (Tejas)]

Thanks, will look at this, specially Kotori for my own personal project

[pike (Michael Kicks)]

I’m tired about my scapegoat.
Therefore… yum install kmod-r8168, let’s see if my DG31PR stops being lazy…

Meanwhile…

• IKEv2 tunnel starts jumping (cr4p)
• Zyxel Firewalls seems to have some “snafus” on HTTPS (25 firewalls needed some new rule)
• qLocker got my friend (“Do you have have a backup?” “Pick one: no; absolutely no; what is a backup?”)
• new customer with old pc and dubious licenses
• 4 hours of sleep

And worst of all

• too hot to have a nice round of single malt

Happy saturday to everyone…

[pike (Michael Kicks)]

New weekend, new headache.
Did someone whispered “PrintNightmare”?

Patch did’t came! (wrong CVE, me dumb)

NOW patch are available even for bad 2008 R2. Wonderful.

[pike (Michael Kicks)]

Saturday Tasklist…

• Update Windows Server 2019, two units. Check
• Update Windows Server 2012 R2, four units. Check
• Update WIndows Server 2012, three units. Check
• Update, reboot, cursed, rollback, re-updated update tools, than updated Windows Server 2008 R2. Check
• Install SQL Server Express 2008 R2 + 4 updates . Check
• Update QNAP NASes, 6 units. Check
• Update NethServer installs, 7 units. Check
• Update Zyxel Firewalls, 8 units. Check
• Update HPE And Aruba Switch firmwares, 5 units. Check
• Update Zyxel APs, 25 units. Check
• Getting a life. Ongoing…

For jinx England Soccer Team, i can wait Sunday evening.

[danb35 (Dan)]

@danb35

I’m a little unclear on how to use the CA to issue both TLS and SSH certs, but once I get that piece figured out, I think I’ll have what I need to put them together.

So that part took a little bit of doing, which I’ve documented here:
https://www.familybrown.org/dokuwiki/doku.php?id=advanced:ssh_conversion

And the “SSO for SSH” with LemonLDAP::NG is working well, as described here:

Install LemonLDAP::NG SSO/IAM on Nethserver

Background I’d discussed single sign-on/identity and access management (SSO/IAM) in this topic, and I think it’d bring a lot of capabilities to the table with Nethserver. The main ones I saw were: Improved application security, as individual applications (like Nextcloud) never handle a user’s credentials and therefore can’t compromise them. Centralized policy management–which applications require MFA, which require a hardware key, etc. Implements MFA system-wide, regardless of individual appl…