fl0at

Members
  • Posts

    30
  • Joined

  • Last visited

Everything posted by fl0at

  1. I was able to manually join to my unRaid VM hosted AD after a power failure today by starting up the VM, and then going to terminal and just typing: net join -U Administrator Where Administrator is your domain admin username. It pulls the info out of the samba config that should be set in the SMB portion of your settings inside the unRaid web GUI. It'll join, maybe complain about DNS depending on how your DNS settings are set in Network settings. (Mine are set to VM static IP in position 1, primary domain IP in position 2, then my DNS resolver in position 3). And the GUI will show that it isn't joined... but it works, and I'm able to browse my shares using the VM AD as the AD server. Didn't need to start the Dell server. Very happy.
  2. I just jumped in this boat. I was running my secondary AD on unRaid VM, so I could power down my primary, because it is an annoyingly loud Dell retread server off eBay. I messed up a secondary DNS record and auth stopped working. I updated unRaid and rebooted. Guess I'm firing the jet engine server back up so I can get unRaid re-joined.
  3. I think I've got this solved. Will test on larger VM tonight, but I made a temp Debian 10 VM of relatively no size. VM settings in unRaid were RAW so I used raw to vdi conversion: qemu-img convert -f raw vdisk1.img -O vdi vdisk1.vdi Created a new VirtualBox vm, and used the vdisk1.vdi as the harddisk. If you boot this, you'll get a FATAL non-bootable medium error (if using UEFI), so go to settings in VB, and check EFI boot. When it boots, it'll look like it failed, showing the startup screen, but need to find your disk (my single disk was FS0) and then find the boot file, so, inside of the booted VM: > FS0: (or whatever the drive is) FSO> ls (shows dir) FSO> cd EFI\boot\ (or something similar) FSO\EFI\boot> grub64.efi (or whatever the boot file is called) It might lock up on the first boot. I resetted, executed again, chose Advanced boot and went from there, and was able to boot my test image.
  4. I have tried those before posting. I'm looking for experience, not top search returns. But thanks. If nobody has any experience, then I'll just spin up a VM of unRaid in virtualbox, instead of converting. Let me edit to say I did not do Hyper-V (microsoft link) because I'm not running HyperV, but the conversion to VDI is a fail. As both use qemu-img convert, those links are the same thing, just different toggles.
  5. This isn't exactly an Unraid KVM question, but maybe someone has had a need and can tell me how to proceed. I need to pull a VM off Unraid, and run it as a VM on my laptop. My laptop is currently running Windows 10. I was hoping there was a quick way to migrate to virtual box. I need to stay in Windows, because I need to run visual studio simultaneously. If the hest way to do this is VirtualBox->Unraid->Target VM then I can do that, but if direct VirtualBox->Target VN is feasible that would be preferred. It also doesn't have to be VirtualBox, it just needs to run in windows, so...
  6. I just did a Windows 10 1903 VM on 6.7.2, and using noVNC through the web gui am even able to achieve 1920x1080 by going to Device Manager, and updating the Windows Basic Driver to virtio-win-0.1.1\qxldod\w10\amd64\ My display adapter is now Red Hat QXL controller. What issue are you having?
  7. I haven't ever seen port blocking from within a router as a practice. Because to defeat the block, you'd just change routers. Comcast on non-business blocks 80 at a level before the connection to the home. I would assume they would continue that practice for other ports they want blocked. Connecting once and then not again sounds like a configuration issue, not an adaptive and learning process within the router (which is what it would have to be to allow once, and then decide to block.)
  8. If it is a Comcast thing you should still be able to do that same port scan behind pfSense, using the same methodology as the other ports. If not, it's a configuration issue.
  9. If you set your rules in pfSense to block inbound LAN except on the ports you want open, you'll block his inbound (like Chromecast) even if on the same network.
  10. It seems like you've got pretty open control on landlord's router, so why not disable pfsense's DHCP, and get IPs from the landlord's router? Static your IPs, and create your rules in pfsense using LAN as source and destination. You'll remove your double NAT, and still get your protection.
  11. Can you upload a picture of your firewall rules? Because you shouldn't be port forwarding in pfSense, but allowing through on the firewall tab. So my rules are like: Allow IPv4 UDP 1194 WAN Block IPv4+6 WAN Allow IPv4+6 LAN So I block all incoming to WAN, except OpenVPN, and that rule needs to be above my block incoming. And then I allow everything from LAN out. That's a basic configuration. Can you also look at your routes: Should be System->Routing. Your new router could be sending IPv6 downstream, and you aren't picking it up or including it in your firewall rules.
  12. I think it's just your double NAT getting the final target port all out of wack, and would just stick with DMZ and block all inbound, and open ports as needed in pfSense. The double NAT already complicates things, I wouldn't add an additional complication if not needed.
  13. Just for testing, are you allowed to set your pfsense box as the DMZ IP on your landlord's router? That at least would throw everything at you, and you could go from there.
  14. Can you explain your setup? His Router (DHCP) -> His devices -> vLan -> pfSense (your DHCP) -> switch and wireless ap -> your devices Something like that?
  15. The drive started with a rufus wipe, using non-bootable as selection, FAT32 with 8192 bytes. Another attempt, I used disk management inside Windows 10 and did non quick format on the drive before one of the installs. So I don't think it was that. But I can't know without more testing.
  16. This isn't a support thread, as I've solved the problem, but I thought maybe someone might have a comment on a curious scenario. I have a SanDisk Fit 16 gb drive that I was using to spin up a new unRaid box, but every time I booted it I got the bond0 - Module not found error (from the below thread) So the OS was loaded in to memory, but then the USB couldn't be mounted back, so it was basically a blank OS with no configs, and wouldn't pick up an IP or anything. I tried three computers, every USB port, all kinds of things. Three or four versions of unRaid. With the installer, straight copy. FAT32 with every different block size. Everything Ultimately I decided it was a bad USB and I went with a PNY 16 gb. I flashed it and booted up fine. But on a whim (because I want the FIT so it doesn't stick out), I shut the box down and cloned the PNY to the SanDisk, and now everything boots up fine on the SanDisk. I got trial key for it, updated settings. Shut down. Brought it back up. No problems. Why in the world? Why would the flash to the USB fail, but the clone from one that booted work?
  17. Gonna mark as solved because I think it is due to missing a BIOS update. I have another one of these to do, so hopefully I remember, when it becomes time.
  18. I'm trying to spin up a second unRaid. I've got the same USB as another 6.7.2. I downloaded the Windows USB flash creator. I set Customize. I set allow UEFI boot. I put in my server name. I put in my static IP and information. I can open the flash drive and see the network.cfg file inside the boot directory. But when I boot the drive, I get assigned an IPv4 address: 169.254.180.99 What address is this? I go into the config directory, and the only folder is ssh. Nothing about my network.cfg. I swear that 10 minutes ago I saw a rc1/rc2 pop up in the flash creator. I almost want to just clone my other USB, but I think it's going to lead to problems with the GUID.
  19. Creating a certificate_bundle.pem in /boot/config/ssl/certs and using a wildcard certificate will result in a Nginx configuration error in /etc/nginx/conf.d/emhttp-servers.conf It looks like that the common name of the cert is being used in the configuration, around like 40, in this section: # # Redirect http requests to https # listen *:80 default_server; listen [::]:80 default_server; return 302 https://*.example.com:443$request_uri; Changing this from https://*.example.com to https://subdomain.example.com and running nginx -s reload will fix the issue. The issue is that port 80 redirects result in a corrupted content error in FireFox. Have not tested other browers.
  20. Long shot, but just curious. If you right click on Windows icon and go to Settings -> Network & Internet -> Change Adapter Options and double click your Wifi connection, what is your speed listed as? I lost power last week for a few days, and lost some router configs, and my channel width was all set back to 20 MHz and I was connecting in at 72 Mbps on some devices.
  21. Going to mark as solved, but here is solution. Joining Domain not sufficient, here. Have to also add a host entry to the AD through DNS manager. So for me, in WS2016, I went to DNS, Forward Lookup, selected Domain, then right clicked in space to bring up context menu. Then add host Name: DROP FQDN: DROP.KH.LOCAL IP: Static IP as set in Unraid Add host, then can navigate to shares.
  22. I'm on trial, trying to get this thing to meet my needs because I really want to use this as my NAS. But I'm running into some pretty basic configuration issues. Everything from small things like TLD not being honored in Network Settings, to the biggest thing, which is that I cannot access user shares over SMB, when domain joined. Here are my steps: Client PC: Windows 10, 1803 AD/DC: Windows Server 2016 Domain: KH.LOCAL Unraid: Networking Settings DNS points to AD/DC. Unraid Server Name (Settings -> Identification): DROP.KH.LOCAL SMB (Settings - > SMB) set to Yes, Active Directory Join AD using a domain admin (also the account testing from the client PC) I can verify I've joined by going inside Active Directory Users and Computers in the AD/DC, and see that the Unraid server is listed. I can go in terminal and ping: KH.LOCAL and get a response, or any other computer on the domain, and get a response. I can also ping other computers on the domain just by computer name, without needing FQDN. I can ping DROP which resolves to the right IP. I can ping DROP.KH.LOCAL which resolves to 127.0.0.1 I cannot ping DROP.KH.LOCAL, from anywhere else, though. Or DROP. Or drop. Or drop.kh.local. I cannot access the web ui over drop.kh.local, either. But, I continue along, anyway. I start the array, and add a share, Test. The only thing I set is the name. I then click on it and see that export is Yes, and security is public. Now, at this point, when SMB is using workgroups, under SMB column on Shares, it'll show "Public" or whatever the permissions is. Here, I get "-" I stop the array and reboot. Just in case. I come back in, I verify still domain joined. Can still ping from Unraid to the ad/dc, and other computers on the network. I then try to using File Explorer to open address \\drop\ or \\DROP\ or \\drop\Test or \\DROP\Test or \\drop.kh.local\ or \\Drop.kh.local, nothing works. Anyone got AD working that can give me a hand?
  23. Reproduce: Management -> Settings -> SMB -> Enable: Yes (Active Directory) -> Apply Scroll to Active Directory Settings. Join domain. RDP to AD/DC Server. If using Windows Server, run Active Directory Users and Computers (dsa.msc), select Computers, refresh and see that Unraid server is in domain joined. Return to Unraid Management -> Settings -> SMB -> Active Directory Settings -> enter domain admin password and click Leave. Page will refresh showing still joined. Return to Windows -> Active Directory Users and Computers. Refresh. Notice Unraid server is no longer in the list. Unraid server is now not domain joined, but shows as joined, until system is rebooted. Upon reboot, will show as not joined, and can now join a domain. No dockers, plugins or anything installed.
  24. To reproduce: Management UI -> Settings -> FTP Server Set FTP server: Disabled then Apply. Status in top right should show Status: Stopped Click Dashboard then Reboot icon. Proceed. Once back up, Settings -> FTP Server, Status: Running System: Just upgraded to 6.7.0 from 6.6.6. Still in trial (28 days remaining...), active directory joined, no dockers, plugins, and one user share created. That is as far as I've gotten, except to disable FTP and then reboot due to the ugprade...
  25. Yes, 6.6.6 is working for me now. I have a bad USB port on the desktop I'm using to write to the stick. Switching ports on the write side seems to have solved it. The FSCK*.rec on the boot drive were from me hard shutting down, or maybe shutdown -h now. Have to check shutdown -h now when I get home, cause that is how I killed it last night. But I'll clean install again before I register the key. Thanks again.