• 2 Posts
  • 47 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2023

help-circle





  • Like several people here, I’ve also been interested in setting up an SSO solution for my home network, but I’m struggling to understand how it would actually work.

    Lets say I set up an LDAP server. I log into my PC, and now my PC “knows” my identity from the LDAP server. Then I navigate to the web UI for one of my network switches. How does SSO work in this case? The way I see it, there are two possible solutions.

    • The switch has some built-in authentication mechanism that can authenticate with the LDAP server or something like Keycloak. I don’t see how this would work as it relies upon every single device on the network supporting a particular authentication mechanism.
    • I log into and authenticate with an HTTP forwarding server that then supplies the username/password to the switch. This seems clunky but could be reasonably secure as long as the username/password is sufficiently complex.

    I generally understand how SSO works within a curated ecosystem like a Windows-based corporate network that uses primarily Microsoft software for everything. I have various Linux systems, Windows, a bunch of random software that needs authentication, and probably 10 different brands of networking equipment. What’s the solution here?





  • In the US at least, most equipment (unless you get into high-and datacenter stuff) runs on 120V. We also use 240V power, but a 240V connection is actually two 120V phases 180-degrees out of sync. The main feed coming into your home is 240V, so your breaker panel splits the circuits evenly between the two phases. Running dual-phase power to a server rack is as simple as just running two 120V circuits from the panel.

    My rack only receives a single 120V circuit, but it’s backed up by a dual-conversion UPS and a generator on a transfer switch. That was enough for me. For redundancy, though, dual phases, each with its own UPS, and dual-PSU servers are hard ro beat.




  • I’m old enough to remember the 9/11 attacks. It was never in question that Saudi Arabia was complicit in what happened. The majority of the terrorists were Saudi. It took a bit longer for the fact that the Saudi government was complicit to emerge, but we knew within a short time that at the very least, they provided financial support to the terrorists.

    The argument for starting the “war on terror” was that Al-Qaeda planned the attack, so we should attack the countries that harbor them. At the time, the majority of the country supported this; I remember George Bush Jr.'s approval ratings being in the 90s for a short time. Even then, most of us knew that Saudi Arabia was at least complicit in what happened. The lust for revenge, as much as it was justified, made people forget that.

    Over the last 23 years, I feel like a lot of Americans have forgotten the role that Saudi Arabia played in the events of 9/11; after all, they’re our “ally,” right? I have always been on the fence regarding whether or not invading Iraq and Afghanistan was a good idea. Back in 2001, though, I felt like invading Saudi Arabia was a great idea. 23 years later, I don’t feel any different. Should the United States have attacked Iraq and Afghanistan, I’d say “probably”; should we have attacked Saudi Arabia? Absolutely. Yet it never happened.





  • This is certainly good news, and I don’t intend to detract from it.

    That being said, my opinion as an American is that the kind of missiles we need to be sending to Ukraine are the nuclear kind. The Russian government has said that they will use nuclear weapons in the event that the existence of their country is threatened. Fine, I understand that. Ukraine needs to have the same leverage. The existence of their country as they know it is being threatened; it would certainly turn the tables for them to say “Yes, we have nuclear weapons, and we’ll only use them if our continued existence is being threatened. By the way, you’re threatening it; you should really stop.”


  • I did some research on this, and it turns out you’re absolutely correct. I was under the impression that ECC was a requirement for a ZFS cache. It does seem like ECC is highly recommended for ZFS, though, due to the large amount of data it Storrs in memory. I’m not sure I’d feel comfortable using non-ECC memory for ZFS, but it is possible.

    Anecdotally, I did have one of my memory modules fail in my TrueNAS server. It detected this, corrected itself, and sent me a warning. I don’t know if this would have worked had I been using non-ECC memory.


  • One thing to keep in mind if you go with an i5 or i7 is that you won’t have the option to use ECC memory. If you’re running TrueNAS, you’ll need ECC memory for the ZFS cache. A Xeon E5 v2 server is old, but still has a more than enough power for your use case, and they’re not particularly expensive.

    If you need something more powerful, you can find some decent Xeon Gold systems on eBay, but they’ll be a bit more pricey. The new Xeon W chips are also an option, but at least for me, they’re prohibitively expensive.