Re: [GLLUG] Power control over IP

2021-05-29 Thread James Courtier-Dutton via GLLUG
On Sat, 29 May 2021 at 16:38, Martin A. Brooks via GLLUG
 wrote:
>
> On 2021-05-29 16:19, stuart taylor via GLLUG wrote:
> > Can anyone point me towards a suitable 'power
> > supply over IP' solution? Are there any drawbacks to using these?
>
> Anything by APC.  It's perfectly normal and reasonable to have remote
> control power.
>

What servers do you have? Dell ones have iDRAC and HP ones have LOM
(Lights out management)
It allows access to power on/off the OS like you were pressing the
power button, and also access to the console like VNC, but it allows
you to see BIOS boot up messages also.
So, what I am trying to say, is your server might already have the
features you are asking for.
You can also add PDUs and UPSs that are controllable over TCP/IP if
you need them.

Kind Regards

James

-- 
GLLUG mailing list
GLLUG@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/gllug

Re: [GLLUG] Power control over IP

2021-05-29 Thread Martin A. Brooks via GLLUG

On 2021-05-29 16:19, stuart taylor via GLLUG wrote:

Can anyone point me towards a suitable 'power
supply over IP' solution? Are there any drawbacks to using these?



Anything by APC.  It's perfectly normal and reasonable to have remote 
control power.


--
GLLUG mailing list
GLLUG@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/gllug

Re: [GLLUG] Two factor authentication

2021-05-29 Thread aidangcole via GLLUG


It puts all of your eggs in one basket, but you can do that in a 
browser, or perhaps in a password manager like Bitwarden



Firefox:
https://addons.mozilla.org/en-GB/firefox/addon/auth-helper/?utm_source=addons.mozilla.org_medium=referral_content=search
Chromium:
https://chrome.google.com/webstore/detail/authenticator/bhghoamapcdpbohphigoooaddinpkbai?hl=en-GB
Bitwarden:
https://bitwarden.com

Aidan



-- Original Message --
From: "stuart taylor via GLLUG" 
To: "gllug" 
Cc: "stuart taylor" 
Sent: Saturday, 29 May, 2021 At 15:56
Subject: [GLLUG] Two factor authentication
Hi all,
I am thinking of deploying two factor authentication on our servers, but 
some of the other admins cannot get a mobile signal when they are at 
home. Is there any other way I can do this, or a better way of improving 
authentication?

Stuart
--
GLLUG mailing list
GLLUG@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/gllug 

-- 
GLLUG mailing list
GLLUG@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/gllug

[GLLUG] Power control over IP

2021-05-29 Thread stuart taylor via GLLUG
Hi all,

During the past 15 months I have managed to change various things involving our 
systems, for the better I think. We have also gained various part time 
volunteer admins, who are very good, mostly better than I am. One of them 
showed me how he could power down his servers remotely over IP, and restart 
them again. This looks very useful as we are spending less time at the building 
and mostly working from home. I have previously managed to obtain a cabinet, 
for our servers, change the lock for a padlock based system and restrict the 
key holders to a few people. This means switching servers on, or off, is better 
controlled, but also makes it more difficult for the admins to reboot when they 
are at home. Can anyone point me towards a suitable 'power supply over IP' 
solution? Are there any drawbacks to using these?

Stuart

-- 
GLLUG mailing list
GLLUG@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/gllug

Re: [GLLUG] Two factor authentication

2021-05-29 Thread Andy Smith via GLLUG
Hello,

On Sat, May 29, 2021 at 04:56:32PM +0200, stuart taylor via GLLUG wrote:
> I am thinking of deploying two factor authentication on our
> servers, but some of the other admins cannot get a mobile signal
> when they are at home. Is there any other way I can do this, or a
> better way of improving authentication?

The only multi-factor authentication method I am aware of that
requires a mobile signal is SMS, and that is a really poor MFA
method.

Notably a TOTP solution doesn't need any network access except at
the initial setup time when the service tells you your key. Which
even that could be avoided if you did it by post or something!

Here's an example of an open source TOTP with PAM support which
works in any client that supports TOTP (not tied to Google in any
way):

https://wiki.archlinux.org/title/Google_Authenticator

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

-- 
GLLUG mailing list
GLLUG@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/gllug

[GLLUG] Two factor authentication

2021-05-29 Thread stuart taylor via GLLUG
Hi all,

I am thinking of deploying two factor authentication on our servers, but some 
of the other admins cannot get a mobile signal when they are at home. Is there 
any other way I can do this, or a better way of improving authentication?

Stuart

-- 
GLLUG mailing list
GLLUG@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/gllug