|
|
|
|
@ -107,10 +107,6 @@ https://overflow.roche.com/t/i-cannot-connect-to-wifi-on-my-dell-xps-9310-what-s
@@ -107,10 +107,6 @@ https://overflow.roche.com/t/i-cannot-connect-to-wifi-on-my-dell-xps-9310-what-s
|
|
|
|
|
* at least in gnome |
|
|
|
|
** and little ports to use |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Default RLC at <Roche> GNOME (ubuntu) working with |
|
|
|
|
|
|
|
|
|
==== Multiple workspaces with many monitors |
|
|
|
|
|
|
|
|
|
sudo apt install gnome-tweaks |
|
|
|
|
@ -309,215 +305,6 @@ export PATH=$PATH:$JAVA_HOME/bin:$M2_HOME/bin
@@ -309,215 +305,6 @@ export PATH=$PATH:$JAVA_HOME/bin:$M2_HOME/bin
|
|
|
|
|
** source java-maven.sh |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
== Roche Linux RLC configuration |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
=== Pulse Secure Snowflake problem |
|
|
|
|
|
|
|
|
|
https://overflow.roche.com/t/unable-to-connect-to-snowflake-due-to-blocked-ip/7501/8[Roverflow: Unable to connect to Snowflake due to blocked IP] |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Manual adding any domain you want to tunneling using script delivered by @kravvcu . In my case it was domain suitable for SnowFlake. |
|
|
|
|
Download the script from this link 1 or directly from @kravvcu post. (it is located in our Roche GitLab) |
|
|
|
|
|
|
|
|
|
==== Preparations - one time preparations |
|
|
|
|
|
|
|
|
|
* location |
|
|
|
|
** ./Projects/PDIL/routes_lk |
|
|
|
|
** ./Projects/PDIL/routes_oryg |
|
|
|
|
* Edit script and add your domain. In my case it was changing DOMAINS variable |
|
|
|
|
|
|
|
|
|
from: DOMAINS=( domain.one.roche.com domain.two.roche.com ) |
|
|
|
|
to: DOMAINS=( roche_pd.eu-central-1.snowflakecomputing.com ) |
|
|
|
|
|
|
|
|
|
* Add executable to the file routes (chmod u+x) |
|
|
|
|
|
|
|
|
|
==== VPN connection with SF |
|
|
|
|
|
|
|
|
|
* Connect to your VPN gateway, whichever you want |
|
|
|
|
* Run the script ./Projects/PDIL/routes_lk |
|
|
|
|
* It will produce two commands, which you execute on your own. |
|
|
|
|
** In my case it was such commands (the ip address depends on gate, to which you are connected to): |
|
|
|
|
|
|
|
|
|
---- |
|
|
|
|
sudo ip route add 3.65.82.225 via 10.143.136.153 dev tun0 metric 1; |
|
|
|
|
sudo ip route add 3.120.160.121 via 10.143.136.153 dev tun0 metric 1; |
|
|
|
|
---- |
|
|
|
|
|
|
|
|
|
* enjoy connection to SnowFlake… |
|
|
|
|
|
|
|
|
|
=== Pulse Secure hanging problems |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
==== Skorzystałam z takich poleceń od Zbyszka: |
|
|
|
|
|
|
|
|
|
sudo systemctl restart pulsesecure.service |
|
|
|
|
sudo systemctl restart NetworkManager |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
==== Zbigniew Grzybek, 7 min |
|
|
|
|
|
|
|
|
|
ja uzywam takich komend jak mi sie pulse wykrzaczy |
|
|
|
|
|
|
|
|
|
---- |
|
|
|
|
sudo cp /etc/resolv.conf_back /etc/resolv.conf |
|
|
|
|
sudo systemctl restart pulsesecure.service |
|
|
|
|
sudo systemctl restart NetworkManager |
|
|
|
|
---- |
|
|
|
|
|
|
|
|
|
i pozniej do laczenia: |
|
|
|
|
|
|
|
|
|
---- |
|
|
|
|
/opt/pulsesecure/bin/pulselauncher -U rbapulse.range.roche.net/rlcaas-cert -r EMEA -c /home/users/grzybekz/.pulsesecure/pulse/certificates/grzybekz.pem -u grzybekz |
|
|
|
|
w /etc/resolv.conf_back mam taki wpis (ale tutaj mozesz miec inny): |
|
|
|
|
|
|
|
|
|
# Generated by NetworkManager |
|
|
|
|
search localdomain |
|
|
|
|
nameserver 192.168.86.2 |
|
|
|
|
---- |
|
|
|
|
|
|
|
|
|
=== FollowMe Printer |
|
|
|
|
|
|
|
|
|
https://overflow.roche.com/t/how-to-install-followme-printer/446/14[Roverflow How to install FOLLOWME printer?] |
|
|
|
|
|
|
|
|
|
lpadmin -p FollowMe_Warsaw -E -v lpd://rwamsmps.emea.roche.com/Warsaw_FollowMe -m foomatic-db-compressed-ppds:0/ppd/foomatic-ppd/Xerox-WorkCentre_7345-pxlcolor.ppd && lpadmin -p FollowMe_Poznan -o PageSize=A4 -o printer-is-shared=false creates=/etc/cups/ppd/FollowMe_Warsaw.ppd |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
==== Add person to the group lpadmin |
|
|
|
|
|
|
|
|
|
===== It works! |
|
|
|
|
|
|
|
|
|
https://askubuntu.com/questions/964040/usermod-says-account-doesnt-exist-but-adduser-says-it-does[Overflow description] |
|
|
|
|
|
|
|
|
|
---- |
|
|
|
|
Just do this: |
|
|
|
|
|
|
|
|
|
sudo vim /etc/group |
|
|
|
|
and add your name to the desired group, like: |
|
|
|
|
|
|
|
|
|
somegroup:x:25:yourusername |
|
|
|
|
---- |
|
|
|
|
|
|
|
|
|
However, the commands: |
|
|
|
|
|
|
|
|
|
groups |
|
|
|
|
|
|
|
|
|
id |
|
|
|
|
|
|
|
|
|
do not return lpadmin group but I am able to play with the printer. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
===== It DOESN'T WORK |
|
|
|
|
|
|
|
|
|
[source,shell] |
|
|
|
|
---- |
|
|
|
|
sudo usermod -a -G group1,group2 username |
|
|
|
|
---- |
|
|
|
|
|
|
|
|
|
I am getting the message: |
|
|
|
|
|
|
|
|
|
---- |
|
|
|
|
kuzmal@rwauwprlc0049:/etc$ sudo usermod -a -G lpadmin kuzmal |
|
|
|
|
usermod: user 'kuzmal' does not exist |
|
|
|
|
---- |
|
|
|
|
|
|
|
|
|
==== Add printer driver |
|
|
|
|
|
|
|
|
|
* trying with ppd |
|
|
|
|
** https://frameboxxindore.com/linux/quick-answer-how-install-ppd-file-in-ubuntu.html[Quick Answer: How install PPD file in Ubuntu?] |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
https://www.support.xerox.com/en-us/product/workcentre-7328-7335-7345-7346/downloads?platform=linux&language=en[Xerox WorkCentre 7345 Foomatic/pxlcolor] |
|
|
|
|
|
|
|
|
|
=== Change Password |
|
|
|
|
|
|
|
|
|
https://roche.service-now.com/rose?id=ticket&table=incident&sys_id=21e728131b6991947a7d99baab4bcb28[RoSE ticket] |
|
|
|
|
|
|
|
|
|
==== Roverflow |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Planowane pytanie do Roverflow |
|
|
|
|
** https://overflow.roche.com/t/how-does-one-change-the-password-on-rlc/9803/14 |
|
|
|
|
** 2023-02-23 |
|
|
|
|
|
|
|
|
|
Hi @Mihajlo_Joksimovic, |
|
|
|
|
I have similar issue (probably) as @Daniel_Sabanes_Bove: |
|
|
|
|
* I changed my password in CIDM, |
|
|
|
|
* I was many times in the office working after this change |
|
|
|
|
* I changed the disc encription password but... |
|
|
|
|
|
|
|
|
|
my Ubuntu 20 still wants my previous domain password to log-in and all admin/sudo actions require previous domain password. |
|
|
|
|
I had some tickets done in SNOW but it hasn't change |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* cidm |
|
|
|
|
** it does not change password in Linux |
|
|
|
|
*** for disc encription, use this cmd: |
|
|
|
|
**** sudo /usr/sbin/rlcaas-roche-luks-key-changer |
|
|
|
|
*** for system (login + sudo) |
|
|
|
|
**** login into RCN inside the Roche Infrastructure (Roche Network in the office) |
|
|
|
|
**** try restarting the centrifydc service: |
|
|
|
|
***** “sudo systemctl restart centrifydc.service” --> Roverflow |
|
|
|
|
***** "systemctl restart centrifydc" --> RoSE ticket |
|
|
|
|
***** Then the cache should actually be deleted and recreated with the new use. |
|
|
|
|
*** check the Centrify status with command "adinfo" |
|
|
|
|
|
|
|
|
|
---- |
|
|
|
|
kuzmal@rwauwprlc0049:~$ adinfo |
|
|
|
|
Local host name: rwauwprlc0049 |
|
|
|
|
Joined to domain: emea.roche.com |
|
|
|
|
Joined as: rwauwprlc0049.emea.roche.com |
|
|
|
|
Pre-win2K name: rwauwprlc0049 |
|
|
|
|
Current DC: <unavailable> |
|
|
|
|
Preferred site: ADS-CH-BaselKaiseraugst |
|
|
|
|
Zone: emea.roche.com/Zones/EMEA_RLC-Clients-Global |
|
|
|
|
CentrifyDC mode: disconnected |
|
|
|
|
Licensed Features: Enabled |
|
|
|
|
---- |
|
|
|
|
|
|
|
|
|
I am in the office today and try to finalize the issue. |
|
|
|
|
I did: |
|
|
|
|
adinfo |
|
|
|
|
and got "disconnected". |
|
|
|
|
Then I did: |
|
|
|
|
sudo systemctl restart centrifydc.service |
|
|
|
|
and afterwards: |
|
|
|
|
adinfo |
|
|
|
|
and... I still have "disconnected". |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---- |
|
|
|
|
kuzmal@rwauwprlc0049:~$ ip a |
|
|
|
|
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 |
|
|
|
|
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 |
|
|
|
|
inet 127.0.0.1/8 scope host lo |
|
|
|
|
valid_lft forever preferred_lft forever |
|
|
|
|
inet6 ::1/128 scope host |
|
|
|
|
valid_lft forever preferred_lft forever |
|
|
|
|
2: wlp114s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 4096 |
|
|
|
|
link/ether 9c:b6:d0:3f:67:80 brd ff:ff:ff:ff:ff:ff |
|
|
|
|
inet 10.144.57.216/23 brd 10.144.57.255 scope global dynamic noprefixroute wlp114s0 |
|
|
|
|
valid_lft 592132sec preferred_lft 592132sec |
|
|
|
|
inet6 fe80::9eb6:d0ff:fe3f:6780/64 scope link noprefixroute |
|
|
|
|
valid_lft forever preferred_lft forever |
|
|
|
|
3: enxd037454c1936: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000 |
|
|
|
|
link/ether d0:37:45:4c:19:36 brd ff:ff:ff:ff:ff:ff |
|
|
|
|
4: enx80ce6278ff02: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 |
|
|
|
|
link/ether 80:ce:62:78:ff:02 brd ff:ff:ff:ff:ff:ff |
|
|
|
|
inet 10.144.52.165/24 brd 10.144.52.255 scope global dynamic noprefixroute enx80ce6278ff02 |
|
|
|
|
valid_lft 595157sec preferred_lft 595157sec |
|
|
|
|
inet6 fe80::a602:9255:669f:de9d/64 scope link noprefixroute |
|
|
|
|
valid_lft forever preferred_lft forever |
|
|
|
|
kuzmal@rwauwprlc0049:~$ |
|
|
|
|
---- |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
== Problems |
|
|
|
|
|
|
|
|
|
=== Unblocking screen-saver or hanging log-in console |
|
|
|
|
|