Notes

New feature in DSMonRot

I finally added a (small) new feature to DSMonRot. It is now possible to exclude files and directories from the Backup. This feature makes use of Drive Snapshot's --exclude parameter.

Thanks to Michael Klein for requesting this feature!

Published on 2023-03-28, 18:52 +0000

Update bare Git repository

Just as a note for me (and if you are searching for this):

You can update a bare Git repository using the following command (whereas origin is the remote and main is the branch):

git fetch origin main:main

Found this at: Stack Overflow: how do I pull to a bare repository?

Published on 2023-03-24, 17:20 +0000

One user can't open Citrix Desktop

I had a strange problem where one single user couldn't connect to a Citrix Desktop. The user was able to log in to the StoreFront but after clicking on the icon for starting the Desktop, nothing happened. Sometimes, there was a spinning wheel on the icon.
After lots of trial and error (like resetting the user's profile and rebooting the StoreFront servers), the problem could be resolved by rebooting the Delivery Controllers.
That was very strange, I never had faced this before.

Published on 2023-02-27, 14:47 +0000

Can't connect to OPNsense's OpenVPN

Today I ran into a problem when connecting to an OpenVPN server running on an OPNsense firewall.

I received the following error message:

Decoding PKCS12 failed. Probably wrong password or unsupported/legacy encryption

I tried to reset the password, but that didn't have any effect.

After a short research, I found the following issue: OpenVPN-Gui 2.6 unable to decrypt .p12 file created in Client Export

So this seems to be a compatibility problem with the OpenSSL libraries of OpenVPN GUI 2.6 and OPNsense. After downgrading to OpenVPN GUI 2.5.7, the problem was gone for me. I hope they fix this soon.

Published on 2023-02-14, 20:00 +0000

Can't create SMB share on Windows Failover Cluster

I wanted to add a SMB share to a Windows Failover Cluster. When trying to create the share in MMC, I got a Access denied error message. When trying to do this in Windows Explorer, I got an even more strange error message:

Error creating share: [...] The resources must be online on the same node for this operation.

(In german: Beim Versuch, [...] freizugeben, ist ein Fehler aufgetreten. Für diesen Vorgang müssen sich die Ressourcen in demselben Knoten im Onlinemodus befinden.)

OK, so I decided to give PowerShell a try (using New-SmbShare) - with a similar result:

New-SmbShare : Access is denied. 
At line:1 char:1
+ New-SmbShare \\my-cluster\myshare -Path D:\MyPath- ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : PermissionDenied: (MSFT_SMBShare:ROOT/Microsoft/Windows/SMB/MSFT_SMBShare) [New-SmbShare
   ], CimException
    + FullyQualifiedErrorId : Windows System Error 5,New-SmbShare

I found several articles and posts saying that you have to create the share using an elevated MMC or command line, but this didn't work for me.

After several try and error, I found out that I have to give the SYSTEM account write permissions to the folder.

This only affects Failover Clusters. On a single server the SYSTEM account does not need to have write permissions on the folder.

Published on 2023-02-05, 14:36 +0000