A Windows 11 domain member refuses to take its time from a Samba AD DC running chrony. Plain NTP works, the configuration is fine, yet the DC never answers. The cause: above functional level 2012, Windows uses the MS-SNTP extended authenticator, which neither chrony nor Samba support. I patched both, and after one more trap in the byte order, Windows now accepts the signed replies.
Category: Linux
Windows clocks drift, jump or silently stop syncing more often than they should. How the Windows Time service actually works, how to find out what it is doing with w32tm and the event log, how to fix standalone machines, domain members and the PDC emulator, and how to use a Linux box running chrony (or ntpd/NTPsec) as a reliable time source for Windows.
GitHub Pages can publish a site in two ways: from a branch, or from a GitHub Actions workflow. For an APT repository the difference matters more than for a website: where the .deb files live, where the signing key lives, and how the repository grows over time. Both approaches, their trade-offs, and when to pick which.
Zoom ships .deb files but no APT repository. zoom-ubuntu-repo fills the gap in two ways: a self-hosted repository built by a cron job, and a GitHub-hosted one where the index lives on GitHub Pages while apt downloads the packages straight from Zoom’s CDN. How it works, where the files live, and how to set it up on Debian/Ubuntu.
How a small PAdES signing tool grew into slim-pdf: smartcards and KeePass as key sources, a ribbon GUI, form filling, OCR with each system’s own engine, text search, and why the license ended up as GPL-3.0.
How a document scanner without eSCL/AirScan led to slim-scan: a pure-Python WSD client, a GTK 4 desktop app, image clean-up on the scanned pages, a SANE backend, and two upstream bugs in the epsonds driver.
Categories
eduMFA/privacyIdea - convert TOTP secrets
eduMFA (privacyIDEA) only accepts hex‑encoded TOTP secret keys; this post shows why, and how to convert between hex and Base32 with ready‑to‑use Python scripts.
I just installed a desktop machine with brand new Ubuntu 26.04. One of the things I missed was the possiblity to paste selected text by pressing the middle mouse button. The fix for Ubuntu default desktop (Gnome) is as easy as: Of course the first command is only needed to check the default setting (which […]
Beware! This is still work in progress – I’ll need to re-run all steps on a clean install to verify everything really works as expected! I also assume, that you’re familiar with DNS-based ACME and that the required infrastructure is already in place. Installation of cert-manager Based on this description. Check installation: Creating first ACME […]
Categories
Adding persistent storage to k3s
Basics Kubernetes/k3s is using the Container Storage Interface (short CSI) to provide persistent storage. More details about that can be found here. Options By default k3s/rancher ships with a storage class called “local-path“. According to k3s documentation an alternative is “longhorn” (see here). But there are plenty of other options based on NFS, Ceph (both […]