Friday, November 13, 2026

Install Openvpn on linux with with an custom Access Server installation script

Install your flavor of linux.
This demo uses DEBIAN

After a basic install of Debian

su -
apt install sudo
apt install curl

    Add the username that you logon to the server with into the sudo file

visudo

username ALL=(ALL:ALL) ALL

nano /etc/network/interfaces

  1. Add static IP configuration:
    auto IFNAME
    iface IFNAME inet static
    address 192.168.0.11
    netmask 255.255.255.0
    gateway 192.168.0.1
    dns-nameservers 8.8.8.8 8.8.4.
  2. /etc/resolv.conf
    nameserver 8.8.8.8

logon to your access server portal  (openvpn.org) web site

Select "My Access Servers"

Select "Add New Access Server"

Select your deployment method (in this example i clicked on the linux icon at the top)

It will provide a custom installation script
Change to root

su -

(it will look something like this)
bash <(curl -fsSL https://install.openvpn.com/as/iUqtXys1232SieW1) --yes

copy the script command and paste it into your system you installed and let the script run to completion

you'll be provide a temp password during install


Once its completed, you can ssh to the box on port 943 and complete the installation.  Use the password that the system gave during the install like the picture above

Select AGREE

Set the tunnel type you want.  We are using "NO full tunnel" so its unchecked
select continue

download the profile/app


Install the app/profile.  This is used to authenticate your system 


run the app if it doesn't start automatically.  Select Agree

it will reflect the local ip of your systme

use the temp password


System shows as active now


connect to your openvpn access server url


now that you are connected, click on the COMPLET button and your server will be added to the list.



now you want to add a SSL cert via letsyncrypt


Logon to your openvpn server instance that you installed,
click on "VPN server" on the left
then in the "SERVER ADDRESS"  
Put in the fqdn of the server that matches what the server name will be if you are going to install an certificate

Step 1: Prerequisites

  • Ensure you have a domain name pointing to your OpenVPN server's public IP (e.g., vpn.example.com).

  • Open port 80 (HTTP) on your server for certificate validation.

Step 2: Install Certbot

For certificate management, install Certbot:

  • Ubuntu/Debian:

sudo apt update && sudo apt -y install certbot

  • RHEL/CentOS:

sudo yum install epel-release
sudo yum install certbot

Step 3: Generate Certificates

Run Certbot to issue certificates for your domain:

sudo certbot certonly --standalone --preferred-challenges http -d vpn.example.com

  • Replace vpn.example.com with your domain name.

  • Certificates will be stored in /etc/letsencrypt/live/vpn.example.com/.

Step 4: Configure OpenVPN with Certificates

Install the generated certificates into OpenVPN Access Server:

Change vpn.example.com to be the same as your FQDN

sudo /usr/local/openvpn_as/scripts/sacli --key "cs.priv_key" --value_file "/etc/letsencrypt/live/vpn.example.com/privkey.pem" ConfigPut
sudo /usr/local/openvpn_as/scripts/sacli --key "cs.cert" --value_file "/etc/letsencrypt/live/vpn.example.com/cert.pem" ConfigPut
sudo /usr/local/openvpn_as/scripts/sacli --key "cs.ca_bundle" --value_file "/etc/letsencrypt/live/vpn.example.com/chain.pem" ConfigPut
sudo /usr/local/openvpn_as/scripts/sacli start

Step 5: Automate Certificate Renewal

Create a script for automatic renewal and apply it via cron:

  • Create a renewal script:

sudo nano /usr/local/sbin/certbotrenew.sh

  • Make it executable:

sudo chmod +x /usr/local/sbin/certbotrenew.sh

  • Schedule it in crontab:

sudo crontab -e

look at your certificate in your GUI and should look like this:


Monday, November 9, 2026

Rogers Hitron modem Bridge mode (model# CODA-5810)

This is how you can use your own modem for routing vs your cable modem. 
You do it this way below to avoid double NAT'ing (which can cause problems with programs, saves on unnecessary processing of your internet connection, so faster).

  1.  Logon to your modem with your user/password
  2. On menu at the top, click on "BASIC"

  3. Select "GATEWAY FUNCTION"

  4. Then on "Residential Gateway Function" select "DISABLED"

  5. When you select DISABLED you'll be prompted with this warning.  Select "OK



  6. Select SAVE CHANGES
    Your modem will now reboot

  7. Connect a cable from the LAN port of your Hitron modem to the WAN port of your personal router

  8. Once the modem reboots, the WAN Ip of your cable modem provider will now be on your personal router, assuming it's automatically assigned. 
    If you were provided some WAN hardcoded IP information by you provider, put that into your personal router.


  9. The cable modem itself will change its management IP to 192.168.100.1

  10. In most cases, you should be able to access that without any other changes if you want to set it back.

Monday, October 26, 2026

Reset Forgotten Windows 11 local password

Lost or forgotten local windows 11 user password? 

A "Hirens BootCD" (USB KEY) may be a way to reset a lost local user account on a Windows 11 system. 

You'll need a USB key that is 4GB or larger in size that can be erased and formatted using RUFUS.



"DOWNLOAD" the Hiren's BootCD PE image from https://www.hirensbootcd.org/


Download the HBCD_PE .iso image
It is used to 'burn' the HBCD .iso image onto a USB key.

Select "DOWNLOAD"


Select the latest release.  At time of writing, it was rufus-4.15.exe (standard)


There may be some different scenarios that will allow this image to be successfully burned onto your USB key, You may need a couple of different attempts.

The Hiren's BootCD site has some other instructions that you may need to follow USB Booting | Hiren's BootCD PE



This is a warning, read it, verify the ISO is downloaded from the official Hirens BootCD site then select YES upon confirmation.



NOTE:
BACK UP YOUR USB KEY DATA.
THIS PROCEEDURE WILL DELETE ANY EXISTING DATA ON THE KEY.

MAKE SURE THE PROPER USB DEVICE IS SELECTED TO FORMAT!! 



Once RUFUS has successfully created the key, you can insert that key into the USB slot of the Windows 11 computer that has the lost password.

RESTART the computer

Press the key for your MB to select a boot device.  This is system dependent so find the sequence for the machine in question.

The system tested on used "F12" to select to boot device/order and allowed selection of the image created by the RUFUS system on the USB key.

If successfull selecting the key, and the system is booting the HIRENS BOOTCD image, a boot screen similar to the following will be presented:


The spinning "Windows" image will be presented


Eventually you will be presented with a HIRENS desktop


Select WINDOWS in the corner
    ->SECURITY
        ->PASSWORDS
            ->NT PASSWORD EDIT


You'll be presented with the Password Edit application

Select "OPEN"



Select the account you want to reset from the list.  This example uses the account "ENCODER"

Select "CHANGE PASSWORD"


Set your new password and select "OK"


Save your changes and reboot your computer.


You should now be able to log in with the updated password.

Wednesday, October 21, 2026

OpenVPN Access server certificate expired

 OOPS, I let me letsencrypt certificate expire On my openVPN access server.

Here's what I  did

From the CLI

certbot renew

got a bunch of output, but the bottom indicates that it renewed successfully.

systemctl restart openvpnas

or

service openvpnas restart

Basically once I restarted the services, and went into my certificat section on OpenVPN Access Server, all was well with the world and everyone could logon.  

I had not set up the cron job properly so the automatic renew wasn't working for me.

Thursday, October 8, 2026

How to cook a turkey

Cook a turkey in your oven.

  1. Thaw your turkey
    1. Refrigerator Thawing (Safest)
      1. 24 hours of thawing for every 4–5 pounds of turkey.
      2. A large turkey can take 3–6 days to fully thaw.
    2. Cold Water Thawing
      1. Submerge the Turkey in cold water.  Change the water every 30 minutes.
      2. Allow 30 minutes per pound, then cook immediately once thawed.
  2. Preheat oven to 325°F. 
  3. Remove the turkey from packaging.  Take out any contents inside it that might be there such as the neck, giblets, seasoning packet
  4. Pat the turkey completely dry with towels.
  5. Put Turkey in a roasting pan
  6. Add 1 cup of chicken broth to the bottom and place the turkey on the oven rack
  7. Brush melted butter evenly over the turkey (including under the skin) 
  8. Loosely tent the turkey with aluminum foil (if the lid doesn’t fit) about 15–20 minutes per pound.
  9. Midway through cooking, remove the foil to allow the skin to brown.
  10. Using a meat thermometer, Turkey is done at 165°F in the breast and 175–180°F in the thigh.
  11. Let the turkey rest 20–40 minutes before carving to lock in juices. Slice, serve, and enjoy.


How to cook a ham

1. Remove any packaging and trim off skin/fat.

Unwrap the ham and discard any plastic, netting, or paper.
Use a knife to trim off any tough outer skin or thick layers of fat, leaving about a 1/4 inch layer of fat.

2. Score in a diamond pattern.

Use a sharp knife to cut diagonal intersecting lines across the surface fat, about 1/4 inch deep. This allows the fat to render and the glaze to seep into the meat.

3. Place ham cut-side down on a rack in a roasting pan.

Position the ham with the cut face (the meatiest side) down on a roasting rack inside a foil-lined pan. Add 1/2 inch of water to the bottom of the pan to prevent drippings from burning.

4. Bake according to size, until warmed through.

For a 6-8 lb ham, bake at 325°F for about 18-20 minutes per lb.
For a 10-14 lb ham, bake for about 15 minutes per lb.
Test for doneness by inserting a meat thermometer into the thickest part – 140°F is the desired.

5. Glaze ham and broil to caramelize.

Apply your glaze of during the last 30 minutes of baking.
For a caramelized finish, switch the oven to broil for 3-5 minutes once glazed.

6. Let rest before slicing and serving.

Once the ham reaches the target internal temperature, remove it from the oven, loosely tent with foil, and allow to rest for 15-20 minutes (retain moisture)

Slice and serve!

Tuesday, October 6, 2026

Sequence to connect to iSCSI Volume from Ubuntu 20.x Server

Connect to iSCSI Volume from Ubuntu 20.04.  Maybe this will help.

Step 1. Install open-iscsi

sudo apt update
sudo apt install open-iscsi
Step 2. Configure initiatorname.conf

We need to edit the initiatorname.conf file located in /etc/iscsi directory.

sudo nano /etc/iscsi/initiatorname.conf
Now enter the initiator name of the iSCSI target into this file. 

In my example, i'm creating a SCSI drive on an Iomega ix4-200d device

For example, in my case, it would be:

InitiatorName=iqn.1992-04.com.emc:storage.ix4-200d-TILRBJ.media


Now save and close the file.



Step 3. Configure iscsid.conf

Now we need to edit the default configuration file


sudo nano /etc/iscsi/iscsid.conf

In this config file, we need to edit some sections to match our iSCSI target server. If your iSCSI target discovery authentication mode set to None, you can leave this config untouched. It will work out of the box. If your iSCSI target server use CHAP, then you need to edit the following


Find and uncomment the following line


node.session.auth.authmethod = CHAP
node.session.auth.username = username
node.session.auth.password = password


Enter the CHAP credentials, username, and password you created on the iSCSI target server. Close and save the file. Now restart the service

sudo systemctl restart iscsid open-iscsi

Step 3. Connect to the iSCSI Target

Discover the iSCSI Target

First, we will need to discover the iSCSI target. On the Terminal, use this command to discover the target

Change the IP address with your actual iSCSI Target server IP.

sudo iscsiadm -m discovery -t sendtargets -p 192.168.100.100

Note down the output as we will need to use it for the next step below. This is important if we have multiple targets in the server like above.


Connect to the iSCSI Target Volume


Now we can login to the target with this command.


sudo iscsiadm --mode node --targetname iqn.2005-10.org.freenas.ctl:iscsi01 --portal 192.168.100.100 --login

Output:


dhani@dhani-Ubuntu:~$ sudo iscsiadm --mode node --targetname iqn.2005-10.org.freenas.ctl:iscsi01 --portal 192.168.100.100 --login
Logging in to iface: default, target: iqn.2005-10.org.freenas.ctl:iscsi01, portal: 192.168.100.100,3260
Login to [iface: default, target: iqn.2005-10.org.freenas.ctl:iscsi01, portal: 192.168.100.100,3260] successful.

The command above will only connect to the iscsi01 target only. If you have multiple targets on the server, and you want to login into them all, you can use this command

sudo iscsiadm -m node -l

To log out from all the targets, use this


sudo iscsiadm -m node -u

Done.


Now let’s check our block disk using fdisk command


sudo fdisk -l

As you can see my iSCSI disk is recognized as /dev/sdb.


Step 4. Format the iSCSI Disk

So now we’ve connected to the iSCSI disk. We can then format or create a partition on the iSCSI Disk, just like a local disk. In the following example, I will create a new partition and format the disk to ext4 file system.

---------------
Was having problems creating partitions larger that 2TB so used 
sudo gdisk /dev/sdb

instead and that allowed me to create larger parititons.
---------------


sudo fdisk /dev/sdb

Now type n to create a new partition.


Command (m for help): n
Partition type
p primary (0 primary, 0 extended, 4 free)
e extended (container for logical partitions)
Select (default p):

Type p to create primary partition and then type 1 to create one partition. You can change this to two for example, if you want to create two partitions.


Select (default p): p
Partition number (1-4, default 1): 1
First sector (256-13107203, default 256):
Last sector, +/-sectors or +/-size{K,M,G,T,P} (256-13107203, default 13107203):

Created a new partition 1 of type ‘Linux’ and of size 50 GiB.


Type w to write the change. Next, let’s check using fdisk


sudo fdisk -l

As you can see, now I have a new partition called /dev/sdb1.


Format the partition to ext4


Next, I will format this partition to ext4 file system.


sudo mkfs.ext4 /dev/sdb1
dhani@dhani-Ubuntu:~/Downloads$ sudo sudo mkfs.ext4 /dev/sdb1
mke2fs 1.45.5 (07-Jan-2020)
Discarding device blocks: done
Creating filesystem with 13106948 4k blocks and 3276800 inodes
Filesystem UUID: aa38ff4c-9d84-49c2-a1d9-9c368319f95f
Superblock backups stored on blocks:
32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208,
4096000, 7962624, 11239424
Allocating group tables: done
Writing inode tables: done
Creating journal (65536 blocks): done
Writing superblocks and filesystem accounting information: done

Mount the partition


sudo mkdir /mnt/iscsi_disk
mount /dev/sdb1 /mnt/iscsi-disk