« first day (856 days earlier)      last day (4140 days later) » 

4:00 PM
@tombull89 Or free up memory, or expand the database, etc. Useless freaking error message.
 
@ewwhite was that after a reboot?
 
Rebooting fixes it. For another two months or so...
11
Q: Windows 2008 DHCP service fails - "...failed to see a directory server for authorization."

ewwhiteI have a small environment running Windows 2008 R2 where the DHCP service on the domain controller fails every two weeks. The most-visible error is Event ID 1059 and the Event Viewer message is: "The DHCP service failed to see a directory server for authorization." The setup features two do...

 
Dan
@ewwhite Is it happening now
 
WOW
Recruiters have some fucking balls.
 
Dan
Bit of a long shot, but you could try Procmon to see if it's trying to write some files where it shouldn't / can't
 
4:02 PM
@Dan yes..
 
Called me on my cell
then my work phone
 
I just rebooted...
 
like my desk phone
really?
 
@Cole Christ, why would you give a recruiter your work phone?
 
I DIDNT
He must have looked me up on LinkedIn
 
4:03 PM
*Just got to work and plugged in laptop.*
***CANNOT GET IP ADDRESS.***
*PLEASE HELP.*
*I need to log on*
 
and then called the company, searched the directory and then called me
 
@ewwhite next time that happens, have a quick look at the RPC service and see if that is running
 
@Cole Ugh, I'll add that to my list of reasons not to LinkedIn.
 
brb again - ugh that pisses me off
 
and for gods sake get DHCP running on a second server...
or even on the firewall (guessing ASA here?), if you don't have any other server
 
4:04 PM
If someone did that to me, I'd ask what company they represent, then tell them I'd never deal with them or their company again, and also tell them to get stuffed.
 
@pauska I shouldn't have to. I'd like to know how to fix that...
 
I should set up a LinkedIn profile with a load of made-up stuff and see how many emails I get.
Skills with MAAS, DAS, NAS, BASS, GRASS
 
@ewwhite huh
 
@Cole Oh, I know what I'd do. I'd look him up, and call the recruiter at home.
 
posted on January 14, 2013 by SysAdmin1138

By far the biggest criticism to that piece are the following two ideas. That's what the background scan process is for. It comes across a bad sector, it reallocates the block. That gets rid of the bad block w-a-y early...

 
4:06 PM
21 hours ago, by Iain
what is ASS ?
 
Sounds like a corrupt DHCP DB (assuming there really is disk space)
Link above is how to fix it
 
Like wtf.
 
@MDMarra The DB seems fine... It can't find the AD :(
 
@ewwhite running a single dhcp server is extremely risky..
 
@pauska 10-user company
 
4:08 PM
@ewwhite then what's that "not enough storage to complete this operation" error?
 
@ewwhite 0-user when neither get an IP
 
That's usually a telltale sign of a broken dhcp database
 
@pauska only person affected is a dude who brings his laptop in. Everyone else seems to ride out their leases.
 
@ewwhite what happens when that dude doesn't bring his laptop for a while? 10 users expire..
 
@MDMarra Then answer the long-standing question...
 
4:09 PM
well KDE is pretty enough
 
@pauska yeah, we catch it :)
 
@Cole I've been using KDE for quite a while now.
 
@MichaelHampton I have to say Fedora 17 has been running much smoother than Linux Mint 14
 
@ewwhite oh, that problem
 
4:12 PM
@Cole I'm not terribly surprised :)
Oh, and Fedora 18 is out tomorrow.
 
@MichaelHampton couldn't wait, Mint was killing me
constant issues
 
@MichaelHampton Given my todo list for this week, I think I'll go ahead and let it sit for a week.
 
I already have F18 on my netbook. Smooth as silk. :)
 
The in place upgrades have been working pretty fantastically since about F13.
 
@MichaelHampton oh yeah?
 
4:15 PM
Well, except that my netbook is a slow piece of crap, regardless of OS :)
There's probably a mirror or two that hasn't done the bitflip right and you can pick it up early.
 
I liked my netbook. Tiny and still enough to do what I needed... I hear the netbook trend is not long for this world though
 
@RyanRies Yeah, it's just a bit smaller than I'd like, and of course it's slow as molasses.
 
I've also read that netbooks brought about a rough price hit on regular notebooks and even tablets, because now consumers expect everything to be as cheap as netbooks
 
argg
Having a hard time trying to wrap my head around how to do this
 
@Cole I use a keyboard and mouse.
 
4:26 PM
@MichaelHampton too easy
 
I have to ask though
aren't you a windows/vmware admin, Cole?
no wait nevermind that, now I remember your solaris questions
 
@Shaman I suspect I once may have done that. But that was by ghosting a laptop with a legal XP on it, unpacking the ghost on a pendrive and installing a legal win7 on the laptop. THus gaining the option to work in XP when I booted from the pendrive (mainly during installation of win7 or when I needed to use vmware workstation 5.5. which does not run under windows 7), or to use win7
/me prepeares to get lauged at for vmware ws 5.5, but this was a long enough time ago. And that was the only legal version I had.
 
@Cole Any reason you're overwriting $infoUsers on line 3?
 
@jscott other than I accidentally copied my shit wrong, no.
While trying to edit this shit
Now I can't edit it in here fff
anyways, I want to -Filter * -Searchbase on All Employees, so a group rather than OU.
If I run it on everything, too much crap - otherwise I have to run it per OU and still get crap in the report. I just need the users in All Employees.
However, I can't seem to get it to filter on group
Can someone edit that code?
and remove my company lol
 
@cole just ping one of the mods @ChrisS @Iain
 
4:36 PM
$group = Get-ADGroup "Some Group"
Get-ADUser -Filter { memberOf -RecursiveMatch $group }
 
Achievement unlocked: People don't ask me to do shit :-)
::happy dance::
 
haha
 
Wow one of the moments when you open a text and there's a vagina.
 
@Cole . . . Wut?
 
4:37 PM
BALEEEETEEEED
 
@voretaq7 girls send me nudes a lot.
 
@Cole . . . in text?
oh, SMS
 
MMS
 
@voretaq7 no, it was an ASCII vagina.
 
unless he know some VERY geeky girls who sends ascii vaginas
 
4:38 PM
I was envisioning a giant ASCII art vag and wondering WTF kind of shit you were reading
 
If I squint really hard, it looks real.
 
@SmallClanger GREAT NOW I HAVE TO GO TO THE BATHROOM
 
@Cole on the right monitor, at the right angle...
@SmallClanger Woodstock's footprint is not a vagina.
 
( [ ] )
that's all I got
 
4:39 PM
@Cole That one looks a little used...
 
I need some storage troubleshooting advice
 
@r.tanner.f DON'T MOCK MY WIDE SET VAGINA.
2
 
@Basil ELLO
 
Anyways, is it common when you get old to schedule sex?
 
4:40 PM
@Cole I don't think this beats @WesleyDavid's nominee for best quote starred out of context 2013
 
Which was his @voretaq7
 
@Cole I wouldn't know, I don't get laid anymore.
 
@Cole I personally think it's important. I may not be old but I do have a kid. If we don't schedule that little bastard to go down at 7:30 and get busy it doesn't happen often enough.
 
2 days ago, by WesleyDavid
Know that some strange American kid was thinking of you with steaming crap in his pants.
 
4:41 PM
@MichaelHampton it appears you have the "can't find the clit syndrome" all you guys seem to have it.
 
@Cole I can't find the right Unicode symbol. The clit, I can find.
 
Has anyone ever seen /var/log/popularity-contest ?
 
@ewwhite It's a debian package usage tracking thing.
 
@ewwhite Debian box?
 
yes, debian thingy
 
4:42 PM
@ewwhite it's a sign that you forgot to remove the popularity contest package.
 
@MichaelHampton Yes, still looking at the LSI server.
 
@voretaq7 meh, it doesn't hurt to have there
 
Also, that thing isn't a joystick, we're not playing Street Fighter here. Please don't try to hadouken my junk, thanks.
 
@pauska It makes external network requests, therefore it has no business on my system without explicit approval and selection.
 
4:43 PM
I just put so much lotion on my arms and hands, it looks like I was getting ready for a fist fest. God damn weather.
 
a web browser also makes external network requests
 
Also thanks @jscott !
 
the only difference is that you can actually view the source code of the popularity contest package, and easily determine that this is in no way dangerous, and that it helps the people who create your free OS
:)
 
@Cole not sure if star...
@pauska no, the difference is a web browser doesn't run in the background without my approval - it has to be launched by someone.
 
Which one @voretaq7
 
4:45 PM
popularity contest runs on its own, with no approval, and creates audit exceptions by trying to access external resources from a secure network.
 
Street Fighter or Fist fest?
 
no
 
@Cole the one it's linked to.
 
@voretaq7 That's not true. I'm not launching all those pop-under windows for Russian mail order brides and horny local singles.
 
it runs with your approval
you approved it when you chose to install it
 
4:46 PM
@pauska sneaking it into the OS by default is not "my approval"
 
@voretaq7 well I didn't check that, well fuck
 
@voretaq7 !?
 
it's "yet another reason Linux is banished from my production environment"
 
it does not??
 
wtf Operator not support?!
 
4:46 PM
It asks you, pretty strongly, if you want it
 
@pauska hi
 
@pauska Maybe Debian does and Ubuntu doesn't - because I was NOT asked about it on any of the Ubuntu systems I installed in the last 3 years, and had to remove it from each of them.
 
@Basil hi mate - do you have a minute or.. five?
 
@pauska Sure
que pasa?
 
Debian certainly asks if you want popularity contest during the installation. Ubuntu... doesn't.
 
4:48 PM
@MichaelHampton :moves hate-cube from "general Linux hate" to "Ubuntu-specific Hate"::
 
@jscott Get-ADGroup works, but fails for "RecursiveMatch". the fuck
 
Ubunutu is rapidly becoming != linux.
 
@Basil we're experiencing some weird problems with the VNX.. It started a few months back, when one of the controllers suddenly rebooted on it's own a few times in a row. EMC got here, and replaced the SP..
 
@pauska this... sounds familiar
 
@SmallClanger they all suck. Debian sucks slightly less.
 
4:49 PM
 
RHEL doesn't suck too much iff you license everything and use all their tools which bear no resemblance to standard Unix tools.
@MichaelHampton This I can respect. they're at least asking me before installing something that is going to set off my IDS.
 
@Basil the emc tech forgot to restore the SPB config, so it was set to wrong MTU (we're using iSCSI with jumbo frames).. when I tried to fix that, the SP crashed again and rebooted..
@Basil now we have a open case against EMC engineering (1 month and counting), waiting to find out why it crashed so horribly
 
@Cole ? What error are you seeing? The following is a literal copy/paste from my open PS session:
Import-Module ActiveDirectory
$group = Get-ADGroup "ISC Staff"
Get-ADUser -Filter { memberOf -RecursiveMatch $group }
 
@pauska as soon as they come up with a plausible lie they'll tell you.
 
@Basil the thing is.. vsphere is reporting that it's losing ALL connectivity to some of the LUN's several times a day
 
4:51 PM
@jscott nevermind I can't type
 
@pauska That sounds painful. I assume you got both SPs back up and redundant, though?
@pauska shit, that's worse.
 
@Basil ^
yep
now I'm seeing exchange and file corruption across the board..
servers really don't like to lose storage for 10 seconds..
2
 
Did vsphere start seeing this at the time of the incident?
and never before?
 
@Cole np, I do it all the time :)
 
we didn't have a single problem before the controller crashed
 
4:52 PM
@jscott it works, thanks!
 
what I don't get is why vsphere is losing access to ALL ports (there are 4)
everything is redundant.. two different cisco switches, servers have iscsi ports on different nics and so on
I just can't think of any other reason than the VNX being faulty..
but, what the fuck could cause servers to lose access to both controllers at the same time?
perhaps iSCSI target problem?
 
I don't know vsphere very well, but with AIX, I'd have them trap the SCSI events and check if there was something in there I could use to hit EMC with
Another possibility is the MPIO config- I assume it's the same as it was before the problems started?
 
yeah, some kind of log in vmware that tells me "target disconnected me" would be great
yeah, been running this at round robin (ALUA) since day one..
 
If it's currently set to round robin, change it to sticky paths
see if the problem goes away
 
ok
good idea
what would it tell me though? if it works?
 
4:55 PM
it could be something as simple as now the round robin is activating some tresspassing bug
 
ah
great, I'll set one of the boxes to fixed
 
If you prevent accessing the same LUN through more than one path outside of a failover event, you can eliminate some types of causes
 
(the disconnects happens on every host we have)
but fixed right? not MRU?
 
fixed with the possibility of failover
 
single path is going to hurt us performance wise.. but I agree, it's a great way of troubleshooting this
 
4:57 PM
I don't know what that's called in vsphere
 
yeah fixed is a static path with failover
MRU is most recently used (also 1 path active)
 
Either way, instead of having EMC investigate a root cause (which they dont prioritize highly), open a new case on disconnects
this is a serious problem, and if you have seen data corruption, you can make it sev 1
start banging the gong until you get the support you paid for.
I've had bad luck with my EMC kit, as well as with the service provided, but that's why they lost the big RFP
I need to jet for a while, but I'll be back :)
 
I'm like "Oh I need to do something in AD? Let me use PowerShell and script this shit"
Like Authorizing a DHCP server. Instead of typing out the command every time, I have it prompt you to enter the server name and then IP then run the command.
 
can y'all try laspecialty.com
 
Lunch time, bbiab.
 
5:01 PM
@ewwhite “What I create is dependent on the ingredients. For over 15 years, LA & SF Specialty has consistently provided the highest quality fresh produce and seasonal items, allowing me to focus on creating and styling beautiful food."
@ewwhite I still think those pots and pans for navigation are silly.
 
@ewwhite Loads here
 
slowly, shittily?
 
@ewwhite Didn't seem unusually slow
 
slow here
 
@ewwhite I hate how it's chopped into pages with 1 paragraph of information each, and the drop down menus are 90s Fabulous... Otherwise it's not bad.
Load times are reasonable (<1s best guess)
 
5:04 PM
@ewwhite Loaded pretty quickly. I get a 404 when clicking on "products" -> "catalog" : laspecialty.com/ppro/online?command=welcome.create
 
btw thanks @jscott works great, now I can move on to other things lol
 
my browser took 4.3 seconds just to get the footer
 
like lunch
 
@Cole Cool. Glad it worked.
 
@ewwhite uncached it's a bit slow but quicker after that
 
5:05 PM
@jscott I appreciate it.
Ok time for lunch!
bbiab
 
@Basil yeah I emailed the EMC country manager now, as he's handling the case..
 
@jscott from the dev...
"Great thanks, working as expected except I'm getting 404 at:

http://www.laspecialty.com/ppro/online?command=welcome.create

[Sean at PPRO has a redesigned front end that he's been working on at:
http://www.laspecialty.com/test/ppro/online?command=welcome.create
"
so yes, that's a mess.
 
@ewwhite 404
 
@ewwhite are you seriousloy getting a <1 second load time of the front page if you do a force refresh (ctrl+f5 on windows)?
Here, the .png's take nearly 4 seconds to arrive.. 3.8 seconds waiting for connect and then a quick download
 
@pauska kk..
THat's bad.
 
5:11 PM
morning folks
 
mornin'
 
how was everyones weekend?
 
Just out of curiosity, is there anyone here who actually likes Websense? Their crap is driving my crazy.
 
@HopelessN00b managers?
 
Yeah, more bullshit "pull a report for me on [user x]." Which, of course, is bloody painful with Websense. Like really, you put together a webfilter, and make it a chore to run a report on a specific user? WTFH?
 
5:17 PM
@ewwhite check if the webserver is trying to do reverse lookups.. that's bad (BAD BAD BAD)
 
@pauska Hmm...
 
@pauska but IP addresses in logs scare people
 
god, HN really needs to calm down on the Aaron Schwartz stuff
its been like 4 or 5 days and its still the main topic of 90% of the posts there
 
5:34 PM
@David Well, story kinda does need to be told. Fucking government.
 
@HopelessN00b yeah, but does it need to flood a news website?
Good read: wired.com/threatlevel/2013/01/red-october-spy-campaign (Cybersleuths Uncover 5-Year Spy Operation Targeting Governments, Others)
 
@David Maybe not, but if there's no other news worth reporting, may as well point out that the government's only there to fuck us over, given how many people seem somehow oblivious to all the damage done by the government, on a persistent, perpetual basis.
 
@HopelessN00b I'm sure there IS other news worth reporting though
HN is rarely dull
It's not really too bad today, but the past few were ridiculous
 
Could be... then again, it's hard to top someone of that profile killing himself because the government was railroading him into jail for 60 years... for downloading free academic articles.

Completely outrageous, and worst of all, the people who did it won't ever even see the inside of a courtroom for it. Tough story to beat.
 
yeah, i get that its important, but do we need 100 stories on it
 
5:51 PM
I think so. Guess you disagree, though.
 
Oh god, so who here has experience using spnego for kerberos auth into jira over external (not forest) trusts?
 
I think it's nice/important to actually have that contrast out there - this is what the government actually does when it gets involved - especially lately, with all the front page stories lobbying the government to get involved and fix [school shootings, budget, education, etc., etc.].
@MDMarra Hah! Apologies, but I gotta say your pain's pretty amusing on this one.
 
It's documentation seems to say "if you use forest trusts, your cool. don't use external because upn routing and spn auto-registration doesnt happen"
but I mean, you can do all of that manually with an external trust (one of our children trusts their root), but it doesn't say what I need to do, afaik
 
ok thar we go
 
@MDMarra Urg, love that. I'm working on one of those myself. "You can do it manually, but we're not gonna bother to mention anything about how."
 
5:56 PM
@Basil they're escalating it to data loss status now..
 
Hm there's a gotta be an easy way to script searching AD for a user account.
I'm honestly just trying to script all the things that take me more than 5 minutes.
 
@Cole Sorry I don't know the back story, but uh..... what about Get-ADUser joebob ?
 
@RyanRies no idea why, but I can't get it to work for me
I thought that's all it would be
 
In what way is it not working?
 
@RyanRies how can you search via Display Name
Like Joe Bob
since my issue is, our users dont have really standard user names
like mine is usclav
 
6:10 PM
The -Identity parameter only accepts DN, GUID, SID or sAMAccountName
 
@Cole What the fuckity-fuck? Is your place as messed up as mine, or something?
 
@pauska Excellent- that's what's needed
 
@HopelessN00b do we not remember my AD Visio!?
 
You'd need to filter: Get-ADUser -Filter { displayName -eq "Jason Scott" }
 
Ah @jscott thank you
 
6:12 PM
@Cole AD Visio?
 
So I essentially could do $user = Read-Host "Enter Username" Get-ADUSer -Filter { displayName -eq"$user" }
 
@Cole Oh, that's right. The ol' brain must have tried to block that trauma from memory or something.
 
@r.tanner.f did a topology map lol
It's ugly
 
Might trade you still. My AD structure looks like Kansas.
Security groups ftw!
 
@r.tanner.f no...no no. I have NT Domains sir. NT DOMAINS
MULTIPLE
 
6:14 PM
oh fuck me, this is going to be fun........
 
@Cole Nevermind you can keep it. =D
 
@Cole Yes, but not on a single line... Well, not without a ;
Wow I can't figure out how to write that without markdown eating it.
Get-ADUser -Filter "displayName -eq `"$(Read-Host Display Name)`""
 
@jscott MARKDOWN LOVES TO EAT UR CODE. OM OM NOM!
2
 
I would probably just go with the two line thing as that's a lot easier to read.
 
@pauska Yup, that's why we're building and migrating to a whole new forest now.
I was actually excited about that at the time... back when I gave a shit.
 
6:23 PM
@jscott yeah I just forgot to hit enter lol
 
@HopelessN00b we just got done migrating to a new .local domain
 
@pauska Lol. Well, at least it's job security. Can't come soon enough for my taste, personally. Fuck all that invalid TLD garbage anyway.
 
Hrm, not working weird - just kidding I'm an idiot
Ah I went one step further @jscott Get-ADUser -Filter "displayName -eq "$(Read-Host Display Name)"" | Select SamAccountName - boom
 
For maximal illegibility:
 (Get-ADUser -Filter "displayName -eq `"$(Read-Host Display Name)`"").SamAccountName
You won't make friends with scripts that contain things like that. :)
 
@jscott if you type in more than one line then you get a fixed font button
 
6:30 PM
@jscott always gotta one up me ;)
 
e.g.
Get-ADUser -Filter "displayName -eq `"$(Read-Host Display Name)`""
 
@Iain Wow, thanks. I had no idea.
 
6:43 PM
This just in: MBP Retina will roast your junk if you don't crank up the fan speed
 
@JoelESalas You say that like it's news?
the freaking iPhone will cook you if you don't provide it with forced-air cooling.
 
@voretaq7 More on this shocking development at 6 and 11
 
@JoelESalas between the ads, right.
 
@voretaq7 I ended up using smcFanControl. Both fans full tilt, 61C
 
I see Oracle has "secured" Java now
latest update brings a large, ugly popup whenever something tries to launch Java
yeah, cause that's going to stop users from running stuff
 
6:47 PM
@pauska They already had that, it's called the "Java Splash Screen".
 
why is this the first time we see it then?
 
something something about Java being more insecure than a teenage girl.
 
I've been seeing it every time I launch a java app for years.
 
no
I know what you mean
that happens on untrusted (as in not signed) apps
now it happens on every java call
 
So I guess we're not allowed to wear headphones here. Driving me nuts.
 
6:49 PM
even the "do I have java" test over at java.com brings the popup..
@ScottPack see? it's not the usual one
 
Still looks normal.
 
@JoelESalas case, or CPU?
 
Every single time I launch Spectrum. Even if I tell it to remember.
Douchewaffles.
 
@ScottPack nope, it's not normal.
 
Just move the security slider from "high" to "low" -- you won't be prompted anymore. :)
 
6:52 PM
yeah I just read that @jscott
"The update basically sets Java’s default security settings to “High”, which means all code from unknown sources will be flagged before running on the user’s say-so."
 
I find it hard to believe a Norwegian is capable of defining normal.
3
 
@Cole Can't wear headphones at work?
@voretaq7 I'm not sure what it reports. I think it's CPU because the case can be touched now
 
@Cole Wow. I'd quit. Like, on the spot.
 
@jscott medium was the trick
we can't just enable stuff like this, we'd DROWN in requests tomorrow..
 
@pauska Correction: Your support desk would drown in requests.
 
6:57 PM
@ScottPack Correction: We don't have a support desk. We're "IT"
 
@pauska Well, I just identified your first problem. :)
@pauska Here, they're all off camera right now but as soon as they move it should help you feel better. new.livestream.com/FosterKittenCam/RipleysKittens
 
@ScottPack I'm in the same boat. It's strangling what little's left of my sanity. It's a struggle to interact with the users on a daily basis without using phrases like "asshat" "fuckwit" or "boot 3 feet up your ass." :(
 
@ScottPack does he kill them with nails and a hammer?
 
O_O
 

« first day (856 days earlier)      last day (4140 days later) »