« first day (880 days earlier)      last day (4088 days later) » 

12:00 AM
@Cole Yeah, also I was totally out of breath by the end of each set of 20. Both situations tell me that I need to do more.
 
I understand
 
@ScottPack I can't wait to work out
I also can't wait to go swimming this summer
 
@ewwhite Heckfire - what kind of RAM and HDs did you put in that?
 
@WesleyDavid ??
 
@ewwhite I know it's bad form, but is there a single switch that can handle VM traffic AND storage traffic?
 
12:05 AM
@JoelESalas I do it.
 
@ewwhite 9k for a single last-generation DL380?!
 
Yo, @voretaq7 @ScottPack just finished BSG
 
@MDMarra And?
 
don't want to spoiler alert Cole here, but I liked it
 
@WesleyDavid 600GB disks, RAM, X5650 CPU's, ILO licensing and VMware Standard Edition per-socket.
 
12:06 AM
I wasn't disappointed at all, and it's actually what I expected
 
Oh yeah, how far along are you @Cole?
 
the box is like $3500
@JoelESalas What type of storage? 1GbE 10GbE?
 
@ScottPack with?
oh BSG
I just finished the first episode
 
@ewwhite Ahhh, VMware licensing ONCE AGAIN takes a perfectly reasonable idea and reams it.
 
@ewwhite NFS over 1GbE
 
12:07 AM
I realized I actually have to pay attention to the show, so I was working on some stuff so I turned it off for now
 
@MDMarra What annoyed me was the resolution around the explanation of that one person who did the the thing that was all woah.
 
@WesleyDavid $2440 to license the server.
 
@Cole Ah, we got a while then.
 
@JoelESalas I like HP, but anything will do.
 
@ScottPack really pulled me in with just the first episode though.
 
12:08 AM
@ewwhite Wait, $3500 server, $2400 licensing... where'd the other 3k come from to make it a 9k server?
 
@Cole It was really well done, yeah.
 
In my setup here, I'm using an HP 5406zl with 8 x 10GbE ports and 20 1GbE copper
@WesleyDavid disks.
 
@ScottPack You mean when they show what the, err, daughter became?
 
@ewwhite Ahhh, yeah. It's always disks. Did you SSD?
 
RAM... ILO, license, 24x7 3-year 4-hour support
no, 600GB SAS enterprise
 
12:09 AM
The tape over my stitches is starting to lift.
 
@ScottPack Or do you mean when the woman went poof on the guy
 
@MDMarra Oh, no, not her. That was a cute wrap up, but no.
 
(That's good but it's weird)
 
@MDMarra Yes, that.
 
@JoelESalas why is it bad practice?
 
12:09 AM
@MDMarra It just kind of felt cheap to me.
 
@ScottPack I think it fits with the two people that we see in the ending scenes
 
@WesleyDavid very few firms NEED Sandy Bridge CPU's or Gen8 ProLiants.
 
@ewwhite I guess if you're doing some serious iSCSI stuff the latency matters a lot and you want to keep it separate
 
@MDMarra Oh definitely.
 
This is just what VMware and Dell told me.
 
12:10 AM
I assume that the, um, replay of her is the same as those two
 
@MDMarra It stands to reason.
 
@JoelESalas That's why I go with chassis switches with relatively low latency interconnects.
 
Off to scifi.se to read everything in that tag now
 
@MDMarra I thought the last few minutes was pretty stinking well done.
@MDMarra Good call.
I probably should do that. I'm trying to shove into my brain some last minute prep for tonight's game.
 
Yeah, I don't know why @voretaq7 seemed so down on it
 
12:11 AM
I'll be off to our gaming space as soon as the wife gets back.
 
@WesleyDavid the Gen8's are ~20% faster for like-model systems, but I don't see anyone exhausting CPU these days...
 
@ewwhite So chassis to storage? No switch in between?
 
@MDMarra It was preachy, and I didn't like that part of it.
 
@JoelESalas I like the chassis because I like the build... like a blade server. So moar redundancy, better design, more robust and no stacking
 
I don't think so really. I mean it definitely says "all of the modern religions are wrong"
But I can see that though
 
12:13 AM
@ewwhite Nah, it's always bandwidth that gets saturated first. Do you deploy many 10Gig NICs or do you just team a quad port NIC?
 
@WesleyDavid @JoelESalas An example - instagram.com/p/T_s-FzzCnt
 
@MDMarra I meant the kind of implied finger waving that says, "You be careful you silly little people because look what you're doing."
 
@ewwhite OK, thanks for the insight. I'm just wondering why they were so adamant about it. Most people dont' run DB engines on a VM on an NFS datastore though (I hope)
 
@JoelESalas We do at work.
Isilon and EMC VNX - both serving 1GbE NFS.
 
@ewwhite I was looking at the VNXe last week
 
12:14 AM
@ewwhite Oh man! And the 1GbE is sufficient?
 
@WesleyDavid NIC bonding doesn't help with single-threaded throughput.
@JoelESalas few seem to need more than 125Mb/sec... it's all about the random I/O. 10GbE to the storage units.
 
@ewwhite Correct, but how many single-threaded apps do you know exist that regularly saturate a gig line?
 
@ScottPack Oh, right
Well, the 6 seemed to think it would be fine
haha
 
I'm just saying that with NFS storage, 10GbE is the way to go if you need more than that
 
I think it was just acknowledging that it's the natural progression of things
 
12:16 AM
@MDMarra Because if there's one person's judgement I'll always trust it's hers.
 
@ewwhite Is there ANY scenario where iSCSI is preferable over NFS, all else equal?
 
@MDMarra Oh sure, that was the redeeming part for me. It was well put together and made great sense.
I think the wife's home. Have a lovely evening gents.
I'll make sure to kiss Katie nice and good.
 
See ya
 
@JoelESalas Not for me... VMware closed the gap.
 
@ScottPack Your Katie, not mine.
 
12:17 AM
@MDMarra Do I need a Katie?
 
It seems like the guys with Katies are doing pretty well
2
 
Good afternoon gents
 
@JoelESalas I prefer NFS storage since you can SEE the files. iSCSI seems to be bleh... It can be better for MPIO purposes and because there are VAAI extensions readily available.
 
@JoelESalas Can I have a Katie too?
 
@ewwhite I think MPIO is also quite doable with NFS. We're setting that up with our NetApp this week
 
12:21 AM
@JoelESalas it's not clean
 
@ewwhite NetApp swears by it, I guess we'll have to see how it fares
 
beer o'clock has arrived
 
@JoelESalas It requires VIP addresses and multiple subnets. The VIP addresses all point to the same datastore. So it's not good for bandwidth, but provides multiple paths...
 
@JoelESalas super easy to setup
 
But it's certainly not MPIO.
 
12:23 AM
works wonderfully too, no issues.
 
:( Oh well.
 
If you need the throughput, 10GbE, otherwise none of your VMs will see more than ~120Mb/sec
 
@Cole I wish it was Katie O'Clock
 
@WesleyDavid wat
 
@Cole Katie!
@ewwhite MOAR THROUGHPUTS!!
 
12:25 AM
I..I dont know what you're talking about
 
@Cole That makes two of us.
 
@WesleyDavid Go home cat, you are drunk. Or have a fever.
 
@mdmarra better not go too far from a PC...
 
Debating on seeing if my employer will buy me a Mac Mini
 
do it!
 
12:28 AM
@ewwhite they said no new laptops, but fuck, my manager said he'd buy me whatever will make me "more productive"
I'll be like look, $600 for the Mac Mini, buy the 16GB sticks - I'll put it in and call it a day
 
@Cole Get a MBP Retina
 
Be sure to get an LED Cinema Display, too!
@JoelESalas my MBP retina has had system board issues.
 
Go on?
 
@JoelESalas they won't
I can probably get them to spend $600
 
@Cole Bummer. I take it you don't want a laptop?
 
12:29 AM
I do
but they said no new hardware
5 year old Dell latitudes
I cant take it anymore
 
@ewwhite What are you breaking now?
 
@MDMarra I fixed the printers, Flash, put an icon on someone's desktop...
and now all is well.
50% of people are on terminal server
 
the calm before the storm
 
DogFish Head 60 Minute IPA...mmmm
 
@MDMarra they all LOOOOOVE the terminal server
 
12:32 AM
Is that sarcasm?
 
@ewwhite What benefits do they coo about the most?
 
@MDMarra nope, they love it...
 
Nice
 
it's faster, they like Exchange...
it's all because on the old server, they were limited to 3.5GB RAM...
 
When you fixed flash, did you just uninstall it and reinstall with change user /install?
 
12:33 AM
@MDMarra had to modify the registry settings, too
 
to remove old entries?
 
@MDMarra to change the permissions on those entries.
 
Ah
 
Wow
 
So, if everything's so great now, what do you plan on breaking that you need me tonight?
 
12:35 AM
did you guys see this? youtube.com/watch?v=IPM8OR6W6WE
 
@MDMarra nothing... done with them. Building another Exchange server tonight.
 
ah
need a clean AD? :)
 
buy certs, etc.
davalansales.local
 
ouch
 
actually...
I never built the exchange box... I could change the AD name
but they don't even have a public website
 
12:37 AM
What is connected to AD right now?
 
nada
a DC
 
yeah dude, start from scratch
Supposedly, it's going to be hard to get UCC certs with .local in the near future
@pauska keeps talking about it
 
the server it's running on is crazzzzy.
 
details
Isn't it past your bedtime, @Chopper3?
 
DL380 G7 with internal disks, an SSD, a RAID controller, a SAS controller, ZFS PCI passthrough to a nexenta VM serving NFS to itself to hold compressed VMDK's for the produce software.
 
12:39 AM
How are you feeling?
@ewwhite God, you're a glutton for weird shit
 
this is before I found ZFS for Linux
 
That wouldn't make it less weird, man
 
before/after
OH wait... I got rid of Nexenta and just passed the raw Disks to a CentOS VM
to run ZFS
 
I like this arrangement we have
 
[root@Davalan ~]# zpool status
  pool: vol1
 state: ONLINE
 scan: none requested
config:

        NAME                               STATE     READ WRITE CKSUM
        vol1                               ONLINE       0     0     0
          mirror-0                         ONLINE       0     0     0
            scsi-35000c5003af99fa7         ONLINE       0     0     0
            scsi-35000cca0153ec2d0         ONLINE       0     0     0
          mirror-1                         ONLINE       0     0     0
 
12:41 AM
You do really fucked up hardware shit and I pretend it doesn't exist and work with the VMs
 
With an STEC read cache.
 
I'm not sure what that means exactly, but I assume 0 0 0 means that it's totally idle?
 
I mean, I have two levels of application redundancy... and the Windows side is sitting on normal HP Smart Array RAID disks and VMFS
The Zeros mean Zero errors.
 
ah
So, what's the currently installed infrastructure? Just one VM as a DC?
 
Yeah.
I was toying with managed/virtualized remote offsite DC's.
 
12:44 AM
Do they own a public domain at all?
 
yes, for email
(pop3)
 
Ok, so you spin up two VMs, ditch the old one, I'll do the third-level subdomain with nice looking netbios and alternate UPN thing
 
So, why do I make this messed up hardware work? Because I need filesystem compression.
 
Oh, I mean what you're doing is just rolling your own VSA really
 
Total disk usage: 49.5GiB Apparent size: 125.1GiB Items: 180344
 
12:45 AM
I joke about it being fucked up but I mean, it's no different than something like a P4500 VSA
 
In this case, it's just a VM with full control of an LSI SAS controller.
so this is more of a PCI-passthrough setup
 
right
 
I'll look at the domain and see what's attached. Right now, we just serve DHCP
and DNS
 
Yeah, I pointed you to that this morning right?
 
Yes.
maybe
 
12:48 AM
And a DHCP export/import takes 10 seconds. Preserves the leases and everything
 
Couldn't I just rename the domain on the DC?
 
I mean, you could but if nothing else is using it it's easier to just start over
 
@MDMarra I need the same IP because of MPLS-managed routers and the need for helper-addresses
 
Oh
What about building another DC, moving the DHCP database, and then re-ip the new DC to have the same IP as the old one now?
Or I could break out my notes on rendom.exe. Either way
Starting fresh is definitely preferred but I can make it work either way.
 
they have no domain policy
no organization
 
12:52 AM
Right. It's not as simple as right clicking on "computer" selecting properties and hitting rename though
 
this is a simple company
why do they need a complex naming scheme?
 
because you're going to have a bitch of a time getting .local on a UCC cert for exchange in a couple of years
 
@MDMarra you can get .local on a UCC cert now?
 
@Zoredache Yeah, that's how exchange works for people with .local domains.
 
better to do it now, than later.
 
12:54 AM
You need the internal and external names on it, so people with .local need the internal name on it, right?
 
@MDMarra if you are going to have a .local domain, I figured you would have to use your own CA.
 
Nah, you can have them issued now from a trusted CA
 
And the problem with using your Enterprise CA is that non-domain devices won't trust the CA that signed the UCC cert? Sorry for the n00b question, I don't have Exchange.
 
But that's changing
@jscott Yeah
 
Ah, I understand now. Thanks.
 
12:56 AM
So if you let students use outlook from the outside, or connect to OWA, they need your root cert trusted
 
Public CAs suck, they should have never permitted those certs in the first place.
And Microsoft sucks, because they didn't make it easy to associate multiple certs with a single instance of Exchange.
 
@MDMarra Which could be total PITA on a phone or tablet device..
I should really be taking notes.
 
@Zoredache I think it was only if you also had a public name that was legit on it as well. I don't think anyone ever issued a straight something.local with no SANs that were valid public addresses
 
I don't think it'll be too hard to get the certs!
 
@jscott it isn't that bad on ios, a user can trust the cert, and it will be saved.
 
12:57 AM
@ewwhite There's been all kinds of articles on it lately
Plus, it won't take a ton of effort either way to do this domain right. I mean, if it's an extra hour or two to make sure that you don't have to redo it all in a couple years, isn't that worth it?
@jscott It's funny, because I don't know much about how to use Exchange other than making mail contacts and new mailboxes. But, I do know a whole lot about recommended setup and architecture for it
 
@Zoredache Good to know, I've not used Android/Other tablets enough to know how painful it would be. I do seem to recall having to futz with our BlackBerry phones and Notes certs, but that was many years ago and we don't have any BB clients left.
 
The Exchange guy at La Salle was a whiz at exchange but sucked at networking and design. So I designed the whole email infrastructure there and he managed it
 
@MDMarra Well isn't that where the cash is? Setup/config? Let the techs manage the install once you're done? :)
 
But if you asked me to make a meeting room and restrict who can book it I'l just stare and drool
 
There's got to be a cmdlet for that sort of thing.
 
1:01 AM
@jscott Oh, I mean I legit did the high level stuff. Server spec. What was in the DMZ what wasn't. Roles, cert requirements, etc. He did all of the install
I don't even think I've ever done a whole install outside of the microsoft hyper-v labs
 
I'm quite good with mail stuff... but we'll see. I'll check tonight
 
@jscott I think you provide some options to new-mailbox.
 
It's sad[?] but I haven't even touched Exchange in over 10 years. I'm sure it's a completely different beast now.
 
@ewwhite Don't install it! Don't. you. install. it.
If you were @WesleyDavid I'd point a spray bottle at you
:)
 
@Zoredache And poof. Magic happens.
 
I'll take my chances!
you haven't told me what the domain should be
 
Fuck, someone's printer in the building melted (literally, melted) and set off all the fire alarms. 20 minutes for the firemen to turn up, then they let everyone back in except our floor (cos it was on our floor). This is the 2nd time in 3 months that the office in 307 have had this happen
Next time I'm going to kick them in the nuts
 
@ewwhite What's their publicly registered domain?
 
davalansales.com.
 
do ad.davalansales.com for the FQDN and set the NetBIOS name during an Advanced Install to davalansales.
Then make a UPN for @davalansales.com and make that the standard suffix
So people can log in with davalansales\ or whatever@davalansales.com but the FQDN of AD doesn't overlap
You're in the clear for name resolution and certificate problems and the users are none the wiser.
The only people that will ever see the FQDN are IT people
 
1:14 AM
How about domain.ad.davalansales.local.cc
2
or .biz
 
ಠ_ಠ
Don't star that
ಠ_ಠ ಠ_ಠ
 
You make it seem like I've never deployed a .biz or .cc! It's the next big thing!!!
 
@ewwhite Only if each one of those subdomains is an actual empty child domain with just domain controllers in it
 
I have to agree, the "CC" after "produce" just flows.... produce-c-c
soft "c" there
 
haha
So, do you actually want any work from me tonight, @ewwhite?
 
1:24 AM
I'll look at the AD and see what's what.
 
ok
 
VPNing in
There's a DC, a file server and a terminal server. Exchange hasn't been configured.
 
@ewwhite You want to exhaust CPU, run a web site. :)
 
@ewwhite Are they all being used?
 
Nope
 
1:30 AM
Is anything configured on them?
 
I built out a TS and RemoteApp... but it's not a big deal.
 
I think the cleanest thing to do is spin up a new DC.

Unjoin the two member servers.

Change the IP on the new DC to replace the old one

Re-join those two servers
Then move the DHCP database from the old box to the new one
 
I don't like the name ad.davalansales.com
 
So what would you like?
 
ad.serveritsyourfault.com
 
1:34 AM
Keep in mind that no people would ever really see it except for people typing in FQDNs to connect to terminal services or whatever
internal.davalansales.com
.org.net.co.uk.nz.fuck
 
@MichaelHampton what do you think?
 
@ewwhite I think that when it comes to naming my domain controller I'm going to listen to @MDMarra
 
I mean, the third level name doesn't matter. I tend to recommend ad. because it's the shortest thing that is meaningful
 
That feel when you submit a support ticket and you realize that the ticketing system is 3 hours ahead of you
 
@MDMarra what about multiple locations?
 
1:37 AM
What do you mean?
Like different buildings all in the same organization?
 
let's say... San Fran, LA, Tijuana, San Diego, Phoenix...
 
Aren't those "sites"?
 
If you don't need management boundaries and you have connectivity, use the same AD DNS name for all of them. Have them in one domain. Give each site unique IP schemes. Use AD Sites & Services
 
yea... so sf.ad.laspecialty.com, tj.ad.laspecialty.com
 
Nah, don't use a subdomain for that
If you need a visual indicator, do it in the hostname
prefix things in SF with sf-
so sf-dc01.ad.producerules.com
 
1:40 AM
@MDMarra This. That's what we do
 
at work, we have a full mix...
 
If you do need management boundaries (like different domain admins at different sites that can't tread on each other) then you need child domains and thats where those subdomains come in
Those aren't AD domains though, right?
 
make sense of that!
 
it's a virtual machine. it's in new jersey. it belongs to your client. it's in your company's namespace
what do I win?
 
@ewwhite The VM's one of our client gives are are named comany005 (SQL),company006 (TS),company007 (IIS), which is maddenningly frustrating, and another client gives us names like WD47837CD32 (SQL Server), WD84989375HF74 (IIS SErver)
 
1:42 AM
company-group-function[virtual].location[facility].client.blah.net
 
So, it could be worse
 
@MarkHenderson our servers at headquarters are all HQCORPMS01 HQCORPMS02, etc
 
can't say that yet
 
Being shirtless is nice and all but it's fucking cold
 
headquarters, corporate domain, member server, next available number
 
1:43 AM
And that's why you CNAME up your DNS namespace
 
@Cole Awesome isn't it
 
Awesome but cold lol
 
Although, if I'm honest, topless women are even more awesome, but you take what you can get
 
I miss my built in shelf a bit though
I used to be able to rest like my phone there now it just slides down, I keep forgetting
 
@Cole Just stick it in the elastic of your boxers.
 
1:46 AM
@jscott good idea, also boxer briefs > boxers
 
@MDMarra so AD?
 
Yeah, I've been wearing compression shorts over my boxer briefs. No pants in just over a week.
 
or internal
 
@jscott how are you feeling?
 
hey
 
1:49 AM
@ewwhite your call. I like AD because it's less to type
but if you think you/your client would like internal better, go with that
as long as it's a subdomain, that's what's important
 
@Cole Sore. The bruising and swelling it still there, but fading. More bored than anything. I'm actually looking forward to returning to work next week. How are you healing?
 
Just make sure you set the netbios name during the initial dcpromo
 
quick ?? in a web.config file, referencing a AD group, do I use CN or OU for the OUs?
 
@MattBear OU
 
@jscott Dr checked me out today, looking great. My drain holes arent leaking/bleeding - my nipples are bleeding a little, as expected but stitch tape is starting to come up which is good - next week I can just peel it off
 
1:50 AM
@MattBear CN is only for objects.
Fun fact, the default Users and Computers containers aren't OUs
Which makes it more confusing
 
thats why the example I was using had CN=Users
 
@Cole That's great. My glue is just beginning to peel up at the fringes, but I'm not going to peel it.
 
@jscott i was told next week to peel if it doesnt come off on it's own
 
im configuring forms authentication for sharepoint... working on a custom login page
 
how it's looking now
 
1:52 AM
Yeah this is just edge peel, so I really want to pick at it, but I'm making an active effort not to.
 
@MattBear yeah. use CN= when referencing the default users or computers container. Use OU for everything else that accounts would be in
 
thanks @MDMarra
 
no problemo
 
@Cole How's it looking? Like I got hit in the crotch with a bat about a week ago.
 
which actually sucks though... lol
means I have a different problem, I did that part right
 
1:54 AM
@jscott What did you have done?
 
@MDMarra so build a new DC you say?
 
@MarkHenderson Inguinal hernia, um, un-herniation.
 
@ewwhite Yep.
 
I guess a cut, stuff and stitch.
 
ok so I have my AD structured OU=company, OU=Office, OU=Department, OU=Users
 
1:55 AM
@MDMarra what to name it? seeing as there's already a dc1 in the inventory.
 
Or you can just say "Hey, @MDMarra. Why don't you build me a fresh AD"
 
@jscott i'll take a pic for you
 
when referencing for forms authentication, can I use a higher level OU, or do I need to drill down to the actual users OU?
 
@ewwhite DC01?
I always like double digits
scales better
 
@jscott Sounds like fun
 
1:56 AM
@Cole What, there's like zero bruising.
 
I don't believe in padding when the scale doesn't demand it.
 
@jscott i have zero
 
VC01.
 
barely any swelling
 
VC?!
 
1:57 AM
@Cole Lucky you.
 
how many virtual centers will one have
 
@jscott I heal very well
 
Ah but then your numbering is consistent across all names
 
I eat mostly a keto diet too, and drink lots of fluids
 
And the wikipedia article on that condition has a penis surrounded by massive bush
 
1:57 AM
@MDMarra and the sort order it as well.
 
Just what I should be look at at work
 
If you're going to have 10 of anything might as well not have to remember what there are 10 of and what there arent
 
@MDMarra It's contextual.
 
@Cole I thoguht the whole point was to remove the swelling. AMIRITE?!
 
@MarkHenderson exactly, i have none!
 
1:58 AM
sigh I'm such a dad. My life is over.
 
you see the pic
 
@MarkHenderson Ha! Just looked at that... Yeah, mine was a bit worse. Made the trip south (or would that be North for you?) and tucked into the scrotum as well.
 
@Cole I did. Quite impressive; I was expecting red and scarring
 
@ewwhite This isn't SVU. I don't care what's consensual
 
@jscott Nasty. What did they ahve to glue? The bandages?
 
1:59 AM
@MarkHenderson Glued the incision. It's about 4 inches long.
 
let me see if i can get a high rez pic
 

« first day (880 days earlier)      last day (4088 days later) »