The Comms Room

Mark Henderson

2:00 AM

@jscott Wow. Did you get them to, you know, enhance while they were down there?

MDMarra

It's also easier to script things if you have a form that you can expect across everything

jscott

@MarkHenderson I'm not sure my insurance would cover that.

ewwhite

but there won't be more than 3 terminal servers...

or dc's...

jscott

But that would help with a change of career.

MDMarra

@ewwhite Today's davalansales.local is tomorrow's google!

Mark Henderson

2:01 AM

@jscott What they don't know... ;)

ewwhite

no, no it's not.

MDMarra

hahahahah

ewwhite

And everyone knows the most scalable server naming scheme is Greek Mythology!

Cole

@MarkHenderson best i could get imgur.com/vbscozw

ewwhite

(snicker)

MDMarra

2:03 AM

ZEUS! (fuck we just got a better server. Someone rename ZEUS, we need that name for the new one)

Cole

sides have some swelling

Mark Henderson

@Cole You need a better camera, but that looks quite natural

Cole

@MarkHenderson yeah just used my webcam.

but a better view

MDMarra

@ewwhite I can't stress this enough. Make sure to check the "Advanced installation" box on this new DC and change the NetBIOS name during the promotion

ewwhite

@MDMarra I left a company five years ago, and they've continued the Greek naming...

Mark Henderson

2:05 AM

Can you imagine getting that done in the 70s or 60s though? I bet a few people had to have... less than optimal surgeries to perfect it that well

Cole

@MarkHenderson i know, right?

glad I went with the best surgeon in the states

MDMarra

@ewwhite As a joke I named an old shitty HP Netserver ATLAS since it had been holding up all of HR's data for about 15 years

Cole

a lot of people come to him from overseas

Mark Henderson

@Cole Wow, fortunate for you

Michael Hampton

4

Q: How does cd command work? (unix)

Could anybody explain to me how cd - command work? man cd tells me that An argument of - is equivalent to $OLDPWD. Then I found on the net that $OLDPWD is the previous working directory as set by the cd command. And when I do cd - on my unix I get -bash: cd: OLDPWD not set which is confusing for ...

Matt Bear

2:14 AM

@MDMarra groupNameAttribute="cn" or groupNameAttribute="ou?"

MDMarra

An attribute of the group object?

yeah

CN

kk

@MarkHenderson very, and cheaper of the surgeons too, weirdly.

MDMarra

2:16 AM

"CN=Group,OU=GroupsOU,OU=SomeOtherOU,DC=domain,DC=com"

jscott

@MichaelHampton Over 2 years old, bumped by OP's edit.

Michael Hampton

@jscott If he still has questions about cd then perhaps he needs to be shot.

jscott

No new answers since the accept.

MDMarra

Why are you filtering by a group attribute and not group membership itself?

jscott

@MichaelHampton He fixed some minor grammar issues. It was accepted two years ago.

MDMarra

2:18 AM

@MattBear Any more advanced generic LDAP syntax should probably be directed at @jscott :)

LDAP queries isn't my strong suit

Matt Bear

@MDMarra its my first time dealing with them...

jscott

@MDMarra Filter on memberOf, yes, I agree with @MDMarra

Matt Bear

I gotta learn it right

MDMarra

Yep

Matt Bear

im following blogs.technet.com/b/speschka/archive/2009/11/05/…

Michael Hampton

2:19 AM

Fucking developers.

MDMarra

Just remember it as CN references things, OU references OUs, DC references the domain name pieces

jscott

Canonical Name is CN, Organizational Unit is OU... Everything stated previously is correct.

MDMarra

@MattBear Yeah, that's getting into SharePoint and development. Two places I tread lightly.

Matt Bear

so I can have a group set up somewhere in AD, reference that group via CN, OU OU OU DC DC, and just add users I want to be able to use forms auth into that group?

@MDMarra I'm on a self induced sharepoint crash course

:p

jscott

We actually passed on using SharePoint, even after a vendor came in an gave us a dog/pony about how awesome it is.

MDMarra

2:22 AM

@MattBear Yeah that's getting outside of what I know.

You can filter on MemberOf and give the path to that group and the search base for the user accounts

Matt Bear

@jscott it is awesome... if you have developers that understand it, know C#, ASP.NET, SQL and LDAP

MDMarra

But how to make that into forms auth? no clue

jscott

@MattBear I don't doubt that, but it certainly needs a dedicated admin/dev team (could be the same person) to make use of it.

Matt Bear

<----

jscott

Yep

Matt Bear

2:24 AM

:-/

I've spent a couple weeks focused on it, im getting better, but I dont know the dev side so thats hurting me

(dev)"My workflows not working!" (me) "sounds like you need to fix it"

I call her a dev... she uses the GUI and uploads infopath forms lol

jscott

@MattBear I had though about building an InfoPath for our technicians to manage AD users and groups. Luckily, I gave up on that quick.

Matt Bear

my goal actually is to have forms authentication set up on my adfs proxy, to pass through to sharepoint

I'm learning piece by piece... If I knew more when we started I could of saved myself a lot of time

jscott

@MattBear If we all knew more we could have saved a lot of time.

Matt Bear

my mistake to begin with was the assumption that sharepoint was a lot like IIS

Joel E Salas

Not even a little close

Matt Bear

2:31 AM

and that I could use url rewrites and redirects, and that site addresses could be changed easily

jscott

I honestly haven't run SharePoint. The complexity and need for feeding put us off.

Joel E Salas

@jscott Sharepoint is the best way to create IT jobs

ewwhite

@mdmarra building

Matt Bear

@JoelESalas its a layer on top of IIS... and both work together

jscott

@JoelESalas And everyone in management knows the SharePoint name!

MDMarra

2:32 AM

@ewwhite Ok. Going to need anything from me tonight?

Joel E Salas

@MattBear Knowing how to manage IIS confers no knowledge of Sharepoint though

jscott

@MattBear "together", "against" : "tomato", "tomatoe" :)

Matt Bear

@JoelESalas yuuup, I know that now

Joel E Salas

Oh the pain!

Matt Bear

as of last night, I got the sub-subsite that they built everything in moved up to its own site collection, and an SSL cert installed

required multiple imports/exports to do... and a lot of configuration

ewwhite

2:35 AM

@MDMarra maybe

Matt Bear

all through powershell lol

fun times

was at work till 11pm

and now I get a 500 - internal server error accessing the administration page... damn it

jscott

@MattBear Well you're also learning PowerShell, so that's a feather in your cap.

Matt Bear

@jscott ADFS, Office 365, Sharepoint, and AD... all through powershell

as much as I bitch, I'm having fun...

jscott

@MattBear Hell yeah.

ewwhite

@MDMarra oh man... Win 2008 R2... no Sp1

MDMarra

2:44 AM

no sp1?!

savage

Mark Henderson

@ewwhite 2008 R2 shipped with SP1

MDMarra

@MarkHenderson Nope

You're thinking of 2008

That shipped with SP1

2008 shipped after Vista so it came bundled with SP1 for NT6. Windows 7 and 2008 R2 shipped basically at the same time, so they both got NT6.1 SP1 at the same time

Mark Henderson

Fuck me, you're right

I must be getting old

ewwhite

the ISO was sitting there...

so I'm just dealing with it

0

Q: typical latency in a data center

What is the typical latency in a 3 tier network architecture in enterprise data centers. I have fairly googled and found its significance, but without much experience I cannot gauge the typical delays. I mean to get a general idea. I can roughly calculate 3 tiers * 250 nanosec per layer plus fil...

networking datacenter latency

Mark Henderson

3:05 AM

@ewwhite HFT?

WesleyDavid

@MarkHenderson!!

ewwhite

@MarkHenderson doesn't seem it

WesleyDavid

Look @Mark, I found you on the internet:

Mark Henderson

@WesleyDavid taps foot, waiting

WesleyDavid

I'm assuming you're attached to the fist, and not the koala itself though.

Mark Henderson

3:06 AM

Hah

Koalas are assholes

We had a koala living in our back yard. It used to growl all fucking night, and they're stoned 24/7

WesleyDavid

@MarkHenderson Rabies harboring little douchestraws

Mark Henderson

@WesleyDavid Chlamydia, but close

WesleyDavid

Was that the same house with the brown snake?

Mark Henderson

@WesleyDavid Nope

This was about 15 years ago when I lived in the outback

Koalas aren't really wild in the city

WesleyDavid

@MarkHenderson How have you not died yet?

Mark Henderson

3:14 AM

Most deaths in the outback are:

- Farm accidents
- Suicides

I didn't live on a farm, and I have a good self esteem

WesleyDavid

The likelihood of being burned, stabbed, ran over, beat up, drowned, stung, and otherwise have death forcibly inflicted upon your person seems uncomfortably high there.

Way to let it all hang out broseph:

When my wife says something is better than sex, that doesn’t tell me much because our sex is pretty awful.

Tweeted by XplodingUnicorn on February 6, 2013 at 10:30 PM

Mark Henderson

3:28 AM

And you were already scared of marriage...

mossy

3:39 AM

I think I want to buy a new PC.

My home computer is so slow lol

Mark Henderson

@mossy How old is it?

mossy

dual core 2.40 ghz

Joel E Salas

How did we ever do things before puppet

MDMarra

@mossy c'mon, you're in a room full of sysadmins

dual core 2.40 doesn't mean anything

Journeyman Geek

@mossy: eh, my old gaming computer was one of those

c2d?

MDMarra

3:43 AM

Unless you mean Pentium Dual Core

mossy

yes

Journeyman Geek

eww

why would anyone have one of those?

MDMarra

I'm on a 2.5GHz dual core Sandy Bridge i5

That doesn't need upgrading

Journeyman Geek

@mossy: a reinstall (with windows 7 over XP) did wonders for my old core 2 duo

MDMarra

@JourneymanGeek They're cheap and you could overclock the shit out of them

mossy

3:44 AM

Sorry, I figured the context was enough

Journeyman Geek

I mainly built a new computer cause I got sick of people kicking me off it, and it was fun

@MDMarra: not a fan of overclocking. Modern systems are powerful enough to handle most things

mossy

Well, the only reason I would buy one is for games. But I'm trying to stop playing games.

Sooooo

Journeyman Geek

one reason I got a core i7, and not a K version

MDMarra

@JourneymanGeek Depends on which CPU you buy :)

Journeyman Geek

@MDMarra: SB and IB don't overclock much IIRC

so it would have to be an AMD. And... those currently suck quite badly unless you have specific needs

Michael Hampton

4:17 AM

Where do these people come from?

@MichaelHampton I believe that's an established website and it's going to be around for a looong time, but thanks for your comment, however an explanation of building a .deb package is way too long to fit in the margins of a post on SO — jojo modjo 21 mins ago

Mark Henderson

@MichaelHampton I use

Whilst this may theoretically answer the question, [it would be preferable](http://meta.stackoverflow.com/q/8259) to include the essential parts of the answer here, and provide the link for reference.

- neve rhad a complaint about it yet

WesleyDavid

-1

A: Is it possible to include/use directly perl's Nagios::Plugin without installing it?

Bro make a debian package. Don't be scared homie, it's not hard.

sigh

mossy

...

Michael Hampton

And he's on a CentOS system.

mossy

0

Q: sending a mail via php works but page times out

I have a new server running ubuntu, nginx, php sendmail etc. To test if sendmail is working I made a basic php file with the php mail function in it. When I execute the file my browser hangs until I get a 503 timeout but I still receive the test mail a few seconds later indicating sendmail is wo...

php nginx email sendmail

WesleyDavid

4:38 AM

DOT DEBS THEY HIT YOU HARD BRO!!

Michael Hampton

4:49 AM

Damn you Hyper-V bring my connection bar back!

WesleyDavid

@MarkHenderson Is your stack exchange chat site still up?

Mark Henderson

@WesleyDavid Yep

Well

This page is

WesleyDavid

I didn't bookmark it - what's the linky?

Mark Henderson

http://chat.stackexchange.com/rooms/127/the-comms-room

But... you're in the chat room at the moment

^ I'm just trying to determine if I've actually offended someone in our office or if he's trolling me

I suspect he is trolling

WesleyDavid

@MarkHenderson I meant, the site you made that will show a random quote and also count stars

@MarkHenderson With a name like Moe, he has to be trolling.

Mark Henderson

5:01 AM

@WesleyDavid OH

http://яѱ.com/shitsesays/

WesleyDavid

"butt sex is wild, and it dont cause no child!
- @MattBear in The Comms Room"

Mark Henderson

@WesleyDavid sounds... about right

Michael Hampton

Mar 13 '12 at 15:05, by Bart Silverstrim

@petergrace - I propose the devs add a feature where JUST tomtom's account has the option to close questions because "you're a dumbass."

mossy

Hmm

What do you guys suggest for logging total amount of apache requests for x time.

Mark Henderson

5:17 AM

The rules and limitations that are imposed on this site are the reason people come here and the reason the Stack Exchange network is as huge and useful as it is. Your logical fallacy is tu quoque, and any logical fallacies don't go down well here. We have rules. The rules are what makes this place useful. — Mark Henderson 7 secs ago

mossy

I would like to generate a graph that shows apache traffic and present to people that can fire me.

So many shit options.

Mark Henderson

@mossy Literally any NMS, ever

mossy

yeah.

Mark Henderson

Dump that shit into a csv file

And generate an excel grpah if you need to

WesleyDavid

@mossy AWstats should be able to do it with little to no tweaking.

mossy

5:20 AM

Thanks.

Sometimes I get lost in researching shit that has 10000000 options

and i'm also about to pass out

WesleyDavid

Poor Jojo

Getting his first proper womping.

Michael Hampton

If we downvote him to -3 and he self-deletes, he'll get a badge!

Mark Henderson

He has two closed questions and this is his first answer

I don't think it will matter too much if the SE network loses him

WesleyDavid

@MichaelHampton Oh that's right - hey, go downvote this wrong answer of mine so I can get a badge: serverfault.com/questions/88030/redirect-to-domain-without-www/…

Mark Henderson

@WesleyDavid Ahh back when you were a little kitten, still learning

Some of my early answers are shameful

I've learned so much from just reading aroudn on this site

WesleyDavid

5:25 AM

@MarkHenderson Yeah, I've learned a lot, but also gotten so dumb in the last two years just hanging around such tiny businesses. =/

Mark Henderson

@WesleyDavid paw bump

WesleyDavid

@MarkHenderson Oh wait, I already had the disciplined badge. Oh well, that was a bad answer.

Hey, anyone have a question they want bountied? I want the badge for manually awarding a bounty.

mossy

Oh nice AWstats is already configured

Michael Hampton

serverfault.com/badges/81/altruist

WesleyDavid

mossy

5:31 AM

Jesus

Our CMS - 47,097 in jan

Who the fuck

Michael Hampton

6:07 AM

serverfault.com/q/342317/126632

DELETED? Come on, that was too entertaining!

Michael Hampton

6:22 AM

Where do I find one of those?

mossy

Well I'll be writing a tutorial on Varnish tomorrow.

A lot of garbage I'm sifting through

Michael Hampton

@mossy That sounds distinctly unpleasant. Then again I hate writing documentation...

Michael Hampton

6:41 AM

OK, so Hyper-V only has limited support for Linux guests. If you aren't running EL5 or EL6 you're fucked.

mossy

Fucking nerd coworker gave himself a dedicated IP for his site

he gonna be mad tomorrow

I'll give you once guess what he does @MichaelHampton

Michael Hampton

Wait, he did what?

mossy

We had three unused IP's and he gave one to his personal domain

WHERE DO I SPECIFY RAM FOR THIS

Michael Hampton

6:58 AM

Um, yeah, I think he's not going to be happy tomorrow.

Michael Hampton

7:29 AM

OK, why the fuck does my network suddenly have IPv6 ULAs?

Iain

@MichaelHampton thanks for dropping that in my lap last night

Michael Hampton

@Iain Wait, what?

Iain

the irritated Adrian

Michael Hampton

Meh. I don't think it was good enough to migrate.

Iain

it wasn't and it's not SF material either

Michael Hampton

7:38 AM

And he wants it left open because....

Iain

I dunno really - I went to bed

I guess because he thought it was topical for SF

Michael Hampton

4

Q: Questions belonging to intersection of webmasters.stackexchange and ServerFault

Hi, Almost every webmaster deals with a server. So if he has a question regarding his server (like the following example), which site should he ask on: webmasters.stackexchange OR ServerFault. Example question: "Is it better to use lighthttpd+mysqllite instead of apache+mysql on low memory syst...

support questions asking-questions

I think @sysadmin1138's answer is the best one there.

mossy

garbage documentation

Iain

@MichaelHampton I remember it well and applied that and other info to the question ...

Michael Hampton

OK, so radvd seems to be supplying the ULA's even though it's configured with a global prefix. WTF?

I think I'm going to be posting a question soon.

Iain

7:51 AM

I think Adrian had a bigger point to make which is that these distinctions aren't obvious to the new user even if they bothered to read the faq and all the faq discussions

I don't think there is much we can do about that though other than direct people to the better place

Michael Hampton

Yeah, that's true, the distinction isn't obvious at all. Someone who buys the $3.99 shared hosting package from GoDaddy is suddenly a professional system administrator, right?

Iain

@MichaelHampton absolutely

Michael Hampton

8:08 AM

AHA! So my rogue RA was the domain controller...

Iain

@MichaelHampton what was happening ?

Michael Hampton

@Iain Everytime radvd sent out an advertisement, the (new) DC sent out one of its own.

And it seems, on the Windows side at least, this all is very poorly documented.

Iain

@MichaelHampton it the DC sending in response to the advert from radvd ?

Michael Hampton

@Iain Apparently so. I had radvdump running and would see one come in from radvd followed immediately by the other one from the errant Windows box. I knew it was from there because of the RDNSS information it sent matched exactly what the domain controller was set to.

...and that when I shut it down, the extra RAs stopped appearing on the network.

Iain

good catch

Michael Hampton

8:17 AM

Now I have to go find both an IPv6 and an Active Directory expert... I'm pretty sure I'll be posting a question tomorrow.

The weird part is...DHCP isn't even installed on the DC

01100001

Can I ask this question on the main site? What third-party modules are installed by 'apt-get install nginx'?

or would it be better suited for another SE site?

Michael Hampton

@01100001 You could ask, but you'd probably be downvoted into the ground. If you want to see what the command will do, try apt-get --dry-run install .... If you want to know the package contents, either install it and look, or check the debian website where they're listed.

01100001

@MichaelHampton Are you sure? The thing is, if I compile and install nginx from source I'd have to mention each and every third-party module that I need at compile time. I am new to nginx so I dont know which 3rd party modules I'll need. That's the reason why I want to know which modules 'apt-get install nginx' installs, so that I can simply do that while compiling from source. makes sense?

will I still be downvoted despite explaining all this?

Yes, I did try googling. Couldn't find the details.

Michael Hampton

@01100001 Probably, since you could just run nginx -V and get that information.

01100001

oh, I'll try that and see. thank you

RobM

8:29 AM

@01100001 while I think this site is very helpful, it's very exacting about what's expected of people asking questions, so you really would have to be careful asking questions that you "ought" to be able to figure out yourself.

01100001

@RobM I tried everything I could. Googling, asking people on IRC. Couldn't get much help, for a newbie that I am.

I'' try my best. thank you for the advise.

RobM

@01100001 no problem, we want you and everyone to feel welcome here which is why we're glad to talk about how to ask questions, so please don't be put off asking when you need help.

I think we need to ease up on 'newbie questions' here too, but that's a whole other discussion.

01100001

:)

RobM

on another note entirely, I now have a staff meeting in which I've just been told I'm going to be talking about something I didn't expect to be talking about. There's no way I'm going to do that without another cup of tea first...

Iain

@RobM I kind of agree but first you have to distinguish between the new pro and someone in their bedroom

Michael Hampton

8:35 AM

@Iain HEY! I'm not in my bedroom!

RobM

@iain absolutely. You can be a professional newbie

Michael Hampton

But can you be an amateur neckbeard?

01100001

@MichaelHampton Actually my search term wasn't right :P serverfault.com/q/223509/102450 -- thanks a lot for pointing me in the right direction.

tombull89

I sponsered a Minecraft documentary on Kickstarter last year - got my reward turn up today - DVDs, Soundtrack and wind-up toy as well as digital download code. I'm well chuffed (and it's proof the crowd-sourcing can work).

Michael Hampton

0

A: Best windows server configuration for 1000 users?

I dont think you provided all the necessary details to obtain a good answer(at least from me). Many considerations would be required for this such as roles/services which will be provided, current network architecture....

@tombull89 You aren't TomTom...

I just read "PowerShell Web Access". I think I'm going to have nightmares tonight...

RobM

9:37 AM

It's colder than a witches tit in a brass bra here this morning

pauska

10:26 AM

rawr

mossy

What a fucking day

gforce89

fuck fuck fuck

mossy

well i slept 3 hours

Now to watch this database upgrade

if it fails i'm going back to the fast food industry

@pauska HOLD ME

gforce89

cant wait for the weekend. this week seems unending

Jeff Ferland

It's a small NOC after all...

ewwhite

10:49 AM

@MDMarra Hmm, how do I make a UPN?

mossy

Anyone here work with Varnish?

Zolomon

How are certificate chains created?

If I have two certs, a CA cert and a user client cert that I have issued, created a CSR for and signed with my CA cert - how can I create a certificate chain?

tombull89

@Zolomon Not a clue - try asking on the main ServerFault site. There's 6 people active here at the moment, and two of them (me and you) at least have no idea.

Zolomon

Will do. Thanks.

Jeff Ferland

11:07 AM

Yes, I've worked with varnish (paint and daemon). Yes, I know how cert chains work. Yes, you should ask on the website.

mossy

Ha.

fuero

@Zolomon a certificate chain is just a bunch of certs: CA cert -> Intermediate 1 -> ... -> Intermediate n -> client/host/etc. certificate

Zolomon

fuero: So I just copy two certs into a single file?

fuero

@Zolomon if you want to store key + cert chain in one file, create a PKCS12 store

@Zolomon pretty much, yeah. Do you need this for apache?

Zolomon

@fuero: I have a self-signed CA cert [not sure how I verify that it is considered a CA] and a private keypair in a keystore. I want to create CSR that is signed by my own CA cert and then add that to my keystore.

I have created the CSR and signed it with my CA cert

However when I import the CSR and CA cert, I don't see any chains. :/

fuero

11:18 AM

@Zolomon if it is a CA cert, then drop "self-signed". A CA cert is a CA cert, and a self-signed cert is a self-signed cert.

@Zolomon Java Keystore?

Zolomon

@fuero: Yes

Jeff Ferland

@Zolomon The CSR should result in a certificate that is signed by a your CA key.

fuero

You can create a PKCS12 keystore with this: `openssl pkcs12 -export -inkey pub-sec-key.pem -certfile certificate-chain.pem \
-out pub-sec-key-certificate-and-chain.p12 -in signed-certificate.pem`

@Zolomon you can convert a PKCS12 keystore to a JKS with keytool

Zolomon

@fuero: Thanks - should BasicConstraints = CA:TRUE be set for a CA cert?

fuero

@Zolomon yes

@Zolomon I used this for Websphere Application Server, it never complained :D

Zolomon

11:29 AM

@fuero: I am confused now, sorry, the certificate-chain.pem - it is the ca cert?

Jeff Ferland

11:50 AM

@Zolomon The cert chain should include the certificate for the key in question and the certificates of any keys that were used to sign it between that and the cert key

Morning

hey

morning

how's life?

Got a killer migraine last night, so still feeling a little ouchie this morning :(

MDMarra

12:06 PM

@ewwhite AD Domains and Trusts

Dennis Kaarsemaker

I think I found the SO FAQ: thc.org/root/phun/unmaintain.html

mossy

12:23 PM

Man, Activecollab fucked the upgrade up hard.

:(

I can't believe this ticket i'm reading

Zolomon

pastie.org/private/1bn3uc202blr4kvdgshw - so close :(

Cole

My oldest nephew turned 5 today, I feel old.

Zolomon

I turned 25 last Monday, I feel old. :D

Cole

I turned 26 in November, someone preorder my Hoverround, thanks.

Zolomon

YES! I did it! :D

mossy

12:29 PM

fuck

fuckfuckfuck

Cole

This is fucking awesome: blogs.vmware.com/apps/2013/01/…

Windows Server 2012 VM-Generation ID Support in vSphere

Cole

12:48 PM

Why am I so awake today? I went to bed close to 1, up at 5:45.

Dan

Hi

RobM

how was the seaside @dan

Dan

@RobM It's cold, very South and took a long time to get here :(

RobM

ugh

Dan

Work is fine, though - didn't realise, but I know most of the crew from the main contractor on site (I'm essentially a sub contractor on this) and there's another guy from my company so not too bad really

RobM

12:55 PM

ah that's ok then, at least you're not left holding the bag all by yourself

Cole

hi @Dan

Dan

Nah - and there's still a little bit of me that enjoys the jobs where we're sort of backup with no real plan. Makes a change from just doing boilerplate installs

Hey @Cole - how're you recovering?

Cole

@Dan grood, I posted some pics of my chest in here last night.

@Dan -sphotos-b.xx.fbcdn.net/hphotos-frc1/…

Dan

Not clicking them here!

Cole

ah yeah

ewwhite

1:05 PM

@MDMarra what if I want a different default UPN?

ewwhite

1:17 PM

@Cole so we'll be able to clone domain controllers?

Cole

@ewwhite well maybe, but at least P2V/V2V. In theory, it should work though.

I don't see why not, but I don't want to say "yes" as I'm not 100% sure of the repercussions of cloning a DC and then renaming/running it in production. I'm certainly going to try it in my lab.

The issue I could see is FSMO roles and cloning would probably fuck some shit up.

pauska

I really don't see any point of cloning a DC..

the USN protection is nice thou (and it's not a vmware feature, it checks this even if you're using clonezilla or whatever as a snapshot feature)

RobM

There might be a few reasons to clone a DC I suppose, but generally I agree with @pauska - just create a new server and run DCPromo on it is all I'd do.

Cole

I agree with that, it's easy enough. P2V - I can see that.

HopelessN00b

1:38 PM

@RobM Such as? I'm curious... other than "to see if I can," I really can't think of any reason I'd want to clone a DC instead of an image/template of a server prior to running DCPROMO.

RobM

@HopelessN00b I'm thinking about DR scenarios or needing to migrate a DC to new hardware that had 3rd party software on it that didn't play well with the DC role being removed and re-added.

I agree though, a clean DCPROMO is always going to be the better option

pauska

@RobM you do not clone domain controllers in a DR scenario

bad, bad bad shit will happen

HopelessN00b

I can see that. This place is really taking a toll on my creativity, I think.

pauska

or well you could.. just no reason to, as you'd rather have a live copy on offsite/dr site

you wouldn't restore from a clone either.. you'd need a system state to get a consistent snapshot

MDMarra

@ewwhite You can't set a default UPN for a domain, but what I usually do is make an OU called "Staff" that I then put other OUs under for users and computers. You can use ADSIEdit to see the default UPN for things created under a specific OU

So I redirect the default users container to something like Staff/Users and set the new UPN as the default there

Dan

1:44 PM

@MDMarra Aw, I was waiting for the response to this thinking you'd have a clever way to do ti

HopelessN00b

@pauska Might depend. If none of the impacted DCs are FSMO role holders, it could work, though it seems to me like one of those ideas that creates much, much more work than it saves.

RobM

@pauska yeah I know that. I've seen places that have done it though. Usually when they asked for help afterwards.

And I *have* cloned a DC to start an isolated dev environment.

MDMarra

@Dan I mean, you can script it in PowerShell, I'm sure and have it in scheduled tasks to iterate over all OUs every 5 minutes or something :)

But that's probably dangerous for one reason or another that I'm unaware of

ewwhite

@MDMarra ugh... then back to .local!

Dan

Not to mention generally shit and terrible to support :D

MDMarra

1:45 PM

@ewwhite That's like 5 minutes worth of work, Ed. Don't give up so easily!

ewwhite

shouldn't be so hard