The Comms Room

Dennis Kaarsemaker

20:00

@JohnMerlino try using a hammer. Modems tend to respond well to percussive maintenance. And if you break it, oh well. Modems don't belong in this century anyway.

JohnMerlino

@DennisKaarsemaker this is a gsm modem

specifically designed to take connections from gps devices on gsm network

it is connected to a serial port on remote server

Michael Hampton

@voretaq7 That should have been done the same day the About page first went live.

JohnMerlino

I communite with it via at

voretaq7

@MichaelHampton I fixed a bunch of stuff the first day /about went live :-)

Dennis Kaarsemaker

@JohnMerlino try here

JohnMerlino

20:02

but right now it does let me type just blinking cursor

@DennisKaarsemaker I did ask

0

Q: gammu-smsd daemon not sending sms messages

I noticed that my gammu-smsd daemon running on ubuntu is suddenly not sending messages (the sentitems table of my postgresql database is not being updated). First, I noticed that the damemon was not running so I restarted it: $ sudo /etc/init.d/gammu-smsd start * Starting Gammu SMS Daemon gammu...

sms-gateway

voretaq7

"Home or development environment" or
"Home or developer environments"?

Dennis Kaarsemaker

the former

Michael Hampton

@voretaq7 I suppose either. Devs seem to hate it when Ops touches their workstations..…

voretaq7

@DennisKaarsemaker the former can be broadly construed to mean "test labs" (which seems to keep happening....)

i.e. "We're testing WDS in our development environment" --> knee jerk off-topic

if everyone here promises to behave and actually read the questions (i.e. STOP FUCKING CLOSING BY REGEX) "development environment" is the grammatically correct phrasing

Dennis Kaarsemaker

hmm true

ewwhite

20:06

@MDMarra halp! I don't know basic Windows things!!

3

MDMarra

@ewwhite ya I know

it's ok

Dennis Kaarsemaker

"Home or experimental environment"?

voretaq7

@DennisKaarsemaker ...my dev environment is experimental

just yesterday I saw two database servers "exploring their boundaries" with each other!

Dennis Kaarsemaker

so what are we "banning" when we mean dev environment?

Michael Hampton

@DennisKaarsemaker Developers.

Dennis Kaarsemaker

20:11

then maybe we need a "you're not the admin of the system" close reason instead?

Michael Hampton

@DennisKaarsemaker Developers often are local admins on their workstations. (Bad idea or not...)

Dennis Kaarsemaker

then maybe we need a "you're not the admin of the ~~system~~ environment" close reason instead?

Michael Hampton

Getting the right phrasing is hard. It's been an ongoing issue since day one.

dawud

he, my girl just called me to complain about XBMC's tvheadend backend not working, and i answered: "have you tried to turn it off and on again?", she said: "but,...that's for windows, no?"

Michael Hampton

It's like pornography: I'll know it when I see it.

Dennis Kaarsemaker

20:13

@dawud well trained :)

dawud

@DennisKaarsemaker seems so, now she needs to learn to actually fix it (and that's going to be fun)

84104

"only root can do that / contact your network administrator"

Michael Hampton

Heh. That's a good one. Sometimes if I'm not sure about a question or the user asking, I'll just post that: "Contact your system administrator." The resulting response (there always is one) tells all.

dawud

shouldn't be hard, though, she has ephemeral accounts on every machine in the house (thanks to freeIPA) using her google_authenticator app and her 4096 RSA key, so she only needs to sudo -u xbmc systemctl restart tvheadend.service in the right machine

84104

@MichaelHampton I'm forgetting what the generic MS one is. It might actually be system. Anyway, it's a big part of what keeps us apart from SU.

Cole

20:18

Hooray!

We're going to go W2K12 for our file server

84104

@Cole There are definitely worse options.

Cole

@84104 Better than our janky 2003 to 2008 SP1 in place upgrade file server

We're primarily Windows here. 80/20

Five sys admins - only two of us are Linux/Unix admins - and the other unix/linux admin isn't a Windows admin.....so yeah

Michael Hampton

@Cole You'll probably like it.

84104

So no call for the crazy Samba shenanigans I'm having to pull. Not that I'd really want to try for the equivalent of our big ZFS boxes with just windows.

Cole

@MichaelHampton I just want it to work

Michael Hampton

20:21

@Cole Not waiting for R2?

Cole

@MichaelHampton probably wait for R2.

Joel E Salas

@ewwhite Text me next time! What are you doing for dinner

Michael Hampton

@Cole I just downloaded the preview this afternoon, but haven't fired it up yet.

Cole

We're not in a super rush - so my manager said if we can - definitely will wait for R2

ewwhite

@JoelESalas Korean BBQ

Joel E Salas

20:21

@MichaelHampton Should I bother installing it in Virtualbox

@ewwhite oh boy, where

Michael Hampton

@JoelESalas Did you really use the V word? Wash your mouth out with soap, young man!

dawud

with regards to off-topicness and the devops proposal in area51, I've seen some regular users here commenting there in the line of "this would be a great Q for SF", what is your opinion on the subject? is devops on-topic? would you like the devops proposal to succeed?

MDMarra

@Cole one word for 2012: dedupe

Michael Hampton

@JoelESalas Anyway, I'm already running 2012 in KVM, which is very nice except no SPICE support yet, so Desktop Experience is sloooow. Not that you really need it...

Cole

@MDMarra yup!

Joel E Salas

20:25

@MichaelHampton I don't know enough powershell to get by

84104

@JoelESalas If you have a Windows 8 box, you just spawn the GUI management tools from there.

Michael Hampton

@JoelESalas Who cares? Install Server Core anyway, and use Server Manager/RSAT from your workstation to manage it.

Cole

Sadly, I have to put a GUI on 2012

Joel E Salas

@MichaelHampton Ohhh, here I was thinking I had to up my game

Michael Hampton

@JoelESalas You do.

Cole

20:26

@JoelESalas slacker.

MDMarra

@MichaelHampton I'm lobbying for an additional UCS blade for "lab" which is separate from "demo" so I can install all of the 2012 R2 and SC2012 R2 previews

Joel E Salas

Just not for Windows :)

@MDMarra UCS is so buttrape expensive dude

MDMarra

<------- Cisco partner

Joel E Salas

@MDMarra Hook it up

Michael Hampton

@MDMarra So you get sufficient discounts to make it reasonably priced?

MDMarra

20:27

No clue

I know they randomly send us ironports and meraki controllers

And EMC gave us a VNX 5500 a while ago

Michael Hampton

Damn, now how do I get vendors to send me free stuff?

Joel E Salas

@MDMarra Are you all bare metal windows?

MDMarra

nah, hyper-v son

well my demo lab is hyper-v

prod is vsphere/vcloud/view 5

Matt Bear

god damn java updates

3

MDMarra

so that probably helps

Joel E Salas

20:28

@MDMarra Got it. Any real issues? I figure you'd want your dev and prod environments to be identical

freiheit

@MattBear s/updates//;

MDMarra

@MattBear solution: uninstall java

Michael Hampton

@MDMarra Yeah, I don't think I can do that...

Joel E Salas

@MDMarra Result: can't admin any shitty web UIs

Matt Bear

@MDMarra invalid... java required for webex, which is required for a meeting im supposed to be in right now

Joel E Salas

20:29

This just in: You can't configure a Cisco UCS from JUST the command line. Why? Fuck you, that's why

MDMarra

@JoelESalas it's not dev/prod. Demo is like prod in the sense that my boss and I use it to showcase products to customers. We don't run production data in it, but it's not a lab, per se

Matt Bear

I hate Java!!!

freiheit

@MattBear So, java's awfulness is helping you avoid a meeting?

Joel E Salas

@MDMarra gooot it, makes sense

MDMarra

@JoelESalas we run all of system center, exchange, lync, dirsync, adfs, etc in it

JohnMerlino

20:30

anyone here use minicom?

MDMarra

If it died, I'd be sad.

Joel E Salas

@MDMarra IT'S A PET! FIX IT FIX IT

MDMarra

@JohnMerlino didn't you just ask this?

Matt Bear

@freiheit yeah... one im supposed to be the key member of lol

which I have no idea why were having

WesleyDavid

freiheit

20:30

@MattBear So... Java's suckage is getting you out of running a pointless meeting?

Joel E Salas

@WesleyDavid If you can't see forever, you need another cup of coffee

freiheit

huh

TheCleaner

@MDMarra - serverfault.com/questions/519138/… - any experience here? I've used 2012 and dedupe, but haven't run into a need to migrate/move volumes yet. Hopefully, my "answer" is ok since it isn't really an answer but research.

freiheit

maybe java isn't as terrible as I thought?

Matt Bear

@freiheit yuuup

WesleyDavid

20:31

@JoelESalas I like your style.

MDMarra

I'm the one that favorited it :)

I'd like to know as well

Cole

Have a good night! Have to drive up to Ikea tonight :P

and give Jenna back her crap too

adios!

Joel E Salas

@Cole Fuck yeah building furniture!

WesleyDavid

"Plug the ethernet cable into the port labeled 'console'"
"There is no labeled ANYTHING on your appliance!"
"It's the RJ45 socket on the right."
"ಠ_ಠ"

Dammit people.

Q/A apparently stands for "Quandary / Amplified"

Matt Bear

"Lets have a meeting with a vendor so they can answer questions for us, Matt you ask all the questions"

umm... I have none

WesleyDavid

20:33

@MattBear "Why are manhole covers round?"

Matt Bear

@WesleyDavid for my penis?

freiheit

@WesleyDavid because they're giant assholes?

84104

@MattBear What is the average surface area of an elephant's ear?

@WesleyDavid Because the manholes are round.

MDMarra

@WesleyDavid Because a round manhole cover cannot fall down the manhole

WesleyDavid

@MattBear You have a loaded revolver with two rounds in it. An angry bear is mauling your girlfriend, Larry Ellison is sipping tea and Mark Shuttleworth is delivering a keynote. WHAT. DO. YOU. DO.

freiheit

20:35

@WesleyDavid Easy. Shoot Larry. Twice.

MDMarra

Wait, wrong game

freiheit

The noise should scare the bear off, and you can still pistol whip Shuttleworth.

WesleyDavid

@freiheit Considering your wife still doesn't know about your girlfriend, that does take care of a potentially awkward situation in the future. Mark isn't as malevolent as Larry. So yes, survey says: accepted answer.

Joel E Salas

DAMN IT

hahahahaha

MDMarra

Aaand thats not going on the star wall with my name on it

WesleyDavid

20:36

@MDMarra You are such a pansy. =P

Wait, is "pansy" an offensive term these days? I got scolded for using "autistic" as a descriptor the other day.

freiheit

@MDMarra There's good reasons to kill Ellison in a manner that doesn't involve touching him... eww...

WesleyDavid

I CAN'T KEEP UP WITH WHO GETS OFFENDED AT WHAT ANYMORE!!

@freiheit One does not simply fornicate with a lawnmower.

Joel E Salas

@WesleyDavid Any medical condition is generally not a good thing to say to someone

freiheit

@WesleyDavid It depends. Are you talking about a plant or its flowers?

84104

@MDMarra Reminded of youtube.com/user/tippexperience

WesleyDavid

20:37

@JoelESalas Probably.

@freiheit I called @MDMarra a precious flower.

MDMarra

>3

Michael Hampton

Did anybody ever get the free Meraki AP?

freiheit

@WesleyDavid Pansies are kinda cheap flowers, actually...

84104

@MDMarra Is that your butt being angry?

MDMarra

@MichaelHampton Ya, we got a dozen :D

WesleyDavid

20:38

@freiheit Well, @MDMarra blooms for anyone, so yeah...

@MDMarra OOOooooooo!! Neat. I didn't get any.

MDMarra

it gets weirder

freiheit

@WesleyDavid That's just your "no, I'm not really gay" fantasies

MDMarra

@WesleyDavid We didnt get them from that webinar

WesleyDavid

@freiheit I'm not gay, only the people that want to date me are.

MDMarra

We got them when cisco bought them

WesleyDavid

20:39

@MDMarra Oh okay.

MDMarra

they were like, here: free shit

Joel E Salas

@MDMarra That's what the gay people did with @WesleyDavid

TheCleaner

Custom close reasons...oh if only HopelessN00b was still around to comment on that Meta question.

@MichaelHampton - serverfault.com/questions/519146/centos-and-openssh - why not simply migrate it to SU or linux.se? Is the existing state just going to cause that question to die?

Michael Hampton

@TheCleaner I didn't want to inflict crap on anybody else...

TheCleaner

gotcha

Michael Hampton

20:45

When he can't even keep what machine he's on straight in his own head...

WesleyDavid

@MDMarra Oh and I'm really trying to get to those things you sent me - I've had out of the blue nonsense from my two main clients, plus my mom got hurt (debilitating muscle spasm, nothing too serious, but she needs help), cat is on it's last leg... been 18 hour days lately with some blackout sleep in between. =/

MDMarra

no worries man

take care of life

Michael Hampton

Like that run-on sentence that just got migrated here from SU.

MDMarra

It's nothing time sensitive, just some things that may spur some new ideas on how to get a foot in the door places

Matt Bear

I think im to the point now where I am going to officially say... fuck windows

Linux all the way

Zypher

20:57

@MattBear until you learn to hate linux

Matt Bear

@Zypher yeah.... I think im done with computers completely

TheCleaner

@MattBear - IMO, If you can't figure out Windows, Linux would make you commit seppuku.

Matt Bear

im gonna go dig ditches for a living

TheCleaner

@MattBear - by inventing a monster automated ditch digger that runs on Win CE?

Matt Bear

@TheCleaner actually I think my problem is a piece of malware got past my defense... some sort of rootkit im guessing

dawud

20:59

@MattBear curious, I've been a GNU/Linux user all my computer-relevant life, and now I feel the need to learn AD, GPO and that stuff (can't wait to see what the heck is that powershell thingy DSC)

@TheCleaner you know you can choose CE/ME/NT or any other

Matt Bear

and I dont have the time to fucking deal with it

@TheCleaner no... by using a shovel

TheCleaner

@dawud - yeah...just messing with Matt. Powershell is a great tool for a winadmin.

@MattBear - there are days when I actually think about moving the family to a remote section of America and living on $30k a year doing remote IT projects when I feel like it or other odd jobs like landscaping, etc. Live off the land some, get close to nature, all that stuff. I will probably never do it...but I can daydream.

Nathan C

I'm talking about the ones that won't play nice and are unavoidable. — Griffin 1 min ago

facepalm

Matt Bear

@TheCleaner I like woodworking...

or mechanic work..

but ONLY if its on my own stuff, in order to upgrade or build something new... I hate fixing other peoples broken crap

TheCleaner

@NathanC - good luck with that one... :)

Nathan C

21:07

Heh.

Theorycrafting questions ("what if this") are quite annoying to begin with.

Tanner

Wife just called me. She was shocked that when she Googled her own name pictures of her came up. ಠ_ಠ

Matt Bear

@NathanC just type in sudo apt-get update, pray to your dear and fluffy god, then type sudo apt-get upgrade -y

Ryan Ries

I'm PISSED right now. Someone installed Yahoo Toolbar and K-Lite Codec Pack on my fucking EXCHANGE SERVER.

8

Michael Hampton

So I just got off the phone with a Meraki rep...apparently if you want the free AP you have to call your rep back after you watch the live webinar.

Matt Bear

@RyanRies ROFL

@RyanRies just start building a new one... you will never get it clean

and that SUCKS

Nathan C

21:12

@RyanRies But...exchange needed those codecs!

At least that's what that website said! It also said I had 198293 infections on my PC.

Matt Bear

@RyanRies wait a sec.... why the FUCK was someone on your exchange server?

And why are you not stomping their guts out?

Ryan Ries

@MattBear I'll do my best to find out

And this was supposed to be the good domain too, where not too many people had too much access

Nathan C

Ooh, "Happy Birthday from Amazon: Your $5 off $25 credit"

Matt Bear

@RyanRies a better question... is how did someone that stupid gain access?

Nathan C

So..."Happy birthday. Now buy stuff!"

Tanner

21:15

@RyanRies Somebody is getting their ass kicked today.

That's not forgivable.

Ryan Ries

Agreed. Someone really needs to be fired.

Matt Bear

@Tanner I agree... lock out all users except administrator and you, and reset admins password

TheCleaner

@MichaelHampton ? I had my Cisco rep set the deal up with Meraki prior to me watching the webinar. Do you need a name at Meraki that I went through? The guy was very nice and emailed me right back on things while it was shipping.

Michael Hampton

@TheCleaner No, I think I'm all set. And besides, I think I actually have a client who can use it.

TheCleaner

Good deal...I really like it...great product.

Ryan Ries

21:19

Dennis Kaarsemaker

0

A: New close reasons - Proposals (July 2013)

Ok, I'll bite. We need a "You have no idea what you are doing, hire a professional" close reason, but without sounding as condescending as that. ServerFault is supposed to be for professional sysadmins. Well meaning novices/amateurs/non-sysadmins-tasked-with-sysadmin-tasks should be and feel we...

Tanner

@RyanRies ffs

TheCleaner

@RyanRies - time to check user profiles on the server and look for web history as well.

Michael Hampton

What I really need is for you people go to read the main site and vote more. I'm tired of reading (and writing!) great questions and answers with zero votes.

Dennis Kaarsemaker

@TheCleaner neh, time to reinstall the machine. I'd consider this compromised

TheCleaner

21:21

@NathanC Nice...Happy Birthday! <mine's on Sunday>

Ryan Ries

Time to see who logged in on 6/20

TheCleaner

@DennisKaarsemaker wipe and reload an Exchange server instead of simply cleaning it up? That seems pretty drastic.

Matt Bear

@RyanRies who installed it?

Nathan C

@TheCleaner Thanks. Mine's actually on saturday haha

Dennis Kaarsemaker

@TheCleaner machines should be expendable. Build new exchange server, migrate data. Fire user. Out of a cannon. Into a volcano.

Matt Bear

21:24

@TheCleaner not so much actually... rebuilding it now with a plan means that he wont have to in 2 or 3 months when its an emergency...

Dennis Kaarsemaker

►

TheCleaner

I agree with the 1st and last 3 sentences...but IMO a complete rebuild because someone was dumb enough to install a few "client apps" is drastic. Ryan knows what he's doing though. If he decides it's completely compromised he'll know how to handle it. I would try to clean it up first, find the person that did it and ban them from the server(s) at a minimum, and then monitor the server for a bit to ensure it was just a juvenile act.

Michael Hampton

Yeah, step 1 is to kill the coworker who installed that crap on the server. Otherwise it could happen again.

Dennis Kaarsemaker

@TheCleaner there's spyware running on it. A mailserver with spyware is compromised.

WesleyDavid

@RyanRies So I'm curious about your environemnt, do you manage systems for large clients? Surely this would not be VZ's main infrastructure we're talking here?

user2426362

21:27

Hi

uwsgi have cache?

WesleyDavid

ಠ_ಠ

Ryan Ries

@WesleyDavid No not at all... I have so many environments I quite literally can't keep track of them all in my head

WesleyDavid

@RyanRies Ah, okay.

Dennis Kaarsemaker

@user2426362 read the top right part of this page.

WesleyDavid

@DennisKaarsemaker LIVE SUPPORT YOU SHUTTUP!

Dennis Kaarsemaker

21:29

@WesleyDavid BAD CAT. NO CATNIP FOR YOU.

TheCleaner

@DennisKaarsemaker what spyware?

Ryan Ries

@WesleyDavid This one is a forest of mostly internal, legacy Terremark users where we host some infrastructure tools and applications that help us support the managed hosting customers and cloud customers that reside in other environments.

WesleyDavid

@DennisKaarsemaker Oh fine - at least you don't know where I keep my 2% milk stash.

voretaq7

@DennisKaarsemaker I tweaked your formatting (and a couple of words) but I think I like yours better than mine.

WesleyDavid

@RyanRies Oohhhh, that's bad. =(

Dennis Kaarsemaker

21:29

@TheCleaner that ad thing

Ryan Ries

It will be for the person whose name I am about to find in these logs

Nathan C

Yahoo toolbar isn't exactly the worst thing that couple be installed honestly. It uninstalls cleanly.

The K-lite pack is just a package of codecs + Mplayer

Matt Bear

@TheCleaner whoever was using it needed a codec pack for something, that something is generally to view videos. Videos that need a codec pack are generally pirated, pirate software and videos are in many cases infected with malware

Nathan C

@MattBear Not all videos are pirated. :P

WesleyDavid

@DennisKaarsemaker I edited your meta post to add my wording... that okay?

Nathan C

21:34

Although, why on the exchange server of all things is anyone's guess. I mean, how can you even watch videos on it?

Matt Bear

@NathanC have you ever viewed a non-pirated video that you needed a codec pack for?

Nathan C

@MattBear No, but I've converted plenty that needed the codec to do it.

TheCleaner

meh...do a removal of it...verify it is really gone, and move on. If I had plenty of Exchange servers and time to allow for a rebuild I would consider it...but only after I could see that the server was truly compromised after the removal steps are done.

@MattBear - I agree the person that did it is a moron...but a full sweep of the server for malware along with watching network activity should handle it. I just think it is a little extreme to nuke it from orbit based on the current screenshot.

WesleyDavid

@MattBear Yes, not infrequently. Also, not porn.

Nathan C

@TheCleaner The server maybe, but the user ...yes, they can be nuked from orbit. :)

Dennis Kaarsemaker

21:35

@WesleyDavid your version sounds a bit more hostile. And that's what I want to avoid.

Matt Bear

its not the yahoo toolbar, and the codec, its the activity that those are indicators of that I would be more concerned with

WesleyDavid

@DennisKaarsemaker Well heck. Here I thought I was being nice. =(

Dennis Kaarsemaker

Don't remove it though

Nathan C

True. If they used IE ...it should have the "enhanced security configuation" ...right?

Dennis Kaarsemaker

@WesleyDavid maybe s/allowed audience/target audience/

WesleyDavid

21:37

@DennisKaarsemaker I edited to take responsibility for it so people wouldn't think you're more of a jerk than they already do. =P

Matt Bear

@TheCleaner and in a virtualized environment, rebuilding the server wouldnt take long at all... Though if its conventional, that a different story and is a judgement call

Nathan C

@MattBear But...but... exchange

Dennis Kaarsemaker

@WesleyDavid haha

Matt Bear

everything I do now is virtualized, so I tend to think of servers in a... "I can redeploy a new one in 10 minutes" kind of way

TheCleaner

@MattBear rebuilding an Exchange server isn't fun. Migrating roles/users, uninstalling Exchange...possible metadata and adsiedit cleanup. It's not linux.

Dennis Kaarsemaker

21:39

@TheCleaner why uninstall exchange if you're going to wipe the box?

Nathan C

After destroying numerous headphone cables I've finally decided to go with bluetooth headphones

TheCleaner

@DennisKaarsemaker because Exchange is tied so intrinsically into AD that if you simply wipe the box AD will hate you until you dive into ADSIedit.

Dennis Kaarsemaker

also, why hasn't microsoft or anyone else made this easy yet? It's not like nobody ever replaces mailservers...

freiheit

@DennisKaarsemaker It's hard to convince upper management that "easy to uninstall" is an important feature, I suspect.

Dennis Kaarsemaker

@NathanC you mean douchetags

Nathan C

21:40

Total: $47.97
Gift Certificate/Card: -$20.00
Rewards Points: -$17.13
Order total: $10.84

Dennis Kaarsemaker

@freiheit easy to migrate to a new server for which they also paid us a lot of money in licenses

Nathan C

i think that's a win.

Headphones + 2 bluetooth dongles :p

and they'll arrive on my birthday! :D

Dennis Kaarsemaker

MDMarra

@ewwhite yo

Nathan C

@DennisKaarsemaker Legit headphones. I hate those things because people always try to talk to me when I'm on the phone.

It happens every time lol

TheCleaner

21:42

@DennisKaarsemaker It can be done...but still a PITA. At least these days you can do online mailbox moves prior to your uninstall/wipe/reinstall/production move...but again it isn't fun. Personally, that's part of the reason we went to O365. Let MS themselves screw with the backend OS/etc. in an HA/redundant farm.

Nathan C

amazon.com/gp/product/B0045W5ED2/… these actually

MDMarra

@TheCleaner do you use SSO for O365?

Did we talk about this?

Matt Bear

@TheCleaner thats why we ended up doing too, do you have a local exchange server for replication?

MDMarra

Basically, what I'm setting up for is "have you seen the latest dirsync tool does password sync," @TheCleaner

Matt Bear

@MDMarra I do

MDMarra

21:45

So you have the whole ADFS infrastructure in place?

Matt Bear

@MDMarra yuuup

TheCleaner

No...I don't. After all my research I decided it wasn't worth it. Having multiple DCs on site just to deal with SSO wasn't worth it. And once you go that route, there's no going back. But it's really not needed imo....the "remember my password" works just fine.

Matt Bear

adfs server, proxy, CA etc

TheCleaner

@MattBear not anymore...the cutover migration is done.

MDMarra

@TheCleaner Ok, so do you not have local directory services any more?

TheCleaner

21:47

We do...only to support a file server's NTFS permissions, GPOs, etc. Think domain without an Exchange or Sharepoint server anymore.

Matt Bear

@TheCleaner im actually thinking about bring up a local exchange server, and having it act as a repository... havent done more then think about it at this point lol

MDMarra

@TheCleaner So, the latest dirsync tool can sync accounts with their passwords

Matt Bear

@TheCleaner why would you need multiple DC's?

TheCleaner

What do you mean by repository?

voretaq7

Hey, you're all bastards - you would know!

MDMarra

21:48

it doesnt do SSO still, but it keeps the password in sync between on-prem and azure AD

Matt Bear

@TheCleaner archive

TheCleaner

@MattBear sorry multiple servers. DCs, ADFS, etc.

voretaq7

Is there a standard for IRC over SSL?

TheCleaner

@MattBear there's no need for an archive...ever.

@MDMarra really? I'll have to look into it...thanks...

MDMarra

@TheCleaner Legal retention

@TheCleaner np. It just came out last week

Matt Bear

21:48

@TheCleaner interweb failure, backups etc

MDMarra

I believe it's a straight upgrade over the old dirsync tool

WesleyDavid

@TheCleaner Are you serious? Never had the need for an email / Exchange archiving system? Am I understanding this conversation right?

MDMarra

@WesleyDavid He's saying with O365 you shouldnt need it

Nathan C

@voretaq7 Not that I'm aware of. It just wraps in openssl

TheCleaner

@MDMarra that's why every mailbox of ours on O365 is set to "litigation hold". No emails get deleted...ever....change an email and revisions are kept forever...etc. User can't get to this "retention bucket" but I as the admin can. 25GB per mailbox with unlimited litigation hold storage. Done.

MDMarra

21:50

yeah

bling bling

TheCleaner

@WesleyDavid but PST! (no just read my last reply for why now)

Nathan C

I feel like O365 costs an arm and a leg

Dennis Kaarsemaker

@voretaq7 make ssl connection. Speak IRC over ssl connection.

Matt Bear

@MDMarra wait... new dirsync tool? how new? will it sync cloud to local now instead of local to cloud?

Dennis Kaarsemaker

There's even a standard port for it, which nobody uses

WesleyDavid

21:50

@MDMarra That's the biggest reason why I don't know if O365 would work for some of my clients. Also, the archive systems I've worked with were great because of quick discovery, advanced searching, and basically "Wap the lawyers upside the head in under ten minutes because HAW! We found the paper trail that shows we don't suck!"

TheCleaner

@NathanC $20/user/month for E3...that's what we were already spending on outsourced Exchange alone.

Nathan C

@DennisKaarsemaker 6697? I thought it was pretty standard.

MDMarra

@NathanC A good exchange admin will cost you at least 90k/y plus benefits

Michael Hampton

@NathanC I think that port is also in my "list of IRC ports"...

Dennis Kaarsemaker

@NathanC 994

MDMarra

21:51

A much lower-skilled guy can managed O365 plus do other tasks

Matt Bear

@TheCleaner plus you get your office license with it...

Dennis Kaarsemaker

dennis@lightning:~$ grep ircs /etc/services
ircs 994/tcp # IRC over SSL
ircs 994/udp

Nathan C

@DennisKaarsemaker Ah, no wonder no one uses it...it's a privileged port. And you're insane to run an IRCd as root.

TheCleaner

yep...and sharepoint/skydrive/lync. and up to 5 Office installs including Mac per user

Dennis Kaarsemaker

@NathanC meh, setuid.

MDMarra

21:52

@TheCleaner are you rocking Intune yet?

Nathan C

I may have to look into it for my company. Although they'll just look at the price tag and say "nope"

WesleyDavid

Suddenly a wild @ITHedgeHog

Nathan C

I mean really ...people still have office 2003

And most have 2007...

voretaq7

@DennisKaarsemaker hiss

MDMarra

@NathanC you never need to buy new hardware or new exchange licenses. And you don't seen to worry about clustering, replication, DR, HA, etc

voretaq7

21:53

I've never seen an SSL ircd in the wild

MDMarra

It's all handled by MS

Dennis Kaarsemaker

@voretaq7 ?

MDMarra

that alone is enough to convince most people when you break down what just that alone costs.

Then you throw in office, sharepoint, lync, etc and you've got a done deal

Nathan C

@voretaq7 I have, but probably because I frequent IRC. I also run a server.

@MDMarra Good point. We're running Kerio because of the price difference alone really. It cost I think under $2k for 100 licenses, while exchange was running well over $10k

voretaq7

@NathanC really? What network has SSL enabled servers?

(and what client(s) support such sorcery?)

Matt Bear

21:55

@NathanC We went from Kerio to O365

Dennis Kaarsemaker

@voretaq7 xchat, irssi

Nathan C

(05:55:06pm) * Connecting to irc.dal.net (+6697)
(05:55:10pm) -underworld.se.eu.dal.net- *** Looking up your hostname...

Dennis Kaarsemaker

I run bitlbee behind stunnel

voretaq7

@DennisKaarsemaker really? I didn't think irssi supported it

TheCleaner

@WesleyDavid screenshot for you:

Nathan C

21:55

mIRC does as well

TheCleaner

Dennis Kaarsemaker

@voretaq7 /connect -ssl

voretaq7

this all started because my ex was asking about OTR in console AIM sessions, and now the rabbit hole of security paranoia begins.

TheCleaner

@MDMarra we start testing it after I return from vacation next week

voretaq7

@DennisKaarsemaker hmm, I was probably blissfully unaware of this because bitlbee requires effort, and the other half of the connection wouldn't be secure without OTR anyway.

Dennis Kaarsemaker

21:56

@voretaq7 hah. You're not in Kansas anymore...

voretaq7

@DennisKaarsemaker x.509 in Wonderland?

Dennis Kaarsemaker

@voretaq7 yeah, for this one I'm not caring about the other half. It's to connect to corporate jabber from the outside. Jabber mandates tls already.

voretaq7

@DennisKaarsemaker yeah the other half of my connections are either IRC or AIM

Michael Hampton

@NathanC Eh, you do what everyone else does, bind the port and drop privs.

voretaq7

neither of which can be viewed as a trustworthy transport, so encrypt and encapsulate ALL the data :P

Dennis Kaarsemaker

21:58

yeah, good luck with securing that.

voretaq7

@DennisKaarsemaker OTR does a respectable job of it

it's just blowfully inconvenient

Dennis Kaarsemaker

OTR on IRC?

Nathan C

IRC doesn't need it

it has end-to-end SSL

voretaq7

@NathanC teeeeechnically it does need it

Nathan C

...on supported networks. Which a majority do.

voretaq7

21:59

because the SSL is between the client and the ircd

MDMarra

@TheCleaner Let me know how it goes. You're the weird edge case that it was designed for :)

Transcript for