« first day (909 days earlier)      last day (4358 days later) » 

00:00
@MarkHenderson I mean, what happened to the development of it? there's a bunch of discussion on the jqueryUI wiki about RAH RAH MAKE GRID PLUGIN HERE ROADMAP 2 years ago, and then nothing
or is this 'welcome to open source software, sucker'
@Aaron Haha probably a bit of that yeah
We stopped using CDNs after our missing plugin issue, so I guess you just have to sort of plan in advance for things just stopping in their tracks
@MDMarra Re: -Passthru: What Mark Henderson said. It's neat because you can modify an object in a way which would invalidate the reference to it (e.g. Change a User's CN) but pass it thru and the modified object pops out the other side.
Google/Amazon has just freaked me out a bit...
I just searched for 'amazon' because I was too lazy to type amazon.com, and The Google search results page showed all of my recent amazon orders, and when the items had been shipped.
00:08
@Zoredache via gmail or skynet?
From google.com
@Zoredache Yeah, but what was the results source?
Not sure what you mean
@Zoredache afraid of google knowing that you just ordered 10x22 gallon lube?
sorry, 55 gallons
No, I am just afraid they might have a buggy implementation, and that someone else might find that out.
00:12
wow, do we have a sense of humor or what!
I don't mind Google knowing, but my coworkers is completely different...
@ewwhite around?
00:33
Yes.
@MDMarra Sitting in a Buffalo Wild Wings with my MacBook, building servers.
@ewwhite Your poops will be bad
@JoelESalas That's why I'm sitting. If I get up, it'll all come out...
@ewwhite You're that guy?
@ewwhite eww
@ewwhite am I working tonight?
00:37
I guess so... if you want.
I mean, I like money
and all I'm doing is waiting for my chinese food to be delivered
@MDMarra I need to do more moonlight work
back off, Joel!
@MDMarra You got the lockdown on Windows
00:41
OU's can be renamed easily, right?
NO, YOU'D BETTER LET ME HANDLE THIS
But yes, they can
It's only a problem when you have an LDAP, but not AD-aware app that uses LDAP queries and you have a searchbase defined inside of that OU structure
like ACS or something
I'm trying to add your VPN
spotty connection...
"According to suicide statistics, Monday is the favored day for self-destruction"
The word "lethologica" describes the state of not being able to remember the word you want.
@MattBear That's great, I didn't know that word.
The largest number of children born to one woman is recorded at 69. From 1725-1765, a Russian peasant woman gave birth to 16 sets of twins, 7 sets of triplets, and 4 sets of quadruplets.
00:52
@MattBear And that was before current fertility drugs
@MDMarra Renaming OUs can also muck up your item level targeting if DN/OU/etc is queried.
That's insane
@MattBear What are you hanging out with Cliff Clavin or something?
"Goodbye" came from "God bye" which came from "God be with you."
im doinng some DB exports :p
A car that shifts manually gets 2 miles more per gallon of gas than a car with automatic shift. - I doubt that is true any more
00:56
@MarkHenderson it is
A modern, dual-clutch DSG 8-speed gearbox is a thing of beauty
drag from the transmission fluid on the stall converter, = appx 2 mpg
Compared to your standard 5/6 speed manual gearbox that hasn't changed much since the invention of the tractor
Also consider the fact that a person who buys a car with a manual gearbox is far more likely to give the car a boot in 2nd gear and hold it to the redline...
@MarkHenderson its calculated in top gear, at 55 mph
The Australian $5 to $100 notes are made of plastic.
^ Incorrect. They are made of polymer, and all our notes are
That dates this page to at least 12 years ago
We changed the $5 in about '89 and $100 in about '95 or something
So actually more like 15 years
01:02
@jscott yeah but who does that :)
@MDMarra Well, uh, I, uh... this one guy I know... I won't name names... But he wasn't to stoked when all his GPPs when out of scope because the OU changed underneath.
You filter based on OU though?
At that point, why wouldn't you just have separate policies?
0
Q: SSD Asserted Errors, Dell server

sepulworldI have installed Crucial SSDs on a new Dell r620 server. Ipmitool keeps alerting that the drives state is changing. /etc/cron.hourly/ipmisel.cron: 2 | 03/07/2013 | 23:32:18 | Drive Slot #0xa3 | Drive Fault | Asserted 3 | 03/07/2013 | 23:32:18 | Drive Slot #0xa5 | Drive Fault | Asserted ...

I have installed Crucial SSDs on a new Dell r620 server
installed Crucial SSDs on a new Dell r620
Crucial SSDs
@MDMarra There were four "options" for this application, each applied to a specific building, so there was a single GPO "Application X settings" but it had ILT for each building's (OU) users' required settings. Needless to say, that guy changed it to not depend on ILT.
That's actually a question we're dealing with now -- more, smaller single-serving GPOs vs survey everything and consolidate into domain, building, department, staff, student policies. There's no in-house rules, so are current setup is pretty unorganized and it drives me nuts.
I always do single or tightly grouped policies in GPOs
well... thats 8 ubuntu servers up and running =/
01:11
So things like:

`WSUS - Main Campus`

`Windows Firewall - Lab Port Exceptions`

`GPP Group Preferences - Local Admins`
damn markdown
There's also a ton of shit in our GP that just isn't warranted. The "old way" of thinking was "lock the users down" -- which is fucking waste of time. We got everyone to limited users a few years ago, so most of the lock-down is just annoying. There's no justification for hundreds of applied policy setting when they don't do anything but frustrate the users.
@MDMarra all about $4000 Sandisk SSD's
@mdmarra go create some OU's... and do Active Directory stuff.
That I get, we couple (and name) our GPOs in a somewhat similar way.

- FCSD (district wide) Office 2010
- FCSD FEP 2012
- Transportation Favorites
But then there's tons of single-setting GPOs, many which do nothing more than create a desktop shortcut or IE favorite. Then these aren't tied to group/OU, but rather just linked all the hell over the place. Just need to create some guidelines that our team can follow.
@ewwhite I would if I could authenticate to the VPN!
mark, ever used that script that extracts updates from windows?
it works for office2010, but a bit unsure about office2013..
01:19
For instance, just today, one of our guys is doing Windows 8 testing. When doing a student logon, the start menu tiles would never appear. There were something like 37 GPOs walked to get that logon. We found the setting, and set it to "not configured", but nobody knew why it was in place or what it actually did -- it didn't even have any effect on our XP/7 users as it only applied to very specific redirection cases.
@pauska not sure what script you mean
or what "extract updates from windows" means
ugggh adding endpoint to azure takes forever lol
scroll down to "To extract the .msp files from a test computer and copy them to the Updates folder"
@pauska Are you rolling out 2013 or just testing/playing?
@jscott Only Lync 2013 locally on clients
we are using 2013 on the it department.. no problems so far except some GAL troubles with outlook
01:22
@pauska Oh, I just note the KB number on a fresh reference system and manually download
thats a cool trick though
yeah this saves you that hour of manual work
it exports the msp files, so you just put them in the updates folder.. done
TechNet makes me sad because there's no real equivalent for Linux
meh, if you do it every month it's only 5 minutes worth of work
the first time is a pain though
so my point still stands
stop arguing with me, I'm always right
2
@MDMarra Time to write a PS cmdlet to do all that for you then.
01:28
@jscott I had a batch script where you could download msu's to a specific folder and it would extract them, copy the cabs, mount a reference .wim, add the updates to the offline wim, commit the changes, and then delete all of the .cabs that were just added
manual processes are for suckers
Oh sweet, no shame in batching it up.
windows imaging was my bitch
@MDMarra That's OK, Windows Update will make you its bitch.
WSUS is nice
@MDMarra WSUS always gives you a reach-around.
2
01:31
well, time to go home
@JoelESalas . . . Server Fault
01:56
@jscott - I just read one of your answers about a "laptop cart" from 2010
May I ask... wtf is a laptop cart?
@MarkHenderson It's a cart that holds laptops?
@jscott There seems to be somethign about charging them and plugging them in?
A mobile computer lab
@MarkHenderson they make custom carts for schools that integrate a bunch of chargers (usually with one 15/20A power plug)
Yes, that picture isn't the model we use. We have our carts (each holds 30 laptops) wired with AC and network.
01:58
I've seen some with a WAP on the too
Yes, wap and network printer on top.
Interseting
I've never seen anything like that before
Laptops now out number our desktops throughout the district.
That must be a nightmare
Rooms dedicated as "computer labs" are going away.
01:59
it started as a cost-cutting measure -- a few laptop carts can serve several classrooms, and there's less fighting over what class can schedule the computer lab
you know what the worst part about managing a large number of laptops is?
@MarkHenderson It's actually not terrible, and it's getting better. We moved to 5Ghz aboru two years ago and that made a big difference.
@pauska MISSING FUCKING KEYS?!
the fucking updates
people never let them patch
instead of shutting down (with defaults to install updates while doing so) they just slam the lid down
I swear the students must collect keys for their poetry or something.
@pauska that's the great thing about the carts - they come home at the end of the day
02:00
with oldschool computer labs you could WoL all the pc's and patch them...
@jscott Your laptops have keys?
@pauska Wired cart +WOL (or BIOS power on time) + WSUS
@MarkHenderson on the keyboards, don't yours?
@MarkHenderson Keyboard keys. The kids love to tear them off.
@jscott Oh haha of course
02:01
@jscott tear off their fingernails next time. I'm sure the looting will stop.
I friend of mine used to work at a school, they had a bucket full of letters
@jscott we rearranged the letters on an old SGI keyboard in college
0
Q: AM I BEING VIRTUALIZED?

user163503AM I BEING VIRTUALIZED? I share an internet connection with a couple of roommates. Both whom are very savy on the computer, esp compared to me. Even worse, one of them is an electrical engineer very hardware savy capable of breaking down n' modifying hardware components...doin God knows what....

I like this guy
THIS IS HOW THE COMPUTER FEELS!!! DO YOU LIKE IT!!
2
AM I BEING VIRTUALIZED?
2
02:02
@MDMarra YES. WE'RE CONSOLIDATING YOU!
@voretaq7 That's funny, but not destructive. The keys on the ThinkPad line are nearly impossible to remove/replace without damage.
IS THIS THE REAL LIFE? OR IS IT JUST FANTASY?
@jscott yea the SGI keyboards are keycapped
@MarkHenderson CAUGHT IN A HYPERVISOR!
You are being virtualized right now. This is the Matrix — MDMarra 12 secs ago
@voretaq7 NO ESCAPE FROM REALITY
02:03
NO ESCAPE FROM CPU AFFINITY
@MDMarra No, you wrote "Matric" first
no cheating!
EDIT
cheater!!
Only mods can view comment edit histories
I like his little EOF
02:04
you have no proof
BALEEDITED
See @pauska is right again.
@MDMarra Nope, there is no edit history for comments
WTF someone flagged it as "off topic"
@pauska Actually the very first thing I wrote is "You don't know what "virtualized" means.
There has never been a more on-topic question
DECLINED!
02:05
yeah, this one needs thorough investigation by all users above 10k rep
I like this part:
I really, really, really hope that he doesn't see the chat link on the site.......
@pauska But maybe chat is BEING VIRTUALIZED TOO
3. How can i wipe the RAM definitively to remove it as a suspect?.
@MarkHenderson Microwave.
02:07
wool cloth should also quickly zap the ram into oblivion
@jscott thermite
He installed Windows 8 on that antique? It barely ran XP.
^^ Static(y) RAM?
That computer belongs in a museum recycle bin. Putting Windows 8 on it is just a form of self-torture.
02:10
@MarkHenderson @voretaq7 BALEETED? :(
sadness
@pauska shrug
We had our fun
Let the man die in peace
2
Can you imagine how high he must be right now
@MDMarra Leadville High
He's going to come back and be like "Oh my god. my roomates have intercepted the entire internet and are virtualizing it"
02:18
Attack of the DevOps!
New client at work...
developers wanted some RHEL boxes.
(VMs)
@ewwhite what's ol-vc1
virtual center
oh
am I doing stuff with it?
NO
So the devs of this new client have a script
and they say it doesn't work on cloned RHEL Virtual Machines
so they want hand-build VMs instead of clones
puppet~
02:22
@MDMarra no, why wouldn't a script work on a VM clone?
it relies on a h/w serial number from the mainboard?
@pauska it's a web developer....
dongle shit
oh
I'm trying to find the script...
@ewwhite It'll be interesting to find out. I suspect you'll be debugging their piece of shit script before long.
02:23
@ewwhite No reason whatsoever
@ewwhite Was doing the obligatory "puppet everything".
@MichaelHampton they rejected our help...
@ewwhite should I be able to resolve those servers by hostname over this VPN link?
@MDMarra ~*~*~ P u P p E t ~*~*~
but we suspect that previous configured settings/accounts might be interferring with the new dev's very particular scripts
02:24
@ewwhite Oh, you have THOSE kind of developers. Your company's going to lose money on those guys.
@MDMarra I can
nevermind
i cant read
or read
I picked up a CableCard from Comcast today for my HDHR. I haven't activated it yet as Comcast's activation system is down... Surprise, right?
But I popped the card in so it's ready to go and turned the unit on. The "ready" light lit up. "That's odd, it shouldn't work until it's activated". Guess who's got a lot more channels than he pays for. =]
@ewwhite yep
02:27
@ChrisS Winning. Will you just run this until it's disabled? "Opps, did't realize I had to do anything. I plugged it in and it worked"
@jscott Well I'm certainly not going to call and tell them they made a mistake. =]
Though I've been surfing around on the channels. I have quickly remembered why I'm not willing to pay for all those extra channels.
[DevGuy@PickyCustomerServer-1v ~]$  history
    1  03/07/13 13:30 su -
    2  03/07/13 13:31 whoami
    3  03/07/13 13:31 vi /etc/hosts
    4  03/07/13 13:31 sudo vi /etc/hosts
    5  03/07/13 13:31 exit
    6  03/07/13 17:14 ls
    7  03/07/13 17:14 cat /etc/passwd
    8  03/07/13 17:14 cd /var/www/html
    9  03/07/13 17:14 cd /var/www
   10  03/07/13 17:14 ls
   11  03/07/13 17:14 su
   12  03/07/13 17:15 sudo su
   13  03/07/13 17:16 ls
   14  03/07/13 17:16 history
   15  03/07/13 17:17 nano /etc/hosts
O_o Y U mess with mai hosts?!
chattr +i /etc/hosts
@ewwhite Did he actually manage to run any commands as root?
02:33
@MichaelHampton no
I do like that they speak both vi and nano, that's helpful.
@jscott What if nano let him do the edit? You gotta try man, that's the first rule of hacking
oh my...
@ewwhite Out of curiosity how would they know if they had "two new, clean VMs" -- do they want to watch you install the OS manually?
Yes.
02:39
Do they pay hourly?
@jscott hells no.
Maybe find a youtube video of a CentOS install and desktop share it out to them.
@ewwhite My first thought was that you should let them order elsewhere, as this customer's "dev guy" is going to be more trouble than he's worth.
So what would you do?
I'm not sure what a hand-crafted, artisanal install of an OS would have over a scripted/cloned one.
02:41
@jscott inconsistency
@jscott It'll be organic, free-range, home-grown, locally-sourced and cage-free
the clone was made...
@AlUmmatمجاهد Business as usual
reboot   system boot  2.6.32-220.el6.x Thu May 17 15:12 - 15:48  (00:36)
@ewwhite Depends on my relationship with the client... If it's someone I've been working with for a long while, I'd advise them straight out that their new guy is an idiot and they should get rid of him ASAP.
02:41
@MDMarra That's called "character" in the art world ... heathen.
@ewwhite did you see the email I sent?
@ewwhite If the client was decent (besides this new dev) I would entertain the installs. It is only two VMs. Hate to burn a bridge over so little. But I would then press for exact details into "what doesn't work" with a clone. If they come up with BS, call them on it.
SyFy is terrible... really terrible... I'm watching some Haunted thing right now. Well, it's on in the background. It's a relatively well acted classic ghost story.
5 VM's
02:44
@JoelESalas You should put your OS installs on etsy. You could do really well. ;)
I would love to post the script
I just found it
unlisted pastebin it
@ewwhite Is it as shitty as I think it is?
@MDMarra how?
02:50
pastebin.com, set it to unlisted, expire 1 day
@MichaelHampton it's pastebin.com/58XEr6f9
Oh god, they let all their developers edit the config files without sudo.
Someone doesn't like visudo
And those two guys can do whatever they want to the database.
I'm spinning up a fresh VM on my infra
because I don't know that this script would work anywhere
02:55
Haha, the real kicker is disabling root ssh login. Which is totally meaningless since they've opened holes for their users wide enough to drive an 18-wheeler full of rootkits through.
I love that mysql pw
@MDMarra Is it the name of a Ke$ha song or something?
@MDMarra I changed the password
so seeing that, is the client justified in rejecting our Linux because that script fails?
02:59
@ewwhite The script never creates the directory /var/scripts which it tries to chmod. That's their fault.
'ello
@ewwhite Knowing what exactly fails would go a long way. Especially if they're only developing this script on their test machines.
@MichaelHampton another paste bin...
This is your new favorite thing, isn't it?
2nd comment
03:03
service iptables stop
chkconfig iptables off
devops
Oh fuck, turn off SEL, turn off firewall, install webmin...
And there's a command-line interface to Drupal? Oh boy.
@ewwhite Oh god. RUN AWAY
I wonder if they know what the word "detritus" means.
In biology, detritus is non-living particulate organic material (as opposed to dissolved organic material). It typically includes the bodies or fragments of dead organisms as well as fecal material. Detritus is typically colonized by communities of microorganisms which act to decompose (or remineralize) the material. In terrestrial ecosystems, it is encountered as leaf litter and other organic matter intermixed with soil, which is referred to as humus. Detritus of aquatic ecosystems is organic material suspended in water, which is referred to as marine snow. Theory Dead plants or ...
so given this, the scripts have no sanity-checking...
it's a pretty shitty way of deploying a system
So they're doing a puppet-y thing with all the svn checkouts, but they're against using a config management tool?
Yeah this is a "developer" who's never heard of deployment best practices, or even that deployment tools exist.
03:06
@jscott who knows... the client hired a new dev
and he came in asking about Ubuntu
I told them we wouldn't support ubuntu... and this became a political battle
the script doesnt do any error checking at all
Of course it doesn't do any error checking, it runs fine on the developer's machine!
@pauska Right... for instance, before we turned machines over to them, I installed epel just to be ncie
What did he say earlier today....
that clearly would error out here
03:08
@ewwhite it would not be able to install the package
6 hours ago, by voretaq7
@jscott If those things are important to you you should be on StackOverflow
it would still run through all the commands
epel-release-whatever.rpm is already installed, you fwucking cwunt
are ACL's common in web systems?
@MichaelHampton you said you did that.
@ewwhite Sure, I use ACLs so the web server can read the content, and write to the upload directory.
03:12
so what do I do?
I also have a similar setup where four people have to be able to write to the web site, but I have them all named by user in the ACLs...
Does your company bill the clients extra when they do stupid shit and then ask you to clean up after them?
not really
this is a long-time client...
but new dev
but what we need is for <company> to deliver is two additional, clean VMs by 9AM. Again, why don’t you have a RHEL template ready to go? That seems like a no-brainer.
I guess I would advise management that this is likely to be a source of a large number of support calls to clean up whatever this idiot dev breaks.
@ewwhite Love it when other people tell you what you should be doing
disabling root access, for instance... no-go
03:15
Maybe I wouldn't use the word idiot, though...
Although I'm guilty of that myself when I found out that a local government had no SNMP monitoring ability on their massive network
we monitor with SNMP, we have root privs... we need backup software and agents.
@ewwhite Meh... just kickstart the guy a couple of VMs and wash your hands of the whole thing.
our imaging process has too many things in it.
Hey guys, noob question here. Can you fire off some suggestions for managing ~25 OS X machines
03:17
too hard to decouple snmp, backup agents, our sshd config files, etc.
I've never actually had to use OS X in a office environment.. like this
@mossy Quit?
God damn it mark
@mossy JAMF Casper suite
Absolut
C'mon, you saw that one coming ;)
03:17
wait, that's a vodka
You guys want to hear how i installed updates today
Mass email "Please install this DMG with this linked account"
@mossy You don't have a OS X server?
Get a couple of Mac Mini servers. Set up Open Directory. Set up Apple SUS for updates. Get ARD licenses. Use WGM to lock down basic stuff (it's like a shitty version of GPO). Get something like Casper for imaging/config management. Then quit before you implement any of it.
hahahahaha
@jscott Just a bunch of iMacs right now
03:20
@mossy Take one. That's your server now.
@jscott Can't. My iMac is strictly for World of Warcraft pet battles.
@mossy You can do a lot with just ARD alone. take @MDMarra's advice, but you don't need to buy all that shit just to quit. :)
@mossy I understood "strictly" but after that it was just gibberish.
> Earlier we had thought the power on one side dropped, but it's apparent that both sides of power went down. We have A and B side power and UPS with the datacenter so I expect a full explanation how on earth this happened and how they're going to prevent it in the future.
I'm having a fun evening!
@MichaelHampton so is it valid to say that the client's script is reckless?
@ewwhite It would be wiser to stick #!/usr/bin/perl in front of a bunch of line noise and run that.
03:24
haha
> Unfortunately there will be more downtime at 11pm Mountain Time as we will have to power down because the nature of the power outage requires the datacenter to offline all the power to isolate some power circuitry to investigate/repair it, right now everyone here is bypassed directly to commercial power.
Guess I'm not getting anything else done tonight.
@jscott @MDMarra Thanks for the suggestions.
03:41
@MichaelHampton That seems really poor
Is this a big DC?
I can understand that everyone can have issues, but to have both your circuits routed through commercial power and having to shut them off...?
03:55
@MichaelHampton I tried that.

« first day (909 days earlier)      last day (4358 days later) »