The Comms Room

Michael Hampton

00:00

So if you do something naive and stupid like exclude=kernel* then you can't install certain developer packages...

MDMarra

Where oh where did @ewwhite go

@RyanRies I'm about to facepunch Microsoft

WesleyDavid

@MDMarra Punch Microsoft in the face! With your face!

MDMarra

Intune is so broken with iOS MDM that you can't even enroll iDevices right now

:(

ewwhite

@MDMarra why?

Michael Hampton

Oh, speak of the devil!

MDMarra

00:04

You needed work done, right?

ewwhite

@MichaelHampton I'm upgrading ESX hosts

to get around the bug

Michael Hampton

8 mins ago, by Michael Hampton

All right, who's the FUCKING ASSHOLE who blacklisted the kernel on my EL6 virtual machine?

ewwhite

@MichaelHampton There's no reason to update the kernel. You don't want to have to deal with bugs and having to test your application code.

Michael Hampton

@ewwhite I wasn't trying to update the kernel. I was trying to yum install qt-devel. Which doesn't work if you blacklisted the kernel like that.

Cole

Everyone needs this ^ right now

ewwhite

00:07

@MichaelHampton Never update your kernel!

Michael Hampton

@ewwhite Even AFTER the remote root exploit? How about after the crash bug crashes my system at 209 days uptime?

ewwhite

@MichaelHampton The hackers probably deserved to get in. They put in some effort. That should be rewarded.

WesleyDavid

@Cole He's just playing with his food.

Michael Hampton

@ewwhite Oh, so you should store all your customers' credit card data in /etc/motd then?

WesleyDavid

@MichaelHampton Systems up for that long deserve a catastrophic reboot. =P

Michael Hampton

00:10

Azure's not impressing me. I think my phone has faster storage.

Cole

My grandma runs faster than your storage!

WesleyDavid

@Cole ... and she's dead!

Cole

My cat is laying on the couch just staring at me on the computer. Cats are so weird.

WesleyDavid

@Cole Plotting your death.

Cole

@WesleyDavid most likely

or, "How shall I cockblock my father tomorrow? Let me count the ways!"

3

WesleyDavid

00:14

I'm just going to let that fester in its own misquoted ignominy.

Matt Bear

@Cole nothing kills the mood quite as much as a pair of beedy eyes staring at you intently while your trying to get busy....

or jumping into the bed and rubbing up on you...

Cole

@MattBear Yeah, so if you could stop looking in my window at night, that'd be great.

Mark Henderson

@Cole He'll be in the hospital suffering from epic burn

Matt Bear

@Cole dont worry, I got my cameras mounted so I can watch from home

Mark Henderson

Cole

00:18

@MarkHenderson You're telling me, the cat runs out of the room when I'm naked.

ewwhite

@mdmarra. Go create the OUs!

MDMarra

What do you need, just OUs again?

Or do you need user accounts, UPN suffixes, mailboxes, etc

Ryan Ries

@MarkHenderson Well I couldn't do the experiement I wanted because I can't find a suitable root CA that I can distrust

ewwhite

OU will determine mail address, based on my address policy

MDMarra

Uh

no it wont

Ryan Ries

00:25

@MarkHenderson Tomorrow at work when I have more desire to look for SSL web servers

MDMarra

We were configuring OUs based on site, but they have different mail domains in the same site

Ryan Ries

@MarkHenderson And the real ones that Windows trusts by default, like Baltimore and Verisign, etc.? If you delete those out of your stores, Windows just adds them back automatically. :P

MDMarra

@ewwhite Also, I need default values for all of the info that they didnt fill in

ewwhite

so you can create the users, but it seems better to use the OU to determine email address

Ryan Ries

@MarkHenderson But I still say Windows/IE are still gonna give you shit about it, because even if you installed the cert as a Trusted CA... the cert still says it was issued by someone else... that you don't trust... ergo, invalid cert

"Ignoring" a cert warning in Firefox, et al. is not the same thing as trusting a certificate

ewwhite

00:29

I mean, there are people mixed between sites.

MDMarra

@ewwhite That's better for exchange...not for GPO

Cole

THANK JESUS I AM DONE MY VMWARE ICM CLASS.

ewwhite

@MDMarra We're also scrapping login via email address

MDMarra

ok. i'm going to eat dinner

ewwhite

the local it guy determined it would be too awful

MDMarra

00:31

make a list of all of the things that have changed

ewwhite

Create the OUs

but I'm not sure which UPN suffix makes sense...

Maybe I'll just use a custom attribute to determine email address

jscott

!!!

Michael Hampton

I'm not quite sure that this is on topic for Server Fault. If you need help with understanding how ejabberd works, I suggest reading its documentation. If you need help with designing your application, try our sister site Programmers. If you're stuck on a specific coding issue, try Stack Overflow. — Michael Hampton 31 secs ago

Am I wrong (again)?

Scott Pack

Probably.

2

Wow. Any time you start your question with 'n00b' I feel like we've done a pretty good job of level setting expectations.

@Cole For someone without a child you sure seem to understand how they work.

Cole

@ScottPack what?

Scott Pack

00:40

26 mins ago, by Cole

or, "How shall I cockblock my father tomorrow? Let me count the ways!"

Cole

@ScottPack oh well cat, child, same difference

jscott

Cats are far better behaved than children.

Scott Pack

That and it's considered socially acceptable to lock cats in small cages in your basement.

Cole

You guys make me not want to have kids, ever.

Makes me glad I have a mangina, especially since my girlfriend is allergic to latex. So I don't have to worry about accidental babies.

jscott

@ScottPack Cat : "Small cage in basement" :: Child : "drop side crib in closed upstairs room"

Scott Pack

00:44

@jscott That's less effective when they're 4.

jscott

Need a bigger, deeper crib?

Ryan Ries

@MDMarra Why are you mad at MS again? Is it because of Intune?

Scott Pack

@jscott Girl's tall. We're talking either a tight fitting lid or a small pit with frictionless walls.

MDMarra

@RyanRies yuuuup

@ewwhite what ous am i creating now?

ewwhite

@MDMarra well, I don't know how granular to make it

maybe by physical location

MDMarra

00:48

thats how we had it

ewwhite

I'll handle email address policy with custom attributes

MDMarra

But we're not doing upn suffixes anymore?

ewwhite

I don't think so.

what do you do with a user at the olympic site who needs a coast citrus email address?

if OUs are set by location, that's going to be messy

MDMarra

You said they were trainable

I wasn't planning on automating anything other than the initial user account creation

ewwhite

just create the accounts, and I'll let the mail policy cover the rest.

MDMarra

00:53

I wasn't going to tie a suffix to a specific OU like we've done at the other places

ewwhite

for cert purposes, I'm going to just have autodiscover work on the main domain... coastcitrus

MDMarra

Ok, so what suffix do I use

And what are the default values that I should use for all the stuff that they left blank

ewwhite

ignore the people without names

they have copier accounts and shit that don't belong

MDMarra

what about the ones without site codes

ewwhite

don't worry about them... you've never done a mail migration, have ya?

Cole

00:56

I hate people

ewwhite

I mean, there's "hr"... the HR user shouldn't have a site code

Cole

rawstory.com/rs/2013/03/20/…

ewwhite

in reality, it should be an alias

MDMarra

@ewwhite Sure I have

Not singlehandedly, but I was part of a team that moved 30,000 mailboxes from Domino to Exchange

ewwhite

teams, psssh.

MDMarra

00:57

haha

So anyway

I don't even know what I'm supposed to be doing now. I designed an AD that would be scalable and work based on what we talked about and now everything's different

Michael Hampton

So I seem to have found a bug in Boost on EL6. It's fixed upstream but Red Hat hasn't backported it. There's no workaround. What to do...switch to Ubuntu?

ewwhite

@MDMarra You have to think about what the purpose of OU separation would be in this case.

Scott Pack

@MichaelHampton Is there another option?

MDMarra

@ewwhite Yeah, GPO for when all of those workstations get joined to the domain

ewwhite

@MichaelHampton for boost, the trading firms I've worked at all maintained their own versions.

Michael Hampton

01:00

@ScottPack There's always another option. I could go on a homicidal rampage, for instance.

ewwhite

@MDMarra so then that's location-based...

Michael Hampton

@ewwhite That's actually coming closer to the top of the list.

ewwhite

@MichaelHampton it was for consistency, but also for features.

the better firms rolled their own RPMs

the shadier firms used /usr/local

MDMarra

@ewwhite yeah

Scott Pack

If nothing else it should be easy enough to version bump the el6 source rpm

Michael Hampton

01:01

@ewwhite I'd settle for a fix for bug 5105.

ewwhite

the worst did LD_LIBRARY_PATH

@MDMarra location is fine, but UPN suffix can't work with location

dont' you see the conflict?

MDMarra

Yes. I just got done telling you that I wasn't going to tie specific suffixes to OUs since you said that the IT people there were trainable

It would be up to the IT people there to set it at creation

ewwhite

@MDMarra yes, they can select... but what will their options be?

MDMarra

Originally it was going to be the email domains

But then you said that was scrapped

ewwhite

I see overlap with email address policy... but I'm not sure... I'd still have to tell Exchange who is supposed to get which primary address

MDMarra

01:07

Exchange can't be set to use the upn suffix for that?

ewwhite

or...

I typically handle this with a custom attribute.

MDMarra

@ewwhite New-EmailAddressPolicy -Name "impotados-jose-exportados" -RecipientFilter {UserPrincipalName -like "*@importtados.com"} -EnabledPrimarySMTPAddressTemplate SMTP:@importadosexportados.com

psh exchange is so easy

ewwhite

There are priorities and layers... so for a company like this, the default is coastcitrus unless it's superseded by another policy.

because policy also enforces the naming conventions...

MDMarra

yeah no clue what that means

it looks like New-EmailAddressPolicy supports -Priority

ewwhite

a basic policy would look like:

but in coast's case, it would have three more domains... with the "set as reply" address being determined by the policy priority

MDMarra

01:20

what's %g %s and %m?

given name, surname, and ???

Scott Pack

middle initial?

ewwhite

[email protected] and [email protected]

Exchange only allows sending from ONE address.

but can accept on many

so my produce sites became accustomed to IMAP setups where they could change who they were sending as.

and that's why the silly address policy is important now...

MDMarra

@ewwhite so I'm not sure where this is going. Quick searches are showing that you can set exchange address policies based on upn. And even if it couldnt, I don't know what that means for the AD design

ewwhite

if coasttropical people's email started saying coastcitrus, people would freak out.

MDMarra

yeah of course they would

ewwhite

01:26

It can be scripted... but would not be visible to the people who will need to manage day-to-day.

so I'd go ahead and create users.

MDMarra

doesn't that command just make the policy and as long as the admins don't check the box to override the defaults, wont they get the right account created?

ok

so i'll make a UPN for each mail domain?

and create the users based on the spreadsheet info, leaving out users that have blanks?

ewwhite

sure

MDMarra

ok. And OUs are based on site code?

ewwhite

I guess so :(

MDMarra

don't be sad little guy

ewwhite

01:30

maybe major company name makes more sense...

MDMarra

There you go!

Ok, so what would be more likely to have GPO based off of

The major company name, or the building theyre in

ewwhite

the building

for local resources

@MDMarra they won't like this... they're not going to want to dig into the Exchange Shell

MDMarra

It sounds like maybe we should have a top level OU for each company

and then sub-OUs for each site in each company OU

so OL, CTSD, etc under each company

ewwhite

sure.

MDMarra

ok. and I assume the company names are the same as email domains?

ewwhite

01:34

yes

MDMarra

ok

And can you get me the IP subnets for each site

no rush on that one though

We're going to want to use AD-site based GPO for some of this, the way we're doing it

This will resolve your exchange conundrum right?

ewwhite

I can add sites for sites and services, but there are clearly no DCs at the other facilities.

MDMarra

yeah that doesnt matter

if you get me the subnets, i'll do it. Unless you want to configure site link bridging and all that

ewwhite

I'll take care of that

MDMarra

ok. make sure you have separate site links for each site to the hub site and you're not bridging links

ewwhite

01:36

I don't even know the remote subnets right now

AD is never the focus

people care about mail

MDMarra

Yeah, understandable

ewwhite

they're re-IPing the network

MDMarra

just saying the site configuration is going to be really important when we start doing GPO

ewwhite

to get away from 199.3.63.x

MDMarra

so make sure it's perfect :)

ewwhite

01:37

okay, you can do it

MDMarra

I need domain admin for the new AD

ewwhite

same

MDMarra

I didn't save the old password. I just logged in and made an mdmarra DA account

Then you killed it!

ewwhite

I needed to rebuild

MDMarra

I know

ewwhite

01:43

well, go find the password!

MDMarra

I'm going to take you out of VIP at this rate!!

:)

ewwhite

You don't have the password?

MDMarra

nah I just found it

Scott Pack

Looked under your keyboard?

ewwhite

Post-It note.

MDMarra

01:48

email

found it in the mountain of @ewwhite requests :)

MDMarra

02:09

@RyanRies you would die at the for-each nesting im doing now

Jacob

@MDMarra why? just why?

MDMarra

because @ewwhite needs a complicated OU structure for his Exchange policy to work :)

Jacob

@MDMarra As long as you're getting compensated

MDMarra

Am I a sucker for taking 5 minutes to script 84 OUs being created instead of taking an hour to make them? :)

Mark Henderson

@MDMarra Are you going to bill for an hour?

MDMarra

02:16

Oh my god are you still here @ewwhite?

@MarkHenderson nah

Jacob

@MDMarra Yeah, you're being paid by the hour..., so save the time and bill the client for the other half an hour.

MDMarra

I bill Ed :)

If you call it billing

It's mostly me saying "It's been a while since we finished that last project.."

ewwhite

@MDMarra hmm?

MDMarra

These knucleheads filled in the names as lowercase

I assume you need me to do some substring magic and capitalize the first letter so that they don't look like children?

ewwhite

Fix it in Excel ;)

MDMarra

02:20

its already a heavily edited csv on the server :/

ewwhite

Use the Unix tr command

Jacob

@MDMarra You're going to have to do some Linux Pipe foo

MDMarra

so clipboard support on CoRD is a bummer, huh

@Jacob this is powershell, son

Jacob

@MDMarra OK, so do it in C# then...

MDMarra

POWERSHELL

it supports .subString() and .Trim() natively

and .ToUpper, etc

<3 PS

@ewwhite should they all be created with the same default password. And should they need to change the password before first use?

Jacob

02:28

@MDMarra Mark, I was kidding :)

ewwhite

@MDMarra you can use a default password... do not force changing upon first use.

Mark Henderson

Does anyone else find it frustrating that the 64-bit ODBC EXE is %windir%\system32\odbc32.exe but the 32-bit ODBC EXE is %windir%\syswow64\odbc32.exe?

You try explaining that to an accountant trying to set up a 32-bit DSN for ODBC

Michael Hampton

@MarkHenderson But that's true of everything in those particular directories.

system32\trollface.jpg.exe is the 64-bit version, and syswow64\trollface.jpg.exe is the 32-bit version.

Mark Henderson

@MichaelHampton Yeah but it's called odbc*32*.exe

Fuck you markdown

I dunno, its just... annoying

Jacob

@MichaelHampton Does anyone really fall for a double extension anymore?

Michael Hampton

02:33

@MarkHenderson Ummmmm... system32\trollface32.jpg.exe?

Mark Henderson

@MichaelHampton Exactly

Michael Hampton

@Jacob Yes, they do.

Jacob

@MichaelHampton No, it should be syswow64\trollface32.bat :)

Michael Hampton

@Jacob But that would be the actual 32-bit version.

Mark Henderson

And now the vmware support portal isn't showing any of our licenses and I can't submit a support request to them

Today is just not my day

Ryan Ries

02:41

@MDMarra Powershell?

MDMarra

yeah

I need to show you these scripts when I'm done

You'll laugh

Jacob

@MDMarra Can I see them too, Grand Master?

:)

MDMarra

sure

Ryan Ries

I love PS

I put a ForEach in yo ForEach so you can loop while you loop

One of my Powershell issues is that I know so much C# that I end up breaking out into full-on C# parlance in my Powershell instead of using canonical PS syntax

MDMarra

I just went three nested foreaches

Jacob

02:53

@RyanRies Been there done that :)

Ryan Ries

I just have to remember to use a [String]$var for a cast instead of $var.ToString() ... stuff like that

But they both get the job done

And to compensate for my love of calling methods on string objects, I have to initialize them to [String]::Empty

MDMarra

@ewwhite you have the worst users

Ryan Ries

Since they'll error if they're null

MDMarra

there are like 3 more site codes in here than there originally were

this totally fucked me up

WesleyDavid

03:28

0

Q: Memcached on MySQL Server?

I just installed yum install memcached on MySQL Server. But then as service memcached status is running.., what to do more as i do not think nothing is improved in MySQL/Application performance. I think i still need to configure MySQL to work with Memcached. What configuration need at MySQL end...

Mark Henderson

@WesleyDavid Saywhaaaaaaa

Matt Bear

@WesleyDavid holy shit.... my wife does that exact same look!

WesleyDavid

@MattBear How many people does she know that do yum install memcached and then wonder why MySQL isn't performing better?

I mean the service is running and er'ything guis!!!

Oh, this explains it:

4lvin

129 6

linux search service .htaccess apache2 cms cross-domain

"I'm a hardcore Developer by using PHP, Java and Open-source Technologies."

"Heyy guysh I hash sum codez tat needsh tuh be fasters sho I inshtalled shum memcashes but my table shcans aren't fasther sho I chmod'ed my root directory to be sheven sheven sheven and apache:apache. Ish there anything elsh I mished?"

Okay but how do i configure it? Any guideline written already? — 4lvin 1 min ago

My face right now:

Okay, enough. Back to search engine frobbing

Ryan Ries

@WesleyDavid You are Johnny on the Spot with the face gifs

MikeyB

Mark Henderson

04:28

@MDMarra Best thing about PS - cd ~

Esp. when you start it as administrator and you start off in the system32 folder

I have a lot of "best things" about PS

I guess it's just all so shiny after years of CMD

WesleyDavid

@MarkHenderson Leave it to MS to make tilde-as-home-dir a new and exciting feature.

Michael Hampton

@WesleyDavid Only it's NOT the home directory!

WesleyDavid

@MichaelHampton dun dun dunnnn

Mark Henderson

@WesleyDavid Haha not quite, I hate them for making it so hard in the past. This is just status quo

Other things i'm less impressed by is ls as an alias to dir (which is an alias to get-childitems)

mv and cp as well

@MichaelHampton Its close enough

WesleyDavid

@MarkHenderson You're beautiful when you're angry.

Mark Henderson

04:35

@WesleyDavid Shall we have some angry sex?

CAT VS BEAR, we would have beautiful, angry children

WesleyDavid

@MarkHenderson If only you were a pterodactyl. sigh

Stack Exchange

So far Voyager 1 has 'left the Solar System' by passing through the termination shock three times, the heliopause twice, and once each through the heliosheath, heliosphere, heliodrome, auroral discontinuity, Heaviside layer, trans-Neptunian panic zone, magnetogap, US Census Bureau Solar System statistical boundary, Kuiper gauntlet, Oort void, and crystal sphere holding the fixed stars.

Mark Henderson

@WesleyDavid Wish in one hand, shit in the other, see which one fills up first

(fun fact, I said that to my wife once - she got upset and stormed off)

WesleyDavid

Wait... this machine wanted approval for a Java update. Now it's installing Java 6 update 39.

I... am so confused.

Mark Henderson

@WesleyDavid This is your usual state, is it not?

WesleyDavid.setState(States.Rest);
string state = WesleyDavid.getState().toString(); //Should return "confused" when "at rest"

WesleyDavid

04:46

@MarkHenderson Usual state is confused-and-bitey.

Woo! I just installed Java 6u39 on an XP machine! As a reward, I'm going to do one internet!

Michael Hampton

Now where's @ewwhite?

First, it's not a major upgrade, more like a service pack. Second, if you go down this road, your systems will be running 6.3 ten years from now, about seven years after they should have gotten an actual major upgrade.... — Michael Hampton 25 secs ago

Mark Henderson

Where do you find this stuff?

Do you dedicate an hour a day to some animated gif tumblr or something?

WesleyDavid

Shoot - CentOS 6.4 is out now? grumbles

@MarkHenderson Ninja-bear lurk in shadow, find animated gif in wild!

Ninjabear hide from dread archenemy, @Zypher san

Mark Henderson

@WesleyDavid Epic bear is epic

That your uncle?

WesleyDavid

@MarkHenderson Mom, gettin' ready to whup me. I didn't come home before the street lights turned on. =(

Mark Henderson

04:51

@WesleyDavid Don't have street lights in my street

So that means I can stay out as late as I want

WesleyDavid

I need to learn how to carve up a PSD into a real live web page.

Michael Hampton

@WesleyDavid Noooooo.....

Mark Henderson

Anyone here ever created a GPO via PS before?

Michael Hampton

05:31

yes it is. I was hoping a sexier name might attract some answers. I guess I should just edited the title of my original post. — Red Cricket 5 mins ago

We need sexier questions!

WesleyDavid

05:46

So @MarkHenderson and @MDMarra - I just went to go brush my teeth, and it was then that I realized what shirt I've been wearing all day: i.imgur.com/3K7tHsp.jpg

Derp. Would be nice to include the link.

Adrian

07:52

@WesleyDavid Because it's necessary, that's why.

►

faker

08:46

Good morning

Dan

Morning all

tombull89

09:01

last day of term :)

working next week anyway :(

Dan

Yay. Boo.

faker

only 6 more days at my current job left :)

tombull89

Currently looking at our BackUp exec setup and what we backup - bugger me.

Dan

Hehe

Too much or not enough?

tombull89

We do back up quite a lot, although it looks like we should do more.

We'll need another DAS to do it properly though.

Doing test restores as well.

Created a VM, installed software, backed it up, destroyed the VM with rmdir, re-installed the OS and restored the backup.

Although test backups and restores of databases is for today...welp.

Abody97

09:16

I've just created an Area51 proposal (area51.stackexchange.com/proposals/52910/teen-life); how can I advertise it?

tombull89

@Abody97 well, considering it was created a very short while ago, give it time. Advertise on your facebook or twitter or any forums but don't spam them or un-related StackExchange sites.

Abody97

@tombull89 Got it. Thanks!

ewwhite

09:32

@Adrian oh man, I stopped looking at the Oatmeal comics.

theoatmeal.com/comics/house

A nice morning of I/O profiling. I need to get better at this.

Dan

10:57

@MDMarra That question was so lazy

I'd never seen or used that command, and within 30 seconds I knew the full answer. You beat me to it by a few seconds

MDMarra

FREE REP

Dan

Yep

Dan

11:33

Ack

Where do I manage an organisations MSDN accounts?

tombull89

11:56

௵

wtf

Dan

What the heck!

tombull89

ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ಠ_ಠ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้

Dan

My browser didn't like whatever you just did

tombull89

Zalgo text. Or "how to get banned from The Bridge"

Dan

ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ಠ_ಠ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้

7

Ooh

Transcript for