On DL380p gen8 servers using XFS on top of LVM on top of raid 1+0 with 6 disks, an identical workload results in a ten-fold increase in disk writes on RHEL 6 compared to RHEL 5, making applications unusable.
Note that I'm not looking at optimizing the co6 system as much as possible, but at under...
Our school VLE/intranet runs on something called ROCKLinux (never heard about it until a few days ago). That server had never been off in about three years til we shut it down tuesday for RAM upgrades.
@JennyD well, I'll hold my hand up there - we've not rebooted it here but it's a managed box by the company that runs the VLE, so it's fully possibly they've rebooted it. Thing is, it's so locked down we can barely get into it to find out the uptime.
@DennisKaarsemaker that sounds like something you'd set up on leaving your job...
(generic "you", of course)
@tombull89 Yes, sometimes there are good reasons. But absent those reasons, I would not want a system running for more than maybe 6 months without a reboot. That's about as far back as it's actually possible to remember the reason for any changes that haven't been done properly.
@DennisKaarsemaker I still half regret' that i never got around to buying a plastic skeleton and put under the raised floor of the server hall before quitting my last job
You know what I love? How clear cut the PCI-DSS really is. So long as you can figure out your merchant level you're good. You know what I hate? How nitpicky the PCI-DSS can be.
@ScottPack I've got one of those e-cards by my desk at work. It says "I'm a real bitch before I get my morning coffee. And afterwards." And still people get surprised when I'm sarcastic.
@JennyD A couple of years ago we got bored and placed whiteboard magnets, about an inch tall, on the top doorframe of each of the guys in the security office. We used them as mood bars. Until last month mine said, "wistful, mildly cranky"
@Dan I never need to make test accounts as such anymore. But at my previous job I had a very free hand when naming servers. We did one particular setup for a customer we intensely disliked, and I named the mailservers after rabies viruses. The nfs servers were "marburg" and "ebola"
and for a main mail system I had "hallucinogenic plants and mushrooms" as the naming scheme.
I set up a secondary MX for our domain customers to use, and called it "planb". One of the sales staff came up and asked me to change it because he knew that one shouldn't name server after where they were housed in case you need to move it and then the name isn't right any more...
@DennisKaarsemaker Yes, with that number of servers I agree. And I wouldn't mind it if the server names here at least indicated what system is on them. But they're all just a numerical series, and it's really hard to remember what "server 134" is used for, as compared to what "imap3" is used for. Or even what "belladonna" is used for.
With a large number of servers you need some way of knowing what is what, so sequential numbering in one series for all is even worse than "everyone decides on their own names"
Back at Algonet we had this mail server that was called "angel.algonet.se". And one of our customers called support and was very upset at getting emails from a "demon" at "angel". (i.e. mailer-daemon responses to wrong addresses). The support tech tried to explain. Then suddenly the customer got very quiet, and after long pause suddenly yelled: "I KNOW WHO YOU ARE! YOU ARE ANTICHRIST!"
@JennyD There's a DailyWTF story about someone who got very upset about a process called "deamon" on a FreeBSD box, which had a sticker of the devil-logo-thingy on it as well.
@mbrownnyc I thought it was 8 messages, unbroken, between the OP and commenter.
@mbrownnyc You can't initiate it yourself. You can make a new room and link the OP to it, but it won't pull in the comments. The site still initiates it, but it takes a lot of back and forth
@ewwhite Consistency. If any server in your org can get to double digits, make them all double digits. Otherwise you have to remember which ones are 01 and which ones are 1
In order to not drive myself nuts I found the following, you should try to rtfw.
1.Click Start, click Run, type dsa.msc, and then click OK.
2.In the task pane, expand the domain node.
3.Locate and right-click the OU that you want to modify, and then click Delegate Control.
4.In the Delegation...
There currently is no state death penalty in Massachusetts, life without the possibilty of parole being the only punishment for first-degree murder. The federal government prosecutes capital cases within Massachusetts, however.
On November 7, 2007, House lawmakers again overwhelmingly rejected a bill to reinstate the death penalty by a vote of 46 - 110. Two years earlier in 2005, the House defeated Governor Romney's legislation 53 - 100. Continue reading for a full Massachusetts history.
Nothing as far as I can see. I've got this in the WindowsUpdate.log: `2013-04-19 08:55:31:849 896 b58 AU # Initiating manual install`
(Trying to figure out how an update happened that took out our main mailbox server for 20 minutes this morning.)
Ah, I'm just being dense...
All our server updates are manual (during weekend windows), so I was thinking I had nothing to compare it with. Then I remembered I had a fleet of 150+ desktops, too..
Similar entry for one of those is: ` # Initiating scheduled install`. So it looks like I Can bollock someone for updating outside the window.
@SmallClanger - find the person responsible, pull them aside and make them a deal...they buy your lunch today and you keep what you know in your pocket. :)
yeah...I'm not a big fan of ePO. It's great when you have time to constantly admin it, but let it lie for a month or two and getting it back in line is a PITA.
Somehow this gigantic black and yellow bug got into my house a while back, I was afraid to smack it with a shoe or something because I was afraid that I'd just make it mad.
@Ryan I still remember a holiday in France when a hornet the size of my thumb hoved in through the open caravan door. Luckily I was holding a badminton racket.
@MDMarra The worst about almost any enterprise antivirus, EPO included, is that they give you a false sense of security while not actually doing anything except slowing your servers down, and if anything goes wrong, AV always gets blamed first regardless of if it's actually at fault
@MDMarra - yeah...the whole AD syncing of the trees/etc. never really worked well for us. They make it seem like it will find every computer and auto install VSE etc...but it was always a pain.
@Cole We've had a couple of those "scareware" viruses on staff laptops, either THIS IS THE INTERNET POLICE or SuperFAKEAntiVirus2013+++XXUltra edition. Always get it when they're at home.
We just had them include it in the image at deployment...we eventually just yanked ePO and made the clients get their updates from McAfee. Went from around 70% having the latest DAT files to about 95%. That's better than having the central management for us... :)
So a Computer account in AD keeps becoming disabled. We've removed the machine from the domain and readded it, but still no dice. Anyone seen this before?
@TheCleaner Heh. Part of your problem might be that the agent doesn't like being sysprepped. It doesn't generate a new UID, so if it's captured, you'll have a bunch of computers on the same network thinking they're the same computer in ePO
McAfee recommends installation post-deployment, but the agent is highly scriptable and plays nice as an MSI for deployment
Sorry...it wasn't in the image itself...it was part of the "software install list" after the initial image was ran by the Helpdesk. At least that's how they were supposed to be running it. (ah to be free from that job...so nice)
although I will say that this year (before I left) we went with McAfee SaaS and that actually ended up working quite well as a GPO and online central mgmt.
In order to not drive myself nuts I found the following, you should try to rtfw.
1.Click Start, click Run, type dsa.msc, and then click OK.
2.In the task pane, expand the domain node.
3.Locate and right-click the OU that you want to modify, and then click Delegate Control.
4.In the Delegation...
