Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Bhodi
Dec 9, 2007

Oh, it's just a cat.
Pillbug
Yeah, let me know if it uh, works. Good luck with that. Any time I've ever tried to do anything microsoft over a weak WAN connection, it's LOL NOPE

Adbot
ADBOT LOVES YOU

CLAM DOWN
Feb 13, 2007




Yup. I don't really have much of a choice about the WAN link unfortunately :( Obviously there are going to be problems but I'm curious what they'll be. I've done old fashioned mirroring over this same link and it's actually hilarious what happens to it sometimes. It's partially why I drink.

Proud Christian Mom
Dec 20, 2006
READING COMPREHENSION IS HARD

CLAM DOWN posted:

Have any of you done SQL Server 2012/2014 AlwaysOn Availability Groups over a weak WAN connection between sites? Usually 300-400ms ping with occasionally noticeable packet loss. I'm curious what kind of issues I'm going to have.

yikes

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Irritated Goat posted:

Just to poke in,

I'm looking around to find a good solution for keeping account information for server work. I'm in an MSP so we'll have things for multiple clients and will have multiple people on this so I'm OK with some backend security if I can push it as necessary and better than keeping a hidden page somewhere on the MSP network. I looked at Keepass but not sure if we can do much without buying a Yubikey or something of that fashion. I just wanted to see what others are using to do this.

Where I am, we use Teampass
It's encrypted, lets you import your keepass db and supports two-factor auth if needed by using google-authenticator.

Adjectivist Philosophy
Oct 6, 2003

When you gaze long into an abyss, the abyss also gazes into you.

Docjowles posted:

I too got tired of the "everyone has a personal Keepass file, each subtly different" method of managing credentials. Fellow goon madsushi recommended Secret Server to me and it's been pretty awesome. It's a bit heavy weight and "enterprisey" but I haven't come across anything better. If you don't need the more advanced features, the Express edition is a ridiculous value at $10. They also periodically have an insane promotion on it that massively increases the limit on total number of saved passwords and concurrent users, and it looks like that's active again right now.

The msp I work for uses Secret Server. I don't manage it, but from a user perspective it works perfectly well. Seems to be decently customizable too if you're into that.

3 Action Economist
May 22, 2002

Educate. Agitate. Liberate.

CLAM DOWN posted:

Yup. I don't really have much of a choice about the WAN link unfortunately :( Obviously there are going to be problems but I'm curious what they'll be. I've done old fashioned mirroring over this same link and it's actually hilarious what happens to it sometimes. It's partially why I drink.

If you do manage to get this to work, please let me know. I'm facing a similar problem at my new place (their LOB app uses a SQL database, multiple sites connected across some very poor connections).

Sickening
Jul 16, 2007

Black summer was the best summer.

Colonial Air Force posted:

If you do manage to get this to work, please let me know. I'm facing a similar problem at my new place (their LOB app uses a SQL database, multiple sites connected across some very poor connections).

Why the need for the app and the database to live apart? Why not have access the app remotely and not chop it up?

SyNack Sassimov
May 4, 2006

Let the robot win.
            --Captain James T. Vader


Sickening posted:

Why the need for the app and the database to live apart? Why not have access the app remotely and not chop it up?

I have the same problem, and the company responsible in this case basically said gently caress off, we don't support it unless you're accessing the app remotely and it has local subnet access to the SQL DB.

When we did packet captures etc., the problem appeared to basically be this, and as the one comment on that post says "this would have been so useful if it OFFERED ANY loving SOLUTIONS" (paraphrased).

So yeah we just went with RemoteApp, which isn't awful but is annoying that we had to do that. To answer your question, it would have been nice not to have to devote the RDS CALs and server RAM to run this app instead of running it locally on the machines.

Squatch Ambassador
Nov 12, 2008

What? Never seen a shaved Squatch before?
I found a feather in the box for a new Dell monitor, no idea what kind but it looks like a large down feather. I wonder what happened to the rest of the bird :ohdear:

lampey
Mar 27, 2012

CLAM DOWN posted:

Yup. I don't really have much of a choice about the WAN link unfortunately :( Obviously there are going to be problems but I'm curious what they'll be. I've done old fashioned mirroring over this same link and it's actually hilarious what happens to it sometimes. It's partially why I drink.

If you don't have any option to upgrade the WAN you could use a WAN optimizer like one from Riverbed. We used them on satcom links in the military and it makes a big difference in throughput over a high latency connection.

Internet Explorer
Jun 1, 2005





Irritated Goat posted:

Just to poke in,

I'm looking around to find a good solution for keeping account information for server work. I'm in an MSP so we'll have things for multiple clients and will have multiple people on this so I'm OK with some backend security if I can push it as necessary and better than keeping a hidden page somewhere on the MSP network. I looked at Keepass but not sure if we can do much without buying a Yubikey or something of that fashion. I just wanted to see what others are using to do this.

Looks like the product was just bought by Kaseya, but ScorpionSoft AuthAnvil has a security suite that includes password management and dual-factor authentication. May be worth looking into.

CLAM DOWN
Feb 13, 2007




lampey posted:

If you don't have any option to upgrade the WAN you could use a WAN optimizer like one from Riverbed. We used them on satcom links in the military and it makes a big difference in throughput over a high latency connection.

I don't, so I will look into that. Thanks!

Internet Explorer
Jun 1, 2005





CLAM DOWN posted:

I don't, so I will look into that. Thanks!

I have to ask, why do you want to do this over a lovely WAN link? Is there an fat application on both sides that needs access to the data? You are almost certainly better served by just using RDS / XenApp.

luminalflux
May 27, 2005



Irritated Goat posted:

Just to poke in,

I'm looking around to find a good solution for keeping account information for server work. I'm in an MSP so we'll have things for multiple clients and will have multiple people on this so I'm OK with some backend security if I can push it as necessary and better than keeping a hidden page somewhere on the MSP network. I looked at Keepass but not sure if we can do much without buying a Yubikey or something of that fashion. I just wanted to see what others are using to do this.

I use Pass for this, which is open-source, based on git and GPG. Works like a charm for people that are technically inclined.

bull3964
Nov 18, 2000

DO YOU HEAR THAT? THAT'S THE SOUND OF ME PATTING MYSELF ON THE BACK.


Internet Explorer posted:

I have to ask, why do you want to do this over a lovely WAN link? Is there an fat application on both sides that needs access to the data? You are almost certainly better served by just using RDS / XenApp.

One reason I could see is a transactionally consistent off-site backup of the database. I know I'm planning on adding availability groups to my current SQL cluster for that reason. Local SQL cluster for redundancy, with a standalone remote database as part of the group. We take transaction log backups every 10 minutes, but even a loss of 10 minutes worth of transactions would be a major shitstorm with our clients.

Internet Explorer
Jun 1, 2005





bull3964 posted:

One reason I could see is a transactionally consistent off-site backup of the database. I know I'm planning on adding availability groups to my current SQL cluster for that reason. Local SQL cluster for redundancy, with a standalone remote database as part of the group. We take transaction log backups every 10 minutes, but even a loss of 10 minutes worth of transactions would be a major shitstorm with our clients.

But in that case, wouldn't you choose a target site with a decent WAN connection? Unless your secondary site need to be in Afghanistan or something?

jaegerx
Sep 10, 2012

Maybe this post will get me on your ignore list!


Internet Explorer posted:

But in that case, wouldn't you choose a target site with a decent WAN connection? Unless your secondary site need to be in Afghanistan or something?

Clam down works in security stuff. It's probably a condition of that.

E: gently caress oracle rac btw

jaegerx fucked around with this message at 05:10 on Apr 2, 2015

in a well actually
Jan 26, 2011

dude, you gotta end it on the rhyme

Hungry Computer posted:

I found a feather in the box for a new Dell monitor, no idea what kind but it looks like a large down feather. I wonder what happened to the rest of the bird :ohdear:

Probably living/nested in the factory/warehouse's rafters.

I still tell the story about finding a dead giant cockroach in a JBOD's packaging drop-shipped from the manufacturer. It gets interesting reactions.

Vulture Culture
Jul 14, 2003

I was never enjoying it. I only eat it for the nutrients.
Red Barn Computers ships t-shirts in their larger server orders. This would be neat if, when you call their support number, they didn't make you press 1 for computers or 2 for custom t-shirts.

I think there was a bunch of candy in the bottom of the box once.

3 Action Economist
May 22, 2002

Educate. Agitate. Liberate.

Sickening posted:

Why the need for the app and the database to live apart? Why not have access the app remotely and not chop it up?

In my case, the remote connectivity is crap. This is at a mountain resort, so Internet is choppy at best. The remote sites sometimes have issues connecting, and that causes problems. I'd rather have a synced copy of the database somewhere closer, but I'm not sure it's possible.

Gyshall
Feb 24, 2009

Had a couple of drinks.
Saw a couple of things.
Weak WAN Connection, lmao

CLAM DOWN
Feb 13, 2007




Internet Explorer posted:

Is there an fat application on both sides that needs access to the data?

There is, I don't want to detail exactly what I'm doing in this thread but I don't have many options. I wanted to make the best of what I have available to me, and see what kind of issues I'd run into because I know I will probably want to off myself by the end of this.

orange sky
May 7, 2007

Working in IT 3.0: Usually 300-400ms ping with occasionally noticeable packet loss.

Yes, you probably will want to off yourself. SQL is extremely, extremely picky.

CLAM DOWN
Feb 13, 2007




I realize that, that's why I specifically asked about the kind of problems I will encounter when using Availability Groups over that kind of lovely connection.

Nebulis01
Dec 30, 2003
Technical Support Ninny

CLAM DOWN posted:

I realize that, that's why I specifically asked about the kind of problems I will encounter when using Availability Groups over that kind of lovely connection.

As long as the AG is in 'Asynchronous-commit' mode you'll be fine, as you probably know you still need to get to the master to write to the DB but able to read from your 400ms/crap WAN copy.

note that will asynch-commit you never have automatic fail over it's a forced manual process and you may incur some small data loss depending on how out of sync the copy is.

Bhodi
Dec 9, 2007

Oh, it's just a cat.
Pillbug
Well, good luck. Try not to stress about your impossible position during non-work hours and :yotj: if it gets too bad.

In other news: Working in IT 3.0 going from F-1 -> H-1B is beyond hosed for these people. I knew it was bad, but not this bad. And one scumbag makes it all possible.

quote:

According to several former ConceptsIT candidates who spoke to Vocativ, the company was using a common scheme to recruit recent graduates on F-1 student visas, whose bachelor’s degrees make them eligible for H-1Bs. On the first day of training, a ConceptsIT staffer told Kanoria that the job was his and that they would sponsor his visa, but there would be a catch: Kanoria would have to use a new résumé, furnished by ConceptsIT, that would claim he had years of work experience he did not. It meant, he says, that ConceptsIT could market Kanoria to its clients as an expert and charge them more for his services. He learned that he would also be locked into a contract with ConceptsIT that would allow them to take a cut of his wages (Kanoria claims, for example, that they would charge a client $61 per hour and pay him only $27) and levy a heavy financial penalty if he left before his full year was up. As Kanoria puts it, “We would receive our H-1B visas by the following year if we did whatever they asked us to.”

...

Kanoria’s roommates, who also worked for ConceptsIT, informed him that the company would soon ask him to delete all of his social networking profiles, including his LinkedIn and Facebook accounts, so that there was no chance of them being discovered later by the company’s clients or U.S. immigration.

quote:

Each year, the U.S. caps the number of H-1B visas available to 65,000, with various exemptions. Manish Sangal’s companies eat up a disproportionately large number of those spots.

quote:

ConceptsIT employees, Kanoria says, “We’re all the same person with different names. All the prior internships and work experience I had gained during my life would be useless. I would not be allowed to talk about any of it.” Although their actual degrees would remain the same, he says, the graduation dates would be omitted so that clients wouldn’t become suspicious about a 22-year-old a few weeks out of college with six years of work experience.

...

According to Mary, ConceptsIT trainers told candidates that they would make up for the fabricated résumé experience with real training, which also turned out to be untrue. “What they called ‘training to become a good business analyst’ was actually a crash course in pretending to be a good business analyst with years of experience,” Mary says.

...

he was told a contract would be provided on the fifth day of training. “We would not even have a chance to glance through it before that,” he says, adding that he was expected to sign on the spot without any outside vetting.

Mary, who actually signed her contract, says it contained a clause stipulating a fine of $7,500 for leaving before her full year was up.

Bhodi fucked around with this message at 18:04 on Apr 2, 2015

Gyshall
Feb 24, 2009

Had a couple of drinks.
Saw a couple of things.
Those kind of articles make me really depressed.

orange sky
May 7, 2007

CLAM DOWN posted:

I realize that, that's why I specifically asked about the kind of problems I will encounter when using Availability Groups over that kind of lovely connection.

I wasn't making fun of you or anything, I'm pretty sure you know your stuff, much more than me even. I'm just laughing at your situation :). (which is still lovely of me anyway)

orange sky fucked around with this message at 18:13 on Apr 2, 2015

CLAM DOWN
Feb 13, 2007




Nebulis01 posted:

As long as the AG is in 'Asynchronous-commit' mode you'll be fine, as you probably know you still need to get to the master to write to the DB but able to read from your 400ms/crap WAN copy.

note that will asynch-commit you never have automatic fail over it's a forced manual process and you may incur some small data loss depending on how out of sync the copy is.

Awesome, thanks, yeah I was assuming there was no realistic way I could run it in synchronous mode, I do want plan to make the remote secondary readable though, so I'll see what kind of delay there will be with the commits.

orange sky posted:

I wasn't making fun of you or anything, I'm pretty sure you know your stuff, much more than me even. I'm just laughing at your situation :). (which is still lovely of me anyway)

Yeah it's cool, no problem, I fully realize what I'm trying to do is asking for trouble, just don't have many options so trying to do the best I can with what I have.

Nebulis01
Dec 30, 2003
Technical Support Ninny

CLAM DOWN posted:

Awesome, thanks, yeah I was assuming there was no realistic way I could run it in synchronous mode, I do want plan to make the remote secondary readable though, so I'll see what kind of delay there will be with the commits.


Yeah it's cool, no problem, I fully realize what I'm trying to do is asking for trouble, just don't have many options so trying to do the best I can with what I have.

Would depend on how large your update/insert statements are. Also a reminder that as soon as you read from that secondary copy it needs to be fully licensed, many people forget that portion of the program.

MC Fruit Stripe
Nov 26, 2002

around and around we go
Made the mistake of asking what a coworker (but not an IT person) makes, and then made the further mistake of not realizing what he meant when they said "$70"

I thought he meant $70 per hour to do what he does - my mood has never changed so quickly in my life.

Only to then realize he meant $70k per year, oh okay yeah you have my permission to make that given what you do.

Never ask. Never ask.

TeMpLaR
Jan 13, 2001

"Not A Crook"
But it's so interesting to know! I always wonder what people make. I'm now at my first company that isn't gov't, so before you could pretty easily just lookup anyones salaries since it was published.

ElGroucho
Nov 1, 2005

We already - What about sticking our middle fingers up... That was insane
Fun Shoe

TeMpLaR posted:

But it's so interesting to know! I always wonder what people make. I'm now at my first company that isn't gov't, so before you could pretty easily just lookup anyones salaries since it was published.

Don't do it. It's going to depress you knowing that worthless idiot in Marcom makes 50 K more than the IT stud in your department the company would fall apart without

TeMpLaR
Jan 13, 2001

"Not A Crook"

ElGroucho posted:

Don't do it. It's going to depress you knowing that worthless idiot in Marcom makes 50 K more than the IT stud in your department the company would fall apart without

I have to bet they think the same about us.

Proud Christian Mom
Dec 20, 2006
READING COMPREHENSION IS HARD
its a good way to get yourself terminated for 'performance issues'

lampey
Mar 27, 2012

go3 posted:

its a good way to get yourself terminated for 'performance issues'

http://www.nlrb.gov/rights-we-protect/whats-law/employers/interfering-employee-rights-section-7-8a1
It is a legally protected right to discuss your salary with coworkers. By not discussing salary you are shortchanging yourself and your coworkers.

GreenNight
Feb 19, 2006
Turning the light on the darkest places, you and I know we got to face this now. We got to face this now.

lampey posted:

http://www.nlrb.gov/rights-we-protect/whats-law/employers/interfering-employee-rights-section-7-8a1
It is a legally protected right to discuss your salary with coworkers. By not discussing salary you are shortchanging yourself and your coworkers.

You don't understand. Just because it's protected doesn't mean they won't find another reason to fire you.

TWBalls
Apr 16, 2003
My medication never lies

MC Fruit Stripe posted:

I thought he meant $70 per hour to do what he does - my mood has never changed so quickly in my life.

Thanks to HR leaving paperwork right out in the open, I know of at least one nurse that makes a bit more than this. Makes me want to start taking nursing classes.

YOLOsubmarine
Oct 19, 2004

When asked which Pokemon he evolved into, Kamara pauses.

"Motherfucking, what's that big dragon shit? That orange motherfucker. Charizard."

TWBalls posted:

Thanks to HR leaving paperwork right out in the open, I know of at least one nurse that makes a bit more than this. Makes me want to start taking nursing classes.

$70 an hour is very doable in IT and doesn't require cleaning up poo poo (actual, non-metaphorical poo poo) or decades or seniority.

Adbot
ADBOT LOVES YOU

Gucci Loafers
May 20, 2006

Ask yourself, do you really want to talk to pair of really nice gaudy shoes?


NippleFloss posted:

$70 an hour is very doable in IT and doesn't require cleaning up poo poo (actual, non-metaphorical poo poo) or decades or seniority.

Doing what exactly?

I'm assuming this is what the CCIEs/MCSEs/RHCA get....

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply