Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
theperminator
Sep 16, 2009

by Smythe
Fun Shoe

NZAmoeba posted:

How did you get Nagios acks to forward into pager duty? I thought that wasn't possible? Or am I thinking about pager duty not forwarding acks to Nagios?

I think when you Ack the alert you have to hit the "send notification" checkbox. I don't think it works the other way, the pagerduty plugin works as a notification script in nagios.

When we moved away from a pager to pagerduty last year I was pleasantly surprised to see that nagios will resolve the alerts in pagerduty too (as long as you set it to send notifications to the pagerduty contact for OK status)

Adbot
ADBOT LOVES YOU

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Some moron decided SQL Server 2005 Express was good enough for our VCenter DB

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

incoherent posted:

You should upgrade it to 2008, but yeah you really need to put that sucker on a real SQL instance.

Yeah it was the middle of the night so I went to 2008 R2 and will upgrade that to a 2012 R2 edition.

I still don't know why it was installed with SQL 2005 when the loving server was installed in like, 2010? maybe that's what vmware bundled with the installer at the time.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Tab8715 posted:

Nothing else needs to be quoted here because well, those are obviously important but do I really need to understand mail to call myself a good linux guy?

Don't get me wrong the world needs mail but holy gently caress it's complicated. On the Windows side of things it's so complicated that there people who breathe, eat sleep email Exchange and pull in six-figures.

Mail isn't complicated though, the error messages mail servers give pretty much always tell you what's wrong and the protocols are all human readable.
Exchange Administration complexities are all to do with the groupware/AD features rather than the nuts and bolts of SMTP etc.

I should get a new job doing windows crap, I'll make more money out of my MCSA than my linux skills with less effort it seems.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Tab8715 posted:

Is anyone opposed to open interviews? The candidate gets a laptop with the internet, command-line, vms and you ask away. If they need to google, read help, etc they can.

I've been really impressed by a lot google-fo and various online sub-communities and I don't really expect you to remember everything but if you can google it in 30 seconds, remember and explain it that's fine by me.

I've actually had one interview like this and it was awesome, made the whole thing less stressful. I wish I'd taken that job

MagnumOpus posted:

A core part of my teambuilding strategy is take-home tests. I don't care how good your memorization is, what I want to know is how quickly and confidently can you execute a multi-part task that requires you to do some research. Here's a login to a test cluster, diagnose and fix the problem with this stack.

This is good too, without tests like these you end up with people like a couple of my colleagues who have literally no troubleshooting skills and will constantly need their hands held.

theperminator fucked around with this message at 00:59 on Dec 13, 2014

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Being a sysadmin is going to kill me I think, a bunch of people left above and below me and my teammate and now we're left doing the work of at least 6 people.

What options are there to move on from generalist sysadmin stuff that gives you that sinking feeling and feel of dread constantly? I don't think I can do management because I'm too much of a shithead.
I'm thinking maybe I should specialise in something so all the on call, sinking feeling poo poo is at least greatly reduced from how I have it now, but no clue what I should do as a specialization.

I'm a general vmware/linux/infrastructure kinda admin at the moment and it loving sucks balls.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Roargasm posted:

I'm green and probably have a lighter workload than you, but I started going gray for a couple of months and was loving losing it and I read Limoncelli's Time Management for System Administrators (there's a Kindle edition). He dives right into the core concept that having to remember 500 things at once (my job, and I assume yours) ruins your alacrity on the job, even if you don't consciously realize it. I started writing down absolutely everything and only focusing on what was right in front of me. My stress level went way down, I stopped worrying about fires and focused on the work I was doing, which hopefully leads to fewer fires anyway.

My time management is a big problem, thanks for the book recommendation it should help a great deal!
The main issue I have is that it's myself and one other guy who can handle the infrastructure/linux and we have about 30 sans, 5 full blade chassis and a shitload of ageing hardware still in production and after a year of terrible firmware issues on my sans, potential disasters are always on my mind.
I've also gone from an 8 week pager rotation to a 2 week because people have left and we haven't hired for some reason.
Really the solution involves getting another job I think, away from hosting.

Japanese Dating Sim posted:

I have what I'm pretty sure is a really dumb question and I'll just throw it out there - there's no way to get around needing a pair of human eyes to look at MAC addresses on new machines for whitelisting purposes, right? I can't think of how you'd get around that but I'm still newish to IT so :shrug:.

I know some vendors ship their computers with a MAC address barcode on the box. barcode scanners are cheap.
Dealing with stupid mac address whitelists is a pain in the rear end, so happy I don't have that here any more.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Yeah, it's a pretty large virtual environment.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

CloFan posted:

Our printer guy quit a couple weeks ago and the ticket queue is full of "printer doesn't work" BS now. We need to get a new guy in soon because seriously, gently caress printers

How many printers do you have that it's someones fulltime job?

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

CloFan posted:

Hundreds? College campus.

E: Okay that guess is a little high, but there are a fuckton of printers and they always break

E2: And that's not really his job, per se... he just took care of those tickets usually

Hah, well then gently caress that poo poo.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Yeah, having used other central logging solutions that store everything in DBs and take forever to return results, ElasticSearch+Logstash+Kibana is amazing! loving it.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Irritated Goat posted:

Just to poke in,

I'm looking around to find a good solution for keeping account information for server work. I'm in an MSP so we'll have things for multiple clients and will have multiple people on this so I'm OK with some backend security if I can push it as necessary and better than keeping a hidden page somewhere on the MSP network. I looked at Keepass but not sure if we can do much without buying a Yubikey or something of that fashion. I just wanted to see what others are using to do this.

Where I am, we use Teampass
It's encrypted, lets you import your keepass db and supports two-factor auth if needed by using google-authenticator.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Toshimo posted:

Welcome to life at pretty much any hosting provider ever.

Especially funny when the CEO comes over and has a laugh at that poo poo. There are a few good things about working in Hosting.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Tab8715 posted:

What are the odds I'd be able to purchase an owned but unused domain? There isn't a whole lot of information on WHOIS and I emailed the guy but he hasn't responded.

GoDaddy offered me some $60 professional acquisition service but I think I'd check here first...

AFAIK, unless the owner wants to sell, or lets it expire there's not much that can be done.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Yeah, I think that's just because it changed from 2008 R2 > 2012.
In 2008 R2 you needed Datacenter edition for Hot-Add CPU/RAM and it allowed up to 64 Cores

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
It also depends on your licensing scheme, if you're an SPLA Licensing partner paying per socket there is no price difference between the editions from what I understand.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Because most people are incompetent and will mix and match that poo poo. doesn't surprise me.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Yeah, under our licensing we get the same pricing regardless of edition. we pay per socket so it's Datacenter everywhere.

So glad I don't have to worry about that poo poo.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Data Sovereignty, latency, ultra paranoid security, special hardware requirements are some of the concerns when it comes to the cloud.

I'd be interested in seeing why StackExchange found the cloud to be not ideal, I can't imagine why.

Most things probably are suitable for the cloud though.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Anyone know why they went with Windows/IIS for that matteR?

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Use RatticDB instead, it doesn't even encrypt and the devs recommend using LUKS to keep your data safe...

quote:

When designing RatticDB we made some very specific design decisions. We didn't include encryption in the application at all. Encryption is not easy to do right, increases complexity and the application needs to be able to decrypt the passwords somehow anyway. We do recommend that you install it in such a way that the database is on an encrypted filesystem

theperminator fucked around with this message at 02:59 on Jun 16, 2015

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

keseph posted:

Funny, I would applaud them for NOT loving around with encryption that they're not sure they can get 100% bullet-proof and keep the associated investments in years going forward, especially for a database system which makes it an inherently primary target.

The kind of person who designs a password system that stores everything in plaintext, and for security recommends disk encryption is tremendously out of their depth and has no business doing what they're doing, who knows where else they're loving up security-wise in their code.

if you think it's an acceptable password management system it's because you're incompetent.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Not sure what that error means but my first step would be trying to do a listing of that container myself using a swift client

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Is your DNS server registering IPv6 addresses for things? How'd his computer get the file servers IPv6 address?

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Vulture Culture posted:

enterprise storage is the printers of the datacenter

+1

My job would be perfect if I didn't have to deal with storage.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Worked in an MSP+Cheap Webhost for 8 years and nothing could make me go back.

I think that kind of job is good to start out with though, I wouldn't have gone from phone support monkey to sysadmin without it.

SIR FAT JONY IVES posted:

Is asterisk still garbage?

I found FreePBX to be quite good, made managing voicemail,IVR,all that garbage really easy without having to edit asterisk files myself.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Rhymenoserous posted:

I had the exact same careerpath. This webhost wasn't in NC was it :ohdear:

Haha nah, Sydney.

I think it has to do with the kind of person running the business, my CEO was brilliant technology wise but a tightarse, so he'd hire people into support that he thought he could train to be (cheap) admins.

I'm not sure if that's the standard for that industry but it seems like it, margins for companies selling $2 a month hosting are pretty slim.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

Inspector_666 posted:

OK, but that seems like a luxury rather than "the norm." I guess I just don't see robocopy as a brute force method for file migration as opposed to it being...the expected solution.

Robocopy is the way to go imho.
Copies attributes, permissions, timestamps etc and allows you to start where you left off if it stops for some reason.

It's a simple command imho, if that's "brute force" to someone it's probably because their idea of migrating is literally just "copy from old nas and paste on new"

Methanar posted:

Why are there several videos of naked women on my DC.

Come on guys.

Someone needs to be sacked & pushed off the top of the building, inappropriateness of the material isn't even my main concern, security is.
"Hey here's a critical piece of our infrastructure, that controls access to everything else we have"
*downloads malware infested porn*

I'd be resisting the urge to beat the poo poo out of someone.

theperminator fucked around with this message at 23:16 on Aug 20, 2015

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
With Scavenging disabled, AD doesn't bother syncing the timestamps
http://social.technet.microsoft.com...rated_DNS_zones

quote:

If DNS aging and scavenging is not enabled on an AD-integrated DNS zone, there is no need to replicate DNS resource records’ timestamps. This is because this information is needed only for aging and scavenging mechanism and there is no requirement for this replication if it is not enabled. That is why, when DNS aging and scavenging is disabled on an AD-integrated DNS zone, the timestamps of resource records on your DC/DNS servers are not consistent (The resource record timestamp is updated on the DNS server that refreshed the record and not replicated to other DC/DNS servers).

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

adorai posted:

I guess integrity is a foreign concept to some people.

Everybody lies, besides it's better to be the one doing the loving rather than the one being hosed.
If you're a good liar they won't even know, but on the other hand being a whiny little bitch about being asked what you're currently on is pretty obvious.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
Same, mine offered me a shitload more money than I was on, and I was already on a good salary.

There's a severe lack of talent in most of IT, most sysadmins I've met IRL outside of my current company are retarded.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

adorai posted:

Should they be firewalled off in some manner? Maybe, it depends on the network. If it were me, I would just block the scanner IP with the OS firewall and call it good. Easy fix.

You're what I like to call "dangerously incompetent"

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
What does everyone use for graphing things like switches, system statistics etc?

At my last couple of jobs we used Cacti but I keep hearing Graphite being mentioned. the only problem I see is that rather than having a poller that pulls the information in, it's a push arrangement where you have to set up a bunch of different agents for different things and it appears to mostly be text file manipulation in the configuration files to add more counters?

I want to graph all of the switch statistics, sans, esxi, cpu, memory, disk of our vms etc just about everything and it still looks like Cacti is my best bet but is that just me being an old man?

It really shits me that we hardly graph anything at my current job.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

GreenNight posted:

I'd prefer not to look like a scrub because how you look loving matters in a business.

Maybe if you're a salesman or a hooker.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

big money big clit posted:

All of the DCB stuff in the Nexus line doesn't do anything useful for NFS or iSCSI, though cut through forwarding does.

It should if your storage device and servers support it? Isn't that the whole point of DCB?

Also, any serious storage vendor will have a HCL for supported switches, which you should follow anyway if you expect them to provide you with any useful kind of support:

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

1000101 posted:

Based on his question I would disagree with your answer. While powershell will run on linux, if you're gunning for a linux sysadmin position, you're better off shoring up python and bash skills over powershell.

Agreed, you really need to know bash at the very least if you want to be a Linux sysadmin, some basic python is a requirement for most roles. Knowing powershell is going to be irrelevant to most Linux shops at least right now.

Thanks Ants posted:

Sounds like they want it to happen on a per-user basis. Is there such a thing as per-user 802.1x where you can drop people into different VLANs based on the currently logged in user?

Yep, there are radius attributes you can use to set the users vlan.
For example http://www.brocade.com/content/html/en/configuration-guide/fastiron-08030b-securityguide/GUID-A3ECA53E-7692-4088-A035-89048D0D46F5.html

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

DigitalMocking posted:

Not natively, you need some kind of management suite to do that, like CPI for Cisco or Netsight for Extreme.

You can do it with any radius server, Windows NPS or Freeradius will do

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

DigitalMocking posted:

Go on.

I've only used radius as an authentication method, its our gateway into network access control, but all of the logic is done on the back-end, how is radius going to apply security policies to end users?

There are radius attributes the sever can add to its reply to the switch, you can set these per-user, per-group etc
For NPS: https://technet.microsoft.com/en-us/library/cc772124(v=ws.10).aspx

You can do the same with any radius server using the tags listed there.

theperminator
Sep 16, 2009

by Smythe
Fun Shoe
I accepted a counter offer 2 years ago, within 6 months I walked out and went to the company that had made me an offer.
More money doesn't fix anything.

Adbot
ADBOT LOVES YOU

theperminator
Sep 16, 2009

by Smythe
Fun Shoe

jaegerx posted:

You're cute, maybe one day you'll get a job that isn't at a MSP. Probably not but you can keep trying sweety.

MSPs are where the insufferable spergs all work.
Nobody gives a gently caress if you prepared your resume with latex.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply