As was foretold, we've added advertisements to the forums! If you have questions, or if you encounter any bugs, please visit this thread: https://forums.penny-arcade.com/discussion/240191/forum-advertisement-faq-and-reports-thread/
We're funding a new Acquisitions Incorporated series on Kickstarter right now! Check it out at https://www.kickstarter.com/projects/pennyarcade/acquisitions-incorporated-the-series-2

[sysadmins] - International Brotherhood of Neckbeards and Mouthbreathers Local 258

17677798182100

Posts

  • Le_GoatLe_Goat Frechified Goat Person BostonRegistered User regular
    Draygo wrote: »
    bowen wrote: »
    Draygo wrote: »
    bowen wrote: »
    One could just wait for Windows 9 10/2016 Server too!

    Silly bowen. Windows 95 and 98 were released years ago.

    Thought they were going with 9 for the new release?

    They are skipping 9, next version is 10. There is a math joke in here somewhere.

    http://blogs.windows.com/bloggingwindows/2014/09/30/announcing-windows-10/
    That reminds me of Winamp, going from 3 to 5 and skipping 4. They said something about combining the best features of 2 and 3, which when put together is 5.

    And then there was the Unreal III naming which was odd where there were really 4 Unreals, but they totally admitted to how bad Unreal 2003 was, so they just pretended it didn't exist and called the fourth installation of the franchise Unreal III.

    While I agree that being insensitive is an issue, so is being oversensitive.
  • Le_GoatLe_Goat Frechified Goat Person BostonRegistered User regular
    lwt1973 wrote: »
    About to force people to restart their computers every day at night. Because they need to login to the time and attendance program in the morning they never want to restart/login to their computers at all. They just lock them all the time. Which can cause all sorts of strange server connection issues when you never restart Windows.
    I have been asking for this to be policy for years (well, not reboot, but at least fully logging out; reboot would be better). For years, I have been told no, yet I still request it several times a year, each time with even more validation for the request. The reason for denial: it's inconvenient.

    While I agree that being insensitive is an issue, so is being oversensitive.
  • RandomHajileRandomHajile Not actually a Snatcher The New KremlinRegistered User regular
    Le_Goat wrote: »
    Draygo wrote: »
    bowen wrote: »
    Draygo wrote: »
    bowen wrote: »
    One could just wait for Windows 9 10/2016 Server too!

    Silly bowen. Windows 95 and 98 were released years ago.

    Thought they were going with 9 for the new release?

    They are skipping 9, next version is 10. There is a math joke in here somewhere.

    http://blogs.windows.com/bloggingwindows/2014/09/30/announcing-windows-10/
    And then there was the Unreal III naming which was odd where there were really 4 Unreals, but they totally admitted to how bad Unreal 2003 was, so they just pretended it didn't exist and called the fourth installation of the franchise Unreal III.
    There's no Unreal III. You're thinking of Unreal Tournament, which went UT(1), UT2k3, UT2k4, UTIII. The idea between 2k3 and 2k4 was that the series might become an annualized game like sports games do, with minor increments to keep players interested year over year. So really 2k3 and 2k4 were sort of II when taken together.

  • Le_GoatLe_Goat Frechified Goat Person BostonRegistered User regular
    But 2003 was horrid, which made me not want to try 2004 (though I heard 2004 was much better).

    Guess I was wrong about the naming convention then; my bad

    While I agree that being insensitive is an issue, so is being oversensitive.
  • RandomHajileRandomHajile Not actually a Snatcher The New KremlinRegistered User regular
    Yeah, I'm not saying anything about the quality of them, as my college experience was all UT1, Quake 3, and Return to Castle Wolfenstein. 2k3 came out right as we were about to graduate, so we didn't get into it too deep.

  • DehumanizedDehumanized Registered User regular
    UT2k4 was indeed the bee's knees. Still would rather play it than UT3.

  • DraygoDraygo Registered User regular
    Delmain wrote: »
    On my god, I read that when you posted it, and again just now when Cog posted, and only after reading it a third time did I realize how great that was.

    I'm glad madpoet is on the same wavelength as I. Or is this a bad thing?

  • MadpoetMadpoet Registered User regular
    I'm an ex-sysadmin turned developer. If you start feeling the urge to create problems instead of fix them, start worrying.

  • LD50LD50 Registered User regular
    Or you can go work for Microsoft. I hear the old Windows 8 team needs new members.

  • CogCog What'd you expect? Registered User regular
    Madpoet wrote: »
    I'm an ex-sysadmin turned developer.

    Burn the apostate!

  • bowenbowen How you doin'? Registered User regular
    Dev work is way less ulcer inducing, though, admit it.

    not a doctor, not a lawyer, examples I use may not be fully researched so don't take out of context plz, don't @ me
  • DixonDixon Screwed...possibly doomed CanadaRegistered User regular
    UT99 and UT2k4 were both great, UT2k3 was good as well but I loved those crazy vehicles in 2k4.

    Also the U4E mod for both of them was the bestest...quantum singularity generator is my all time favorite weapon.

    In terms of being a sysadmin...well lets just not go there.

    There is a position opening up in Security and apparently the manager said somethings about me applying for it. Just feel bad as my current boss has done a fair bit for me.

  • hsuhsu Registered User regular
    edited January 2015
    Dixon wrote: »
    There is a position opening up in Security and apparently the manager said somethings about me applying for it. Just feel bad as my current boss has done a fair bit for me.
    You are being given a golden opportunity. You have to go for it, no matter what your current boss thinks. Hopefully he'll understand (as should any reasonable person). Although I'm assuming the new position is a noticeable step upwards.

    hsu on
    iTNdmYl.png
  • CogCog What'd you expect? Registered User regular
    The 25 most popular passwords last year via SplashData
    1. 123456 (Unchanged)

    2. password (Unchanged)

    3. 12345 (Up 17)

    4. 12345678 (Down 1)

    5. qwerty (Down 1)

    6. 123456789 (Unchanged)

    7. 1234 (Up 9)

    8. baseball (New)

    9. dragon (New)

    10. football (New)

    11. 1234567 (Down 4)

    12. monkey (Up 5)

    13. letmein (Up 1)

    14. abc123 (Down 9)

    15. 111111 (Down 8)

    16.mustang (New)

    17. access (New)

    18. shadow (Unchanged)

    19. master (New)

    20. michael (New)

    21. superman (New)

    22. 696969 (New)

    23. 123123 (Down 12)

    24. batman (New)

    25. trustno1 (Down 1)

    /sigh

    Donovan PuppyfuckerLe_Goat
  • bowenbowen How you doin'? Registered User regular
    696969

    not a doctor, not a lawyer, examples I use may not be fully researched so don't take out of context plz, don't @ me
    RandomHajileDonovan PuppyfuckerVegemyte
  • CogCog What'd you expect? Registered User regular
    :winky:

    Bigity
  • DixonDixon Screwed...possibly doomed CanadaRegistered User regular
    hsu wrote: »
    Dixon wrote: »
    There is a position opening up in Security and apparently the manager said somethings about me applying for it. Just feel bad as my current boss has done a fair bit for me.
    You are being given a golden opportunity. You have to go for it, no matter what your current boss thinks. Hopefully he'll understand (as should any reasonable person). Although I'm assuming the new position is a noticeable step upwards.

    I know I just gotta figure out a way to approach it, we've become pretty good buddies so I think he'll understand but I haven't been at this location to long. It would be nice to not have to do stupid lan tickets, like the coffee machine is broken or my table is wobbly

  • MadpoetMadpoet Registered User regular
    Cog wrote: »
    Madpoet wrote: »
    I'm an ex-sysadmin turned developer.

    Burn the apostate!
    I wound up as a web dev, and they expect me to manage all the servers in our AWS setup since "it's web stuff", so I still belong!
    bowen wrote: »
    Dev work is way less ulcer inducing, though, admit it.
    I'm a solo dev, so I only touch my own code. Much less stressful than when the AWS server decides it's not going to talk to 1/20th of our dealers, or dealing with IIS permissions.

  • Mr_RoseMr_Rose 83 Blue Ridge Protects the Holy Registered User regular
    edited January 2015
    Does anyone know a way to get windows to definitively identify a removable drive by type? Like, "drive letter E: is a USB thumbdrive" or similar?
    It seems fsutil only knows if a drive is removable or not and I need a way to ignore the built-in card readers that are spec'd on some clients but not others…

    Mr_Rose on
    ...because dragons are AWESOME! That's why.
    Nintendo Network ID: AzraelRose
    DropBox invite link - get 500MB extra free.
  • CogCog What'd you expect? Registered User regular
    edited January 2015
    Madpoet wrote: »
    Cog wrote: »
    Madpoet wrote: »
    I'm an ex-sysadmin turned developer.

    Burn the apostate!
    I wound up as a web dev, and they expect me to manage all the servers in our AWS setup since "it's web stuff", so I still belong!

    ...... I'm going to allow this.

    Cog on
  • bowenbowen How you doin'? Registered User regular
    I'm so sorry too.

    not a doctor, not a lawyer, examples I use may not be fully researched so don't take out of context plz, don't @ me
  • CogCog What'd you expect? Registered User regular
    Mr_Rose wrote: »
    Does anyone know a way to get windows to definitively identify a removable drive by type? Like, "drive letter E: is a USB thumbdrive" or similar?
    It seems fsutil only knows if a drive is removable or not and I need a way to ignore the built-in card readers that are spec'd on some clients but not others…

    Something like Belarc Advisor or SiSoft Sandra? I don't know how you'd do it fast and easy though.

  • Le_GoatLe_Goat Frechified Goat Person BostonRegistered User regular
    Mr_Rose wrote: »
    Does anyone know a way to get windows to definitively identify a removable drive by type? Like, "drive letter E: is a USB thumbdrive" or similar?
    It seems fsutil only knows if a drive is removable or not and I need a way to ignore the built-in card readers that are spec'd on some clients but not others…
    I don't know how to do it, but is there a way to reverse the order that the OS assigns drive letters? Since everything else should already be installed (optical drives, built-in card readers), if you could get the assignments reversed, it would start at Z, thus eliminating the issue at hand.

    The only other thing I could think of would be to manually change the drive letters of the built-in card readers. I'm assuming that not everyone has that installed.
    Cog wrote: »
    3. 12345 (Up 17)
    Ah, yes. The combination an idiot would have on his luggage.

    While I agree that being insensitive is an issue, so is being oversensitive.
    Vegemyte
  • Mr_RoseMr_Rose 83 Blue Ridge Protects the Holy Registered User regular
    The trouble is this needs to go into a login script, preferably a quick one, so firing up Belarc in the middle of it is less than optimal, unfortunately. Locking the card readers to specific letters might work except they're internally USB as well so windows gets to play silly buggers with the name ordering on a whim.

    What about specifically identifying a particular USB device? Is there something like a MAC address I can look for? I understand that you can lock out all but a specific list of connectable devices by group policy but how windows goes about doing that internally is a mystery.

    ...because dragons are AWESOME! That's why.
    Nintendo Network ID: AzraelRose
    DropBox invite link - get 500MB extra free.
  • CogCog What'd you expect? Registered User regular
    Ugh.. Some sort of script with a WMI call maybe.

  • Mr_RoseMr_Rose 83 Blue Ridge Protects the Holy Registered User regular
    Ugh. I suppose I could go back to my original idea of putting a tiny file on there and checking each removable drive for that file but that's even less secure.
    What's really annoying is that this whole thing is about bit locker keys and the bean counters won't spring for server 2012 which has full BL AD integration so it will always unlock as long as it can talk to the server.

    ...because dragons are AWESOME! That's why.
    Nintendo Network ID: AzraelRose
    DropBox invite link - get 500MB extra free.
  • SiliconStewSiliconStew Registered User regular
    edited January 2015
    Anyone know Cisco? Looking at a new L2L VPN on a 5515 someone setup that's essentially a duplicate of an existing one. The VPN settings, ACLs look "right" to me, the VPN monitor says it's connected with the expected IPSEC tunnel shown. However looking at the routing table, there is no entry for that IPSEC route like there is for all the other VPN's. What would be wrong for it to build the IPSEC tunnel but then not create the route?

    The other thing is this Cisco is sending RIP routes as a couple smaller summarized entries (the RIP auto-summarization is OFF), even though the Route Map is a larger subnet. The Route Map is /8 but the RIP routes are a /16, /14, /13, /12, /11, /11 that are a subset of the /8 network. That just seems odd to me.

    SiliconStew on
    Just remember that half the people you meet are below average intelligence.
  • twmjrtwmjr Registered User regular
    edited January 2015
    Anyone know Cisco? Looking at a new L2L VPN on a 5515 someone setup that's essentially a duplicate of an existing one. The VPN settings, ACLs look "right" to me, the VPN monitor says it's connected with the expected IPSEC tunnel shown. However looking at the routing table, there is no entry for that IPSEC route like there is for all the other VPN's. What would be wrong for it to build the IPSEC tunnel but then not create the route?

    The other thing is this Cisco is sending RIP routes as a couple smaller summarized entries (the RIP auto-summarization is OFF), even though the Route Map is a larger subnet. The Route Map is /8 but the RIP routes are a /16, /14, /13, /12, /11, /11 that are a subset of the /8 network. That just seems odd to me.

    What do the other VPN routes look like? It's possible they were created statically (i.e. route outside x.x.x.x x.x.x.x next-hop) and you will need another statement for the new subnet.

    Just a guess on the routing (if you want to pastebin the config I can try to confirm) but a route-map does not summarize/unsummarize routes -- it only permits or denies them. When you see the /8 (likely in a prefix list?) what it's saying is that any routes matching the first 8 bits of the network in question are permitted (or denied) to be advertised. So as long as the various mask lengths you're seeing all have the same first 8 bits, they're sent out. (edit: just re-read this -- to clarify there is a way (at least on IOS, have not used prefix lists on ASAs personally) to use a prefix list to *only* permit a /8 route -- but you can also use it in the way I've described above -- either way the route-map/prefix list doesn't summarize the route - it only permits it if it already exists)

    twmjr on
  • CogCog What'd you expect? Registered User regular
    Fuck, you guys, the coffee here is so bad

  • bowenbowen How you doin'? Registered User regular
    This thread title is funny because I seriously considered hanging out in the server room for a half hour just to warm up.

    not a doctor, not a lawyer, examples I use may not be fully researched so don't take out of context plz, don't @ me
  • CogCog What'd you expect? Registered User regular
    The hot row makes me sleepy.

    bowenBigity
  • Le_GoatLe_Goat Frechified Goat Person BostonRegistered User regular
    edited January 2015
    Cog wrote: »
    Fuck, you guys, the coffee here is so bad
    Switch to tea! Seriously, switch. This is what I've been drinking like an addict.

    Le_Goat on
    While I agree that being insensitive is an issue, so is being oversensitive.
  • CogCog What'd you expect? Registered User regular
    edited January 2015
    Le_Goat wrote: »
    Cog wrote: »
    Fuck, you guys, the coffee here is so bad
    Switch to tea! Seriously, switch. This is what I've been drinking like an addict.
    Cog wrote: »
    Fuck, you guys, the coffee here is so bad free

    ¯\_(ツ)_/¯

    Cog on
  • NijaNija Registered User regular
    What about making the built-in card readers unavailable? Rubber cement a piece of plastic over the built-in? Disconnecting the reader from the motherboard?

    Priest lvl 110 Warlock lvl 9x DK lvl 110 Paladin lvl 9x Rogue lvl 8x

    Steam Me
  • bowenbowen How you doin'? Registered User regular
    Disconnecting the reader and cutting the cable is the appropriate answer there.

    Anything else can be circumvented with some patience and some acetone.

    not a doctor, not a lawyer, examples I use may not be fully researched so don't take out of context plz, don't @ me
    Delmain
  • bowenbowen How you doin'? Registered User regular
    Speaking of trying to make a peripheral socket unusable, I had a past shitty boss hot glued the USB sockets so no one could stick thumb drives in.

    My coworker got pissed because he wanted to charge his iphone and get pictures of stuff he was working on and download client photos and stuff, so he took a can of compressed air, turned it upside down, and sprayed the shit on the glue.

    Apparently hot glue becomes super brittle when you do that (I guess the coolant freezes it kind of like wart removal stuff). At that point he just smashed it and it fell to pieces.

    I was in awe.

    not a doctor, not a lawyer, examples I use may not be fully researched so don't take out of context plz, don't @ me
    Le_GoatCarpyTL DRNijaRBach
  • RandomHajileRandomHajile Not actually a Snatcher The New KremlinRegistered User regular
    bowen wrote: »
    Speaking of trying to make a peripheral socket unusable, I had a past shitty boss hot glued the USB sockets so no one could stick thumb drives in.

    My coworker got pissed because he wanted to charge his iphone and get pictures of stuff he was working on and download client photos and stuff, so he took a can of compressed air, turned it upside down, and sprayed the shit on the glue.

    Apparently hot glue becomes super brittle when you do that (I guess the coolant freezes it kind of like wart removal stuff). At that point he just smashed it and it fell to pieces.

    I was in awe.
    I have a similar story about freezing things with an upside-down aerosol can in order to get them out of other things. I worked at KMart as an entry-level worker, so I'll let you figure out the thing we were trying to get out of another thing...

  • bowenbowen How you doin'? Registered User regular
    I can't for the life of me figure it out unless it was to steal something.

    not a doctor, not a lawyer, examples I use may not be fully researched so don't take out of context plz, don't @ me
  • RandomHajileRandomHajile Not actually a Snatcher The New KremlinRegistered User regular
    bowen wrote: »
    I can't for the life of me figure it out unless it was to steal something.
    Hint: it involved the men's bathroom. Looking back on it, it wasn't totally necessary, but yeah.

  • SiliconStewSiliconStew Registered User regular
    twmjr wrote: »
    Anyone know Cisco? Looking at a new L2L VPN on a 5515 someone setup that's essentially a duplicate of an existing one. The VPN settings, ACLs look "right" to me, the VPN monitor says it's connected with the expected IPSEC tunnel shown. However looking at the routing table, there is no entry for that IPSEC route like there is for all the other VPN's. What would be wrong for it to build the IPSEC tunnel but then not create the route?

    The other thing is this Cisco is sending RIP routes as a couple smaller summarized entries (the RIP auto-summarization is OFF), even though the Route Map is a larger subnet. The Route Map is /8 but the RIP routes are a /16, /14, /13, /12, /11, /11 that are a subset of the /8 network. That just seems odd to me.

    What do the other VPN routes look like? It's possible they were created statically (i.e. route outside x.x.x.x x.x.x.x next-hop) and you will need another statement for the new subnet.

    Just a guess on the routing (if you want to pastebin the config I can try to confirm) but a route-map does not summarize/unsummarize routes -- it only permits or denies them. When you see the /8 (likely in a prefix list?) what it's saying is that any routes matching the first 8 bits of the network in question are permitted (or denied) to be advertised. So as long as the various mask lengths you're seeing all have the same first 8 bits, they're sent out. (edit: just re-read this -- to clarify there is a way (at least on IOS, have not used prefix lists on ASAs personally) to use a prefix list to *only* permit a /8 route -- but you can also use it in the way I've described above -- either way the route-map/prefix list doesn't summarize the route - it only permits it if it already exists)

    Fuck I hate Cisco's bullshit. After banging my head against this for hours, verifying every single setting was correct while putting up with their comically slow ASDM, I decided to delete the VPN and start over. Used all the exact same settings as before. Now it works, the VPN route is in the routing table and it's distributing properly via RIP. If the definition of insanity is trying the same thing twice and expecting a different result, Cisco is batshit crazy.

    Just remember that half the people you meet are below average intelligence.
    Apothe0sis
Sign In or Register to comment.