The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
We now return to our regularly scheduled PA Forums. Please let me (Hahnsoo1) know if something isn't working. The Holiday Forum will remain up until January 10, 2025.

[Sysadmin] Improper Wireshark use has restarted the editor wars.

1262729313299

Posts

  • CogCog What'd you expect? Registered User regular
    Side note, if your first issues are Certs and DNS, you just need to have a big printer kerfluffle and you've basically won "The Shittyist Issues" Bingo

  • FeralFeral MEMETICHARIZARD interior crocodile alligator ⇔ ǝɹʇɐǝɥʇ ǝᴉʌoɯ ʇǝloɹʌǝɥɔ ɐ ǝʌᴉɹp ᴉRegistered User regular
    Cog wrote: »
    SniperGuy wrote: »
    Cog wrote: »
    SniperGuy wrote: »
    it appears I need to manually add that security certificate to chrome or people's phones in order to let them use it to bypass the block. Is there an easy way to do that for all users on the network? Am I being too vague in this post?

    Short answer: Fuck 'em.

    Long answer: You would probably need an MDM to push out certificates to phones.

    Best answer: Fuck 'em.

    That's fair for phones, but for the laptops that are owned by our organization (and yet not managed, that's a longer term project at the moment) I'll have to go around and hand 'em out. We have jamf for managing all the ipads but haven't paid for laptop management.

    If they're domain joined you can push the cert out through AD.

    He specified unmanaged.

    Here's the problem. His company is trying to do BYOB stuff without a BYOB strategy.

    No, you cannot push SSL certs to laptops without some kind of laptop management. The management could be an MDM solution, or it could be Active Directory.

    In lieu of that, you can put the certs somewhere your users can find them and download them, and provide them instructions for how to import them in their own machines.

    every person who doesn't like an acquired taste always seems to think everyone who likes it is faking it. it should be an official fallacy.

    the "no true scotch man" fallacy.
  • FeralFeral MEMETICHARIZARD interior crocodile alligator ⇔ ǝɹʇɐǝɥʇ ǝᴉʌoɯ ʇǝloɹʌǝɥɔ ɐ ǝʌᴉɹp ᴉRegistered User regular
    Unless I'm misunderstanding what SniperGuy means by "unmanaged"

    every person who doesn't like an acquired taste always seems to think everyone who likes it is faking it. it should be an official fallacy.

    the "no true scotch man" fallacy.
  • RadiationRadiation Registered User regular
    PSA: cert tests are hard if you don't study for them.
    I had 2 tests this week because I hate my future self (and past self) and put all the things off until the last possible moment. I took Net+ Wednesday and passed that so whoo! But my effort was so focused on that and the paper that I sort of put off Linux+ prep way longer than I should have and totally bombed it. I'm not very comfortable in linux, I mean, I can do stuff but not much, and this test very much highlighted that I don't know shit about shit.

    PSN: jfrofl
  • FeralFeral MEMETICHARIZARD interior crocodile alligator ⇔ ǝɹʇɐǝɥʇ ǝᴉʌoɯ ʇǝloɹʌǝɥɔ ɐ ǝʌᴉɹp ᴉRegistered User regular
    I'm running into a similar organizational problem myself.

    My boss: can we give $user a laptop?
    Me: will it be for internal mobility within our offices, or is it intended for remote work?
    Boss: internal mobility

    Three weeks later, $user is calling the helpdesk

    "I'm at (some other company) and I can't log in to the VPN..."

    every person who doesn't like an acquired taste always seems to think everyone who likes it is faking it. it should be an official fallacy.

    the "no true scotch man" fallacy.
  • FeralFeral MEMETICHARIZARD interior crocodile alligator ⇔ ǝɹʇɐǝɥʇ ǝᴉʌoɯ ʇǝloɹʌǝɥɔ ɐ ǝʌᴉɹp ᴉRegistered User regular
    Me: we need some kind of cloud or public-access laptop management solution, like DirectAccess or InTune

    Boss: I agree, but $user needs the laptop tomorrow

    Me: then I don't want to touch it. Either let me do it right or give it to somebody else.

    every person who doesn't like an acquired taste always seems to think everyone who likes it is faking it. it should be an official fallacy.

    the "no true scotch man" fallacy.
  • FeralFeral MEMETICHARIZARD interior crocodile alligator ⇔ ǝɹʇɐǝɥʇ ǝᴉʌoɯ ʇǝloɹʌǝɥɔ ɐ ǝʌᴉɹp ᴉRegistered User regular
    Being asked to do jack shit on a device I don't formally manage is a huge pet peeve for me

    every person who doesn't like an acquired taste always seems to think everyone who likes it is faking it. it should be an official fallacy.

    the "no true scotch man" fallacy.
  • CogCog What'd you expect? Registered User regular
    I pretty much assume everyone who has a laptop is going to VPN.

  • wunderbarwunderbar What Have I Done? Registered User regular
    by the way Cog; another excellent TOTP.

    XBL: thewunderbar PSN: thewunderbar NNID: thewunderbar Steam: wunderbar87 Twitter: wunderbar
  • SniperGuySniperGuy SniperGuyGaming Registered User regular
    Feral wrote: »
    Unless I'm misunderstanding what SniperGuy means by "unmanaged"

    Nope it sounds like you got it. I need to convince someone to get us something to manage the laptops. Does active directory work for a primarily MacBook environment? Need to do some research into options I think. And also explain to my bosses why that would be a good thing to have.

  • LD50LD50 Registered User regular
    The first step for a primarily macbook environment:
    Throw all the macbooks in the garbage.

  • FeralFeral MEMETICHARIZARD interior crocodile alligator ⇔ ǝɹʇɐǝɥʇ ǝᴉʌoɯ ʇǝloɹʌǝɥɔ ɐ ǝʌᴉɹp ᴉRegistered User regular
    SniperGuy wrote: »
    Feral wrote: »
    Unless I'm misunderstanding what SniperGuy means by "unmanaged"

    Nope it sounds like you got it. I need to convince someone to get us something to manage the laptops. Does active directory work for a primarily MacBook environment? Need to do some research into options I think. And also explain to my bosses why that would be a good thing to have.

    You can connect macOS to Active Directory for the purposes of, for example, file share access. But you don't get the same management tools as you get with Windows workstations.

    You'd need a mac-compatible management solution, like JAMF, Centrify, or Apple's first-party management tools.

    every person who doesn't like an acquired taste always seems to think everyone who likes it is faking it. it should be an official fallacy.

    the "no true scotch man" fallacy.
  • CogCog What'd you expect? Registered User regular
    Yeah I keep forgetting it’s a k-12 environment. Fuggin macs.

  • FFFF Once Upon a Time In OaklandRegistered User regular
    SniperGuy wrote: »
    Feral wrote: »
    Unless I'm misunderstanding what SniperGuy means by "unmanaged"

    Nope it sounds like you got it. I need to convince someone to get us something to manage the laptops. Does active directory work for a primarily MacBook environment? Need to do some research into options I think. And also explain to my bosses why that would be a good thing to have.

    Jamf is $$$ for non-edu. If you're edu it'll be worth your while to look into it as they offer a pretty good discount. Having used Jamf for a while now, and previously used Apple's own management solutions. Use Jamf.

    Huh...
  • FeralFeral MEMETICHARIZARD interior crocodile alligator ⇔ ǝɹʇɐǝɥʇ ǝᴉʌoɯ ʇǝloɹʌǝɥɔ ɐ ǝʌᴉɹp ᴉRegistered User regular
    There's also Ivanti

    I do not recommend Ivanti

    At all

    every person who doesn't like an acquired taste always seems to think everyone who likes it is faking it. it should be an official fallacy.

    the "no true scotch man" fallacy.
  • SiliconStewSiliconStew Registered User regular
    Feral wrote: »
    Cog wrote: »
    SniperGuy wrote: »
    Cog wrote: »
    SniperGuy wrote: »
    it appears I need to manually add that security certificate to chrome or people's phones in order to let them use it to bypass the block. Is there an easy way to do that for all users on the network? Am I being too vague in this post?

    Short answer: Fuck 'em.

    Long answer: You would probably need an MDM to push out certificates to phones.

    Best answer: Fuck 'em.

    That's fair for phones, but for the laptops that are owned by our organization (and yet not managed, that's a longer term project at the moment) I'll have to go around and hand 'em out. We have jamf for managing all the ipads but haven't paid for laptop management.

    If they're domain joined you can push the cert out through AD.

    He specified unmanaged.

    Here's the problem. His company is trying to do BYOB stuff without a BYOB strategy.

    No, you cannot push SSL certs to laptops without some kind of laptop management. The management could be an MDM solution, or it could be Active Directory.

    In lieu of that, you can put the certs somewhere your users can find them and download them, and provide them instructions for how to import them in their own machines.

    Yes, a BYOB strategy is key. Mine is to grab a sixpack of random singles to sample and fill the rest of the cooler with Miller Lite.

    Just remember that half the people you meet are below average intelligence.
  • FeralFeral MEMETICHARIZARD interior crocodile alligator ⇔ ǝɹʇɐǝɥʇ ǝᴉʌoɯ ʇǝloɹʌǝɥɔ ɐ ǝʌᴉɹp ᴉRegistered User regular
    Feral wrote: »
    Cog wrote: »
    SniperGuy wrote: »
    Cog wrote: »
    SniperGuy wrote: »
    it appears I need to manually add that security certificate to chrome or people's phones in order to let them use it to bypass the block. Is there an easy way to do that for all users on the network? Am I being too vague in this post?

    Short answer: Fuck 'em.

    Long answer: You would probably need an MDM to push out certificates to phones.

    Best answer: Fuck 'em.

    That's fair for phones, but for the laptops that are owned by our organization (and yet not managed, that's a longer term project at the moment) I'll have to go around and hand 'em out. We have jamf for managing all the ipads but haven't paid for laptop management.

    If they're domain joined you can push the cert out through AD.

    He specified unmanaged.

    Here's the problem. His company is trying to do BYOB stuff without a BYOB strategy.

    No, you cannot push SSL certs to laptops without some kind of laptop management. The management could be an MDM solution, or it could be Active Directory.

    In lieu of that, you can put the certs somewhere your users can find them and download them, and provide them instructions for how to import them in their own machines.

    Yes, a BYOB strategy is key. Mine is to grab a sixpack of random singles to sample and fill the rest of the cooler with Miller Lite.

    I noticed that after I posted and decided to leave it

    every person who doesn't like an acquired taste always seems to think everyone who likes it is faking it. it should be an official fallacy.

    the "no true scotch man" fallacy.
  • BowenBowen Sup? Registered User regular
    I wiped my PC a few weeks ago and I forgot to backup ipoffice and now I can't seem to find the original install the phone company gave me.

    And avaya won't let me download it.

    What a fucking nightmare.

    not a doctor, not a lawyer, examples I use may not be fully researched so don't take out of context plz, don't @ me
  • LD50LD50 Registered User regular
    IMO... BYOD is hella bad, except for phones, and phones shouldn't have jack shit on them other than what can be installed in the app store.

  • mojojoeomojojoeo A block off the park, living the dream.Registered User regular
    o365 is down. https://status.office365.com/

    IT says- "Occasional downtime does occur... give it time."
    Otherwise everyone else says - "EVERYONE PANIC"

    Chief Wiggum: "Ladies, please. All our founding fathers, astronauts, and World Series heroes have been either drunk or on cocaine."
  • LD50LD50 Registered User regular
    One of the azure data centers in the mid west is on fire.

  • mojojoeomojojoeo A block off the park, living the dream.Registered User regular
    LD50 wrote: »
    One of the azure data centers in the mid west is on fire.

    this_is_fine.jpg

    Chief Wiggum: "Ladies, please. All our founding fathers, astronauts, and World Series heroes have been either drunk or on cocaine."
  • wunderbarwunderbar What Have I Done? Registered User regular
    So yesterday I got a text from a cohort. "Hey, which account is the one for the tape backup restore again?"

    So at least I knew I wasn't having the worst day.

    XBL: thewunderbar PSN: thewunderbar NNID: thewunderbar Steam: wunderbar87 Twitter: wunderbar
  • SeidkonaSeidkona Had an upgrade Registered User regular
    So much for the promise of the distributed cloud.

    Mostly just huntin' monsters.
    XBL:Phenyhelm - 3DS:Phenyhelm
  • wunderbarwunderbar What Have I Done? Registered User regular
    Entaru wrote: »
    So much for the promise of the distributed cloud.

    I mean, technically it's more "cloud" now than it was before it was on fire.......

    XBL: thewunderbar PSN: thewunderbar NNID: thewunderbar Steam: wunderbar87 Twitter: wunderbar
  • CiriraCirira IowaRegistered User regular
    I was wondering if any of you were seeing Azure problems also. It's a giant house fire at work due to everything we have going through Azure for SSO. Most of our products just aren't working so the users are all panicked. I get to sit here going "sorry can't do anything, all Microsoft"

  • mojojoeomojojoeo A block off the park, living the dream.Registered User regular
    edited September 2018
    Cirira wrote: »
    I was wondering if any of you were seeing Azure problems also. It's a giant house fire at work due to everything we have going through Azure for SSO. Most of our products just aren't working so the users are all panicked. I get to sit here going "sorry can't do anything, all Microsoft"



    the o365 problems are because the south/central azure region is down. It appears to be causing odd issues in other regions too- just not as all the way down as the main region.

    Nothing you can do but wait. i like to meditate in times like this. Contemplate clouds. Fluffy ones. Tall ones. Black ones emanating from server farms.

    mojojoeo on
    Chief Wiggum: "Ladies, please. All our founding fathers, astronauts, and World Series heroes have been either drunk or on cocaine."
  • twmjrtwmjr Registered User regular
    Cirira wrote: »
    I was wondering if any of you were seeing Azure problems also. It's a giant house fire at work due to everything we have going through Azure for SSO. Most of our products just aren't working so the users are all panicked. I get to sit here going "sorry can't do anything, all Microsoft"

    Yes, but did you escalate our ticket? We need status updates every 15 minutes, because that will absolutely fix the problem.

  • CiriraCirira IowaRegistered User regular
    Indeed. I had seen someone post about it as well Mojojoeo. I just thought it was funny that I was thinking it and there were several posts about it.

  • SeidkonaSeidkona Had an upgrade Registered User regular
    edited September 2018
    We're going to need you to get on a call and sit with us doing nothing until MS resolves this.

    Thanks.

    Seidkona on
    Mostly just huntin' monsters.
    XBL:Phenyhelm - 3DS:Phenyhelm
  • mojojoeomojojoeo A block off the park, living the dream.Registered User regular
    Entaru wrote: »
    We're going to need you to get on a call and sit with us doing nothing u tip MS resolves this.

    Thanks.

    HEY. Im a network guy. Sitting on the phone while nothing is happening to somehow speed along a fix is mandatory.

    Chief Wiggum: "Ladies, please. All our founding fathers, astronauts, and World Series heroes have been either drunk or on cocaine."
  • LD50LD50 Registered User regular
    edited September 2018
    Engineers have isolated an issue with cooling in one part of the data center, which caused a localized spike in temperature, as the preliminary root-cause, which has now been mitigated. Automated data center procedures to ensure data and hardware integrity went into effect when temperatures hit a specified threshold and critical hardware entered a structured power down process. Engineers are now in the process of restoring power to affected devices as part of the ongoing mitigation process.

    I wasn't lying when I said it was on fire.

    LD50 on
  • twmjrtwmjr Registered User regular
    I feel like my company is having a competition to see which employee can be the stupidest today, and no one told me about it.

  • CogCog What'd you expect? Registered User regular
    This is heavily affecting us.

    On the positive side, meandering through the twitter threads did give me this.

    tenor.gif

  • wunderbarwunderbar What Have I Done? Registered User regular
    I really like how they say that the "root cause of the temperature spike has been mitigated"

    So... you mean you put a fire out?

    XBL: thewunderbar PSN: thewunderbar NNID: thewunderbar Steam: wunderbar87 Twitter: wunderbar
  • CogCog What'd you expect? Registered User regular
    twmjr wrote: »
    I feel like my company is having a competition to see which employee can be the stupidest today, and no one told me about it.

    Well are you accidentally winning or losing?

  • twmjrtwmjr Registered User regular
    Cog wrote: »
    twmjr wrote: »
    I feel like my company is having a competition to see which employee can be the stupidest today, and no one told me about it.

    Well are you accidentally winning or losing?

    I think I may have been selected as the blind-to-the-study judge, and I am therefore losing very badly.

  • CogCog What'd you expect? Registered User regular
    Is losing at being the stupidest good or bad? I'm not sure.

  • SniperGuySniperGuy SniperGuyGaming Registered User regular
    My bosses would like me to change our guest network into one that has no password for people to use after school and on weekends for sporting events and such.

    Having a publicly posted password that I can give out to everyone seems safer than just having no password, but is there really a difference? We're using Ruckus Zonedirector to manage the WLAN stuff. It has a guest access service I can activate for that, though I'm not entirely sure what that would do.

    I imagine a lot of my job is going to be convincing people that ease of access is not necessarily worth the security holes.

  • CogCog What'd you expect? Registered User regular
    edited September 2018
    SniperGuy wrote: »
    My bosses would like me to change our guest network into one that has no password for people to use after school and on weekends for sporting events and such.

    Having a publicly posted password that I can give out to everyone seems safer than just having no password, but is there really a difference? We're using Ruckus Zonedirector to manage the WLAN stuff. It has a guest access service I can activate for that, though I'm not entirely sure what that would do.

    I imagine a lot of my job is going to be convincing people that ease of access is not necessarily worth the security holes.

    You want some sort of way to expire sessions and force people to re-authorize occasionally. Ideally a login page where people have to accept an acceptable use agreement or something. No password required, just a button to accept the agreement.

    Cog on
This discussion has been closed.