Home / user-50875

gWaldo's questions

Martin Hope
gWaldo
Asked: 2013-09-28 07:26:22 +0800 CST
  • 4

In doing this year's budgeting, I need to estimate the capacity needs for next year. We are planning on needing to shard our MongoDB Replica Set out to 4-shards, but I have the disk capacity needs for that planned.

The overall data set size is expected to be 600GB, but I am accounting for each of the 4 shards to be 200GB, in order to account for the possibility of unbalanced shards.

What I cannot find, is how much storage is required for my (3x)Config Servers and (3x)MongoS servers. I have been through the MongoDB docs and searched Google for "mongos disk capacity planning" to no avail. Can anyone point me to documentation, guidance, or at least personal examples of how much storage is required for their Config and MongoS servers?

mongodb
Martin Hope
gWaldo
Asked: 2013-07-04 11:34:39 +0800 CST
  • 1

Exchange 2003 server with HTTP Proxy (for remote office workers) was working fine until the validated SSL Cert Expired. (Nobody knew about it, and apparently nobody got an email.) OWA was still available for users, but Outlook was broken. I am not certain if iPhone users could use the cert during this time, but I think so.

I purchased a new cert and installed it, and Outlook clients could connect. Rejoicing happened.

Until someone noticed that they couldn't connect with iOS.

I've gone through significant troubleshooting, validating the IIS settings describing that Secure Forms are not required, and individual security settings on the Exchange, exchange-owa, etc virtual directories.

Running the Microsoft Connectivity Analyzer to test Exchange ActiveSync ultimately fails on the Activesync session

Attempting the FolderSync command on the Exchange ActiveSync session.
The test of the FolderSync command failed.

Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: <body><h2>HTTP/1.1 403 Forbidden</h2></body>

Headers received:
MicrosoftOfficeWebServer: 5.0_Pub
Pragma: no-cache
MS-Server-ActiveSync: 6.5.7638.1
Content-Length: 44
Content-Type: text/html
Date: Wed, 03 Jul 2013 19:25:17 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET

I have also verified that Exchange ActiveSync is enabled both Globally and at the individual user level in Exchange. I have tried toggling the global setting off and on, both between restarts of Exchange (SA + other core services) as well as the Exchange server itself.

Unlike this question here, the return code is 403, and my SSL Cert is working.

Where can I go from here to try to get this working

ssl-certificate
Martin Hope
gWaldo
Asked: 2012-08-15 06:58:47 +0800 CST
  • 0
Development --> Staging --> Production

A pretty typical workflow. This is fine.

"Fine, you want a 'Beta' Environment to show off stuff to some users/customers that isn't quite ready for Prime-Time."

Development --> Staging --> Beta
                        \-> Prod

"What do you mean 'Pre-Production'? That's what Staging is for."

I've seen a few (FEW!) cases where more might be called for, such as heavily-audited industries where elaborate testing must occur, but even they seem to get out-of-hand. (I once worked at a place with 11 separate environments!)

Is anyone else seeing this Environment-Sprawl? How can we managing the Developers (and Management) who thinks that these are "important"?

Even my pleas of increasing cost and complexity seem to be getting ignored, and it feels like some of the reasons are laziness. Beyond 4-5 environments, my spidey-sense begins to tingle...

configuration
Martin Hope
gWaldo
Asked: 2012-05-04 09:51:28 +0800 CST
  • 1

In joining a new company, I have inherited it's history.

I find that the User and Computer Object property lastLogonTimeStamp is not available. I have checked that the AD Schema version is 2003 R2, and that the domain attribute ms-DS-Logon-Time-Sync-Interval was "" (which should default to 14, to which I've now explicitly set.)

If relevant, the first DC is a SBS server. (This is my first time dealing with SBS, and so far I'm tempted to set it aflame.)

Checking random users and computers, I see no LLTS. How can I force this property into existence?

This is the Schema entry for CN=ms-DS-Logon-Time-Sync-Interval:

ms-DS-Logon-Time-Sync-Interval Schema

active-directory ldap attributes schema windows-server-2003-r2
Martin Hope
gWaldo
Asked: 2012-04-26 08:59:00 +0800 CST
  • 5

An SEO consultant has asked (demanded) credentials to the web environment so he can do ... Whatever it is that they do.

I'm new to the company but an experienced Systems Engineer. I've just now been brought into this situation, but my reaction to giving him credentials is a pretty solid "No" unless he can provide a compelling reason, which is yet forthcoming. Before I was brought into this, he had been provided an archive of the relevant files, but he said that this was insufficient.

The (admittedly) little that I know about SEO tells me that he should be able to get everything that he wants should be able to be gathered from view source or a copy of the files, and we would implement his changes in a production deploy after review.

website credentials seo
Martin Hope
gWaldo
Asked: 2012-03-13 11:02:42 +0800 CST
  • 4

I have a handful of servers who have not checked into the (in-house open-source) chef server in some time. When running chef-client as root, I get the message

WARN: Can not find config file: /etc/chef/client.rb, using defaults.

Running with the "-c /path/to/config" option yields the same result.

But as you can see, the files are in-place with both read and execute permissions:

root@client:~# ls -lah /etc/chef
total 24K
drwxr-xr-x  2 root root 4.0K 2011-08-19 09:24 .
drwxr-xr-x 91 root root 4.0K 2012-03-12 14:55 ..
-rw-rw-r--  1 root root  148 2010-09-15 13:14 client.json
-rw-------  1 root root 1.7K 2010-09-20 13:14 client.pem
-rwxr-xr--  1 root root  765 2011-08-19 09:24 client.rb
-rw-rw-r--  1 root root  145 2010-08-25 16:18 solo.rb

Y U NO SEE FILES, chef-client?!

chef
Martin Hope
gWaldo
Asked: 2012-02-25 08:03:02 +0800 CST
  • 4

A company that I'm contracting with has determined that they need to migrate their Chef (Open-Source Edition) instance to a new server.

They do not want to migrate to the Hosted platform.

I have not been able to find a guide for how to do this. Does anyone have guidance or experiences to share, or better yet, a Guide?

I have steps in mind for doing this, but I'm afraid that I'm going to miss something vital. Sadly, their Chef-Server is not managed via Chef...

migration open-source chef
Martin Hope
gWaldo
Asked: 2012-01-17 14:55:16 +0800 CST
  • 36

This is a canonical question about capacity planning for databases.

Related:

I'm looking to create a canonical question of tools and methods of capacity planning for databases. This is intended to be a canonical question.

Obviously, the general workflow is:

  • Put your scenario in place
  • Add monitoring
  • Add traffic
  • Evaluate results
  • Remediate based on results
  • Rinse, repeat until reasonably happy

Please feel free to describe different tools and techniques for different web-servers, frameworks, etc., as well as best-practices.

database capacity-planning benchmark load-testing
Martin Hope
gWaldo
Asked: 2012-01-17 14:49:58 +0800 CST
  • 125

This is a canonical question about capacity planning for web sites.

Related:

What are some recommended tools and methods of capacity planning for web sites and web-applications?

Please feel free to describe different tools and techniques for different web-servers, frameworks, etc., as well as best-practices that apply to web servers in general.

web-server capacity-planning benchmark load-testing
Martin Hope
gWaldo
Asked: 2011-02-17 16:21:40 +0800 CST
  • 7

Short Version:

How do I transfer a .tv domain from one registrar (enom.tv) to another (godaddy.com) when the current registrar considers this a "Premium" domain and won't generate a transfer authorization (EPP) code? (The Premium status was determined after the domain had already been in use.)

===

Long Rant Version:

I came in possession of a .tv domain by way of company acquisition, and we use it for streaming video. It was purchased at or around the going rate ($10-20 US), but last week our site suddenly stopped working. The Execs quickly paid the extortionate $750 renewal fee to enom.tv, and once the DNS dust settled, we were back in business. The contact email address is a distibution list, and nary a notice had been received. New priority: transfer registrar.

I've verified that GoDaddy can in fact register .tv domains, which is where most of our domains are registered. So I opened up the domain for transfer within enom's tools, and attempted to run the transfer from within the GoDaddy console. A call to GoDaddy's tech support informed me of a need to get some Authorization Key, so I clicked the appropriate button within the elom tools. And waited. And waited...

Today I called the customer support number and after about 15 minutes was told basically that they are the only authorized registrar for certain .tv domains deterimed to be "premium names", and for them, the higher rate applies.

To summarize: "Eat it and Pay Up."

I have found that nbc.tv is registered through GoDaddy. I find it hard to believe that they are not a "Premium Name"...

The enom rep also claimed that expiration notices had been sent, but nobody on the contact distribution list received anything. (I had, of course, tested that it works previously.) He responded and said that they must have been put on a spammer list, but we're receiving their trouble ticket notices. (Lies, and Lies.)

This screams of shady. Does anybody have any ideas of how to forcibly transfer our domain against our current registrar's wishes? Or failing that, is there any recourse?

domain-name-system domain domain-registrar
Martin Hope
gWaldo
Asked: 2010-10-07 06:57:16 +0800 CST
  • 1

Over the last few days, I've seen a drastic increase in the amount of blatant spam making it inside of my organization. (Exchange 2003 behind Ironmail, Symantec Mail Security.) My security products are up-to-date and appear to be functioning correctly (aside from, of course, the additional V1agr4 messages). I have looked at the headers and don't see anything out of the ordinary. Exchange is passing mail

Is anybody experiencing this as well? If so, can you provide any insight into how the messages are getting through? Any recommendations on how to prevent?

email exchange spam
Martin Hope
gWaldo
Asked: 2010-09-08 05:46:48 +0800 CST
  • 4

I'm currently running Exchange 2003 SP2 Cluster on a Server 2003 AD Forest (in native 2003 mode), and we beginning to plan the upgrade to Server 2008 AD and Exchange 2010. We have two main sites, one middle-sized office, and a couple of smaller sites which have DCs (which may be RODCs after the upgrade). Currently all of our Exchange cluster is in my main site, but we are considering using the new datastore paradigm for load-balance/failover at the other large site, but this is not set in stone.

Right now we are in the information-gathering and planning phases. I am looking for input of any gotchas experienced while performing either upgrade, but especially the Exchange upgrade.

What were some Gotchas? What surprised you? What wasn't documented? What said one thing but was misleading? (Confusing either in content or severity.) What is great or horrible about the new system? What worked well? What worked poorly? If you were to do it over again...?

(I know that this isn't so much a question that can be definitively answered, but I'm happy to reward insight and useful resources (not the Microsoft documentation, but Blogposts are welcome) with upvotes.)

UPDATE A couple items of note:

-We are not currently using OWA (currently only the admins), but it may become more of a consideration with iOS devices.

-We do have a small number of Blackberries in the environment (< 10%).

-In addition to the standard Exchange connectors, we have a third-party connector for Captaris RightFax integration.

exchange exchange-migration exchange-2010