user65712's questions

I just received some Brocade switches that are going to replace ancient Cisco ones on my network. The switches are running 07.4.00b of Brocade's firmware, and I'd like to know if it is safe to update to version 8. v8 just came out in June or July, so it would be useful to know if there are any gotchas - I'd hate to jump into buggy firmware with something as critical as a switch.

A comment about how the the latest stable v8 on a ICX 6450-48P runs would be great. I already know about the 1G reload bug.

I have two 1 Gb wired Ethernet ports on a Dell server. I am trying to move to wired port #1 because of physical damage to wired port #2. The trouble is, 2008R2 won't let me have two interfaces with the same IP address. Ordinarily, I can see this being a good thing - it tries to save you from yourself. However, I am super-paranoid about changing the IP settings on port #1 - is there any way to have the interfaces configured identically so that I can revert the port change by just plugging the cable back into #1? Or, is there a way to save a wired interface config to a file?

It's a critical production server and I can't schedule maintenance on it much, so I didn't want to mess with currently working IP settings if I could help it.

Almost all of the documentation that I've read seems to suggest that a controller is required, but I've been assigned to sell my employer's old 1000's and finally get rid of the ancient 4400 series controller. Can I reset/unjoin the Aironet APs from the controller and have them run in standalone mode? Does a standalone mode even exist?

I get this message on a new 2901 Cisco router:

---

Cisco Configuration Professional (Cisco CP) is installed on this device and it provides the default username "cisco" for one-time use. If you have already used the username "cisco" to login to the router and your IOS image supports the "one-time" user option, then this username has already expired. You will not be able to login to the router with this username after you exit this session.

It is strongly suggested that you create a new username with a privilege level of 15 using the following command.

username <myuser> privilege 15 secret 0 <mypassword>

Replace and with the username and password you want to use.

---

It appears every time I login and everytime I show run. I already set up my username. How do I turn it off?

I have Sophos Endpoint Security and Control, which includes Sophos Enterprise Console (SEC). I'm currently running version 4.5 of SEC, which is an older version. I subscribe to Mac updates, and SEC generates a binary Mac installer for me to use on Mac endpoints (Version 7 for Mac, also an older version). However, when I run the installer on Mac endpoints, it installs fine but then never auto-fills out the location of the update server, which is on a network share, and the account credentials used to access it, which I do not know and were generated by Sophos automatically.

Previously, I had been able to use the SEC-generated installer to install and run Sophos on a Mac seamlessly; the update location information and account credentials were automatically filled during login, I ran the installer and it was perfectly set up.

Now, however, Sophos installs on a Mac but never updates because it doesn't have the update location OR credentials. Has anyone else run across this problem or know why it is happening?

Sophos Enterprise Console 4.5.1.0

As I was running through the scope wizard in DHCP for Windows Server 2008 R2, the wording on the wizard was slightly confusing: it seems to imply that changes I make to the default gateway and DNS servers for this new scope will be applied for ALL scopes. That doesn't really make sense, but I wanted to ask to be sure: can the new scope wizard mess up other scopes or global DHCP settings?

I have telnet access to a Cisco switch, only I need to enable an interface so it can start handing out IPs on a certain subnet. What commands do I need to use to get to the interface config file or area? I had another sysadmin show me once, but he has since moved on and I inherited his setup. I've been going over the iOS manuals, but I can't see the way to do this. This is probably a really basic question, so I apologize if I'm just wasting electricity.

I'm running a dual delivery Google Apps setup right now where Google Apps is the primary mail server by my domain's MX records. My users can use either Exchange or Google Apps until we phase out Exchange.

I've set Google Apps to forward all mail to Exchange inboxes. However, when my users use OWA or Outlook to send mail from Exchange to another domain user, Exchange internally routes the email to that other user's Exchange mailbox, completely skipping Google Apps.

It would be simple to set Exchange to forward sent and received messages to Google Apps on a per-user basis, but this would lead to a mail loop where Exchange and Apps sent each other the same message forever. I just want to forward sent messages to Google Apps and the Exchange inbox.

So, I tried setting up another receive connector. This didn't do anything, so I suspect that "internal" email processing takes place before "external" mail processing or send connector rules can be applied. This Microsoft page explains how emails are routed but offers little guidance about how to force internal domain messages to be delivered/forwarded externally using MX records, which would solve my problem.

Has anyone else had this problem? Am I approaching the problem correctly? This seems like a fairly common function in a mail server, but I can't seem to find it.

I inherited an Exchange 2010 SP1 server from a previous sysadmin, and it was running on Dell hardware. However, I now suspect that the RAM is throwing out errors. The trouble is, the server does not have Dell OpenManage on it, so there is no way (I think) for me to check the RAM status without taking the server down.

Is there any reason that Dell OpenManage shouldn't be installed on and Exchange 2010 SP1 server? I'm not sure if the previous sysadmin didn't install OpenManage due to accident or design.

I need to make a report with a list of the largest messages on an Exchange 2010 server. I looked through the commands that I could use, and Get-MailboxStatistics isn't granular enough - I need to find individual messages >25MB and print their size, user account, and subject. This is for a migration to Google Apps, so I can figure out who (if anyone) has these huge emails Apps won't accept.

What are the best permissions for a Wordpess install on Ubuntu managed by Webmin? Currently, root owns all the files and all of the files are also set to the root group. I'm using the virtual server GUI on Webmin to manage multiple virtual sites from this server. I'm wary of making permissions changes on a live server, and I'm worried that if I follow these instructions I might do something like deny Apache the right to access the Wordpress files.

Right now I just have /wp-content set to 777 to make plugin installs work, but I know this is not a good idea because any system user can edit the data. Are the permissions I linked to correct and should they work?

I need to backup a website to a Windows server every week and I only have access to remote FTP. I'd like to use an incremental backup program so that I can just copy the files every week on a schedule and not worry too much about the size of the backups becoming an issue. Unfortunately, I can't find a Windows program that will automatically make incremental backups of specific FTP folders and files, as most programs are designed to backup to FTP, not from it. Are there any applications that can do this?

I also have a Ubuntu 10.04 box I could use to relay the site to the Windows server if I needed to run Linux programs, but I would prefer a Windows-only solution over a Linux/Windows one, and a combined Linux/Windows solution over not having it work at all.

After reading this guide and trying a ton of permutations based on that, is there an easy way to get Bugzilla working with an AD server? I keep getting the error:

80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0

I created an AD "bugzilla" user account with "Account Operators" permission as directed. I'm not sure if the error is saying that my login is incorrect or the system login to access LDAP is incorrect. Maybe I just missed an arcane option somewhere in the settings. You'd think all I'd need to do is specify the server name.

As you might have been able to tell, I don't have a lot of LDAP experience.

Also, will the Sysinternals LDAP tool help here?

This page seems to imply that Wireshark can only begin capturing after boot, but it looks like someone else has run into this problem before and didn't get anywhere.

It doesn't necessarily have to be Wireshark, I just need to figure out why some AD logins on my network are so slow and to do so I believe I have to look at what's actually happening over the network.

Does Apple's Remote Desktop need OSX Server? Or are there better management options out there? I'm looking for something to manage a small Mac lab of ~20 machines joined to Active Directory.

I can add the share to the login startup items, but it always pops open Finder. I want the AFP share to mount silently. This is in a Mac computer lab with the Macs joined to AD.

I've done some reading and apparently the main obstacle to fast remote profile syncing is that Samba takes a long time to transfer lots of little files like cookies. After reading Roaming Profiles: Best Practices , I plan to use Folder Redirection, but I want my users to be able to login as rapidly as possible, even if it means that their data is still coming in when they reach their desktop. Is there a way to do this with GPO or a third party add-on that can load user profile data faster/speed up the login process for users?