Number 31 is a prime number, Atomic number of gallium, Andromeda Galaxy and is 11111 in binary.

Al
Has been having fun with godday and net bios names in UC/SAN certs: https://www.digicert.com/internal-names.htm
Generate csr request in exchange 2007

Andy
Issues with invalided Certs due to wrong time, We discuss NTP in EP #013
NTPD in Linux – Use “ntpd -gc /etc/ntp.conf” to update the clock if the skew is very big.
Printer issues – We discuss if it better set a printer with a static IP address or dynamic

WordPress errors – syntax error  

“Parse error: syntax error, unexpected ‘<‘ in /home/clutec/public_html/wp-includes/taxonomy.php on line 4723″

Jerry

Looking at deploying AWS machines via Ansible

Using Amazon AWS host as WordPress / Hosted database (RDS) in AWS  / S3
– EC2 for serving
– RDS for database
– S3 for storage

Jerry went to a meetup/talk about VPCs – bascially the AWS networking model. Here are the slides

Using IMAPcopy to copy between IMAP mailboxes. Complicated by the fact that the IMAP server uses SSL/TLS, and imapcopy does not support this. Followed this article to use stunnel as a workaround

Removing exchange 2007 get stuck at 100%
Exchange 2016 preview is available 
321 Veeam bakup rule

Regular expressions – mainly day-to-day use with grep
and User Guide

This Week:

Al has been sorting out switches which where set-up in dasiy chain fashion.
Andy has been continuing  setup vlans in the posh shirt shop

Setup Vlans at the posh shirt shop

AP-810 – Is the wireless access point used.
Setup VLANs on Draytek.
Changed the management port the number of Vigor and limit the access the limit the IP address which access it.
Wireless Client MAC Isolate 

Spanning Tree

The Spanning Tree Protocol (STP) is a network protocol that ensures a loop-free topolog.

Trunking in HP E-Series Switches is defined as a trunk is a single logical, higher bandwidth link formed by bundling several links together. Cisco call this an EtherChannel.

Trunking in cisco world is a trunk is a link between two switches carrying traffic
belonging to multiple VLANs.

In HP A-series switch link aggregation is term used to bundling several links together to create higher bandwidth link.

BDU packets, Root bridge, Root port

Types of Spanning Tree protocols

• STP
• RSTP  (Rapid Spanning Tree)
• MSTP (Multi Spanning Tree)
• PVSTP (Per-VLAN Spanning Tree)

PRTG Software to monitor Bandwith of a port
ntop – ntop is a network probe that shows network usage in a way similar to what top does for processes

Main migrations methods to Office365
-PST Migration
-3rd Party Tools – Code 2 / MigrationWiz
-Cut over Migration
-Staged Migration
-Hybrid

Staged Migration

– Only Supported in exchange 2003,2007
– Requires Dirsync and Public Cert + Autodiscover / Outlook anywhere is working
– You can move mailboxes one at time or in batches, Uses the users onmicrosoft email to send- email between onsite and office365.
– Create batch migrations using CSV, This forward all emails to the user onmicrosoft.com email address.
– Then you need to convert the onsite mailbox to mail enable users.
– User need to reconfigure outlook to use office 365
– When everybody migrated to office 365 update SCP record and MX record.

Hybrid

– You can move mailboxes between office 365 and onsite and back again.
– Outlook does not need to be reconfigured.
– Requires a least one exchange 2013 server, with the mailbox and cas role installed but does not need to host mailbox,
-Requires a SSL cert (need to be configured correctly in exchange) configured in autodiscover / outlook anywhere and SMTP Connector
-Install Dirsync and run Hybrid configuration wizard to configure exchange to speak to office365
-Use mailbox move to move the mailbox to office365.
-You need decide if you are pointing MX records to office365 or the onsite exchange.
–Youtube Video on Hybrid Microsoft Exchange Server 2013 Deployment

– 28 is the atomic weight of silicon

Centos 7
First impressions from Al:
– You can now setup local user in the setup
– Can still login as root via SSH
– ifconfig does not seem work any more
-mariadb is now the default rather then mysql

Systemd corner
– systemctl for services
– NIC naming – systemd “predictable interface names”
– Units

Oldskool “vi” is difficult

Sudo
– Sudo: You’re Doing it Wrong
– Sudo – you’re doing it wrong
– XKCD – Sudo make me a sandwich, the naughty list

Vlans
Andy latest jobs involves setting up three separate network using one vigor
Here is the purposed digram Al design using https://www.gliffy.com/

– Setup Vlans on vigor

Al has been doing some more Exchange Migration stuff
–Remove stale public folder in exchange 2007
–The order what Autodiscover try to use to configure Outlook

Do we need to put anything in about LIsten Email in the show notes? Link to podcast. Traking projecy-riskp
– The new podcast Al has found about: tubb talk is talking about glue it

This Episode:

• Al has beem doing more exchange 2013 stuff
• Andy has been Testing Windows 10
• Jerry been moving house and has done a talk on Ansible (Links to the Google slides)

Show Links

• How to backup window 8.1 to a file image
• Update Windows 7 ISO with Win Toolikt
• Andy’s NAS box issue
• Create Templates in VMware 
• Use DSIM to install updates offline
• Azure AD Join on Windows 10 devices
• MDM in Office365 
• Local Administrator Password Solution
• Exchange 2013 Sizing Calculator
• Exchange Profile tool to get emails stats for sizing tools 
• Generate Exchange Environment Reports using Powershell
• hak5 NMAP youtube videos
• ogg camp

Al

DDOS Attack with RIP v1 Protocol 

Andy

• Configure outlook 2010 with outlook anywhere.
• The Different between NTLM and Basic authentication 

Office 365 Migration Part 1

• Overview of Azure AD and cloud idinfity and Dirsync
• Where is you data Stored in Office 365
• SLA for office 365
• How Office 365 is Run (video)
• Password Hashing explained
• aadsync

Migration methods to Office 365

• PST
• staged 
• cutover
• hybrid
• 3rd Party Tools

A brief overview on Cutover Migration

supports exchange 2003/2007/2010/2013

• Remove old unused mailbox which do not need to imported to exchange
• create office365 account and setup DNS but do not create any accounts or change mx records
• set-up outlook anywhere with a public SSL certificate
• In office 365 select a Cutover Migration to start importing accounts, the mail and accounts get import automatically
• Once everything has imported successfully redirect MX records to office365
• Update Autodiscover DNS record
• Recreate outlook profiles to point to office 365

Al

• Been messing about with installing Arch Linux and Debian Server.
• Debian Release Names
• cheat sheet from jerry about yum and apt-get
• The guide Al followed to install arch
• Seting up network cards in systemd

Jerry

• Has Put some code on Git Hub
• Icinga 2 –  talk by a developer
• Host Git Repository onsite with Git lab

Linux Config management & code control

Puppet

• Needs an agent installed
  • Uses SSL self-signed certs
  • “Declarative state”

Ansible

• No agent needed
• Uses SSH
• Procedural (stepwise)

Version control in this context

• git
  • branching – develop code in a branch
  • hooks – automatically do things when certain events happen
  • Omnibus package

Oggcamp

The dates have been realised and we will be there. It being held in Liverpool, Oct 30th – Nov 1st 2015!

This episode we interview Dean from the Educational Centre Blog:

– Deploy a Cisco UCS system – Part 1 – from scratch for VMware ESXi

– Logging in to the vCenter Server Appliance as vSphere Client users using the Use Windows session credentials option fails with the error: Cannot get user info 

– Backing up a virtual machine with Changed Block Tracking (CBT) enabled fails after upgrading to or installing VMware ESXi 6.0

– Veeam Endpoint protecton Free

– HP-AMS Driver causes ESXi memory leak

– Mailradar Open Relay Checker

– 10base2

– Windows 10 Share your wifi password with friends

– Cracking WPA WPA2 with Kali Linux

– Dean’s Blog

Before:

Job 2

Jerry

Al

Misc, and recommendations:

This week, Jerry is back from the dead, we discuss Andy’s upcoming mega site visit and talk AD & Lync.

Jerry back from the dead

• Icinga – open source monitoring system
• PPTP setup on Linux
• Ansible – Configuration management
• Outgoing brute force attacks

Andy’s audacious intervention

Before:

The plan:

• Sort the network out
• Set up users on the new NAS box
• Set up different share on the NAS box for different purposes (effectively different partitions)

RAID levels

• RAID0 – striping across drives
• RAID1 – Mirror across drives
• RAID5 – Distributed parity
• JBOD – Just a Bunch of Disks
• RAID10/RAID50 – Striping and Mirroring

RAID is not backup

What happens when you RAID 24 SSD drives?

Backups

• Offsite – in case the office burns down
• Synology Sync
• Crashplan

Careful with that ACT database, Andy!

Remote access

Al’s discoveries

• Lync
• Domain Name Best Practice for AD
• After November 1, 2015 Certificates for Internal Names Will No Longer Be Trusted
• Exchange 2013 namespace (unbound and bound)
• Windows+I,(Windows+d)+(Alt-F4)
• Trello

Miscellaneous discussion

• HA/Quorum
• TTLs
• STONITH

We are Now on twitter:

@admadmpodcast