Showing posts with label work. Show all posts
Showing posts with label work. Show all posts
Friday, April 17, 2009
Friday, April 27, 2007
I've got mail
I get a lot of mail at work but not this much...
Thunderbird 2.0 looks to be having some trouble counting...
Thunderbird 2.0 looks to be having some trouble counting...
Friday, March 02, 2007
Ice Ice Baby
Came into work early (first one in the building!) figuring I'd get at least 1.5 hours of truly quiet time to work.
Ha!
Open the door to the office and I hear - splot, splot, splot. Hmmm. Turn on the lights and look in the cube next to mine and there is water dripping by the window. I move the the paperwork and circuit boards out of the way, dry things up, and put a couple of buckets to catch the water. Called up the building manager and left him a message as well.
Turns out the that ice forms on the support beam above the window and, through various factors, picked today to melt. Nothing can be done. Great design...
Ha!
Open the door to the office and I hear - splot, splot, splot. Hmmm. Turn on the lights and look in the cube next to mine and there is water dripping by the window. I move the the paperwork and circuit boards out of the way, dry things up, and put a couple of buckets to catch the water. Called up the building manager and left him a message as well.
Turns out the that ice forms on the support beam above the window and, through various factors, picked today to melt. Nothing can be done. Great design...
- Update: The office next door has puddles on the window sill. We just get a slow drip.
Thursday, February 15, 2007
krbtgt and NO_AUTH_DATA_REQUIRED
These two should not be mixed.
NO_AUTH_DATA_REQUIRED is a flag that can be added to the UserAccountControl attribute for an Active Directory user object. This flag will keep Privilege Attribute Certificate(PAC) data from being added to service tickets. This can be useful when setting up cross realm trusts between AD and a MIT Kerberos realm.
We're working on setting up single sign on for the Windows clients in our AD forest so that upon logging in users will get credentials for the AD domain, the MIT realm, AFS, and a Kerberos based Certificate Authority (KCA). Everything was good except for the tickets AD was returning to the MIT KDC - they were too large to build AFS tickets. So the developer suggested implementing NO_AUTH_DATA_REQUIRED on the service accounts used for KCA and KDC access. No problem there. But I misread his note and also set the krbtgt account with this option.
Nothing bad happened at first. But overnight some systems stopped processing GPOs. And a couple of DCs started throwing logon errors. Nothing made sense till I read a bit more on the use of the krbtgt account and realized what a mistake I had made. Backed out the change and rebooted the two DCs that were having problems. A couple of other servers needed attention as well.
Some things just shouldn't be mixed.
NO_AUTH_DATA_REQUIRED is a flag that can be added to the UserAccountControl attribute for an Active Directory user object. This flag will keep Privilege Attribute Certificate(PAC) data from being added to service tickets. This can be useful when setting up cross realm trusts between AD and a MIT Kerberos realm.
We're working on setting up single sign on for the Windows clients in our AD forest so that upon logging in users will get credentials for the AD domain, the MIT realm, AFS, and a Kerberos based Certificate Authority (KCA). Everything was good except for the tickets AD was returning to the MIT KDC - they were too large to build AFS tickets. So the developer suggested implementing NO_AUTH_DATA_REQUIRED on the service accounts used for KCA and KDC access. No problem there. But I misread his note and also set the krbtgt account with this option.
Nothing bad happened at first. But overnight some systems stopped processing GPOs. And a couple of DCs started throwing logon errors. Nothing made sense till I read a bit more on the use of the krbtgt account and realized what a mistake I had made. Backed out the change and rebooted the two DCs that were having problems. A couple of other servers needed attention as well.
Some things just shouldn't be mixed.
Wednesday, February 14, 2007
Tuesday, February 13, 2007
Snow Day - sorta
We had winter storm warnings. Big deal - here in Northern Illinois we get these all the time. When I left for work we had gotten maybe an inch of snow. Enough to cancel school for Thing2 (she was happy - after she got back from the bus stop...) We had the ok to stay home and take a day of vacation if we wanted to. The weather didn't seem so bad so off I went.
My normal 25 minute drive took 50. People were taking it easy - except for the 4WD trucks. For some reason they thought my bumper was a good place to hang out... Most people came in - except for the ones with fancy new 4WD trucks. Seemed strange to me.
Left a little early figuring I could clean up the driveway from the inch or so of snow real quick and have some time to relax. Hah! The driveway had anywhere from 6 to 12 inches of snow on it. Some drifts were deeper. Almost 2 hours later I had mine as well as my neighbors done.
Buffy, on the other hand, had the right idea for a snowy day!
My normal 25 minute drive took 50. People were taking it easy - except for the 4WD trucks. For some reason they thought my bumper was a good place to hang out... Most people came in - except for the ones with fancy new 4WD trucks. Seemed strange to me.
Left a little early figuring I could clean up the driveway from the inch or so of snow real quick and have some time to relax. Hah! The driveway had anywhere from 6 to 12 inches of snow on it. Some drifts were deeper. Almost 2 hours later I had mine as well as my neighbors done.
Buffy, on the other hand, had the right idea for a snowy day!
Subscribe to:
Posts (Atom)