[00:18:29] *** jimb has joined #Citrix
[00:18:55] <jimb> hi. thanks to you folks who helped me yesterday with the universal printer question
[00:19:44] <jimb> today i am configuring a netscaler. can i use netscaler internally to load balance between two storefront servers? i want to be able to do this just want to make sure the netscaler won't proxy all traffic for the connection. how does this work?
[00:20:56] <jimb> once you are directed to a storefront server, client talks directly to it and netscaler is out of the picture, no?
[00:32:02] *** rr has joined #Citrix
[00:51:04] *** Guest61952 has quit IRC
[00:52:10] *** uschxc has quit IRC
[00:52:59] *** uschxc has joined #Citrix
[01:03:23] *** jimb has quit IRC
[01:05:10] *** Bsony has joined #Citrix
[01:07:30] <|Atum|> jimb left but yes, you can use NS internal to LB sf
[01:10:05] *** Bsony has quit IRC
[01:28:19] *** Bsony has joined #Citrix
[01:32:45] *** Bsony has quit IRC
[01:34:23] *** uschxc has quit IRC
[01:50:54] *** MartynKeigher has joined #Citrix
[02:00:39] <|Atum|> netscaler is still used*
[02:22:41] *** _hardlock has joined #Citrix
[02:25:41] *** hardlock has quit IRC
[02:31:49] *** iig has joined #Citrix
[02:45:34] *** iig has quit IRC
[03:27:49] *** ghostmediapro has quit IRC
[03:35:23] *** hspcd has joined #Citrix
[03:38:17] *** SYS_NOOB has quit IRC
[03:42:59] *** SYS_NOOB has joined #Citrix
[04:31:09] *** stormlight has quit IRC
[04:31:19] *** stormlight has joined #Citrix
[04:48:07] *** dh64 has quit IRC
[04:54:06] *** stormlight has quit IRC
[05:02:05] *** mixomathoze has quit IRC
[05:12:09] *** mixomathoze has joined #Citrix
[05:38:21] *** siddharthv_away is now known as siddharthv
[05:52:37] *** rr has quit IRC
[05:53:11] *** MartynKeigher has quit IRC
[05:55:10] *** hspcd has quit IRC
[05:59:23] *** SYS_NOOB has quit IRC
[06:18:15] *** SleePy has quit IRC
[06:47:53] *** SleePy has joined #Citrix
[07:14:43] *** unop has quit IRC
[07:32:00] *** Lajo has joined #Citrix
[07:48:52] *** kiste has joined #Citrix
[07:55:09] *** stormlight has joined #Citrix
[07:59:45] *** stormlight has quit IRC
[08:13:23] <Elsa--> Has anybody ever gotten a 1618 error while installing Citrix Receiver ?
[08:15:34] *** Bsony has joined #Citrix
[08:18:48] *** Bsony has quit IRC
[08:53:48] *** Bsony has joined #Citrix
[09:06:25] *** Bsony has quit IRC
[09:07:15] *** Bsony has joined #Citrix
[09:07:38] *** Bsony has quit IRC
[09:08:13] *** Bsony has joined #Citrix
[09:09:10] *** Bsony_ has joined #Citrix
[09:11:11] *** Bsony_ has quit IRC
[09:12:05] *** Bsony_ has joined #Citrix
[09:12:56] *** Bsony has quit IRC
[09:21:29] *** Bsony_ has quit IRC
[09:22:58] *** Bsony_ has joined #Citrix
[09:25:00] *** Bsony__ has joined #Citrix
[09:25:43] *** Bsony__ has quit IRC
[09:26:17] *** Bsony__ has joined #Citrix
[09:28:15] *** Bsony_ has quit IRC
[09:29:01] *** Bsony____ has joined #Citrix
[09:32:19] *** Bsony__ has quit IRC
[09:33:30] *** Bsony____ has quit IRC
[09:34:25] *** Bsony____ has joined #Citrix
[09:35:36] *** rsrevord has quit IRC
[09:36:26] *** rsrevord has joined #Citrix
[09:42:21] *** Bsony____ has quit IRC
[09:46:29] *** Bsony____ has joined #Citrix
[09:46:51] *** Bsony____ has quit IRC
[09:47:28] *** Bsony____ has joined #Citrix
[09:48:48] *** Bsony______ has joined #Citrix
[09:51:55] *** Bsony____ has quit IRC
[10:00:12] *** Bsony______ has quit IRC
[10:07:25] *** Jordy has joined #Citrix
[10:07:50] <Jordy> Hello, i'm trying to enable a chrome:plugins (adobe reader) for all users but it doesnt get saved
[10:07:55] <Jordy> any idea where to look? :(
[10:08:17] <Jordy> AppData\Local\Google\Chrome\User Data\Default\Extensions its not there =) because I keep track of these settings
[10:08:46] *** Bsony______ has joined #Citrix
[10:10:29] <Grelot> you want pdf to open with chrome or without ?
[10:21:02] <Jordy> I want PDF to open inside Chrome with the Adobe PDF plugin and not with the Chrome PDF plugin, but I think I got it
[10:21:24] <Jordy> I opened the Chrome as administrator on every XenApp, put it right and then it was working
[10:22:21] <Jordy> Also people complaining about slow printing.. WAN/LAN no difference. I read about disabling the advanced printer settings that this would recude the doc size being spooled, this any true?
[10:26:04] <Grelot> I don't know but you can check it easily by printing the same file with and without ^^
[10:27:13] <Grelot> logically it should be smaller
[10:27:57] *** xtor has quit IRC
[10:28:59] *** extor has joined #Citrix
[10:29:36] *** GentileBen has joined #Citrix
[10:36:33] *** Lucasje has joined #Citrix
[11:04:30] *** Lajo has quit IRC
[11:09:19] *** unop has joined #Citrix
[11:11:40] *** Gnk has quit IRC
[11:16:11] *** Gnk has joined #Citrix
[11:19:20] *** unop has quit IRC
[11:30:31] *** unop has joined #Citrix
[11:33:01] *** Lajo_ has joined #Citrix
[11:35:58] *** hersh41 has joined #Citrix
[11:41:51] *** unop has quit IRC
[11:53:45] *** Bsony_______ has joined #Citrix
[11:55:47] *** Bsony______ has quit IRC
[12:16:41] *** paradizelost has quit IRC
[12:28:39] *** cocoa117 has joined #Citrix
[12:31:52] *** paradizelost has joined #Citrix
[12:42:46] *** siddharthv is now known as siddharthv_away
[12:47:31] *** hersh41 has quit IRC
[12:57:25] *** Jordy has quit IRC
[13:11:37] *** Bsony_______ has quit IRC
[13:11:51] *** Bsony has joined #Citrix
[13:40:01] *** hspcd has joined #Citrix
[13:46:05] *** _hardlock has quit IRC
[13:47:07] *** hardlock has joined #Citrix
[13:53:18] *** Bsony has quit IRC
[13:53:48] *** Bsony has joined #Citrix
[13:54:23] *** brad[] has quit IRC
[14:22:46] *** cocoa117 has quit IRC
[14:27:54] *** cocoa117 has joined #Citrix
[14:48:53] *** hspcd has quit IRC
[14:51:46] *** Tom_Wurm has quit IRC
[15:18:52] *** rr has joined #Citrix
[15:21:19] <tabularasa> morning peeps
[15:21:45] <David62277> good morning
[15:25:36] <rr> good
[15:29:41] <Grelot> morning guys
[15:29:46] <rsrevord> morning
[15:31:04] *** StirCwazy has joined #Citrix
[15:32:08] <StirCwazy> Random, unrelated to citrix question. Anyone know SCVMM? =)
[15:32:34] <Grelot> a little bit
[15:32:47] <StirCwazy> Morning Grelot =)
[15:33:06] <StirCwazy> Since it's unrelated, mind if I PM you?
[15:33:21] <Grelot> sure no problem
[15:33:59] <rr> sorry my keyboard broke
[15:34:12] <rr> *good morning/evening
[15:34:42] <rr> what's with SCVMM? is that Microsoft product for desktop virtualization?
[15:36:05] *** rr has quit IRC
[15:36:05] *** rr has joined #Citrix
[15:36:14] *** rr has quit IRC
[15:36:15] *** rr has joined #Citrix
[15:36:30] <StirCwazy> Virtual Machine Manager rr
[15:37:07] <rr> yeah, what does it do?
[15:37:19] <rr> is it same like XenDesktop?
[15:39:09] <Grelot> its more like vcenter but for hyper v
[15:40:25] <rr> thanks Grelot
[15:40:55] <StirCwazy> Yea, sorry rr I didn't understand what you were looking for.
[15:41:47] *** Lajo_ has quit IRC
[15:43:34] <rr> no worry
[15:47:50] *** hspcd has joined #Citrix
[15:53:22] *** Bsony has quit IRC
[15:53:48] *** Bsony has joined #Citrix
[15:56:13] <David62277> uncon... wanna delve into my netscaler "reboot" issue?
[16:08:30] *** MartynKeigher has joined #Citrix
[16:12:46] *** deunnero has joined #Citrix
[16:14:46] <Bobfrankly> is there a new name for the access gateway client?
[16:15:34] <David62277> receiver?
[16:15:46] <Bobfrankly> for vpn
[16:16:17] <Bobfrankly> or did they roll that into the receiver as well?
[16:18:02] <Bobfrankly> nvm
[16:18:06] <Bobfrankly> got my names confused
[16:21:12] *** cocoa117_ has joined #Citrix
[16:21:30] *** Bsony_ has joined #Citrix
[16:22:54] *** KaiForce has joined #Citrix
[16:24:27] *** Bsony has quit IRC
[16:24:45] *** Gnk has quit IRC
[16:24:56] *** cocoa117 has quit IRC
[16:25:04] *** Gnk has joined #Citrix
[16:27:57] *** brad[] has joined #Citrix
[16:33:36] *** johnelse is now known as johnel_away
[16:34:29] *** johnelse has joined #Citrix
[16:42:59] <deunnero> Trying to add an NFS SR share to my pool... Not going so well lol
[16:44:37] <deunnero> There was an error while attempting to mount the NFS share. Check your settings and try again
[16:46:25] <rsrevord> deunnero: can ping the share and the permissions are setup right?
[16:46:48] <deunnero> have to double check that
[16:50:41] <deunnero> the NAS settings for NFS... Added both hosts. Folder: Volume_1/NFS Permission: R/W, Root Squash: Yes
[16:51:16] <johnelse> deunnero: there might be a more useful error in /var/log/SMlog
[16:51:31] <deunnero> k
[16:51:37] <deunnero> Have to wait for this to fail
[16:53:36] <deunnero> Still scanning
[16:53:46] <deunnero> cancel button is greyed out boo
[16:55:55] <deunnero> here we go
[16:56:39] <deunnero> It tried to mount it... retrying, retrying, retrying, giving up. Raising exception [73, NFS mount error [opterr=mount] failed with return code 32
[16:56:54] <deunnero> yay something to google. Thanks johnelse :D
[16:57:30] <rsrevord> thats a already thinks its mounted
[16:57:32] <rsrevord> i believe
[16:58:56] <johnelse> I think the storage backend just shells out to mount.nfs, so it might be quicker to test that manually
[17:04:52] <deunnero> When I'm adding it... I'm clicking on the pool name... and not each one individiually. Not sure if that matters
[17:05:13] *** stormlight has joined #Citrix
[17:05:35] *** Bsony_ has quit IRC
[17:06:53] <deunnero> Think I may have figured it out... need to take off the root squash
[17:08:18] *** stryx` has quit IRC
[17:16:10] *** stryx`_ has joined #Citrix
[17:34:16] *** cocoa117_ has quit IRC
[17:58:36] <uncon> David62277: not w/o a core....
[17:59:02] <tabularasa> coward
[17:59:53] <uncon> a crash without a crash is like... obviously a power failure
[18:03:19] *** kiste has quit IRC
[18:15:58] <deunnero> Press enter to shut down....
[18:17:49] <David62277> sorry was afk... uncon... uptime said 75 days after the "restart"
[18:18:14] <David62277> but on the dashboard said it had been up since 10/29 when the problem happened
[18:22:42] <uncon> have you uploaded a 'show techsupport'?
[18:23:37] <uncon> David62277: also, check 'stat ns' for the uptime
[18:23:40] <David62277> yep... uploaded the 400MB+ file to taas. only issues are security related (ie: shellshock and sslv3
[18:23:46] <uncon> case #?
[18:24:06] <David62277> 64285087
[18:25:25] <David62277> stat ns shows: Up since Wed Oct 29 19:56:24 2014
[18:25:43] <uncon> David62277: Oct 29 15:56:13
[18:25:55] <David62277> uptime shows: 12:21PM up 82 days, 15:01, 1 user, load averages: 1.05, 1.01, 1.00
[18:26:00] <uncon> is that when it crashed?
[18:26:04] <David62277> yes
[18:26:31] <David62277> assuming stat ns is GMT or something
[18:27:26] <David62277> lol time change must have thrown ns off... on the dashboard it used to say up since Wed Oct 29 15:56... now says 14:56
[18:28:33] <uncon> yup, NSPPE crashed and there is no core file ):
[18:28:50] <David62277> so no way to determine why?
[18:29:08] *** xSnakeDoctor has quit IRC
[18:30:31] <uncon> well, depends on how good you are a finding needles in haystacks
[18:31:31] <David62277> could have been power failure?
[18:33:09] <uncon> nope
[18:33:14] <uncon> this will be some work
[18:33:17] <David62277> though if that happened id expect a lot of things would have gone down
[18:33:40] <uncon> no, NSPPE clearly crashed
[18:34:01] <vegbox> Anyone leveraging XenDesktop with vSphere SRM?
[18:34:17] <David62277> what is SRM?
[18:34:26] <David62277> we have XenDesktop on ESXi
[18:34:29] <vegbox> Site Recovery Manager?
[18:34:42] <David62277> oh... not that i know of
[18:34:46] <tabularasa> Who is going to Summit?
[18:35:14] <vegbox> i liked it when synergy and summit were together
[18:35:15] *** xSnakeDoctor has joined #Citrix
[18:35:17] <vegbox> Must more swag
[18:35:18] <vegbox> lol
[18:35:21] <David62277> uncon any commands i can run to get any info?
[18:36:01] <uncon> JUST HOLD ON! (:
[18:36:05] <David62277> lol ok
[18:36:35] * deunnero regrets uninstalling the NFS package on this nas
[18:36:39] <deunnero> it won't reinstall lol
[18:38:03] <tabularasa> vegbox: big time..
[18:38:22] <vegbox> yeah
[18:38:26] <tabularasa> not doing any SRM
[18:38:28] <vegbox> im going to skip next years synergy
[18:38:47] <vegbox> the last two synergys felt exactly the same with less stuff and no free bagpack
[18:38:58] <David62277> no backpack?
[18:39:11] <tabularasa> this year summit you get to choose apparal item or backpack
[18:39:16] <David62277> thats the only reason i ever wanted to go...
[18:39:18] <David62277> :P
[18:40:12] <tabularasa> lol
[18:40:22] <tabularasa> i have 2... i'm getting an apparal item this year
[18:41:17] <David62277> cant even find those citrix backpacks on ebay... ive wanted one for years, but never able to go to synergy. hell at my last company the other citrix guy won a free pass from citrix... company wouldnt pay for his flight
[18:42:36] <uncon> David62277: upgrade
[18:43:06] <David62277> thats what they told me last time... was on 116 or something... was crashing. they told me to upgrade to 126
[18:43:42] <vegbox> lol
[18:43:46] <uncon> David62277: probably Issue ID 482413
[18:43:47] <vegbox> i am going to vmworld next year
[18:44:13] <uncon> David62277: well, when you hit a bug, that is THE answer...
[18:44:36] <uncon> either upgrade or... wait for a fix then upgrade
[18:44:53] <uncon> and, of course, crashes are always bugs
[18:45:20] <David62277> holy shit... ADC fails when it receives ICA traffic from metro receiver client?
[18:45:24] <David62277> that the one?
[18:45:47] <uncon> David62277: there is a partial stack trace included in the logs, and based on that, you hit Issue ID 482413 which is fixed in 10.1 Build 129.11
[18:46:20] <uncon> yeah, but i think it's actually a unicode/appflow issue
[18:46:52] <David62277> so anyone hits the netscaler from a metro receiver client and it can crash it (or will definitely crash it?)
[18:47:05] <uncon> i think it's actually a unicode/appflow issue
[18:47:09] <David62277> disable appflow?
[18:47:19] <uncon> just happens to be triggered by the metro client
[18:47:23] <uncon> upgrade!
[18:47:57] <David62277> bah... i hate upgrading... always have to re-do all the customizations... ill run it up the chain. thanks man :)
[18:48:08] <uncon> or, don't use unicode in the client name?
[18:48:20] <uncon> but, few people actually control their clients (:
[18:48:36] <David62277> yeah thats not happening...
[18:50:18] <David62277> why is it normal citrix support is useless and can't find this stuff? they always escalate, and then the new person will send an email, i'll respond... and never hear from them for days/weeks/months. uncon they need to give you a raise and more vacation time or something
[18:50:41] <uncon> heh, i just got back form 3 weeks off (:
[18:51:00] <David62277> nice... go anywhere?
[18:51:28] <uncon> NICU mostly
[18:52:10] <David62277> had to google that... everything ok?
[18:52:42] <uncon> yeah, everyone's home and healthy now, thank you
[18:53:01] *** Bsony has joined #Citrix
[18:53:01] <David62277> good to hear :)
[19:02:28] <David62277> i have a meeting in an hour... ill see when i can get a window to upgrade the netscaler.
[19:02:31] *** MartynKeigher has quit IRC
[19:03:15] *** MartynKeigher has joined #Citrix
[19:03:18] <David62277> typical upgrade right? have to disable the custom gateway page, upgrade, then re-create the customization file/set it back to custom
[19:18:10] <David62277> last time i upgraded the netscaler i guess there was a line maxaauser or something in the ns.conf file... was set to 500... netscaler did NOT like that at all... gateway was gone
[19:18:43] <vegbox> I just upgraded to 10.5
[19:20:40] <David62277> i have 10.5 on a vpx in my test environment... gui is a bit confusing compared to 10.1
[19:22:59] <David62277> uncon... would you recommend i upgrade to 10.5 build 53.9?
[19:23:58] <uncon> hm....
[19:24:06] <uncon> you should upgrade to 10.5 at some point...
[19:24:18] <David62277> thats what im thinking... going to get there eventually
[19:24:58] <David62277> can i go from 10.1 build 126.12 straight to 10.5 build 53.9
[19:26:08] <vegbox> yeah
[19:26:10] <vegbox> I did
[19:26:14] <vegbox> Worked fine
[19:26:20] <uncon> yes
[19:26:37] <David62277> any gotchas other than the custom gateway page that id have to look out for?
[19:26:38] <vegbox> I like that it uses less java
[19:28:40] <uncon> yeah, enjoy not having to use java
[19:29:15] <David62277> is there any way when i call citrix support for them to just hand me over to you ;)
[19:31:08] <vegbox> still uses java for the upgrade wizard
[19:31:09] <vegbox> lol
[19:41:36] *** Lucasje has quit IRC
[19:42:00] <David62277> i always upgrade through commandline
[19:42:15] <David62277> run into too many issues going through the gui
[19:42:42] <rsrevord> i've yet to get uncon via support, i keep trying tho
[19:43:09] <David62277> unless uncon has an indian accent i doubt ive ever spoken to him on the phone
[19:43:45] <uncon> i cost extra
[19:44:03] <uncon> unless your'e nice to me on IRC (:
[19:44:09] <David62277> ;)
[19:44:31] <David62277> what level of support do we need to upgrade to? ill hit the powers that be up on it
[19:44:38] <David62277> they probably wont approve it, but cant hurt to ask
[19:44:49] <uncon> TRM
[19:45:10] <uncon> but, ask me again in 6 mo
[19:45:25] <David62277> always in flux over there huh
[19:45:36] <uncon> no...
[19:45:52] <David62277> or they moving you?
[19:46:04] <jduggan> rhymes with flux
[19:46:23] <uncon> pavilion?
[19:46:31] <rsrevord> hrm, do they have beer deliveries there where you live uncon? we can redefine nice :)
[19:47:03] <David62277> yeah uncon if you ever make it over my way i owe you a night out
[19:47:14] <uncon> it's a long, unexciting, and confidential story
[19:47:33] <rsrevord> well we hope the story ends with you out on top uncon
[19:47:54] <uncon> i've got a while before retirement
[19:48:01] *** GentileBen has quit IRC
[19:48:21] *** GentileBen has joined #Citrix
[19:48:40] *** GentileBen has quit IRC
[19:49:01] *** GentileBen has joined #Citrix
[19:49:09] *** kevjr has joined #Citrix
[19:49:17] <David62277> i have some fun stuff coming up (netscaler stuff) our current config is 2 netscalers - one here and one at our colo site - setup for fail over gslb (basically switches dns around if the one here goes down)... going to be moving the colo netscaler here and doing the ha pair thing as soon as our DR stuff is all moved into vmware's cloud
[19:49:54] <David62277> then throwing a netscaler vpx in the vmware cloud and re-configuring gslb
[19:50:17] <rsrevord> sigh, i can't wait until all my clients upgrade to 10.5.x
[19:50:31] <rsrevord> 10.0 build and java is pissig me off
[19:50:43] <vegbox> i love 10.5
[19:50:54] <vegbox> but i need to upgrade to enterprise to get the http dos protection
[19:51:07] <vegbox> damn slowloris keeps coming up on penetration tests
[19:52:13] *** xSnakeDoctor has quit IRC
[19:54:08] *** makson has joined #Citrix
[19:54:10] <rsrevord> least your getting them, most wont :(
[19:54:23] <rsrevord> reminds me i gotta rekey my ssl cert in the lab its still sha1
[19:54:34] *** LouPetridish has joined #Citrix
[19:54:39] <LouPetridish> Hi everyone
[19:56:12] <LouPetridish> Anyone ever move Citrix hosts from 1 vCenter to another vCenter and then get the following error: "could not retrieve the network with reference [network-249] as it no longer exists?
[19:56:59] <vegbox> netscalers still have the changecipherspec injection vulnerability
[19:57:03] <vegbox> citrix denies it :(
[19:57:26] <vegbox> LouPetridish, did you recreate your host settings?
[19:58:13] <LouPetridish> I went into the hosting and repointed them to the new vCenter but when I try to create machine catalogs or update the machine it throws that error
[19:58:43] <LouPetridish> I noticed that if I remapp the storage it works fine, but I can't do all that while in product with tons of published apps
[19:58:59] <LouPetridish> *production
[19:59:17] <vegbox> hmm
[19:59:28] <vegbox> i believe you might have to do a bit of powershell
[19:59:39] <vegbox> to get the right ids for the resource/network
[20:01:55] <rsrevord> ok interesting question: anyone know if its possible to have a netscaler send an alert on auth failuers? syslog / etc are all managed by uncooperative pepoples
[20:02:28] <rsrevord> kinda thinking maybe a specific snmp alert?
[20:02:52] <LouPetridish> sorry
[20:03:10] <LouPetridish> brb
[20:03:13] <LouPetridish> got citrix support
[20:03:18] <LouPetridish> i think i have to remap
[20:03:48] <rsrevord> no worries mostly thinking "outloud"
[20:04:21] <|Atum|> [10:57:04] vegbox citrix denies it <-- after 10.5.53.x?
[20:04:32] <|Atum|> i think the update only applied to sdx/mpx
[20:04:44] <|Atum|> would file that under "known" for vpx
[20:05:17] <vegbox> yeah
[20:05:23] <vegbox> if you do, openssl version
[20:05:29] <vegbox> it still uses 0.9.8y
[20:05:40] <vegbox> which is still afflicted according to CVE-2014-0224
[20:05:49] <LouPetridish> sorry vegbox i think your right
[20:06:15] <vegbox> rsrevord, i have solarwinds lem
[20:06:20] <vegbox> and it reports failed auths for me
[20:06:20] *** extor has quit IRC
[20:06:31] <rsrevord> kewl so its def possible
[20:06:47] <rsrevord> the problem here is the solarwinds group and ctx groups catfight
[20:06:48] <vegbox> a must for my org
[20:07:01] <rsrevord> snmp alerting must for any org
[20:07:11] <LouPetridish> how do you like solarwinds? i just went with eg innovations monitoring
[20:07:12] <vegbox> i have solarwinds npm as well
[20:07:19] <vegbox> its okay, if i could go back in time i would not purchase
[20:07:24] <vegbox> lem is awesome
[20:07:25] <vegbox> for compliance
[20:07:32] *** extor has joined #Citrix
[20:09:54] <uncon> vegbox | netscalers still have the changecipherspec injection vulnerability
[20:09:57] <uncon> vegbox: what?
[20:10:04] <LouPetridish> Vegabox you were talking about XDHyp:\HostingUnits\ powershell?
[20:11:30] <vegbox> Yeah
[20:11:33] <vegbox> For both
[20:11:51] <uncon> vegbox: that openssl vuln?
[20:11:58] <vegbox> yeah
[20:12:09] <vegbox> man in the middle attack?
[20:12:10] <uncon> how does that affect the NS?
[20:13:27] <vegbox> Regardless of whether the server is exposed internally or
[20:13:27] <vegbox> externally, if an attacker is able to obtain a privileged position
[20:13:28] <vegbox> between a client and this server, it may be possible to read all
[20:13:28] <vegbox> sensitive data that is passing between the two hosts by abusing
[20:13:28] <vegbox> this flaw.
[20:14:33] <uncon> NS doesn't rely on openssl for any network traffic
[20:14:52] <rsrevord> just for cert conversions right?
[20:15:03] <uncon> manipulation, etc... yes
[20:15:16] <rsrevord> excellent i knew something!
[20:15:59] <uncon> also, patches that may or may not increment the version number are applied to address issues such as these
[20:19:17] <LouPetridish> well im screwed
[20:19:31] <LouPetridish> citrix support said that moving from cluster to cluster isn't supported in mcs
[20:19:37] <LouPetridish> time to recreate everything i guess :(
[20:29:08] <rsrevord> more reason to double think PVD
[20:33:03] *** klick_ has joined #Citrix
[20:42:26] <|Atum|> LouPetridish citrix support said that moving from cluster to cluster isn't supported in mcs <-- its not supported but if you're witty with powershell you can do it. realistically the EASIEST way is to move your existing resources from one hosting unit to another
[20:45:32] <tabularasa> uncon: 3 weeks off of NOT vacation.
[20:45:54] *** hspcd has quit IRC
[20:46:49] <rsrevord> tabularasa: your move all done right?
[20:46:52] <uncon> tabularasa: well, PTO nonetheless
[20:47:13] <tabularasa> rsrevord: yeah i'm all moved in. It almost feels like home now
[20:47:20] <tabularasa> uncon: yeah, glad to hear everythings good though.
[20:47:31] <uncon> yeah, me too! thanks.
[20:48:31] <rsrevord> tabularasa: excellent, i got my desk about 90% built
[20:48:44] <rsrevord> not as exciting as a new house but great for me
[20:49:43] <uncon> hah
[20:49:55] <uncon> it's way easier to move into a new desk than a new house
[20:50:21] <rsrevord> uncon: 5 kids here, it took us a year before we felt moved in
[20:50:44] <tabularasa> good god, i bet
[20:50:57] <deunnero> is there an NFS test for windows to see if it's citrix or the NAS just being stupid lol
[20:52:12] <vegbox> yeah
[20:52:16] <vegbox> so ns is still vulnerable lol
[20:52:46] <uncon> vegbox: hows that?
[20:53:24] <rsrevord> anyone doing autolaunch apps with SF 2.6?
[20:53:40] <uncon> IF the bin is unpatched AND you log in to the shell (with root), then you COULD use openssl to open a server/port at 127.0.0.1 and finally config the NS to LB to that IP?
[20:54:47] <vegbox> lots of work
[20:54:55] <uncon> and IF's
[20:55:07] <uncon> you could do much worse much more simply
[20:55:08] <vegbox> but the vuln. still shows on my assessments :(
[20:55:13] <uncon> it's wrong
[20:55:20] <vegbox> all my vp cares about
[20:55:25] <uncon> probably just checking the ver number
[20:55:34] <uncon> which is a dumb way to check for vulns
[20:55:55] <tabularasa> heh, pretty much
[20:56:24] <vegbox> yeah
[20:56:55] <uncon> so... you're barking up the wrong tree
[20:57:02] <uncon> talk to whoever is "testing" for vulns
[20:57:13] <uncon> tell him to exploit it....
[20:57:16] <vegbox> digital defense :(
[20:57:18] <uncon> THEN we have something to talk about
[20:57:38] <tabularasa> nessus ftw
[20:58:52] <uncon> sounds like someone saying nexus with a slur
[21:00:54] <tabularasa> heh
[21:00:58] <tabularasa> nessus is pretty amazing/scary
[21:01:59] <vegbox> have you used other companies?
[21:02:00] *** unop has joined #Citrix
[21:02:20] <tabularasa> you mean other products like nessus
[21:02:21] <tabularasa> ?
[21:10:57] <LouPetridish> yeah i wanted to get PVD in my environment but my budget got cut
[21:11:41] <LouPetridish> ill have to look into the powershell move from cluster to cluster, im sure it's possible just have to find out how
[21:20:56] *** klick_ has quit IRC
[21:27:52] *** klick_ has joined #Citrix
[21:34:06] *** DavidF has joined #Citrix
[21:36:28] <rsrevord> yay
[21:42:31] <tabularasa> :)
[21:45:06] <tabularasa> i'm out. laters
[21:45:22] <rsrevord> later
[21:45:33] <DavidF> Hey Jarian.. are you around?
[21:46:15] <rsrevord> gotta say his name 2 more times i think
[21:46:23] <DavidF> lol :-)
[21:50:38] *** SYS_NOOB has joined #Citrix
[21:57:06] <deunnero> lol
[21:57:53] *** klick_ has quit IRC
[21:59:35] *** kevjr has quit IRC
[22:00:08] *** klick_ has joined #Citrix
[22:29:25] <David62277> crap... uncon you there?
[22:30:10] <David62277> Connection limit to CFE exceeded - cant logon to netscaler via wi or shell
[22:36:43] <deunnero> booooooooo adding nfs still not working... but I did find a showmount -e command
[22:37:06] <deunnero> I changed the host to 10.10.10.0/24
[22:37:07] <David62277> hmm might have been the hdx insight thing
[22:37:25] <David62277> do those logons timeout on the netscaler or do i need to physically reboot it?
[22:38:04] <David62277> ahh i guess they timeout ;)
[22:41:08] <rsrevord> yup
[22:44:57] <David62277> did they change the path to the files to customize the gateway in 10.5?
[22:45:32] <rsrevord> no still the same i believe, but tbh haven't customized a 10.5
[22:45:44] <rsrevord> thats in 2 weeks :)
[22:46:24] <|Atum|> any tips for autocad 2014 + UPM (Non-persistent VMs)
[22:46:34] <|Atum|> (i.e. is there any crap in \AppData\Local I need to pick up?)
[22:46:36] <|Atum|> or registry
[22:46:46] <rsrevord> YES
[22:46:55] <rsrevord> they cache drawings there
[22:47:02] <rsrevord> so make sure that the users aren't doing that
[22:47:04] <David62277> hmm used to be able to go to /var/ns_gui... now have to go to /var/netscaler/gui/vpn
[22:47:30] <rsrevord> i dn't have the keys handy atm |Atum| thankfully client actually had that info in a doc but i forgot to walk away with a copy
[22:48:01] <rsrevord> but some have a autocad document server that they check in and out of so then you can ignore the autodesk cache
[22:51:02] <|Atum|> [13:47:02] rsrevord so make sure that the users aren't doing that ,<-- make sure the drawings arent picked up by upm?
[22:51:03] <|Atum|> or area
[22:51:05] <|Atum|> are*
[22:52:04] <rsrevord> if they have the sharepoint server for autocad or whatever its called (i forget the name)
[22:52:10] <rsrevord> UPM can exclude the folders
[22:52:24] <rsrevord> cause when they exit the drawing its auto saved back up to the repository
[22:52:47] <rsrevord> hrm, can't you edit the network connections used by hosting resources within XD7.6 or is that powershell only?
[22:53:53] <|Atum|> the editing is ver basic
[22:53:55] <|Atum|> what are you trying to do
[22:54:11] <rsrevord> admin setting up hosting bound the wrong nic for XS
[22:54:21] <rsrevord> so all the provisioned vm's come up on wrong network
[22:54:27] <rsrevord> i can fix the provisioned ones manually
[22:54:31] <rsrevord> thats not a problem its new ones
[22:54:50] <rsrevord> everytime i hit this i keep thinking i can do it via the ugi
[22:55:11] <rsrevord> can't wait for summit i got two requests i hope that everyone agrees with
[22:55:57] <David62277> ok i shutdown our hdx insight device... still getting Connection limit to CFE exceeded
[22:57:13] <rsrevord> David62277: where are you seeing that error?
[22:57:28] *** KaiForce has quit IRC
[22:57:37] <David62277> when i try to logon to the netscaler wi
[22:57:55] <rsrevord> can you ssh into it?
[22:58:10] <David62277> on the forums it said something about hdx insight causing too many connections... so i shut it down
[22:58:21] <David62277> was getting access denied when i did that
[22:58:25] <rsrevord> not seen that but its possible
[22:58:29] <rsrevord> eeek
[22:58:34] <rsrevord> what version ns?
[22:58:34] <David62277> but after shutting down the hdx insight it lt me logon again
[22:58:42] <David62277> but now it is doing it again
[23:00:20] <David62277> maybe it was because i transferred files to it using tunnelier (customizing the gateway wi)... maybe it authenticates at every file transfer?
[23:06:55] *** thomas123 has joined #Citrix
[23:07:44] *** klick_ has quit IRC
[23:08:24] <thomas123> got a question about xendesktop 7.x when i installed vda on a 2012 r2 server, i can no longer access server manager. does the install change the local security policies?
[23:14:11] *** GentileBen has quit IRC
[23:17:45] <rsrevord> no just removed the icon from quicklaunch
[23:19:11] *** SpideR^^ has joined #Citrix
[23:22:16] *** SpideR^ has quit IRC
[23:25:30] <thomas123> rsrevord - that's what i thought and what i've seen before. i have one server that context menu, search, run, server manager, and everything is locked out/missing completely. must be something funny in the local security policies
[23:27:11] <vegbox> is there a way to limit the time a user has access through the netscaler gateway?
[23:30:58] <rsrevord> thomas123 got me stumped your sure a local admin yes?
[23:32:23] <rsrevord> vegbox: like they can only login during in scheduled work hours?
[23:32:50] <vegbox> Well, for example, they can login from 8AM to 12PM
[23:32:53] <thomas123> yeah. i think the server build is hosed. someone had their sticky little fingers on this server before it was given to me i think.
[23:32:55] <vegbox> but at 12PM i want to boot them off
[23:33:22] <rsrevord> thomas123: seems likely
[23:33:39] <rsrevord> vegbox: so at 12 disable logins and log em off?
[23:35:06] *** deunnero has left #Citrix
[23:38:09] <vegbox> yeah
[23:38:21] <vegbox> only for a particular user or group of users of course
[23:42:14] *** thomas123 has quit IRC