March 28, 2019 
< | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | >
March 28, 2019 [00:26:25] *** braynyac <braynyac!uid6699@gateway/web/irccloud.com/x-nvtzxwakkpylssyq> has quit IRC (Quit: Connection closed for inactivity)[02:56:34] *** quantumcupcake <quantumcupcake!~quantumcu@gateway/tor-sasl/quantumcupcake> has joined #Citrix[03:27:06] *** braynyac <braynyac!uid6699@gateway/web/irccloud.com/x-klueegkkvuktiagl> has joined #Citrix[03:27:33] <braynyac> |Atum| - your question was about RDS license server[03:27:45] <braynyac> Use IP, or use local policy.[04:13:00] *** paradizelost <paradizelost!~paradizel@208-107-238-54-dynamic.midco.net> has joined #Citrix[04:16:00] <|Atum|> oh, awesome, thanks[04:31:25] *** quantumcupcake <quantumcupcake!~quantumcu@gateway/tor-sasl/quantumcupcake> has quit IRC (Remote host closed the connection)[04:32:20] *** quantumcupcake <quantumcupcake!~quantumcu@gateway/tor-sasl/quantumcupcake> has joined #Citrix[10:03:15] *** braynyac <braynyac!uid6699@gateway/web/irccloud.com/x-klueegkkvuktiagl> has quit IRC (Quit: Connection closed for inactivity)[12:22:33] *** braynyac <braynyac!uid6699@gateway/web/irccloud.com/x-yxnecvqjalknnlxt> has joined #Citrix[12:48:30] <braynyac> Morning morning[12:48:40] <braynyac> |Atum| did that work for the RDS settings?[13:20:28] *** SuicideJ4ck <SuicideJ4ck!~SuicideJ4@199.4.143.205> has quit IRC (Read error: Connection reset by peer)[13:21:53] *** SuicideJ4ck <SuicideJ4ck!~SuicideJ4@199.4.143.205> has joined #Citrix[13:39:10] *** ftho <ftho!~ftho@mailgw.f-thornberg.se> has joined #Citrix[13:59:54] *** Sigyn <Sigyn!sigyn@freenode/utility-bot/sigyn> has quit IRC (Quit: People always have such a hard time believing that robots could do bad things.)[14:00:27] *** Sigyn <Sigyn!sigyn@freenode/utility-bot/sigyn> has joined #Citrix[14:02:47] *** yuljk <yuljk!~yuljk@unaffiliated/yuljk> has quit IRC (Ping timeout: 272 seconds)[14:02:55] <Biny> morning[14:03:05] <braynyac> Hidey Ho good neighbot[14:03:08] <braynyac> neighbor even[14:03:11] * Biny is a bot.[14:03:15] <Biny> we are all bots on this blessed day.[14:12:56] <braynyac> but I don't want to be a bot <whiny voice>[14:22:01] <Biny> today i get to ocnvince our HR dept. that posting our alarm systems disarm code on a piece of paper by the panel is a bad idea.[14:27:23] <tabularasa> that morning peeps[14:27:55] <Biny> that morning over there[14:28:04] <tabularasa> i'm tired.. update late last night breaking shit. :([14:31:30] <braynyac> D'oh! (to both Biny and tabularasa)[14:32:59] <braynyac> Our plan for Chrome domination with our published desktop is failing. For some reason users are still using IE. I hate it when policies don't apply correctly[14:33:19] <Biny> turn on legacy browser extension :)[14:33:27] <braynyac> we did[14:33:33] <Biny> oh did you forc enable the IE plugin?[14:33:36] <Biny> *force[14:33:40] <braynyac> yes[14:33:43] <Biny> weird[14:33:47] <braynyac> agreed[14:33:55] <Biny> because IE prompts you to "allow" and if you ignore that it just gets to be a nag warnin gthen[14:34:00] <braynyac> If the user opens Chrome, then it "takes over"[14:34:36] <braynyac> and we forced Chrome to open with a GPP setting the user's run once key. Looks like that didn't work[14:35:38] <braynyac> We have Chrome set as Default Browser[14:35:41] <braynyac> so odd![14:36:18] <Biny> the gpo IN chrome for 'set as default' does not set it default[14:36:23] <Biny> you have to do it elsewhere[14:36:25] <Biny> sec[14:36:27] <braynyac> ah[14:36:29] <braynyac> that would make sense[14:37:07] <braynyac> it does set it as default - after you open Chrome for hte first time (is what we are seeing). And that brings us back to your point - setting it as default without Chrome running first[14:37:41] <Biny> I forget which of these two it is[14:37:46] <Biny> https://i.imgur.com/KCyAUX6.png[14:37:49] <Biny> for the IE extension[14:37:54] <Biny> finding the estting we use for chrome[14:47:38] <Biny> not finding it, used to know where it was[14:47:54] <Biny> but we split all of our user/computer into their own gpo's .. and then attached them to random places in the forest[14:50:04] *** yuljk <yuljk!~yuljk@unaffiliated/yuljk> has joined #Citrix[14:56:09] <braynyac> Ok, checked one of the affected user's registry - her default http/https association is Chrome, yet it opens IE for her.[14:56:16] <Biny> @_@[14:56:45] <Biny> i found http://kolbi.cz/blog/2017/11/10/setdefaultbrowser-set-the-default-browser-per-user-on-windows-10-and-server-2016-build-1607/ when i started googling to try and find what we're using, but we're not using that.[15:06:27] <braynyac> Found a couple articles - one to disable IE's check for default browser, and to disable notification if it is not the default. And it looks like the Chrome settings _are_ working, so testing now...[15:06:30] <tabularasa> i'm tired[15:06:49] <braynyac> I've got coffee...I'll send you some =)[15:07:34] <tabularasa> up late breaking shit, wake up early for a stupid interview[15:35:51] *** newzax <newzax!a77f6890@gateway/web/freenode/ip.167.127.104.144> has joined #Citrix[15:35:59] <newzax> morning peeps[15:37:05] <braynyac> I thought that was tab's line? =)[15:37:08] <braynyac> morning[15:40:11] <Biny> tabularasa keeps a pile of peeps under his desk.[15:40:19] <braynyac> ewwwww[15:40:26] <Biny> they're super stale by now[15:40:39] * braynyac throws up a little in his mouth[15:57:13] *** Thuryn <Thuryn!~Thuryn@216.106.72.146.reverse.socket.net> has joined #Citrix[17:24:17] <Biny> fslogix profiles stopped my explorer.exe crash on reconnect \o/[17:35:47] <tabularasa> that is my line.[17:38:48] <Biny> arg.[17:38:57] <Biny> so, we rolled out laptops for select users to use instead of citrix.[17:39:00] <tabularasa> and that sucks[17:39:07] <Biny> theres a department tha ttheir leader promised them laptops a few years ago[17:39:11] <Biny> and insisted that they need them[17:39:15] <Biny> so we got ~7 of htem laptops[17:39:20] <Biny> i just noticed all 7 are on citrix[17:39:26] <tabularasa> haha[17:39:27] <Biny> i asked if something was wrong with their laptop[17:39:30] <Biny> they siad 'no, why?'[17:39:38] <Biny> i asked why they didnt take their laptop with them to the room they're in[17:39:53] <Biny> "because I am using the computer in here"[17:40:06] <Biny> SO WHY DO YOU HAVE A LAPTOP IF YOU DONT NEED TO TAKE IT WITH YOU TO ROOMS[17:40:09] <Biny> ahhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh[17:40:26] <tabularasa> LOL[17:40:53] <braynyac> Biny: are you sure you don't work at my company?[17:41:07] <Biny> so i asked her why she didnt take it with her[17:41:12] <Biny> she siad 'its a laptop, it has to stay at my desk'[17:41:20] <Biny> jsa;jfalk.[17:41:34] <braynyac> ummmm...that logic makes my head hurt[17:41:37] <tabularasa> :facepalm:[17:42:15] <Biny> now shes saying its because she needs the VPN to connect with her laptop[17:42:21] <Biny> and that the vpn is only on her laptop[17:42:29] <Biny> and the vpn isnt installed on the machine in our meeting room (that son our network)[17:42:31] * Biny sighs[17:42:42] <braynyac> "Why don't you drive your car to work?" - "Because it's a car, it has to stay in the garage"[17:44:55] <tabularasa> double :facepalm:[18:09:06] <Biny> aaaaaah.[18:09:13] <Biny> WE ALSO BOUGHT THEM ALL SPARE LAPTOPS IN CASE HTEY FORGET THEM AT HOME[18:21:54] <cs-bot> <apdlmike> oh *wow*[18:40:22] *** steeb` <steeb`!sid169914@gateway/web/irccloud.com/x-nswchshdkfkbpxpq> has joined #Citrix[18:40:28] <steeb`> meh[18:43:07] <steeb`> why the channel set to +r ?[18:43:32] <Biny> always has been[18:43:37] <Biny> well at least recently[18:44:08] <steeb`> i dont remember it, then again i havent been here in a few weeks[18:44:16] <steeb`> i just noticed my irc cloud tab was lonely[18:45:29] <steeb`> the usual crew going to synergy?[18:50:29] <tabularasa> i am going[18:50:34] <tabularasa> +r because of the spam bots[18:50:39] <tabularasa> i wonder if they are gone now[18:50:56] <tabularasa> only for about the past 9 months?[18:51:05] <tabularasa> i'm willing to try and remove it again, i hate that join.citrixirc.com is donw[18:53:00] <steeb`> so fix it[18:53:11] <tabularasa> :D[18:57:34] <steeb`> I'll know next month if im going[19:01:13] *** ChanServ sets mode: +o tabularasa[19:01:51] *** tabularasa sets mode: -r[19:01:55] *** ChanServ sets mode: -o tabularasa[19:01:58] <tabularasa> we'll see how that works[19:25:56] *** Biny is now known as spamBot[19:25:58] <spamBot> HI![19:26:04] <spamBot> BUY MY PILLS![19:26:10] *** ChanServ sets mode: +o tabularasa[19:26:11] *** spamBot is now known as Biny[19:26:29] <tabularasa> /kb spamBot/Biny/wtfever[19:26:33] *** ChanServ sets mode: -o tabularasa[19:34:47] *** Thuryn <Thuryn!~Thuryn@216.106.72.146.reverse.socket.net> has quit IRC (Quit: Leaving)[19:43:09] <braynyac> I'll be at Synergy again this year as well[19:43:38] <braynyac> spamBinyBot - I think you misspelled PILLS...[19:43:52] <braynyac> isn't it normally P1LLS? or P!LL5?[20:00:15] *** ibalerio <ibalerio!~ibalerio@151.193.220.27> has joined #Citrix[20:02:27] <ibalerio> hi guys, little question, my prod netscaler is expiring the Certificates, and I would like to know if I make a renewal of the CA and the cert, should I have an impact on the clients?[20:02:35] <ibalerio> if I use the same key[20:03:57] <ibalerio> or which do you think is the best way to renew the certificates on a netscaler with the less impact on clients? I have really short time and I have 6000 users that connects to these netscaler[20:06:24] <tabularasa> no, that should be fine[20:06:30] <tabularasa> as long as you use the same private key[20:07:26] <ibalerio> tabularasa: Thanks! I will test it in cert first, but I wanted to have a second opinion...[20:08:59] <tabularasa> sure bud[20:19:24] <steeb`> ya use same private key to rekey it[20:19:27] <steeb`> it should just renew it[20:40:01] *** Thuryn <Thuryn!~Thuryn@216.106.72.146.reverse.socket.net> has joined #Citrix[20:41:39] <|Atum|> braynyac: not sure yet, customer unresponsive and wont give me a login :D[20:41:57] <braynyac> roger[20:42:09] <|Atum|> Soon(tm)[20:42:13] <|Atum|> I hope[20:42:22] <Thuryn> so i'm getting these messages on the console for my Netscalers: Limiting closed port RST response from ### to ### packets/sec. "closed port RST response" has reached its limit for this second. First SYN dropped for port ####.[20:42:31] <Thuryn> (The port number changes constantly.)[20:42:58] <|Atum|> they were grateful that we fixed a "GPO fails on boot" due to timesync issue. on boot server was UTC+24h (timezone +12, twice). seems XS was syncing the windows time on boot of windows to TZ rather than UTC, then windows was adjusting +12 as well[20:43:14] <Thuryn> googling mostly returns FreeBSD-related information. not much for netscalers.[20:43:18] <|Atum|> hopefully that buys me good will and access :p[20:43:42] <braynyac> Thuryn: sounds like a port scan against your system[20:44:11] <Thuryn> braynyac, it does to me too, though it doesn't seem actionable at all.[20:44:20] <Thuryn> mainly trying to convince others here that it's nothing to worry about.[20:46:35] <cs-bot> <masterxen> braynyac, your a FSLogix guru aren't you?[20:47:33] <braynyac> not sure guru is correct, although I do have a bit of experience with it.[20:47:36] <braynyac> what's up?[20:47:42] <braynyac> and Biny is getting up to speed quite quickly =)[20:47:43] <cs-bot> <masterxen> will flick you an email[20:47:46] <braynyac> aye[20:58:12] <cs-bot> <masterxen> cheers, will pass on that info[20:58:22] <braynyac> Definitely! Sorry I couldn't be more help[20:58:45] <cs-bot> <masterxen> nah all good, I was just the man in the middle with limited knowledge on that one[21:00:25] <braynyac> right on. Well, I'm out for a while. Gym time, then later we've got scheduled maintenance. Migrating to StoreFront from Web Interface, finally![21:01:37] <Biny> got a $0.00 invoice from fslogix for 300 licenses, hehe[21:08:32] <cs-bot> <david62277> good deal biny[21:25:03] <|Atum|> braynyac: licensing was working all along. Logging in with a non domain user ("Administrator") results in the error message / grace warning appearing[21:25:20] <|Atum|> Logging in with a domain account that was an administrator (who would see the error, if it wasn't working) did not result in an error.[21:42:13] <cs-bot> <apdlmike> Thuryn - yeah that's not generally anything to worry about in my experience. Someone's knocking on ports that aren't open and NS is smart enough to rate limit responses to, among other things, not be used for a reflection attack[21:53:07] *** guideX <guideX!~guideX@unaffiliated/guidex> has joined #Citrix[21:53:32] <Thuryn> apdlmike, yeah, that's how i interpreted it.[21:53:59] <guideX> so someone added a new vm at the pool level, and did the default network configuration, and all three xenservers stopped working, I had to go down there and reboot the xenservers to get them to work/ping again[21:54:10] <guideX> I wonder what causes that kind of thing[21:55:34] <guideX> at least one of the xenservers had lost its network adapter configuration[21:55:44] <guideX> rebooting it, it detected them again[22:01:19] *** Zaxx <Zaxx!~zaxx@2a00:23c4:de9c:8601:653d:1551:b858:78a2> has joined #Citrix[22:03:26] <Zaxx> evening[22:03:43] * Thuryn waves to Zaxx[22:03:50] <Zaxx> trying to upgrade netscaler MPX 11.1 to 12.0[22:04:22] <Zaxx> took the gui root, its been sitting for the past 10 minutes on installns: [1513]: exctracting Pythin...[22:04:29] <Zaxx> python* even[22:05:07] <Thuryn> yeah it takes its sweet time[22:05:12] <Zaxx> i know there used to be an issu with upgrading from 10.5 , but this is 11.1 - any idea how to proceed[22:05:27] <Zaxx> i thought i'll need to stop and try installing from cli[22:05:46] <Thuryn> 10 minutes isn't too long[22:05:51] <Zaxx> oh ?[22:06:00] <Zaxx> ok... i'll brew some coffee :)[22:06:00] <Thuryn> give it more like 30 minutes[22:06:24] <Zaxx> thanks Thuryn[22:10:03] <Thuryn> when i went from 12.0 to 12.1, though, I do remember doing it from the CLI and still having some trouble with it.[22:10:07] <Thuryn> it has been months, though. :/[22:10:41] <Thuryn> but yeah it was a really long process[22:13:55] <Zaxx> still sitting on the same line[22:16:06] <Thuryn> if it hasn't moved at all, yeah kill it and try from CLI.[22:18:09] <cs-bot> <apdlmike> yeah i'm an old curmudgeon and still do firmware updates more or less exclusively from the cli[22:32:21] <Zaxx> still same[22:32:58] <Zaxx> flip - the worry is that the output say - "dont interrupt once it has begun"[22:33:38] <Thuryn> of course it always says that, since that's the safe assumption[22:33:51] <Thuryn> but if it's just stuck during the extraction, it probably hasn't harmed anything.[22:34:22] <Thuryn> also, it's reasonably safe to assume that you can continue to mess with it, so long as you get the upgrade process to complete successfully once BEFORE you reboot the device.[22:48:36] <Zaxx> i'll give it a bit longer , and then if it still not moving i'll stop it and try and do it from the CLI[23:05:10] *** ibalerio <ibalerio!~ibalerio@151.193.220.27> has quit IRC (Ping timeout: 250 seconds)[23:34:26] *** ftho <ftho!~ftho@mailgw.f-thornberg.se> has quit IRC (Quit: Leaving)[23:46:26] <Zaxx> Thuryn, yeah you were right. i closed the gui cli window. open ed putty and started over. it passed that stage after a few minutes, and rebooted ok[23:46:28] <Zaxx> phew[23:46:30] <Zaxx> thanks[23:46:50] <Thuryn> good deal[23:46:55] <Thuryn> you went to 12.0?[23:47:14] <Thuryn> Zaxx, ^^[23:47:32] <Zaxx> went to 12, and now on the way to 12.1[23:48:18] <Thuryn> my 12.0 -> 12.1 upgrade was pretty painless, even considering the cluster.[23:48:46] <Thuryn> i'm trying to remember if I had to upgrade each cluster member separately or not.[23:53:52] <Zaxx> next time i;ll do it via NMAS[23:54:08] <Zaxx> near 11pm here - i am off - thanks again[23:58:50] <Thuryn> take care!