StevenMcNutt.com

DPM and Hyper-V and iSCSI

Steven McNutt — Sat, 04 Feb 2012 15:24:57 +0000

It seemed like a good idea, and it still seems like a good idea when it works, but when my combination of Data Protection Manager, Hyper-V, and iSCSI gets grumpy, it gives me ulcers.

My recent issue started, as it usually does with this setup, with a power outage. The power went out, and when it came back on all the servers came back up properly. “No Problem”, I thought, however a little bit later I noticed that DPM was having issues backing up the virtual servers on one of the virtual hosts. I tried to kick the backup jobs off manually, but they failed with a VSS error of event ID 12305, “Volume/disk not connected or not found” and that the VSS provider was in a “bad state”. I tried some of the easy things that I found on the ‘net but to no avail. I figured I’d reboot the box and that it would “figure itself out “when it came back up (which is often the case when my DPM backups delightfully start bombing out on a virtual host). This time however, the server came up and my iSCSI virtual machines were gone, unlisted in the Hyper-V manager. Despite the fact that Hyper-V has delisted virtual machines on me several times in the past as well, it never ceases to cause me to question my career choice when it happens.

Investigating, I saw that the iSCSI drive along with the virtual disks were there so my hope was that the VHDs were okay. When Hyper-V was trying to add the virtual machines it was kicking out an error along the lines of an OID that couldn’t be found. Distressed, I decided to just recreate the virtual machines from the VHDs (not a first for me either), however I made the fortunate mistake of letting Hyper-V store the virtual machines in the default directory on the system partition. The first two machines started up fine, but the third kicked out an error that it couldn’t write the memory file. I had forgotten that Hyper-V keeps a swap file of the memory for the virtual machine and I had run out of space for such files on the system partition. I figured that I’d have to recreate the virtual machines, again, but in their original directories on the iSCSI drive. Before I went through that work again though, I figured I would take a shot at modifying the XML config for the servers that I had just created.

It was then in the Hyper-V ProgramData folder that noticed something peculiar – the links to the original non-operational virtual machines weren’t working. When I pulled the directory listing I found them pointing at ‘F:’, but there was a different drive on ‘F:’ and the virtual machine iSCSI drive had been moved to ‘H:’. It turns out that after the power outage the server had decided to snag an unassigned iSCSI drive that was on an attached Netgear ReadyNas box and assign it to ‘F:’. The Virtual Host had worked fine through the week because the drive mapping didn’t take affect until after I rebooted the server. After reassigning the drives my Hyper-V and DPM are happy again, but I’m sure they’ll get back at me eventually.

Suppressing Duplicate Crystal Labels

Steven McNutt — Wed, 19 Oct 2011 21:18:25 +0000

For our file folders at the end of the year we would run a Crystal report that would find all the vendors who were issued payments over the year. These labels would only consist of the vendor name and number (and the fiscal year, but that was handled with a text and parameter field). However, after a large upgrade our Mas90 install (to version ~4.something), the report would duplicate some vendors, and not print others at all. Digging into it I discovered that the report was set to use a table that nominally tracked AP vendor payments per period and that in the past this table kept a cumulative total for each vendor over the course of a year.

In the new version though, the new periods were broken out by months, essentially making the table a dupe of the AP check history table in Mas90. Now when the report was run, a label would be printed for every check issued to a vendor, and as a filter the report left payments out that were less than $100 (which was fine for a whole year, but bad for each month!).

I poked around and after consulting a couple different websites I came up with the following fix:

I put the vendor number field into a group
I suppressed the group header and footer sections (right click->suppress (no drill down))
Went to Report->Selection Formulas->Group
Added the following formula : {AP_CheckHistoryHeader.CheckDate}=Minimum ({AP_CheckHistoryHeader.CheckDate},{AP_CheckHistoryHeader.VendorNo})

What the last line does is it only picks out the first date that the vendor appears. This can still lead to duplicates if the vendor was issued more than one check on that same day, but it’s much better than getting twelve labels for many of the vendors!

(By the way, there might be a better way to do this as I don’t know too much about Mas90, and even less when it comes to Crystal Reports; but I was given the evil eye for mentioning that I could do this up in .Net or, even worse, with an Excel/Word mail merge where the ‘remove duplicates’ function had been used in Excel).

Adobe Patches

Steven McNutt — Wed, 12 Oct 2011 19:59:12 +0000

In the past I’ve had good luck ‘stacking’ Adobe Flash Player installs on top of each other in group policy. For some reason one of the newer versions (10.3.183.7) choked, leaving something along the lines of an ’FP_AX_MSI_INSTALLER’ error in the event viewer. That error led me to this post which stated, more or less, that a computer logon batch file is the best bet (so ’90s!). I implemented the batch file and had no issues getting everyone’s Flash updated (do note though that you’ll need to do a double detect if you have 64 bit systems in your environment as the version key is at “HKLM\SOFTWARE\Wow6432Node\Macromedia\FlashPlayer” on 64 bit systems).

It was at this point that I moved on to Acrobat Reader. I was a little puzzled because I downloaded the latest version (10.1.1), but after installing it, it reported that it was only ’10.1.0′. It turns out the ‘.1′ is a standalone patch that is included with the distribution. Unfortunately, as I’d found with Office 2007, group policy does not do .msp files (msi patch files). Right away I thought of my Flash Player install batch file, but Acrobat Reader (as near as I can tell) does not have a version registry key like Flash Player. I hunted for an easy way out, but finally gave up and wrote a program to return the Acrobat Reader version (based on what’s reported by the installed executable file). You can download the excutable and the batch files that I used for Adobe Flash Player and Acrobat Reader here. (Note: if the computer does not have Acrobat Reader installed, the detector should return the string “NotInstalled”. I didn’t worry much about this detection as I have the batch file in the group policy that installs Acrobat Reader.)

Resetting The Raiser’s Edge Password

Steven McNutt — Sun, 07 Aug 2011 19:27:01 +0000

I notice that Blackbaud now has a utility out that handles Supervisor password resets without going through the faxing rigamarole, but when I had to do this I don’t know if that would have been a big help anyway as my customer A) Needed supervisor access to Raiser’s Edge right away and B) They had fired the one employee who had both supervisor access and was the Blackbaud support user.

The two things I did have though was administrator access to the Raiser’s Edge MS SQL database and the SQL Server Management Studio. My quick and dirty fix was to open the database (re7), open ‘tables’ and then find the ‘USERS’ table (dbo.USERS). I then right-clicked the table and then chose ‘open table’. There is one other thing that’s needed for this procedure at this point: a password that is known. In this case I had the one’s below:

I’ll point out that I put no energy into checking out the hashing code used (i.e., can the PASSWORD field be blank? Are the passwords hashed the same on every RE install?, etc.). In this case all I did was copied the PASSWORD hash field from an account whose password was known to the Supervisor PASSWORD field. (It goes without saying that I also backed the database up first (right click the database->tasks->Back Up…))

Nortel BCM Log Parser

Steven McNutt — Thu, 28 Jul 2011 20:03:27 +0000

I had originally coded this project in VB and never got it into a distributable format. For example, I had all the file paths and database connection strings hard coded. After educating myself a bit on C# I recoded the application in that language, and have the program using LINQ instead of (oof!) OLE. I also now have it coded to accept values specific to a user’s environment via an XML settings file.

What the program does at this point is that it reads the call detail recording logs that are stored in a directory and commits them to an MS SQL/SQLexpress database. For my own purposes I have all the default settings set on the BCM for recording the log files, so if you’ve changed any of these settings this program may not work. As well, I have my logs FTP’d every day to a server share that I can access via UNC (i.e. \\server\logfiles).

I have a little setup menu within the program so that you can create the database, set the settings, and then write the settings out to an XML file for future use. Using the XML settings file the program can be scheduled to run if the XML settings file is given to the program as a variable (ex, NortelLogParser c:\settings.xml).

In the future I hope to develop a web front end for the database, but for the time being you’ll have to use Excel or some other tool to query the database for the information that you want.

Click here to download.

UPDATE: I just noticed (12/14/2011) that the field detection is still a little buggy, and a feature that I added after the fact of associating a record with the file it came out of lags by a day. The program is still better than nothing, but I do have to patch it up a bit when I get some time.

Command Line Argument

Steven McNutt — Mon, 25 Jul 2011 21:13:22 +0000

Firing up the way-back machine, I recalled interfaces from Exchange versions past that would immediately return some nice data, such as mailbox size, item counts, etc. I set out to try and recreate some of these interfaces, but it seemed that a lot of the coding examples were in C#, a language that I wasn’t very familiar with.

Undeterred, I went through some C# lessons and I now have what I hope is a decent “working IT guy’s” knowledge of it’s inner workings. Unfortunately at this point, I can’t exactly remember what I was missing from the past Exchange interfaces that drove me to learn C# to begin with, apart from the table that had the mailbox sizes.

I eventually determined that the Powershell command that I needed was:

Get-MailboxStatistics -server | Select-Object DisplayName, TotalItemSize, ItemCount,StorageLimitStatus,LastLogonTime | Out-GridView”

I figured my C# coding skills would have to apply to something else as I could just as easily put that line into a batch file! For some reason, though, launching the command from a batch file would open the ‘Grid View’, but it would close immediately, so back to C#

I had the program working fine on my desktop, and had it set to either ask for a server name, or accept a command line argument that would contain the server name. For reasons I still don’t fathom, the command line argument wouldn’t work on the Exchange server itself. I eventually had to change the code from:

if (args[0] != null)
ServerName = args[0];

to:

if (args.Length>0)
{
if (args[0] != null)
{
ServerName = args[0];

Which makes more sense, I guess, but I don’t know why the former only worked on the desktop unless there’s some variation of the .Net runtimes between the desktop and server in how they handle command line arguments?

Anyway, if you’d care for a little program that auto-launches this grid view, I’ve posted it here. It includes the user’s display name, their mailbox size, the number of items, and if they’ve exceeded their quota. You may need this note if you get an ‘index out of bound’ error due to the Powershell visual GUI elements not being installed (obviously you’ll need a 64 bit machine with the Exchange Powershell add-on installed).

Remote Desktop With XP

Steven McNutt — Thu, 02 Jun 2011 00:31:33 +0000

Faced with an aging remote access server with dubious patches I wanted to move a little more quickly to a Windows Server 2008 R2 terminal server, but there is an issue: there’s no support for NLA connections within XP out of the box. True, there’s some registry hacks to enable the feature, but I couldn’t have end user’s doing that, so I resolved to write a program to do it for them. It wasn’t until I was almost done that I discovered that, alas, Microsoft had already written one.

I hate to be outdone to that extent so I’m still posting mine here: a zip file which contains a Windows forms version, and a command line version, both of which run remarkably faster than Microsoft’s patch. My program(s) will check to make sure that it’s the proper version of the OS (Windows XP with service pack 3) and that the registry entries need to be added (with visual output). No backups are taken, so use at your own (minimal) risk!

(Although I typically share my code, I must admit to being slightly embarrassed at it’s condition since it’s my first full fledged C# program. I’ll share if I get around to cleaning it up so that it doesn’t look like a VB guy wrote a C# program

Now to patch up all the other Windows XP issues with the Remote Desktop Connection services in Windows 2008 r2….

Contact Forms and WordPress

Steven McNutt — Mon, 16 May 2011 20:42:27 +0000

I’m rebuilding my company’s website around WordPress, but a sticking point is a web contact form. This appeared to be no problem as there’s several nice contact form add-ins for WordPress. However, it didn’t matter which one I used, Contact Form 7, Fast Secure Contact Form, Contact ColdForm, they all didn’t work. I’d hit submit and the page would cycle back (or in the case of CF7, the spinning arrow would just sit there forever). I rebuilt the server by importing the theme and WordPress settings in a different website and the forms worked, until I restored the MySql database.

At that point I knew it had to be one of the dozens of customizations I had done to WordPress that was causing the forms to fail. And after a bit of a search, I found it: my custom permalink. It turns out that although most of the rest of WordPress is forgiving about not rewriting URLs, the contact forms are not. This was on IIS7 so I had to download and install the URL rewrite module and then follow the somewhat cryptic instructions here.

Why Google is Winning

Steven McNutt — Thu, 21 Apr 2011 19:14:01 +0000

So I need service pack 1 for Windows Server 2008 R2, and what better place to find it than by doing a search on Microsoft’s download site (http://www.microsoft.com/downloads)?

Okay, maybe Google will be able to dig up this difficult to find file, which I guess is stored on a thrid party site or something:

Tragedy of the IP Address Commons

Steven McNutt — Thu, 24 Mar 2011 16:50:14 +0000

This story detailing Microsoft’s purchase of Nortel’s IPv4 address blocks has a quote that sums up the IPv4 shortage issue:

The Regional Internet Registries, which allocate IP addresses, do not typically view IP as an asset that can be bought and sold. There are processes being developed for assignees to return unused IPv4 to the free pool, for the good of the internet community.

The ‘good of the Internet community’? Have these people used the Internet?

IPv6 is being billed as the cure-all, but unfortunately there is as of yet far too much legacy technology out there to make discarding IPv4 worthwhile. This has led to a shortage of IPv4 addresses, however, if there was a market available where people could buy or sell the IPv4 blocks that they own it would bring added IPv4 capacity to the market. Even if fully implemented, IPv6′s vast address space merely covers up for the incompetence of the RIR’s management of the address blocks and doesn’t actually address any fundamental flaws in IPv4 (while arguably, creating whole new undesirable issues).

As an example, at my current location we have a whole class C address block (~253 usable addresses) that we acquired back in the day when one would call and request a number of addresses and the IPv4 addresses were handed over with very few questions asked. Most companies this size get by with one to five addresses using PAT and whatnot, but I have the advantage of running an ultra-inefficient Internet setup with huge swaths of dynamic NAT pools, static addresses to equipment that I might need once a year, and a honeypot sitting on top of well over 150 of the remaining addresses. For a price which would justify a move to a more efficient setup under an ISP address block we might be willing to part with them, otherwise there’s no cost justification in having to make the changes.

Due to the existence of large ‘dark IP address blocks’, the current lack of true ownership and transferability of these blocks has led to a shortage of those that can be used, and an Internet ‘slum’ where hackers can hang out in address pools that have gone fallow. There is no real shortage, only a ‘commons’ that has been improperly managed.