Diary of a Network Geek

ten year old can do it!
Get Microsoft certified, that is. At least, according to this story on SeattlePI.com, that’s all the life experience you’ll need to get certified. Arfa Karim Randhawa from Pakistan is the youngest Microsoft Certified Professional, so far, and she recently composed a poem honoring Bill Gates and his life achievements, which even I have to admit are admirable. Apparently, little Arfa is a very promising programmer, Microsoft certification not withstanding, and had some interesting ideas about self-navigating cars that some of the Microsoft top brass were interested in hearing. And, of course, all the nice publicity of Gates meeting the youngest member of the collective.
Anyway, I’m not sure if this is a statement about how easy it is to get Microsoft certified, just how smart 10-year-old girls are, or how slow the average Windows IT professional is, but it tickled my funny-bone. And, I would like to note that the youngest Novell Certified professional wass 12 when he got certified. Much more challenging.

Man, I hate to admit this…
But, my home network is illin’, yo. I have run Netware at home for years. My firewall has been Bordermanager, because who the heck knows enough about it, besides me and the guys at Novell, to crack it? Yeah, yeah, I know, security through obscurity is a Bad Thing, but sometimes it does work. Anyway, I have one Netware server that crashes hard with the slightest power fluctuation, even with line conditioners in place. Just the littlest bit of power blip makes it shutdown. Not reboot, mind, but shutdown. And, several weeks ago when it did that, the data volume took a dump and never came back. I have no idea how much data I lost there, or how mad my wife is going to be because of the data she lost there, but I don’t think it’s coming back this time.
So, that got me thinking… Why should I stick with Netware? I’m more of a Linux guy now anyway, so maybe it’s time to look into Linux firewalls.
Any suggestions? And, anyone have any suggestions for ways to try and recover that crashed Netware data volume?

Well, I survived the daytrip to New Orleans.
Barely. Not that the flight was bad, because my boss is actually an excellent pilot and the weather was good. In fact, it was better than most commercial flights I’ve taken, except for the fact that I felt like I couldn’t take a nap. I learned a long time ago to work hard while I was on-site and sleep on the plane.
No, the problem was the “little” problem I thought I was going to fix. See, what I thought was a little problem with some spam e-mail turned into virus hell. Of course, I prepared for that and I brought a copy of our Symantec Corporate Anti-Virus to install. No problem, right? Wrong. When I installed it an old version of Norton Anti-Virus was still installed and the resulting conflict led to the dreaded Blue Screen of Death on the server. Not good. So, I finally get that worked out and discover that the machines are all in a workgroup. None of them sign into the Domain on the server. That meant going from machine to machine and installing the anti-virus program by hand on each one, which, of course, I did. All day long, until about 6:00pm when a break in the weather sent us scooting home.
We got in about 8:30pm, which got me to my door at about 9:15pm, or so to find a puppy with her little legs crossed! I sent a friend who has a key, in case of emergencies, over to let her out, but she was afraid of him and wouldn’t do anything. Silly dog. Just like always, she’s daddy’s girl and wouldn’t do anything for anyone but him. Gotta’ admire that loyalty, even if it’s a little co-dependant.

Advice from your Uncle Jim:
"It's better to keep one's mouth shut and be thought a fool than to open it and resolve all doubt."
   --Abraham Lincoln

I love Dr. Suess, but all he did was inspire the title.
I have two concerns this week: Linux servers and security. I’ve installed a test RedHat server and configured Samba on it, so now I can start testing how the accounting system will run from a mapped Linux drive. And, I’ll be testing the custom, in-house app that gives us our competitive edge. I’ve got server spec to get to the boss, when he’s in the office again, but I’m still waiting on pricing for a Linux-based backup system. It was actually much easier to get setup than I thought it would be. Though security may be an issue, since, essentially, Samba emulates Windows sharing on a Linux platform.
Security is my second issue. There’s a basic firewall in place on the router, but I don’t think that’s enough, especially if we want to block “adult” sites. And, since we do actually have a policy against that sort of thing, we do. So, eventually, I need to get that all spec-ed out and installed, too. And tested. Yeah, a little scan against our outside link would be interesting to look at, especially if I do it before and after. Ah, well, that’s down the line. First, I have to get the server upgraded.
Oh, and I still need to evaluate Novell’s Open Server on Linux before I decide which way to go for an OS on the new server. I know I want to avoid a Microsoft product, if at all possible. Frankly, it looks like it should be a real possibility. It all depends on how testing goes this week, so we’ll see. That and getting a CD burner at the office so I can burn the demo ISOs and install them.
Then, there are all the “little” projects that everyone keeps bringing me, not to mention all the nice G4s and assorted Macintrash… Ah, the work of a one-person IT department is never done. But, somehow, having easily defined goals makes the work more fulfilling. I know where I’m going and how I’m going to get there, so it’s all okay.
(The Suess book, by the way, was One Fish, Two Fish, Red Fish, Blue Fish and a childhood favorite.)

Looks like I’m going to be a Unix admin!
Yeah, it definately looks like we’ll be using some form of Linux at the new place. If not Novell’s Open Enterprise Server on Linux, then Red Hat Advanced Server. Of course, I’ll end up running SMB as a Windows PDC, for the login scripts, but, hey, at least I can do it! And, it almost sounded like the boss was actually leaning toward Novell’s solution. It actually worked out to be about the same, cost-wise, as Red Hat. Though, the Novell pricing doesn’t include any support if anything went wrong. But, I suppose we could pay by incident. I mean, I hardly ever call Novell anyway these days. Their online knowlegebase has most of the answers I need.
And, of course, there’s all the Mac and OS X stuff, too. That’s BSD, essentially, with a Mac X Windows front end. Funny, it all comes around to that GUI, doesn’t it? All point and click. Oh, for the good, old days when all we had was a command prompt and we were darn lucky when we got that! These kids today don’t have any appreciation for what a good command prompt can do. Why, I remember, back in the “before time”, messing around on an old HP-UX system and figuring out how to read mail from reading the man file! So, here I am, again, back where I started, about to become a Unix admin again.

Cool.

No, I don’t have a girlfriend.
No, I met the “Senior Partner” from Louisiana today. Apparently, he’s done some checking up on me with former employers. He mentioned Kirby by name and talked about people in management there. Not sure who he talked to, but they seemed to have liked me okay because he said they had nice things to say. Sort of interesting, considering the somewhat dubious circumstances under which I left that job. Well, I guess I did better at not burning bridges there than I thought! Yea for me!
I’ve been doing a lot of research into moving from Windows NT to some version of Linux this week. It actually might be easier than I thought. For one thing, I’ve been looking at Novell’s Linux solutions and they have several options, all of which use a migration tool that seems workable. It’s actually a Windows server “consolidation” utility which they meant for admins to use as a way of merging several Windows servers into fewer Novell servers. It sounded a little clunky, but it was free with the software. The other option was something called LSP from DAS Technology. LSP Pro, which showed on the site as costing $500 per instance, would migrate everything for me, automatically, and also add management tools for the long term. Not a bad option and it would be an easy upgrade to RedHat. I think I could make that work, if I can convince them to spend the money.

In other, totally unrelated news, I took my dog for a walk just a few minutes ago. She was so scardey of the little, tiny dog that we met I thought she was going to wet herself. Some fierce watchdog I’ve got. Ah, well, at least she’s lovable and always happy to see me when I get home. It’s the best unconditional love I’ve gotten since I left my parent’s house. I miss my mommy sometimes. I really ought to investigate those dog parks I wrote about some time ago. I just haven’t had the time with all the chaos in my life. Ah, well, one day soon it will all calm down. I hope.

Well, I survived my first day at the new job.
Oh, what’s that? New job? Oh, didn’t I mention it before?
Yeah, okay, there’s a funny story behind that. Well, there’s a story behind that which involves things like lawyers and teenagers and medical insurance and divorce. Come to think of it, it’s not a very funny story at all. But, I hope that it will be one day.

Anyway, I’m the IT Manager at a new company called SeaTrax now. We make cranes. Big cranes that are based on big platforms in the ocean. It’s actually pretty cool. It’s a Windows shop, but, well, nothing’s perfect. With any luck at all, I’ll be able to convert them to either a Linux shop or a Novell shop, or both!
It was a long, hard day trying to set priorities, so when I got home, I microwaved some chicken-fried steak and gravy followed by a dessert of Krispy Kreme mini-crullers. And, I washed it all down with a Sam Adams. Yes, even the Krispy Kreme! (Hey, back off! It was a long day!) And, my sweet doggie was so happy to see me when I got home, I let her lick off my dinner plate. She loves gravy!
Anyway, all I managed to do was get a rudimentary “To Do” list put together. Actually, I even stole that idea from a faithful reader, BlueCube. But, here it is anyway. Feel free to make suggestions!

Jim’s Great Big, Enormous To Do List of Doom

Short Term
* Get specs for hardware for server upgrade
* Figure out solution for PeachTree for server upgrade
* Figure out OS for server upgrade
* Document security layout for new server
* Order enought Backup tapes for Full GFS at for every backup server
* Tape Inventory & sign out
* Tape backup courier or a whole new scheme for backupadmins
* Clean up Edirectory
* Clean up data junk on servers
* Clean up active directory

Long Term:
* Address Windows Server Updates
* Work out Tape Cleaning procedure for all backups
* Upgrade Anti-virus software and automate
* Figure out Name Changes and write up procedures
* Figure out to do with multi-user accounts
* Create New user/change form
* Write backup procedures guidelines
* Write anti-virus procedures
* Write workstation software and hardware policies and procedures
* Evaluate T1/WAN connection, price and reliability
* Come up with plan for “roaming” staff
* Create Firewall maintenance/monitoring guidelines
* Create montly network maintenance procedures
* Create shutdown scripts for server

Blue Sky:
* create monthly newsletter
* Build wishlist for end of budget
* Formulate server percentage uptime
* Clean computer room
* Clean tech room
* Setup IDS system
* Implement PDA synchornization system and standards

After a day and a half, I managed to get my kernel updated.
I’ve been working on a building a Linux machine that we can use to generate our own customized ZENWorks Imaging Boot CD for the past couple of days. Today, just before lunch, I finally got the kernel updated from 2.4.x to 2.6. It was much more challenging that it sounds! I must have run through at least five different documents from various places on the Internet before I finally found one that worked. Oddly enough, it was titled “How to compile 2.6 kernel for RedHat 9 and 8.0 and get Fedora updates“, by Mike Chirico. It did work, however, on the RedHat AS 3.x server that I’m running.
So, now all I have to do if figure out how to create the Novell Linux Imaging Build Script environment. Yeah, right, “all I have to do”.
Well, as a Lodge Brother used to say, I’m getting along “steady, by jerks”!

Not a bad idea.
Here’s something from AustralianIT that makes a lot of sense to me: vendor neutral certification. Okay, yes, I have a Novell certification that I’ve maintained since 1994, but I think the more open or wider certifications are better for the IT industry. Why? Because, in theory, they get us out of the pidgeon-hole thinking that our “pet” OS is the best. Ever heard the phrase, “If the only tool in your toolbox is a hammer, every problem looks like a nail”? Well, that applies to certifications, too. I have to admit that most of my solutions to problems are Novell-centric. I tend to focus on using one of their suite of products because that’s what I know. Lately, I’ve added a reversable screwdriver to my IT toolbox with Linux. And, yes, I have a Linux certification, too. But, that certification is fairly open in regards to what particular version of Linux is being used. Most of what was covered was applicable to virtually any version of Linux, and most versions of Unix.
So, yes, I think this is a good idea. I hope it catches on in Australia well enough that folks here in the States take it seriously. I think it’s the shot in the arm that IT certifications need.

…Really, really excites me!
Novell believes in Linux so much that they’ve added extra support for it in their ZENWorks for Desktops suite of programs. According to this press release on Novell’s website, they’ve added “imaging, configuration lockdown, remote management, inventory and software management” to their software which will enable folks to use Novell ZENworks 7 Linux Management to manage most Linux platforms, including SUSE LINUX and Red Hat* Enterprise Linux. Now, this might not seem like much to some of you, but, trust me, this is a quantum leap forward in the Linux world. Five years ago, I couldn’t hardly concieve of a major networking company doing something like this. Now, I can completely cut Microsoft out of the picture, if I want. I can have Linux desktops and servers all managed with Novell software.
I’m so happy I could just plotz.
And, I have to say that I’m really, really glad that I not only have maintained my Novell certification, but also gotten at least one Linux certification, too. I didn’t know it at the time, but I couldn’t have planned it any better. Once again, my career choices have been affirmed.
Well, off to the uranium mines! Have a very high-tech day!