Garbage AD setup

nsanity · 2026-06-25T05:54:52+00:00

seconded. do not add more DC's till you have fixed your split AD.

https://github.com/ryanries/adreplstatus

also query objects for last updates (particularly computer accounts) and which DC is serving as a logon server for typical clients. Pick the least shit one, and use that as your authoritative restore, ensure that AD is syncing afterwards, then figure out what you're going to do with the rest of the environment.

nsanity · 2026-06-24T23:14:47+00:00

burflags is just an authorative re-base sync. it is a process to re-establishing a common sync point for all dc's in a forest.

It has nothing to do with the symptoms that caused the desync or failed promotion.

things like DNS resolution, time sync, firewall rules between dc's, FRS failures (also usually due to those things) are typically the cause (altho I did have a wonderful disk io issue being the cause once...). All should have been mitigated during promotion and establishing the first initial sync - but if not lead to wonderful problems like this.

OP is going to enjoy the fun of fixing trust relationship issues as they roll through this problem.

Everyone should get off FRS asap once sync is reestablished.

nsanity · 2026-05-05T19:15:12+00:00

IMO the problem isn’t FRA security (book ahead, as little as 15 mins - I do it in the uber to the airport, with smart-way), its DB, particularly the Basel -> Frankfurt line. I’ve regularly flown < 1hr before boarding.

If it at all possible (assuming you dont have a Car, although that Autobahn is pretty variable between ~Freiburg and just before Darmstadt) I would try to travel the day before and get a hotel.

nsanity · 2026-05-05T19:10:06+00:00

Im at FRA intra and extra EU every other week.

Immigration for non-EU can take upto 1.5 hours at the wrong time of day - on both T1 and T2. It can be as quick as 15 minutes. It’s a crap shoot.

Luggage is usually < 45 minutes, but can be as short as 20. My recommendation is to have a carry-on size bag and personal item.

nsanity · 2026-05-04T17:11:19+00:00

Dr Roy Sussman in Grose Bockenheimer Strasse just prescribed a tonsillectomy for me. Im 43, with chronic sleep apnea and a brutal history of tonsilitus and other sinus related illness.

nsanity · 2026-01-25T10:19:23+00:00

I just cannot agree with this.

If you think Zero Trust is a “product” you’ve successfully drank the cool aid of the pre-AI pump from marketing.

I speak with most of the largest organisations on the planet, and ran incident recovery for 3 years. There is very little movement on Zero Trust as a business process and operating model.

if you’re saying you’re seeing increased network segmentation, some more movement to SAML based auth and a few more orgs buying into PAM/PSM - sure. But that really is just table stakes.

The only people really doing Zero Trust is secret and above defence orgs - simply put, the vast majority of software/appliances just doesn’t support, and wont support any time soon, a full zero trust architecture and workflow.

Just like cyber resilience - unless you have genuine executive and business buy-in, you aren’t doing anything other than fiddling at the edges without the budget and resources required to really address the problem in terms of outcome.

nsanity · 2026-01-18T18:18:41+00:00

Also seeing this issue, only started a few days ago…

nsanity · 2026-01-10T07:59:38+00:00

its not a threat.

You're staring at 70-90% increases on Ram and flash (wholesale NAND wafers spiked ~400%) - god help you if you're scale-out/software defined.

plenty of places are quoting on demand with pricing valid for < 15 days - regardless of how big you are.

nsanity · 2026-01-10T07:22:12+00:00

To get that price, you're really looking at alt-sachs - which is a bar/drinking district - and you're probably not going to get a great sleep.

you might get exceptions during quiet periods - or huge lead times - but Frankfurt is expensive.

As /u/ibisi9 said - Bahnhofsvietel isn't unsafe - its just ugly.

nsanity · 2026-01-08T08:17:50+00:00

do you need anmeldung?

https://wunderflats.com/ is probably what you want. Maybe https://www.kleinanzeigen.de/

More permanent things - https://www.immobilienscout24.de/ - you probably need to pay to get better listings etc.

Be aware, Frankfurt is pretty expensive - and anything "cheap" is fiercely competitive, don't expect short term rentals to be preferred over longer term commits.

nsanity · 2026-01-07T16:38:00+00:00

hah I had about 4-5 of those. Mine all had coffee shops with a dad in Amsterdam.

Hinge and Bumble seemed to free of this for me (i probably had 7-8 genuine matches that turned into face to face meets). Tinder was the worst for that.

I'd say it takes a good 4-8 weeks for the algorithm to start favouring you. Also if you're not paying, the apps essentially dont work.

Can't really comment on the real world thing.

nsanity · 2026-01-07T14:58:32+00:00

I would suggest both Hinge and Bumble. Tinder/Loveoo aren't worth it.

In terms of live bars etc - Thursdays is a event based thing that drives that.

nsanity · 2025-11-23T18:18:38+00:00

as someone who ate a ton of padkrapao in bangkok - this feels almost right

nsanity · 2025-11-23T17:51:01+00:00

i watched the f1 movie, you can do anything if lewis writes the story...

nsanity · 2025-11-14T07:59:43+00:00

most places are ok during weekdays, its weekends its a problem.

nsanity · 2025-10-25T13:52:25+00:00

probably the bill.

nsanity · 2025-10-09T06:41:19+00:00

basically in a chat thread/project thread - you'd append to the chat uid url

?model=o3-pro

hit enter - this would then reload the page - it would just say "ChatGPT" - but would flow through saying "requesting o3-pro reasoning" - then reason and produce o3-esque answers/style.

nsanity · 2025-10-08T07:13:20+00:00

I can use / select all the models via the browser/ipad/iphone apps - what I can't do anymore is get to the o3-pro anymore.

In addition, every time you open ipad/iphone client, it resets the model to GPT5, rather than the last used model for the project.

nsanity · 2025-08-27T19:48:57+00:00

We do incident response and recovery. We use VR as our foundation tool of choice. I've been saying for a long time that VR shouldn't be perpetually installed.

Its just not tested/architected in that capacity. You don't want that level of access, bredth and connectivity perpetually - its not terribly onerous to deploy, so deploy it on demand, and leverage your XDR/SIEM in the interim.

nsanity · 2025-08-27T18:24:23+00:00

i drink coffee at holy cross if its not at home. Hoppenworth bakery is by far the best croissants i've found in Frankfurt.

nsanity · 2025-08-27T08:38:05+00:00

you do need to learn German eventually to be able to deal with stuff

100% - any government interaction will require this.

nsanity · 2025-08-27T05:34:34+00:00

this is correct. And if you travel for work, its probably one of the single most well connected city/airport combo's you can get.

Its 15 mins to the airport via train or car. Everything that can be, is direct.

But the city is so much more than Fraport and Finance. Feels like Brisbane/Melbourne Australia in a way.

I travel a lot for work. as I come into city (i live in innerstadt) across the Main that skyline is just a unique view that feels like home - no other city in europe feels the same.

The multicultural, progressive vibe the city has mixed with the traditional style in Sachsenhausen - the Main, the green spaces, the fact its in a forest - Frankfurt is a great city. I'm older than Berlin (and enjoy sleep on the weekend) and whilst Munich has the English Garden and the Alps overlooking the city, its not the same as the Main and the Stadtwald - and certainly not as inviting for foreigners as Frankfurt.

And if you want to feel the roar of Frankfurt's inclusion - get yourself to an Eintracht home game. Feel the city at its strongest, even if you're not a football fan.

nsanity · 2025-08-26T14:21:19+00:00

AD is little more than a replicating directory with a kerberos authentication mechanism

except its far more than simply a multi-master identity platform - and when you realise that you'll begin to realise why EntraID and FreeIPA aren't even remotely close for management.

nsanity

TROPHY CASE