Jack Coates' Blog

3 Posts tagged with the management tag

http://www.droppedpackets.org/management-gateway-and-remote-control/ldms_auto_gateway for details, but at version 1.0.8 it is successfully deployed at several customers of greater than 1,000 nodes.

14 Comments Permalink

In the New Yorker version, two professors are looking at a blackboard full of equations, with "Then a miracle occurs" in the middle. One says "I think you should be more explicit here in step two".

 

In the South Park version, gnomes have a plan to run a corporation. The plan is:

Phase 1: Collect Underpants
Phase 2: ?
Phase 3: Profit!

 

Every software product with a greater level of complexity than notepad.exe has a step two... there might be services to help you through it, or you might be on your own, but its existence should be recognized and planned for. If someone's saying it's easy, it probably is... for them, because they live in that product and have deep thoughts about the problem set it's designed to solve. For everyone else, particularly the folks who inherit someone else's environment, there's three questions to ask:

 

  1. Do you know how to do the task at hand without the tool's help? If you don't, you need to learn that first... LANDesk OS Deployment doesn't make any sense if you don't know what sysprep is, for instance. Besides, reading manuals is arguably a better use of your time than stealing underpants.
  2. Do you understand what the tool is doing to make the task easier/safer/cheaper/better? The best tools try to make "Phase 2" as small as possible, but they're all designed with the assumption that you already know the lay of the land.
  3. Do you have the resources allocated for doing step two? It might be training, it might be headcount, it might just be a block of uninterrupted time... but you probably need something, and you aren't going to get it by clicking your heels and wishing hard.

 

LANDesk's product set is designed to take you from reactive to proactive; but it can't do that for you if you're not able to proactively spend time on it. Dropping everything to work on a customer's problem is great customer service and just what you want from your help desk analysts... but a LANDesk core is intended for use by a sysadmin. Be the BOFH, not the PFY.

0 Comments Permalink

One of the more powerful tools that LANDesk gives you is a local scheduler with all sorts of useful state filters and activity triggers... it's the Local Scheduler that you're configuring when you select inventory, policy, and vulnerability scan windows in Agent Configuration, and it's able to do some powerful things: http://community.landesk.com/support/docs/DOC-2328

 

 

One of its most useful features is the /IPADDR trigger, which causes a script to run at IP Address changes. By default this is used to launch inventory scans, but it's also useful for making decisions that depend on which netwok you've just joined... this is the concept that drives auto_gateway.vbs.

 

 

The problem with auto_gateway.vbs is that you want it to go onto systems that are, well, using the gateway... in other words, connectivity is spotty, it might not be able to download from internal servers, and you want something that will keep trying until it gets it right. Something like a vulnerability scan, in other words. Here's a custom vulnerability that installs auto_gateway and defines a Local Scheduler task to run it -- a lot can be done to improve on it, but it's a good start for solving other network-based problems as well: http://www.droppedpackets.org/security/custom-definitions/v_intl_auto_gateway-installation.xml/view

 

 

The next amazing trick is to make the vulnerability only apply to laptops... a dummy product install would do that nicely, but there ought to be a cleaner way.

0 Comments Permalink
LANDesk Community powered by Jive Software's Clearspace ® Subscribe| Legal Notices| Investor Relations| Avocent| Privacy Policy © 2009 LANDesk Software