Mike Swanson
aa9bd26df8
Reconstructed from local transcripts via the new recovery engine. These were substantive sessions never saved with /save. All banner-marked RECOVERED-UNVERIFIED. Notable recoveries: Peaceful Spirit RADIUS/VPN buildout (full command trail), RMM agent check-in comparison, Kristen Datto Workplace sync, Intune+Apple. guru-rmm/guru-connect-scoped logs routed to root session-logs (submodule convention). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1324 lines
75 KiB
Markdown
1324 lines
75 KiB
Markdown
# [RECOVERED] Synchronize project state with database
|
||
|
||
> **[RECOVERED -- UNVERIFIED]** Auto-reconstructed from transcript edbd618f-a73b-4ec0-affa-dc5f35ddca3d (2026-05-12T15:53:34.379Z .. 2026-05-12T17:36:52.490Z) on 2026-06-01. Prose sections are Ollama-drafted from the transcript and may be imprecise; the Commands/Config/Reference sections are extracted verbatim. Review and correct, then remove this banner.
|
||
|
||
## User
|
||
- **User:** Mike Swanson (mike)
|
||
- **Machine:** GURU-5070
|
||
- **Role:** admin
|
||
|
||
## Session Summary
|
||
|
||
The session began with a coordination API status check and scanning of all project_state files to identify discrepancies between the API's reported state and the actual state of work. The API indicated a stale `gururmm/server` status, prompting a deeper investigation into the CONTEXT and PROJECT_STATE files. This revealed the server was in a degraded state due to outdated code and schema mismatches. The build log confirmed a missing `agent_id` in `service.rs` caused the Windows agent compile error. A server binary timestamp check showed the deployed code was from April 20, conflicting with the Phase 1 schema in the database. The session concluded with updating the coordination API to reflect the correct degraded state and version of the server, along with other project and client state corrections.
|
||
|
||
## Key Decisions
|
||
|
||
- Update the coordination API to reflect the actual degraded state of the `gururmm/server` component instead of the stale `building` status.
|
||
- Correct the API state for `dataforth-dos/app` to reflect its active deployment status.
|
||
- Address the `gururmm/agents` state by noting partial success with Linux agents and the failed Windows build due to missing `agent_id`.
|
||
- Use temporary files to handle complex JSON payloads for API updates to avoid quote issues.
|
||
|
||
## Problems Encountered
|
||
|
||
- The coordination API route could not handle slashes in the project_key path, requiring a workaround to ensure correct API endpoint formatting.
|
||
- The build log for `gururmm-server` showed a schema mismatch error, indicating a version discrepancy between the deployed code and the database schema.
|
||
- The `agent_id` missing in `service.rs` caused a compile error, necessitating a review of the codebase and build process.
|
||
|
||
## Configuration Changes
|
||
|
||
_Machine-extracted verbatim from the transcript (file targets of Write/Edit/NotebookEdit)._
|
||
|
||
- none detected
|
||
|
||
## Credentials & Secrets
|
||
|
||
_Machine-extracted; review carefully -- secrets are not auto-harvested from transcripts._
|
||
|
||
- none detected (verify against the Commands & Outputs section)
|
||
|
||
## Infrastructure & Servers
|
||
|
||
_Machine-extracted verbatim (IP / hostname regex hits across the whole transcript)._
|
||
|
||
- **IPs:** `172.16.3.30`, `172.16.3.36`, `192.168.0.6`, `192.168.0.27`, `192.168.0.9`, `192.168.0.1`, `192.168.0.120`, `192.168.2.254`, `172.16.3.10`, `72.194.62.5`, `172.16.3.22`, `192.168.0.63`, `162.248.93.81`, `100.92.127.64`, `98.190.129.150`
|
||
- **Hosts:** `context.md`, `rmm.azcomputerguru.com`, `git.azcomputerguru.com`, `gururmm-build.log`, `webhook-handler.py`, `build-agents.sh`, `vault.sh`, `database.sops.yaml`, `credentials.password`, `ad2.sops.yaml`, `ad1.sops.yaml`, `scripts.rs`, `checks.rs`, `mod.rs`, `gururmm-agent-base-0.6.2.msi`, `gururmm-agent-base-latest.msi`, `2026-05-12-session.md`, `2026-05-12-macos-agent-phase1.md`, `2026-04-21-session.md`, `2026-04-20-session.md`, `2026-04-19-session.md`, `2026-05-10-session.md`, `2026-05-07-howard-gururmm-macos-installer-and-cf-bot-block.md`, `2026-04-30-session.md`, `2026-05-01-howard-syncro-billing-batch-and-tmp-path-incident.md`, `2026-05-01-session.md`, `2026-04-29-session.md`, `2026-04-28-session.md`, `2026-04-27-session.md`, `valleywideplastering.com`, `meredith.kuhn`, `cascadestucson.com`, `pfsense-firewall.sops.yaml`, `synology-cascadesds.sops.yaml`, `cascades.local`, `fusionsiteservices.com`, `js.stambackseptic`, `gmail.com`, `gururmm-site-main.sops.yaml`, `service.rs`
|
||
|
||
## Commands & Outputs
|
||
|
||
_Machine-extracted verbatim: mutating Bash/PowerShell commands with truncated output._
|
||
|
||
```
|
||
curl -s "http://172.16.3.30:8001/api/coord/status" 2>&1
|
||
```
|
||
Output: {"active_lock_count":0,"active_workflow_count":0,"locks_by_project":{},"active_workflows":[],"components_by_project":{"claudetools":[{"project_key":"claudetools","component":"api","state":"deployed","version":"1.0.0","notes":"Coord API live, no-auth, DB softfail 503 added 2026-05-12.","updated_by":" ... [truncated]
|
||
|
||
```
|
||
ssh -o ConnectTimeout=8 guru@172.16.3.30 "systemctl is-active gururmm-server && systemctl is-active gururmm-agent && /usr/local/bin/gururmm-server --version 2>/dev/null || true && ls -la /var/www/gururmm/downloads/ | head -10" 2>&1
|
||
```
|
||
Output: active
|
||
active
|
||
[2m2026-05-12T15:54:27.218857Z[0m [32m INFO[0m [2mgururmm_server[0m[2m:[0m GuruRMM Server starting...
|
||
total 40004
|
||
drwxr-xr-x 3 root root 4096 May 12 13:36 .
|
||
drwxr-xr-x 4 root root 4096 Dec 16 02:18 ..
|
||
-rwxr-xr-x 1 root root 3907328 Dec 29 01:16 guruconnect-server
|
||
drwxr-xr ... [truncated]
|
||
|
||
```
|
||
ssh -o ConnectTimeout=8 guru@172.16.3.30 "tail -5 /var/log/gururmm-build.log 2>/dev/null || echo 'no build log'" 2>&1
|
||
```
|
||
Output: | ^^^^^^^^^^^^^^^ missing `agent_id`
|
||
|
||
For more information about this error, try `rustc --explain E0063`.
|
||
warning: `gururmm-agent` (bin "gururmm-agent") generated 1 warning
|
||
error: could not compile `gururmm-agent` (bin "gururmm-agent") due to 1 previous er ... [truncated]
|
||
|
||
```
|
||
ssh -o ConnectTimeout=8 guru@172.16.3.30 "tail -60 /var/log/gururmm-build.log 2>/dev/null" 2>&1
|
||
```
|
||
Output: --> warning: methods `cancel_rollback_watchdog` and `cleanup_backup` are never used
|
||
--> src/updater/mod.rs:631:18
|
||
|
|
||
92src/updater/mod.rs:631:18
|
||
|
|
||
92 | impl AgentUpdater {
|
||
| | impl AgentUpdater {
|
||
| ----------------- methods in this implementation ----------------- methods in this ... [truncated]
|
||
|
||
```
|
||
ssh -o ConnectTimeout=8 guru@172.16.3.30 "
|
||
echo '=== Server binary timestamp ==='
|
||
ls -la /usr/local/bin/gururmm-server
|
||
echo '=== Agent binary timestamp ==='
|
||
ls -la /usr/local/bin/gururmm-agent
|
||
echo '=== Downloads dir (all files) ==='
|
||
ls -la /var/www/gururmm/downloads/
|
||
echo '=== Git log on server (last 5 commits) ==='
|
||
cd /home/guru/gururmm && git log --oneline -5
|
||
echo '=== systemctl status (brief) ==='
|
||
systemctl status gururmm-server --no-pager -n 3
|
||
" 2>&1
|
||
```
|
||
Output: === Server binary timestamp ===
|
||
-rwxr-xr-x 1 root root 10027120 Apr 20 12:56 /usr/local/bin/gururmm-server
|
||
=== Agent binary timestamp ===
|
||
-rwxr-xr-x 1 root root 3657088 May 12 13:30 /usr/local/bin/gururmm-agent
|
||
=== Downloads dir (all files) ===
|
||
total 40004
|
||
drwxr-xr-x 3 root root 4096 May 12 13:36 ... [truncated]
|
||
|
||
```
|
||
ssh -o ConnectTimeout=8 guru@172.16.3.30 "
|
||
echo '=== Deployed server binary ==='
|
||
ls -la /opt/gururmm/gururmm-server
|
||
echo '=== Recent gururmm git log (full 10) ==='
|
||
cd /home/guru/gururmm && git log --oneline -10
|
||
echo '=== Server migration history ==='
|
||
psql -U gururmm -d gururmm -c 'SELECT description, installed_on FROM _sqlx_migrations ORDER BY version DESC LIMIT 10' 2>/dev/null || echo 'psql error'
|
||
" 2>&1
|
||
```
|
||
Output: === Deployed server binary ===
|
||
-rwxr-xr-x 1 root root 10436952 May 12 15:04 /opt/gururmm/gururmm-server
|
||
=== Recent gururmm git log (full 10) ===
|
||
602eb85 docs: session log 2026-05-12 Phase 1 dev session
|
||
ed3b797 fix(checks): correct disk threshold direction and drop agents lock before DB fetch
|
||
23e0ad1 ... [truncated]
|
||
|
||
```
|
||
curl -s -X PUT http://172.16.3.30:8001/api/coord/components/gururmm/server \
|
||
-H "Content-Type: application/json" \
|
||
-d '{
|
||
"state": "degraded",
|
||
"version": "0.3.0",
|
||
"notes": "Phase 1 deployed May 12 15:04 UTC (/opt/gururmm/gururmm-server, commit 602eb85). Threshold checks failing: cached plan must not change result type — sqlx prepared statement cache stale after 017-019 migrations. Fix: connection reset or server restart after DEALLOCATE ALL. Commit 0a7521b (robust remote execution bridge) NOT deployed — pushed after last build trigger. Pluto agent build ALSO failing (agent_id missing in agent/src/service.rs) which blocked the agent rebuild that would normally restart the server.",
|
||
"updated_by": "DESKTOP-0O8A1RL/claude-main"
|
||
}' 2>&1
|
||
```
|
||
Output: {"detail":"There was an error parsing the body"}
|
||
|
||
```
|
||
cat > /tmp/coord_server.json << 'ENDJSON'
|
||
{
|
||
"state": "degraded",
|
||
"version": "0.3.0",
|
||
"notes": "Phase 1 deployed May 12 15:04 UTC (commit 602eb85). Threshold checks failing: cached plan must not change result type — sqlx prepared statement cache stale after migrations 017-019. Commit 0a7521b (robust remote execution) NOT deployed — pushed after last build. Pluto agent build FAILING: agent/src/service.rs missing agent_id in AppState initializer. Must fix service.rs before next successful build and redeploy.",
|
||
"updated_by": "DESKTOP-0O8A1RL/claude-main"
|
||
}
|
||
ENDJSON
|
||
curl -s -X PUT http://172.16.3.30:8001/api/coord/components/gururmm/server \
|
||
-H "Content-Type: application/json" \
|
||
-d @/tmp/coord_server.json
|
||
```
|
||
Output: {"project_key":"gururmm","component":"server","state":"degraded","version":"0.3.0","notes":"Phase 1 deployed May 12 15:04 UTC (commit 602eb85). Threshold checks failing: cached plan must not change result type — sqlx prepared statement cache stale after migrations 017-019. Commit 0a7521b (robust rem ... [truncated]
|
||
|
||
```
|
||
cat > /tmp/coord_agents.json << 'ENDJSON'
|
||
{
|
||
"state": "degraded",
|
||
"version": "0.6.2",
|
||
"notes": "Linux agent built OK May 12 13:30. Windows agents (amd64, x86, legacy-amd64, legacy-x86, MSI) built OK May 12 13:30. macOS agents (aarch64, x86_64) in downloads. Pluto build FAILED at 15:53 UTC: agent/src/service.rs line 152 missing agent_id in AppState initializer. Latest pushed commits (including 0a7521b robust execution) not yet built for Windows. Fix required before next successful pipeline run.",
|
||
"updated_by": "DESKTOP-0O8A1RL/claude-main"
|
||
}
|
||
ENDJSON
|
||
curl -s -X PUT http://172.16.3.30:8001/api/coord/components/gururmm/agents \
|
||
-H "Content-Type: application/json" \
|
||
-d @/tmp/coord_agents.json
|
||
```
|
||
Output: {"project_key":"gururmm","component":"agents","state":"degraded","version":"0.6.2","notes":"Linux agent built OK May 12 13:30. Windows agents (amd64, x86, legacy-amd64, legacy-x86, MSI) built OK May 12 13:30. macOS agents (aarch64, x86_64) in downloads. Pluto build FAILED at 15:53 UTC: agent/src/ser ... [truncated]
|
||
|
||
```
|
||
# Add dataforth-dos/app component
|
||
cat > /tmp/coord_df_app.json << 'ENDJSON'
|
||
{
|
||
"project_key": "dataforth-dos",
|
||
"component": "app",
|
||
"state": "deployed",
|
||
"version": "2026-05-12",
|
||
"notes": "Pipeline healthy. testdatadb service on AD2 (192.168.0.6:3000). 469K records in PostgreSQL, 458K on Dataforth website. Daily scheduled task (02:30 AM) running clean — 16 created, 9 updated, 0 errors. Email notification code deployed but blocked on M365 SMTP AUTH (AJ must enable for sysadmin@dataforth.com).",
|
||
"updated_by": "DESKTOP-0O8A1RL/claude-main"
|
||
}
|
||
ENDJSON
|
||
curl -s -X POST http://172.16.3.30:8001/api/coord/components \
|
||
-H "Content-Type: application/json" \
|
||
-d @/tmp/coord_df_app.json
|
||
```
|
||
Output: {"detail":"Method Not Allowed"}
|
||
|
||
```
|
||
curl -s -X PUT http://172.16.3.30:8001/api/coord/components/dataforth-dos/app \
|
||
-H "Content-Type: application/json" \
|
||
-d @/tmp/coord_df_app.json
|
||
```
|
||
Output: {"project_key":"dataforth-dos","component":"app","state":"deployed","version":"2026-05-12","notes":"Pipeline healthy. testdatadb service on AD2 (192.168.0.6:3000). 469K records in PostgreSQL, 458K on Dataforth website. Daily scheduled task (02:30 AM) running clean — 16 created, 9 updated, 0 errors. ... [truncated]
|
||
|
||
```
|
||
cat > /tmp/df_email.json << 'EOF'
|
||
{"project_key":"dataforth-dos","component":"email","state":"pending","version":"2026-05-12","notes":"nodemailer deployed, SMTP creds in credentials.json, daily summary wired in run-pipeline.ps1. BLOCKED: AJ must enable Authenticated SMTP for sysadmin@dataforth.com in Exchange Admin Center. Once confirmed: add jlehman@dataforth.com to TO list in notify.js and run-pipeline.ps1, redeploy both files.","updated_by":"DESKTOP-0O8A1RL/claude-main"}
|
||
EOF
|
||
curl -s -X PUT http://172.16.3.30:8001/api/coord/components/dataforth-dos/email \
|
||
-H "Content-Type: application/json" -d @/tmp/df_email.json | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['component'], d['state'])"
|
||
```
|
||
Output: Exit code 127
|
||
/usr/bin/bash: line 9: python3: command not found
|
||
|
||
```
|
||
cat > /tmp/csc_m365.json << 'EOF'
|
||
{"project_key":"clients/cascades-tucson","component":"m365-rollout","state":"blocked","version":"wave-0.5","notes":"Paused 2026-04-28. AD pilot prep DONE (howard.enos password + proxyAddresses on CS-SERVER). CA reconciliation BLOCKED: ComputerGuru Tenant Admin SP has zero directory role assignments — Graph CA endpoints 403. Fix: grant Conditional Access Administrator role (b1be1c3e-b65d-4f19-8427-f6fa0d97feb9) to SP objectId a5fa89a9-b735-4e10-b664-f042e265d137 via Path A (Graph RoleManagement.ReadWrite.Directory) or Path B (portal as admin@). After: add 184.191.143.62/32 to Cascades Named Location, verify MFA policy, Gate A5 (exit staging), A6 (phone enroll), A7 (flip CA On).","updated_by":"DESKTOP-0O8A1RL/claude-main"}
|
||
EOF
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients%2Fcascades-tucson/m365-rollout" \
|
||
-H "Content-Type: application/json" -d @/tmp/csc_m365.json | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('component','ERR'), d.get('state','ERR'))"
|
||
```
|
||
Output: <tool_use_error>Cancelled: parallel tool call Bash(cat > /tmp/df_email.json << 'EOF'
|
||
{"proj…) errored</tool_use_error>
|
||
|
||
```
|
||
cat > /tmp/df_email.json << 'EOF'
|
||
{"project_key":"dataforth-dos","component":"email","state":"pending","version":"2026-05-12","notes":"nodemailer deployed, SMTP creds in credentials.json, daily summary wired in run-pipeline.ps1. BLOCKED: AJ must enable Authenticated SMTP for sysadmin@dataforth.com in Exchange Admin Center. Once confirmed: add jlehman@dataforth.com to TO list in notify.js and run-pipeline.ps1, redeploy both files.","updated_by":"DESKTOP-0O8A1RL/claude-main"}
|
||
EOF
|
||
curl -s -X PUT http://172.16.3.30:8001/api/coord/components/dataforth-dos/email \
|
||
-H "Content-Type: application/json" -d @/tmp/df_email.json
|
||
```
|
||
Output: {"project_key":"dataforth-dos","component":"email","state":"pending","version":"2026-05-12","notes":"nodemailer deployed, SMTP creds in credentials.json, daily summary wired in run-pipeline.ps1. BLOCKED: AJ must enable Authenticated SMTP for sysadmin@dataforth.com in Exchange Admin Center. Once conf ... [truncated]
|
||
|
||
```
|
||
cat > /tmp/csc_m365.json << 'EOF'
|
||
{"project_key":"clients/cascades-tucson","component":"m365-rollout","state":"blocked","version":"wave-0.5","notes":"Paused 2026-04-28. AD pilot prep DONE (howard.enos password + proxyAddresses on CS-SERVER). CA reconciliation BLOCKED: ComputerGuru Tenant Admin SP (objectId a5fa89a9-b735-4e10-b664-f042e265d137) has zero directory role assignments — Graph CA endpoints 403. Fix: grant Conditional Access Administrator role (b1be1c3e) via Path A (Graph RoleManagement.ReadWrite.Directory) or Path B (portal as admin@). After: add 184.191.143.62/32 to Named Location, verify MFA, Gate A5 exit staging, A6 phone enroll, A7 flip CA on.","updated_by":"DESKTOP-0O8A1RL/claude-main"}
|
||
EOF
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients/cascades-tucson/m365-rollout" \
|
||
-H "Content-Type: application/json" -d @/tmp/csc_m365.json
|
||
```
|
||
Output: {"detail":"Not Found"}
|
||
|
||
```
|
||
# Try URL-encoded slash in project_key
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients%2Fcascades-tucson/m365-rollout" \
|
||
-H "Content-Type: application/json" -d @/tmp/csc_m365.json
|
||
```
|
||
Output: {"detail":"Not Found"}
|
||
|
||
```
|
||
grep -r "coord/components" /home/guru/claudetools-api/src/ 2>/dev/null | head -20; ssh -o ConnectTimeout=5 guru@172.16.3.30 "grep -r 'coord.*components' /home/guru/claudetools-api/src/ 2>/dev/null | head -10" 2>&1
|
||
```
|
||
Output: (Bash completed with no output)
|
||
|
||
```
|
||
ssh -o ConnectTimeout=8 guru@172.16.3.30 "find /home/guru -name '*.py' | xargs grep -l 'coord.*component' 2>/dev/null | head -5" 2>&1
|
||
```
|
||
Output: (Bash completed with no output)
|
||
|
||
```
|
||
curl -s "http://172.16.3.30:8001/api/docs" 2>&1 | head -5
|
||
```
|
||
Output: <!DOCTYPE html>
|
||
<html>
|
||
<head>
|
||
<link type="text/css" rel="stylesheet" href="https://cdn.jsdelivr.net/npm/swagger-ui-dist@5.9.0/swagger-ui.css">
|
||
|
||
```
|
||
cat > /tmp/csc_m365.json << 'EOF'
|
||
{"project_key":"clients-cascades-tucson","component":"m365-rollout","state":"blocked","version":"wave-0.5","notes":"Paused 2026-04-28 (Howard). AD pilot prep DONE (howard.enos pw + proxyAddresses on CS-SERVER). CA reconciliation BLOCKED: ComputerGuru Tenant Admin SP (a5fa89a9-b735-4e10-b664-f042e265d137) has zero directory role assignments, Graph CA endpoints 403. Fix: grant Conditional Access Administrator (b1be1c3e-b65d-4f19-8427-f6fa0d97feb9) via Path A (Graph RoleManagement.ReadWrite.Directory) or Path B (portal as admin@cascadestucson.com). After: add 184.191.143.62/32 to Cascades Named Location, verify MFA policy, Gate A5 exit staging, A6 phone enroll, A7 flip CA on. Tenant: 207fa277-e9d8-4eb7-ada1-1064d2221498.","updated_by":"DESKTOP-0O8A1RL/claude-main"}
|
||
EOF
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients-cascades-tucson/m365-rollout" \
|
||
-H "Content-Type: application/json" -d @/tmp/csc_m365.json | grep -o '"state":"[^"]*"'
|
||
```
|
||
Output: "state":"blocked"
|
||
|
||
```
|
||
cat > /tmp/csc_gpo.json << 'EOF'
|
||
{"project_key":"clients-cascades-tucson","component":"folder-redirection","state":"active","version":"2026-04-17","notes":"HIPAA folder redirection GPO rollout. Validated on Sharon Edwards (Life Enrichment) — Documents and Downloads redirect to \\CS-SERVER\\homes\\<username>\\. Next: second LE machine end-to-end, then Desktop + other folders, then matching GPOs for other departments. CS-SERVER is DC for cascades.local at 192.168.2.254. NOTE: EncryptData still false on \\CS-SERVER\\homes — HIPAA workitem to flip on.","updated_by":"DESKTOP-0O8A1RL/claude-main"}
|
||
EOF
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients-cascades-tucson/folder-redirection" \
|
||
-H "Content-Type: application/json" -d @/tmp/csc_gpo.json | grep -o '"state":"[^"]*"'
|
||
```
|
||
Output: "state":"blocked"
|
||
|
||
```
|
||
cat > /tmp/csc_gpo.json << 'EOF'
|
||
{"project_key":"clients-cascades-tucson","component":"folder-redirection","state":"active","version":"2026-04-17","notes":"HIPAA folder redirection GPO rollout. Validated on Sharon Edwards (Life Enrichment) — Documents and Downloads redirect to \\\\CS-SERVER\\homes\\<username>\\. Next: second LE machine end-to-end, then Desktop + other folders, then matching GPOs for other departments. CS-SERVER is DC for cascades.local at 192.168.2.254. EncryptData still false — HIPAA workitem to flip on.","updated_by":"DESKTOP-0O8A1RL/claude-main"}
|
||
EOF
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients-cascades-tucson/folder-redirection" \
|
||
-H "Content-Type: application/json" -d @/tmp/csc_gpo.json | grep -o '"state":"[^"]*"'
|
||
```
|
||
Output: (Bash completed with no output)
|
||
|
||
```
|
||
cat > /tmp/imc_dc.json << 'EOF'
|
||
{"project_key":"clients-imc","component":"dc-remediation","state":"degraded","version":"2026-04-28","notes":"ServerIMC (192.168.0.63) is a phantom/broken DC — registered in DNS (A + SRV records), responds to ICMP, but TCP/389 LDAP and TCP/88 Kerberos refuse connections. DC locator round-robins IMC1 and ServerIMC; clients picking ServerIMC time out, causing intermittent slow logons, GPO failures. Root cause unclear: real-but-broken DC (repair AD services) OR ghost from demoted DC (ntdsutil metadata cleanup). This was root cause of DESKTOP-KRHQ5TS domain-join failure 2026-04-22. Also: IMC1 has component store corruption (0x80073701) blocking RDS role removal — Server 2019 migration decision pending. Manda is new GM (replacing Michael Santander, deactivated). Manda laptop DESKTOP-KRHQ5TS provisioned 2026-04-28.","updated_by":"DESKTOP-0O8A1RL/claude-main"}
|
||
EOF
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients-imc/dc-remediation" \
|
||
-H "Content-Type: application/json" -d @/tmp/imc_dc.json | grep -o '"state":"[^"]*"'
|
||
```
|
||
Output: "state":"degraded"
|
||
|
||
```
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients-cascades-tucson/folder-redirection" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary '{"project_key":"clients-cascades-tucson","component":"folder-redirection","state":"active","version":"2026-04-17","notes":"HIPAA folder redirection GPO rollout. Validated on Sharon Edwards (Life Enrichment). Documents and Downloads redirect to CS-SERVER homes share. Next: second LE machine end-to-end, then Desktop + other folders, then matching GPOs for other departments. CS-SERVER is DC for cascades.local. EncryptData still false on homes share — HIPAA workitem to flip on.","updated_by":"DESKTOP-0O8A1RL/claude-main"}' | grep -o '"state":"[^"]*"'
|
||
```
|
||
Output: (Bash completed with no output)
|
||
|
||
```
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients-valleywide/post-incident" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary '{"project_key":"clients-valleywide","component":"post-incident","state":"active","version":"2026-04-16","notes":"RDWeb brute-force attack 2026-04-13 — UDM port forward removed same day. 30-day audit confirmed no successful external logons, no compromise. RDS reconfigured 2026-04-16 to bypass gateway (direct VPN connect). RDS licensing pointer fixed. Pending: RDS CAL purchase, UPnP audit on UDM, scanner account password rotation.","updated_by":"DESKTOP-0O8A1RL/claude-main"}' | grep -o '"state":"[^"]*"'
|
||
```
|
||
Output: (Bash completed with no output)
|
||
|
||
```
|
||
# Try without the grep to see the raw response
|
||
curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/clients-cascades-tucson/folder-redirection" \
|
||
-H "Content-Type: application/json" \
|
||
-d '{"project_key":"clients-cascades-tucson","component":"folder-redirection","state":"active","version":"2026-04-17","notes":"HIPAA folder redirection GPO rollout active. Validated on Sharon Edwards. Documents and Downloads redirect to CS-SERVER homes share. Next: second machine, then Desktop, then other departments. EncryptData still false on homes share — HIPAA item to address.","updated_by":"DESKTOP-0O8A1RL/claude-main"}'
|
||
```
|
||
Output: {"detail":"There was an error parsing the body"}
|
||
|
||
```
|
||
# Write all remaining entries as temp files and push one by one
|
||
python3 -c "
|
||
import json, subprocess
|
||
|
||
entries = [
|
||
('clients-cascades-tucson', 'folder-redirection', {
|
||
'project_key': 'clients-cascades-tucson',
|
||
'component': 'folder-redirection',
|
||
'state': 'active',
|
||
'version': '2026-04-17',
|
||
'notes': 'HIPAA folder redirection GPO rollout. Validated on Sharon Edwards (Life Enrichment) — Documents and Downloads redirect to CS-SERVER homes share. Next: second LE machine end-to-end, then Desktop and other folders, then matching GPOs per department. EncryptData still false on homes share — HIPAA workitem pending.',
|
||
'updated_by': 'DESKTOP-0O8A1RL/claude-main'
|
||
}),
|
||
('clients-valleywide', 'post-incident', {
|
||
'project_key': 'clients-valleywide',
|
||
'component': 'post-incident',
|
||
'state': 'active',
|
||
'version': '2026-04-16',
|
||
'notes': 'RDWeb brute-force 2026-04-13 — UDM port forward removed same day. 30-day audit confirmed no successful external logons. RDS reconfigured 2026-04-16 to bypass gateway (direct VPN connect), licensing pointer fixed. Pending: RDS CAL purchase, UPnP audit, scanner account password rotation.',
|
||
'updated_by': 'DESKTOP-0O8A1RL/claude-main'
|
||
}),
|
||
('clients-scileppi-law', 'hardware', {
|
||
'project_key': 'clients-scileppi-law',
|
||
'component': 'hardware',
|
||
'state': 'pending',
|
||
'version': '2026-05-07',
|
||
'notes': 'Sylvia Mac mini (8 GB M2) replacement — unit thrashing system on every Apple Mail launch. User on webmail in the meantime. Replacement quote pending (Howard 2026-05-07). GuruRMM site: Main Office (WEST-MEADOW-9025).',
|
||
'updated_by': 'DESKTOP-0O8A1RL/claude-main'
|
||
}),
|
||
('clients-pavon', 'owncloud', {
|
||
'project_key': 'clients-pavon',
|
||
'component': 'owncloud',
|
||
'state': 'active',
|
||
'version': '2026-04-29',
|
||
'notes': 'OwnCloud VM (172.16.3.22) stable after cron stacking incident 2026-04-29. Cron protected by flock on apache crontab. Deferred: occ versions:cleanup pavon (30 GB junk versions in owncloud/pavon/files_versions/), dangling versioning_users group (harmless). Architecture: GeoVision NVRs at Curves and Raiders sync via OwnCloud Desktop client with virtual file placeholders.',
|
||
'updated_by': 'DESKTOP-0O8A1RL/claude-main'
|
||
}),
|
||
('clients-lens-auto-brokerage', 'gururmm-deployment', {
|
||
'project_key': 'clients-lens-auto-brokerage',
|
||
'component': 'gururmm-deployment',
|
||
'state': 'pending',
|
||
'version': '2026-04-16',
|
||
'notes': 'GuruRMM agent deployment to 10 endpoints via GPO. Scripts and documentation prepared in clients/lens-auto-brokerage/docs/ — deployment not yet executed. Site-specific MSI generation required from GuruRMM dashboard before GPO deployment.',
|
||
'updated_by': 'DESKTOP-0O8A1RL/claude-main'
|
||
}),
|
||
('clients-glaztech', 'motw-fix', {
|
||
'project_key': 'clients-glaztech',
|
||
'component': 'motw-fix',
|
||
'state': 'pending',
|
||
'version': '2026-03-30',
|
||
'notes': 'PDF preview broken on endpoints due to Windows KB5066791/KB5066835 Mark of the Web issue. Three fix methods prepared in clients/glaztech/ — scripts ready, just needs to be run on endpoints. Deploy via ScreenConnect or GuruRMM when scheduled.',
|
||
'updated_by': 'DESKTOP-0O8A1RL/claude-main'
|
||
}),
|
||
('clients-sombra-residential', 'gururmm', {
|
||
'project_key': 'clients-sombra-residential',
|
||
'component': 'gururmm',
|
||
'state': 'active',
|
||
'version': '2026-04-30',
|
||
'notes': 'Server2013 (Windows Server 2012 EOL, hostname Server2013) enrolled in GuruRMM 2026-04-30. Agent: 5383e9c1-56e1-4389-9c89-1991a77bbc3a. Open items: capture sysadmin password to vault, confirm Server 2012 EOL risk with Mike and recommend refresh/migration path, discover and document workstations, network, primary contact.',
|
||
'updated_by': 'DESKTOP-0O8A1RL/claude-main'
|
||
}),
|
||
('clients-azcomputerguru-site', 'website', {
|
||
'project_key': 'clients-azcomputerguru-site',
|
||
'component': 'website',
|
||
'state': 'deployed',
|
||
'version': '2026-04-20',
|
||
'notes': 'WordPress on IX Web Hosting (ixwebhosting.com), cPanel user azcomputerguru, server 172.16.3.10 (ext 72.194.62.5). DB: azcomputerguru_acg2025, table prefix Lvkai5BQ_. cPanel forced-password-change loop workaround: use WHM API to clear flag and get session URL. Vault: infrastructure/ix-server.sops.yaml.',
|
||
'updated_by': 'DESKTOP-0O8A1RL/claude-main'
|
||
}),
|
||
]
|
||
|
||
for pk, comp, data in entries:
|
||
with open('/tmp/coord_entry.json', 'w') as f:
|
||
json.dump(data, f)
|
||
result = subprocess.run(
|
||
['curl', '-s', '-X', 'PUT', f'http://172.16.3.30:8001/api/coord/components/{pk}/{comp}',
|
||
'-H', 'Content-Type: application/json', '-d', '@/tmp/coord_entry.json'],
|
||
capture_output=True, text=True
|
||
)
|
||
resp = json.loads(result.stdout) if result.stdout else {}
|
||
print(f'{pk}/{comp}: {resp.get(\"state\", resp.get(\"detail\", \"ERROR\"))}')
|
||
"
|
||
```
|
||
Output: Exit code 127
|
||
/usr/bin/bash: line 83: python3: command not found
|
||
|
||
```
|
||
$entries = @(
|
||
@{ pk="clients-cascades-tucson"; comp="folder-redirection"; state="active"; version="2026-04-17"; notes="HIPAA folder redirection GPO rollout. Validated on Sharon Edwards (Life Enrichment) - Documents and Downloads redirect to CS-SERVER homes share. Next: second LE machine end-to-end, then Desktop and other folders, then matching GPOs per department. EncryptData still false on homes share - HIPAA workitem pending." },
|
||
@{ pk="clients-valleywide"; comp="post-incident"; state="active"; version="2026-04-16"; notes="RDWeb brute-force 2026-04-13 - UDM port forward removed same day. 30-day audit confirmed no successful external logons. RDS reconfigured 2026-04-16 to bypass gateway (direct VPN), licensing pointer fixed. Pending: RDS CAL purchase, UPnP audit, scanner account password rotation." },
|
||
@{ pk="clients-scileppi-law"; comp="hardware"; state="pending"; version="2026-05-07"; notes="Sylvia Mac mini (8 GB M2) replacement - unit thrashing on Apple Mail launch. User on webmail in the meantime. Replacement quote pending (Howard 2026-05-07). GuruRMM site: Main Office (WEST-MEADOW-9025)." },
|
||
@{ pk="clients-pavon"; comp="owncloud"; state="active"; version="2026-04-29"; notes="OwnCloud VM (172.16.3.22) stable after cron stacking incident 2026-04-29. Cron protected by flock. Deferred: occ versions:cleanup pavon (30 GB junk versions in files_versions), dangling versioning_users group (harmless). GeoVision NVRs at Curves and Raiders sync via OwnCloud Desktop client." },
|
||
@{ pk="clients-lens-auto-brokerage"; comp="gururmm-deployment"; state="pending"; version="2026-04-16"; notes="GuruRMM agent deployment to 10 endpoints via GPO. Scripts and docs prepared in clients/lens-auto-brokerage/docs/ - deployment not yet executed. Site-specific MSI generation required from GuruRMM dashboard before GPO deployment." },
|
||
@{ pk="clients-glaztech"; comp="motw-fix"; state="pending"; version="2026-03-30"; notes="PDF preview broken on endpoints - Windows KB5066791/KB5066835 Mark of the Web issue. Three fix methods prepared in clients/glaztech/ - scripts ready, just needs to be run on endpoints via ScreenConnect or GuruRMM." },
|
||
@{ pk="clients-sombra-residential"; comp="gururmm"; state="active"; version="2026-04-30"; notes="Server2013 (Windows Server 2012 EOL) enrolled in GuruRMM 2026-04-30. Agent 5383e9c1-56e1-4389-9c89-1991a77bbc3a. Open: capture sysadmin password to vault, confirm Server 2012 EOL risk with Mike and plan refresh/migration, discover and document workstations and network." },
|
||
@{ pk="clients-azcomputerguru-site"; comp="website"; state="deployed"; version="2026-04-20"; notes="WordPress on IX Web Hosting, cPanel user azcomputerguru, server 172.16.3.10 (ext 72.194.62.5). DB: azcomputerguru_acg2025, table prefix Lvkai5BQ_. cPanel session via WHM API workaround (forced-password-change loop). Vault: infrastructure/ix-server.sops.yaml." }
|
||
)
|
||
|
||
foreach ($e in $entries) {
|
||
$body = @{
|
||
project_key = $e.pk
|
||
component = $e.comp
|
||
state = $e.state
|
||
version = $e.version
|
||
notes = $e.notes
|
||
updated_by = "DESKTOP-0O8A1RL/claude-main"
|
||
} | ConvertTo-Json -Compress
|
||
$body | Out-File -FilePath "C:\Windows\Temp\coord_entry.json" -Encoding utf8 -NoNewline
|
||
$resp = curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/$($e.pk)/$($e.comp)" -H "Content-Type: application/json" -d "@C:\Windows\Temp\coord_entry.json"
|
||
$parsed = $resp | ConvertFrom-Json
|
||
Write-Host "$($e.pk)/$($e.comp): $($parsed.state ?? $parsed.detail)"
|
||
}
|
||
```
|
||
Output: Exit code 1
|
||
At line:24 char:52
|
||
|
||
+ Write-Host "$($e.pk)/$($e.comp): $($parsed.state ?? $parsed.detail) ...
|
||
|
||
+ ~~
|
||
|
||
Unexpected token '??' in expression or statement.
|
||
|
||
+ CategoryInfo : ParserError: (:) [], ParentContainsErrorRecordExcepti ... [truncated]
|
||
|
||
```
|
||
$entries = @(
|
||
@{ pk="clients-cascades-tucson"; comp="folder-redirection"; state="active"; version="2026-04-17"; notes="HIPAA folder redirection GPO rollout. Validated on Sharon Edwards (Life Enrichment) - Documents and Downloads redirect to CS-SERVER homes share. Next: second LE machine, then Desktop and other folders, then matching GPOs per department. EncryptData still false on homes share - HIPAA workitem pending." },
|
||
@{ pk="clients-valleywide"; comp="post-incident"; state="active"; version="2026-04-16"; notes="RDWeb brute-force 2026-04-13 - UDM port forward removed same day. 30-day audit confirmed no successful external logons. RDS reconfigured 2026-04-16 to bypass gateway (direct VPN), licensing pointer fixed. Pending: RDS CAL purchase, UPinP audit, scanner account password rotation." },
|
||
@{ pk="clients-scileppi-law"; comp="hardware"; state="pending"; version="2026-05-07"; notes="Sylvia Mac mini (8 GB M2) replacement - unit thrashing on Apple Mail launch. User on webmail in the meantime. Replacement quote pending (Howard 2026-05-07). GuruRMM site: Main Office (WEST-MEADOW-9025)." },
|
||
@{ pk="clients-pavon"; comp="owncloud"; state="active"; version="2026-04-29"; notes="OwnCloud VM (172.16.3.22) stable after cron stacking incident 2026-04-29. Cron protected by flock. Deferred: occ versions:cleanup pavon (30 GB junk versions in files_versions), dangling versioning_users group (harmless). GeoVision NVRs sync via OwnCloud Desktop client with virtual file placeholders." },
|
||
@{ pk="clients-lens-auto-brokerage"; comp="gururmm-deployment"; state="pending"; version="2026-04-16"; notes="GuruRMM agent deployment to 10 endpoints via GPO. Scripts and docs prepared in clients/lens-auto-brokerage/docs/ - deployment not yet executed. Site-specific MSI required from GuruRMM dashboard before GPO deployment." },
|
||
@{ pk="clients-glaztech"; comp="motw-fix"; state="pending"; version="2026-03-30"; notes="PDF preview broken on endpoints - Windows KB5066791/KB5066835 Mark of the Web issue. Three fix methods prepared in clients/glaztech/ - scripts ready, just needs to be run on endpoints via ScreenConnect or GuruRMM." },
|
||
@{ pk="clients-sombra-residential"; comp="gururmm"; state="active"; version="2026-04-30"; notes="Server2013 (Windows Server 2012 EOL) enrolled in GuruRMM 2026-04-30. Agent 5383e9c1. Open: capture sysadmin password to vault, confirm Server 2012 EOL risk with Mike and plan refresh/migration, discover and document workstations and network." },
|
||
@{ pk="clients-azcomputerguru-site"; comp="website"; state="deployed"; version="2026-04-20"; notes="WordPress on IX Web Hosting, cPanel user azcomputerguru, server 172.16.3.10 (ext 72.194.62.5). DB: azcomputerguru_acg2025, table prefix Lvkai5BQ_. cPanel session via WHM API workaround. Vault: infrastructure/ix-server.sops.yaml." }
|
||
)
|
||
|
||
foreach ($e in $entries) {
|
||
$body = @{
|
||
project_key = $e.pk
|
||
component = $e.comp
|
||
state = $e.state
|
||
version = $e.version
|
||
notes = $e.notes
|
||
updated_by = "DESKTOP-0O8A1RL/claude-main"
|
||
} | ConvertTo-Json -Compress
|
||
$body | Out-File -FilePath "C:\Windows\Temp\coord_entry.json" -Encoding utf8 -NoNewline
|
||
$resp = curl -s -X PUT "http://172.16.3.30:8001/api/coord/components/$($e.pk)/$($e.comp)" -H "Content-Type: application/json" -d "@C:\Windows\Temp\coord_entry.json"
|
||
$parsed = $resp | ConvertFrom-Json
|
||
$status = if ($parsed.state) { $parsed.state } else { $parsed.detail }
|
||
Write-Host "$($e.pk)/$($e.comp): $status"
|
||
}
|
||
```
|
||
Output: Invoke-WebRequest : Cannot bind parameter 'Headers'. Cannot convert the "Content-Type: application/json" value of type
|
||
|
||
"System.String" to type "System.Collections.IDictionary".
|
||
|
||
At line:22 char:96
|
||
|
||
+ ... ents/$($e.pk)/$($e.comp)" -H "Content-Type: application/json" -d "@C: ...
|
||
|
||
+ ... [truncated]
|
||
|
||
```
|
||
cat > /tmp/push_all.sh << 'SCRIPT'
|
||
#!/bin/bash
|
||
BASE="http://172.16.3.30:8001/api/coord/components"
|
||
push() {
|
||
local url="$BASE/$1/$2"
|
||
local file="/tmp/ce_$2.json"
|
||
cat > "$file" << ENDJSON
|
||
$3
|
||
ENDJSON
|
||
local resp=$(curl -s -X PUT "$url" -H "Content-Type: application/json" -d "@$file")
|
||
local state=$(echo "$resp" | grep -o '"state":"[^"]*"' | head -1)
|
||
local err=$(echo "$resp" | grep -o '"detail":"[^"]*"' | head -1)
|
||
echo "$1/$2: ${state:-$err}"
|
||
}
|
||
|
||
push "clients-cascades-tucson" "folder-redirection" \
|
||
'{"project_key":"clients-cascades-tucson","component":"folder-redirection","state":"active","version":"2026-04-17","notes":"HIPAA folder redirection GPO rollout. Validated on Sharon Edwards (Life Enrichment) - Documents and Downloads redirect to CS-SERVER homes share. Next: second LE machine, then Desktop and other folders, then matching GPOs per department. EncryptData still false on homes share - HIPAA workitem pending.","updated_by":"DESKTOP-0O8A1RL/claude-main"}'
|
||
|
||
push "clients-valleywide" "post-incident" \
|
||
'{"project_key":"clients-valleywide","component":"post-incident","state":"active","version":"2026-04-16","notes":"RDWeb brute-force 2026-04-13 - UDM port forward removed same day. 30-day audit confirmed no successful external logons. RDS reconfigured 2026-04-16 to bypass gateway (direct VPN), licensing pointer fixed. Pending: RDS CAL purchase, UPnP audit, scanner account password rotation.","updated_by":"DESKTOP-0O8A1RL/claude-main"}'
|
||
|
||
push "clients-scileppi-law" "hardware" \
|
||
'{"project_key":"clients-scileppi-law","component":"hardware","state":"pending","version":"2026-05-07","notes":"Sylvia Mac mini (8 GB M2) replacement - unit thrashing on Apple Mail launch. User on webmail in the meantime. Replacement quote pending (Howard 2026-05-07). GuruRMM site: Main Office (WEST-MEADOW-9025).","updated_by":"DESKTOP-0O8A1RL/claude-main"}'
|
||
|
||
push "clients-pavon" "owncloud" \
|
||
'{"project_key":"clients-pavon","component":"owncloud","state":"active","version":"2026-04-29","notes":"OwnCloud VM (172.16.3.22) stable after cron stacking incident 2026-04-29. Cron protected by flock. Deferred: occ versions:cleanup pavon (30 GB junk versions in files_versions), dangling versioning_users group (harmless). GeoVision NVRs at Curves and Raiders sync via OwnCloud Desktop with virtual file placeholders.","updated_by":"DESKTOP-0O8A1RL/claude-main"}'
|
||
|
||
push "clients-lens-auto-brokerage" "gururmm-deployment" \
|
||
'{"project_key":"clients-lens-auto-brokerage","component":"gururmm-deployment","state":"pending","version":"2026-04-16","notes":"GuruRMM agent deployment to 10 endpoints via GPO. Scripts and docs prepared in clients/lens-auto-brokerage/docs/ - deployment not yet executed. Site-specific MSI required from GuruRMM dashboard before GPO deployment.","updated_by":"DESKTOP-0O8A1RL/claude-main"}'
|
||
|
||
push "clients-glaztech" "motw-fix" \
|
||
'{"project_key":"clients-glaztech","component":"motw-fix","state":"pending","version":"2026-03-30","notes":"PDF preview broken on endpoints - Windows KB5066791/KB5066835 Mark of the Web issue. Three fix methods prepared in clients/glaztech/ - scripts ready, just needs to be run on endpoints via ScreenConnect or GuruRMM.","updated_by":"DESKTOP-0O8A1RL/claude-main"}'
|
||
|
||
push "clients-sombra-residential" "gururmm" \
|
||
'{"project_key":"clients-sombra-residential","component":"gururmm","state":"active","version":"2026-04-30","notes":"Server2013 (Windows Server 2012 EOL) enrolled in GuruRMM 2026-04-30. Agent 5383e9c1. Open: capture sysadmin password to vault, confirm Server 2012 EOL risk with Mike and plan refresh/migration, discover and document workstations and network.","updated_by":"DESKTOP-0O8A1RL/claude-main"}'
|
||
|
||
push "clients-azcomputerguru-site" "website" \
|
||
'{"project_key":"clients-azcomputerguru-site","component":"website","state":"deployed","version":"2026-04-20","notes":"WordPress on IX Web Hosting, cPanel user azcomputerguru, server 172.16.3.10 (ext 72.194.62.5). DB: azcomputerguru_acg2025, table prefix Lvkai5BQ_. cPanel session via WHM API workaround (forced-password-change loop). Vault: infrastructure/ix-server.sops.yaml.","updated_by":"DESKTOP-0O8A1RL/claude-main"}'
|
||
|
||
SCRIPT
|
||
bash /tmp/push_all.sh
|
||
```
|
||
Output: clients-cascades-tucson/folder-redirection: "state":"active"
|
||
clients-valleywide/post-incident: "state":"active"
|
||
clients-scileppi-law/hardware: "state":"pending"
|
||
clients-pavon/owncloud: "state":"active"
|
||
clients-lens-auto-brokerage/gururmm-deployment: "state":"pending"
|
||
clients-glaztech/motw-fix: "stat ... [truncated]
|
||
|
||
```
|
||
curl -s "http://172.16.3.30:8001/api/coord/status" | grep -o '"project_key":"[^"]*","component":"[^"]*","state":"[^"]*"' | sort
|
||
```
|
||
Output: "project_key":"claudetools","component":"api","state":"deployed"
|
||
"project_key":"claudetools","component":"coord_api","state":"deployed"
|
||
"project_key":"claudetools","component":"db_migrations","state":"deployed"
|
||
"project_key":"clients-azcomputerguru-site","component":"website","state":"deployed"
|
||
"pro ... [truncated]
|
||
|
||
```
|
||
test -f D:/vault/scripts/vault.sh && echo "vault OK" || echo "vault MISSING"
|
||
ls D:/vault/msp-tools/ 2>/dev/null | grep -i computerguru | head -10
|
||
```
|
||
Output: vault OK
|
||
computerguru-defender-addon.sops.yaml
|
||
computerguru-exchange-operator.sops.yaml
|
||
computerguru-intune-manager.sops.yaml
|
||
computerguru-management.sops.yaml
|
||
computerguru-security-investigator.sops.yaml
|
||
computerguru-tenant-admin.sops.yaml
|
||
computerguru-user-manager.sops.yaml
|
||
|
||
```
|
||
TENANT="cf9edb61-3be2-4d58-a0fb-f92eddfcdd37"
|
||
mkdir -p /tmp/remediation-tool/$TENANT/investigator
|
||
|
||
# Check for cached token
|
||
if [ -f /tmp/remediation-tool/$TENANT/investigator.jwt ]; then
|
||
AGE=$(find /tmp/remediation-tool/$TENANT/investigator.jwt -mmin -55 2>/dev/null)
|
||
if [ -n "$AGE" ]; then echo "using cached token"; cat /tmp/remediation-tool/$TENANT/investigator.jwt; fi
|
||
fi
|
||
|
||
# Get fresh token via investigator app
|
||
CLIENT_ID=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_id)
|
||
CLIENT_SECRET=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_secret)
|
||
|
||
TOKEN=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$CLIENT_ID&client_secret=$CLIENT_SECRET&scope=https://graph.microsoft.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"access_token":"[^"]*"' | cut -d'"' -f4)
|
||
|
||
if [ -n "$TOKEN" ]; then
|
||
echo "$TOKEN" > /tmp/remediation-tool/$TENANT/investigator.jwt
|
||
echo "token OK (${#TOKEN} chars)"
|
||
else
|
||
echo "token FAILED"
|
||
fi
|
||
```
|
||
Output: token FAILED
|
||
|
||
```
|
||
TENANT="cf9edb61-3be2-4d58-a0fb-f92eddfcdd37"
|
||
CLIENT_ID=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_id)
|
||
CLIENT_SECRET=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_secret)
|
||
echo "client_id: $CLIENT_ID"
|
||
|
||
# Full token response to see error
|
||
curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$CLIENT_ID&client_secret=$CLIENT_SECRET&scope=https://graph.microsoft.com/.default&grant_type=client_credentials"
|
||
```
|
||
Output: client_id: bfbc12a4-f0dd-4e12-b06d-997e7271e10c
|
||
{"error":"invalid_client","error_description":"AADSTS7000229: The client application bfbc12a4-f0dd-4e12-b06d-997e7271e10c is missing service principal in the tenant cf9edb61-3be2-4d58-a0fb-f92eddfcdd37. See instructions here: https://go.microsoft.com/f ... [truncated]
|
||
|
||
```
|
||
bash D:/vault/scripts/vault.sh search "grabb" 2>/dev/null
|
||
bash D:/vault/scripts/vault.sh search "grabbanddurando" 2>/dev/null
|
||
```
|
||
Output: clients/grabb-durando/data-site.sops.yaml:name: Grabb & Durando Data Site
|
||
clients/grabb-durando/data-site.sops.yaml:host: data.grabbanddurando.com
|
||
clients/grabb-durando/data-site.sops.yaml: - grabb-durando
|
||
clients/grabb-durando/data-site.sops.yaml:host: data.grabbanddurando.com
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
CLIENT_ID=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_id)
|
||
|
||
# Test if our app is already consented in this tenant
|
||
curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$CLIENT_ID&client_secret=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_secret)&scope=https://graph.microsoft.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"error":"[^"]*"\|"token_type":"[^"]*"'
|
||
```
|
||
Output: "token_type":"Bearer"
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
CLIENT_ID=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_id)
|
||
CLIENT_SECRET=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_secret)
|
||
|
||
TOKEN=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$CLIENT_ID&client_secret=$CLIENT_SECRET&scope=https://graph.microsoft.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"access_token":"[^"]*"' | cut -d'"' -f4)
|
||
|
||
mkdir -p /tmp/remediation-tool/$TENANT
|
||
echo "$TOKEN" > /tmp/remediation-tool/$TENANT/investigator.jwt
|
||
|
||
# Search for Jeannette and Svetlana
|
||
echo "=== Jeannette ==="
|
||
curl -s -H "Authorization: Bearer $TOKEN" \
|
||
"https://graph.microsoft.com/v1.0/users?\$filter=startswith(displayName,'Jeannette') or startswith(givenName,'Jeannette')&\$select=id,displayName,userPrincipalName,mail,accountEnabled" \
|
||
| grep -o '"displayName":"[^"]*"\|"userPrincipalName":"[^"]*"\|"accountEnabled":[^,}]*'
|
||
|
||
echo "=== Svetlana ==="
|
||
curl -s -H "Authorization: Bearer $TOKEN" \
|
||
"https://graph.microsoft.com/v1.0/users?\$filter=startswith(displayName,'Svetlana') or startswith(givenName,'Svetlana')&\$select=id,displayName,userPrincipalName,mail,accountEnabled" \
|
||
| grep -o '"displayName":"[^"]*"\|"userPrincipalName":"[^"]*"\|"accountEnabled":[^,}]*'
|
||
```
|
||
Output: === Jeannette ===
|
||
=== Svetlana ===
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
EXO_ID=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_id)
|
||
EXO_SECRET=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_secret)
|
||
|
||
echo "exchange-op client_id: $EXO_ID"
|
||
|
||
# Test token for Exchange scope
|
||
RESP=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$EXO_ID&client_secret=$EXO_SECRET&scope=https://outlook.office365.com/.default&grant_type=client_credentials")
|
||
|
||
echo "$RESP" | grep -o '"error":"[^"]*"\|"token_type":"[^"]*"\|"error_description":"[^"]*"' | head -3
|
||
```
|
||
Output: exchange-op client_id: b43e7342-5b4b-492f-890f-bb5a4f7f40e9
|
||
"token_type":"Bearer"
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
EXO_ID=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_id)
|
||
EXO_SECRET=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_secret)
|
||
|
||
EXO_TOKEN=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$EXO_ID&client_secret=$EXO_SECRET&scope=https://outlook.office365.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"access_token":"[^"]*"' | cut -d'"' -f4)
|
||
|
||
echo "token: ${#EXO_TOKEN} chars"
|
||
|
||
# Step 1: FullAccess on the mailbox
|
||
echo "=== Add-MailboxPermission (FullAccess) ==="
|
||
curl -s -X POST "https://outlook.office365.com/adminapi/beta/$TENANT/InvokeCommand" \
|
||
-H "Authorization: Bearer $EXO_TOKEN" \
|
||
-H "Content-Type: application/json" \
|
||
-d '{
|
||
"CmdletInput": {
|
||
"CmdletName": "Add-MailboxPermission",
|
||
"Parameters": {
|
||
"Identity": "slarionova@grabblaw.com",
|
||
"User": "jsosa@grabblaw.com",
|
||
"AccessRights": "FullAccess",
|
||
"InheritanceType": "All",
|
||
"AutoMapping": true
|
||
}
|
||
}
|
||
}'
|
||
```
|
||
Output: token: 2172 chars
|
||
=== Add-MailboxPermission (FullAccess) ===
|
||
... [truncated]
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
EXO_TOKEN=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_id)&client_secret=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_secret)&scope=https://outlook.office365.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"access_token":"[^"]*"' | cut -d'"' -f4)
|
||
|
||
RESP=$(curl -s -w "\nHTTP:%{http_code}" -X POST "https://outlook.office365.com/adminapi/beta/$TENANT/InvokeCommand" \
|
||
-H "Authorization: Bearer $EXO_TOKEN" \
|
||
-H "Content-Type: application/json" \
|
||
-d '{
|
||
"CmdletInput": {
|
||
"CmdletName": "Add-MailboxPermission",
|
||
"Parameters": {
|
||
"Identity": "slarionova@grabblaw.com",
|
||
"User": "jsosa@grabblaw.com",
|
||
"AccessRights": "FullAccess",
|
||
"InheritanceType": "All",
|
||
"AutoMapping": true
|
||
}
|
||
}
|
||
}')
|
||
|
||
echo "$RESP" | tr -s ' ' | tail -20
|
||
```
|
||
Output: /usr/bin/bash: line 41: warning: command substitution: ignored null byte in input
|
||
|
||
HTTP:403
|
||
|
||
```
|
||
# Refresh investigator token (may have expired during coord API work)
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
TOKEN=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_id)&client_secret=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-security-investigator.sops.yaml credentials.client_secret)&scope=https://graph.microsoft.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"access_token":"[^"]*"' | cut -d'"' -f4)
|
||
echo "$TOKEN" > /tmp/remediation-tool/$TENANT/investigator.jwt
|
||
|
||
# Look up Exchange Operator SP in this tenant
|
||
curl -s -H "Authorization: Bearer $TOKEN" \
|
||
"https://graph.microsoft.com/v1.0/servicePrincipals?\$filter=appId eq 'b43e7342-5b4b-492f-890f-bb5a4f7f40e9'&\$select=id,displayName,appId" \
|
||
| grep -o '"id":"[^"]*"\|"displayName":"[^"]*"'
|
||
```
|
||
Output: (Bash completed with no output)
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
TA_ID=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-tenant-admin.sops.yaml credentials.client_id)
|
||
TA_SECRET=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-tenant-admin.sops.yaml credentials.client_secret)
|
||
|
||
curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$TA_ID&client_secret=$TA_SECRET&scope=https://graph.microsoft.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"error":"[^"]*"\|"token_type":"[^"]*"'
|
||
```
|
||
Output: "token_type":"Bearer"
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
EXO_TOKEN=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_id)&client_secret=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_secret)&scope=https://outlook.office365.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"access_token":"[^"]*"' | cut -d'"' -f4)
|
||
|
||
echo "=== Step 1: FullAccess on mailbox ==="
|
||
curl -s -w "\nHTTP:%{http_code}" -X POST "https://outlook.office365.com/adminapi/beta/$TENANT/InvokeCommand" \
|
||
-H "Authorization: Bearer $EXO_TOKEN" \
|
||
-H "Content-Type: application/json" \
|
||
-d '{"CmdletInput":{"CmdletName":"Add-MailboxPermission","Parameters":{"Identity":"slarionova@grabblaw.com","User":"jsosa@grabblaw.com","AccessRights":"FullAccess","InheritanceType":"All","AutoMapping":true}}}' \
|
||
| grep -v "^[[:space:]]*$" | tail -5
|
||
```
|
||
Output: === Step 1: FullAccess on mailbox ===
|
||
{"@odata.context":"https://outlook.office365.com/adminapi/beta/032b383e-96e4-491b-880d-3fd3295672c3/$metadata#Collection(Exchange.GenericHashTable)","adminapi.warnings@odata.type":"#Collection(String)","@adminapi.warnings":[],"value":[{"AccessRights@odata.type": ... [truncated]
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
EXO_TOKEN=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_id)&client_secret=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_secret)&scope=https://outlook.office365.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"access_token":"[^"]*"' | cut -d'"' -f4)
|
||
|
||
echo "=== Step 2: Editor on Tasks folder ==="
|
||
curl -s -w "\nHTTP:%{http_code}" -X POST "https://outlook.office365.com/adminapi/beta/$TENANT/InvokeCommand" \
|
||
-H "Authorization: Bearer $EXO_TOKEN" \
|
||
-H "Content-Type: application/json" \
|
||
-d '{"CmdletInput":{"CmdletName":"Add-MailboxFolderPermission","Parameters":{"Identity":"slarionova@grabblaw.com:\\Tasks","User":"jsosa@grabblaw.com","AccessRights":"Editor"}}}' \
|
||
| grep -v "^[[:space:]]*$" | tail -5
|
||
```
|
||
Output: === Step 2: Editor on Tasks folder ===
|
||
{"error":{"code":"BadRequest","message":"Invalid JSON. An unrecognized escape sequence '\\T' was found in a JSON string value.","innererror":{"message":"Invalid JSON. An unrecognized escape sequence '\\T' was found in a JSON string value.","type":"Microsoft.ODa ... [truncated]
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
|
||
# Write JSON to file to avoid shell escaping issues
|
||
cat > /tmp/tasks_perm.json << 'EOF'
|
||
{"CmdletInput":{"CmdletName":"Add-MailboxFolderPermission","Parameters":{"Identity":"slarionova@grabblaw.com:\\Tasks","User":"jsosa@grabblaw.com","AccessRights":"Editor"}}}
|
||
EOF
|
||
|
||
# Verify the JSON content looks right
|
||
echo "JSON body:"
|
||
cat /tmp/tasks_perm.json
|
||
|
||
EXO_TOKEN=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_id)&client_secret=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_secret)&scope=https://outlook.office365.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"access_token":"[^"]*"' | cut -d'"' -f4)
|
||
|
||
echo ""
|
||
echo "=== Add-MailboxFolderPermission (Tasks) ==="
|
||
curl -s -w "\nHTTP:%{http_code}" -X POST "https://outlook.office365.com/adminapi/beta/$TENANT/InvokeCommand" \
|
||
-H "Authorization: Bearer $EXO_TOKEN" \
|
||
-H "Content-Type: application/json" \
|
||
-d @/tmp/tasks_perm.json | grep -v "^[[:space:]]*$" | tail -5
|
||
```
|
||
Output: JSON body:
|
||
{"CmdletInput":{"CmdletName":"Add-MailboxFolderPermission","Parameters":{"Identity":"slarionova@grabblaw.com:\Tasks","User":"jsosa@grabblaw.com","AccessRights":"Editor"}}}
|
||
|
||
=== Add-MailboxFolderPermission (Tasks) ===
|
||
{"error":{"code":"BadRequest","message":"Invalid JSON. An unrecognized e ... [truncated]
|
||
|
||
```
|
||
TENANT="032b383e-96e4-491b-880d-3fd3295672c3"
|
||
|
||
# Build JSON with jq to guarantee correct escaping
|
||
jq -n \
|
||
--arg identity 'slarionova@grabblaw.com:\Tasks' \
|
||
--arg user 'jsosa@grabblaw.com' \
|
||
'{"CmdletInput":{"CmdletName":"Add-MailboxFolderPermission","Parameters":{"Identity":$identity,"User":$user,"AccessRights":"Editor"}}}' \
|
||
> /tmp/tasks_perm.json
|
||
|
||
echo "JSON (verify backslash):"
|
||
cat /tmp/tasks_perm.json
|
||
|
||
EXO_TOKEN=$(curl -s -X POST "https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token" \
|
||
-d "client_id=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_id)&client_secret=$(bash D:/vault/scripts/vault.sh get-field msp-tools/computerguru-exchange-operator.sops.yaml credentials.client_secret)&scope=https://outlook.office365.com/.default&grant_type=client_credentials" \
|
||
| grep -o '"access_token":"[^"]*"' | cut -d'"' -f4)
|
||
|
||
echo ""
|
||
curl -s -w "\nHTTP:%{http_code}" -X POST "https://outlook.office365.com/adminapi/beta/$TENANT/InvokeCommand" \
|
||
-H "Authorization: Bearer $EXO_TOKEN" \
|
||
-H "Content-Type: application/json" \
|
||
-d @/tmp/tasks_perm.json | grep -v "^[[:space:]]*$" | tail -5
|
||
```
|
||
Output: JSON (verify backslash):
|
||
{
|
||
|
||
"CmdletInput": {
|
||
|
||
"CmdletName": "Add-MailboxFolderPermission",
|
||
|
||
"Parameters": {
|
||
|
||
"Identity": "slarionova@grabblaw.com:\\Tasks",
|
||
|
||
"User": "jsosa@grabblaw.com",
|
||
|
||
"AccessRights": "Editor"
|
||
|
||
}
|
||
|
||
}
|
||
|
||
}
|
||
|
||
|
||
{"@odata.context":"https://outlook.office3 ... [truncated]
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
|
||
curl -s "${BASE}/customers?query=grabb&per_page=10&api_key=${API_KEY}" | jq '[.customers[] | {id, name, prepay_hours}]'
|
||
```
|
||
Output: [
|
||
|
||
{
|
||
|
||
"id": 14232794,
|
||
|
||
"name": null,
|
||
|
||
"prepay_hours": null
|
||
|
||
}
|
||
|
||
]
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
|
||
curl -s "${BASE}/customers/14232794?api_key=${API_KEY}" | jq '{id: .customer.id, name: .customer.name, business_name: .customer.business_name, prepay_hours: .customer.prepay_hours, contacts: [.customer.contacts[] | {id, name, email}]}'
|
||
```
|
||
Output: {
|
||
|
||
"id": 14232794,
|
||
|
||
"name": null,
|
||
|
||
"business_name": "Grabb & Durando Law Office",
|
||
|
||
"prepay_hours": "23.75",
|
||
|
||
"contacts": [
|
||
|
||
{
|
||
|
||
"id": 785116,
|
||
|
||
"name": "Jeanette Sosa",
|
||
|
||
"email": "jsosa@grabblaw.com"
|
||
|
||
},
|
||
|
||
{
|
||
|
||
"id": 398101,
|
||
|
||
"name": "Jeff Williams", ... [truncated]
|
||
|
||
```
|
||
if curl -s -m 2 http://localhost:11434/api/tags >/dev/null 2>&1; then
|
||
echo "local"
|
||
elif curl -s -m 3 http://100.92.127.64:11434/api/tags >/dev/null 2>&1; then
|
||
echo "tailscale"
|
||
else
|
||
echo "unavailable"
|
||
fi
|
||
```
|
||
Output: local
|
||
|
||
```
|
||
mkdir -p "D:/claudetools/.claude/tmp"
|
||
cat > "D:/claudetools/.claude/tmp/ollama_prompt.txt" << 'ENDPROMPT'
|
||
You are a Syncro PSA billing assistant. Draft a resolution comment and billing description.
|
||
|
||
TICKET: M365 - Mailbox and task access delegation
|
||
CUSTOMER: Grabb & Durando Law Office
|
||
TECH: Mike Swanson
|
||
WORK DONE: Granted Jeannette Sosa (jsosa@grabblaw.com) FullAccess to Svetlana Larionova's (slarionova@grabblaw.com) mailbox and Editor permission on Svetlana's Tasks folder in M365/Exchange Online. Work performed via Exchange Online admin API. Outlook will auto-map Svetlana's mailbox into Jeannette's profile on next Outlook restart.
|
||
LABOR: Labor - Remote Business — 30 min (0.5 hrs) @ $150.00/hr = $75.00 (prepaid — block deduction)
|
||
|
||
Rules:
|
||
- comment_body must use <br> for line breaks. Do NOT use <ul> or <li> — they do not render.
|
||
- Keep it professional and factual. No filler phrases.
|
||
- line_item_description is one plain-text line, billing-facing.
|
||
|
||
Return ONLY valid JSON, no prose before or after:
|
||
{
|
||
"comment_subject": "Resolution",
|
||
"comment_body": "<HTML with <br> line breaks>",
|
||
"line_item_description": "<one line plain text>",
|
||
"preview": "<2-3 sentence plain-text summary for tech review>"
|
||
}
|
||
ENDPROMPT
|
||
|
||
DRAFT=$(PROMPT_FILE="D:/claudetools/.claude/tmp/ollama_prompt.txt" py -c "
|
||
import os, urllib.request, json, sys
|
||
prompt = open(os.environ['PROMPT_FILE']).read()
|
||
body = json.dumps({
|
||
'model': 'qwen3:14b',
|
||
'messages': [{'role': 'user', 'content': prompt}],
|
||
'stream': False,
|
||
'think': False
|
||
}).encode()
|
||
res = json.loads(urllib.request.urlopen(
|
||
urllib.request.Request('http://localhost:11434/api/chat', body), timeout=60
|
||
).read())
|
||
print(res['message']['content'])
|
||
")
|
||
echo "$DRAFT"
|
||
```
|
||
Output: {
|
||
|
||
"comment_subject": "Resolution",
|
||
|
||
"comment_body": "Access delegation completed for Jeannette Sosa to Svetlana Larionova's mailbox and Tasks folder.<br>FullAccess permission was granted to the mailbox via Exchange Online admin API.<br>Editor permission was applied to the Tasks folder.<br>Outlo ... [truncated]
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
|
||
echo "=== Step 1: Create ticket ==="
|
||
TICKET_RESP=$(curl -s -X POST "${BASE}/tickets?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<'JSON'
|
||
{
|
||
"customer_id": 14232794,
|
||
"subject": "M365 - Mailbox and task access for Jeannette Sosa",
|
||
"problem_type": "Software",
|
||
"status": "In Progress",
|
||
"priority": "2 Normal",
|
||
"user_id": 1735,
|
||
"contact_id": 785116
|
||
}
|
||
JSON
|
||
)
|
||
TICKET_ID=$(echo "$TICKET_RESP" | jq -r '.ticket.id')
|
||
echo "Ticket ID: $TICKET_ID"
|
||
echo "$TICKET_RESP" | jq '{id: .ticket.id, subject: .ticket.subject, status: .ticket.status}'
|
||
```
|
||
Output: === Step 1: Create ticket ===
|
||
Ticket ID: 110168238
|
||
{
|
||
|
||
"id": 110168238,
|
||
|
||
"subject": "M365 - Mailbox and task access for Jeannette Sosa",
|
||
|
||
"status": "In Progress"
|
||
|
||
}
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
TICKET_ID=110168238
|
||
|
||
echo "=== Step 2: Resolution comment ==="
|
||
COMMENT_RESP=$(curl -s -X POST "${BASE}/tickets/${TICKET_ID}/comment?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<'JSON'
|
||
{
|
||
"subject": "Resolution",
|
||
"body": "Access delegation completed for Jeannette Sosa to Svetlana Larionova's mailbox and Tasks folder.<br>FullAccess permission was granted to the mailbox via Exchange Online admin API.<br>Editor permission was applied to the Tasks folder.<br>Outlook will auto-map the mailbox on the next restart.<br>Work performed remotely and completed within 0.5 hours.",
|
||
"hidden": false,
|
||
"do_not_email": false
|
||
}
|
||
JSON
|
||
)
|
||
echo "$COMMENT_RESP" | jq '{id: .comment.id, subject: .comment.subject}'
|
||
```
|
||
Output: === Step 2: Resolution comment ===
|
||
{
|
||
|
||
"id": 410534920,
|
||
|
||
"subject": "Resolution"
|
||
|
||
}
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
TICKET_ID=110168238
|
||
|
||
echo "=== Step 3: Create timer entry (30 min remote) ==="
|
||
TIMER_RESP=$(curl -s -X POST "${BASE}/tickets/${TICKET_ID}/timer_entry?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<'JSON'
|
||
{
|
||
"start_at": "2026-05-12T09:00:00-07:00",
|
||
"end_at": "2026-05-12T09:30:00-07:00",
|
||
"notes": "Granted FullAccess to mailbox and Editor access to Tasks folder via Exchange Online admin API",
|
||
"billable": true,
|
||
"product_id": 1190473
|
||
}
|
||
JSON
|
||
)
|
||
TIMER_ID=$(echo "$TIMER_RESP" | jq -r '.id')
|
||
echo "Timer ID: $TIMER_ID"
|
||
echo "$TIMER_RESP" | jq '{id: .id, product_id: .product_id, billable: .billable, active_duration: .active_duration}'
|
||
```
|
||
Output: === Step 3: Create timer entry (30 min remote) ===
|
||
Timer ID: 39158600
|
||
{
|
||
|
||
"id": 39158600,
|
||
|
||
"product_id": 1190473,
|
||
|
||
"billable": true,
|
||
|
||
"active_duration": 1800
|
||
|
||
}
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
TICKET_ID=110168238
|
||
TIMER_ID=39158600
|
||
|
||
echo "=== Step 4: Charge timer ==="
|
||
CHARGE_RESP=$(curl -s -X POST "${BASE}/tickets/${TICKET_ID}/charge_timer_entry?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<JSON
|
||
{"timer_entry_id": ${TIMER_ID}}
|
||
JSON
|
||
)
|
||
echo "$CHARGE_RESP" | jq '{id: .id, recorded: .recorded, ticket_line_item_id: .ticket_line_item_id}'
|
||
|
||
echo ""
|
||
echo "=== Step 5: Verify line item price_retail ==="
|
||
curl -s "${BASE}/tickets/${TICKET_ID}?api_key=${API_KEY}" | \
|
||
jq '.ticket.line_items[] | {id, product_id, quantity, price_retail, name}'
|
||
```
|
||
Output: === Step 4: Charge timer ===
|
||
{
|
||
|
||
"id": 39158600,
|
||
|
||
"recorded": true,
|
||
|
||
"ticket_line_item_id": 42402414
|
||
|
||
}
|
||
|
||
|
||
=== Step 5: Verify line item price_retail ===
|
||
{
|
||
|
||
"id": 42402414,
|
||
|
||
"product_id": 1190473,
|
||
|
||
"quantity": "0.5",
|
||
|
||
"price_retail": 150.0,
|
||
|
||
"name": "Labor - Remote Business"
|
||
|
||
}
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
TICKET_ID=110168238
|
||
CUST_ID=14232794
|
||
|
||
echo "=== Step 6: Create invoice ==="
|
||
INV_RESP=$(curl -s -X POST "${BASE}/invoices?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<JSON
|
||
{"ticket_id": ${TICKET_ID}, "customer_id": ${CUST_ID}, "category": "Standard"}
|
||
JSON
|
||
)
|
||
INVOICE_ID=$(echo "$INV_RESP" | jq -r '.invoice.id')
|
||
echo "Invoice ID: $INVOICE_ID"
|
||
|
||
echo ""
|
||
echo "=== Step 7: Verify invoice ==="
|
||
curl -s "${BASE}/invoices/${INVOICE_ID}?api_key=${API_KEY}" | \
|
||
jq '{id: .invoice.id, total: .invoice.total, line_items: [.invoice.line_items[] | {name, quantity, price_retail}]}'
|
||
|
||
echo ""
|
||
echo "=== Step 8: Set ticket to Invoiced ==="
|
||
curl -s -X PUT "${BASE}/tickets/${TICKET_ID}?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<'JSON'
|
||
{"status": "Invoiced"}
|
||
JSON | jq '{id: .ticket.id, status: .ticket.status}'
|
||
|
||
echo ""
|
||
echo "=== Step 9: Confirm prepay deduction ==="
|
||
curl -s "${BASE}/customers/${CUST_ID}?api_key=${API_KEY}" | jq '{prepay_hours: .customer.prepay_hours}'
|
||
```
|
||
Output: === Step 6: Create invoice ===
|
||
Invoice ID: 1650273393
|
||
|
||
=== Step 7: Verify invoice ===
|
||
{
|
||
|
||
"id": 1650273393,
|
||
|
||
"total": "0.0",
|
||
|
||
"line_items": [
|
||
|
||
{
|
||
|
||
"name": "Ticket Work: Michael Swanson Tue 05-12-26 09:00 AM - Tue 05-12-26 09:30 AM Granted FullAccess to mailbox and Editor access to Task ... [truncated]
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
TICKET_ID=110168238
|
||
CUST_ID=14232794
|
||
|
||
echo "=== Set ticket Invoiced ==="
|
||
STATUS_RESP=$(curl -s -X PUT "${BASE}/tickets/${TICKET_ID}?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<'JSON'
|
||
{"status": "Invoiced"}
|
||
JSON
|
||
)
|
||
echo "$STATUS_RESP" | jq '{id: .ticket.id, status: .ticket.status}'
|
||
|
||
echo ""
|
||
echo "=== Confirm prepay deduction ==="
|
||
curl -s "${BASE}/customers/${CUST_ID}?api_key=${API_KEY}" | jq '{prepay_hours: .customer.prepay_hours}'
|
||
```
|
||
Output: === Set ticket Invoiced ===
|
||
{
|
||
|
||
"id": 110168238,
|
||
|
||
"status": "Invoiced"
|
||
|
||
}
|
||
|
||
|
||
=== Confirm prepay deduction ===
|
||
{
|
||
|
||
"prepay_hours": "23.25"
|
||
|
||
}
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
|
||
curl -s "${BASE}/customers?query=peaceful+spirit&per_page=10&api_key=${API_KEY}" | jq '[.customers[] | {id, name, business_name}]'
|
||
```
|
||
Output: [
|
||
|
||
{
|
||
|
||
"id": 278525,
|
||
|
||
"name": null,
|
||
|
||
"business_name": "Peaceful Spirit Massage"
|
||
|
||
}
|
||
|
||
]
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
|
||
# Get recent tickets for Peaceful Spirit
|
||
curl -s "${BASE}/tickets?customer_id=278525&per_page=10&api_key=${API_KEY}" | \
|
||
jq '[.tickets[] | {id, subject, status, created_at}] | sort_by(.created_at) | reverse | .[0:5]'
|
||
```
|
||
Output: [
|
||
|
||
{
|
||
|
||
"id": 109828585,
|
||
|
||
"subject": "Remote - Permissions issue",
|
||
|
||
"status": "Invoiced",
|
||
|
||
"created_at": "2026-05-04T10:44:14.151-07:00"
|
||
|
||
},
|
||
|
||
{
|
||
|
||
"id": 107296381,
|
||
|
||
"subject": "Onsite - Install USW",
|
||
|
||
"status": "Invoiced",
|
||
|
||
"created_at": "2026-03-06T11:27:15.529-07: ... [truncated]
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
curl -s "${BASE}/customers/278525?api_key=${API_KEY}" | jq '{name: .customer.business_name, contacts: [.customer.contacts[] | {id, name: (.firstname + " " + .lastname), email, phone}]}'
|
||
```
|
||
Output: {
|
||
|
||
"name": "Peaceful Spirit Massage",
|
||
|
||
"contacts": [
|
||
|
||
{
|
||
|
||
"id": 3507,
|
||
|
||
"name": " ",
|
||
|
||
"email": "info@bestmassageintucson.com",
|
||
|
||
"phone": null
|
||
|
||
}
|
||
|
||
]
|
||
|
||
}
|
||
|
||
```
|
||
if curl -s -m 2 http://localhost:11434/api/tags >/dev/null 2>&1; then echo "LOCAL"; else echo "UNAVAILABLE"; fi
|
||
```
|
||
Output: LOCAL
|
||
|
||
```
|
||
PROMPT='You are a Syncro PSA tech assistant. Draft an initial issue description for a bug ticket.
|
||
|
||
TICKET: Bug - IKEv2 pre-login VPN not auto-connecting at Windows logon screen
|
||
CUSTOMER: Peaceful Spirit Massage
|
||
TECH: Mike Swanson
|
||
WORK DONE: Deployed IKEv2 VPN (AllUserConnection profile, machine certificate auth) to enable pre-login VPN that auto-connects at the Windows logon screen. On MaraHomeNew, the machine cert is installed and rasdial succeeds from a user session. However, the AllUserConnection profile auto-connect behavior at the Windows logon screen (before user login) has not been confirmed working. Additionally, Maras-HP-Laptop and PST-SURFACE have machine cert PFX files generated but not yet deployed.
|
||
|
||
OUTSTANDING:
|
||
- Pre-login VPN auto-connect at Windows logon screen: not yet tested/confirmed on any machine
|
||
- Maras-HP-Laptop: machine cert PFX generated but not deployed
|
||
- PST-SURFACE: machine cert PFX generated but not deployed
|
||
|
||
Rules:
|
||
- Use <br> for line breaks. Do NOT use <ul> or <li>.
|
||
- Professional and factual. No filler phrases.
|
||
|
||
Return ONLY valid JSON, no prose before or after:
|
||
{
|
||
"subject": "Initial Issue",
|
||
"body": "<HTML with <br> line breaks>",
|
||
"preview": "<2-3 sentence plain-text summary for tech review>"
|
||
}'
|
||
|
||
DRAFT=$(py -c "
|
||
import urllib.request, json, sys
|
||
prompt = '''$PROMPT'''
|
||
body = json.dumps({
|
||
'model': 'qwen3:14b',
|
||
'messages': [{'role': 'user', 'content': prompt}],
|
||
'stream': False,
|
||
'think': False
|
||
}).encode()
|
||
res = json.loads(urllib.request.urlopen(
|
||
urllib.request.Request('http://localhost:11434/api/chat', body), timeout=90
|
||
).read())
|
||
print(res['message']['content'])
|
||
")
|
||
echo "$DRAFT"
|
||
```
|
||
Output: {
|
||
|
||
"subject": "Initial Issue",
|
||
|
||
"body": "Bug - IKEv2 pre-login VPN not auto-connecting at Windows logon screen<br><br>TICKET: Bug - IKEv2 pre-login VPN not auto-connecting at Windows logon screen<br>CUSTOMER: Peaceful Spirit Massage<br>TECH: Mike Swanson<br>WORK DONE: Deployed IKEv2 VPN (AllUser ... [truncated]
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
|
||
RESP=$(curl -s -X POST "${BASE}/tickets?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<'JSON'
|
||
{
|
||
"customer_id": 278525,
|
||
"subject": "Bug - IKEv2 pre-login VPN not auto-connecting at Windows logon screen",
|
||
"problem_type": "Software",
|
||
"status": "New",
|
||
"priority": "2 Normal",
|
||
"user_id": 1735,
|
||
"contact_id": 3507,
|
||
"do_not_email": true
|
||
}
|
||
JSON
|
||
)
|
||
echo "$RESP" | jq '{ticket_id: .ticket.id, number: .ticket.number, subject: .ticket.subject, status: .ticket.status}'
|
||
```
|
||
Output: {
|
||
|
||
"ticket_id": 110169036,
|
||
|
||
"number": 32271,
|
||
|
||
"subject": "Bug - IKEv2 pre-login VPN not auto-connecting at Windows logon screen",
|
||
|
||
"status": "New"
|
||
|
||
}
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
|
||
COMMENT_RESP=$(curl -s -X POST "${BASE}/tickets/110169036/comment?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<'JSON'
|
||
{
|
||
"subject": "Initial Issue",
|
||
"body": "IKEv2 VPN (AllUserConnection profile, machine certificate auth) was deployed on 2026-05-11 to enable auto-connect at the Windows logon screen before user login. Current state:<br><br>MaraHomeNew: Machine cert installed (thumbprint D067E07B), rasdial succeeds from a user session. Pre-login auto-connect at the Windows logon screen has not been tested or confirmed.<br><br>Maras-HP-Laptop: Machine cert PFX generated (thumbprint 4CADDE8F, CA RequestId 66) — not yet deployed to this machine.<br><br>PST-SURFACE: Machine cert PFX generated (thumbprint 197FF22A, CA RequestId 67) — not yet deployed to this machine.<br><br>Outstanding work:<br>- Confirm AllUserConnection profile auto-connects at Windows logon screen on all 3 machines<br>- Deploy machine cert PFX to Maras-HP-Laptop via RMM (agent 13cb3629)<br>- Deploy machine cert PFX to PST-SURFACE via RMM (agent 4a993b61)",
|
||
"hidden": false,
|
||
"do_not_email": true
|
||
}
|
||
JSON
|
||
)
|
||
echo "$COMMENT_RESP" | jq '{comment_id: .comment.id, subject: .comment.subject}'
|
||
```
|
||
Output: {
|
||
|
||
"comment_id": 410538534,
|
||
|
||
"subject": "Initial Issue"
|
||
|
||
}
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
|
||
COMMENT_RESP=$(curl -s -X POST "${BASE}/tickets/110169036/comment?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<'JSON'
|
||
{
|
||
"subject": "Update - Revised finding",
|
||
"body": "Pre-login auto-connect at the Windows logon screen is confirmed working.<br><br>Revised issue: VPN connection drops during use and does not automatically reconnect when remote network resources are accessed.<br><br>This is likely a VPN reconnect/persistence policy issue — IKEv2 AlwaysOn behavior or RasMan auto-reconnect not configured. Next step: review VPN profile properties (AlwaysOn, persistent) and RRAS idle-timeout settings on PST-SERVER.",
|
||
"hidden": false,
|
||
"do_not_email": true
|
||
}
|
||
JSON
|
||
)
|
||
echo "$COMMENT_RESP" | jq '{comment_id: .comment.id, subject: .comment.subject}'
|
||
```
|
||
Output: {
|
||
|
||
"comment_id": 410543307,
|
||
|
||
"subject": "Update - Revised finding"
|
||
|
||
}
|
||
|
||
```
|
||
BASE="https://computerguru.syncromsp.com/api/v1"
|
||
API_KEY="T259810e5c9917386b-52c2aeea7cdb5ff41c6685a73cebbeb3"
|
||
|
||
UPDATE_RESP=$(curl -s -X PUT "${BASE}/tickets/110169036?api_key=${API_KEY}" \
|
||
-H "Content-Type: application/json" \
|
||
--data-binary @- <<'JSON'
|
||
{
|
||
"subject": "Bug - IKEv2 VPN drops and does not auto-reconnect"
|
||
}
|
||
JSON
|
||
)
|
||
echo "$UPDATE_RESP" | jq '{ticket_id: .ticket.id, number: .ticket.number, subject: .ticket.subject}'
|
||
```
|
||
Output: {
|
||
|
||
"ticket_id": 110169036,
|
||
|
||
"number": 32271,
|
||
|
||
"subject": "Bug - IKEv2 VPN drops and does not auto-reconnect"
|
||
|
||
}
|
||
|
||
## Pending / Incomplete Tasks
|
||
|
||
- Verify the correct formatting of project_key in API requests to avoid route errors.
|
||
- Confirm the resolution of the IKEv2 reconnect/persistence issue by reviewing the RRAS idle-timeout settings and AlwaysOn policy on PST-SERVER.
|
||
- Ensure all project_state and CONTEXT files are fully synchronized with the coordination API to maintain an accurate database state.
|
||
|
||
## Reference Information
|
||
|
||
_Machine-extracted verbatim from the whole transcript via regex. Treat as leads, not gospel; deduped._
|
||
|
||
- **Commit SHAs:** `602eb85`, `0a7521b`
|
||
- **URLs:** http://172.16.3.30:8001/api/coord/status, https://rmm.azcomputerguru.com, http://172.16.3.30:8001, http://172.16.3.30:8001/api/coord/components/gururmm/server, http://172.16.3.30:8001/api/coord/components/dataforth-dos/app, https://azcomputerguru.com, https://172.16.3.10:2087/json-api/modifyacct?api.version=1&user=azcomputerguru&FORCE_, http://172.16.3.30:8001/api/coord/components/clients%2Fcascades-tucson/m365-rollout, http://172.16.3.30:8001/api/docs, https://cdn.jsdelivr.net/npm/swagger-ui-dist@5.9.0/swagger-ui.css, http://172.16.3.30:8001/api/coord/components/clients-cascades-tucson/folder-redirection, http://172.16.3.30:8001/api/coord/components/clients-valleywide/post-incident, http://172.16.3.30:8001/api/coord/components, https://login.microsoftonline.com/grabbanddurando.com/v2.0/.well-known/openid-configuration, https://go.microsoft.com/fwlink/?linkid=2225119, https://login.microsoftonline.com/error?code=7000229, https://login.microsoftonline.com/grabblaw.com/v2.0/.well-known/openid-configuration, https://graph.microsoft.com/v1.0/users?\$select=displayName,user, https://login.microsoftonline.com/$TENANT/oauth2/v2.0/token, https://graph.mic, https://graph.m, https://graph.microsoft.com/v1.0/$metadata#servicePrincipals(id,displayName, https://outlook.office365.com/adminapi/beta/032b383e-96e4-491b-880d-3fd3295672c3/$metadata#Collection(Exchange.GenericHashTable, https://computerguru.syncromsp.com/api/v1, http://localhost:11434/api/tags, http://100.92.127.64:11434/api/tags, https://fonts.googleapis.com/css?family=Open+Sans:400italic,600italic,400,600, http://172.16.3.30:8001/api/coord`, https://outlook.office365.com/adminapi/beta/{tenant}/InvokeCommand`, http://localhost:11434`,
|
||
- **IPs:** `172.16.3.30`, `172.16.3.36`, `192.168.0.6`, `192.168.0.27`, `192.168.0.9`, `192.168.0.1`, `192.168.0.120`, `192.168.2.254`, `172.16.3.10`, `72.194.62.5`, `172.16.3.22`, `192.168.0.63`, `162.248.93.81`, `100.92.127.64`, `98.190.129.150`
|
||
- **Ticket numbers:** #110168238, #1650273393, #109828585, #32271
|