results

Comments

Post a Comment

Popular posts from this blog

freeFTPD

Image
Image by Micah68 via Flickr I've been using FileZilla FTP server for some time now and have been happy for the performance. Recently, we needed the ability to expose the FTP service to another client, and the documents that we'd be receiving would be arriving in an un-encrypted form, unlike our other clients. I decided I could simply enable FTPS , the SSL enabled FTP protocol and open a port to 990 on my ASA 5525 Security Appliance and NAT traffic to our server. Unfortunately I quickly found out that a passive FTPS server behind my firewall won't work without some specific configuration changes as discussed in this article . With all that fussing around, I decided to check out freeFTPd, a single deamon that offers both FTP and SFTP, not to be confused with FTPS, but the secure file transfer protocol that is common to the SSH ( secure shell ) protocol. It's fairly straight forward, but is a bit quirky and the documentation is non-existent. Follow some of my ti...
Read more

ADFS AutoCertificateRollover

Image
BITE (show) (Photo credit: Wikipedia ) Leaving your ADFS 2.0 installation in AutoCertificateRollover mode will most certainly bite you in the ass at some point. This is the default mode when you install ADFS, and when your certificate expires, you'll get something that looks like this: The key to your answer is in the first line: ID4175: The issuer of the security token was not recognized by the IssuerNameRegistry. All you need to do is insert the new thumbprint from your ADFS Token-signing certificate. Make sure it's all in uppercase, and you've not added any invalid character codes, or spaces in the thumbprint or you will continue to get this error message . You are better served by generating another certificate for a longer period than the default 1 year. You can easily do this by opening Windows PowerShell and issuing the following: First, add your snapin: Add-PsSnapin Microsoft.Adfs.Powershell Show a list of your ADFS properties. Get-ADFSProperti...
Read more

Running Logon Scripts with CPAU

Image
I like scripting . It helps me manage my client PC 's, perform redundant tasks, push out software updates, among other things. Most of the users on my network do not have privileges to install software, so this affects how some of my scripts function . I discovered that setting GPO to install applications with elevated privileges doesn't mean that the logon scripts also get processed the same way. This annoyed me, and I quickly found a solution. Introduce CPAU, from http://www.joeware.net/ . A neat little utility that takes the place of RUNAS, and very easy to use. I use it to launch my domain logon script, as it copies a HOST file , and other batch files run locally by the scheduler service, which are not allowed write by ordinary users. The following line encodes a file that will run logon.cmd using the credentials provided it. \\mydc\netlogon\cpau.exe -u mydomain\UserWithPermissions -p UserWithPermissionsPassword -ex \\mydc\netlogon\logon.cmd -file \\mydc\netlogon...
Read more