Entradas

CredSSP Encryption Oracle Remediation

Imagen
Thanks to:  https://www.netwoven.com/ INTRODUCTION A remote code execution vulnerability exists in the Credential Security Support Provider protocol (CredSSP). An attacker who successfully exploited this vulnerability could relay user credentials and use them to execute code on the target system. CredSSP is an authentication provider which processes authentication requests for other applications; any application which depends on CredSSP for authentication may be vulnerable to this type of attack. As an example of how an attacker could exploit this vulnerability against Remote Desktop Protocol, the attacker would need to run a specially crafted application and perform a man-in-the-middle attack against a Remote Desktop Protocol session. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by correcting how Credential Security Support Provider protocol (CredSSP) validate...

Exchange 2010 – “The certificate status could not be determined because the revocation check failed.”

Imagen
Thanks to:  https://www.petenetlive.com/ Problem Seen on Exchange 2010 (with or without service packs) when you access the internet through a proxy server.  Note : Exchange does  NOT  take its proxy settings from Internet Explorer. Solution 1. To prove that the proxy is the problem drop to command line and issue the following command: netsh winhttp show proxy If it says “Direct Access (no proxy server)” and you have a proxy server then that’s your problem. 2. Issue the following command: netsh winhttp set proxy proxy-server=”http={proxy IP}:{port};https={proxy ip}:{port}” bypass-list=”*.YourDomain.com” 3.  Note : If at this point it all goes wrong (If you get it wrong, then the Exchange Management Console wont open! test it to make sure). To revert back to “no proxy”, issue the following command: netsh winhttp set proxy proxy-server=”http={proxy IP}:{port};https={proxy ip}:{port}” bypass-list=”*.YourDomain.com” You only do th...

Server (HP) not reachable on network “Port was disabled because a pause flood was detected” .

Thanks to: https://winteladmin.com/ error: Port enc0:iobay1:d3 pause-flood detected and automatically disabled Host was not reachable on network. When checked on ILO server is up and running. When I try to ping the server its unresponsive.Host is a blade server, hence suspected an issue with the network module. Therefore, connected virtual connect. Found one of the virtual connect module was degraded. When analysed the HP Virtual connect found an error message stating “Port was disabled because a pause flood was detected” Further to this when validated the server port assigned to the bay1/bay2 found the status “Not Linked/Pause Flood Detected”. It confirms the issue was caused by pause Flood. In some cases, a flex-10 port can enter into disabled state due to the triggering of “pause-flood”, or network-loop. You can confirm the same port status using Virtual Connect Manager CLI. Connect to Virtual connect using SSH and Execute the below command: Show port-protect This woul...

How to Exclude a User or Computer from Group Policy Object

Imagen
Thanks to:  https://www.faqforge.com When you apply a group policy on a container or OU, it applies on all users or computers in that container. However, you can exclude a single or multiple users or containers from the policy applied. This tutorial is written to show you how to exclude a single user from a group policy object. Exclude a user from group policy object Step 1 . Open server manager dashboard. Click  Tools -> Group policy management Step 2 . In the group policy management editor, open the group policy object you want to apply an exception on (Located in Group Policy Objects). Step 3 . Click  Delegation tab -> Advanced Step 4 . Click  Add  and choose the user whom you want to exclude from group policy enforcement. Step 5 . Choose the user you entered in step 4. Step 6 . Locate  Apply group policy in permissions  and check mark deny. Step 7 . Click  Apply  and then  OK . Step 8 . Link the gr...

Symantec SBE Error: "One of the required support libraries for this installation is unavailable" and install fails

Imagen
Situation You see the error "One of the required support libraries for this installation is unavailable" when installing Symantec Endpoint Protection Small Business Edition cloud (SEP SBE) agents, and the install fails. Solution Check for and resolve malfunctioning certificates Create a redistributable package for the agent, and save it to the local desktop. Right-click on the SymRedistributable.exe file (created in step 1), and extract all files to the local computer. Open the extracted files, and locate the support library that is noted in the errors, such as: PA Support Library HE Support Library Rename the appropriate support library .ZIP file to use a .DLL extension: For PASupportLibrary.zip , rename it to PASupportLibrary.dll For HESupportLibrary.zip , rename it to HESupportLibrary.dll Right-click the .DLL file you just renamed, and click...

Integrating Squid with Active Directory

Imagen
Thanks to:  https://www.odrakir.com Recently I needed to integrate a Squid Proxy server in an Active Directory environment. The main objective was to grant / deny access to the Internet by user / group validation, using single sign on. The solution might not be the most elegant, but it’s a working one. You’ll need to install the Kerberos, Samba, Squid and NTP packages. In this solution will be allowing all users in the  InternetOn  AD group to have access automatically. Any users outside this group will be denied access. Computers outside the AD trying to use the proxy will be prompt for username and password. This is a simple way of keeping access restricted to certain groups without an unnecessary amount of fuss, whether you’re managing the office computers at  http://www.partycasino.com/  or building a school network. krb5.conf [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [l...

How to reclaim space after removing virtual volume 3PAR?

Thanks to: https://community.hpe.com/ It depends on how large the virtual volumes were. Each CPG has a growth size. This lets the CPG keep some chunklets pre-reserved. Also, when volumes are deleted, it will retain some space in the CPG assuming the space will be reused. Try compacting your CPGs: compactcpg -f -pat * The following command will set up a job to run weekly (Sundays, 0000 hours): createsched -no_alert "compactcpg -f -pat *" @weekly Compact_All_CPGs