amfony

Hi Gang, Got a simple one that im really peeved at my self for not getting over. I guess, these things happen to crusty netadmins once in a while. I've recently found the need and time to give webHelpDesk a crack and found it be all sorts of lovley, so much so im hosting it (as a service provider to a few disjointed schools) at a rackspace cloud server (do i get paid for this advert edugeek? lol) So what ive done is on my ubuntu server up in the cloud created a ssh local port forwarding tunnel to my schoolA which is port forwarding port 22 on external IP through all fw's to land at a DC which has a SSH Server instaleld temporarily and the look for port 389 (the cli goes: ssh -L 2020:ssh.school.com:389). This works, but i do not like it. Id much rather have a SSH server acting as a proxy that would accept ssh connections from my rackspace hosted WHD then pass on this connection to DomainController:389. This removes a attack surface on the DC of an SSH server and also will help with consolidating multiple external requests for ssh to internal servers. Where ive falled and cant get up is the ssh proxy server part. I cant conceptually grasp what sort of port forwarding (is it local or remote now?) i need to achieve what i want. Truly just a bit stumped here. Thanks for any/all help guys and girls.

andrew thank you very much mate. im suprised to hear that xen has such little third party support. Im not sure the market share percentage but id gather there is enough to warrant such backup solutions. also suprised to see there is not native functions to address this, not even with platinum support if i read correctly.

hi Gang, I have 2 wonderful dl380's to use for virtualisation project for a new campus and have decided to install Citrix Xen Server on both (5.6 sp2). one of the servers (virtual hosts) will be sitting static to provide a poor mans DR (not fault tolerance) via a backup process of nightly or weekly backing up the VM's from VM Host A to VM Host B. Where upon issue with VM on live host A i would start up VM on host B and take down VM on host A. What i am after is how do i actually do this? i know that xen has poor 3rd party backup options and i know scripting seems to be the glue to everything in xen. I was wondering if anyone had experience with this or could suggest anything here? thanks in advance

no with an if, or a yes with a but. yes, you can have a wireless laptop configured with WPA-PSK credentials that will allow it to participate on a WiFi network to allow it to authenticate (allow non cached users logons) BUT this is not an ultimately secure or scalable solution. no, IF you want premium security, scalability and granularity FreeRadius is a *nix based radius server, never used it. I know Geoff uses/used it and recommended it awhile back with packetFence. IAS (internet authentication service) is part of the windows 2003/2003r2 family and is free with the server license NPS (Network protection service) is part of the windows 2008/ 2008r2 family and is free with a server license HTH

i couldnt find any but i did succeed to get it up and running (PEAP) for both mac (lion) and XP clients. Macs are authenticating via their AD binded computer account whilst XP swap from computer account to username upon logon. Cheers anyway

is the finder window open last thing before restart or logoff? if your using lion i know it gives the option to re-open windows as they were pre-logoff

Hi there, are these mac's bound (rather then joined) to the OD master? Are they on the same or different subnet from the OD master? Have you configured these mac manually (configured computer accounts) and STILL does not show? (thats weird) ill probably be of minimal help but Ill be interested to hear how this is resolved

Hi Guys, Im just linking for the benefit of the group an apple discussion between myself and Mr Rocco (im sure he floats around here with the Neo avatar) regarding some changes to kerberos and OD / AD trangle-ing and also a previous link to a q i had about lion integration in general. Hope you find this beneficial. https://discussions.apple.com/message/16427819#16427819 Regards and Thanks to Mr Rocco

Hi Gang, Just wondering if there was a 2008 version of the wonderful 2003 guide written by the Ashby guys in the past in regards to WiFi Radius authentication. I did a search and found nothing just wonder if any existed. Thanks alot

thanks spc i have checked that the cert has not expired and it was issues from a domain bound enterrpise CA (2003r2). I am at a loss but i will recheck all. The issue is definatley certificate related however and not anything else. Thanks for the help and more so thank you for guide.

ok well no info re: certs and CAs however i did deploy the cert via the Trusted Root Authentication Store in Group Policy which sent the certs out again and resolved all PC related cert issues. Thanks for the views atleast.

Hi Gang, Got a weird one this week. I setup my WLAN Auth via the famous Ashby Radius doc thats floating around edugeek for quite a while now and it has been working flawlessly since. This week I got a report that some of our macs were dropping of the WLAN (ruckus) and via troubleshooting/investigating it appeared the certificate that was instaled on the macs (imaged) was no longer valid and i went around and manually installed the "same" certificate over the existing one and hey presto it worked. Same certificate, didnt expire, same method of installing into mac osx 10.6 (wifi system profile, certificate trust etc). Now my XP Laptops do occasionally fall off, its just the way its always been so i know quite well what needs to be done to resolve the issue. Via the guides help i know that i should expect a certficate (named here IASServerCert) in my trusted root store in my laptops because they are domain clients and the cert was issued via an enterprise domain-bound CA Now however the cert doesn't appear in the clients trusted root store, after many domain join-leave-rejoins. I can however export and install the cert without issue. This is not the point im more interested in why the cert is now longer in the enterprise trust store. Upon investigating i can see in the CA's personal managment, that is the CA's certmgr.msc rather then the domain CA interface that there are 2 certificates in the "intemediate cert authorities > cert revocation list" folder. This is definatley not expected but i definatley dont want to start moving/deleting certs particulary if i have to re-config all few hundred laptops. Can anyone assist here please? Any ideas how to troubleshoot? Thanks Gang, as always - mucho apprecaited.

dsquery computer -inactive

In retrospect i should have posted this in the VM forum. Apologies. Hi Gang, This is pie in the sky project im setting for myself to complete. What i would like is some input and direction overall to acertain the validity, feasibility etc of this project, as follows: Inspiration for the project The bane of my existance in this network is differing hardware models and large number of clients. I would like to create a single "universal" virtual image i can deploy easily to clients when required. Im hoping to leverage the vanilla-bility of generic VM drivers and somewhat superior driver base of linux to overcome this. Requirments To update a single image/vm (per OS) and deploy to clients To allow multiple OS'es to be used at a student desktop (boot inbetween Windows XP and linux dsitro) To run with minimal additional cost as possible (vmware view/xendesktop too expensive/feature rich for a test project) To run on 32bit systems (with Intel VT) My thoughts so far ... Install (manually) a linux OS on each computer which i would then modify to automatically load KVM and hopefully leave at a menu structure to select VM of choice. I have no idea how to do this atm but im sure its possible. Also ive never used KVM before -- im assuming this is possible at all just by reading features sets off the net. What i need to work on How can i modify the linux base OS to automatically load kvm and load a "menu structure" How can i deploy the linux base OS with modifications to a lab without manually installing it Testing our software suites in the VM's of varying specced hardware (CAD, 3d modelling for example) Your input ... Always appreciated. I put this here for both feedback from the crowd and also for my own hitlist of things to accomplish. If there is no feedback thats also fine. Cheers

i literally did this today. subst.exe command (im using XP) will assign a drive letter to a local folder/resource. I had the same requirement (for a different reason) and instead trying to allow C:\anything (GPO blocked this) via shortcut i instead made a Q:\ which points to C:\StudentData\TempSaveLocation. I ofcourse scripted the creation and icacl'd the folder as admin but the subst runs on a local startup script in a certain AV lab of computers. HTH