Monthly Archives: August 2008

HTC touch pro

Mobilsiden har testede HTC Touch Pro, og de afslutter deres artikle med at den første indtryk er mere end godkendt. Den skulle have størrer batteri end Diamond og have mulighed for at udvide den indbyggede huklommelse med sd kort.

Jeg var ellers lige ved at hoppe fra den da nogle af mine kollega har fået diamonden men brokkede sig meget over batteri levetiden. Den skulle være blevet bedre.

Læs mobilsiden’s test her: http://www.mobilsiden.dk/?aId=6603/

Decrypt Cisco VPN group password

I have a customer how has broken his Cisco VPN Client profiles. But the group password encrypted was still fine.

So I found out that it was pretty easy to crack this encryption.

The algorithm
The algorithm which is used to encrypt a given user/group password is shown below (for further details just consult the source code):

  • The current date as a string is retrieved (e.g. Mon Sep 19 20:00:00 2005)
  • Then a SHA-1 Hash h1 is computed (20 Bytes)
  • h1 is modified and a new Hash h2 is calculated
  • h1 is again modified and h3 is calculated
  • the 3DES key is made of h2 and the first 4 bytes of h3
  • The password is encrypted using 3DES in CBC Mode. The IV consists of the first 8 bytes from h1.
  • The algorithm computes a last hash h4 from the encrypted password
  • The key “enc_UserPassword” in our profile file now looks like this: h1|h4|encrypted password

Jan Newger has made a programs witch can crack the password automatically, you can download it here: newgre.net/passwordrevealer#download

Arcserve Exchange R12 Setup (Brightstor)

Many of my hits come from search engine, and Exchange and Arcserve R12 setup, is one of the most common. So here come a little howto to setup Exchange R12, with Exchange.

Database Backup

To backup the Database, you can use the normal backup user. (Its recommended to use a administrative account).

Document Level Backup

With CA Arcserve R12 (Brightstor), premium add-on to Exchange is ended, so now there is only one agent for Exchange.
To perform a Document Level backup and restore job, the backup agent service account must meet the following criteria on the Exchange Server:
1. Account must be a domain account.
2. There must be a mailbox on the Exchange Server to which you plan to back up or restore to. This mailbox must be operational, initialized, and must have the same name as the backup agent service account.
3. Mailbox must not be hidden.
4. The first three characters of the mailbox name should be unique.
5. Account must be a member of the Administrator’s group.
6. Account must be a member of the Backup Operator’s group.
7. Account must be assigned the Exchange Full Administrator Role (Exchange 2000 and Exchange 2003 only).
8. Account must be assigned the Exchange Organization Administrator Role (Exchange 2007 only).
9. Account must be assigned the Exchange Server MAPI Owner role on every public folder intend to Backup and restore because permissions for public folders can vary. If lower permission level is assigned, back up or restore may fail or duplicate items may be restored because the backup agent service account does not have the permission to delete original documents. The method that you use to assign Exchange Server MAPI Owner role varies depending on the version of Exchange in your environment:

Exchange 2000 and Exchange 2003
To assign this role, open the Exchange System Manager, right-click the public folder you want to back up or restore, and select Properties. When the Properties dialog opens, click the Permissions tab, click the Client permissions button, either add a new client with the Owner role or modify an existing client to assign the Owner role, and then click OK.

Exchange 2007
To assign this role, use the Exchange Management Shell command add – Publicfolderclientpermission to grant the user Owner access rights.

[ad]

Installere 2 ens Debian maskiner op.

Det kan være praktisk at nå man skal installere 2 ens maskiner op, bare at finde frem til hvilket pakker der er installeret på den ene, og så overfører dem til den anden, dette gøres nemt med dpkg og dselect.
Først skal vi på maskine1 havde hentede de pakker ud som er installeret på den.

dpkg --get-selections > installedpackages

Så skal vi have overført filen fra maskine1 til maskine2, dette gøres lettes via SCP.

scp installedpackages [email protected]:/root

hvor XXX.XXX.XXX.XXX selvfølgeligt er IP adressen på maskine2.

Herefter gå vi på maskine 2 og henter denne selection.

cd /root
dpkg --clear-selections
dpkg --set-selections < installedpackages

Herefter kører vi dselect.

dselect install

Remote Web Workplace “page not found”

I rand into a problems with Remote Web Workplace, it’s just told me that “The page cannot be found, when I was browsing me to https://sbs/remote.

A lot of searching on the Internet browgt me to that mayby IIS not have write access to ASP.NET Temporary Files locations. So just gave Everyone write access to C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files and then it’s working again.

[ad]