Category Archives: Computer

HTC touch pro

Mobilsiden har testede HTC Touch Pro, og de afslutter deres artikle med at den første indtryk er mere end godkendt. Den skulle have størrer batteri end Diamond og have mulighed for at udvide den indbyggede huklommelse med sd kort.

Jeg var ellers lige ved at hoppe fra den da nogle af mine kollega har fået diamonden men brokkede sig meget over batteri levetiden. Den skulle være blevet bedre.

Læs mobilsiden’s test her: http://www.mobilsiden.dk/?aId=6603/

Decrypt Cisco VPN group password

I have a customer how has broken his Cisco VPN Client profiles. But the group password encrypted was still fine.

So I found out that it was pretty easy to crack this encryption.

The algorithm
The algorithm which is used to encrypt a given user/group password is shown below (for further details just consult the source code):

  • The current date as a string is retrieved (e.g. Mon Sep 19 20:00:00 2005)
  • Then a SHA-1 Hash h1 is computed (20 Bytes)
  • h1 is modified and a new Hash h2 is calculated
  • h1 is again modified and h3 is calculated
  • the 3DES key is made of h2 and the first 4 bytes of h3
  • The password is encrypted using 3DES in CBC Mode. The IV consists of the first 8 bytes from h1.
  • The algorithm computes a last hash h4 from the encrypted password
  • The key “enc_UserPassword” in our profile file now looks like this: h1|h4|encrypted password

Jan Newger has made a programs witch can crack the password automatically, you can download it here: newgre.net/passwordrevealer#download

Arcserve Exchange R12 Setup (Brightstor)

Many of my hits come from search engine, and Exchange and Arcserve R12 setup, is one of the most common. So here come a little howto to setup Exchange R12, with Exchange.

Database Backup

To backup the Database, you can use the normal backup user. (Its recommended to use a administrative account).

Document Level Backup

With CA Arcserve R12 (Brightstor), premium add-on to Exchange is ended, so now there is only one agent for Exchange.
To perform a Document Level backup and restore job, the backup agent service account must meet the following criteria on the Exchange Server:
1. Account must be a domain account.
2. There must be a mailbox on the Exchange Server to which you plan to back up or restore to. This mailbox must be operational, initialized, and must have the same name as the backup agent service account.
3. Mailbox must not be hidden.
4. The first three characters of the mailbox name should be unique.
5. Account must be a member of the Administrator’s group.
6. Account must be a member of the Backup Operator’s group.
7. Account must be assigned the Exchange Full Administrator Role (Exchange 2000 and Exchange 2003 only).
8. Account must be assigned the Exchange Organization Administrator Role (Exchange 2007 only).
9. Account must be assigned the Exchange Server MAPI Owner role on every public folder intend to Backup and restore because permissions for public folders can vary. If lower permission level is assigned, back up or restore may fail or duplicate items may be restored because the backup agent service account does not have the permission to delete original documents. The method that you use to assign Exchange Server MAPI Owner role varies depending on the version of Exchange in your environment:

Exchange 2000 and Exchange 2003
To assign this role, open the Exchange System Manager, right-click the public folder you want to back up or restore, and select Properties. When the Properties dialog opens, click the Permissions tab, click the Client permissions button, either add a new client with the Owner role or modify an existing client to assign the Owner role, and then click OK.

Exchange 2007
To assign this role, use the Exchange Management Shell command add – Publicfolderclientpermission to grant the user Owner access rights.

[ad]

Installere 2 ens Debian maskiner op.

Det kan være praktisk at nå man skal installere 2 ens maskiner op, bare at finde frem til hvilket pakker der er installeret på den ene, og så overfører dem til den anden, dette gøres nemt med dpkg og dselect.
Først skal vi på maskine1 havde hentede de pakker ud som er installeret på den.

dpkg --get-selections > installedpackages

Så skal vi have overført filen fra maskine1 til maskine2, dette gøres lettes via SCP.

scp installedpackages [email protected]:/root

hvor XXX.XXX.XXX.XXX selvfølgeligt er IP adressen på maskine2.

Herefter gå vi på maskine 2 og henter denne selection.

cd /root
dpkg --clear-selections
dpkg --set-selections < installedpackages

Herefter kører vi dselect.

dselect install

Remote Web Workplace “page not found”

I rand into a problems with Remote Web Workplace, it’s just told me that “The page cannot be found, when I was browsing me to https://sbs/remote.

A lot of searching on the Internet browgt me to that mayby IIS not have write access to ASP.NET Temporary Files locations. So just gave Everyone write access to C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files and then it’s working again.

[ad]

Apache and multiple SSL virtual host on same IP address

In standard way, apache only supports one SSL virtual host per IP address, if you want to use different SSL Certificates file. But with mod-gnutls it is possible to have multiple Virtual host with different SSL Certificates file.

Install mod-gnutls in Debian:

apt-get install libapache2-mod-gnutls

Then you need to enable mod-gnutls

cd /etc/apache2/mods-enabled
ln -s ../mods-available/gnutls.* .

Then you need to create the gnutls cache files

touch /var/cache/apache2/gnutls_cache
chmod 700 /var/cache/apache2/gnutls_cache
chown 33.33 /var/cache/apache2/gnutls_cache

And then you need to setup the two virtualhost:

<VirtualHost *:443>
ServerAdmin [email protected]
ServerName v1.dalbjerg.nu
DocumentRoot /var/www/v1.dalbjerg.nu
GnuTLSEnable on
GnuTLSPriorities NORMAL
GnuTLSCertificateFile /etc/apache2/v1/ssl.crt
GnuTLSKeyFile /etc/apache2/v1/ssl.key
</VirtualHost>

<VirtualHost *:443>
ServerAdmin [email protected]
ServerName v2.dalbjerg.nu
DocumentRoot /var/www/v2.dalbjerg.nu
GnuTLSEnable on
GnuTLSPriorities NORMAL
GnuTLSCertificateFile /etc/apache2/v2/ssl.crt
GnuTLSKeyFile /etc/apache2/v2/ssl.key
</VirtualHost>

Then you need to restart apache

apache2cl restart

If it don’t work see at /var/log/apache2/error.log to see any error is reporting there.

[ad]

Importere StartSSL certifikat ind i Internet Explorer

Gå ind på adressen https://startssl.com/certs/ca.cer og vælg ”Forsæt til dette websted (Anbefales ikke)”. (Bemærk det er den røde kryds). Vælg herefter åben. Herefter kommer dette billede frem.

Tryk på Installer certifikat…

Tryk på næste >

Tryk Næste >

Tryk på Udfør

Tryk på Ja

Tryk på OK.

Tryk op OK.

Luk nu din Internet Explorer ned, og start den op igen, nu skulle du gerne slippe for den advarelse med at vores hjemmeside ikke er godkendt.

SPF – Sender Policy Framework

Undgå at dit domæne bliver brugt som spam afsender med SPF. Det eneste det kræver er at du sætter en tekst record ind i din dns zone.
SPF gør det at nå en mail server som har installeret SPF Check, modtager en mail, så gå den ud og spørger dit domænes DNS server, efter din SPF record (Som teknisk bare er en tekst record), her få den at vide hvilket server som er godkendt til at sende mail fra dit domæne.

Lad os tage udgangspunkt i Dalbjerg.nu:
v=spf1 a mx a:nepthys.wsms.dk –all
v=spf1 – Denne beskriver at der er tale om SPF version 1, pt. er det kun version 1 som er brugbart.
a mx – Disse beskriver at a recorden og mx record for dalbjerg.nu er godkendt.
a:nepthys.wsms.dk – Denne beskrive at også nepthys.wsms.dk, må sende mail fra domænet dalbjerg.nu
-all – Beskriver at dette er alle record som må sende mails, alle andre må ikke.
Man kan også bruge den mindre bløde ~all, men nogen mail server vil ikke godtage at andre domæner stadigt sender mail fra domænet.

På Posthuset, kan du få hjælp til at komme i gang med opsætning af spf record, og du kan for hjælp i vores forum, ved at klikke her:

http://www.posthuset.nu/forum/viewforum.php?id=15

eller via wizarden,

http://old.openspf.org/wizard.html

Exchange 2003 – Find a email address

If you want to find witch user or public folders that have and specify e-mail address, you can search the Active Directory for it.

    • Open the Acive Directory Users and Computers Management Console
    • Right Click on the domain > Select Find
    • Select Custom Search in the Find field
    • Select the Advanced tab
    • To find the entity with the email address [email protected] for example, enter the following in the LDAP query field:
(proxyAddresses=smtp:[email protected])
  • This will list the entity containing the email address entered.
  • Wild cards can be entered within the email address (*) to return multiple matches.
  • If you want to view all the email addresses within the results list, select View > Choose Columns… and select Proxy Address – doing this in assoication with the query (proxyAddresses=smtp:*@kennethdalbjerg.dk) will give you a list of all entities within the organisation that have an email address, together with all the email addresses they have.
  • For excellent website design ideas visit cheap website design brisbane.