Tag Info

Hot answers tagged

3

The security risk of a domain trust are that your environment is compromised it could be possible to use sidhistory for privilege escalation. Most secure is cross forest trust as that allows for the secure transmission of foreign security principles (and more importantly they are identified as foreign). You can also use selective authentication to ensure ...


3

Your vendor would not have access resources in your forest with a one-way trust, so the risk to your environment is somewhat minimized on ad AD functional level. On a network level, there are a truckload of ports that need to be opened between your domain controllers and the vendors domain controllers. If their domain controllers or application servers ...


3

An HTTP request contains a header field named Host which contains the name of the virtual host that should answer. Apache reads this and maps the request to the appropriate vhost. http://en.wikipedia.org/wiki/Hypertext_Transfer_Protocol, specifically the Host: header...


1

Are you trying to access this from the machine that has these entries in /etc/hosts? You might also want to check /etc/nsswitch.conf to check that 'hosts' comes before 'dns' etc. You can use getent hosts subdomain.sitename.domain.com to see what would be returned to an application when it does a lookup (do this from your [Linux] client)


1

If you use a public VPN (VPN with checkbox for all users) you can connect to a VPN server at logon time. When you select this option, you will also be able to establish a WiFi connection. This really is the way to go for this kind of scenario.


1

I can't see how adding an A record like this serves any meaningful purpose. It's hard to come up with pros for a practice that appears completely misguided. As for cons, for the owner of the domain name it's pretty much just that the name in question resolves to an address that will not provide much in terms of services (8.8.8.8 will almost assuredly not do ...


1

A DNAME record is used to synthesize multiple CNAME records. So long as you know all of the individual records you need to alias, then yes, CNAME alone will suffice. That said, you need to understand the actual record that your client is trying to use. Please consult the documentation and make sure you understand all of the SRV records that you need to ...



Only top voted, non community-wiki answers of a minimum length are eligible