Reputation
5,022
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 14 37
Impact
~435k people reached

Dec
15
comment Cipher suites supported by TLS1.1. and 1.2
This is really a question for serverfault (where you should specify what software you're using). If you want to know what cypher suites you can use with OpenSSL (one of the implementation of TLS), you can go there: openssl.org/docs/manmaster/apps/ciphers.html
Dec
3
comment How to start a data collector upon high CPU load condition?
Not exactly. I planned on starting the data collector using the Nagios script on the system but, in the end, we just left a TS console open with process explorer running and, when Nagios sent us the high-CPU alter, we connected and found the problematic service.
Sep
24
comment Exchange account access blocked by phantom mobile device
The proper place for this question is serverfault, really. I can, however, give you the answer quickly: you can't.
Aug
26
comment Active directory authentication and authorization for an application
@AviD After having had to implement similar integration myself, I still think this is more a coding question (application design, to be exact) than a security one. That being said, if you want to answer here, be my guest :)
Aug
26
comment Active directory authentication and authorization for an application
You'll have better luck with this question on stackoverflow
Aug
4
comment Powershell script from DFS server not running
Thank you for the initial link: since all my servers have IE in ESC mode, it does explain why Powershell ignores the execution policy (although it doesn't explain the argument for implementing such... interesting mechanism). Unfortunately, CasPol is somewhat deprecated and isn't used by Powershell by default. I tried it nevertheless but it didn't solve the prompt issue.
Aug
4
comment Powershell script from DFS server not running
I believe that this would trigger a dialog box instead of the powershell security warning I'm seeing. Anyway: the network location where the script are stored is part of the "Local intranet" zone, applied through GPO.
Oct
28
comment Replacing a string in an XML with Powershell causes MALFORMED XML
Have you checked if the resulting file isn't saved as UTF-16 instead of UTF-8 ?
Oct
3
comment Getting list of users indirectly members of an AD group through LDAP
It's only a handlfull: about 10
Sep
19
comment Getting list of users indirectly members of an AD group through LDAP
Thanks for the answer but what I'm actually looking for is a LDAP query filter that will yield that same result (see my comment about how I intend to use the solution).
Aug
28
comment SSL Mismatched Address Certificate Error on IIS 7
This belongs to serverfault
Jul
21
comment IIS complains about port being used when it's not
This key does not exist
Jul
19
comment IIS complains about port being used when it's not
Yes, there are two events logged. I added them to the description of the problem
Jul
18
comment IIS complains about port being used when it's not
There: I added the screenshot I promised
Jul
18
comment IIS complains about port being used when it's not
Yes, I'm 100% sure of the new web app binding. I'll add a screenshot of the binding in IIS. As for the webmail app, I don't see how (or why) it could fool netstat.
May
28
comment Why is execution of batch files different between drag & drop and from command line?
Two solution: resart the batch file with elevated privs (search the stak for detail) if your user is admin or change it to a scheduled task if he's not (ask a new question on Friday if you want ore detail)
May
28
comment Why is execution of batch files different between drag & drop and from command line?
Did you try to set the current path at the start of your command-line ?
May
6
comment NTFS corrupts by using Windows 2008 R2 share with Debian iSCSI Target
Did I write a long and complex comment just to ask "is your iSCSI network isolated" ? Looks like I did, yes... Sorry
May
6
comment If I get an invalid public key error does that mean I have an incorrectly installed certificate
The second one. The first error just mentions a self-signed certificate. Since you said that you're not using self-signed certs, it also points to another certificate being used in the chain. Now, it could be the client cert or, possibly, a certificate from some SSL accelerator or a layer 5 security system (AV, IPS/IDS, WAF, that kind of things).
May
6
comment If I get an invalid public key error does that mean I have an incorrectly installed certificate
I'm afraid, I can't tell you: I don't know nginx either. Your error, however, really seems related to a client certificate being used during SSL hqandlshake