519 reputation
28
bio website
location
age
visits member for 2 years, 11 months
seen Aug 26 at 20:16

Mar
12
comment SQL Server keep crashing, cannot connect with SSMS, Agent not starting
Are your SqlServer services configured to use users that are in the right SqlServerUserGroups and have the needed rights?
Mar
11
comment SSH painfully slow on my local network?
Do you have MAC address conflicts?
Mar
11
comment SSH painfully slow on my local network?
What are the MAC addresses of your guest and host(s)? Where are you sshing from and to (from the windows host to the centos guest?)?
Feb
24
comment When I install the certificate from a client who is using windows 2003 on my linux system the serial shows as negative
Looks like that certificate is valid under the older specs but not under the newer ones though it's just a bit over a year old. The best thing to do is generate a new key-pair, new certificate signing request, get the new cert signed (or self signed) and move on. In practice this certificate is valid under older specs and so most software will accept it. AFAIK there is no risk with the serial number being negative and most likely it was just generated by out-dated software (Windows).
Jan
14
comment How do I know if the network im inside allows me to use ssh?
I don't know what you mean by this: "My server can accept ssh locally but I can't ssh externally". Do you control the SSH server? Can you ever connect to the SSH server (meaning from a network other than your university)?
Jan
14
comment How do I know if the network im inside allows me to use ssh?
There is a direct way. The direct way to do it is to inspect the router and firewall configurations that are managed by your university and ISP. Do you prefer the direct way or the easy way :)
May
30
comment backup-rsnapshot / rsync filling backup dir up to double the size of the original drive
How big are those files on the original? Do they change frequently? How often are you running incrementals? How big is the backup drive? Do you really want the --delete flag??
Apr
11
comment Is it possible for a spammer to tamper with the received time of an email?
Any of the timestamps or other headers that were added before it got to your trusted server (say gmail) might be forged.
Apr
11
comment Is it possible for a spammer to tamper with the received time of an email?
I disagree. I think the only headers you can trust are the ones put in by your MTA. The reason being that one can include all the headers they want in a session - for example I can connect to your mail server and submit a message with headers i forget on behalf of google, hotmail, the whitehouse, then back to google - the only thing that will be real is what your server records about the session [came from my IP at the time your server observed].
Jul
14
comment Enforce sshd key algorithm
I'm curious - why would you want to require the use of DSA (instead of say RSA or other options)?
Jul
12
comment Setting up SSL with 389 Directory Server for LDAP authentication
Are you saying it is not listening with TLS on 389? In any case the easiest way to ensure that your certs are setup right is to use a webbrowser (say firefox) to connect to the service... just point your web browser at host:636 ; if you get a successful connection (click to view the cert) that the SSL/TLS stuff is fine otherwise it is not.
Jul
12
comment SSH proxy and MySQL on 3rd machine
what is the -q0 in the proxycommand 'nc' call?
Jul
10
comment Setting up SSL with 389 Directory Server for LDAP authentication
"389 side looks fine: server is answering with public certificate and proposing TLSv1" - that's a config problem. It should not be offering TLS on port 389. Port 389 is for ldap while 636 is for ldaps (ldap through TLS/SSL). Do you mean something by 389DS or is that just a way of writing ldap running on port 389?
Jul
10
comment Setting up SSL with 389 Directory Server for LDAP authentication
Isn't this guy on Fedora or something and certutil an MS proprietary tool?
Jul
9
comment SSH proxy and MySQL on 3rd machine
Where is the port forwarding from A to B?
Jun
25
comment ISAPI filter with LDAP over SSL only works as administrator
I imagine that the intermediate CA you had to add was already present in the other account as it had been seen before and was cached (as is typical in browsers).
Jun
22
comment ISAPI filter with LDAP over SSL only works as administrator
Is LDAP_SSL_PORT properly defined in all your scenario?
Jun
22
comment SSL connection errors from Apache
What country are you wgetting from? there is more than one IP or server for that domain name / web-server? What happens if you use openssl s_client -connect host:port -showcerts five times in a row do you get similar error messages to wget? Do you get the same errors each of the five runs?
Jun
21
comment The SSL certificate doesn't established
To apply for a certificate you must first generate a key-pair - did you do that? Another way to get at the same thing -> where is the CSR you provided the CA (Thawte?) when you enrolled for the certificate?
Jun
19
comment Run SVN commands with self signed SSL cert
It's odd - better to just disable SSL. Beter yet to actually use a cert that you trust and makes sense for the URL.