Posts tagged ‘net’

ActiveDirectory and the global catalog

At work, we’re running a 2008R2 AD forest containing 5 sub-domains. now to query the LDAP can be a pity if you don’t know in which one of the overall 6 domains the queried object is located.

After months of helplessness and various (unsuccessful) experiments with meta-directories, ldap-proxies etc. we discovered that the problem is already solved. the solution is to use a different port, ActiveDirectory provides the so-called “global catalog” (containing all the information from the whole forest) on port 3268.

Assume, your username is “un321” and your account is located in the “it” subdomain of the “ads.forest.private” domain. To query for a user called “ab123” use the following ldapsearch-command:

ldapsearch -x -b "dc=ads,dc=forest,dc=private" -D 'un321@it.ads.forest.private' \\
        -h ads.forest.private -p 3268 -W  "(userPrincipalName=ab123*)"

windows remote support

VNC based simple remote support: PcHelpware

Nagios: check_by_ssh after reboot

since (at least on debian/ubuntu default installation) the homedir for user “nagios” points to /var/run/nagios the known_hosts file is lost after a reboot and check_by_ssh refuses to connect to any configured ssh-machine…

make sure to connect to all ssh-targets as user “nagios” and especially have a close look to connect exactly the same way as the nagios-process does (DNS-name / IP-address)

see also: check_by_ssh-booster

routing with cisco-routers

ever wondered why your cisco doesn’t route your packets? simply because the default-setting has routing disabled. obviously, using a router to route packets seems to be a non-default use case to cisco…

enable routing:

conf t
ip routing

in vino veritas

today, vino (the gnome vnc-server) killed my background image (at least to me, vino seems to be responsible for this, since it has an option to switch off the backround on existing remote connections). some experimenting with compiz-settings, nautilus and bonobo-activation-server did not show the expected results, but some wizardry via gconf-editor did it:

/desktop/gnome/background/draw_background: yes

SSL mit “echten” Zertifikaten

Links:

psw.net
SSL Direct

CAcert (Eintrag auf Wikipedia)

Kabel BW / Motorola Cable Modem

Das standardmäßig von KabelBW (und vielen anderen Kabelprovidern) eingesetzte Kabelmodem Motorola SBV5121E hat ein Webinterface, das unter 192.168.100.1 erreichbar ist. Der Login sollte mit

admin
motorola

möglich sein. Zudem spricht das Modem SNMP (v1), worüber die meisten Daten ebenfalls abgefragt werden können.

Ein paar Infos zu den Werten gibt’s im unitymediaforum

Wireless Audio

Wlan-Audioempfänger sind leider recht teuer, alternativ bietet sich Bluetooth zur Übertragung an:

Bluetooth-Empfänger:

Howto: A2DP mit Linux

(kostenlose) WLAN-Antenne?

sehr interessanter Artikel, bei Gelegenheit mal ausprobieren: Die 0-Euro-Antenne