Sysadmin Ramblings » Windows

freesshd and problem with keys

uphill — Mon, 09 Feb 2009 21:53:20 +0000

I followed the simple guide in the forum but was still unable to use my keys. Turns out my keys were DSA, and FreeSSHD only seems to know about RSA keys. I generated some RSA keys and everything was fine. The guide is somewhat misleading, what worked for me was creating a file in C:\Program Files\FreeSSHD\username and copying the contents of my RSA public key. The error I was getting before was:



02-09-2009 09:11:09 IP 172.16.43.38 SSH charlie submitted a bad key.

I now get



02-09-2009 16:44:32 IP 172.16.43.38 SSH charlie successfully logged on using public key.

Rifftrax for the Matrix using sharecrow matrix.crow

uphill — Mon, 11 Jun 2007 17:29:16 +0000

A couple of friends and I decided to try out rifftrax. We decided on the Matrix as our first film. Rifftrax.com is a great idea, finally the MST3k style can be applied to movies too popular or expensive to otherwise make fun of. We eventually enjoyed the riff, but syncing wasn’t as simple as we had hoped. We initally just opened up two vlc windows and manually synced that way. One great line was in the dojo, Morpheus: “You think that’s air you’re breathing?” Riff: “Little baby thinks he’s breathing air little baby air breather” I enclose my crow file, I hope it works for someone. To follow the instructions at www.sharecrow.com/Rifftrax.htm we had to use Title 13 on our DVD, Title 1 would not work. Also, our DVD Start time was 0:00:01.499, the sync timecode from rifftrax was 2.27, so we had to take this into account when doing the initial sync.

matrix.crow

It’s a shame the crows are provided, without them it’s a big pain to keep the dvd in sync. Still, it’s a great idea, I hope to see Xanadu and Lord of the Rings up there soon.

Citrix Presentation Server 4.0 User login problem

uphill — Tue, 11 Apr 2006 15:09:15 +0000

We installed a new Microsoft Windows 2003 Server with Citrix Presentation Server 4.0. Administrators could login remotely, but regular users were denied with:

“The desktop you are trying to open is currently available only to administrators. Contact your administrator to confirm that the correct settings are in place for your client connection” The remedy was to go into the advanced settings of the ica-tcp listener, and remove the only launch published applications setting.

Open the Citrix Connection Configuration Tool.
C:\Program Files\Citrix\System32\mfcfg.exe Double Click on ica-tcp
Then click Advanced…
Then Under “Initial Program”
Clear the checkbox for “Only Launch Published Applications”

If you are using Remote Desktop to access your Citrix Server, then make the same change to the rdp-tcp listener.

The usual Citrix changes were also required, but you probably already did those…
Open Group Policy mmc snapin for your Citrix Server or the GPO for the OU in which is resides.
Set “Allow users to connect remotely using Terminal Services” in: Computer Configuration Administrative Templates Windows Components Terminal Services Allow users to connect remotely using Terminal Services

You’ll also need licenses installed for a user to login, you’ll get an error in the Event Viewer if something is wrong with licensing. Presentation Server uses flexlm(lmgrd) as the license manager. The default on our install was port 27000.

Virus definitions not updating on Symantec Antivirus 10, XP client

uphill — Sat, 11 Mar 2006 03:24:03 +0000

Recently some laptops in our network stopped downloading virus definitions. Our firewall was configured to allow traffic from the wireless vlan to our server, however, the port on version 10 has changed to 2967. After adding the new port we still were having intermittent virus update problems. We needed to add a local rule on the laptops for port 2967. Windows firewall was preventing the inbound connections on port 2967 (meaning we could not push updates from the mmc plugin). After adding an exception to the windows firewall, we were able to update virus definititions successfully.

Problem adding Windows 2003 server to 2000 Active directory

uphill — Thu, 19 Jan 2006 21:08:21 +0000

When trying to add a Windows 2003 server to a 2000 domain, adprep would fail with this error:

F:I386>adprep /forestPrep

 

ADPREP WARNING:

 

Before running adprep, all Windows 2000 domain controllers in the forest should

be upgraded to Windows 2000 Service Pack 1 (SP1) with QFE 265089, or to Windows

2000 SP2 (or later).

 

QFE 265089 (included in Windows 2000 SP2 and later) is required to prevent poten

tial domain controller corruption.

 

For more information about preparing your forest and domain see KB article Q3311

61 at http://support.microsoft.com.

 

[User Action]

If ALL your existing Windows 2000 domain controllers meet this requirement, type

C and then press ENTER to continue. Otherwise, type any other key and press ENTER to quit.

C

Adprep was unable to check the forest update status.

[Status/Consequence]

Adprep queries the directory to see if the forest has already been prepared. If

the information is unavailable or unknown, Adprep proceeds without attempting this operation.

[User Action]

Restart Adprep and check the Adprep.log file. Verify in the log file that this forest has already been successfully prepared.

 

Adprep encountered an LDAP error.

Error code: 0x20. Server extended error code: 0x208d, Server error message: 0000

208D: NameErr: DSID-031001BD, problem 2001 (NO_OBJECT), data 0, best match of:

'CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=org'

.

We ran dcdiag and got this error:

F:I386>dcdiag

 

DC Diagnosis

 

Performing initial setup:

Done gathering initial info.

 

Doing initial non skippeable tests

 

Testing server: Default-First-Site-NameJAKARTA

Starting test: Connectivity

......................... JAKARTA passed test Connectivity

 

Doing primary tests

 

Testing server: Default-First-Site-NameJAKARTA

Starting test: Replications

......................... JAKARTA passed test Replications

Starting test: NCSecDesc

......................... JAKARTA passed test NCSecDesc

Starting test: NetLogons

......................... JAKARTA passed test NetLogons

Starting test: Advertising

......................... JAKARTA passed test Advertising

Starting test: KnowsOfRoleHolders

Warning: CN="NTDS Settings

DEL:0251b58f-c99c-4680-bf7a-7b6a6233de27",CN="CORDOBA

DEL:c1f9f786-3aca-4db5-9655-c82d0c9cde07",CN=Servers,CN=Default-First-Site-Name,

CN=Sites,CN=Configuration,DC=example,DC=org is the Schema Owner, but is dele

ted.

......................... JAKARTA failed test KnowsOfRoleHolders

Starting test: RidManager

......................... JAKARTA passed test RidManager

Starting test: MachineAccount

......................... JAKARTA passed test MachineAccount

Starting test: Services

......................... JAKARTA passed test Services

Starting test: ObjectsReplicated

......................... JAKARTA passed test ObjectsReplicated

Starting test: frssysvol

......................... JAKARTA passed test frssysvol

Starting test: kccevent

......................... JAKARTA passed test kccevent

Starting test: systemlog

......................... JAKARTA passed test systemlog

 

Running enterprise tests on : example.org

Starting test: Intersite

......................... example.org passed test Intersite

Starting test: FsmoCheck

......................... example.org passed test FsmoCheck

The solution was to seize the role of schema master from cordoba.

F:I386>ntdsutil

ntdsutil: roles

fsmo maintenance: connections

server connections: connect to server jakarta

Binding to jakarta ...

Connected to jakarta using credentials of locally logged on user

server connections: q

fsmo maintenance: seize schema master

Attempting safe transfer of schema FSMO before seizure.

ldap_modify_sW error 0x34(52 (Unavailable).

Ldap extended error message is 000020AF: SvcErr: DSID-03210211, problem 5002 (UN

AVAILABLE), data 8

 

Win32 error returned is 0x20af(The requested FSMO operation failed. The current

FSMO holder could not be contacted.)

)

Depending on the error code this may indicate a connection,

ldap, or role transfer error.

Transfer of schema FSMO failed, proceeding with seizure ...

Server "jakarta" knows about 5 roles

Schema - CN=NTDS Settings,CN=JAKARTA,CN=Servers,CN=Default-First-Site-Name,CN=Si

tes,CN=Configuration,DC=example,DC=org

Domain - CN=NTDS Settings,CN=JAKARTA,CN=Servers,CN=Default-First-Site-Name,CN=Si

tes,CN=Configuration,DC=example,DC=org

PDC - CN=NTDS Settings,CN=JAKARTA,CN=Servers,CN=Default-First-Site-Name,CN=Sites

,CN=Configuration,DC=example,DC=org

RID - CN=NTDS Settings,CN=JAKARTA,CN=Servers,CN=Default-First-Site-Name,CN=Sites

,CN=Configuration,DC=example,DC=org

Infrastructure - CN=NTDS Settings,CN=JAKARTA,CN=Servers,CN=Default-First-Site-Na

me,CN=Sites,CN=Configuration,DC=example,DC=org

fsmo maintenance: q

ntdsutil: q

Disconnecting from jakarta ...

Adprep works fine after this:

F:I386>adprep /forestPrep

 

ADPREP WARNING:

 

Before running adprep, all Windows 2000 domain controllers in the forest should

be upgraded to Windows 2000 Service Pack 1 (SP1) with QFE 265089, or to Windows

2000 SP2 (or later).

 

QFE 265089 (included in Windows 2000 SP2 and later) is required to prevent poten

tial domain controller corruption.

 

For more information about preparing your forest and domain see KB article Q3311

61 at http://support.microsoft.com.

 

[User Action]

If ALL your existing Windows 2000 domain controllers meet this requirement, type

C and then press ENTER to continue. Otherwise, type any other key and press ENT

ER to quit.

C

Opened Connection to JAKARTA

SSPI Bind succeeded

Current Schema Version is 13

Upgrading schema to version 30

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch14.ldf"

Loading entries.................................................................

...............................................

111 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch15.ldf"

Loading entries.................................................................

....

68 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch16.ldf"

Loading entries..................................

33 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch17.ldf"

Loading entries......................

21 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch18.ldf"

Loading entries.................................

32 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch19.ldf"

Loading entries............................

27 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch20.ldf"

Loading entries....................

19 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch21.ldf"

Loading entries..............

13 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch22.ldf"

Loading entries........................................

39 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch23.ldf"

Loading entries...........

10 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch24.ldf"

Loading entries................

15 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch25.ldf"

Loading entries..............................................

45 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch26.ldf"

Loading entries.............................

28 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch27.ldf"

Loading entries.................................................................

....

68 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch28.ldf"

Loading entries......

5 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch29.ldf"

Loading entries.......

6 entries modified successfully.

 

The command has completed successfully

Connecting to "JAKARTA"

Logging in as current user using SSPI

Importing directory from file "C:WINNTsystem32sch30.ldf"

Loading entries................

15 entries modified successfully.

 

The command has completed successfully

................................................................................

................................................................................

................................................................................

................................................................................

................................................................................

................................................................................

................................................................................

................................................................................

................................................................................

................................................................................

............................................................................

...........................................

Adprep successfully updated the forest-wide information.

Windows Key on Thinkpad

uphill — Wed, 02 Nov 2005 21:54:13 +0000

IBM/Lenovo have a utility to remap the windows key, it’s called

TpKmapAp.exe

(Keyboard Customizer Utility) It’s in Program Files\ThinkPad\Utilities on our X41’s.